last executing test programs:

5m30.422343335s ago: executing program 2 (id=62):
dup(0xffffffffffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pread64(r4, &(0x7f00000001c0)=""/33, 0x21, 0x4)
r5 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x78, r6})
r7 = socket(0xa, 0x1, 0x0)
ioctl(r7, 0x8916, &(0x7f0000000000))
ioctl(r7, 0x8936, &(0x7f0000000000))

5m30.392477946s ago: executing program 4 (id=63):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
pipe2$9p(0x0, 0x800)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000100))
io_setup(0x8, &(0x7f00000001c0)=<r5=>0x0)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x734b, r6, &(0x7f0000000040)="c292dfb4929a5e25909ded", 0xb, 0x7, 0x0, 0x2}])
io_destroy(r5)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'dummy0\x00'})
r7 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r7, 0x0)

5m29.206807734s ago: executing program 2 (id=65):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)

5m27.746327757s ago: executing program 2 (id=67):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$nl_route(r0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63d", 0xca}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a506bdd81fbb", 0xf2}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f", 0x12}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
r2 = socket(0x200000000000011, 0x2, 0x0)
bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14)
sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

5m27.506945311s ago: executing program 2 (id=69):
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x3, 0x1510, &(0x7f0000003640)="$eJzs3Am4TlX7MPD7Xmvt45D0dJLhsNa6N08yLCdJMiTJkCRJkmRKSDrJKwmJQ6akQxKS4ZAMh5AMJ0465nkekyTpJEmmTMn6rlN83t7qe//v/+17/a//uX/Xta9n3c/a99prP/czrL0N33UZWrNxrWoNiQj+LfjrQxIAxALAQAC4DgACACgXVy4uqz+nxKR/7yDsr/VI6tWeAbuauP7ZG9c/e+P6Z29c/+yN65+9cf2zN65/9sb1Zyw72zy94PW8Zd+N7/9nZ/z7/79IZumxX60tfWPXfyGF65+9cf3/1wr+Kztx/bM3rn/2xvXP3rj+2UGOP+3h+mdvXH/GsrOrff+Zt6u7Xe33H2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yx7OGsv0IBwOX21Z4XY4wxxhhjjDHG/jo+x9WeAWOMMcYYY4wxxv7/QxAgQUEAMZADYiEn5AIBANdCHrgOInA9xMENkBduhHyQHwpAQYiHQlAYNBiwQBBCESgKUbgJisHNUBxKQEkoBQ5KQwLcAmXgVigLt0E5uB3Kwx1QASpCJagMd0IVuAuqwt1QDe6B6lADakItuBdqw31QB+6HuvAA1IMHoT48BA3gYWgIj0AjeBQaw2PQBB6HptAMmkMLaPnfyn8JesDL0BN6QRL0hj7wCvSFftAfBsBAeBUGwWswGF6HZBgCQ+ENGAZvwnB4C0bASBgFb8NoeAfGwFgYB+MhBSbARHgXJsF7MBmmwFSYBqkwHWbA+zATZsFs+ADmwIcwF+bBfFgAafARLIRFkA4fw2L4BDJgCSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVtsB12wE7YBbvhU9gDn8Fe+Bz2wRf/Yv6Zf8jvioCAAgUqVBiDMRiLsZgLc2FuzI15MA9GMIJxGId5MS/mw3xYAAtgPMZjYSyMBg0SEhbBIhjFKBbDYlgci2NJLIkOHSZgApbBW7EslsVyWA7LY3msgBWxIlbGylgFq2BVrIrVsBpWx+pYE2vivXgv9sY6WAfrYl2sh/Uu357ChtgQG2EjbIyNsQk2wabYFJtjc2yJLbEVtsLW2BrbYltsh+2wPbbHREzEDtgBO2JH7ISdsDN2xi7YBbtiN+yGL+UAfBlfxl5YXfTGPtgH+2Jyjv44AAfgqzgIX8PX8HVMxiE4FN/AN/BNHI6ncQSOxFE4CquId3AMjkUS4zEFU3AiTsRJOAkn4xScgtMwFafjDJyBM3EWzsIPcA5+iB/iPJyHCzAN03AhLsJ0TMfFeAYzcAkuxWW4HFfgclyFq3EVrsV1uBY34AbchJtwC27BbbgNd+AO3IUKAD/Fz/AzTMZ9uA/34348gAfwIB7ETMzEQ3gID+NhPIJH8CgexWN4HE/gcTyFp/A0nsGzeBbP43m8gC/Ef9NoV4k1ySCyKKFEjIgRsSJW5BK5RG6RW+QReURERESciBN5RV6RT+QTBUQBES/iRWFRWBhhBIkwBgBEVERFMVFMFBfFRUlRUjjhRIJIEGVEGVFWlBXlxO2ivLhDVBAVRRtXWVQWVURbV1XcLaqJaqK6qCFqilqilqgtaos6oo6oK+qKeqKeqC8eEg1Eb+yPj4isyjQWQ7CJGIpNRTMhL32DtRLDsbVoI9qKp8RIHIHtRSuXKJ4VHcQY7Cj+Jsbi86KzGI9dxIuiq+gmuouXRA/R2vUUvcRk7C36iGnYV/QT/cUAMRNriA9wTs6a4nWRLIaIoeINsQDfFMPFW2KEGClGibfFaPGOGCPGinFivEgRE8RE8a6YJN4Tk8UUMVVME6liupgh3hczxSwxW3wg5ogPxVwxT8wXC0Sa+EgsFItEuvhYLBafiAyxRCwVy8RysUKsFKvEarFGrBXrxHqxQWwUm8RmsUVsFdvEdrFD7BS7xG7xqdgjPhN7xedin/hC7BdfigPiK3FQfC0yxTfikPhWHBbfiSPie3FU/CCOiePihDgpTokfxWlxRpwV58R58ZO4IH4WF4UXIFEKKaWSgYyROWSszClzyWtkbhlcenWvl3HyBplX3ijzyfyygCwo42UhWVhqaaSVJENZRBaVUXmTLCZvlsVlCVlSlpJOlpYJ8hZZRt4qy8rbZDl5uywv75AVZEVZSVaWd8oq8i4JkV+PUV3WkDVlLXmvrC3vk3Xk/bKufEDWkw/K+vIh2UA+LBvKR2Qj+ahsLB+TTeTjsqlsJpvLFrKlfEK2kk/K1rKNbCufku3k07K9fEYmymdlB+kvvUWel53lC7KLfFF2ld1kd/mzvCi97Cl7SYDeso98RfaV/WR/OUAOlK/KQfI1OVi+LpPlEDlUviGHyTflcPmWHCFHylHybTlaviPHyLFynBwvU+QEOVG+KyfJ9+RkOUVOldNkqpwu+18aabaU/zT/3T/IH/zL0TfJzXKL3Cq3ye1yh9wpd8ndcrfcI/fIvXKv3Cf3yf1yvzwgD8iD8qDMlJnykDwkD8vD8og8Io/Ko/KYPC7PyZPylPxRnpZn5Bl5Tp6X5+WFS68BKFRCSaVUoGJUDhWrcqpc6hqVW12r8qjrVERdr+LUDSqvulHlU/lVAVVQxatCqrDSyiirSIWqiCqqouomvPSGUSVVKeVUaZWgbvlX8lUxdbMqrkr8Jv/y/JL+ZH4tVUvVSrVSrVVr1Va1Ve1UO9VetVeJKlF1UB1UR9VRdVKdVGfVWXVRXVRX1VV1V91VD9VD9VQ9VZJKUn3UK6qv6qf6qwFqoHpVDVKD1GA1WCWrZDVUDVXD1DA1XA1XI9QINUqNUqPVaDVGjVHj1DiVolLURDVRTVKT1GQ1WU1VU1WqSlUz1Aw1U81Us9VsNUfNUXPVXDVfzVdpKk0tVAtVukpXi9VilaGWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qQ21Wm9VWtVVtV9vVTrVT7Va71R61R+1Ve9U+tU/tV/vVAXVAHVQHVabKVIfUIXVYHVZH1BF1VB1Vx9QxdUKdUKfUKXVanVZn1Vl1Xp1XF9QFdVFdzFr2BSIQgQpUEBPEBLFBbJAryBXkDnIHeYI8QSSIBHFBXJA3uDHIF+QPCgQFg/igUFA40IEJbCAuFT0a3BQUC24OigclgpJBqcAFpYOE4JagTHBrUDa4LSgX3B6UD+4IKgQVg0pB5eDOoEpwV1A1uDuoFtwTVA9qBDWDWsG9Qe3gvqBOcH9QN3ggqBc8GNQPHgoaBA8HDYNHgkbBo0Hj4LGgSfB40DRoFjQPWgQt/9LxvT+d/0nXU/fSSbq37qNf0X11P91fD9AD9at6kH5ND9av62Q9RA/Vb+hh+k09XL+lR+iRepR+W4/W7+gxeqwep8frFD1BT9Tv6kn6PT1ZT9FT9TSdqqfrGfp9PVPP0rP1B3qO/lDP1fP0fL1Ap+mP9EK9SKfrj/Vi/YnO0Ev0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/ROvUvv1p/qPfozvVd/rvfpL/R+/aU+oL/SB/XXOlN/ow/pb/Vh/Z0+or/XR/UP+pg+rk/ok/qU/lGf1mf0WX1On9c/6Qv6Z31R+6zFfdbPu1FGmRgTY2JNrMllcpncJrfJY/KYiImYOBNn8pq8Jp/JZwqYAibexJvCprDJQoZMEVPERE3UFDPFTHFT3JQ0JY0zziSYBFPGlDFlTVlTzpQz5U15U8FUMJVMJXOnudPcZe4yd5u7zT3mHlPD1DC1TC1T29Q2dUwdU9fUNfVMPVPf1DcNTAPT0DQ0jUwj09g0Nk1ME9PUNDXNTXPT0rQ0rUwr09q0Nm1NW9POtDPtTXuTaBJNB9PBdDQdTSfTyXQ2nU0X08V0NV1Nd9Pd9DA9TE/T0ySZJNPH9DF9TV/T3/Q3A81AM8gMMoPNYJNsks1QM9QMM8PMcDPcjDAjzaishap5x4wxY804M96kmBQz0Uw0k8wkM9lMNlPNVJNqUs0MM8PMNDPNbDPbzDFzzFwz18w3802aSTMLzUKTbtLNYrPYZJgMs9QsNcvNcrPSrDSrzWqz1qw162G92Wg2ms1ms9lqtprtZrvZaXaa3Wa32WP2mL1mr9ln9pn9Zr85YA6Yg+agyTSZ5pA5ZA6bw+aIOWKOmqPmmDlmTpgT5pQ5ZU6b0+asOWvOm/yXfi+9ibU5bS57jc1tr7V57HX2H+MCtqCNt4VsYattPpv/N7Gx1ha3JWxJW8o6W9om2Ft+F1ewFW0lW9neaavYu2zV38W17X22jr3f1rUP2Fr23t/E9eyDtr59zDZABLDNbCPbwja2j9km9nHb1DazzW0L284+bdvbZ2yifdZ2sM/9Ll5oF9nVdo1da9fZPfYze9aes4ftd/a8/cn2tL3sQPuqHWRfs4Pt6zbZDvldPMq+bUfbd+wYO9aOs+N/F0+102yqnW5n2PftTDvrd3Ga/cjOsel2rp1n59sFv8RZc0q3H9vF9hObYZfYpXaZXW5X2JV21f+d6zK7wW60m+xu+6ndarfZ7XaH3Wl3/RJnncde+7ndZ7+wh+y39oD9yh60R2ym/eaXOOv8jtjv7VH7gz1mj9sT9qQ9ZX+0p+2ZX84/69xP2p/tRestEBKQJEUBxVAOiqWclIuuodx0LeWh6yhC11Mc3UB56UbKR/mpABWkeCpEhUmTIUtEIRWhohSlm+jyOr0klSJHpSmBbqEydCuVpduoHN1O5ekOqkAVqRJVpjupCt1FVeluqkb3UHWqQTWpFt1Ltek+qkP3U116gOrRg1SfHqIG9DA1pEeoET1KjekxakKPU1NqRs2pBbWkJ6gVPUmtqQ21paeoHT1N7ekZSqRnqQM9Rx3pb9SJnqfO9AJ1oRepK3Wj7vQS9aCXqSf1oiTqTX3oFepL/ag/DaCB9CoNotdoML1OyTSEhtIbNIzepOH0Fo2gkTSK3qbR9A6NobE0jsZTCk2gifQuTaL3aDJNoak0jVJpOs2g92kmzaLZ9AHNoQ9pLs2j+bSA0ugjWkiLKJ0+psX0CWXQElpKy2g5raCVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoJ20i3bTp7SHPqO99Dntoy9oP31JB+grOkhfUyZ9Q4foWzpM39ER+t73oh/oGB2nE3SSTtGPdJrO0Fk6R+fpJ7pAP9NF8gQhhiKUoQqDMCbMEcaGOcNc4TVh7vDaME94XRgJrw/jwhvCvOGNYb4wf1ggLBjGh4XCwqEOTWhDCsOwSFg0jIY3hcXCm8PiYYmwZFgqdGHpMCG8JSwT3hqWDW8Ly4W3h+XDO8IKYcXwsQcqh3eGVcK7wqrh3WG18J6welgjrBnWCu8Na4f3hXXC+8O64QNh2fDBsH74UNggfDhsGD4SNgofDRuHj4VNwsfDpmGzsHnYImwZPhG2Cp8MW4dtwrbhU2G78OmwffhMmBg+G3YIn/ul/8FFf96fFPYO+4SvhK+E3t8v50cXRNOiH0UXRhdF06MfRxdHP4lmRJdEl0aXRZdHV0RXRldFV0fXRNdG10XXRzdEN0Y3Rb2vlQMcOuGkUy5wMS6Hi3U5XS53jcvtrnV53HUu4q53ce4Gl9fd6PK5/K6AK+jiXSFX2GlnnHXkQlfEFXVRd5Mr5m52xV0JV9KVcs6VdgmuhWvpWrpW7knX2rVxbd1T7in3tHvaPeOecc+6Du4519H9zXVyz7vO7gX3gnvRdXXdXHf3kuvhJuT59TOZ5Pq4Pq6v6+v6u/5uoBvoBrlBbrAb7JJdshvqhrphbpgb7oa7EW6EG+VGudFutBvjxrhxbpxLcSluopvoJrlJbrKb7Ka6qS7VpboZboab6Wa6KrN+PcpcN9fNd/NdmktzC13WmjHdLXaLXYbLcEvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O91Ot9vtdnv8db8O6va5/W6/O+AOuIPua5fpvnGH3LfusPvOHXHfu6PuB3fMHXcn3El3yv3oTrsz7qw75867n9wF97O76LxLiUyITIy8G5kUeS8yOTIlMjUyLZIamR6ZEXk/MjMyKzI78kFkTuTDyNzIvMj8yIJIWuSjyMLIokh65OPI4sgnkYzIksjSyLLI8siKiPeFtoa+iC/qo/4mX8zf7Iv7Er6kL+WdL+0T/C2+jL/Vl/W3+XL+dl/e3+Er+Iq+kn/cN/XNfHPfwrf0T/hW/knf2rfxbf1Tvp1/2rf3z/hE/6zv4J/zHf3ffCf/vO/sX/Bd/Iu+q+/mu/uXfA//su/pe/kk39v38a/4vr6f7+8H+IH+VT/Iv+YH+9d9sh/ih/o3/DD/ph/u3/Ij/Eg/KuZtP/ryJTKM9yl+gp/o3/WT/Ht+sp/ip/ppPtVP9zP8+36mn+Vn+w/8HP+hn+vn+fl+gU/zH/mFfpFP9x/7xf4Tn+GXXL6p7Ff6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+l1+t//U7/Gf+b3+c7/Pf+H3+y/9Af+VP+i/9pn+G3/If+sP++/8Ef+9P+p/8Mf8cX/Cn/Sn/I/+tD/jz/pz/rz/yV/wP/uL/G/WGGOMMcb+SyZcaYo/6u/9B8+Jv9u5DwBcu61g5t/3Z60o1+f7td1PxLeLAMCzvbo8cnmrXj0pKenSvhkSgqLzAC7/SVCWGLgSL4G28DQkQhso84fz7ye6nad/Mn70doBcf5cTC1fiK+N/+SfjP/HUqIXlw7Nx/4/x5wEUL3olJydciZdAW5X12AbK/sn4+Vv9k/nn/CoFoPXf5eSGK/GV+SfAk/AcJP5mT8YYY4wxxhhj7Ff9RKVOl68/L/+Nzz+6Po9XV3JywJX4n12fM8YYY4wxxhhj7Op7vlv3Z55ITGzT6V9vVP1vZXHjf2rDe4DLzygA+DcHBPiPn8WW/8ixki99dP6xa/k5H8D/jFL+FY2r/MXEGGOMMcYY+8tdWfT/9nl1tSbEGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xlQ/+J/07sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//geYOMQ==")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})

5m26.376827009s ago: executing program 2 (id=70):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = socket$inet6(0xa, 0x80002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setrlimit(0x2, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f00007d8000/0x1000)=nil)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)

5m26.037713543s ago: executing program 4 (id=72):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = socket$inet6(0xa, 0x80002, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
setrlimit(0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)

