last executing test programs:

1m58.523965852s ago: executing program 1 (id=1230):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000002b40), r2)
sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f0000000000)=""/4087, 0x0)
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_ADDRFORM(r4, 0x3a, 0x1, 0x0, 0x30)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}, {0x2, 0x4e24, @empty}, 0x2a0})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r7, 0x0, 0x0}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r8, &(0x7f0000000040)="0d000000010001", 0x7)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000001000), &(0x7f0000001040)=0x4)
sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000440)={0x11, 0x86dd, r6, 0x1, 0x4, 0x6, @local}, 0x14)
pwrite64(0xffffffffffffffff, &(0x7f0000000200)="ad063c3fb584acc8acb9ade0f441bf546b71c62bb73913949f3e39e0f0043b73e1f74ce0c97b5099628f74b99f862387368e28e9d934c59f133680c00be5228d", 0x40, 0x5)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, 0x0)
sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000100001040000020000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYRESOCT=r9, @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0xad724fc17f5eaadc}, 0x4054)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0xe5, &(0x7f00000001c0)=[{}], 0x8, 0x0, 0x0, &(0x7f0000000240), 0x8, 0xe3, 0x8, 0x8, &(0x7f0000000280)}}, 0x10)

1m55.811409647s ago: executing program 1 (id=1233):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc)

1m55.320137428s ago: executing program 1 (id=1237):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@min_batch_time={'min_batch_time', 0x3d, 0xc555}}, {@oldalloc}]}, 0x3, 0x577, &(0x7f0000000640)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
write(r1, &(0x7f0000000680)="c0", 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000540)={@id={0x2, 0x0, @a}})

1m54.293412563s ago: executing program 1 (id=1249):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x4af, &(0x7f0000000ec0)="$eJzs3c1rXFUbAPBnZpo0SfO+/XhfpK1oCxXqB83kA22iblypi4pYcKNQYzKNNZNMyExqE7pIddeFC1EURMG9f4Ebu7II4lr34kIqWiOoIIzMnZk2XxMHm2Yk9/eD2zn3ntt5zsnwHO6ce+/cAFLreO2fTER/RHwdEfvrq2t3OF5/Wbl5eaK2ZKJaPftTJtmvtt7ctfn/9kXEckT0RMQLT0e8mtkYt7y4ND1eLBbmG+v5ysxcvry4dOrCzPhUYaowOzR6emxsdHBkeGzb+nr17devnvns2e5Pf3vrxvV3vvi81qz+Rt3qfmynete74uCqbXsi4sm7EawDco3+9Ha6Ifwjtc/vfxFxIsn//ZFLPk0gDarVavXP6t5W1ctVYNfKJsfAmexARNTL2ezAQP0Y/v/Rly2WypVHzpcWZifrx8oHoit7/kKxMNj4rnAgujK19aGkfHt9eN36SERyDPxurjdZH5goFSd3dqgD1tm3Lv9/zdXzH0gJX/khveQ/pJf8h/SS/5Be8h/SS/5Desl/SC/5D+kl/yG95D+kl/yHVHr+zJnaUm3e/z55cXFhunTx1GShPD0wszAxMFGanxuYKpWmknt2Zv7u/Yql0tzQo7FwKV8plCv58uLSuZnSwmzlXHJf/7lC1470CmjHwWPXvs1ExPLjvclS092ok6uwu1Wrmej0PchAZ+Q6PQABHWPqD9LLd3xgk5/oXaOnVcXc9rcF2BnZTjcA6JiTR5z/g7Qy/w/pZf4f0is5xu/udCuATjL/D+lj/h/Sq7/F87/+s+rZXYMR8d+I+CbXtbf5rC9gN8j+kGkc/5/c/0D/+truzO/JKYLuiHjjw7PvXxqvVOaHatt/vrW98kFj+3An2g+0q5mnzTwGANJr5eblieayk3F/fKp+EcLG+Hsac5M9yTnKvpXMmmsVMtt07cLylYg4vFn8TON55/UzH30ruQ3xDzVeM/W3SNq7J3lu+s7EP7Iq/v2r4h+9478KpMO12vgzuFn+ZZOcjlv5t3b86d+m66Nbj3/ZW+NfrsX4d6zNGK999Ob3LeNfiTi6afxmvJ4k1vr4tbadbDP+jZdfvKdVXfWT+vtsFr+pVspXZubyz3382H3J78hNFWaHRk+PjY0OjgyP5ZM56nxzpnqjJw5/dX2r/ve1iL9V/2vbHmqz/3/c++VLx7eI/+CJzT//Q1vE742Ih9uM/8vwd6+0qqvFn2zR/+wW8WvbRtqMX37vmb1t7goA7IDy4tL0eLFYmFe4g0LPv6MZCgrbVuj0yATcbbeTvtMtAQAAAAAAAAAAANq1E5cTd7qPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC7wV8BAAD//71J1Zs=")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x5c)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}})
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18)

1m52.677062381s ago: executing program 1 (id=1257):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="02000000040000000100000009"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfb, 0x60006000, 0x0, 0x77, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)

1m52.360031838s ago: executing program 1 (id=1259):
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000740)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000b40)={0x0, "3b7e0f219fe6718411c8bd9f11cae160"})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x8050)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000028120700080004008100000008001b00000000005a7c57416c13451f116694"], 0x30}}, 0x4004090)

1m51.967289438s ago: executing program 32 (id=1259):
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000740)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000b40)={0x0, "3b7e0f219fe6718411c8bd9f11cae160"})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x8050)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000028120700080004008100000008001b00000000005a7c57416c13451f116694"], 0x30}}, 0x4004090)

24.90804356s ago: executing program 3 (id=1577):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010023010000340200000f0000001c0007800c0003"], 0x30}}, 0x0)

22.520043256s ago: executing program 3 (id=1583):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000060000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000080)=ANY=[@ANYRES8=r1], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000))

22.191976194s ago: executing program 3 (id=1587):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='tracefs\x00', &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0)
write(r2, &(0x7f0000000100)='bRequestType=0 bRequest=6 wValue=0 wIndex=0 wLength', 0x33)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0)
read(r3, &(0x7f0000000180), 0x1000)

20.071124684s ago: executing program 3 (id=1593):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x4af, &(0x7f0000000ec0)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x5c)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}})
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18)

19.42493267s ago: executing program 3 (id=1594):
r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7)
close(r0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', <r3=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r3}, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000ec0), r0)

15.999452961s ago: executing program 3 (id=1603):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='tracefs\x00', &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0)
write(r2, &(0x7f0000000100)='bRequestType=0 bRequest=6 wValue=0 wIndex=0 wLength', 0x33)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0)
read(r3, &(0x7f0000000180), 0x1000)

15.528346162s ago: executing program 33 (id=1603):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='tracefs\x00', &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0)
write(r2, &(0x7f0000000100)='bRequestType=0 bRequest=6 wValue=0 wIndex=0 wLength', 0x33)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0)
read(r3, &(0x7f0000000180), 0x1000)

8.541466808s ago: executing program 4 (id=1630):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1, 0x6, 0xa00, 0x3, 0xffffffff, 0x20102}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x7fffffff, 0x155}}]}}}]}, 0x58}}, 0x4000080)
bind$packet(r0, &(0x7f00000001c0)={0x11, 0x5, r3, 0x1, 0x0, 0x6, @local}, 0x14)
sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)

6.980112934s ago: executing program 4 (id=1632):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f0000000240)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@sysvgroups}, {@nodioread_nolock}, {@nodelalloc}, {@resuid}, {@errors_remount}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, 0x0, 0x0)

6.924788166s ago: executing program 0 (id=1633):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0xa041, 0x0)
write$vga_arbiter(r0, 0x0, 0x3f00)

6.738272111s ago: executing program 0 (id=1636):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2000d4, &(0x7f0000000040)={[{@jqfmt_vfsold}, {@block_validity}]}, 0x1, 0x243, &(0x7f0000000840)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000200)={0x9, 0x7fffffffffffffff, 0x0, 0x4})

6.256047131s ago: executing program 4 (id=1638):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0)

6.175846273s ago: executing program 0 (id=1640):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f00000000c0)="02", 0x500, 0x4)

5.87655933s ago: executing program 4 (id=1642):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)={{0x14}, [], {0x14}}, 0x28}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
syz_emit_ethernet(0x3a, &(0x7f0000000f00)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004b00002c00ecb4ae5969e3d94fe900000000739078ac1414bbac141436861500000000070f3332432bd3028c"], 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000180)={<r6=>r3, 0x1, 0x9, 0x3})
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000200)={0x5, 0x3, 0x7, 0x9}, 0x8)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000300)={'wg2\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x15}})
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_netdev_private(r6, 0x89f2, &(0x7f0000000600)="4f48d732ae00634300eae94367625e86898ee87a59ac88ce27653ffb004c755e8f80d6f49b6e1d8c36625fb1827b95cd06d06c237b48f69451575f41a7280d9d282561389ed16430e557f3ef3b5dec00cb1f2f2aa330a0e2afa7052eac65dc16bfcb8d4f97d69e434bd452d6fa6c386a7e42187ca3284100b827379c7c5626ba526e98a08fbf7a2d5d878ce80546a57be2a56f779b4301c46491308dab79ed")
r9 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
sendto$packet(r8, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610c", 0x25, 0x40, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c010000100001040000000000000000000000000001000000000000000000010000000000020000000000000000000112341234000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d23300000000000000000000000000000000000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001400686d616328736861312900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000"], 0x13c}}, 0x0)
r10 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r10, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00'], 0x8)
sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c)

5.663869136s ago: executing program 0 (id=1644):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r4, {0xffff, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x3, 0x3ff, 0x2, 0x7, 0xfffffff7, 0x7, 0x2a3c14c8, 0x2, 0x140, 0x9cd0, 0x78e, 0x8, 0x9, 0x2, 0x80000000, 0x5, 0x80000000, 0x9, 0x6, 0xfff, 0x27, 0x52a67a94, 0xf, 0x1, 0x4, 0xfffffffe, 0x6, 0x0, 0xfffffffe, 0x800, 0x7, 0xffffffff, 0xffffffad, 0x8, 0x68, 0x0, 0x10000, 0x7ff, 0x7, 0xffffff64, 0x4, 0x9, 0x7, 0x5, 0x14000003, 0xffff, 0x2, 0x1ff, 0x4, 0xffff5edc, 0x8, 0x4, 0x81, 0x5, 0x94c, 0x1cf, 0x10000000, 0x3, 0x6, 0xfffffffb, 0x1, 0x2, 0x7, 0x1, 0x6, 0x0, 0xa, 0xf43, 0xa, 0x4, 0x5, 0x1, 0x8000, 0x3ff, 0x100, 0x2, 0x2, 0x8, 0x0, 0x24000000, 0x4, 0x80000000, 0x6, 0xac5, 0x9, 0xffb, 0x2, 0x67, 0xa, 0x9, 0x5, 0x7fffffff, 0xfffffff8, 0x86, 0x0, 0x0, 0x8ac7, 0x5, 0x78, 0x8000, 0xc, 0x6, 0x400, 0x20, 0x5, 0xffffffdf, 0x389, 0x3, 0x1e800000, 0x80000001, 0x4a, 0xff, 0x2, 0x3, 0x1ff, 0x9, 0x4, 0x6, 0x2, 0x7, 0x8001, 0x2, 0x263, 0xb, 0x8, 0x6, 0x6, 0x9, 0x6, 0xa, 0x13d, 0x209, 0x3fed, 0x2, 0x1, 0x2, 0x101, 0xffffffff, 0x7, 0x240, 0x4, 0x5, 0x2, 0xfffffffb, 0x1, 0x800, 0x7ffffffb, 0x8fc, 0x2, 0x68a4, 0x600000, 0x6, 0x4, 0x8, 0x4, 0x37, 0xa, 0x9, 0x3, 0x5, 0x8, 0x100, 0x7, 0xfe, 0x6, 0x7, 0x7, 0x22c, 0x6, 0x3, 0x8, 0x9, 0xfffffffc, 0xd6, 0x4ad, 0x7, 0x9, 0x2, 0x0, 0x7e6, 0x54d6, 0x2, 0x5, 0x8, 0x1, 0xf32, 0xffff, 0xb2, 0x0, 0x6, 0x7, 0x8, 0x400001, 0x4, 0x7, 0x9, 0x9, 0x0, 0x7, 0x2, 0x4000004, 0x20000, 0x2, 0x80000000, 0x10000, 0xe, 0x6, 0x2, 0x4, 0x1000, 0x8, 0x9, 0x0, 0xe6, 0x2, 0x9, 0x4, 0x1, 0x4, 0x9, 0xff, 0x9, 0x9, 0xb, 0x3, 0x7fff, 0x200, 0x5, 0xca1, 0x7f, 0xe, 0x1, 0x1000, 0xfff, 0x5, 0x7, 0x0, 0x7, 0x40, 0x80000001, 0x1, 0x7, 0x6, 0x8, 0xe9375e5, 0x8cf5, 0x7, 0xdf0d, 0x2, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x10, 0xd, 0xd36, 0x4, 0x6bc, 0x80002, 0x7, 0xf, 0x800, 0x7, 0x7, 0xe7f, 0xffff, 0x7, 0x5, 0x1, 0xffffffff, 0x4, 0x909e, 0x89cd, 0xffffffff, 0x8, 0x9, 0x4, 0x5, 0x2, 0x8, 0x4, 0xf23, 0x3ff, 0x9, 0xa, 0x5, 0x0, 0xff, 0x7f, 0x4, 0x0, 0x3, 0x382, 0x40, 0x80, 0x8, 0x2, 0x4000005, 0x20002, 0x9, 0x4f, 0x4, 0x0, 0x7, 0x80000000, 0x80000001, 0x8000, 0x9e, 0xe4, 0x200000, 0x7fffffff, 0x5a, 0x9, 0xfffffff4, 0x4, 0x6, 0x6, 0x459, 0x2, 0xff, 0x14000000, 0x5f72, 0x3, 0x8, 0x7, 0x5, 0x0, 0x6, 0x0, 0x6, 0x1000, 0xffffffff, 0x101, 0x2, 0x5, 0x7, 0x9, 0x1000, 0xb, 0x3, 0xfbb4, 0x4a, 0x0, 0x7, 0x8, 0x9, 0x0, 0x7, 0x101, 0x0, 0x3ff, 0x5, 0x800, 0x7fffffff, 0x2, 0x1, 0x3, 0x4, 0x101, 0x5, 0x19, 0x6c, 0x4000009, 0x4, 0xceb6, 0x5, 0x7, 0x53c0, 0x6, 0x5, 0x9, 0x1, 0x9, 0x2, 0x7, 0x8, 0x3, 0x3ff, 0x18, 0x6, 0xffffff7b, 0x15ef7157, 0xfffffffc, 0x5, 0x2, 0x7, 0x7fffffff, 0xdb5, 0x1000, 0x800, 0x8, 0x80000000, 0x100, 0x7, 0x1, 0x40, 0x1000, 0x3, 0xfffffffb, 0x5270e9b, 0x5, 0x7f, 0xb, 0x40, 0x9, 0x3, 0x0, 0x9, 0xb, 0x7, 0x1, 0x7, 0x3, 0x9, 0x0, 0xfe23, 0x6, 0x5, 0x8, 0xffffff7f, 0x3, 0xd, 0x80, 0x4, 0x9, 0x4, 0xff, 0x8001, 0x79, 0x40, 0x72e, 0x5c, 0x1, 0xb0, 0x6, 0x8, 0x9, 0x0, 0x80000001, 0x8, 0x4, 0x4, 0x200, 0x1, 0x1, 0x59ac, 0xebd7, 0x7, 0x10008, 0x4, 0x100, 0x0, 0x7, 0x138, 0x1, 0x8, 0xcb18, 0x0, 0xb, 0x5, 0xe489, 0x8, 0x5, 0x6, 0x56, 0x1800000, 0x80000000, 0xc4800000, 0x4251, 0x7fff, 0x8001, 0x6, 0x7, 0x5, 0x3, 0x4, 0x371, 0xaa67, 0x2, 0x0, 0x10, 0x8, 0x5a5, 0x400, 0x0, 0xfffeffff, 0xf, 0x8, 0x9, 0xc2b3, 0x0, 0x7fffffff, 0xfffffffa, 0x9, 0x3ff, 0x6, 0x7, 0x5, 0x7, 0x4, 0xc, 0x9, 0x1, 0x0, 0x10000, 0x4, 0x4, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x6, 0x4d2, 0x0, {0x8, 0x2, 0xa, 0x8, 0x8, 0x9}, {0x4, 0x0, 0xa380, 0x7ff, 0x5, 0x7d487c2b}, 0x9, 0x15f}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000300)=@xdp={0x2c, 0x0, 0x0, 0x3d}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1, 0x0, 0x0, 0x1c}, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r7=>0x0})
sendto$packet(r6, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)