5m23.369464835s ago: executing program 2 (id=79):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "bc4c4244873398a4dbaf40fcee141d15bb69638f747e05bea3129ab81b02447352b404f793053d889e68b293719907746b342a8c2048fa4cda276a840c397fcd"}, 0x48, 0xfffffffffffffffe)
keyctl$setperm(0x5, 0x0, 0x30925)
keyctl$search(0xa, r1, &(0x7f0000000000)='id_resolver\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$eJzs3c9rHFUcAPDvzCYxaaNpRcQWxYCHFqRpUotVL7b1YA8FC/Yg4qGhSWro9gdNCrYWTMGDgoKIV5Fe/Ae8S+/eRFBvnoUqUlFQ6crszrabZDfdttmdNPP5wGTnvZnd9747eZn3dvJ2Aiit8exHGrEj4taJJGKsZdtoNDaO5/vd/OPKyWxJolZ78/ckkjyvuX+SP27NE8MR8f3hiMcrq8tduHT59HS11vBBxN7FM+f3Lly6vGf+zPSp2VOzZ6f2vbT/wOTLU/un1iXOrfnjkaNvPP3ph+++OPdDdU8SB+P44PszsSKO9TIe43ErD7E1fyAiDmQrbd6Xh80mCKHUKvnv42BEPBljUamnGsZi/pNCKwf0VK0SUQNKKtH+oaSa/YDm2L67cfDxHvdK+ufGocYAaHX8A43PRmK4PjbacjNpGRk1PtvYtg7lZ2X8d2Xnl9kSyz6H+Pv20RlYh3I6WboaEU+1iz+p121bPdIs/nTZWD+JiMmIGMrr99oD1CFpWe/F5zBruZf4W49DGhEH88cs//B9lj++It3v+AEop+uH8hP5Upa6c/7L+h7N/k+06f+Mtjl33Y+iz3+d+3/N8/1wvd+TruiHZX2WY+1fcnBlxi8fH/m8U/mt/b9sycpv9gX74cbViJ0r4v8oCzbv/2TxJ22Of7bLiYPdlfH6j78d6bSt6Phr1yJ2tR3/3OmVZmtrXJ/cOzdfnZ1s/GxbxrffvfN1p/KLjj87/ls6xN9y/NOVz8vek/NdlvHNsWtnOm0bvWv86a9DSWO8OZTnvDe9uHhhKmIoOZrv0pK/b+26NPdpvkYW/+7n2rf/Zb//V5e/zkjzT2YXzr91+manbfdz/FsuJt+qdVmHTrL4Z+5+/Fe1/yzvsy7L+Ovti8902rZW/CMPEhgAAAAAAACUUFq/BpukE7fX03RiojFf9onYklbPLSw+P3fu4tmZiN31/4ccTJtXusca6SRLT+X/D9tM71uRfiEitkfEF5WRenri5LnqTNHBAwAAAAAAAAAAAAAAAAAAwAaxNZ//37xP9Z+Vxvx/oCR6eYM5YGPT/qG86u1/1S2egDJw/ofy0v6hvLR/KC/tH8pL+4fy0v6hvLR/KC/tHwAAAAA2pe3PXv85iYilV0bqS2Yo32ZGEGxug0VXAChMpegKAIW5felfZx9Kp6v+/z/5lwP2vjpAAZJ2mfXOQW3txn+97TMBAAAAAAAAAAAAgB7YtaPz/H9zg2FzM+0PyusB5v/76gB4yPnqfygvY3zgbrP4hzttMP8fAAAAAAAAAAAAAPpmtL4k6UQ+F3g00nRiIuLRiNgWg8ncfHV2MiIei4ifKoOPZOmpoisNAAAAAAAAAAAAAAAAAAAAm8zCpcunp6vV2QutK/+uytncK827oPahrFfjHp8VSf/flpGIKPyg9GxloCUniVjKjvyGqNiFhdgY1aivFPyHCQAAAAAAAAAAAAAAAAAASqhl7nF7O7/qc40AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoP/u3P+/dytFxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPJz+DwAA///LLUAr")
syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
unshare(0x62040200)

5m23.293630296s ago: executing program 32 (id=79):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "bc4c4244873398a4dbaf40fcee141d15bb69638f747e05bea3129ab81b02447352b404f793053d889e68b293719907746b342a8c2048fa4cda276a840c397fcd"}, 0x48, 0xfffffffffffffffe)
keyctl$setperm(0x5, 0x0, 0x30925)
keyctl$search(0xa, r1, &(0x7f0000000000)='id_resolver\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$eJzs3c9rHFUcAPDvzCYxaaNpRcQWxYCHFqRpUotVL7b1YA8FC/Yg4qGhSWro9gdNCrYWTMGDgoKIV5Fe/Ae8S+/eRFBvnoUqUlFQ6crszrabZDfdttmdNPP5wGTnvZnd9747eZn3dvJ2Aiit8exHGrEj4taJJGKsZdtoNDaO5/vd/OPKyWxJolZ78/ckkjyvuX+SP27NE8MR8f3hiMcrq8tduHT59HS11vBBxN7FM+f3Lly6vGf+zPSp2VOzZ6f2vbT/wOTLU/un1iXOrfnjkaNvPP3ph+++OPdDdU8SB+P44PszsSKO9TIe43ErD7E1fyAiDmQrbd6Xh80mCKHUKvnv42BEPBljUamnGsZi/pNCKwf0VK0SUQNKKtH+oaSa/YDm2L67cfDxHvdK+ufGocYAaHX8A43PRmK4PjbacjNpGRk1PtvYtg7lZ2X8d2Xnl9kSyz6H+Pv20RlYh3I6WboaEU+1iz+p121bPdIs/nTZWD+JiMmIGMrr99oD1CFpWe/F5zBruZf4W49DGhEH88cs//B9lj++It3v+AEop+uH8hP5Upa6c/7L+h7N/k+06f+Mtjl33Y+iz3+d+3/N8/1wvd+TruiHZX2WY+1fcnBlxi8fH/m8U/mt/b9sycpv9gX74cbViJ0r4v8oCzbv/2TxJ22Of7bLiYPdlfH6j78d6bSt6Phr1yJ2tR3/3OmVZmtrXJ/cOzdfnZ1s/GxbxrffvfN1p/KLjj87/ls6xN9y/NOVz8vek/NdlvHNsWtnOm0bvWv86a9DSWO8OZTnvDe9uHhhKmIoOZrv0pK/b+26NPdpvkYW/+7n2rf/Zb//V5e/zkjzT2YXzr91+manbfdz/FsuJt+qdVmHTrL4Z+5+/Fe1/yzvsy7L+Ovti8902rZW/CMPEhgAAAAAAACUUFq/BpukE7fX03RiojFf9onYklbPLSw+P3fu4tmZiN31/4ccTJtXusca6SRLT+X/D9tM71uRfiEitkfEF5WRenri5LnqTNHBAwAAAAAAAAAAAAAAAAAAwAaxNZ//37xP9Z+Vxvx/oCR6eYM5YGPT/qG86u1/1S2egDJw/ofy0v6hvLR/KC/tH8pL+4fy0v6hvLR/KC/tHwAAAAA2pe3PXv85iYilV0bqS2Yo32ZGEGxug0VXAChMpegKAIW5felfZx9Kp6v+/z/5lwP2vjpAAZJ2mfXOQW3txn+97TMBAAAAAAAAAAAAgB7YtaPz/H9zg2FzM+0PyusB5v/76gB4yPnqfygvY3zgbrP4hzttMP8fAAAAAAAAAAAAAPpmtL4k6UQ+F3g00nRiIuLRiNgWg8ncfHV2MiIei4ifKoOPZOmpoisNAAAAAAAAAAAAAAAAAAAAm8zCpcunp6vV2QutK/+uytncK827oPahrFfjHp8VSf/flpGIKPyg9GxloCUniVjKjvyGqNiFhdgY1aivFPyHCQAAAAAAAAAAAAAAAAAASqhl7nF7O7/qc40AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoP/u3P+/dytFxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPJz+DwAA///LLUAr")
syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
unshare(0x62040200)

5m21.268239708s ago: executing program 4 (id=85):
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x1200, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4)
sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x40, 0x0, 0x0)
recvmmsg(r0, &(0x7f000000d980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/144, 0x90}, 0xc}], 0x1, 0x2131, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8)

5m18.349803983s ago: executing program 4 (id=88):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000440)={0xb, 0x20000006, 0x4000008, 0xfffffffd, 0x10, "04000000019e58f557d636028fa10a1490ea71"})
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r5, &(0x7f0000002f80)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)

5m16.63215554s ago: executing program 4 (id=93):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.io_service_time_recursive\x00', 0x26e1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000000000000000000000001ff0200000000000000000000000000013b000007000300004e214e2300089078"], 0x0)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$erofs(&(0x7f0000001240), &(0x7f0000000200)='./file0\x00', 0x2800080, &(0x7f0000001280)=ANY=[], 0xff, 0x20d, &(0x7f0000001000)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0xc806, &(0x7f0000000300)={0x2, 0x4e21, @multicast2}, 0x10)
sendto$inet(r5, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)

5m10.057496473s ago: executing program 4 (id=101):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getsockopt(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000340)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nouid32}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x47f, &(0x7f0000002080)="$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")
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
preadv(r6, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

4m53.349522064s ago: executing program 33 (id=101):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getsockopt(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000340)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nouid32}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x47f, &(0x7f0000002080)="$eJzs281vVFUbAPDn3k4pXy/ti/gBolbR2PjR0oLKwo1GExeamOgCl7UtBCnU0JoIITIag0tD4p4YV/4LrlwZ48rErW6NISFKTEA2jrkz99KZYabQ6ZQpzO+XDHPO3HPvuQ/nnLln7ukNoG+NZv8kEdsj4teIGK5lGwuM1t6uXTk788+VszNJVCrv/JlUy129cnamKFrsty3PjKUR6edJXkmjxdNnjk/Pz8+dyvMTSyc+nFg8feb5Yyemj84dnTs5dejQwQOTL7049UJX4szO6eqeTxb27n7jvQtvzRy+8P7mhu31cXTLaBb4X5Wq5m1PdbuyHvu3shxnUur12XC7BiIia67B6vgfjoFYbrzheP2znp4csK6y7+zfmz8cvJEqV4B7WBId7Rad7QZsHMWFPvv9W7zu4PSj5y6/UvsBlMV9LX/VtpQizf+DBtex/tGIOFy+fjF7RdN9iEqL+wYAAGv1fTb/ee7m+V8SEQ/UlUvytaGRiPh/ROyMiPsiYldE3J+XfTAiHlpl/c1LQzfPP9NLHYZ2W7L538v52lbj/C8tiowM5Ln/VeMfTI4cm5/bHxE7ImIsBoey/GSrgxeHeO2XL9vVXz//O1zOJn1JFHPB/CCXSkN1O5z7pvbepUnp5U8j9pRaxZ9UVwKSqFSytt8dEXtWd+gdReLYM9/ubVeoMf7rF7P6G+NfQRfWmSpfRzxda/9yNMVfSFZen5zYHPNz+yeKXnGzn34+/3a7+tcUfxdk7b+1sf83lRj+O6lfr11cfR3nf/ui7W/K0i3jr+//tTXb2eml6U3Ju9U16035lo+nl5ZOTUZsSt6s5hs+n1o+WpEvymfxj+1rPf535vtk8T8cEVknfiQiHo2Ix/K2ezwinoiIfSvE/+OrT34w1HH86yuLf7bl99+N/j/S2P6rTwwc/+G7dvXfuv9n7X+wmhrLP8nav5ba3Dau9qdT7NNpbwYAAIC7TxoR2yNJx2+k03R8vPb38rtiazq/sLj07JGFj07O1p4RGInBtLjTNVx3P3QyKedHrOWn8nvFxfYD+X3jrwa2VPPjMwvzsz2OHfrdtjbjP/PHQK/PDlh3nteC/tU8/tMenQdw57n+Q//qdPybJ8Ddz/Uf+ler8X+uKW8tAO5Nrv/Qv4x/6F/GP/Qv4x/60lqe6+9OYkt+JsuflFZ4el9ioyQiXbcqyqvca2gDdOMNlSh1YXT38EsJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgi/4LAAD//wC47TI=")
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
preadv(r6, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

1m59.553473555s ago: executing program 0 (id=601):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x11}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$kcm(0x29, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x17}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

1m57.744178693s ago: executing program 0 (id=603):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r0=>0x0})
sendto$packet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x11, 0x8100, r0}, 0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4844}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0)
r3 = getpgid(0x0)
prlimit64(r3, 0xe, &(0x7f00000002c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x270, 0xd0, 0x340, 0x0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r2, 0x29, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x40)

1m56.301514076s ago: executing program 0 (id=606):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getsockopt(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000340)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nouid32}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x47f, &(0x7f0000002080)="$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")
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0)

1m48.229683111s ago: executing program 0 (id=616):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x8, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r4}, 0x10)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8)
close(r6)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r7)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r2, &(0x7f00000005c0)='V', 0x0}, 0x20)

1m47.381481965s ago: executing program 0 (id=619):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc43", 0xf)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x0)
read$alg(r4, &(0x7f0000000000)=""/35, 0x23)

1m46.331041252s ago: executing program 0 (id=622):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)

1m29.558205023s ago: executing program 34 (id=622):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)

39.228777248s ago: executing program 1 (id=820):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x20000, 0xfffffffd, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x8000, 0x0, 0x0, 0xd, 0xffffad55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5, 0xfffffefe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x10001, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x7, 0xd4, 0xc, 0x5, 0x0, 0x0, 0x0, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x5, 0x0, 0x0, 0xb4d}}}]}}]}, 0x468}}, 0x0)

38.981608062s ago: executing program 1 (id=824):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x5, 0x4}]})

38.665538127s ago: executing program 1 (id=830):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e23, 0x2}}, 0x80, 0x0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000440), 0x0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x101, <r1=>0x0}, 0x8)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

38.151373625s ago: executing program 1 (id=831):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000180))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40203, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00\x00\v\x00'})

37.538646774s ago: executing program 1 (id=835):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r0}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0x599, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r1, 0x0, 0x1ba8847c99}, 0x38)

36.56367238s ago: executing program 1 (id=837):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getsockopt(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000340)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nouid32}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x47f, &(0x7f0000002080)="$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")
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0)

21.071288681s ago: executing program 35 (id=837):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getsockopt(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000340)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nouid32}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x47f, &(0x7f0000002080)="$eJzs281vVFUbAPDn3k4pXy/ti/gBolbR2PjR0oLKwo1GExeamOgCl7UtBCnU0JoIITIag0tD4p4YV/4LrlwZ48rErW6NISFKTEA2jrkz99KZYabQ6ZQpzO+XDHPO3HPvuQ/nnLln7ukNoG+NZv8kEdsj4teIGK5lGwuM1t6uXTk788+VszNJVCrv/JlUy129cnamKFrsty3PjKUR6edJXkmjxdNnjk/Pz8+dyvMTSyc+nFg8feb5Yyemj84dnTs5dejQwQOTL7049UJX4szO6eqeTxb27n7jvQtvzRy+8P7mhu31cXTLaBb4X5Wq5m1PdbuyHvu3shxnUur12XC7BiIia67B6vgfjoFYbrzheP2znp4csK6y7+zfmz8cvJEqV4B7WBId7Rad7QZsHMWFPvv9W7zu4PSj5y6/UvsBlMV9LX/VtpQizf+DBtex/tGIOFy+fjF7RdN9iEqL+wYAAGv1fTb/ee7m+V8SEQ/UlUvytaGRiPh/ROyMiPsiYldE3J+XfTAiHlpl/c1LQzfPP9NLHYZ2W7L538v52lbj/C8tiowM5Ln/VeMfTI4cm5/bHxE7ImIsBoey/GSrgxeHeO2XL9vVXz//O1zOJn1JFHPB/CCXSkN1O5z7pvbepUnp5U8j9pRaxZ9UVwKSqFSytt8dEXtWd+gdReLYM9/ubVeoMf7rF7P6G+NfQRfWmSpfRzxda/9yNMVfSFZen5zYHPNz+yeKXnGzn34+/3a7+tcUfxdk7b+1sf83lRj+O6lfr11cfR3nf/ui7W/K0i3jr+//tTXb2eml6U3Ju9U16035lo+nl5ZOTUZsSt6s5hs+n1o+WpEvymfxj+1rPf535vtk8T8cEVknfiQiHo2Ix/K2ezwinoiIfSvE/+OrT34w1HH86yuLf7bl99+N/j/S2P6rTwwc/+G7dvXfuv9n7X+wmhrLP8nav5ba3Dau9qdT7NNpbwYAAIC7TxoR2yNJx2+k03R8vPb38rtiazq/sLj07JGFj07O1p4RGInBtLjTNVx3P3QyKedHrOWn8nvFxfYD+X3jrwa2VPPjMwvzsz2OHfrdtjbjP/PHQK/PDlh3nteC/tU8/tMenQdw57n+Q//qdPybJ8Ddz/Uf+ler8X+uKW8tAO5Nrv/Qv4x/6F/GP/Qv4x/60lqe6+9OYkt+JsuflFZ4el9ioyQiXbcqyqvca2gDdOMNlSh1YXT38EsJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgi/4LAAD//wC47TI=")
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0)

9.502737842s ago: executing program 7 (id=930):
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0xfffffffd}}}}}}, 0x0)

9.285601985s ago: executing program 7 (id=932):
r0 = socket$inet6(0xa, 0x80002, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setrlimit(0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c)

5.465598805s ago: executing program 7 (id=940):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendto(r0, 0x0, 0x0, 0x8, &(0x7f0000000180)=@xdp={0x2c, 0x1, 0x0, 0x22}, 0x80)

5.007203292s ago: executing program 3 (id=944):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001300)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x82}, 0x2004400d)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"})
r1 = syz_open_pts(r0, 0x900)
r2 = dup3(r1, r0, 0x80000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
read(r2, 0x0, 0x0)
read$watch_queue(r2, &(0x7f0000001d40)=""/4095, 0xfdef)

4.772637725s ago: executing program 6 (id=946):
r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

4.771919385s ago: executing program 5 (id=947):
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x2, 0x4e, @local, @loopback, 0x10, 0x40, 0x0, 0x4}})
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0})

4.741900546s ago: executing program 7 (id=948):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r1, 0xffffffef}}, 0x10)

4.565442339s ago: executing program 7 (id=949):
r0 = socket$inet6(0xa, 0x80002, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setrlimit(0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c)

4.398033892s ago: executing program 5 (id=950):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3)
write$uinput_user_dev(r3, 0x0, 0x0)
ioctl$UI_DEV_CREATE(r3, 0x5501)
write$uinput_user_dev(r3, &(0x7f0000000a40)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x3, 0x6, 0x0, 0x0, 0x40000, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0xfd5], [0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24]}, 0x45c)
shmctl$SHM_UNLOCK(0x0, 0xc)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000440)={0x0, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}}}, 0x88)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000001000000002"], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622e563a3", 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)