5.576707178s ago: executing program 2 (id=1646):
r0 = syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d000009058202000400"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x5, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x810)

5.47910212s ago: executing program 4 (id=1647):
r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7)
close(r0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', <r3=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r3}, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000ec0), r0)

4.738662498s ago: executing program 5 (id=1649):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

4.63251306s ago: executing program 5 (id=1650):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000140)={[{@nodioread_nolock}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@test_dummy_encryption}, {@barrier}, {@norecovery}, {@acl}, {@usrquota}, {@noinit_itable}]}, 0x1, 0xbdb, &(0x7f00000023c0)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xedafb000)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
close(r0)
mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x208c828, &(0x7f0000000140)='usrjquota=')

4.274807349s ago: executing program 2 (id=1651):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES16=r2, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0)

4.145932302s ago: executing program 2 (id=1652):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0)
keyctl$link(0x8, r1, r1)
r2 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2})
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1a82, 0x0)
sigaltstack(0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00')
lseek(r3, 0x2, 0x0)
r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r8=>0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
syz_ublk_setup_queues(r10, r8, &(0x7f00000003c0)={0x0, 0x40767a, 0x0, 0x7ffffffb, 0x257, 0x0, r10}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x144, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a4f, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff, 0x0, r10}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000fc0))

3.310933761s ago: executing program 5 (id=1653):
sched_setscheduler(0x0, 0x2, 0x0)
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)

3.133806766s ago: executing program 2 (id=1654):
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x2, 0x3e0, 0x1f8, 0x2f8, 0x1f8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vxcan1\x00', 'nr0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @broadcast}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dcbc4f0fcafe5fd600342efa7968d220b64d039e8a81d171eeb2e9630554"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c982", 0x68}, {0x0}], 0x2)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r3, &(0x7f00000023c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000002c0)='G', 0x1}], 0x1}}], 0x1, 0x880)
shutdown(r3, 0x1)
ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000500)={0xede, 0x10d1})
listen(r3, 0x9)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
socket$kcm(0x2, 0xa, 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x8, 0x3, 0x5a0, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4d0, 0xffffffff, 0xffffffff, 0x4d0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x21, 0x3, 0x5, 0x5}, 0x0, 0x2f0, 0x310, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'bond_slave_0\x00', {0x0, 0x0, 0x9, 0x0, 0xffff4c47, 0x3ff, 0x101, 0x8, 0x18}, {0x6}}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r4, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)}], 0x2}}], 0x4, 0x4000000)
r6 = socket$inet6(0xa, 0x3, 0x8)
ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0})
setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)

2.778776364s ago: executing program 5 (id=1655):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000060000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000080)=ANY=[@ANYRES8=r1], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000))

2.556608829s ago: executing program 5 (id=1656):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)={{0x14}, [], {0x14}}, 0x28}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
syz_emit_ethernet(0x3a, &(0x7f0000000f00)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004b00002c00ecb4ae5969e3d94fe900000000739078ac1414bbac141436861500000000070f3332432bd3028c"], 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000180)={<r6=>r3, 0x1, 0x9, 0x3})
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000200)={0x5, 0x3, 0x7, 0x9}, 0x8)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000300)={'wg2\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x15}})
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_netdev_private(r6, 0x89f2, &(0x7f0000000600)="4f48d732ae00634300eae94367625e86898ee87a59ac88ce27653ffb004c755e8f80d6f49b6e1d8c36625fb1827b95cd06d06c237b48f69451575f41a7280d9d282561389ed16430e557f3ef3b5dec00cb1f2f2aa330a0e2afa7052eac65dc16bfcb8d4f97d69e434bd452d6fa6c386a7e42187ca3284100b827379c7c5626ba526e98a08fbf7a2d5d878ce80546a57be2a56f779b4301c46491308dab79ed")
r9 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
sendto$packet(r8, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x40, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c010000100001040000000000000000000000000001000000000000000000010000000000020000000000000000000112341234000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d23300000000000000000000000000000000000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001400686d616328736861312900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000"], 0x13c}}, 0x0)
r10 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r10, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00'], 0x8)
sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c)

1.233953251s ago: executing program 4 (id=1657):
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c00000010003704030000000300000000000000", @ANYRES32=r1, @ANYBLOB="0b1b0500000000005c0012800b00010069703667726500004c0002800800", @ANYRES32=r1, @ANYBLOB="14000600fe8000000000000000000000000000bb14000700fe"], 0x7c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)

1.202007321s ago: executing program 2 (id=1658):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x24, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={0x0}, 0x1, 0x0, 0x0, 0x4000081}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
poll(0x0, 0x0, 0x10001)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f000000000000005504000001ed0a002500000017ffffff4c040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x48)
close(0x3)

1.198033742s ago: executing program 0 (id=1659):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

1.099168933s ago: executing program 5 (id=1660):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x62, 0x200002000001, 0x1, 0x2004c4, 0x0, 0x4000, 0xf, 0x5, 0x40, 0x3, 0x9, 0x6, 0xf73c], 0x80a0000, 0x40})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

944.000997ms ago: executing program 0 (id=1661):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES16=r2, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0)

0s ago: executing program 2 (id=1662):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x84, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @loopback, [], [], 'veth1\x00', 'wlan1\x00', {}, {0x1fe}}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "4199fc6505f93cb13d0617f57700e5dba5afc775234fe52cca718b1ef125"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328)
socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0xfffe, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @remote}}}, 0x32)
connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x4, 0x0, 0x1, 0x0, {0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00', 0x6}}}, 0x3a)

kernel console output (not intermixed with test programs):