3.346441208s ago: executing program 5 (id=951):
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000080)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@check_relaxed}, {@cruft}, {@overriderock}, {@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@dmode={'dmode', 0x3d, 0x9}}, {@hide}, {@cruft}, {@unhide}, {@map_off}, {@uid}, {@map_normal}]}, 0x4, 0xa02, &(0x7f0000001880)="$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")

3.25086061s ago: executing program 8 (id=888):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$nl_route(r0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a506bdd81fbb", 0xf2}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394", 0x14}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
r2 = socket(0x200000000000011, 0x2, 0x0)
bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14)
sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

3.18155295s ago: executing program 6 (id=952):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, &(0x7f0000000180), 0x0, 0xc804, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

2.983412044s ago: executing program 8 (id=953):
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x0)
setresuid(r0, r0, r0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0)

2.955987974s ago: executing program 5 (id=954):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9)
syz_clone(0x4001000, 0x0, 0x408, &(0x7f0000000140), 0x0, 0x0)

2.793421896s ago: executing program 8 (id=955):
r0 = userfaultfd(0x801)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@jqfmt_vfsold}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r4)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x708})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00003ac000/0x2000)=nil, 0x2000}, 0x2})
prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x100088}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002000800000000000000000000003000000000200000002"], &(0x7f0000000340)=""/142, 0x4e, 0x8e, 0x1, 0x0, 0x0, @void, @value}, 0x28)

2.793164967s ago: executing program 5 (id=956):
syz_clone(0x811000, 0x0, 0x0, 0x0, 0x0, 0x0)

2.315761884s ago: executing program 6 (id=957):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendto(r0, 0x0, 0x0, 0x8, &(0x7f0000000180)=@xdp={0x2c, 0x1, 0x0, 0x22}, 0x80)

1.556506906s ago: executing program 3 (id=958):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0x599, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000900), 0x404, r0, 0x0, 0x1ba8847c99}, 0x38)

1.529183176s ago: executing program 3 (id=959):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000000f14010027bd7000fcdbdf25090045000e00736d00000000080001000000000047742204c973c4a9f7cec8457505c4076782a595620c59a7c995e9426cb21ceae091d37ea38daff127020873"], 0x24}, 0x1, 0x0, 0x0, 0x24000095}, 0x4000)

1.396827508s ago: executing program 8 (id=960):
openat2(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2044d0, &(0x7f00000005c0)={[{@discard}]}, 0xff, 0x4be, &(0x7f0000000840)="$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")

1.253418281s ago: executing program 3 (id=961):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e23, 0x2}}, 0x80, 0x0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000440), 0x0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x101, <r1=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

994.499385ms ago: executing program 6 (id=962):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000dc0)={0xa, 0x4e21, 0x0, @loopback, 0x200}, 0x1c)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

952.914185ms ago: executing program 5 (id=963):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x106, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10)

888.331056ms ago: executing program 3 (id=964):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$nl_route(r0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a506bdd81fbb", 0xf2}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394", 0x14}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
r2 = socket(0x200000000000011, 0x2, 0x0)
bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14)
sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

684.599749ms ago: executing program 6 (id=965):
r0 = syz_io_uring_setup(0x10d, &(0x7f00000004c0)={0x0, 0x8b7c, 0x800, 0x7, 0x22}, &(0x7f0000000940)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0)

683.707459ms ago: executing program 3 (id=966):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x3c}}, 0x0)

521.597732ms ago: executing program 6 (id=967):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x1)

503.048792ms ago: executing program 8 (id=968):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6e6f757365725f78617474722c636f686572656e63793d66756c6c2c646174613d77726974656261636b2c6c6f63616c616c6c6f633d30303030303030303030303030303030303030312c61636c2c6e6f61636c2c6c6f63616c616c6c6f633d30303030303030303030303030303030303030302c00a89f6b8d5800aa954e6c8735dcd52921ce08462fb4ce7c1600883251443ac332f4d17b77d29867e4321610936dbc5963e9fb59a032c92e32ebffc3b739951e866d52bff6bd63136a656222062a8eea0cf97480bc8ac6c0e8a2aa38ffa8fa758cd54b9ef39a7f536d7b85173a83c34d78e210ecf4d040817bbe989e9eb015acb84bb90577b8b405a48292eeca69f5275cb7b7027d4bf643bd69b034c0221a30"], 0x1, 0x442d, &(0x7f0000004480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x141842, 0x1c2)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000200), 0xfea7)
copy_file_range(r3, &(0x7f00000001c0)=0x2000, r2, 0x0, 0xffffffffa003e45c, 0x700000000000000)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
getdents64(r2, 0x0, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x800)
copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e45c, 0x700000000000000)

0s ago: executing program 7 (id=969):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0x599, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000900), 0x404, r0, 0x0, 0x1ba8847c99}, 0x38)

kernel console output (not intermixed with test programs):

et [1, 0] type 2 family 0 port 6081 - 0
[   97.693441][ T4131] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.765311][ T4531] loop0: detected capacity change from 0 to 32768
[   98.539586][ T4531] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.78 (4531)
[   98.546061][ T4131] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.792925][ T4562] loop1: detected capacity change from 0 to 512
[   99.598302][ T4398] Bluetooth: hci4: command 0x0409 tx timeout
[   99.642446][ T4562] EXT4-fs (loop1): Test dummy encryption mode enabled
[  100.002663][ T4531] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm
[  100.018892][ T4531] BTRFS info (device loop0): setting nodatasum
[  100.045628][ T4562] EXT4-fs error (device loop1): __ext4_iget:4893: inode #11: block 1: comm syz.1.87: invalid block
[  100.053213][ T4562] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.87: couldn't read orphan inode 11 (err -117)
[  100.059222][ T4562] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none.
[  101.448252][ T4531] BTRFS info (device loop0): metadata ratio 776
[  101.450077][ T4531] BTRFS info (device loop0): setting nodatacow, compression disabled
[  101.455659][ T4531] BTRFS info (device loop0): turning on flush-on-commit
[  101.457760][ T4531] BTRFS info (device loop0): setting datacow
[  101.460587][ T4531] BTRFS info (device loop0): force clearing of disk cache
[  101.462737][ T4531] BTRFS info (device loop0): using free space tree
[  101.464605][ T4531] BTRFS info (device loop0): has skinny extents
[  101.611968][ T4131] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.640112][ T4588] Bluetooth: hci4: command 0x041b tx timeout
[  101.935140][ T4541] chnl_net:caif_netlink_parms(): no params data found
[  102.147721][ T4541] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.159806][ T4541] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.173446][ T4541] device bridge_slave_0 entered promiscuous mode
[  102.177784][ T4541] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.359115][ T4531] BTRFS error (device loop0): open_ctree failed: -12
[  102.380102][ T4541] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.384034][ T4144] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4144)
[  102.398266][ T4541] device bridge_slave_1 entered promiscuous mode
[  104.117281][ T4588] Bluetooth: hci4: command 0x040f tx timeout
[  104.256796][ T4541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.290432][ T4541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.416019][ T4541] team0: Port device team_slave_0 added
[  104.482525][ T4541] team0: Port device team_slave_1 added
[  106.126792][ T4637] loop3: detected capacity change from 0 to 256
[  106.198838][ T4015] Bluetooth: hci4: command 0x0419 tx timeout
[  109.433065][ T4541] batman_adv: batadv0: Adding interface: batadv_slave_0
[  109.435100][ T4541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.456748][ T4541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  109.465525][ T4643] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  109.506095][ T4541] batman_adv: batadv0: Adding interface: batadv_slave_1
[  109.508084][ T4541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.546180][ T4541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  109.772248][ T4541] device hsr_slave_0 entered promiscuous mode
[  110.055402][ T4659] loop4: detected capacity change from 0 to 512
[  110.055942][ T4541] device hsr_slave_1 entered promiscuous mode
[  111.159013][ T4659] EXT4-fs (loop4): Test dummy encryption mode enabled
[  111.193271][ T4659] EXT4-fs error (device loop4): __ext4_iget:4893: inode #11: block 1: comm syz.4.101: invalid block
[  111.197644][ T4659] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.101: couldn't read orphan inode 11 (err -117)
[  111.202001][ T4659] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none.
[  111.294960][ T4667] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[  111.421190][ T4541] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  111.423376][ T4541] Cannot create hsr debugfs directory
[  112.061336][ T4684] loop3: detected capacity change from 0 to 1024
[  113.160212][ T4074] Bluetooth: hci5: command 0x1003 tx timeout
[  113.163736][ T4028] Bluetooth: hci5: sending frame failed (-49)
[  113.742068][ T4684] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.108: Invalid block bitmap block 0 in block_group 0
[  113.756137][ T4684] Quota error (device loop3): write_blk: dquota write failed
[  113.758792][ T4684] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  113.762439][ T4684] EXT4-fs error (device loop3): ext4_acquire_dquot:6204: comm syz.3.108: Failed to acquire dquot type 0
[  113.774572][ T4684] EXT4-fs error (device loop3): ext4_free_blocks:6223: comm syz.3.108: Freeing blocks not in datazone - block = 0, count = 4096
[  113.787255][ T4684] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.108: Invalid inode bitmap blk 0 in block_group 0
[  113.802482][  T136] Quota error (device loop3): remove_tree: Getting block too big (0 >= 9)
[  113.805589][  T136] EXT4-fs error (device loop3): ext4_release_dquot:6240: comm kworker/u4:1: Failed to release dquot type 0
[  113.810451][ T4684] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem
[  113.821419][ T4684] EXT4-fs (loop3): 1 orphan inode deleted
[  113.823109][ T4684] EXT4-fs (loop3): mounted filesystem without journal. Opts: ��; max_batch_time=0x0000000000000006,i_version,,errors=continue. Quota mode: writeback.
[  114.644614][ T4541] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  114.741043][ T4541] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  114.859106][ T4541] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  114.900741][ T4541] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  115.238325][ T4584] Bluetooth: hci5: command 0x1001 tx timeout
[  115.240145][ T4028] Bluetooth: hci5: sending frame failed (-49)
[  115.326999][ T4541] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.404232][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  115.408046][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  115.490164][ T4541] 8021q: adding VLAN 0 to HW filter on device team0
[  115.500314][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  115.509952][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  115.517313][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.519365][ T4192] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.530451][ T4706] loop3: detected capacity change from 0 to 128
[  115.533145][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  115.545704][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  115.566131][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.568195][ T4192] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.627429][ T4706] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  115.722396][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  115.730082][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  115.852459][ T4713] loop0: detected capacity change from 0 to 1024
[  117.435386][ T4077] Bluetooth: hci5: command 0x1009 tx timeout
[  117.446052][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  117.452096][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  117.455888][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  117.471114][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  118.652175][ T4713] EXT4-fs: failed to create workqueue
[  118.653704][ T4713] EXT4-fs (loop0): mount failed
[  119.518655][ T4131] device hsr_slave_0 left promiscuous mode
[  119.578994][ T4131] device hsr_slave_1 left promiscuous mode
[  119.671403][ T4131] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.673670][ T4131] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.676824][ T4131] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.680464][ T4131] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.689146][ T4131] device bridge_slave_1 left promiscuous mode
[  119.692070][ T4131] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.785217][ T4131] device bridge_slave_0 left promiscuous mode
[  119.787020][ T4131] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.048752][ T4131] device veth1_macvtap left promiscuous mode
[  120.050861][ T4131] device veth0_macvtap left promiscuous mode
[  120.052595][ T4131] device veth1_vlan left promiscuous mode
[  120.054258][ T4131] device veth0_vlan left promiscuous mode
[  122.722191][ T4131] team0 (unregistering): Port device team_slave_1 removed
[  122.750843][ T4131] team0 (unregistering): Port device team_slave_0 removed
[  122.761479][ T4131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  123.524341][ T4739] loop0: detected capacity change from 0 to 512
[  124.332890][ T4131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  124.689466][ T4739] EXT4-fs (loop0): Test dummy encryption mode enabled
[  124.910575][ T4739] EXT4-fs error (device loop0): __ext4_iget:4893: inode #11: block 1: comm syz.0.119: invalid block
[  124.916880][ T4739] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.119: couldn't read orphan inode 11 (err -117)
[  124.923615][ T4739] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none.
[  127.320759][ T4752] loop1: detected capacity change from 0 to 512
[  127.416472][ T4752] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  127.781858][ T4752] EXT4-fs (loop1): 1 orphan inode deleted
[  127.783640][ T4752] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  129.430886][ T4585] Bluetooth: hci5: command 0x0409 tx timeout
[  129.596063][ T4131] bond0 (unregistering): Released all slaves
[  130.303080][ T4541] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  130.306158][ T4541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  130.586004][ T4541] 8021q: adding VLAN 0 to HW filter on device batadv0
[  130.998047][ T4541] device veth0_vlan entered promiscuous mode
[  131.036837][ T4541] device veth1_vlan entered promiscuous mode
[  131.076356][ T4541] device veth0_macvtap entered promiscuous mode
[  131.107329][ T4541] device veth1_macvtap entered promiscuous mode
[  131.136172][ T4541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.147044][ T4541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.150443][ T4541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.153418][ T4541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.156261][ T4541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.166917][ T4541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.169917][ T4541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.172869][ T4541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.176881][ T4541] batman_adv: batadv0: Interface activated: batadv_slave_0
[  131.195949][ T4541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.207499][ T4541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.211954][ T4541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.215027][ T4541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.217644][ T4541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.229089][ T4541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.231747][ T4541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.234632][ T4541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.245454][ T4541] batman_adv: batadv0: Interface activated: batadv_slave_1
[  131.252046][ T4541] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.254556][ T4541] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.256919][ T4541] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.265786][ T4541] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.356885][  T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.364386][  T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.403275][  T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.405760][  T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.438810][ T2055] ieee802154 phy0 wpan0: encryption failed: -22
[  131.440600][ T2055] ieee802154 phy1 wpan1: encryption failed: -22
[  131.447238][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  131.451996][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  131.454879][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  131.457678][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  131.460947][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  131.464900][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  131.467662][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  131.469948][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  131.473765][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  131.476658][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  131.479557][ T4076] Bluetooth: hci5: command 0x041b tx timeout
[  131.518844][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  131.532123][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  131.568760][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  131.592908][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  131.602516][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  131.615575][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  131.634915][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  131.658081][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  131.668023][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  131.686692][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  131.700292][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  131.722373][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  131.730401][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  131.774558][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  131.777186][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  131.811762][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  131.814376][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  132.271731][ T4789] loop5: detected capacity change from 0 to 16
[  133.522175][ T4745] chnl_net:caif_netlink_parms(): no params data found
[  133.682082][ T4223] Bluetooth: hci5: command 0x040f tx timeout
[  134.690825][ T4778] loop1: detected capacity change from 0 to 40427
[  134.741942][ T4778] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  134.743859][ T4778] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  134.776287][ T4778] F2FS-fs (loop1): invalid crc value
[  134.802832][ T4827] loop0: detected capacity change from 0 to 256
[  135.066174][ T4778] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-4)
[  136.646859][ T4076] Bluetooth: hci5: command 0x0419 tx timeout
[  136.869478][ T4745] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.871503][ T4745] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.880778][ T4745] device bridge_slave_0 entered promiscuous mode
[  136.895273][ T4745] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.897169][ T4745] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.900209][ T4745] device bridge_slave_1 entered promiscuous mode
[  137.809982][ T4745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  137.879987][ T4745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  137.966704][ T4863] loop0: detected capacity change from 0 to 4096
[  137.990643][ T4745] team0: Port device team_slave_0 added
[  137.994540][ T4745] team0: Port device team_slave_1 added
[  138.078485][ T4863] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  138.119756][ T4745] batman_adv: batadv0: Adding interface: batadv_slave_0
[  138.121829][ T4745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.218187][ T4745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  138.354821][ T4745] batman_adv: batadv0: Adding interface: batadv_slave_1
[  138.356789][ T4745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.399059][ T4745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  139.625295][ T4886] loop5: detected capacity change from 0 to 512
[  139.860862][ T4886] EXT4-fs (loop5): orphan cleanup on readonly fs
[  139.868580][ T4886] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.144: bg 0: block 248: padding at end of block bitmap is not set
[  139.875816][ T4886] EXT4-fs (loop5): Remounting filesystem read-only
[  139.877921][ T4886] Quota error (device loop5): write_blk: dquota write failed
[  139.880072][ T4886] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  139.882892][ T4886] EXT4-fs error (device loop5): ext4_acquire_dquot:6204: comm syz.5.144: Failed to acquire dquot type 1
[  139.887390][ T4886] EXT4-fs (loop5): Remounting filesystem read-only
[  139.892129][ T4886] EXT4-fs (loop5): 1 truncate cleaned up
[  139.895004][ T4886] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,errors=remount-ro,noquota,auto_da_alloc,noload,nodiscard,. Quota mode: writeback.
[  139.992188][ T4883] device geneve2 entered promiscuous mode
[  140.213402][ T4745] device hsr_slave_0 entered promiscuous mode
[  140.579382][ T4745] device hsr_slave_1 entered promiscuous mode
[  141.593318][ T4908] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  141.595440][ T4908] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  141.609013][ T4908] vhci_hcd vhci_hcd.0: Device attached
[  141.640654][ T4912] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(7)
[  141.642591][ T4912] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  141.666639][ T4912] vhci_hcd vhci_hcd.0: Device attached
[  142.088239][ T4908] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(10)
[  142.090296][ T4908] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  142.092327][ T4908] vhci_hcd vhci_hcd.0: Device attached
[  142.133276][ T4745] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  142.215659][ T4912] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  142.221250][ T4745] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  142.249152][ T4908] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(13)
[  142.251018][ T4908] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  142.287612][ T4908] vhci_hcd vhci_hcd.0: Device attached
[  142.329877][ T4917] vhci_hcd: connection closed
[  142.331868][ T4195] vhci_hcd: stop threads
[  142.335278][ T4195] vhci_hcd: release socket
[  142.336577][ T4195] vhci_hcd: disconnect device
[  142.338750][ T4913] vhci_hcd: connection closed
[  142.350707][ T4921] vhci_hcd: connection closed
[  142.357238][ T4745] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  142.370499][ T4909] vhci_hcd: connection closed
[  142.383701][    T9] vhci_hcd: stop threads
[  142.386893][    T9] vhci_hcd: release socket
[  142.414697][    T9] vhci_hcd: disconnect device
[  142.417538][    T9] vhci_hcd: stop threads
[  142.436508][    T9] vhci_hcd: release socket
[  142.440389][ T4745] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  142.514626][    T9] vhci_hcd: disconnect device
[  142.516361][    T9] vhci_hcd: stop threads
[  142.517477][    T9] vhci_hcd: release socket
[  142.519209][ T4074] usb 2-1: new low-speed USB device number 2 using vhci_hcd
[  142.541643][    T9] vhci_hcd: disconnect device
[  143.607862][ T4745] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.642236][ T4897] loop5: detected capacity change from 0 to 40427
[  143.653432][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  143.656015][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  143.667326][ T4745] 8021q: adding VLAN 0 to HW filter on device team0
[  143.693460][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  143.696303][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  143.700175][  T148] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.702088][  T148] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.714215][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  143.760026][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  143.778739][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  143.789152][  T148] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.791146][  T148] bridge0: port 2(bridge_slave_1) entered forwarding state
[  144.210986][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  144.222065][ T4897] F2FS-fs (loop5): Invalid SB checksum offset: 0
[  144.641992][ T4897] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  144.687634][ T4897] F2FS-fs (loop5): invalid crc value
[  144.690297][ T4897] F2FS-fs (loop5): Failed to start F2FS issue_checkpoint_thread (-12)
[  144.711076][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  144.719621][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  144.741147][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  144.784444][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  144.878723][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  144.881856][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  144.884924][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  144.899735][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  144.948388][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  145.670357][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  145.713167][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  146.866099][ T4967] loop1: detected capacity change from 0 to 256
[  146.966383][ T4967] FAT-fs (loop1): Directory bread(block 64) failed
[  147.038309][ T4967] FAT-fs (loop1): Directory bread(block 65) failed
[  147.040320][ T4967] FAT-fs (loop1): Directory bread(block 66) failed
[  147.042219][ T4967] FAT-fs (loop1): Directory bread(block 67) failed
[  147.044065][ T4967] FAT-fs (loop1): Directory bread(block 68) failed
[  147.045890][ T4967] FAT-fs (loop1): Directory bread(block 69) failed
[  147.047859][ T4967] FAT-fs (loop1): Directory bread(block 70) failed
[  147.104605][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  147.106813][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  147.113431][ T4745] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.118425][ T4967] FAT-fs (loop1): Directory bread(block 71) failed
[  147.120352][ T4967] FAT-fs (loop1): Directory bread(block 72) failed
[  147.122155][ T4967] FAT-fs (loop1): Directory bread(block 73) failed
[  147.212549][ T4967] process 'syz.1.158' launched './file0' with NULL argv: empty string added
[  147.216742][ T4967] attempt to access beyond end of device
[  147.216742][ T4967] loop1: rw=524288, want=1164, limit=256
[  147.242612][ T4972] loop5: detected capacity change from 0 to 4096
[  147.263065][ T4967] attempt to access beyond end of device
[  147.263065][ T4967] loop1: rw=0, want=1164, limit=256
[  147.419133][ T4972] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  147.638230][ T4074] vhci_hcd: vhci_device speed not set
[  147.675469][ T4985] syz.5.159 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  147.693338][ T4985] netlink: 392 bytes leftover after parsing attributes in process `syz.5.159'.
[  147.862081][ T4131] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.035697][ T4131] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.110949][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  148.113995][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  148.220453][ T4131] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.231170][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  148.234046][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  148.238897][ T4745] device veth0_vlan entered promiscuous mode
[  148.245874][ T4745] device veth1_vlan entered promiscuous mode
[  148.268577][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  148.271346][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  148.273882][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  148.351457][ T4745] device veth0_macvtap entered promiscuous mode