71] netlink: 40 bytes leftover after parsing attributes in process `syz.4.543'.
[  181.521694][ T6077] loop4: detected capacity change from 0 to 1024
[  181.556607][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  181.564933][ T6077] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  181.601522][   T27] audit: type=1800 audit(1786494642.697:6): pid=6077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.544" name="file1" dev="loop4" ino=15 res=0 errno=0
[  181.696552][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  181.721799][ T4281] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  181.844957][ T6081] loop3: detected capacity change from 0 to 1024
[  181.869231][ T6081] EXT4-fs: Ignoring removed oldalloc option
[  181.900487][ T6081] EXT4-fs: Ignoring removed orlov option
[  181.921805][ T4281] usb 1-1: Using ep0 maxpacket: 32
[  181.976522][ T6081] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  182.053164][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.548'.
[  182.165476][ T6089] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  182.223598][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  182.702586][ T6109] netlink: 40 bytes leftover after parsing attributes in process `syz.3.554'.
[  182.966395][ T6111] netlink: 'syz.2.558': attribute type 10 has an invalid length.
[  183.486073][ T6132] loop1: detected capacity change from 0 to 2048
[  183.550816][ T6132] Alternate GPT is invalid, using primary GPT.
[  183.560779][ T6132]  loop1: p1 p2 p3
[  184.007891][ T6148] netlink: 28 bytes leftover after parsing attributes in process `syz.3.570'.
[  184.021719][ T6149] netlink: 'syz.4.571': attribute type 10 has an invalid length.
[  184.236486][ T4281] usb 1-1: unable to get BOS descriptor or descriptor too short
[  184.276299][ T4281] usb 1-1: unable to read config index 0 descriptor/start: -71
[  184.338584][ T4281] usb 1-1: can't read configurations, error -71
[  185.101557][ T6160] team0: Device ipvlan2 failed to register rx_handler
[  185.387051][ T6177] netlink: 28 bytes leftover after parsing attributes in process `syz.0.582'.
[  185.456302][ T6181] netlink: 'syz.3.583': attribute type 10 has an invalid length.
[  186.117064][ T4320] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  186.311748][ T4320] usb 2-1: Using ep0 maxpacket: 32
[  186.335426][ T6212] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  186.413874][ T6212] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  186.455218][ T6212] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  186.515855][ T6212] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  186.562222][ T6212] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  186.624250][ T6212] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  186.672179][ T6212] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  187.176633][ T6221] netlink: 28 bytes leftover after parsing attributes in process `syz.4.595'.
[  188.939942][ T4320] usb 2-1: unable to get BOS descriptor or descriptor too short
[  188.991681][ T4320] usb 2-1: unable to read config index 0 descriptor/start: -71
[  188.999338][ T4320] usb 2-1: can't read configurations, error -71
[  189.225084][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.612'.
[  189.727449][ T6270] loop4: detected capacity change from 0 to 1764
[  190.343177][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.626'.
[  190.557299][ T4320] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  190.686444][ T6305] loop4: detected capacity change from 0 to 512
[  190.715719][ T6305] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  190.741952][ T4320] usb 4-1: Using ep0 maxpacket: 32
[  190.799545][ T6305] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.631: bad orphan inode 13
[  190.849288][ T6305] ext4_test_bit(bit=12, block=18) = 1
[  190.879719][ T6305] is_bad_inode(inode)=0
[  190.900017][ T6305] NEXT_ORPHAN(inode)=0
[  190.936674][ T6305] max_ino=32
[  190.951745][ T6305] i_nlink=1
[  190.955051][ T6305] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  191.074591][ T6305] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  191.165275][ T6314] netlink: 36 bytes leftover after parsing attributes in process `syz.1.634'.
[  191.172293][ T6305] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.631: bg 0: block 248: padding at end of block bitmap is not set
[  191.249812][ T6305] Quota error (device loop4): write_blk: dquota write failed
[  191.275818][ T6305] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  191.300656][ T6305] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.631: Failed to acquire dquot type 1
[  191.411774][ T6320] loop1: detected capacity change from 0 to 128
[  191.458699][ T6320] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  191.496922][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  191.515100][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'.
[  191.526639][ T6320] ext4 filesystem being mounted at /114/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  191.770086][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  192.080589][ T6334] xt_hashlimit: size too large, truncated to 1048576
[  192.393028][ T6345] netlink: 36 bytes leftover after parsing attributes in process `syz.2.646'.
[  192.429426][ T6338] netlink: 'syz.0.644': attribute type 11 has an invalid length.
[  192.813662][ T4426] bond0: (slave syz_tun): link status definitely down, disabling slave
[  193.180647][ T4320] usb 4-1: unable to get BOS descriptor or descriptor too short
[  193.205423][ T4320] usb 4-1: unable to read config index 0 descriptor/start: -71
[  193.225463][ T4320] usb 4-1: can't read configurations, error -71
[  194.531787][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'.
[  194.540656][ T6364] device syz_tun left promiscuous mode
[  194.870990][ T6374] hugetlbfs: syz.3.656 (6374): Using mlock ulimits for SHM_HUGETLB is obsolete
[  194.932269][ T6376] netlink: 36 bytes leftover after parsing attributes in process `syz.2.657'.
[  195.570043][ T6396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.664'.
[  195.585423][ T6396] device syz_tun left promiscuous mode
[  195.881851][ T4321] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  196.017651][ T6411] netlink: 36 bytes leftover after parsing attributes in process `syz.1.670'.
[  196.072285][ T4321] usb 4-1: Using ep0 maxpacket: 32
[  196.403360][ T6418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.673'.
[  196.529005][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.675'.
[  196.574942][ T6422] device syz_tun left promiscuous mode
[  196.649989][ T6424] netlink: 'syz.0.676': attribute type 10 has an invalid length.
[  196.678348][ T6424] device syz_tun entered promiscuous mode
[  197.146183][ T6439] netlink: 36 bytes leftover after parsing attributes in process `syz.0.682'.
[  197.781980][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  197.823607][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  197.906324][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  197.912846][ T6459] loop0: detected capacity change from 0 to 512
[  197.956646][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  197.981517][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  198.000902][ T6459] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  198.018027][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  198.027495][ T6459] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.042121][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  198.054286][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  198.095723][ T6454] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  198.116479][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.688'.
[  198.142772][ T6460] netlink: 'syz.4.689': attribute type 10 has an invalid length.
[  198.354990][ T4275] EXT4-fs (loop0): unmounting filesystem.
[  198.526600][ T6471] loop0: detected capacity change from 0 to 1024
[  198.629569][ T6471] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  198.695423][ T4321] usb 4-1: unable to get BOS descriptor or descriptor too short
[  198.721727][   T27] audit: type=1800 audit(1786494659.807:7): pid=6471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.694" name="file1" dev="loop0" ino=15 res=0 errno=0
[  198.733064][ T4321] usb 4-1: unable to read config index 0 descriptor/start: -71
[  198.765404][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.695'.
[  198.774497][ T6478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.695'.
[  198.809701][ T4321] usb 4-1: can't read configurations, error -71
[  199.080280][ T4275] EXT4-fs (loop0): unmounting filesystem.
[  199.202982][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.702'.
[  199.227422][ T6490] device syz_tun left promiscuous mode
[  199.250136][ T6492] netlink: 'syz.2.701': attribute type 10 has an invalid length.
[  199.314095][ T6492] device syz_tun entered promiscuous mode
[  199.469403][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  199.484317][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  199.616687][ T6506] device syzkaller0 entered promiscuous mode
[  199.949099][ T6518] loop4: detected capacity change from 0 to 1024
[  200.050272][ T6518] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  200.136457][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'.
[  200.145526][ T6528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.713'.
[  200.241671][   T26] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  200.378545][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  200.441695][   T26] usb 2-1: Using ep0 maxpacket: 32
[  200.606204][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.716'.
[  200.635410][ T6540] device syz_tun left promiscuous mode
[  200.651665][ T6539] netlink: 'syz.0.717': attribute type 10 has an invalid length.
[  201.542166][ T4279] Bluetooth: hci3: command 0x0406 tx timeout
[  201.548437][ T4279] Bluetooth: hci2: command 0x0406 tx timeout
[  201.557195][ T4288] Bluetooth: hci4: command 0x0406 tx timeout
[  201.564873][ T4285] Bluetooth: hci1: command 0x0406 tx timeout
[  202.275361][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.727'.
[  202.311827][ T6577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.727'.
[  202.386475][ T6581] netlink: 'syz.3.728': attribute type 16 has an invalid length.
[  202.465210][ T6583] netlink: 'syz.4.729': attribute type 10 has an invalid length.
[  202.497527][ T6583] device syz_tun entered promiscuous mode
[  202.747671][   T26] usb 2-1: unable to get BOS descriptor or descriptor too short
[  202.758573][   T26] usb 2-1: unable to read config index 0 descriptor/start: -71
[  202.792285][   T26] usb 2-1: can't read configurations, error -71
[  203.187313][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  203.239012][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  203.265118][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  203.282667][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  203.310889][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  203.340965][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  203.369212][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  203.762669][ T6625] loop0: detected capacity change from 0 to 512
[  203.772736][ T6625] EXT4-fs: Ignoring removed nobh option
[  203.784816][ T6623] netlink: 'syz.4.741': attribute type 16 has an invalid length.
[  203.821064][ T6625] EXT4-fs: Ignoring removed oldalloc option
[  203.831765][ T6623] device syz_tun left promiscuous mode
[  203.851077][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.742'.
[  203.894312][ T6626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.742'.
[  203.904129][ T6625] EXT4-fs: old and new quota format mixing
[  204.139457][ T6632] loop1: detected capacity change from 0 to 512
[  204.187148][ T6632] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  204.299813][ T6632] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  204.442526][ T6632] EXT4-fs (loop1): 1 truncate cleaned up
[  204.448300][ T6632] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  204.621715][   T26] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  204.716786][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  204.831833][   T26] usb 5-1: Using ep0 maxpacket: 32
[  205.819024][ T6661] mmap: syz.0.751 (6661) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  205.895054][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.755'.
[  205.930544][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.755'.
[  207.206029][   T26] usb 5-1: unable to get BOS descriptor or descriptor too short
[  207.223332][   T26] usb 5-1: unable to read config index 0 descriptor/start: -71
[  207.271725][   T26] usb 5-1: can't read configurations, error -71
[  207.859031][ T6689] loop4: detected capacity change from 0 to 1024
[  207.897211][ T6689] EXT4-fs: Ignoring removed oldalloc option
[  208.064326][ T6692] team0: Device ipvlan2 failed to register rx_handler
[  208.123942][ T6689] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  208.208912][   T27] audit: type=1804 audit(1786494669.307:8): pid=6689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.764" name="/newroot/150/file1/bus" dev="loop4" ino=18 res=1 errno=0
[  208.339846][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.767'.
[  208.352157][ T6698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.767'.
[  208.782801][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  208.978165][ T6716] autofs4:pid:6716:autofs_fill_super: called with bogus options
[  209.065418][ T6720] loop0: detected capacity change from 0 to 512
[  209.344629][ T6720] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  209.365704][ T6720] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  209.560057][ T4275] EXT4-fs (loop0): unmounting filesystem.
[  209.731628][ T6732] loop0: detected capacity change from 0 to 512
[  209.739972][ T6732] EXT4-fs: Ignoring removed nobh option
[  209.746386][ T6732] EXT4-fs: Ignoring removed oldalloc option
[  209.795818][ T6732] EXT4-fs: old and new quota format mixing
[  209.867246][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.782'.
[  209.921676][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.782'.
[  210.600868][ T6754] loop0: detected capacity change from 0 to 512
[  210.669468][ T6754] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  210.689630][ T6760] team0: Device ipvlan2 failed to register rx_handler
[  210.721801][ T6754] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  210.797641][ T6756] netlink: 36 bytes leftover after parsing attributes in process `syz.1.791'.
[  210.918548][ T4275] EXT4-fs (loop0): unmounting filesystem.
[  211.065754][ T6764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.795'.
[  211.102361][ T6764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.795'.
[  211.124358][ T6766] loop0: detected capacity change from 0 to 512
[  211.142968][ T6766] EXT4-fs: Ignoring removed nobh option
[  211.148722][ T6766] EXT4-fs: Ignoring removed oldalloc option
[  211.202303][ T6766] EXT4-fs: old and new quota format mixing
[  211.559427][ T6776] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  211.622235][ T6776] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  211.642958][ T6776] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  211.683586][ T6776] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  211.691259][ T6776] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  211.733903][ T6776] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  211.758321][ T6776] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  211.977236][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.804'.
[  212.209280][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.807'.
[  212.252114][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.807'.
[  212.358190][ T6799] loop1: detected capacity change from 0 to 512
[  212.412719][ T6799] EXT4-fs: Ignoring removed nobh option
[  212.462427][ T6799] EXT4-fs: Ignoring removed oldalloc option
[  212.482694][ T6799] EXT4-fs: old and new quota format mixing
[  212.950082][ T6816] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  212.982561][ T6816] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  213.010746][ T6816] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  213.041063][ T6816] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  213.068487][ T6816] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  213.086814][ T6816] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  213.101984][ T6816] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  213.151752][ T4316] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  213.341914][ T4316] usb 1-1: Using ep0 maxpacket: 32
[  213.548099][ T6833] loop3: detected capacity change from 0 to 1024
[  213.567232][ T6833] EXT4-fs: Ignoring removed oldalloc option
[  213.643090][ T6833] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  213.690773][   T27] audit: type=1804 audit(1786494674.787:9): pid=6833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.823" name="/newroot/151/file1/bus" dev="loop3" ino=18 res=1 errno=0
[  213.792470][ T6846] EXT4-fs (loop3): shut down requested (0)
[  214.222003][ T6853] loop1: detected capacity change from 0 to 1024
[  214.300390][ T6853] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  214.538933][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  214.585194][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  214.740804][ T6858] loop1: detected capacity change from 0 to 512
[  214.808744][ T6858] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  214.851762][ T6858] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  215.121349][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  215.307790][ T6870] device syzkaller0 entered promiscuous mode
[  215.332899][ T6872] syz_tun: Device is already in use.
[  215.710655][ T4316] usb 1-1: unable to get BOS descriptor or descriptor too short
[  215.727716][ T4316] usb 1-1: unable to read config index 0 descriptor/start: -71
[  215.750266][ T4316] usb 1-1: can't read configurations, error -71
[  216.028796][ T6896] loop3: detected capacity change from 0 to 1024
[  216.144288][ T6896] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  216.354832][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  217.919985][ T6881] __nla_validate_parse: 1 callbacks suppressed
[  217.920002][ T6881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.834'.
[  217.956564][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.840'.
[  217.983175][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.840'.
[  218.222520][ T6917] netlink: 32 bytes leftover after parsing attributes in process `syz.2.842'.
[  218.250677][ T6917] netlink: 32 bytes leftover after parsing attributes in process `syz.2.842'.
[  218.447587][ T6921] team0: Device ipvlan2 failed to register rx_handler
[  218.500231][ T6928] loop4: detected capacity change from 0 to 1024
[  218.557246][ T6928] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  218.649683][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  218.933089][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.851'.
[  218.991763][ T3599] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  219.181780][ T3599] usb 1-1: Using ep0 maxpacket: 32
[  220.574407][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.865'.
[  220.986322][ T6988] loop3: detected capacity change from 0 to 128
[  221.027501][ T6988] FAT-fs (loop3): Unrecognized mount option "tz=U*ÏGŽÀ¶uþì+Ó'TC" or missing value
[  221.679096][ T3599] usb 1-1: unable to get BOS descriptor or descriptor too short
[  221.700643][ T3599] usb 1-1: unable to read config index 0 descriptor/start: -71
[  221.729574][ T3599] usb 1-1: can't read configurations, error -71
[  222.260227][ T7011] loop0: detected capacity change from 0 to 1024
[  222.440057][ T7011] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  222.469046][ T7011] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  222.578334][ T7011] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.876: bg 0: block 112: padding at end of block bitmap is not set
[  222.736107][ T4275] EXT4-fs (loop0): unmounting filesystem.