[  148.397733][ T4131] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.408584][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  148.411337][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  148.418833][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  148.432302][ T4745] device veth1_macvtap entered promiscuous mode
[  148.448372][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  148.457384][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  148.488988][ T4745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.491772][ T4745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.494377][ T4745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.497056][ T4745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.516639][ T4745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.545323][ T4745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.547974][ T4745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.554890][ T4745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.557546][ T4745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.585863][ T4745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.599156][ T4745] batman_adv: batadv0: Interface activated: batadv_slave_0
[  148.601757][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  148.604697][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  148.623450][ T4745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.626203][ T4745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.648928][ T4745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.651756][ T4745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.654333][ T4745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.656962][ T4745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.698221][ T4745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.700984][ T4745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.703557][ T4745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.706267][ T4745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.732743][ T4745] batman_adv: batadv0: Interface activated: batadv_slave_1
[  148.735625][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  148.749263][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  148.766065][ T4745] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  148.775332][ T4745] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  148.777907][ T4745] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  148.808692][ T4745] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.036633][  T333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.039618][  T333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.044232][  T638] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  149.108593][  T519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.111102][  T519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.114840][  T519] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  150.509661][ T5030] device pim6reg1 entered promiscuous mode
[  150.723729][ T5039] loop5: detected capacity change from 0 to 256
[  150.885641][ T5039] FAT-fs (loop5): Directory bread(block 64) failed
[  150.887620][ T5039] FAT-fs (loop5): Directory bread(block 65) failed
[  150.939303][ T5039] FAT-fs (loop5): Directory bread(block 66) failed
[  150.941133][ T5039] FAT-fs (loop5): Directory bread(block 67) failed
[  150.963580][ T5039] FAT-fs (loop5): Directory bread(block 68) failed
[  150.965595][ T5039] FAT-fs (loop5): Directory bread(block 69) failed
[  150.967612][ T5039] FAT-fs (loop5): Directory bread(block 70) failed
[  152.468176][ T5046] input: syz0 as /devices/virtual/input/input5
[  152.571244][ T5039] FAT-fs (loop5): Directory bread(block 71) failed
[  152.573244][ T5039] FAT-fs (loop5): Directory bread(block 72) failed
[  152.575118][ T5039] FAT-fs (loop5): Directory bread(block 73) failed
[  156.284254][ T5070] loop3: detected capacity change from 0 to 256
[  156.362616][ T5070] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  156.368303][ T5070] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  156.423589][ T5070] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  157.331764][ T5078] xt_CT: No such helper "netbios-ns"
[  157.620904][ T5092] udc-core: couldn't find an available UDC or it's busy
[  157.622981][ T5092] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  158.645644][ T3604] Bluetooth: hci3: command 0x1003 tx timeout
[  158.650788][ T4038] Bluetooth: hci3: sending frame failed (-49)
[  160.035404][ T5114] loop0: detected capacity change from 0 to 512
[  160.138565][ T5114] EXT4-fs (loop0): Test dummy encryption mode enabled
[  160.159246][ T5117] udc-core: couldn't find an available UDC or it's busy
[  160.161147][ T5117] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  160.199101][ T5114] EXT4-fs error (device loop0): __ext4_iget:4893: inode #11: block 1: comm syz.0.182: invalid block
[  160.217697][ T5114] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.182: couldn't read orphan inode 11 (err -117)
[  160.228747][ T5114] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none.
[  160.240262][ T5114] No such timeout policy "syz1"
[  160.774767][ T4585] Bluetooth: hci3: command 0x1001 tx timeout
[  160.776575][ T4038] Bluetooth: hci3: sending frame failed (-49)
[  160.958714][ T5131] loop3: detected capacity change from 0 to 1024
[  161.259340][ T5131] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.185: Invalid block bitmap block 0 in block_group 0
[  161.280088][ T5131] Quota error (device loop3): write_blk: dquota write failed
[  161.282338][ T5131] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  161.285838][ T5131] EXT4-fs error (device loop3): ext4_acquire_dquot:6204: comm syz.3.185: Failed to acquire dquot type 0
[  161.321162][ T5131] EXT4-fs error (device loop3): ext4_free_blocks:6223: comm syz.3.185: Freeing blocks not in datazone - block = 0, count = 4096
[  161.356068][ T5131] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.185: Invalid inode bitmap blk 0 in block_group 0
[  161.372856][ T5131] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem
[  161.387087][ T5131] EXT4-fs (loop3): 1 orphan inode deleted
[  161.388886][ T5131] EXT4-fs (loop3): mounted filesystem without journal. Opts: ��; max_batch_time=0x0000000000000006,i_version,,errors=continue. Quota mode: writeback.
[  161.595552][ T4490] Quota error (device loop3): remove_tree: Getting block too big (0 >= 9)
[  161.598945][ T4490] EXT4-fs error (device loop3): ext4_release_dquot:6240: comm kworker/u4:16: Failed to release dquot type 0
[  163.521500][ T5156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'.
[  163.769099][ T5156] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  163.771933][ T5156] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  164.319423][ T4077] Bluetooth: hci3: command 0x1009 tx timeout
[  165.099944][ T4131] device hsr_slave_0 left promiscuous mode
[  166.425351][ T4131] device hsr_slave_1 left promiscuous mode
[  166.439574][ T5204] loop6: detected capacity change from 0 to 512
[  166.510633][ T4131] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  166.518282][ T4131] batman_adv: batadv0: Removing interface: batadv_slave_0
[  166.527891][ T4131] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  166.547901][ T4131] batman_adv: batadv0: Removing interface: batadv_slave_1
[  166.554057][ T5204] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x0000000000000000,errors=continue,noblock_validity,,errors=continue. Quota mode: none.
[  166.581435][ T4131] device bridge_slave_1 left promiscuous mode
[  166.583233][ T4131] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.590161][ T5204] EXT4-fs warning (device loop6): dx_probe:869: inode #2: comm syz.6.202: Unimplemented hash flags: 0x0001
[  166.593518][ T5204] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.202: Corrupt directory, running e2fsck is recommended
[  166.646475][ T5204] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 3: comm syz.6.202: path /6/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0
[  166.691932][ T4131] device bridge_slave_0 left promiscuous mode
[  166.693771][ T4131] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.628072][ T4131] device veth1_macvtap left promiscuous mode
[  167.630031][ T4131] device veth0_macvtap left promiscuous mode
[  167.634077][ T4131] device veth1_vlan left promiscuous mode
[  167.636751][ T4131] device veth0_vlan left promiscuous mode
[  169.018758][ T5225] udc-core: couldn't find an available UDC or it's busy
[  169.020920][ T5225] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  170.389884][ T4015] Bluetooth: hci1: command 0x0406 tx timeout
[  170.392031][ T4015] Bluetooth: hci0: command 0x0406 tx timeout
[  170.393750][ T4015] Bluetooth: hci2: command 0x0406 tx timeout
[  170.944513][ T5229] loop1: detected capacity change from 0 to 256
[  171.735017][ T4131] team0 (unregistering): Port device team_slave_1 removed
[  171.966088][ T5239] loop5: detected capacity change from 0 to 512
[  171.985668][ T4131] team0 (unregistering): Port device team_slave_0 removed
[  172.015944][ T4131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  172.124753][ T5239] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  172.126863][ T5239] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  172.143909][ T4131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  172.169400][ T5239] EXT4-fs (loop5): 1 truncate cleaned up
[  172.171076][ T5239] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,min_batch_time=0x0000000000000001,grpjquota=,nomblk_io_submit,nodiscard,quota,,errors=continue. Quota mode: writeback.
[  174.279339][ T5257] futex_wake_op: syz.1.219 tries to shift op by -1; fix this program
[  174.287200][ T5257] loop1: detected capacity change from 0 to 512
[  175.393014][ T5257] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  175.478742][ T5257] EXT4-fs: failed to create workqueue
[  175.480382][ T5257] EXT4-fs (loop1): mount failed
[  175.560351][ T4131] bond0 (unregistering): Released all slaves
[  176.315838][ T5213] netlink: 128 bytes leftover after parsing attributes in process `syz.3.205'.
[  176.832736][ T5279] udc-core: couldn't find an available UDC or it's busy
[  176.834976][ T5279] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  178.280589][ T5309] loop1: detected capacity change from 0 to 512
[  178.390299][ T5309] EXT4-fs (loop1): Test dummy encryption mode enabled
[  180.133894][ T5309] EXT4-fs error (device loop1): __ext4_iget:4893: inode #11: block 1: comm syz.1.230: invalid block
[  180.140431][ T5309] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.230: couldn't read orphan inode 11 (err -117)
[  180.146025][ T5309] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none.
[  181.961375][ T5322] loop6: detected capacity change from 0 to 512
[  184.912971][ T5322] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  185.130718][ T5325] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  185.133465][ T5325] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  186.922732][ T5362] 9p: Unknown uid 18446744073709551615
[  188.508687][ T5367] netlink: 'syz.1.244': attribute type 1 has an invalid length.
[  188.522342][ T5367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.244'.
[  189.828195][ T5379] loop1: detected capacity change from 0 to 128
[  190.678835][  T153] Bluetooth: hci3: Frame reassembly failed (-84)
[  190.686037][  T153] Bluetooth: hci3: Frame reassembly failed (-84)
[  192.327543][ T5379] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,,errors=continue. Quota mode: none.
[  193.342181][ T2055] ieee802154 phy0 wpan0: encryption failed: -22
[  193.344098][ T2055] ieee802154 phy1 wpan1: encryption failed: -22
[  193.349922][ T4585] Bluetooth: hci3: command 0x1003 tx timeout
[  193.351702][ T4038] Bluetooth: hci3: sending frame failed (-49)
[  195.398683][ T4585] Bluetooth: hci3: command 0x1001 tx timeout
[  195.400536][ T4038] Bluetooth: hci3: sending frame failed (-49)
[  196.205024][ T5412] loop0: detected capacity change from 0 to 128
[  196.274054][ T5412] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  196.573955][ T5429] loop1: detected capacity change from 0 to 256
[  196.658247][ T5429] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  196.661097][ T5429] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  196.721886][ T5429] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  197.160994][ T5437] xt_bpf: check failed: parse error
[  197.696068][ T4585] Bluetooth: hci3: command 0x1009 tx timeout
[  198.063940][ T5443] loop1: detected capacity change from 0 to 1024
[  199.321807][ T5443] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.259: Invalid block bitmap block 0 in block_group 0
[  199.326021][ T5443] Quota error (device loop1): write_blk: dquota write failed
[  199.328004][ T5443] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  199.330867][ T5443] EXT4-fs error (device loop1): ext4_acquire_dquot:6204: comm syz.1.259: Failed to acquire dquot type 0
[  199.334926][ T5443] EXT4-fs error (device loop1): ext4_free_blocks:6223: comm syz.1.259: Freeing blocks not in datazone - block = 0, count = 4096
[  199.339501][ T5443] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.259: Invalid inode bitmap blk 0 in block_group 0
[  199.343043][ T5443] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem
[  199.345633][ T5443] EXT4-fs (loop1): 1 orphan inode deleted
[  199.347227][ T5443] EXT4-fs (loop1): mounted filesystem without journal. Opts: ��; max_batch_time=0x0000000000000006,i_version,,errors=continue. Quota mode: writeback.
[  200.346565][ T4221] Quota error (device loop1): remove_tree: Getting block too big (0 >= 9)
[  200.357813][ T4221] EXT4-fs error (device loop1): ext4_release_dquot:6240: comm kworker/u4:13: Failed to release dquot type 0
[  202.208361][ T5472] loop5: detected capacity change from 0 to 1024
[  202.538429][ T5472] EXT4-fs error (device loop5): ext4_fill_super:4841: inode #2: comm syz.5.265: casefold flag without casefold feature
[  202.542344][ T5472] EXT4-fs (loop5): get root inode failed
[  202.544109][ T5472] EXT4-fs (loop5): mount failed
[  203.197384][ T5483] loop6: detected capacity change from 0 to 4096
[  203.365042][ T5483] EXT4-fs (loop6): Test dummy encryption mode enabled
[  203.406451][ T5483] EXT4-fs (loop6): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  204.505156][ T4498] Bluetooth: hci3: Frame reassembly failed (-84)
[  204.912755][ T4585] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  205.098216][ T4585] usb 1-1: device descriptor read/64, error -71
[  205.368303][ T4585] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  206.318764][ T5537] loop1: detected capacity change from 0 to 512
[  206.320849][ T4585] usb 1-1: device descriptor read/64, error -71
[  206.439437][ T4585] usb usb1-port1: attempt power cycle
[  206.501904][ T5537] EXT4-fs (loop1): Test dummy encryption mode enabled
[  206.519389][ T4077] Bluetooth: hci3: command 0x1003 tx timeout
[  206.530600][ T4038] Bluetooth: hci3: sending frame failed (-49)
[  206.714101][ T5537] EXT4-fs error (device loop1): __ext4_iget:4893: inode #11: block 1: comm syz.1.277: invalid block
[  206.719560][ T5537] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.277: couldn't read orphan inode 11 (err -117)
[  206.724949][ T5537] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none.
[  206.939985][ T4585] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  207.209399][ T4585] usb 1-1: device descriptor read/8, error -71
[  208.942600][ T4077] Bluetooth: hci3: command 0x1001 tx timeout
[  208.944899][ T4038] Bluetooth: hci3: sending frame failed (-49)
[  209.473043][ T5554] loop3: detected capacity change from 0 to 16
[  209.542942][ T5554] erofs: (device loop3): mounted with root inode @ nid 36.
[  211.017149][ T5586] loop1: detected capacity change from 0 to 512
[  211.040107][ T4077] Bluetooth: hci3: command 0x1009 tx timeout
[  211.126977][ T5586] EXT4-fs (loop1): Test dummy encryption mode enabled
[  211.461145][ T5586] EXT4-fs error (device loop1): __ext4_iget:4893: inode #11: block 1: comm syz.1.285: invalid block
[  211.466679][ T5586] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.285: couldn't read orphan inode 11 (err -117)
[  211.475650][ T5586] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none.
[  211.982734][ T5593] loop6: detected capacity change from 0 to 512
[  212.128311][ T5593] EXT4-fs (loop6): orphan cleanup on readonly fs
[  212.131761][ T5593] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.287: bg 0: block 248: padding at end of block bitmap is not set
[  212.136789][ T5593] EXT4-fs (loop6): Remounting filesystem read-only
[  212.138785][ T5593] Quota error (device loop6): write_blk: dquota write failed
[  212.140884][ T5593] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  212.143621][ T5593] EXT4-fs error (device loop6): ext4_acquire_dquot:6204: comm syz.6.287: Failed to acquire dquot type 1
[  212.149488][ T5593] EXT4-fs (loop6): Remounting filesystem read-only
[  212.153708][ T5593] EXT4-fs (loop6): 1 truncate cleaned up
[  212.205510][ T5593] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,errors=remount-ro,noquota,auto_da_alloc,noload,nodiscard,. Quota mode: writeback.
[  213.194987][ T5616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.293'.
[  214.662867][ T5635] loop0: detected capacity change from 0 to 512
[  215.635466][ T5637] xt_CT: No such helper "netbios-ns"
[  216.352239][ T5635] EXT4-fs (loop0): Test dummy encryption mode enabled
[  217.439187][ T5635] EXT4-fs error (device loop0): __ext4_iget:4893: inode #11: block 1: comm syz.0.295: invalid block
[  217.442838][ T5635] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.295: couldn't read orphan inode 11 (err -117)
[  217.447991][ T5635] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none.
[  218.275862][ T5648] loop5: detected capacity change from 0 to 1024
[  218.648984][ T5648] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.298: Invalid block bitmap block 0 in block_group 0
[  218.656753][ T5648] Quota error (device loop5): write_blk: dquota write failed
[  218.659283][ T5648] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  218.662899][ T5648] EXT4-fs error (device loop5): ext4_acquire_dquot:6204: comm syz.5.298: Failed to acquire dquot type 0
[  218.711644][ T5648] EXT4-fs error (device loop5): ext4_free_blocks:6223: comm syz.5.298: Freeing blocks not in datazone - block = 0, count = 4096
[  218.744991][ T5648] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.298: Invalid inode bitmap blk 0 in block_group 0
[  218.759582][  T153] Quota error (device loop5): remove_tree: Getting block too big (0 >= 9)
[  218.762384][  T153] EXT4-fs error (device loop5): ext4_release_dquot:6240: comm kworker/u4:3: Failed to release dquot type 0
[  218.769608][ T5648] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem
[  218.783586][ T5648] EXT4-fs (loop5): 1 orphan inode deleted
[  218.785369][ T5648] EXT4-fs (loop5): mounted filesystem without journal. Opts: ��; max_batch_time=0x0000000000000006,i_version,,errors=continue. Quota mode: writeback.
[  218.886073][ T5648] usb usb1: usbfs: process 5648 (syz.5.298) did not claim interface 0 before use
[  219.695272][ T5658] fuse: Unknown parameter 'group_i00000000000000000000'
[  219.992820][ T5668] loop1: detected capacity change from 0 to 512
[  221.238665][ T5668] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  221.311637][ T4585] Bluetooth: hci4: command 0x0406 tx timeout
[  221.339457][ T5668] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  222.053562][ T5668] EXT4-fs (loop1): 1 truncate cleaned up
[  222.055408][ T5668] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback.
[  222.090235][ T5676] loop0: detected capacity change from 0 to 2048
[  222.110789][ T5678] udc-core: couldn't find an available UDC or it's busy
[  222.112839][ T5678] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  222.284583][ T5686] udc-core: couldn't find an available UDC or it's busy
[  222.286613][ T5686] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  222.310375][ T5676] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[  223.954002][ T5705] loop1: detected capacity change from 0 to 16
[  225.809733][  T519] Bluetooth: hci3: Frame reassembly failed (-84)
[  227.076027][ T5735] udc-core: couldn't find an available UDC or it's busy
[  227.077979][ T5735] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  227.203905][ T5737] loop1: detected capacity change from 0 to 512
[  227.324656][ T5737] EXT4-fs (loop1): Test dummy encryption mode enabled
[  227.571380][ T5737] EXT4-fs error (device loop1): __ext4_iget:4893: inode #11: block 1: comm syz.1.317: invalid block
[  227.578326][ T5737] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.317: couldn't read orphan inode 11 (err -117)
[  227.597689][ T5737] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none.
[  228.145301][ T4075] Bluetooth: hci3: command 0x1003 tx timeout
[  228.147252][ T4038] Bluetooth: hci3: sending frame failed (-49)
[  230.281074][ T4075] Bluetooth: hci3: command 0x1001 tx timeout
[  230.283344][ T4038] Bluetooth: hci3: sending frame failed (-49)
[  231.857821][ T5757] loop1: detected capacity change from 0 to 40427
[  231.925331][ T5757] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  231.927471][ T5757] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  231.994039][ T5757] F2FS-fs (loop1): Found nat_bits in checkpoint
[  232.104909][ T5757] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  232.106942][ T5757] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  232.371998][ T4035] Bluetooth: hci3: command 0x1009 tx timeout
[  234.621616][ T5831] loop1: detected capacity change from 0 to 512
[  234.718311][ T5831] EXT4-fs (loop1): Test dummy encryption mode enabled
[  235.309281][ T5831] EXT4-fs error (device loop1): __ext4_iget:4893: inode #11: block 1: comm syz.1.333: invalid block
[  235.315818][ T5831] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.333: couldn't read orphan inode 11 (err -117)
[  235.326954][ T5831] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none.
[  235.665772][ T5833] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[  236.999795][ T5841] input: syz1 as /devices/virtual/input/input6
[  238.852824][ T5863] loop3: detected capacity change from 0 to 512
[  239.487439][ T5863] EXT4-fs (loop3): Test dummy encryption mode enabled
[  239.794410][ T5863] EXT4-fs error (device loop3): __ext4_iget:4893: inode #11: block 1: comm syz.3.342: invalid block
[  239.813825][ T5863] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.342: couldn't read orphan inode 11 (err -117)
[  239.821698][ T5863] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none.
[  241.626723][ T5873] �: renamed from pim6reg1
[  241.828405][ T5874] device pim6reg1 entered promiscuous mode
[  242.851307][ T5909] input: syz1 as /devices/virtual/input/input7
[  245.001909][ T5942] loop0: detected capacity change from 0 to 512
[  245.108247][ T5942] EXT4-fs (loop0): Test dummy encryption mode enabled
[  245.396448][ T5942] EXT4-fs error (device loop0): __ext4_iget:4893: inode #11: block 1: comm syz.0.360: invalid block
[  245.418307][ T5942] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.360: couldn't read orphan inode 11 (err -117)
[  245.424698][ T5942] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none.
[  247.371970][ T5944] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[  247.742284][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  248.434072][ T5984] 
��0: renamed from pim6reg1
[  249.055251][ T6003] loop0: detected capacity change from 0 to 512
[  249.368159][ T6003] EXT4-fs (loop0): Test dummy encryption mode enabled
[  250.033492][ T6003] EXT4-fs error (device loop0): __ext4_iget:4893: inode #11: block 1: comm syz.0.379: invalid block
[  250.042564][ T6003] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.379: couldn't read orphan inode 11 (err -117)
[  250.047988][ T6003] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none.
[  250.614512][ T6015] device pim6reg1 entered promiscuous mode
[  251.078207][ T4585] Bluetooth: hci5: command 0x0406 tx timeout
[  252.603808][ T6048] -: renamed from syzkaller0
[  253.960657][ T2055] ieee802154 phy0 wpan0: encryption failed: -22
[  253.962442][ T2055] ieee802154 phy1 wpan1: encryption failed: -22
[  254.122461][ T6097] loop1: detected capacity change from 0 to 16
[  255.968600][ T6110] 
��0: renamed from pim6reg1
[  256.212805][ T6133] loop0: detected capacity change from 0 to 512
[  256.267276][ T6133] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  256.366947][ T6133] EXT4-fs (loop0): 1 truncate cleaned up
[  256.372112][ T6133] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback.
[  256.533615][ T6143] loop1: detected capacity change from 0 to 16
[  259.332513][ T6197] loop5: detected capacity change from 0 to 512
[  259.371253][ T6197] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  259.395842][ T6197] EXT4-fs (loop5): 1 truncate cleaned up
[  259.397762][ T6197] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback.
[  260.517715][ T6210] loop0: detected capacity change from 0 to 16
[  260.673926][ T6216] loop1: detected capacity change from 0 to 512
[  260.722354][ T6216] EXT4-fs (loop1): Test dummy encryption mode enabled
[  260.756515][ T6216] EXT4-fs error (device loop1): __ext4_iget:4893: inode #11: block 1: comm syz.1.440: invalid block
[  260.761457][ T6216] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.440: couldn't read orphan inode 11 (err -117)
[  260.768909][ T6216] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none.
[  262.249111][ T6255] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  262.251359][ T6255] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  262.501452][ T6263] loop0: detected capacity change from 0 to 16
[  264.019882][ T6287] loop3: detected capacity change from 0 to 512
[  264.125980][ T6287] EXT4-fs (loop3): Test dummy encryption mode enabled
[  264.156341][ T6293] device pim6reg1 entered promiscuous mode
[  264.174824][ T6287] EXT4-fs error (device loop3): __ext4_iget:4893: inode #11: block 1: comm syz.3.460: invalid block
[  264.311166][ T6287] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.460: couldn't read orphan inode 11 (err -117)
[  264.318558][ T6287] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none.
[  264.766656][ T6320] loop6: detected capacity change from 0 to 16
[  266.553725][ T6336] device pim6reg1 entered promiscuous mode
[  267.278585][ T6360] loop1: detected capacity change from 0 to 512
[  268.597079][ T6360] EXT4-fs (loop1): Test dummy encryption mode enabled
[  268.869487][ T6360] EXT4-fs error (device loop1): __ext4_iget:4893: inode #11: block 1: comm syz.1.478: invalid block
[  268.876108][ T6360] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.478: couldn't read orphan inode 11 (err -117)
[  268.887444][ T6360] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none.
[  270.444722][ T6394] loop0: detected capacity change from 0 to 16
[  272.450046][ T6425] netlink: 'syz.0.492': attribute type 39 has an invalid length.
[  273.121370][ T6451] device geneve2 entered promiscuous mode
[  273.227833][ T6454] syz.3.500 uses obsolete (PF_INET,SOCK_PACKET)
[  273.416261][   T26] audit: type=1326 audit(273.360:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6458 comm="syz.0.502" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa45c08a8 code=0x7ffc0000
[  273.551434][   T26] audit: type=1326 audit(273.500:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6458 comm="syz.0.502" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=116 compat=0 ip=0xffffa45c08a8 code=0x7ffc0000
[  275.485725][ T6460] loop5: detected capacity change from 0 to 32768
[  275.494754][ T6496] loop3: detected capacity change from 0 to 16
[  275.543596][ T6460] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.501 (6460)
[  275.590330][ T6496] erofs: (device loop3): mounted with root inode @ nid 36.
[  275.638388][ T6496] erofs: (device loop3): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46
[  275.781811][ T6502] device geneve2 entered promiscuous mode
[  275.832683][ T6504] loop0: detected capacity change from 0 to 512
[  275.925162][ T6504] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  275.927198][ T6504] EXT4-fs (loop0): inline encryption not supported
[  275.929675][ T6504] EXT4-fs (loop0): Test dummy encryption mode enabled
[  275.938492][ T6504] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  275.949728][ T6504] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  276.013294][ T6504] EXT4-fs (loop0): 1 truncate cleaned up
[  276.015315][ T6504] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none.
[  276.118028][ T6479] loop6: detected capacity change from 0 to 262144
[  276.226199][ T6460] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm
[  276.228923][ T6460] BTRFS info (device loop5): force zlib compression, level 3
[  276.230946][ T6460] BTRFS info (device loop5): force clearing of disk cache
[  276.233042][ T6460] BTRFS info (device loop5): setting nodatasum
[  276.234710][ T6460] BTRFS info (device loop5): use zlib compression, level 3
[  276.236727][ T6460] BTRFS info (device loop5): allowing degraded mounts
[  276.238740][ T6460] BTRFS info (device loop5): enabling disk space caching
[  276.240663][ T6460] BTRFS info (device loop5): disk space caching is enabled
[  276.242580][ T6460] BTRFS info (device loop5): has skinny extents
[  276.758085][ T6479] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop6 scanned by syz.6.507 (6479)
[  276.992093][ T6479] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm
[  276.994557][ T6479] BTRFS info (device loop6): using free space tree
[  276.996382][ T6479] BTRFS info (device loop6): has skinny extents
[  276.998304][ T6479] BTRFS info (device loop6): flagging fs with big metadata feature
[  277.018760][ T6460] BTRFS error (device loop5): open_ctree failed: -12
[  277.332778][ T6570] udc-core: couldn't find an available UDC or it's busy
[  277.351772][ T6570] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  278.914401][ T6479] BTRFS error (device loop6): open_ctree failed: -12
[  279.044690][ T6594] loop9: detected capacity change from 0 to 8
[  279.364307][ T6594]  loop9: [CUMANA/ADFS] p1 [ADFS] p1
[  279.366257][ T6594] loop9: partition table partially beyond EOD, truncated
[  279.374087][ T6594] loop9: p1 size 81768186 extends beyond EOD, truncated
[  279.846099][ T6596] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.849266][ T6596] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.974472][ T6596] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.976729][ T6596] bridge0: port 2(bridge_slave_1) entered forwarding state
[  279.978924][ T6596] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.980986][ T6596] bridge0: port 1(bridge_slave_0) entered forwarding state
[  280.004731][ T6596] device bridge0 entered promiscuous mode
[  280.108261][   T26] audit: type=1326 audit(280.050:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa45c08a8 code=0x7ffc0000
[  280.128301][   T26] audit: type=1326 audit(280.050:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=165 compat=0 ip=0xffffa45c08a8 code=0x7ffc0000
[  280.134215][   T26] audit: type=1326 audit(280.050:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa45c08a8 code=0x7ffc0000
[  280.951324][ T5486] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop6 scanned by udevd (5486)
[  280.998299][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  282.007112][ T6615] device bridge0 entered promiscuous mode
[  282.018561][ T6615] device macvlan2 entered promiscuous mode
[  282.135589][ T5232] udevd[5232]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[  284.198285][ T4398] Bluetooth: hci1: command 0x0409 tx timeout
[  284.410852][ T6646] loop0: detected capacity change from 0 to 512
[  285.428827][ T6646] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000004739,auto_da_alloc,norecovery,,errors=continue. Quota mode: writeback.
[  287.005891][ T6667] loop3: detected capacity change from 0 to 16
[  289.200355][ T6683] binder: 6677:6683 tried to acquire reference to desc 0, got 1 instead
[  289.203013][ T6683] binder: 6677:6683 transaction failed 29201/-22, size 0-0 line 3059
[  289.221856][ T4429] binder: undelivered TRANSACTION_ERROR: 29201
[  289.986000][ T6698] loop1: detected capacity change from 0 to 1024
[  290.115874][ T6698] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  290.173111][ T6698] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,abort,resuid=0x0000000000000000,user_xattr,discard,max_dir_size_kb=0x0000000000000002,nolazytime,noinit_itable,nomblk_io_submit,nodiscard,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: none.
[  290.519986][ T6719] loop0: detected capacity change from 0 to 512
[  290.635096][ T6719] EXT4-fs (loop0): Test dummy encryption mode enabled
[  290.847269][ T6719] EXT4-fs error (device loop0): __ext4_iget:4893: inode #11: block 1: comm syz.0.566: invalid block
[  290.905447][ T6719] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.566: couldn't read orphan inode 11 (err -117)
[  290.932578][ T6719] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none.
[  292.284649][ T6744] loop6: detected capacity change from 0 to 16
[  293.488667][ T6763] device geneve3 entered promiscuous mode
[  294.599607][ T6776] udc-core: couldn't find an available UDC or it's busy
[  294.601557][ T6776] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  295.508357][ T6786] loop1: detected capacity change from 0 to 16
[  295.747075][ T6791] loop6: detected capacity change from 0 to 512
[  296.807156][ T6791] EXT4-fs (loop6): Test dummy encryption mode enabled
[  297.134005][ T6791] EXT4-fs error (device loop6): __ext4_iget:4893: inode #11: block 1: comm syz.6.587: invalid block
[  297.144728][ T6791] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.587: couldn't read orphan inode 11 (err -117)
[  297.152111][ T6791] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none.
[  297.422840][ T6794] loop5: detected capacity change from 0 to 2048
[  297.629207][ T6799] udc-core: couldn't find an available UDC or it's busy
[  297.663444][ T6799] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  297.668707][ T6794] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  297.949141][ T6802] UDF-fs: warning (device loop5): udf_truncate_tail_extent: Too long extent after EOF in inode 1436: i_size: 163840 lbcount: 167936 extent 129+166912
[  300.104748][ T6821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.598'.
[  300.734856][ T6832] udc-core: couldn't find an available UDC or it's busy
[  300.737079][ T6832] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  302.050446][ T6839] loop1: detected capacity change from 0 to 16
[  302.529645][ T6845] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  304.654193][ T6858] loop6: detected capacity change from 0 to 512
[  305.176277][ T6859] loop0: detected capacity change from 0 to 512
[  306.498594][ T6858] EXT4-fs (loop6): Test dummy encryption mode enabled
[  307.414331][ T6859] EXT4-fs (loop0): Test dummy encryption mode enabled
[  307.513557][ T6858] EXT4-fs error (device loop6): __ext4_iget:4893: inode #11: block 1: comm syz.6.605: invalid block
[  307.555559][ T6858] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.605: couldn't read orphan inode 11 (err -117)
[  307.615607][ T6858] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none.
[  307.641817][ T6859] EXT4-fs: failed to create workqueue
[  307.643460][ T6859] EXT4-fs (loop0): mount failed
[  309.107970][ T6872] netlink: 'syz.3.611': attribute type 10 has an invalid length.
[  309.112596][ T6872] netlink: 40 bytes leftover after parsing attributes in process `syz.3.611'.
[  309.197117][ T6872] team0: Port device geneve0 added
[  312.677928][ T6903] loop5: detected capacity change from 0 to 512
[  312.747277][ T6903] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  313.381101][ T6906] loop1: detected capacity change from 0 to 128
[  313.502380][ T6903] EXT4-fs (loop5): 1 truncate cleaned up
[  313.503915][ T6903] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,auto_da_alloc,debug_want_extra_isize=0x0000000000000068,errors=continue,lazytime,quota,,errors=continue. Quota mode: writeback.
[  313.513673][ T6906] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000000,nouid32,,errors=continue. Quota mode: none.
[  313.520027][ T6893] loop6: detected capacity change from 0 to 32768
[  313.632037][ T6893] XFS (loop6): Mounting V5 Filesystem
[  313.636258][ T6894] ptrace attach of "./syz-executor exec"[4025] was attempted by ""[6894]
[  313.808523][ T6893] XFS (loop6): Ending clean mount
[  314.072390][ T4745] XFS (loop6): Unmounting Filesystem
[  315.350307][ T6946] loop1: detected capacity change from 0 to 512
[  315.834650][ T2055] ieee802154 phy0 wpan0: encryption failed: -22
[  315.836552][ T2055] ieee802154 phy1 wpan1: encryption failed: -22
[  316.411961][ T6946] EXT4-fs (loop1): Test dummy encryption mode enabled
[  316.429314][ T6946] EXT4-fs error (device loop1): __ext4_iget:4893: inode #11: block 1: comm syz.1.628: invalid block
[  317.388478][ T6946] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.628: couldn't read orphan inode 11 (err -117)
[  317.393882][ T6946] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none.
[  318.360387][ T6957] loop3: detected capacity change from 0 to 4096
[  318.590600][ T6958] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  319.563180][ T6964] loop5: detected capacity change from 0 to 128
[  323.498715][ T7003] loop6: detected capacity change from 0 to 512
[  324.443176][ T7003] EXT4-fs (loop6): Test dummy encryption mode enabled
[  328.060989][ T7003] EXT4-fs: failed to create workqueue
[  328.062561][ T7003] EXT4-fs (loop6): mount failed
[  328.396474][ T7022] loop5: detected capacity change from 0 to 512
[  328.643283][ T7026] Cannot find add_set index 0 as target
[  330.439531][ T7022] EXT4-fs (loop5): Ignoring removed oldalloc option
[  330.658444][ T7022] EXT4-fs (loop5): Ignoring removed orlov option
[  330.702538][ T7022] EXT4-fs (loop5): orphan cleanup on readonly fs
[  331.501233][ T7022] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.651: bg 0: block 248: padding at end of block bitmap is not set
[  331.549861][ T7045] loop6: detected capacity change from 0 to 64
[  331.554162][ T7022] Quota error (device loop5): write_blk: dquota write failed
[  331.556492][ T7022] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  331.561290][ T7022] EXT4-fs error (device loop5): ext4_acquire_dquot:6204: comm syz.5.651: Failed to acquire dquot type 1
[  331.574119][ T7022] EXT4-fs (loop5): 1 truncate cleaned up
[  331.581591][ T7022] EXT4-fs (loop5): mounted filesystem without journal. Opts: oldalloc,stripe=0x0000000000000006,noblock_validity,grpjquota=,noinit_itable,orlov,abort,nombcache,stripe=0x0000000000000010,,errors=continue. Quota mode: writeback.
[  332.191560][ T4024] bridge0: port 3(syz_tun) entered disabled state
[  332.839049][ T7053] loop5: detected capacity change from 0 to 512
[  332.914424][ T7053] EXT4-fs (loop5): Test dummy encryption mode enabled
[  333.133006][ T7053] EXT4-fs error (device loop5): __ext4_iget:4893: inode #11: block 1: comm syz.5.660: invalid block
[  333.139248][ T7053] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.660: couldn't read orphan inode 11 (err -117)
[  333.147115][ T7053] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none.
[  333.449902][ T4024] device syz_tun left promiscuous mode
[  333.452256][ T4024] bridge0: port 3(syz_tun) entered disabled state
[  333.638274][ T4584] Bluetooth: hci3: command 0x0409 tx timeout
[  336.751019][ T4072] Bluetooth: hci3: command 0x041b tx timeout
[  337.057413][ T7080] loop1: detected capacity change from 0 to 64
[  337.879798][ T4131] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.939841][ T7086] loop5: detected capacity change from 0 to 512
[  338.352351][ T7091] loop6: detected capacity change from 0 to 2048
[  339.302808][ T4131] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.340475][ T7086] overlayfs: missing 'lowerdir'
[  339.596714][ T7043] chnl_net:caif_netlink_parms(): no params data found
[  339.699527][ T7043] bridge0: port 1(bridge_slave_0) entered blocking state
[  339.704496][ T7043] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.719120][ T7043] device bridge_slave_0 entered promiscuous mode
[  339.734316][ T7043] bridge0: port 2(bridge_slave_1) entered blocking state
[  339.746906][ T7043] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.757846][ T7043] device bridge_slave_1 entered promiscuous mode
[  339.791931][ T1535] Bluetooth: hci3: command 0x040f tx timeout
[  339.833130][ T7100] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  339.881485][ T7043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  339.921367][ T4131] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.924392][ T7105] loop5: detected capacity change from 0 to 512
[  339.943294][ T7106] udc-core: couldn't find an available UDC or it's busy
[  339.945304][ T7106] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  339.953182][ T7043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  339.964673][ T7105] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  340.085193][ T7043] team0: Port device team_slave_0 added
[  340.304734][ T4131] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.325877][ T7105] EXT4-fs (loop5): 1 truncate cleaned up
[  340.327526][ T7105] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback.
[  341.490636][ T7043] team0: Port device team_slave_1 added
[  341.798550][ T1535] Bluetooth: hci3: command 0x0419 tx timeout
[  342.848562][ T7043] batman_adv: batadv0: Adding interface: batadv_slave_0
[  342.850882][ T7043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  342.868723][ T7043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  342.876286][ T7043] batman_adv: batadv0: Adding interface: batadv_slave_1
[  342.885960][ T7043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  342.912823][ T7043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  343.020706][ T7043] device hsr_slave_0 entered promiscuous mode
[  345.978327][ T7043] device hsr_slave_1 entered promiscuous mode
[  346.237661][ T7159] loop6: detected capacity change from 0 to 512
[  346.281629][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.691'.
[  346.308422][ T7160] netlink: 540 bytes leftover after parsing attributes in process `syz.1.691'.
[  346.310892][ T7160] netlink: 32 bytes leftover after parsing attributes in process `syz.1.691'.
[  346.419755][ T7043] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  346.422015][ T7043] Cannot create hsr debugfs directory
[  346.431527][ T7159] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  346.615936][ T7159] EXT4-fs (loop6): 1 truncate cleaned up
[  346.617617][ T7159] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback.
[  347.397695][ T7181] loop5: detected capacity change from 0 to 8
[  347.609387][ T7181] unable to read fragment index table
[  347.636574][ T7043] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  347.674358][ T7043] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  347.877018][ T7193] udc-core: couldn't find an available UDC or it's busy
[  348.165401][ T7193] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  348.450270][ T7043] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  348.511001][ T7043] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  348.847484][ T7203] loop1: detected capacity change from 0 to 512
[  350.407879][ T7203] EXT4-fs (loop1): Test dummy encryption mode enabled
[  350.847188][ T7203] EXT4-fs error (device loop1): __ext4_iget:4893: inode #11: block 1: comm syz.1.702: invalid block
[  350.869808][ T7203] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.702: couldn't read orphan inode 11 (err -117)
[  350.900967][ T7203] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none.
[  351.738541][ T7043] 8021q: adding VLAN 0 to HW filter on device bond0
[  351.879435][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  351.882341][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  351.898529][ T7043] 8021q: adding VLAN 0 to HW filter on device team0
[  351.930144][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  351.933721][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  351.936312][ T4490] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.938430][ T4490] bridge0: port 1(bridge_slave_0) entered forwarding state
[  351.955275][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  352.014453][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  352.017414][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  352.021887][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  352.038006][ T4490] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.040096][ T4490] bridge0: port 2(bridge_slave_1) entered forwarding state
[  352.053674][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  352.177168][ T7228] loop5: detected capacity change from 0 to 512
[  352.233648][ T7228] EXT4-fs (loop5): Test dummy encryption mode enabled
[  352.269813][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  352.277552][ T7228] EXT4-fs error (device loop5): __ext4_iget:4893: inode #11: block 1: comm syz.5.710: invalid block
[  352.282001][ T7228] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.710: couldn't read orphan inode 11 (err -117)
[  352.286067][ T7228] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none.
[  352.341184][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  352.355796][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  352.366319][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  352.380238][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  352.394676][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  352.403105][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  352.429798][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  352.445395][ T7043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  352.452579][ T7043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  352.460839][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  352.463845][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  352.618522][  T638] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  352.621204][  T638] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  352.641756][ T7043] 8021q: adding VLAN 0 to HW filter on device batadv0
[  353.710878][   T26] audit: type=1326 audit(353.660:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.3.713" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa9218a8 code=0x7ffc0000
[  353.717053][   T26] audit: type=1326 audit(353.660:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.3.713" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa9218a8 code=0x7ffc0000
[  353.741985][   T26] audit: type=1326 audit(353.690:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.3.713" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=99 compat=0 ip=0xffffaa9218a8 code=0x7ffc0000
[  353.747665][   T26] audit: type=1326 audit(353.690:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.3.713" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa9218a8 code=0x7ffc0000