[  223.226733][ T7025] device syzkaller0 entered promiscuous mode
[  223.349961][ T7028] loop3: detected capacity change from 0 to 512
[  223.396300][ T7028] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  223.500980][ T7028] EXT4-fs (loop3): 1 truncate cleaned up
[  223.528006][ T7028] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  223.759889][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  224.768929][ T7039] loop3: detected capacity change from 0 to 32768
[  226.287641][ T7078] loop3: detected capacity change from 0 to 1024
[  226.367109][ T7083] loop0: detected capacity change from 0 to 512
[  226.388030][ T7083] EXT4-fs: Ignoring removed mblk_io_submit option
[  226.413236][ T7078] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  226.509694][ T7083] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  226.565423][ T7083] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  226.803613][ T4275] EXT4-fs (loop0): unmounting filesystem.
[  226.810320][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  227.529831][ T7103] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  227.562578][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.908'.
[  227.805582][ T7110] loop4: detected capacity change from 0 to 1024
[  227.879913][ T7110] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  228.149811][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  229.985547][ T7146] loop1: detected capacity change from 0 to 1024
[  230.146205][ T7146] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  230.214293][   T27] audit: type=1800 audit(1786494691.317:10): pid=7146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.927" name="file1" dev="loop1" ino=15 res=0 errno=0
[  230.355517][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  231.233738][ T7171] loop1: detected capacity change from 0 to 1024
[  231.310308][ T7171] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  231.534336][ T7175] loop3: detected capacity change from 0 to 8192
[  231.574115][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  232.271484][ T7180] 9pnet_fd: Insufficient options for proto=fd
[  232.677347][ T7196] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  232.688888][ T7195] loop3: detected capacity change from 0 to 1024
[  232.696342][ T7195] EXT4-fs: Ignoring removed oldalloc option
[  232.773914][ T7196] device syzkaller0 entered promiscuous mode
[  232.790387][ T7195] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  232.909649][   T27] audit: type=1804 audit(1786494694.007:11): pid=7195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.944" name="/newroot/178/file1/bus" dev="loop3" ino=18 res=1 errno=0
[  233.013471][ T7201] EXT4-fs (loop3): shut down requested (0)
[  233.609592][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  233.765917][ T7206] loop3: detected capacity change from 0 to 1024
[  233.892308][ T7206] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  234.148718][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  235.772342][ T7225] loop0: detected capacity change from 0 to 512
[  235.808745][ T7225] EXT4-fs: Ignoring removed nobh option
[  235.828296][ T7225] EXT4-fs: Ignoring removed oldalloc option
[  235.868231][ T7225] EXT4-fs: old and new quota format mixing
[  238.349602][ T7232] team0: Device ipvlan2 failed to register rx_handler
[  239.586265][ T7258] loop4: detected capacity change from 0 to 512
[  239.649609][ T7258] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  239.727219][ T7258] EXT4-fs (loop4): orphan cleanup on readonly fs
[  239.764495][ T7258] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.965: bad orphan inode 15
[  239.853151][ T7258] ext4_test_bit(bit=14, block=18) = 1
[  239.858796][ T7258] is_bad_inode(inode)=0
[  239.881939][ T7258] NEXT_ORPHAN(inode)=1023
[  239.894266][ T7258] max_ino=32
[  239.904220][ T7258] i_nlink=0
[  239.950092][ T7258] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2918: inode #15: comm syz.4.965: corrupted xattr block 19
[  240.003658][ T7258] EXT4-fs warning (device loop4): ext4_evict_inode:301: xattr delete (err -117)
[  240.022219][ T7258] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  240.144718][ T7263] netlink: 'syz.1.967': attribute type 4 has an invalid length.
[  240.228608][ T7266] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  240.258968][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  240.579524][ T7270] device syzkaller0 entered promiscuous mode
[  240.806359][ T7279] loop1: detected capacity change from 0 to 1024
[  240.860714][ T7279] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  240.953039][ T7279] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c028, mo2=0002]
[  240.968127][ T7279] System zones: 0-1, 3-12
[  240.989057][ T7279] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  241.191690][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  242.099859][ T7301] loop3: detected capacity change from 0 to 1024
[  242.199554][ T7301] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  242.458901][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  244.147824][ T7328] Process accounting resumed
[  244.407810][ T7331] loop4: detected capacity change from 0 to 512
[  244.430759][ T7331] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  244.471914][ T7331] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  244.527762][ T7331] EXT4-fs (loop4): 1 truncate cleaned up
[  244.533875][ T7331] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  244.654518][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  247.312933][ T7312] netlink: 'syz.3.982': attribute type 4 has an invalid length.
[  247.349085][ T7312] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  251.062313][ T7396] process 'syz.3.1004' launched './file0' with NULL argv: empty string added
[  251.150107][ T7400] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  251.385465][ T7407] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1009'.
[  251.421820][ T7405] loop3: detected capacity change from 0 to 1024
[  251.455654][ T7407] device ip6gre1 entered promiscuous mode
[  251.588289][ T7405] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  251.946357][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  252.241714][ T7431] loop3: detected capacity change from 0 to 1024
[  252.249195][ T7431] EXT4-fs: Ignoring removed oldalloc option
[  252.446280][ T7431] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  252.574760][   T27] audit: type=1804 audit(1786494713.677:12): pid=7431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1015" name="/newroot/197/file1/bus" dev="loop3" ino=18 res=1 errno=0
[  252.632889][ T7438] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1018'.
[  252.713477][ T7431] EXT4-fs (loop3): shut down requested (0)
[  252.796001][ T7442] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  252.914989][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  253.021016][ T7442] device syzkaller0 entered promiscuous mode
[  253.617726][ T7464] loop0: detected capacity change from 0 to 512
[  253.646500][ T7464] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  253.764524][ T7464] EXT4-fs (loop0): 1 truncate cleaned up
[  253.770281][ T7464] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  253.992429][ T4275] EXT4-fs (loop0): unmounting filesystem.
[  257.827648][ T7474] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1031'.
[  258.245366][ T7496] loop3: detected capacity change from 0 to 512
[  258.278118][ T7496] EXT4-fs: Ignoring removed nobh option
[  258.317046][ T7496] EXT4-fs: Ignoring removed oldalloc option
[  258.348463][ T7496] EXT4-fs: old and new quota format mixing
[  258.613916][ T7502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1041'.
[  258.662439][ T7504] loop4: detected capacity change from 0 to 512
[  258.696772][ T7504] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  258.915465][ T7504] EXT4-fs (loop4): 1 truncate cleaned up
[  258.922405][ T7504] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  259.110011][ T7517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1046'.
[  259.129233][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  260.905999][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  260.912425][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  261.028643][ T7542] loop3: detected capacity change from 0 to 512
[  261.071508][ T7542] EXT4-fs: Ignoring removed nobh option
[  261.090779][ T7542] EXT4-fs: Ignoring removed oldalloc option
[  261.130118][ T7542] EXT4-fs: old and new quota format mixing
[  261.296553][ T7546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1055'.
[  261.595114][ T7556] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1059'.
[  262.999054][ T7576] loop3: detected capacity change from 0 to 512
[  263.054780][ T7576] EXT4-fs: Ignoring removed nobh option
[  263.091021][ T7576] EXT4-fs: Ignoring removed oldalloc option
[  263.139461][ T7576] EXT4-fs: old and new quota format mixing
[  263.374931][ T7588] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1072'.
[  264.927284][ T7613] device syzkaller0 entered promiscuous mode
[  265.936123][ T7634] device syzkaller0 entered promiscuous mode
[  266.201521][ T7645] loop0: detected capacity change from 0 to 1024
[  266.364703][ T7645] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  266.471600][    T0] NOHZ tick-stop error: local softirq work is pending, handler #388!!!
[  267.061634][    T0] NOHZ tick-stop error: local softirq work is pending, handler #28e!!!
[  267.161612][    T0] NOHZ tick-stop error: local softirq work is pending, handler #20e!!!
[  267.238085][ T4275] EXT4-fs (loop0): unmounting filesystem.
[  269.843739][ T7687] loop3: detected capacity change from 0 to 1024
[  269.857128][ T7687] EXT4-fs: Ignoring removed oldalloc option
[  269.961446][ T7687] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  270.045841][   T27] audit: type=1804 audit(1786494731.147:13): pid=7687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1102" name="/newroot/219/file1/bus" dev="loop3" ino=18 res=1 errno=0
[  270.195596][ T7687] EXT4-fs (loop3): shut down requested (2)
[  270.285414][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  270.505661][ T7693] Driver unsupported XDP return value 0 on prog  (id 79) dev N/A, expect packet loss!
[  272.215441][ T7679] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1098'.
[  272.473929][ T7701] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  272.497267][ T7701] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  272.530083][ T7701] device veth0_virt_wifi entered promiscuous mode
[  272.557572][ T7701] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  272.564918][ T7701] bridge0: port 1(veth0_virt_wifi) entered forwarding state
[  272.821043][ T7710] device syzkaller0 entered promiscuous mode
[  273.061473][ T7717] netlink: 'syz.2.1112': attribute type 29 has an invalid length.
[  273.090104][ T7717] netlink: 'syz.2.1112': attribute type 29 has an invalid length.
[  273.101480][ T7717] netlink: 'syz.2.1112': attribute type 29 has an invalid length.
[  273.110741][ T7717] netlink: 'syz.2.1112': attribute type 29 has an invalid length.
[  273.958311][ T7730] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1117'.
[  274.269113][ T7737] netlink: 'syz.1.1119': attribute type 10 has an invalid length.
[  274.369358][ T7737] team0: Port device geneve1 added
[  274.393822][ T7739] device syzkaller0 entered promiscuous mode
[  275.655062][ T7767] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1128'.
[  275.838886][ T7771] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1130'.
[  276.906165][ T7795] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1139'.
[  277.221734][ T7803] device syzkaller0 entered promiscuous mode
[  279.221561][    C0] sched: RT throttling activated
[  280.256882][ T7831] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1152'.
[  283.729064][ T7856] loop1: detected capacity change from 0 to 1024
[  283.982248][ T7856] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  284.755589][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  285.020007][ T7870] loop4: detected capacity change from 0 to 512
[  285.037662][ T7870] EXT4-fs: Ignoring removed nobh option
[  285.051781][ T7870] EXT4-fs: Ignoring removed oldalloc option
[  285.068965][ T7870] EXT4-fs: old and new quota format mixing
[  285.464494][ T7872] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1163'.
[  286.796068][ T7903] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1176'.
[  286.816388][ T7905] netlink: 'syz.1.1177': attribute type 10 has an invalid length.
[  286.936868][ T7907] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1178'.
[  288.061474][ T7921] device syzkaller0 entered promiscuous mode
[  288.691505][ T7933] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  288.790774][ T7933] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  288.849522][ T7933] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  288.931355][ T7933] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  288.965716][ T7933] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  289.017489][ T7933] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  289.048013][ T7933] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  289.493858][ T7946] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1188'.
[  289.625524][ T7948] loop4: detected capacity change from 0 to 2048
[  289.752656][ T7948] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  289.841795][ T7948] ext4 filesystem being mounted at /224/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  290.009033][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  290.253702][ T7970] loop4: detected capacity change from 0 to 1024
[  290.316852][ T7970] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  291.430671][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  291.732833][ T7983] loop3: detected capacity change from 0 to 256
[  291.789501][ T7983] FAT-fs (loop3): Unrecognized mount option "defcontext=unconfined_u" or missing value
[  291.874272][ T7985] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1201'.
[  293.089096][ T7991] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1202'.
[  293.651475][ T7999] loop1: detected capacity change from 0 to 256
[  293.751037][ T7999] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  293.811915][ T7999] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  293.896337][ T7999] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xa62de5c0, utbl_chksum : 0xe619d30d)
[  294.168528][   T27] audit: type=1800 audit(1786494755.267:14): pid=7999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1205" name="bus" dev="loop1" ino=1048602 res=0 errno=0
[  294.281681][ T8000] loop1: detected capacity change from 256 to 1
[  295.411784][ T4317] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  295.508569][ T8015] loop1: detected capacity change from 0 to 1024
[  295.601856][ T4317] usb 4-1: Using ep0 maxpacket: 32
[  295.616260][ T4317] usb 4-1: config 0 has an invalid interface number: 20 but max is 0
[  295.665577][ T4317] usb 4-1: config 0 has no interface number 0
[  295.706015][ T4317] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  295.718503][ T8015] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  295.781893][ T4317] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  295.847116][ T4317] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  295.911702][ T4317] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  295.967374][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.006922][ T4317] usb 4-1: Product: syz
[  296.011161][ T4317] usb 4-1: Manufacturer: syz
[  296.050858][ T4317] usb 4-1: SerialNumber: syz
[  296.089026][ T4317] usb 4-1: config 0 descriptor??
[  296.113512][ T8012] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  296.137489][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  296.354479][ T4317] usb-storage 4-1:0.20: USB Mass Storage device detected
[  296.616045][ T4317] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  297.562799][ T4317] scsi host1: usb-storage 4-1:0.20
[  297.692865][ T4317] usb 4-1: USB disconnect, device number 6
[  297.909518][ T8033] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1213'.
[  297.978764][ T8035] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1214'.
[  298.508502][ T8046] loop4: detected capacity change from 0 to 512
[  298.558399][ T8046] EXT4-fs: inline encryption not supported
[  298.609961][ T8046] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  298.696530][ T8046] EXT4-fs (loop4): 1 truncate cleaned up
[  298.749305][ T8046] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  298.936571][ T8054] loop1: detected capacity change from 0 to 1024
[  298.952653][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  299.041145][ T8054] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  299.287458][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  299.317724][ T8065] loop0: detected capacity change from 0 to 512
[  299.412566][ T8071] hub 8-0:1.0: USB hub found
[  299.423446][ T8071] hub 8-0:1.0: 1 port detected
[  301.259314][ T8077] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1230'.
[  301.923327][ T8065] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  301.971829][ T8065] ext4 filesystem being mounted at /242/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  302.371419][ T4275] EXT4-fs (loop0): unmounting filesystem.
[  302.625087][ T8104] loop1: detected capacity change from 0 to 1024
[  302.650831][ T8104] EXT4-fs: Ignoring removed oldalloc option
[  302.709649][ T8104] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  302.816663][   T27] audit: type=1804 audit(1786494763.917:15): pid=8104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1237" name="/newroot/234/file1/bus" dev="loop1" ino=18 res=1 errno=0
[  303.017296][ T8118] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1241'.
[  303.064062][ T8118] device ip6gre1 entered promiscuous mode
[  303.194575][ T8122] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1243'.
[  303.547837][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  304.656904][ T8152] loop1: detected capacity change from 0 to 512
[  304.837709][ T8152] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  304.847084][ T8152] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  304.962759][ T8152] EXT4-fs (loop1): shut down requested (1)
[  305.022257][ T8152] overlayfs: failed to create directory ./bus/work (errno: 5); mounting read-only
[  305.054453][ T8165] overlayfs: failed to get origin (-5)
[  305.122190][ T8168] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1255'.
[  305.305964][ T4272] bond0: (slave syz_tun): Releasing backup interface
[  305.333770][ T8170] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  305.369690][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  305.396210][ T8170] device syzkaller0 entered promiscuous mode
[  305.405562][ T8170] tipc: Resetting bearer <eth:syzkaller0>
[  305.447666][ T8169] tipc: Resetting bearer <eth:syzkaller0>
[  306.279012][ T4288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  306.290458][ T4288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  306.306143][ T4288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  306.325645][ T4288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  306.345139][ T4288] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  306.358495][ T4288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  308.157197][ T8169] tipc: Disabling bearer <eth:syzkaller0>
[  308.202889][ T4317] tipc: Node number set to 1459617792
[  308.328276][ T8195] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1265'.
[  308.421826][ T4279] Bluetooth: hci0: command 0x0409 tx timeout
[  308.519004][ T8204] Bluetooth: MGMT ver 1.22
[  308.577709][ T8204] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1268'.
[  308.616903][ T8181] chnl_net:caif_netlink_parms(): no params data found
[  310.328116][ T8181] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.372223][ T8181] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.461276][ T8181] device bridge_slave_0 entered promiscuous mode
[  310.522034][ T4279] Bluetooth: hci0: command 0x041b tx timeout
[  310.647125][ T8181] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.661723][ T8181] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.713384][ T8181] device bridge_slave_1 entered promiscuous mode
[  310.939145][ T8181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  311.000164][ T8181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  311.119024][ T8213] loop4: detected capacity change from 0 to 40427
[  311.178432][ T8181] team0: Port device team_slave_0 added
[  311.190694][ T8213] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64)
[  311.228488][ T8181] team0: Port device team_slave_1 added
[  311.237672][ T8213] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  311.264079][ T8213] F2FS-fs (loop4): invalid crc value
[  311.360167][ T8236] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  311.385634][ T8181] batman_adv: batadv0: Adding interface: batadv_slave_0
[  311.426621][ T8213] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  311.491671][ T8181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.582182][ T8181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  311.605598][ T8240] loop0: detected capacity change from 0 to 1024
[  311.623154][ T8181] batman_adv: batadv0: Adding interface: batadv_slave_1
[  311.637379][ T8181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.671182][ T8181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  311.693414][ T8240] EXT4-fs: Ignoring removed oldalloc option
[  311.812976][ T8213] F2FS-fs (loop4): Start checkpoint disabled!
[  311.846173][ T8240] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  311.879138][ T8181] device hsr_slave_0 entered promiscuous mode
[  311.898087][   T27] audit: type=1804 audit(1786494772.997:16): pid=8240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1277" name="/newroot/249/file1/bus" dev="loop0" ino=18 res=1 errno=0
[  312.592835][ T4288] Bluetooth: hci0: command 0x040f tx timeout
[  312.922328][ T8181] device hsr_slave_1 entered promiscuous mode
[  312.933436][ T4275] EXT4-fs (loop0): unmounting filesystem.
[  312.968180][ T8181] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  313.011912][ T8181] Cannot create hsr debugfs directory
[  313.809304][ T8181] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  313.870658][ T8181] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  313.939259][ T8181] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  314.052435][ T8181] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  314.192521][ T8181] 8021q: adding VLAN 0 to HW filter on device bond0
[  314.235732][ T7527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  314.265347][ T7527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  314.288225][ T8181] 8021q: adding VLAN 0 to HW filter on device team0
[  314.302161][ T7527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  314.352123][ T7527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  314.431780][ T7527] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.439038][ T7527] bridge0: port 1(bridge_slave_0) entered forwarding state
[  314.455766][ T7527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  314.493611][ T7527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  314.542334][ T7527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  314.580788][ T7527] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.588002][ T7527] bridge0: port 2(bridge_slave_1) entered forwarding state
[  314.626095][ T7527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  314.665016][ T4288] Bluetooth: hci0: command 0x0419 tx timeout
[  314.671899][ T7527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  314.698923][ T7527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  314.760481][ T7527] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  314.797633][ T7527] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  314.839765][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  314.852661][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  314.881828][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  314.904616][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  314.927665][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  314.954694][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  314.984218][ T8181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  315.213366][ T8277] overlayfs: missing 'lowerdir'
[  315.360192][ T8265] loop3: detected capacity change from 0 to 40427
[  315.414622][ T8265] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64)
[  315.492694][ T8265] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  315.537681][ T8265] F2FS-fs (loop3): invalid crc value
[  315.559401][ T8265] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  315.778556][ T7527] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  315.787115][ T7527] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  315.797737][ T8265] F2FS-fs (loop3): Start checkpoint disabled!
[  315.818338][ T8181] 8021q: adding VLAN 0 to HW filter on device batadv0
[  315.858672][ T8265] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  315.883269][ T8265] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  317.325187][   T47] kworker/u4:3: attempt to access beyond end of device
[  317.325187][   T47] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  317.592816][ T8277] loop4: detected capacity change from 0 to 40427
[  317.663053][ T8277] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  317.712576][ T8277] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  317.834664][ T8277] F2FS-fs (loop4): Found nat_bits in checkpoint
[  317.902534][ T8299] binder: 8296:8299 ioctl c0306201 0 returned -14
[  317.930685][ T8299] binder: 8296:8299 ioctl c0306201 0 returned -14
[  318.016090][ T8277] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  318.031629][ T8277] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  318.035383][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  318.092564][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  318.230734][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  318.299170][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  318.541793][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  318.739103][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  320.244013][ T8181] device veth0_vlan entered promiscuous mode
[  320.258870][ T8181] device veth1_vlan entered promiscuous mode
[  320.504798][ T8181] device veth0_macvtap entered promiscuous mode
[  320.560737][ T8181] device veth1_macvtap entered promiscuous mode
[  320.649240][ T8181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  320.702942][ T8181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.757922][ T8181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  320.809164][ T8181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.849852][ T8181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  320.908662][ T8181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.967829][ T8181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  321.018297][ T8181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.059074][ T8181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  321.113752][ T8181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.159844][ T8181] batman_adv: batadv0: Interface activated: batadv_slave_0
[  321.213925][ T8181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  321.240125][ T8181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.252838][ T8181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  321.263617][ T8181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.342595][ T8181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  321.400811][ T8181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.434823][ T8181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  321.723318][ T8181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.240024][ T8181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  322.250853][ T8181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.610786][ T8332] loop3: detected capacity change from 0 to 512
[  322.617867][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  322.624255][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  322.656705][ T8332] EXT4-fs: Ignoring removed nobh option
[  322.677859][ T8181] batman_adv: batadv0: Interface activated: batadv_slave_1
[  322.701375][ T8332] EXT4-fs: Ignoring removed oldalloc option
[  322.738485][ T8332] EXT4-fs: old and new quota format mixing
[  323.251206][ T7653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  323.271813][ T7653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  323.290812][ T7653] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  323.301763][ T7653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  323.311219][ T7653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  323.329888][ T7653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  323.340125][ T7653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  323.494261][ T8181] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  323.551231][ T8181] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  323.611290][ T8181] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  323.661578][ T8181] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  323.754960][ T7653] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  324.041020][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.094978][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.128872][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  324.189839][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.219099][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.248630][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  327.399106][ T8375] loop3: detected capacity change from 0 to 512
[  327.447491][ T8375] EXT4-fs: Ignoring removed nobh option
[  327.471365][ T8375] EXT4-fs: Ignoring removed oldalloc option
[  327.509173][ T8375] EXT4-fs: old and new quota format mixing
[  328.227508][ T8385] loop4: detected capacity change from 0 to 512
[  328.254426][ T8393] xt_hashlimit: size too large, truncated to 1048576
[  328.421130][ T8385] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[  329.937822][ T8412] loop3: detected capacity change from 0 to 512
[  330.000774][ T8412] EXT4-fs: Ignoring removed nobh option
[  330.062828][ T8412] EXT4-fs: Ignoring removed oldalloc option
[  330.101688][ T8412] EXT4-fs: old and new quota format mixing
[  331.190672][ T8439] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  332.187801][ T8451] loop5: detected capacity change from 0 to 512
[  332.276425][ T8451] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.1339: Attempting to read directory block (0) that is past i_size (16)
[  332.307176][ T8451] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  332.317534][ T8451] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  332.332987][ T8451] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.1339: Attempting to read directory block (0) that is past i_size (16)
[  332.402383][ T8456] tipc: Started in network mode
[  332.433712][ T8456] tipc: Node identity 4653deb5c54d, cluster identity 4711
[  332.441036][ T8456] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  332.491119][ T8181] EXT4-fs (loop5): unmounting filesystem.
[  332.690619][ T8460] device syzkaller0 entered promiscuous mode
[  332.706007][ T8466] loop3: detected capacity change from 0 to 1024
[  332.718094][ T8460] tipc: Resetting bearer <eth:syzkaller0>
[  332.918817][ T8466] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  332.947116][ T8455] tipc: Resetting bearer <eth:syzkaller0>
[  334.247954][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  334.905861][ T8486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1352'.
[  337.120226][ T8517] loop3: detected capacity change from 0 to 16
[  337.143623][ T8517] erofs: (device loop3): mounted with root inode @ nid 36.
[  337.191384][ T4288] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[  337.222211][ T8517] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  337.235018][   T27] audit: type=1800 audit(1786494798.337:17): pid=8517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1361" name="file2" dev="loop3" ino=89 res=0 errno=0
[  337.293430][ T8517] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[  337.318940][ T8517] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[  337.341256][ T8517] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[  337.352682][ T8517] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[  337.364334][ T8517] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[  337.381178][ T8517] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[  337.405770][ T8517] syz.3.1361 (8517) used greatest stack depth: 19056 bytes left
[  337.845824][ T8455] tipc: Disabling bearer <eth:syzkaller0>
[  337.883457][ T8464] device syzkaller0 entered promiscuous mode
[  338.052373][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1363'.
[  341.528059][ T8476] tipc: Node number set to 2199838389
[  341.536011][ T8481] netlink: 'syz.4.1351': attribute type 4 has an invalid length.
[  341.549049][ T8519] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1362'.
[  342.803735][ T8547] tipc: Started in network mode
[  342.808729][ T8547] tipc: Node identity b6205a87b9f, cluster identity 4711
[  342.837360][ T8547] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  342.883534][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1374'.
[  343.023400][ T8547] device syzkaller0 entered promiscuous mode
[  343.030270][ T8547] tipc: Resetting bearer <eth:syzkaller0>
[  343.049870][ T8546] tipc: Resetting bearer <eth:syzkaller0>
[  343.491755][ T3599] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  344.194144][ T3599] usb 4-1: unable to get BOS descriptor or descriptor too short
[  344.205848][ T3599] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  344.216583][ T3599] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  344.228924][ T3599] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  344.238705][ T3599] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.248382][ T3599] usb 4-1: Product: syz
[  344.253309][ T3599] usb 4-1: Manufacturer: syz
[  344.258012][ T3599] usb 4-1: SerialNumber: syz
[  344.342168][ T3599] usb 4-1: selecting invalid altsetting 1
[  344.370932][ T3599] usb 4-1: unit 6 not found!
[  344.971722][ T3599] usb 4-1: 2:0: failed to get current value for ch 0 (-32)
[  345.394942][ T3599] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[  345.435687][ T3599] usb 4-1: USB disconnect, device number 7
[  345.457650][ T7486] udevd[7486]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  346.286287][ T8546] tipc: Disabling bearer <eth:syzkaller0>
[  346.294747][ T8557] netlink: 'syz.0.1377': attribute type 4 has an invalid length.
[  346.375177][ T4320] tipc: Node number set to 265312903
[  346.553466][ T8590] loop3: detected capacity change from 0 to 16
[  346.572220][ T8590] erofs: (device loop3): mounted with root inode @ nid 36.
[  346.603280][ T4288] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[  346.618359][ T8590] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  346.629929][   T27] audit: type=1800 audit(1786494807.727:18): pid=8590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1388" name="file2" dev="loop3" ino=89 res=0 errno=0
[  347.028298][ T8603] device syzkaller0 entered promiscuous mode
[  350.580017][ T8642] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  350.807272][ T8652] loop0: detected capacity change from 0 to 16
[  350.815387][ T8652] erofs: (device loop0): mounted with root inode @ nid 36.
[  350.833384][ T4288] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[  350.877781][ T8652] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  350.889143][   T27] audit: type=1800 audit(1786494811.987:19): pid=8652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1401" name="file2" dev="loop0" ino=89 res=0 errno=0
[  351.316143][ T8665] device syzkaller0 entered promiscuous mode
[  351.982134][   T27] audit: type=1800 audit(1786494813.077:20): pid=8667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1407" name="/" dev="fuse" ino=4 res=0 errno=0
[  353.816755][ T8679] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1412'.
[  353.842063][ T8687] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  353.896781][ T8688] device syzkaller0 entered promiscuous mode
[  353.929115][ T8688] tipc: Resetting bearer <eth:syzkaller0>
[  354.037102][ T8685] tipc: Resetting bearer <eth:syzkaller0>
[  354.439903][ T8708] loop4: detected capacity change from 0 to 16
[  354.448112][ T8708] erofs: (device loop4): mounted with root inode @ nid 36.
[  357.107813][ T8685] tipc: Disabling bearer <eth:syzkaller0>
[  357.130935][ T8720] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1426'.
[  357.310960][ T8741] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1428'.
[  357.815363][ T8760] loop3: detected capacity change from 0 to 16
[  357.824375][ T8760] erofs: (device loop3): mounted with root inode @ nid 36.
[  357.856359][ T4288] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[  357.868660][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  357.880282][   T27] audit: type=1800 audit(1786494818.977:21): pid=8760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1435" name="file2" dev="loop3" ino=89 res=0 errno=0
[  357.905092][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  357.917837][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  357.933255][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  357.955755][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  357.968510][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  357.980076][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  357.999243][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.010987][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.031720][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.043287][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.056262][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.067827][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.080687][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.092710][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.104481][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.116922][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.128467][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.140282][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.152534][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.164118][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.175626][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.191163][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.203500][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.215213][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.227554][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.239059][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.251075][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.263405][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.275000][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.286558][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.298185][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.309740][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.322410][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.333904][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.345429][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.356981][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.368578][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.380144][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.391889][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.404393][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.415939][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.428173][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.439686][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.451205][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.463067][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.474979][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.486438][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.499328][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.511152][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.522879][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.535054][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.546509][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.558114][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.569968][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.581699][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.593692][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.605204][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.616857][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.629496][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.651913][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.663841][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.685365][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.697005][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.708566][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.720128][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.737245][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.751881][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.763430][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.781847][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.793489][ T8760] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  358.937805][ T8771] tipc: Started in network mode