[  353.926534][   T26] audit: type=1326 audit(353.690:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.3.713" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa9218a8 code=0x7ffc0000
[  354.816267][   T26] audit: type=1326 audit(354.760:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.3.719" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa9218a8 code=0x0
[  354.926727][ T7287] loop1: detected capacity change from 0 to 512
[  354.955442][ T7282] [U] 
[  354.956624][ T7282] [U] K{�
[  354.957440][ T7282] [U] �t �1��Š�F���fˊ�`G�J��g���������o��/�mC�
[  354.962334][ T7287] EXT4-fs (loop1): Test dummy encryption mode enabled
[  354.982412][ T7282] [U] t�ؖ/,�~�Ĝ��j���}8���'o1��"�7-�JQ�K��W��q�5c%"�H12��Y������X�`����`+��(��!(���z'�tXln�I�g�j����ݭ�p�~�7�!���"�����(�5�Ob���̓J�
[  354.992668][ T7282] [U] �k\&�}6�6�X�HX�������.`�a�$�40|϶��9��ި����U��4���Vbz��}�w�M�T���Q��Φr�4��
[  354.995550][ T7282] [U] ".h6��"�k�[����J�4��I�n��[Z(��C|T�]z{��3�c=��x�����4�w�)\T�XJ��SH{q;칢��t��+���g����d�.˂�>y����wUh�fN����hl]S�2���\g%�O�&z)��'�pul�_<�	�ذ����`ұT�������;_�"(�u{7j��2X �/�'��c���I����H�c�ճ�V�=��Ai�%w�Es� R��j���g��r����hI
���a��6-�D��V�� i"��n� ��Asc~4���8c�*�OO5/��J�~���w�vK+����3��Y)��M���v��yq潀DTr�
Otpem%f��ej�A5��T_-X~�^aaۂ�q��
[  354.995559][ T7287] EXT4-fs error (device loop1): __ext4_iget:4893: inode #11: block 1: comm syz.1.721: invalid block
[  355.010126][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  355.013096][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  355.016123][ T7287] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.721: couldn't read orphan inode 11 (err -117)
[  355.028947][ T7282] [U] 	+�w�G?]��'a:	��)�
����' B>t���f/��<'�U�'��h�i�.+]e�.�-ɿ���%��>2`�^U�8F.�6��3��+�A�«���g3�p��6:�^0��t��v�'E�t����YC�n��rϩ�n�Pj�;�Z������8!��\���A�ʖ2��$�­wi.��#��/Bai���`��4j��d�y@�z��gW�5˿B��ٜ�N�y"vI2��
[  355.035648][ T7287] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none.
[  355.122006][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  355.123008][ T7282] [U] �T�_K5�t�YJ���9��c�$br�L�Nul��9w���|�G�"ʃ�%����C�؝���q��
 ��3��q��N^HP*��$	�.�7yӱ�2�
[  355.124902][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  355.127504][ T7282] [U] �?���h��*����3�7�鍾^#Q�"0~���(�o�XL�b�,'v��=���C�S���G�S��0�ւ��`���ه��=1(��p#�2DO*Ƀ
[  355.135214][ T7282] [U] �s��g������Gu��d-{���|&������2��L�c_��!`��oz֥�B��%>�r��w���Ss�H"�yA4�O.�Y��䏄RTԶ�B�[+/<<R�B����|Фe���۠�V96#���ͤ�j�U�%
s851���ҩs�P��\��?q�|L��QX�0�K�1orɴ2��|��d�F�������2ޔ���0��H�}C[/����px^��o
[  355.142468][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  355.154186][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  355.157484][ T7282] [U] �؛���(J�Л��m��xz�;�����؝_����*3�3��5�\�xm��U��AK!aQ`��;F�I+��VUH���m�j��Ʒ��Z�c��z���)_矡	���&�����a�xto���_� ���:���%�P���C���y�+_�����}U�m��ƫC�!KJ�7��g��=b�
[  355.163708][ T7282] [U] ٽ�F�%�XA��l�2r*g��VW��$��j	�A��F�ߝ�+��9̈́Vi�֗�kپ�1}_��
�%�r6��(]��/����řYܺ��h����r g��rn/ܫ�#!�d����%���D��-{�$�vU��T���$:mtr�E�C1V�D~��];[�����sq����(��e,X�8�"�
��G�d���2@T8��������t8.Rc+�@�ꦇp�u�
p����C���'�yL�-Ss1E?�7�O���^]����c��H]�Jkr]Rkq܆��ݣ��OTc��x���4�N�	��&���ڋ��@�:m7�~�+�W*���xM��>>��{q���
_�՝LX8�U����{�Z����)��7?�rR;�c�r�hײڣ����1�>)�Mă��t���(��aϝ�}9�ڥ�J*Mќ�ġ�'L��q	�DW����=��|q�	�Æ�W;5��Ž�!�dB�x`��/��E�`ƦM��X��"�\
[  355.180767][ T7043] device veth0_vlan entered promiscuous mode
[  355.184890][ T7282] [U] {;����٘_�o2��)�o��.2�W2���y���x_  HPϱ�S�D����:]�{������
[  355.187544][ T7282] [U] I,�>��	��5�1��^1�N4�oǶ�'0�?֒i�9w.�_.�W�a���V��`)�Z���c6Giӹ�a��XL[����F�*��O�W)+��'\n�
[K@����2�Ǭ���p"^`���	��
[  355.192524][ T7282] [U] 22��Ʃ���x?0;3u�
[  355.193987][ T7282] [U] ޜ�
��sObx�8�W�4�(�~/���K�U��ԖoQ�e+�G�-y�gY_
�>v�����3.h�ә]̈́�2��)�D�,	��	�D~�d���+�w;A\�F
P��Ș|$��)�
KؐI���ɿk�YT^R���癵��A=�#�ܜ	����ae��t�1��ݯ4K�.e"R�S|��s���:��>p��r�"z������#P!�KY"�}��F�N84����hޱ�o��sߙ̫%Dlw�m��
[  355.203064][ T7282] [U] [�['xn�'�����,mr��/����1D=!D�x91B�
w�R�lf���K�Z��#�`�l؛�˜��b~�m���
[  355.205920][ T7282] [U] �L�>��d+�d�����"5���h3<���iR=F^�f�n��������v���D�OIO�:U�>�Y�
[  355.208911][ T7282] [U] 'B�6v�20��瞥�׌�"t8�{9�FW��]���쩍
[  355.210793][ T7282] [U] �72�����u�C6����τI]8c��tۨQSk�Y��I��� �|V'�TV/��g�$[� 9kh`�"����}��[^=��0�]��%�̂T�����F�_v�4C���
[  355.223056][ T7282] [U] �ec�
[  355.223984][ T7282] [U] ���|���<��:^�3$7nK~�-�@��?��/mtl��۾�I�w�@g~t�{��P�+�$�jp|���I�Ri�pm� ��Y� ��8�t���V�����,�l�,�
[  355.275709][ T7043] device veth1_vlan entered promiscuous mode
[  355.341026][ T4131] device hsr_slave_0 left promiscuous mode
[  355.381555][ T4131] device hsr_slave_1 left promiscuous mode
[  355.588489][ T4131] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  355.590971][ T4131] batman_adv: batadv0: Removing interface: batadv_slave_0
[  355.596436][ T4131] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  355.600107][ T4131] batman_adv: batadv0: Removing interface: batadv_slave_1
[  356.240691][ T4131] device bridge_slave_1 left promiscuous mode
[  356.242698][ T4131] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.518895][ T4131] device bridge_slave_0 left promiscuous mode
[  356.520837][ T4131] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.615319][ T4131] device veth1_macvtap left promiscuous mode
[  357.617183][ T4131] device veth0_macvtap left promiscuous mode
[  357.621103][ T4131] device veth1_vlan left promiscuous mode
[  357.622857][ T4131] device veth0_vlan left promiscuous mode
[  359.811866][ T4131] team0 (unregistering): Port device team_slave_1 removed
[  359.824816][ T4131] team0 (unregistering): Port device team_slave_0 removed
[  359.832657][ T7325] loop3: detected capacity change from 0 to 32768
[  359.837285][ T4131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  359.900370][ T7325] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.731 (7325)
[  359.905642][ T4131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  359.914772][ T7325] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm
[  359.917548][ T7325] BTRFS info (device loop3): setting nodatacow, compression disabled
[  359.920714][ T7325] BTRFS info (device loop3): turning on flush-on-commit
[  359.922836][ T7325] BTRFS info (device loop3): using free space tree
[  359.924736][ T7325] BTRFS info (device loop3): has skinny extents
[  360.065779][ T4131] bond0 (unregistering): Released all slaves
[  360.067620][ T7325] BTRFS info (device loop3): enabling ssd optimizations
[  360.227593][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  360.227786][ T7296] [U] �K�����)0���~��ʪ�iP'�f��z��r���@B�]�5��{��ʼ�'�8�ƥF��UTqUd
ǩ�K;7��0c[��y���YC���ذm��L�8�T�͚�5���rx����W� x���oQhVi'8����L�
[  360.238350][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  360.254203][ T7315] netlink: 'syz.1.726': attribute type 39 has an invalid length.
[  360.472115][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  360.475164][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  360.488072][ T7043] device veth0_macvtap entered promiscuous mode
[  360.504694][ T7043] device veth1_macvtap entered promiscuous mode
[  360.580745][ T7043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  360.584961][ T7043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.587776][ T7043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  360.610705][ T7043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.613220][ T7043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  360.626723][ T7043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.681290][ T7043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  360.698143][ T7043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.718742][ T7043] batman_adv: batadv0: Interface activated: batadv_slave_0
[  360.721154][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  360.724173][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  360.726878][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  360.744294][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  360.783647][ T7043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  360.786600][ T7043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.809339][ T7043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  360.891838][ T7043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.050450][ T7043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  361.204087][ T7043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.332162][ T7043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  361.449241][ T7043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.467382][ T7043] batman_adv: batadv0: Interface activated: batadv_slave_1
[  361.481842][ T7043] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  361.484417][ T7043] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  361.525394][ T7043] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  361.545593][ T7043] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  361.579909][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  361.582833][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  361.853977][ T7374] device vlan2 entered promiscuous mode
[  361.855645][ T7374] device bridge0 entered promiscuous mode
[  362.464830][  T638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  362.467199][  T638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  362.472341][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  362.475234][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  362.563911][ T7358] loop3: detected capacity change from 0 to 32768
[  362.637456][ T7374] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.744723][ T4085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  362.750434][ T4085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  362.761092][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  363.249553][ T7396] loop1: detected capacity change from 0 to 512
[  364.428495][ T7389] loop3: detected capacity change from 0 to 512
[  364.445849][ T7396] EXT4-fs (loop1): Test dummy encryption mode enabled
[  365.069642][ T7396] EXT4-fs error (device loop1): __ext4_iget:4893: inode #11: block 1: comm syz.1.743: invalid block
[  365.076115][ T7396] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.743: couldn't read orphan inode 11 (err -117)
[  365.083735][ T7396] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none.
[  367.182797][ T7389] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  367.186666][ T7389] EXT4-fs: failed to create workqueue
[  367.188522][ T7389] EXT4-fs (loop3): mount failed
[  367.319599][ T7416] loop1: detected capacity change from 0 to 8
[  367.332914][ T7415] netlink: 'syz.6.748': attribute type 39 has an invalid length.
[  367.446405][ T7423] mmap: syz.5.751 (7423) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  367.610256][ T7429] loop1: detected capacity change from 0 to 2048
[  367.702292][ T7429] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  367.746553][ T7431] loop5: detected capacity change from 0 to 4096
[  368.805455][ T4031] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201'
[  368.808362][ T4031] CPU: 0 PID: 4031 Comm: kworker/u5:2 Not tainted 5.15.185-syzkaller #0
[  368.810740][ T4031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  368.813381][ T4031] Workqueue: hci5 hci_rx_work
[  368.814691][ T4031] Call trace:
[  368.815660][ T4031]  dump_backtrace+0x0/0x43c
[  368.816840][ T4031]  show_stack+0x2c/0x3c
[  368.817926][ T4031]  __dump_stack+0x30/0x40
[  368.819094][ T4031]  dump_stack_lvl+0xf8/0x160
[  368.820340][ T4031]  dump_stack+0x1c/0x5c
[  368.821478][ T4031]  sysfs_create_dir_ns+0x22c/0x24c
[  368.822927][ T4031]  kobject_add_internal+0x590/0xc54
[  368.824360][ T4031]  kobject_add+0x134/0x1f8
[  368.825549][ T4031]  device_add+0x3f0/0xf94
[  368.826770][ T4031]  hci_conn_add_sysfs+0xbc/0x1cc
[  368.828174][ T4031]  le_conn_complete_evt+0x9a4/0x11bc
[  368.829647][ T4031]  hci_le_meta_evt+0x85c/0x3010
[  368.831006][ T4031]  hci_event_packet+0xd10/0x11bc
[  368.832330][ T4031]  hci_rx_work+0x1cc/0x880
[  368.833559][ T4031]  process_one_work+0x79c/0x1140
[  368.834965][ T4031]  worker_thread+0x8f4/0x101c
[  368.836268][ T4031]  kthread+0x374/0x454
[  368.837411][ T4031]  ret_from_fork+0x10/0x20
[  368.839144][ T4031] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  368.843102][ T4031] Bluetooth: hci5: failed to register connection device
[  368.915628][ T7419] ODEBUG: Out of memory. ODEBUG disabled
[  369.190387][ T7467] loop7: detected capacity change from 0 to 16384
[  369.202286][ T7467] udc-core: couldn't find an available UDC or it's busy
[  369.210003][ T7467] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  369.953605][ T7477] loop6: detected capacity change from 0 to 2048
[  370.032123][ T7477] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d
[  370.059110][ T7477] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  370.100789][ T7488] loop3: detected capacity change from 0 to 256
[  370.167046][ T7488] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  371.141545][ T4398] Bluetooth: hci5: command 0x2016 tx timeout
[  371.328994][ T7513] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  371.599087][ T7524] udc-core: couldn't find an available UDC or it's busy
[  371.604175][ T7524] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  371.663658][  T638] tipc: Subscription rejected, illegal request
[  372.423485][ T6578] Bluetooth: hci3: command 0x0405 tx timeout
[  372.684273][ T7549] netlink: 16 bytes leftover after parsing attributes in process `syz.5.781'.
[  374.099785][ T7561] loop6: detected capacity change from 0 to 2048
[  374.188863][ T7561] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  375.251711][ T7584] netlink: 'syz.5.791': attribute type 39 has an invalid length.
[  375.830298][ T7599] loop5: detected capacity change from 0 to 512
[  375.836417][ T7599] EXT4-fs (loop5): Test dummy encryption mode enabled
[  375.856462][ T7599] EXT4-fs error (device loop5): __ext4_iget:4893: inode #11: block 1: comm syz.5.796: invalid block
[  375.861291][ T7599] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.796: couldn't read orphan inode 11 (err -117)
[  375.865139][ T7599] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none.
[  376.307090][ T7588] loop7: detected capacity change from 0 to 32768
[  376.335262][ T7614] udc-core: couldn't find an available UDC or it's busy
[  376.338200][ T7614] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  376.359200][ T7588] XFS: ikeep mount option is deprecated.
[  376.550962][ T7588] XFS (loop7): Mounting V5 Filesystem
[  377.002824][ T2055] ieee802154 phy0 wpan0: encryption failed: -22
[  377.005094][ T2055] ieee802154 phy1 wpan1: encryption failed: -22
[  377.505999][ T7635] loop5: detected capacity change from 0 to 2048
[  377.544955][ T7588] XFS (loop7): Ending clean mount
[  377.552462][ T7588] XFS (loop7): Quotacheck needed: Please wait.
[  377.616688][ T7635] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  377.638227][ T7635] UDF-fs: Scanning with blocksize 512 failed
[  377.653289][ T7635] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  377.786484][ T7588] XFS (loop7): Quotacheck: Done.
[  377.971894][ T7645] Cannot find add_set index 0 as target
[  378.895283][ T7043] XFS (loop7): Unmounting Filesystem
[  378.904058][ T7652] loop6: detected capacity change from 0 to 512
[  378.961340][ T7652] EXT4-fs (loop6): Test dummy encryption mode enabled
[  379.010201][ T7652] EXT4-fs error (device loop6): __ext4_iget:4893: inode #11: block 1: comm syz.6.807: invalid block
[  379.013809][ T7652] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.807: couldn't read orphan inode 11 (err -117)
[  379.017567][ T7652] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none.
[  379.345460][ T7672] loop3: detected capacity change from 0 to 4096
[  379.438356][ T7683] loop1: detected capacity change from 0 to 1024
[  379.481553][ T7683] EXT4-fs (loop1): Ignoring removed nobh option
[  379.483334][ T7683] EXT4-fs (loop1): Ignoring removed bh option
[  379.485162][ T7683] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  379.549470][ T7683] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  380.674204][ T7712] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  380.725841][ T7716] loop3: detected capacity change from 0 to 512
[  380.802059][ T7716] EXT4-fs (loop3): Test dummy encryption mode enabled
[  380.838284][ T7716] EXT4-fs error (device loop3): __ext4_iget:4893: inode #11: block 1: comm syz.3.823: invalid block
[  380.845055][ T7716] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.823: couldn't read orphan inode 11 (err -117)
[  380.849296][ T7716] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none.
[  380.958327][   T26] audit: type=1326 audit(380.910:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94cf58a8 code=0x7ffc0000
[  380.967530][   T26] audit: type=1326 audit(380.910:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94cf58a8 code=0x7ffc0000
[  381.004135][   T26] audit: type=1326 audit(380.920:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffff94cf58a8 code=0x7ffc0000
[  381.035898][   T26] audit: type=1326 audit(380.950:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz.1.824" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff94cf58a8 code=0x0
[  381.163076][ T7731] netlink: 'syz.1.830': attribute type 39 has an invalid length.
[  382.269656][ T7751] loop6: detected capacity change from 0 to 1024
[  383.270773][ T7751] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  384.230334][ T7777] loop1: detected capacity change from 0 to 512
[  384.244668][ T7777] EXT4-fs (loop1): Test dummy encryption mode enabled
[  384.357445][ T7777] EXT4-fs error (device loop1): __ext4_iget:4893: inode #11: block 1: comm syz.1.837: invalid block
[  384.385410][ T7777] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.837: couldn't read orphan inode 11 (err -117)
[  384.394234][ T7777] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none.
[  384.497552][ T7785] netlink: 4 bytes leftover after parsing attributes in process `syz.7.839'.
[  385.427065][ T7794] netlink: 'syz.3.841': attribute type 39 has an invalid length.
[  386.866297][ T7825] netlink: 80 bytes leftover after parsing attributes in process `syz.5.847'.
[  387.317850][ T7844] loop3: detected capacity change from 0 to 128
[  387.339999][ T7846] netlink: 12 bytes leftover after parsing attributes in process `syz.5.851'.
[  387.452483][ T7848] netlink: 60 bytes leftover after parsing attributes in process `syz.5.853'.
[  387.469824][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.5.853'.
[  388.679779][ T7856] netlink: 108 bytes leftover after parsing attributes in process `syz.5.856'.
[  389.770606][ T7868] loop3: detected capacity change from 0 to 512
[  389.858952][ T7873] netlink: 'syz.6.862': attribute type 39 has an invalid length.
[  389.869398][ T7868] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback.
[  389.931110][ T7868] EXT4-fs error (device loop3): ext4_do_update_inode:5203: inode #2: comm syz.3.860: corrupted inode contents
[  389.978358][ T7868] EXT4-fs error (device loop3): ext4_dirty_inode:6039: inode #2: comm syz.3.860: mark_inode_dirty error
[  389.989505][ T7868] EXT4-fs error (device loop3): ext4_do_update_inode:5203: inode #2: comm syz.3.860: corrupted inode contents
[  390.018536][ T7868] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.860: mark_inode_dirty error
[  391.880113][ T7908] loop3: detected capacity change from 0 to 256
[  392.782692][ T7924] loop7: detected capacity change from 0 to 512
[  393.659002][ T7924] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  393.790841][ T7924] EXT4-fs (loop7): 1 truncate cleaned up
[  393.792577][ T7924] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback.
[  395.960699][    T7] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  395.964529][    T7] Bluetooth: hci4: Injecting HCI hardware error event
[  396.127311][ T4031] Bluetooth: hci4: hardware error 0x00
[  402.548999][ T4428] Bluetooth: hci0: command 0x0409 tx timeout
[  403.020336][ T8078] loop3: detected capacity change from 0 to 512
[  403.318063][ T8078] EXT4-fs (loop3): Test dummy encryption mode enabled
[  403.591840][ T8078] EXT4-fs error (device loop3): __ext4_iget:4893: inode #11: block 1: comm syz.3.902: invalid block
[  403.597117][ T8078] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.902: couldn't read orphan inode 11 (err -117)
[  403.603655][ T8078] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue. Quota mode: none.
[  404.435463][ T8024] chnl_net:caif_netlink_parms(): no params data found
[  404.756196][ T8081] loop6: detected capacity change from 0 to 8192
[  404.770187][ T8024] bridge0: port 1(bridge_slave_0) entered blocking state
[  404.788659][ T8024] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.816926][ T8024] device bridge_slave_0 entered promiscuous mode
[  405.025099][ T8024] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.034646][ T8081] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal
[  405.045081][ T8081] REISERFS (device loop6): using ordered data mode
[  405.059811][ T8024] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.064445][ T8081] reiserfs: using flush barriers
[  405.071807][ T4428] Bluetooth: hci0: command 0x041b tx timeout
[  405.084246][ T8024] device bridge_slave_1 entered promiscuous mode
[  405.087354][ T8081] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  405.118791][ T8081] REISERFS (device loop6): checking transaction log (loop6)
[  405.173944][ T8081] REISERFS (device loop6): Using r5 hash to sort names
[  405.217251][ T8024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  405.232205][ T8081] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  405.264326][ T8024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  405.422314][ T8024] team0: Port device team_slave_0 added
[  405.461168][ T8024] team0: Port device team_slave_1 added
[  406.678977][ T8119] udc-core: couldn't find an available UDC or it's busy
[  406.681046][ T8119] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  406.732721][ T8024] batman_adv: batadv0: Adding interface: batadv_slave_0
[  406.734818][ T8024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  406.753363][ T8024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  406.757136][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.7.912'.
[  406.811450][ T8024] batman_adv: batadv0: Adding interface: batadv_slave_1
[  406.813862][ T8024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  406.878356][ T8024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  407.060184][ T8024] device hsr_slave_0 entered promiscuous mode
[  407.079433][ T4035] Bluetooth: hci0: command 0x040f tx timeout
[  407.108625][ T8024] device hsr_slave_1 entered promiscuous mode
[  407.138253][ T8024] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  407.140502][ T8024] Cannot create hsr debugfs directory
[  407.416231][ T8024] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  407.460010][ T8024] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  407.509316][ T8024] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  407.562000][ T8024] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  407.696700][ T8160] udc-core: couldn't find an available UDC or it's busy
[  407.701013][ T8160] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  407.772596][ T8024] 8021q: adding VLAN 0 to HW filter on device bond0
[  407.816930][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  407.820557][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  407.827684][ T8024] 8021q: adding VLAN 0 to HW filter on device team0