[  358.952143][ T8771] tipc: Node identity 5ad584c86373, cluster identity 4711
[  359.015161][ T8771] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  359.215465][ T8774] device syzkaller0 entered promiscuous mode
[  359.251420][ T8774] tipc: Resetting bearer <eth:syzkaller0>
[  359.296301][ T8777] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1440'.
[  359.346275][ T8770] tipc: Resetting bearer <eth:syzkaller0>
[  362.401300][ T8770] tipc: Disabling bearer <eth:syzkaller0>
[  362.471407][ T4316] tipc: Node number set to 967214280
[  362.484805][ T8802] syz_tun: Device is already in use.
[  362.713636][ T8821] loop0: detected capacity change from 0 to 16
[  362.721999][ T8821] erofs: (device loop0): mounted with root inode @ nid 36.
[  362.734188][ T4288] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[  362.750049][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  362.765404][   T27] audit: type=1800 audit(1786494823.867:22): pid=8821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1452" name="file2" dev="loop0" ino=89 res=0 errno=0
[  362.785627][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  362.808101][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  362.819930][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  362.842351][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  362.854173][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  362.865783][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  362.877491][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  362.892656][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  362.913953][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  362.926513][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  362.932368][ T8827] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1453'.
[  362.943393][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  362.958110][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  362.969757][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  362.981795][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  362.994116][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.007418][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.019302][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.044350][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.055964][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.067713][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.079208][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.090847][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.102520][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.114019][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.125582][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.137744][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.149397][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.160972][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.173391][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.185092][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.196742][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.208559][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.220231][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.232069][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.244401][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.255977][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.267931][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.279757][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.291228][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.304908][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.316517][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.329354][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.342518][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.354032][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.366391][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.381956][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.393752][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.405606][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.417096][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.428702][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.441805][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.453375][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.464973][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.476804][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.508375][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.520630][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.532512][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.544969][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.556584][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.568060][ T8821] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  363.983294][ T8841] qfq: no options
[  364.065497][ T8838] loop4: detected capacity change from 0 to 256
[  364.161271][ T8845] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  364.288196][ T8845] device syzkaller0 entered promiscuous mode
[  364.311030][ T8845] tipc: Resetting bearer <eth:syzkaller0>
[  364.385290][ T8844] tipc: Resetting bearer <eth:syzkaller0>
[  364.970708][ T8867] loop0: detected capacity change from 0 to 1024
[  365.003587][ T8867] EXT4-fs: Ignoring removed oldalloc option
[  365.090449][ T8867] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  365.131579][   T27] audit: type=1804 audit(1786494826.227:23): pid=8867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1468" name="/newroot/291/file1/bus" dev="loop0" ino=18 res=1 errno=0
[  365.865667][ T4275] EXT4-fs (loop0): unmounting filesystem.
[  367.344633][ T8844] tipc: Disabling bearer <eth:syzkaller0>
[  367.353829][ T8850] syz_tun: Device is already in use.
[  367.381819][ T8860] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1466'.
[  367.466034][ T8876] device syzkaller0 entered promiscuous mode
[  368.733088][ T8920] loop3: detected capacity change from 0 to 256
[  368.797529][ T8920] exfat: Deprecated parameter 'utf8'
[  368.841833][ T8920] exfat: Deprecated parameter 'namecase'
[  368.893769][ T8920] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  370.979352][ T8924] team0: Device ipvlan2 failed to register rx_handler
[  371.142668][ T8928] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  371.207634][ T8929] device syzkaller0 entered promiscuous mode
[  371.230610][ T8929] tipc: Resetting bearer <eth:syzkaller0>
[  371.251909][ T8934] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1482'.
[  371.285692][ T8926] tipc: Resetting bearer <eth:syzkaller0>
[  374.860009][ T8926] tipc: Disabling bearer <eth:syzkaller0>
[  374.890790][ T8956] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1489'.
[  375.271858][ T8973] loop4: detected capacity change from 0 to 16
[  375.282066][ T8973] erofs: (device loop4): mounted with root inode @ nid 36.
[  375.304816][ T4288] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[  375.316679][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.328996][   T27] audit: type=1800 audit(1786494836.427:24): pid=8973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1495" name="file2" dev="loop4" ino=89 res=0 errno=0
[  375.362412][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.374346][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.386623][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.398393][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.412624][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.432098][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.444554][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.456719][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.471026][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.482731][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.494404][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.506026][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.517791][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.530203][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.541805][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.555710][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.567608][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[  375.580957][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[  375.593311][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.604978][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.618568][ T8969] device syzkaller0 entered promiscuous mode
[  375.654585][ T8978] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[  375.693786][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[  375.705397][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.717857][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.730598][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[  375.743222][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[  375.754878][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.770335][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.796374][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.808251][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.819877][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.832726][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.844883][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.856642][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.868817][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.880866][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.892560][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.904243][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.915765][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.927734][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.940037][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.952765][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.965015][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.976717][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  375.988596][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.000288][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.012252][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.024012][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.037504][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.049065][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.060619][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.073618][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.085237][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.096946][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.111960][ T8973] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.350295][ T8986] loop4: detected capacity change from 0 to 16
[  376.362181][ T8986] erofs: (device loop4): mounted with root inode @ nid 36.
[  376.373357][ T4288] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[  376.387189][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.398723][   T27] audit: type=1800 audit(1786494837.497:25): pid=8986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1498" name="file2" dev="loop4" ino=89 res=0 errno=0
[  376.419499][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.433486][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.451900][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.463586][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.482357][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.494151][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.511272][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.525134][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.537263][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.551285][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.563160][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.584655][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.598988][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.610710][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.629432][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.641256][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.654673][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.667214][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.679051][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.691175][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.703015][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.715045][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.733348][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.747413][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.761616][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.773823][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.785711][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.798101][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.809899][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.822072][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.835524][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.849236][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.862498][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.875094][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.893793][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.905889][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.927339][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.939139][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.959102][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.970846][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.984697][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  376.996275][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  377.014987][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  377.026696][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  377.038358][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  377.050298][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  377.070591][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  377.082440][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  377.095287][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  377.110438][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  377.122015][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  377.143467][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  377.156766][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  377.169255][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  377.180764][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  377.198394][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  377.211671][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  377.223728][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  377.235488][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  377.255984][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  377.268391][ T8986] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  380.310589][ T8981] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1496'.
[  380.326677][ T8984] team0: Device ipvlan2 failed to register rx_handler
[  380.380862][ T8992] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1499'.
[  380.801209][ T9004] random: crng reseeded on system resumption
[  381.930681][ T9002] loop5: detected capacity change from 0 to 40427
[  382.016025][ T9002] F2FS-fs (loop5): Invalid log blocks per segment (1)
[  382.051762][ T9002] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  382.111980][ T9002] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x35f7
[  382.124771][ T9002] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x3ffff
[  382.192209][ T9002] F2FS-fs (loop5): invalid crc value
[  382.228148][ T9002] F2FS-fs (loop5): Found nat_bits in checkpoint
[  382.439701][ T9047] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1515'.
[  382.454302][ T9002] F2FS-fs (loop5): Start checkpoint disabled!
[  382.521470][ T9002] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  382.528893][ T9002] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  382.553814][ T9050] team0: Device ipvlan2 failed to register rx_handler
[  382.998816][ T8631] kworker/u4:20: attempt to access beyond end of device
[  382.998816][ T8631] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  383.597815][ T9065] loop0: detected capacity change from 0 to 256
[  383.717226][ T9065] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d)
[  383.785762][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  383.792183][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  383.844747][ T9071] loop3: detected capacity change from 0 to 16
[  383.879378][ T9071] erofs: (device loop3): mounted with root inode @ nid 36.
[  383.937269][ T4288] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[  383.953448][ T9071] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  384.010714][   T27] audit: type=1800 audit(1786494845.107:26): pid=9071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1525" name="file2" dev="loop3" ino=89 res=0 errno=0
[  384.238674][ T9079] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1528'.
[  384.388535][ T9080] device syzkaller0 entered promiscuous mode
[  385.176489][ T9111] overlayfs: failed to clone upperpath
[  387.405623][ T9121] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1541'.
[  388.165767][ T9143] loop5: detected capacity change from 0 to 4096
[  388.264308][ T9143] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  388.352750][ T9143] EXT4-fs (loop5): Test dummy encryption mode enabled
[  388.454483][ T9143] EXT4-fs (loop5): warning: maximal mount count reached, running e2fsck is recommended
[  388.561444][ T9157] loop3: detected capacity change from 0 to 1024
[  388.588801][ T9157] EXT4-fs: Ignoring removed bh option
[  388.654036][ T9157] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  388.685611][ T9143] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  388.778687][ T9157] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  388.842323][ T9157] EXT4-fs (loop3): shut down requested (1)
[  389.065787][ T9143] fscrypt (loop5): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  389.106793][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  389.114934][ T9161] overlayfs: failed to resolve './bus': -2
[  389.186285][ T9133] loop4: detected capacity change from 0 to 40427
[  389.260646][ T9133] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64)
[  389.298570][ T9133] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  389.349187][ T9133] F2FS-fs (loop4): invalid crc value
[  389.359643][ T8181] EXT4-fs (loop5): unmounting filesystem.
[  389.396463][ T9133] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  389.439240][ T9170] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1555'.
[  389.971493][ T9133] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  390.000715][ T9133] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  390.816217][ T9212] loop3: detected capacity change from 0 to 4096
[  390.878192][ T9212] EXT4-fs (loop3): inodes count not valid: 64 vs 32
[  391.311052][ T4273] syz-executor: attempt to access beyond end of device
[  391.311052][ T4273] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  391.576328][ T9229] device syzkaller0 entered promiscuous mode
[  394.964955][ T9239] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1572'.
[  395.024983][ T9257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1577'.
[  395.164003][   T27] audit: type=1326 audit(1786494856.267:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9260 comm="syz.0.1579" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648359e0d9 code=0x7ffc0000
[  395.219844][   T27] audit: type=1326 audit(1786494856.317:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9260 comm="syz.0.1579" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648359e0d9 code=0x7ffc0000
[  395.365604][   T27] audit: type=1326 audit(1786494856.317:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9260 comm="syz.0.1579" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648359e0d9 code=0x7ffc0000
[  395.404822][   T27] audit: type=1326 audit(1786494856.317:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9260 comm="syz.0.1579" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648359e0d9 code=0x7ffc0000
[  395.429517][   T27] audit: type=1326 audit(1786494856.317:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9260 comm="syz.0.1579" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f648359e0d9 code=0x7ffc0000
[  395.523552][   T27] audit: type=1326 audit(1786494856.317:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9260 comm="syz.0.1579" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648359e0d9 code=0x7ffc0000
[  395.592236][   T27] audit: type=1326 audit(1786494856.317:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9260 comm="syz.0.1579" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648359e0d9 code=0x7ffc0000
[  395.662589][  T129] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  395.680727][   T27] audit: type=1326 audit(1786494856.317:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9260 comm="syz.0.1579" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f648359e0d9 code=0x7ffc0000
[  395.759256][   T27] audit: type=1326 audit(1786494856.317:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9260 comm="syz.0.1579" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f648359e0d9 code=0x7ffc0000
[  395.861628][  T129] usb 5-1: Using ep0 maxpacket: 16
[  395.868971][  T129] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  395.908662][  T129] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  395.940550][  T129] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  395.995392][  T129] usb 5-1: config 0 interface 0 has no altsetting 0
[  396.022552][  T129] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  396.056299][  T129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  396.091373][  T129] usb 5-1: config 0 descriptor??
[  396.246745][ T9286] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1589'.
[  396.531826][  T129] hid (null): unknown global tag 0xe
[  396.549810][  T129] hid (null): report_id 34376 is invalid
[  396.699682][ T9288] device syzkaller0 entered promiscuous mode
[  396.734467][ T4317] usb 5-1: USB disconnect, device number 5
[  397.108322][ T9276] overlayfs: failed to clone upperpath
[  397.929463][ T9304] loop3: detected capacity change from 0 to 512
[  398.076272][ T9304] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  398.137960][ T9304] ext4 filesystem being mounted at /328/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  398.289919][ T9304] EXT4-fs (loop3): shut down requested (1)
[  398.314840][ T9304] overlayfs: failed to create directory ./bus/work (errno: 5); mounting read-only
[  398.335992][ T9304] overlayfs: failed to get origin (-5)
[  401.618498][ T5964] bond0: (slave syz_tun): Releasing backup interface
[  401.655924][ T9321] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1600'.
[  401.701341][ T9324] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1601'.
[  401.740935][ T5964] EXT4-fs (loop3): unmounting filesystem.
[  401.955711][   T41] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.126817][   T41] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.191900][  T129] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  402.237880][   T41] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.403611][  T129] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  402.407683][   T41] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.424358][  T129] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  402.427539][  T129] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  402.499656][  T129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  402.536102][  T129] usb 1-1: SerialNumber: syz
[  402.582076][ T9335] loop4: detected capacity change from 0 to 256
[  402.628546][ T9335] exfat: Deprecated parameter 'utf8'
[  402.651623][ T9335] exfat: Deprecated parameter 'utf8'
[  402.660293][ T9335] exfat: Deprecated parameter 'namecase'
[  402.687817][ T9335] exfat: Deprecated parameter 'namecase'
[  402.730213][ T9335] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  402.791968][  T129] usb 1-1: 0:2 : does not exist
[  402.927993][  T129] usb 1-1: USB disconnect, device number 8
[  403.079226][   T41] tipc: Left network mode
[  403.220741][ T9337] udevd[9337]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  403.495853][ T9345] loop4: detected capacity change from 0 to 256
[  403.503687][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  403.516946][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  403.525339][ T4279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  403.533587][ T4279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  403.541197][ T4279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  403.550210][ T4279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  403.576719][ T9345] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xa7bc3a1f, utbl_chksum : 0xe619d30d)
[  403.642111][ T9345] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 2199023255554)
[  404.332915][ T9377] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1615'.
[  404.687165][ T9385] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1616'.
[  405.049267][ T9401] loop4: detected capacity change from 0 to 128
[  405.151961][ T9401] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  405.240625][ T9346] chnl_net:caif_netlink_parms(): no params data found
[  405.439934][ T4341] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  405.621724][ T4288] Bluetooth: hci4: command 0x0409 tx timeout
[  405.653731][ T9415] loop4: detected capacity change from 0 to 256
[  405.678396][ T9415] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  405.755230][ T7988] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  405.910774][   T41] device hsr_slave_0 left promiscuous mode
[  405.940347][   T41] device hsr_slave_1 left promiscuous mode
[  405.965713][   T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  405.991737][   T41] batman_adv: batadv0: Removing interface: batadv_slave_0
[  406.003951][   T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  406.024584][   T41] batman_adv: batadv0: Removing interface: batadv_slave_1
[  406.035561][   T41] device bridge_slave_1 left promiscuous mode
[  406.045098][   T41] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.056818][   T41] device bridge_slave_0 left promiscuous mode
[  406.063228][   T41] bridge0: port 1(bridge_slave_0) entered disabled state
[  406.269567][   T41] device veth1_macvtap left promiscuous mode
[  406.278121][   T41] device veth0_macvtap left promiscuous mode
[  406.288389][   T41] device veth1_vlan left promiscuous mode
[  406.295438][   T41] device veth0_vlan left promiscuous mode
[  406.457615][ T9438] loop4: detected capacity change from 0 to 2048
[  407.941556][ T4288] Bluetooth: hci4: command 0x041b tx timeout
[  409.969834][   T41] team0 (unregistering): Port device team_slave_1 removed
[  410.019396][   T41] team0 (unregistering): Port device team_slave_0 removed
[  410.023237][ T4288] Bluetooth: hci4: command 0x040f tx timeout
[  410.073250][   T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  410.125978][   T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  410.446532][   T41] bond0 (unregistering): Released all slaves
[  410.579760][ T9453] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1630'.
[  410.657996][ T9346] bridge0: port 1(bridge_slave_0) entered blocking state
[  410.671418][ T9346] bridge0: port 1(bridge_slave_0) entered disabled state
[  410.679926][ T9346] device bridge_slave_0 entered promiscuous mode
[  410.689004][ T9346] bridge0: port 2(bridge_slave_1) entered blocking state
[  410.696353][ T9346] bridge0: port 2(bridge_slave_1) entered disabled state
[  410.704794][ T9346] device bridge_slave_1 entered promiscuous mode
[  410.740531][ T9346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  410.753226][ T9346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  410.795601][ T9346] team0: Port device team_slave_0 added
[  410.826578][ T9346] team0: Port device team_slave_1 added
[  410.918591][ T9346] batman_adv: batadv0: Adding interface: batadv_slave_0
[  410.977324][ T9346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  411.059738][ T9346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  411.114449][ T9466] loop4: detected capacity change from 0 to 1024
[  411.132978][ T9346] batman_adv: batadv0: Adding interface: batadv_slave_1
[  411.186106][ T9346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  411.236780][ T9476] loop0: detected capacity change from 0 to 128
[  411.244433][ T9466] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  411.269100][ T9466] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  411.332307][ T9346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  411.424307][ T9476] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  411.466380][ T9476] ext4 filesystem being mounted at /321/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  411.547382][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  411.563322][ T9346] device hsr_slave_0 entered promiscuous mode
[  411.642139][ T9346] device hsr_slave_1 entered promiscuous mode
[  411.651465][ T9346] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  411.675389][ T4275] EXT4-fs (loop0): unmounting filesystem.
[  411.682453][ T9346] Cannot create hsr debugfs directory
[  412.026685][ T9495] netlink: 'syz.5.1641': attribute type 4 has an invalid length.
[  412.101971][ T4288] Bluetooth: hci4: command 0x0419 tx timeout
[  412.400407][ T9505] device syzkaller0 entered promiscuous mode
[  412.429733][ T9509] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1645'.
[  412.802785][ T9519] loop5: detected capacity change from 0 to 8192
[  413.286374][ T9524] loop5: detected capacity change from 0 to 4096
[  413.318825][ T9524] EXT4-fs: inline encryption not supported
[  413.336811][ T9524] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  413.347341][ T9524] EXT4-fs (loop5): Test dummy encryption mode enabled
[  413.368433][ T9524] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  414.007633][ T9524] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  414.039990][ T9524] EXT4-fs (loop5): re-mounted. Quota mode: writeback.
[  414.170052][ T9540] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  414.627725][ T8181] EXT4-fs (loop5): unmounting filesystem.
[  414.772081][ T9552] loop5: detected capacity change from 0 to 16
[  414.780374][ T9552] erofs: (device loop5): mounted with root inode @ nid 36.
[  414.800974][ T4288] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[  414.839505][ T9552] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  414.879485][   T27] audit: type=1800 audit(1786494875.977:36): pid=9552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1653" name="file2" dev="loop5" ino=89 res=0 errno=0
[  416.497519][ T9554] netlink: 'syz.2.1654': attribute type 4 has an invalid length.
[  416.567963][ T9346] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  416.663473][ T9346] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  416.707076][ T9346] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  416.754158][ T9570] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1657'.
[  416.952797][ T9346] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  417.700147][ T9346] 8021q: adding VLAN 0 to HW filter on device bond0
[  417.720007][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  417.735892][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  417.753773][ T9346] 8021q: adding VLAN 0 to HW filter on device team0
[  417.798454][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  417.809651][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  417.850976][ T8030] bridge0: port 1(bridge_slave_0) entered blocking state
[  417.858237][ T8030] bridge0: port 1(bridge_slave_0) entered forwarding state
[  417.866314][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  417.907795][ T7988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  417.919588][ T7988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  417.939548][ T7988] bridge0: port 2(bridge_slave_1) entered blocking state
[  417.946827][ T7988] bridge0: port 2(bridge_slave_1) entered forwarding state
[  417.965150][ T7988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  417.983853][ T7988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  418.012305][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  418.036989][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  418.062353][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  418.071257][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  418.087163][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  418.098612][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  418.119730][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  418.131409][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  418.145883][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  418.161144][ T9346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  418.477508][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  418.485760][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  418.500365][ T9346] 8021q: adding VLAN 0 to HW filter on device batadv0
[  419.015029][ T7981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  419.032539][ T7981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  419.066212][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  419.083513][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  419.103668][ T9346] device veth0_vlan entered promiscuous mode
[  419.122459][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  419.137643][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  419.155683][ T9346] device veth1_vlan entered promiscuous mode
[  419.198577][ T8141] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  419.220372][ T8141] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  419.229235][ T8141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  419.239123][ T8141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  419.257602][ T9346] device veth0_macvtap entered promiscuous mode
[  419.277974][ T9346] device veth1_macvtap entered promiscuous mode
[  419.305791][ T9346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  419.316919][ T9346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.328072][ T9346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  419.338973][ T9346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.349133][ T9346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  419.369188][ T9346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.380161][ T9346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  419.397783][ T9346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.408000][ T9346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  419.426582][ T9346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.440749][ T9346] batman_adv: batadv0: Interface activated: batadv_slave_0
[  419.453566][ T8141] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  419.463711][ T8141] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  419.474556][ T8141] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  419.485002][ T8141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  419.499680][ T9346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  419.518229][ T9346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.529536][ T9346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  419.551450][ T9346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.570415][ T9346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  419.581209][ T9346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.591984][ T9346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  419.603073][ T9346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.613426][ T9346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  419.633155][ T9346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  419.649965][ T9346] batman_adv: batadv0: Interface activated: batadv_slave_1
[  419.665829][ T7981] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  419.675526][ T7981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  419.688014][ T9346] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  419.708601][ T9346] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  419.722517][ T9346] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  419.736704][ T9346] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  419.844089][ T7988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  419.865003][ T7988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  419.886719][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  419.956420][ T8030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  419.971114][ T8030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  419.984949][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  431.942705][ T4279] Bluetooth: hci0: command 0x0406 tx timeout
[  445.228385][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  445.234924][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  496.596381][ T4341] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.688155][ T4341] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.770724][ T4341] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.846920][ T4341] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.036058][ T4341] tipc: Left network mode
[  498.182267][ T4341] device hsr_slave_0 left promiscuous mode
[  498.189035][ T4341] device hsr_slave_1 left promiscuous mode
[  498.197434][ T4341] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  498.206233][ T4341] batman_adv: batadv0: Removing interface: batadv_slave_0
[  498.219648][ T4341] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  498.227684][ T4341] batman_adv: batadv0: Removing interface: batadv_slave_1
[  498.236126][ T4341] device bridge_slave_1 left promiscuous mode
[  498.243060][ T4341] bridge0: port 2(bridge_slave_1) entered disabled state
[  498.276848][ T4341] device veth1_macvtap left promiscuous mode
[  498.290414][ T4341] device veth0_macvtap left promiscuous mode
[  498.297300][ T4341] device veth1_vlan left promiscuous mode
[  498.312825][ T4341] device veth0_vlan left promiscuous mode
[  498.527535][ T4341] team0 (unregistering): Port device geneve1 removed