[  407.841484][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  407.851132][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  407.860422][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  407.862525][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  407.880212][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  407.887495][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  407.897004][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  407.912998][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  407.915142][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  407.926101][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  407.943418][ T8142] loop6: detected capacity change from 0 to 32768
[  407.947312][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  407.970058][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  407.980198][ T8142] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.917 (8142)
[  407.986971][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  407.999858][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  408.019631][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  408.026132][ T8142] BTRFS info (device loop6): using sha256 (sha256-ce) checksum algorithm
[  408.035161][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  408.044133][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  408.044666][ T8142] BTRFS info (device loop6): using free space tree
[  408.048491][ T8142] BTRFS info (device loop6): has skinny extents
[  408.051035][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  408.057572][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  408.074718][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  408.088649][ T8024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  409.043427][ T4494] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.158302][    T7] Bluetooth: hci0: command 0x0419 tx timeout
[  409.224867][ T8195] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  409.781365][ T4494] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.152073][  T638] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  410.154386][  T638] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  410.167871][ T8024] 8021q: adding VLAN 0 to HW filter on device batadv0
[  410.180139][ T8142] BTRFS info (device loop6): enabling ssd optimizations
[  410.192344][ T4494] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.289090][ T8205] loop5: detected capacity change from 0 to 8192
[  410.293608][ T4494] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.487833][ T8205] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  410.498759][ T8205] REISERFS (device loop5): using ordered data mode
[  410.500536][ T8205] reiserfs: using flush barriers
[  410.506594][ T8205] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  410.527422][ T8205] REISERFS (device loop5): checking transaction log (loop5)
[  410.794054][ T8205] REISERFS (device loop5): Using tea hash to sort names
[  410.797177][ T8205] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  410.878846][ T8024] device veth0_vlan entered promiscuous mode
[  410.907005][ T8205] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2)
[  410.914230][ T8024] device veth1_vlan entered promiscuous mode
[  412.415234][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  412.418414][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  412.422081][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  412.428989][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  412.449129][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  412.452899][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  412.455660][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  412.462436][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  412.471129][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  414.171260][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  414.291127][ T8024] device veth0_macvtap entered promiscuous mode
[  414.306479][ T8024] device veth1_macvtap entered promiscuous mode
[  414.316327][ T8257] loop3: detected capacity change from 0 to 1024
[  414.377823][ T8024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  414.458388][ T8257] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  414.461817][ T8024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  414.465268][ T8024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  414.468863][ T8257] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  414.472777][ T8024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  414.480273][ T8257] EXT4-fs error (device loop3): ext4_get_journal_inode:5160: inode #5: comm syz.3.938: unexpected bad inode w/o EXT4_IGET_BAD
[  414.492644][ T8024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  414.510429][ T8257] EXT4-fs (loop3): no journal found
[  414.513211][ T8269] netlink: 60 bytes leftover after parsing attributes in process `syz.6.941'.
[  414.516989][ T8024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  414.524364][ T8257] EXT4-fs (loop3): can't get journal size
[  414.534646][ T8024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  414.550474][ T8024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  414.569961][ T8257] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback.
[  414.651487][ T8024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  414.672163][ T8024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  414.696906][ T8024] batman_adv: batadv0: Interface activated: batadv_slave_0
[  414.712162][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  414.715973][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  414.738012][ T8024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  414.775018][ T8275] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.943'.
[  414.783026][ T8024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  414.797109][ T8024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  414.815476][ T8024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  414.829370][ T8024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  414.847181][ T8024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  414.865886][ T8024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  414.882883][ T8024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  414.895489][ T8024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  414.909951][ T8024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  414.938925][ T8024] batman_adv: batadv0: Interface activated: batadv_slave_1
[  414.988271][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  414.991466][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  415.019717][ T8024] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  415.035866][ T8024] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  415.051812][ T8024] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  415.054311][ T8024] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  415.361922][ T4490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  415.364637][ T4490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  415.419017][  T638] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  415.636609][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  416.416181][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  416.424568][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  416.566184][ T8300] loop5: detected capacity change from 0 to 1764
[  416.885344][ T8316] cgroup: fork rejected by pids controller in /syz5
[  417.057491][ T8324] loop8: detected capacity change from 0 to 512
[  417.140803][ T8324] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  417.161818][ T8324] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  417.164323][ T8324] System zones: 1-12
[  417.179292][ T8324] EXT4-fs (loop8): 1 truncate cleaned up
[  417.181164][ T8324] EXT4-fs (loop8): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,jqfmt=vfsold,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback.
[  418.827238][ T8346] netlink: 'syz.3.961': attribute type 39 has an invalid length.
[  418.899670][ T8351] loop6: detected capacity change from 0 to 512
[  418.932261][ T8354] loop8: detected capacity change from 0 to 512
[  418.979898][ T8351] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  419.137815][ T8354] EXT4-fs (loop8): 1 truncate cleaned up
[  419.145346][ T8354] EXT4-fs (loop8): mounted filesystem without journal. Opts: discard,,errors=continue. Quota mode: none.
[  419.200414][ T4494] device hsr_slave_0 left promiscuous mode
[  419.248573][ T4494] device hsr_slave_1 left promiscuous mode
[  419.318348][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  419.321171][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_0
[  419.323851][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  419.329770][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_1
[  419.342280][ T8373] loop6: detected capacity change from 0 to 512
[  419.363139][ T4494] device bridge_slave_1 left promiscuous mode
[  419.365080][ T4494] bridge0: port 2(bridge_slave_1) entered disabled state
[  419.373481][ T8373] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  419.410219][ T4494] device bridge_slave_0 left promiscuous mode
[  419.412118][ T4494] bridge0: port 1(bridge_slave_0) entered disabled state
[  419.413899][ T8373] EXT4-fs (loop6): 1 truncate cleaned up
[  419.415727][ T8373] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback.
[  419.568374][ T4494] device veth1_macvtap left promiscuous mode
[  419.570178][ T4494] device veth0_macvtap left promiscuous mode
[  419.572303][ T4494] device veth1_vlan left promiscuous mode
[  419.574168][ T4494] device veth0_vlan left promiscuous mode
[  419.657721][ T8376] loop8: detected capacity change from 0 to 32768
[  419.741643][ T8376] ocfs2: Mounting device (7,8) on (node local, slot 0) with writeback data mode.
[  419.866749][ T8376] 
[  419.867474][ T8376] ======================================================
[  419.869450][ T8376] WARNING: possible circular locking dependency detected
[  419.871418][ T8376] 5.15.185-syzkaller #0 Not tainted
[  419.872910][ T8376] ------------------------------------------------------
[  419.874813][ T8376] syz.8.968/8376 is trying to acquire lock:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  419.876507][ T8376] ffff0000e9b45be0 (&oi->ip_alloc_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb4/0x2d8
[  419.879663][ T8376] 
[  419.879663][ T8376] but task is already holding lock:
[  419.881657][ T8376] ffff0000e9b45c78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa8/0x2d8
[  419.884545][ T8376] 
[  419.884545][ T8376] which lock already depends on the new lock.
[  419.884545][ T8376] 
[  419.887468][ T8376] 
[  419.887468][ T8376] the existing dependency chain (in reverse order) is:
[  419.890047][ T8376] 
[  419.890047][ T8376] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}:
[  419.892286][ T8376]        down_read+0xc0/0x390
[  419.893715][ T8376]        ocfs2_init_acl+0x260/0x604
[  419.895176][ T8376]        ocfs2_mknod+0x114c/0x1e88
[  419.896553][ T8376]        ocfs2_create+0x180/0x468
[  419.898015][ T8376]        path_openat+0x1144/0x26e4
[  419.899489][ T8376]        do_filp_open+0x164/0x330
[  419.900883][ T8376]        do_sys_openat2+0x128/0x3d8
[  419.902312][ T8376]        __arm64_sys_openat+0x120/0x154
[  419.903979][ T8376]        invoke_syscall+0x98/0x2b8
[  419.905298][ T8376]        el0_svc_common+0x138/0x258
[  419.906790][ T8376]        do_el0_svc+0x58/0x14c
[  419.908115][ T8376]        el0_svc+0x78/0x1e0
[  419.909437][ T8376]        el0t_64_sync_handler+0xcc/0xe4
[  419.910999][ T8376]        el0t_64_sync+0x1a0/0x1a4
[  419.912385][ T8376] 
[  419.912385][ T8376] -> #3 (jbd2_handle){++++}-{0:0}:
[  419.914529][ T8376]        start_this_handle+0xef4/0x11a4
[  419.916077][ T8376]        jbd2__journal_start+0x28c/0x744
[  419.917663][ T8376]        jbd2_journal_start+0x3c/0x4c
[  419.919213][ T8376]        ocfs2_start_trans+0x43c/0x794
[  419.920748][ T8376]        ocfs2_mknod+0xc60/0x1e88
[  419.922183][ T8376]        ocfs2_create+0x180/0x468
[  419.923530][ T8376]        path_openat+0x1144/0x26e4
[  419.924935][ T8376]        do_filp_open+0x164/0x330
[  419.926315][ T8376]        do_sys_openat2+0x128/0x3d8
[  419.927804][ T8376]        __arm64_sys_openat+0x120/0x154
[  419.929262][ T8376]        invoke_syscall+0x98/0x2b8
[  419.930763][ T8376]        el0_svc_common+0x138/0x258
[  419.932191][ T8376]        do_el0_svc+0x58/0x14c
[  419.933607][ T8376]        el0_svc+0x78/0x1e0
[  419.934893][ T8376]        el0t_64_sync_handler+0xcc/0xe4
[  419.936358][ T8376]        el0t_64_sync+0x1a0/0x1a4
[  419.937778][ T8376] 
[  419.937778][ T8376] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  419.940143][ T8376]        down_read+0xc0/0x390
[  419.941468][ T8376]        ocfs2_start_trans+0x430/0x794
[  419.942983][ T8376]        ocfs2_mknod+0xc60/0x1e88
[  419.944422][ T8376]        ocfs2_create+0x180/0x468
[  419.945891][ T8376]        path_openat+0x1144/0x26e4
[  419.947269][ T8376]        do_filp_open+0x164/0x330
[  419.948716][ T8376]        do_sys_openat2+0x128/0x3d8
[  419.950353][ T8376]        __arm64_sys_openat+0x120/0x154
[  419.951892][ T8376]        invoke_syscall+0x98/0x2b8
[  419.953414][ T8376]        el0_svc_common+0x138/0x258
[  419.954841][ T8376]        do_el0_svc+0x58/0x14c
[  419.956222][ T8376]        el0_svc+0x78/0x1e0
[  419.957534][ T8376]        el0t_64_sync_handler+0xcc/0xe4
[  419.959165][ T8376]        el0t_64_sync+0x1a0/0x1a4
[  419.960575][ T8376] 
[  419.960575][ T8376] -> #1 (sb_internal#2){.+.+}-{0:0}:
[  419.962684][ T8376]        lock_release+0x2e8/0x8e8
[  419.964110][ T8376]        up_write+0x98/0x644
[  419.965402][ T8376]        ocfs2_free_alloc_context+0x94/0x188
[  419.967045][ T8376]        ocfs2_write_begin_nolock+0x36e4/0x3764
[  419.968898][ T8376]        ocfs2_write_begin+0x1b4/0x30c
[  419.970377][ T8376]        generic_perform_write+0x204/0x480
[  419.971974][ T8376]        __generic_file_write_iter+0x23c/0x454
[  419.973724][ T8376]        ocfs2_file_write_iter+0x12e0/0x1b84
[  419.975357][ T8376]        vfs_write+0x7c8/0xa2c
[  419.976790][ T8376]        ksys_write+0x120/0x210
[  419.978213][ T8376]        __arm64_sys_write+0x7c/0x90
[  419.979677][ T8376]        invoke_syscall+0x98/0x2b8
[  419.981104][ T8376]        el0_svc_common+0x138/0x258
[  419.982769][ T8376]        do_el0_svc+0x58/0x14c
[  419.984132][ T8376]        el0_svc+0x78/0x1e0
[  419.985389][ T8376]        el0t_64_sync_handler+0xcc/0xe4
[  419.987036][ T8376]        el0t_64_sync+0x1a0/0x1a4
[  419.988492][ T8376] 
[  419.988492][ T8376] -> #0 (&oi->ip_alloc_sem){++++}-{3:3}:
[  419.990772][ T8376]        __lock_acquire+0x2928/0x651c
[  419.992248][ T8376]        lock_acquire+0x1f4/0x620
[  419.993663][ T8376]        down_write+0xbc/0x12c
[  419.995039][ T8376]        ocfs2_try_remove_refcount_tree+0xb4/0x2d8
[  419.996876][ T8376]        ocfs2_truncate_file+0xca8/0x1374
[  419.998471][ T8376]        ocfs2_setattr+0x10ac/0x16c4
[  419.999916][ T8376]        notify_change+0xa08/0xcd8
[  420.001383][ T8376]        do_truncate+0x178/0x1f0
[  420.002758][ T8376]        path_openat+0x211c/0x26e4
[  420.004258][ T8376]        do_filp_open+0x164/0x330
[  420.005628][ T8376]        do_sys_openat2+0x128/0x3d8
[  420.007071][ T8376]        __arm64_sys_openat+0x120/0x154
[  420.008628][ T8376]        invoke_syscall+0x98/0x2b8
[  420.010072][ T8376]        el0_svc_common+0x138/0x258
[  420.011570][ T8376]        do_el0_svc+0x58/0x14c
[  420.012897][ T8376]        el0_svc+0x78/0x1e0
[  420.014204][ T8376]        el0t_64_sync_handler+0xcc/0xe4
[  420.015777][ T8376]        el0t_64_sync+0x1a0/0x1a4
[  420.017193][ T8376] 
[  420.017193][ T8376] other info that might help us debug this:
[  420.017193][ T8376] 
[  420.020129][ T8376] Chain exists of:
[  420.020129][ T8376]   &oi->ip_alloc_sem --> jbd2_handle --> &oi->ip_xattr_sem
[  420.020129][ T8376] 
[  420.023922][ T8376]  Possible unsafe locking scenario:
[  420.023922][ T8376] 
[  420.026007][ T8376]        CPU0                    CPU1
[  420.027558][ T8376]        ----                    ----
[  420.029102][ T8376]   lock(&oi->ip_xattr_sem);
[  420.030382][ T8376]                                lock(jbd2_handle);
[  420.032300][ T8376]                                lock(&oi->ip_xattr_sem);
[  420.034328][ T8376]   lock(&oi->ip_alloc_sem);
[  420.035658][ T8376] 
[  420.035658][ T8376]  *** DEADLOCK ***
[  420.035658][ T8376] 
[  420.037995][ T8376] 3 locks held by syz.8.968/8376:
[  420.039378][ T8376]  #0: ffff0000f4842460 (sb_writers#15){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c
[  420.042114][ T8376]  #1: ffff0000e9b45f48 (&sb->s_type->i_mutex_key#22){+.+.}-{3:3}, at: do_truncate+0x164/0x1f0
[  420.045040][ T8376]  #2: ffff0000e9b45c78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa8/0x2d8
[  420.048247][ T8376] 
[  420.048247][ T8376] stack backtrace:
[  420.049800][ T8376] CPU: 1 PID: 8376 Comm: syz.8.968 Not tainted 5.15.185-syzkaller #0
[  420.052012][ T8376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  420.054837][ T8376] Call trace:
[  420.055790][ T8376]  dump_backtrace+0x0/0x43c
[  420.057047][ T8376]  show_stack+0x2c/0x3c
[  420.058142][ T8376]  __dump_stack+0x30/0x40
[  420.059375][ T8376]  dump_stack_lvl+0xf8/0x160
[  420.060689][ T8376]  dump_stack+0x1c/0x5c
[  420.061817][ T8376]  print_circular_bug+0x148/0x1b0
[  420.063271][ T8376]  check_noncircular+0x240/0x2d4
[  420.064716][ T8376]  __lock_acquire+0x2928/0x651c
[  420.066133][ T8376]  lock_acquire+0x1f4/0x620
[  420.067347][ T8376]  down_write+0xbc/0x12c
[  420.068528][ T8376]  ocfs2_try_remove_refcount_tree+0xb4/0x2d8
[  420.070203][ T8376]  ocfs2_truncate_file+0xca8/0x1374
[  420.071655][ T8376]  ocfs2_setattr+0x10ac/0x16c4
[  420.073022][ T8376]  notify_change+0xa08/0xcd8
[  420.074290][ T8376]  do_truncate+0x178/0x1f0
[  420.075535][ T8376]  path_openat+0x211c/0x26e4
[  420.076831][ T8376]  do_filp_open+0x164/0x330
[  420.078069][ T8376]  do_sys_openat2+0x128/0x3d8
[  420.079369][ T8376]  __arm64_sys_openat+0x120/0x154
[  420.080821][ T8376]  invoke_syscall+0x98/0x2b8
[  420.082145][ T8376]  el0_svc_common+0x138/0x258
[  420.083518][ T8376]  do_el0_svc+0x58/0x14c
[  420.084687][ T8376]  el0_svc+0x78/0x1e0
[  420.085863][ T8376]  el0t_64_sync_handler+0xcc/0xe4
[  420.087346][ T8376]  el0t_64_sync+0x1a0/0x1a4
[  420.237447][ T4494] team0 (unregistering): Port device team_slave_1 removed
[  420.248270][ T4494] team0 (unregistering): Port device team_slave_0 removed
[  420.254199][ T4494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  420.303954][ T4494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  420.433051][ T4494] bond0 (unregistering): Released all slaves
[  420.815710][ T8376] ocfs2: Unmounting device (7,8) on (node local)
[  422.344928][ T4494] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.402853][ T4494] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.442966][ T4494] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.483819][ T4494] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.637575][ T4494] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.692948][ T4494] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.723200][ T4494] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.753151][ T4494] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.936209][ T4494] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.972683][ T4494] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.018509][ T4494] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.073554][ T4494] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.572787][ T4494] device hsr_slave_0 left promiscuous mode
[  426.621870][ T4494] device hsr_slave_1 left promiscuous mode
[  426.708394][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  426.710540][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_0
[  426.713319][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  426.715568][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_1
[  426.718704][ T4494] device bridge_slave_1 left promiscuous mode
[  426.720486][ T4494] bridge0: port 2(bridge_slave_1) entered disabled state
[  426.768984][ T4494] device bridge_slave_0 left promiscuous mode
[  426.770810][ T4494] bridge0: port 1(bridge_slave_0) entered disabled state
[  426.821095][ T4494] device hsr_slave_0 left promiscuous mode
[  426.858372][ T4494] device hsr_slave_1 left promiscuous mode
[  426.948319][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  426.950392][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_0
[  426.953781][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  426.956341][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_1
[  426.958956][ T4494] device bridge_slave_1 left promiscuous mode
[  426.960751][ T4494] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.008995][ T4494] device bridge_slave_0 left promiscuous mode
[  427.010809][ T4494] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.053523][ T4494] device hsr_slave_0 left promiscuous mode
[  427.098364][ T4494] device hsr_slave_1 left promiscuous mode
[  427.188396][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  427.190467][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_0
[  427.193346][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  427.195520][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_1
[  427.197860][ T4494] device bridge_slave_1 left promiscuous mode
[  427.199726][ T4494] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.249411][ T4494] device bridge_slave_0 left promiscuous mode
[  427.251268][ T4494] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.398527][ T4494] device veth1_macvtap left promiscuous mode
[  427.400207][ T4494] device veth0_macvtap left promiscuous mode
[  427.401857][ T4494] device veth1_vlan left promiscuous mode
[  427.403510][ T4494] device veth0_vlan left promiscuous mode
[  427.498384][ T4494] device veth1_macvtap left promiscuous mode
[  427.500175][ T4494] device veth0_macvtap left promiscuous mode
[  427.501869][ T4494] device veth1_vlan left promiscuous mode
[  427.503419][ T4494] device veth0_vlan left promiscuous mode
[  427.506582][ T4494] device bridge0 left promiscuous mode
[  427.598466][ T4494] device veth1_macvtap left promiscuous mode
[  427.600300][ T4494] device veth0_macvtap left promiscuous mode
[  427.602242][ T4494] device veth1_vlan left promiscuous mode
[  427.604002][ T4494] device veth0_vlan left promiscuous mode
[  427.986878][ T4494] team0 (unregistering): Port device team_slave_1 removed
[  427.994634][ T4494] team0 (unregistering): Port device team_slave_0 removed
[  428.000489][ T4494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  428.034577][ T4494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  428.163986][ T4494] bond0 (unregistering): Released all slaves
[  428.331617][ T4494] team0 (unregistering): Port device team_slave_1 removed
[  428.337849][ T4494] team0 (unregistering): Port device team_slave_0 removed
[  428.347322][ T4494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  428.382914][ T4494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  428.514324][ T4494] bond0 (unregistering): Released all slaves
[  428.673570][ T4494] team0 (unregistering): Port device team_slave_1 removed
[  428.681624][ T4494] team0 (unregistering): Port device team_slave_0 removed
[  428.687850][ T4494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  428.732971][ T4494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  428.863041][ T4494] bond0 (unregistering): Released all slaves