[  499.154747][ T4341] team0 (unregistering): Port device team_slave_1 removed
[  499.208537][ T4341] team0 (unregistering): Port device team_slave_0 removed
[  499.260661][ T4341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  499.320001][ T4341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  499.703304][ T4341] bond0 (unregistering): Released all slaves
[  506.664002][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  506.670949][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  529.221720][ T4279] Bluetooth: hci4: command 0x0406 tx timeout
[  566.181931][   T28] INFO: task jbd2/sda1-8:3601 blocked for more than 143 seconds.
[  566.190059][   T28]       Not tainted syzkaller #0
[  566.196024][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  566.206470][   T28] task:jbd2/sda1-8     state:D stack:24560 pid:3601  ppid:2      flags:0x00004000
[  566.215842][   T28] Call Trace:
[  566.219201][   T28]  <TASK>
[  566.222241][   T28]  __schedule+0x107f/0x4030
[  566.227163][   T28]  ? __lock_acquire+0x7c40/0x7c40
[  566.232931][   T28]  ? __sched_text_start+0x8/0x8
[  566.237820][   T28]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  566.243910][   T28]  ? lockdep_hardirqs_on+0x94/0x140
[  566.249180][   T28]  schedule+0xb9/0x180
[  566.253353][   T28]  io_schedule+0x7c/0xd0
[  566.257659][   T28]  bit_wait_io+0xd/0xc0
[  566.262164][   T28]  __wait_on_bit+0x9b/0x2c0
[  566.266727][   T28]  ? bit_wait+0xc0/0xc0
[  566.270916][   T28]  out_of_line_wait_on_bit+0x138/0x190
[  566.276884][   T28]  ? bit_wait+0xc0/0xc0
[  566.281111][   T28]  ? __wait_on_bit+0x2c0/0x2c0
[  566.286451][   T28]  ? do_raw_write_lock+0x11a/0x260
[  566.291896][   T28]  ? bit_waitqueue+0x30/0x30
[  566.297153][   T28]  ? do_raw_read_unlock+0x39/0x70
[  566.302320][   T28]  jbd2_journal_commit_transaction+0x2f0f/0x5f30
[  566.308811][   T28]  ? jbd2_journal_finish_inode_data_buffers+0xa0/0xa0
[  566.315721][   T28]  ? lock_chain_count+0x20/0x20
[  566.320659][   T28]  ? _raw_spin_unlock+0x40/0x40
[  566.325863][   T28]  ? rcu_is_watching+0x11/0xa0
[  566.330826][   T28]  ? __timer_delete_sync+0x239/0x2e0
[  566.336590][   T28]  ? __lock_acquire+0x7c40/0x7c40
[  566.341989][   T28]  ? timer_delete_sync+0x20/0x20
[  566.346976][   T28]  ? do_raw_read_unlock+0x70/0x70
[  566.353160][   T28]  ? prepare_to_wait+0x1a6/0x1f0
[  566.358171][   T28]  kjournald2+0x40b/0x800
[  566.362794][   T28]  ? jbd2_seq_info_show+0x5c0/0x5c0
[  566.368040][   T28]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  566.374062][   T28]  ? wake_bit_function+0x200/0x200
[  566.379308][   T28]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  566.385307][   T28]  ? __kthread_parkme+0x71/0x1c0
[  566.390450][   T28]  ? __kthread_parkme+0x15b/0x1c0
[  566.395608][   T28]  kthread+0x29d/0x330
[  566.400233][   T28]  ? jbd2_seq_info_show+0x5c0/0x5c0
[  566.405574][   T28]  ? kthread_blkcg+0xd0/0xd0
[  566.410207][   T28]  ret_from_fork+0x1f/0x30
[  566.414759][   T28]  </TASK>
[  566.417841][   T28] INFO: task syz-executor:4260 blocked for more than 143 seconds.
[  566.425997][   T28]       Not tainted syzkaller #0
[  566.430975][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  566.439918][   T28] task:syz-executor    state:D stack:22768 pid:4260  ppid:4259   flags:0x00004002
[  566.449256][   T28] Call Trace:
[  566.452686][   T28]  <TASK>
[  566.455661][   T28]  __schedule+0x107f/0x4030
[  566.460231][   T28]  ? mark_lock+0x94/0x320
[  566.464680][   T28]  ? __lock_acquire+0x7c40/0x7c40
[  566.469772][   T28]  ? __sched_text_start+0x8/0x8
[  566.474762][   T28]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  566.480704][   T28]  ? lockdep_hardirqs_on+0x94/0x140
[  566.486023][   T28]  schedule+0xb9/0x180
[  566.490163][   T28]  io_schedule+0x7c/0xd0
[  566.494540][   T28]  bit_wait_io+0xd/0xc0
[  566.499287][   T28]  __wait_on_bit+0x9b/0x2c0
[  566.504093][   T28]  ? bit_wait+0xc0/0xc0
[  566.508298][   T28]  out_of_line_wait_on_bit+0x138/0x190
[  566.513950][   T28]  ? bit_wait+0xc0/0xc0
[  566.518287][   T28]  ? __wait_on_bit+0x2c0/0x2c0
[  566.523168][   T28]  ? do_raw_spin_lock+0x128/0x2f0
[  566.528270][   T28]  ? bit_waitqueue+0x30/0x30
[  566.532959][   T28]  ? do_raw_spin_unlock+0x11d/0x230
[  566.538198][   T28]  do_get_write_access+0x605/0xf20
[  566.545144][   T28]  jbd2_journal_get_write_access+0x108/0x140
[  566.551161][   T28]  __ext4_journal_get_write_access+0x24b/0x6e0
[  566.557597][   T28]  ? __ext4_journal_ensure_credits+0x450/0x450
[  566.563998][   T28]  ? rcu_is_watching+0x11/0xa0
[  566.568845][   T28]  ext4_reserve_inode_write+0x201/0x290
[  566.574607][   T28]  __ext4_mark_inode_dirty+0x161/0x760
[  566.580147][   T28]  ext4_dirty_inode+0xbf/0x100
[  566.595483][   T28]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  566.602676][   T28]  __mark_inode_dirty+0x2e7/0xe80
[  566.607972][   T28]  __file_update_time+0x21d/0x240
[  566.613273][   T28]  file_update_time+0x2f3/0x370
[  566.618278][   T28]  ? rcu_read_lock_bh_held+0xf0/0xf0
[  566.623783][   T28]  ? __file_remove_privs+0x5f0/0x5f0
[  566.629213][   T28]  ext4_page_mkwrite+0x1a9/0x10d0
[  566.634763][   T28]  ? ext4_change_inode_journal_flag+0x710/0x710
[  566.641069][   T28]  ? count_memcg_event_mm+0x8a/0x3c0
[  566.646533][   T28]  ? do_raw_spin_lock+0x128/0x2f0
[  566.651832][   T28]  do_page_mkwrite+0x16b/0x5c0
[  566.656751][   T28]  wp_page_shared+0x167/0x370
[  566.661678][   T28]  handle_mm_fault+0x1b1b/0x3d40
[  566.666689][   T28]  ? mt_find+0x157/0x830
[  566.671203][   T28]  ? numa_migrate_prep+0x250/0x250
[  566.676916][   T28]  ? lock_chain_count+0x20/0x20
[  566.681893][   T28]  ? lock_mm_and_find_vma+0xae/0x2f0
[  566.687256][   T28]  do_user_addr_fault+0x58e/0xb20
[  566.692808][   T28]  exc_page_fault+0x60/0x100
[  566.697458][   T28]  ? clear_bhb_loop+0x60/0xb0
[  566.702351][   T28]  asm_exc_page_fault+0x22/0x30
[  566.707988][   T28] RIP: 0033:0x7f6b54a7c662
[  566.712555][   T28] RSP: 002b:00007ffd9b0fbf60 EFLAGS: 00010202
[  566.718752][   T28] RAX: 00007f6b52824000 RBX: 00005555706daf60 RCX: 0000000000000002
[  566.726850][   T28] RDX: 0000000000001f92 RSI: 00005555706e3688 RDI: 0000000000000004
[  566.734898][   T28] RBP: 00007ffd9b0fc460 R08: 00005555706e36b0 R09: 000000000000008e
[  566.742973][   T28] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffd9b0fc2a0
[  566.750993][   T28] R13: 00007ffd9b0fc090 R14: 585858582e7a7973 R15: 00007ffd9b0fbfe0
[  566.759115][   T28]  </TASK>
[  566.762215][   T28] INFO: task syz.4.1657:9569 blocked for more than 143 seconds.
[  566.769968][   T28]       Not tainted syzkaller #0
[  566.775011][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  566.784052][   T28] task:syz.4.1657      state:D stack:26288 pid:9569  ppid:4273   flags:0x00004004
[  566.793593][   T28] Call Trace:
[  566.796913][   T28]  <TASK>
[  566.799862][   T28]  __schedule+0x107f/0x4030
[  566.804485][   T28]  ? mark_lock+0x94/0x320
[  566.809404][   T28]  ? __lock_acquire+0x7c40/0x7c40
[  566.814611][   T28]  ? __sched_text_start+0x8/0x8
[  566.819570][   T28]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  566.829266][   T28]  ? lockdep_hardirqs_on+0x94/0x140
[  566.835783][   T28]  schedule+0xb9/0x180
[  566.839931][   T28]  io_schedule+0x7c/0xd0
[  566.845458][   T28]  bit_wait_io+0xd/0xc0
[  566.849692][   T28]  __wait_on_bit+0x9b/0x2c0
[  566.854389][   T28]  ? bit_wait+0xc0/0xc0
[  566.858617][   T28]  out_of_line_wait_on_bit+0x138/0x190
[  566.865961][   T28]  ? bit_wait+0xc0/0xc0
[  566.870202][   T28]  ? __wait_on_bit+0x2c0/0x2c0
[  566.878835][   T28]  ? do_raw_spin_lock+0x128/0x2f0
[  566.888335][   T28]  ? bit_waitqueue+0x30/0x30
[  566.893373][   T28]  ? do_raw_spin_unlock+0x11d/0x230
[  566.898636][   T28]  do_get_write_access+0x605/0xf20
[  566.904209][   T28]  jbd2_journal_get_write_access+0x108/0x140
[  566.913576][   T28]  __ext4_journal_get_write_access+0x24b/0x6e0
[  566.919833][   T28]  ? __ext4_journal_ensure_credits+0x450/0x450
[  566.926264][   T28]  ? rcu_is_watching+0x11/0xa0
[  566.931107][   T28]  ext4_reserve_inode_write+0x201/0x290
[  566.937065][   T28]  __ext4_mark_inode_dirty+0x161/0x760
[  566.942656][   T28]  ext4_dirty_inode+0xbf/0x100
[  566.947477][   T28]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  566.954244][   T28]  __mark_inode_dirty+0x2e7/0xe80
[  566.959337][   T28]  __file_update_time+0x21d/0x240
[  566.965301][   T28]  file_update_time+0x2f3/0x370
[  566.970193][   T28]  ? __file_remove_privs+0x5f0/0x5f0
[  566.975643][   T28]  ext4_page_mkwrite+0x1a9/0x10d0
[  566.980749][   T28]  ? ext4_change_inode_journal_flag+0x710/0x710
[  566.987285][   T28]  ? count_memcg_event_mm+0x8a/0x3c0
[  566.992698][   T28]  ? put_page+0x270/0x270
[  566.997076][   T28]  do_page_mkwrite+0x16b/0x5c0
[  567.002265][   T28]  handle_mm_fault+0x199c/0x3d40
[  567.007265][   T28]  ? mt_find+0x157/0x830
[  567.012109][   T28]  ? numa_migrate_prep+0x250/0x250
[  567.017442][   T28]  ? lock_chain_count+0x20/0x20
[  567.023790][   T28]  ? ktime_get+0x247/0x270
[  567.028365][   T28]  ? lock_mm_and_find_vma+0xae/0x2f0
[  567.033752][   T28]  do_user_addr_fault+0x58e/0xb20
[  567.038852][   T28]  exc_page_fault+0x60/0x100
[  567.043632][   T28]  ? clear_bhb_loop+0x60/0xb0
[  567.048355][   T28]  asm_exc_page_fault+0x22/0x30
[  567.053340][   T28] RIP: 0033:0x7fd22b072729
[  567.057798][   T28] RSP: 002b:00007ffe7896c060 EFLAGS: 00010202
[  567.063988][   T28] RAX: 0000001b2ff23000 RBX: ffffffff81671d6c RCX: 0000001b2ff22ff8
[  567.072205][   T28] RDX: 0000001b2fb2421c RSI: 0000000000000008 RDI: 00007fd22bf55720
[  567.080245][   T28] RBP: 00000000000001fb R08: 00007fd22b410000 R09: 00007fd22b412000
[  567.088344][   T28] R10: 0000000081671d70 R11: 0000000000000002 R12: 00007fd22b426038
[  567.096562][   T28] R13: 00000000000002c2 R14: ffffffff816712e5 R15: 00007fd22bf55720
[  567.104705][   T28]  ? vprintk_store+0x545/0xcf0
[  567.109559][   T28]  ? printk_sprint+0x2dc/0x460
[  567.115570][   T28]  </TASK>
[  567.118754][   T28] INFO: task syz.0.1661:9580 blocked for more than 144 seconds.
[  567.126536][   T28]       Not tainted syzkaller #0
[  567.131739][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  567.140458][   T28] task:syz.0.1661      state:D stack:27632 pid:9580  ppid:4275   flags:0x00004004
[  567.150018][   T28] Call Trace:
[  567.153657][   T28]  <TASK>
[  567.160107][   T28]  __schedule+0x107f/0x4030
[  567.165004][   T28]  ? mark_lock+0x94/0x320
[  567.169441][   T28]  ? __lock_acquire+0x7c40/0x7c40
[  567.174874][   T28]  ? __sched_text_start+0x8/0x8
[  567.179815][   T28]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  567.186073][   T28]  ? lockdep_hardirqs_on+0x94/0x140
[  567.191345][   T28]  schedule+0xb9/0x180
[  567.195760][   T28]  io_schedule+0x7c/0xd0
[  567.200127][   T28]  bit_wait_io+0xd/0xc0
[  567.204428][   T28]  __wait_on_bit+0x9b/0x2c0
[  567.209007][   T28]  ? bit_wait+0xc0/0xc0
[  567.213538][   T28]  out_of_line_wait_on_bit+0x138/0x190
[  567.219844][   T28]  ? bit_wait+0xc0/0xc0
[  567.224928][   T28]  ? __wait_on_bit+0x2c0/0x2c0
[  567.229924][   T28]  ? do_raw_spin_lock+0x128/0x2f0
[  567.235464][   T28]  ? bit_waitqueue+0x30/0x30
[  567.240161][   T28]  ? do_raw_spin_unlock+0x11d/0x230
[  567.246107][   T28]  do_get_write_access+0x605/0xf20
[  567.252630][   T28]  jbd2_journal_get_write_access+0x108/0x140
[  567.258681][   T28]  __ext4_journal_get_write_access+0x24b/0x6e0
[  567.265231][   T28]  ? __ext4_journal_ensure_credits+0x450/0x450
[  567.271518][   T28]  ? rcu_is_watching+0x11/0xa0
[  567.276476][   T28]  ext4_reserve_inode_write+0x201/0x290
[  567.282263][   T28]  __ext4_mark_inode_dirty+0x161/0x760
[  567.287875][   T28]  ext4_dirty_inode+0xbf/0x100
[  567.292789][   T28]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  567.298847][   T28]  __mark_inode_dirty+0x2e7/0xe80
[  567.304162][   T28]  __file_update_time+0x21d/0x240
[  567.309318][   T28]  file_update_time+0x2f3/0x370
[  567.314298][   T28]  ? rcu_read_lock_bh_held+0xf0/0xf0
[  567.320560][   T28]  ? __file_remove_privs+0x5f0/0x5f0
[  567.326058][   T28]  ext4_page_mkwrite+0x1a9/0x10d0
[  567.331279][   T28]  ? pte_alloc_one+0x287/0x310
[  567.336144][   T28]  ? ext4_change_inode_journal_flag+0x710/0x710
[  567.342686][   T28]  do_page_mkwrite+0x16b/0x5c0
[  567.347523][   T28]  handle_mm_fault+0x199c/0x3d40
[  567.352798][   T28]  ? mt_find+0x157/0x830
[  567.357133][   T28]  ? numa_migrate_prep+0x250/0x250
[  567.362428][   T28]  ? lock_chain_count+0x20/0x20
[  567.367561][   T28]  ? lock_mm_and_find_vma+0xae/0x2f0
[  567.373034][   T28]  do_user_addr_fault+0x58e/0xb20
[  567.378277][   T28]  exc_page_fault+0x60/0x100
[  567.383233][   T28]  ? clear_bhb_loop+0x60/0xb0
[  567.388163][   T28]  asm_exc_page_fault+0x22/0x30
[  567.393101][   T28] RIP: 0033:0x7f648346ba23
[  567.397882][   T28] RSP: 002b:00007ffe5888b6e0 EFLAGS: 00010246
[  567.404289][   T28] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2f764000
[  567.412471][   T28] RDX: 0000001b2f724000 RSI: 0000000000400000 RDI: 00007f64837e0708
[  567.421207][   T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  567.429367][   T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  567.437626][   T28] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe5888b970
[  567.445792][   T28]  </TASK>
[  567.460710][   T28] INFO: task syz.2.1662:9583 blocked for more than 144 seconds.
[  567.469728][   T28]       Not tainted syzkaller #0
[  567.474813][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  567.483850][   T28] task:syz.2.1662      state:D stack:27696 pid:9583  ppid:4274   flags:0x00004004
[  567.493266][   T28] Call Trace:
[  567.496894][   T28]  <TASK>
[  567.499876][   T28]  __schedule+0x107f/0x4030
[  567.504524][   T28]  ? mark_lock+0x94/0x320
[  567.509094][   T28]  ? __lock_acquire+0x7c40/0x7c40
[  567.514335][   T28]  ? __sched_text_start+0x8/0x8
[  567.519361][   T28]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  567.526205][   T28]  ? lockdep_hardirqs_on+0x94/0x140
[  567.531806][   T28]  schedule+0xb9/0x180
[  567.535982][   T28]  io_schedule+0x7c/0xd0
[  567.540362][   T28]  bit_wait_io+0xd/0xc0
[  567.545380][   T28]  __wait_on_bit+0x9b/0x2c0
[  567.550035][   T28]  ? bit_wait+0xc0/0xc0
[  567.554631][   T28]  out_of_line_wait_on_bit+0x138/0x190
[  567.560147][   T28]  ? bit_wait+0xc0/0xc0
[  567.564729][   T28]  ? __wait_on_bit+0x2c0/0x2c0
[  567.569551][   T28]  ? do_raw_spin_lock+0x128/0x2f0
[  567.575734][   T28]  ? bit_waitqueue+0x30/0x30
[  567.580438][   T28]  ? do_raw_spin_unlock+0x11d/0x230
[  567.586110][   T28]  do_get_write_access+0x605/0xf20
[  567.591319][   T28]  jbd2_journal_get_write_access+0x108/0x140
[  567.597809][   T28]  __ext4_journal_get_write_access+0x24b/0x6e0
[  567.604382][   T28]  ? __ext4_journal_ensure_credits+0x450/0x450
[  567.610622][   T28]  ? rcu_is_watching+0x11/0xa0
[  567.615829][   T28]  ext4_reserve_inode_write+0x201/0x290
[  567.621911][   T28]  __ext4_mark_inode_dirty+0x161/0x760
[  567.628557][   T28]  ext4_dirty_inode+0xbf/0x100
[  567.633751][   T28]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  567.639796][   T28]  __mark_inode_dirty+0x2e7/0xe80
[  567.646566][   T28]  __file_update_time+0x21d/0x240
[  567.652076][   T28]  file_update_time+0x2f3/0x370
[  567.657005][   T28]  ? rcu_read_lock_bh_held+0xf0/0xf0
[  567.662502][   T28]  ? __file_remove_privs+0x5f0/0x5f0
[  567.667860][   T28]  ext4_page_mkwrite+0x1a9/0x10d0
[  567.673059][   T28]  ? pte_alloc_one+0x287/0x310
[  567.677873][   T28]  ? ext4_change_inode_journal_flag+0x710/0x710
[  567.685824][   T28]  do_page_mkwrite+0x16b/0x5c0
[  567.690650][   T28]  handle_mm_fault+0x199c/0x3d40
[  567.695699][   T28]  ? mt_find+0x157/0x830
[  567.700025][   T28]  ? numa_migrate_prep+0x250/0x250
[  567.706984][   T28]  ? lock_chain_count+0x20/0x20
[  567.712071][   T28]  ? lock_mm_and_find_vma+0xae/0x2f0
[  567.717450][   T28]  do_user_addr_fault+0x58e/0xb20
[  567.722638][   T28]  exc_page_fault+0x60/0x100
[  567.727774][   T28]  ? clear_bhb_loop+0x60/0xb0
[  567.732609][   T28]  asm_exc_page_fault+0x22/0x30
[  567.737516][   T28] RIP: 0033:0x7faff9a6ba23
[  567.742043][   T28] RSP: 002b:00007ffe64bf1a40 EFLAGS: 00010246
[  567.748255][   T28] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2f964000
[  567.756372][   T28] RDX: 0000001b2f924000 RSI: 0000000000600000 RDI: 00007faff9de0708
[  567.764526][   T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  567.772920][   T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  567.780943][   T28] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe64bf1cd0
[  567.789137][   T28]  </TASK>
[  567.792331][   T28] 
[  567.792331][   T28] Showing all locks held in the system:
[  567.800103][   T28] 1 lock held by rcu_tasks_kthre/12:
[  567.807247][   T28]  #0: ffffffff8cb2e4f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0
[  567.818424][   T28] 1 lock held by rcu_tasks_trace/13:
[  567.823941][   T28]  #0: ffffffff8cb2ed10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0
[  567.835936][   T28] 1 lock held by khungtaskd/28:
[  567.840869][   T28]  #0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  567.855254][   T28] 2 locks held by getty/4027:
[  567.860025][   T28]  #0: ffff88802fc3b098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  567.870158][   T28]  #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360
[  567.880617][   T28] 3 locks held by syz-executor/4260:
[  567.886100][   T28]  #0: ffff88807a4fdb58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0
[  567.896190][   T28]  #1: ffff88807e31c558 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0
[  567.906194][   T28]  #2: ffff88814e430990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[  567.916161][   T28] 3 locks held by kworker/u4:11/4891:
[  567.921804][   T28] 6 locks held by kworker/u4:19/8141:
[  567.927231][   T28]  #0: ffff8881442e2938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  567.938653][   T28]  #1: ffffc9001bdc7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  567.950824][   T28]  #2: ffff88807e31c0e0 (&type->s_umount_key#31){++++}-{3:3}, at: trylock_super+0x1c/0xf0
[  567.961009][   T28]  #3: ffff88807e31ec18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x213/0x2e70
[  567.971723][   T28]  #4: ffff88814e430990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[  567.981527][   T28]  #5: ffff8880743caaa8 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x914/0x1a90
[  567.991370][   T28] 3 locks held by syz.4.1657/9569:
[  567.996694][   T28]  #0: ffff8880755f5b58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0
[  568.006792][   T28]  #1: ffff88807e31c558 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0
[  568.016670][   T28]  #2: ffff88814e430990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[  568.026480][   T28] 3 locks held by syz.0.1661/9580:
[  568.031676][   T28]  #0: ffff88807d445b58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0
[  568.042247][   T28]  #1: ffff88807e31c558 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0
[  568.052246][   T28]  #2: ffff88814e430990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[  568.062029][   T28] 3 locks held by syz.2.1662/9583:
[  568.067211][   T28]  #0: ffff8880755f2e58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0
[  568.077272][   T28]  #1: ffff88807e31c558 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0
[  568.087114][   T28]  #2: ffff88814e430990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[  568.097016][   T28] 
[  568.099374][   T28] =============================================
[  568.099374][   T28] 
[  568.110600][   T28] NMI backtrace for cpu 0
[  568.115008][   T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0
[  568.122274][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  568.132376][   T28] Call Trace:
[  568.135862][   T28]  <TASK>
[  568.138818][   T28]  dump_stack_lvl+0x188/0x24e
[  568.142769][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  568.143611][   T28]  ? irq_work_queue+0xb8/0x140
[  568.150098][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  568.154731][   T28]  ? show_regs_print_info+0x12/0x12
[  568.154766][   T28]  ? load_image+0x410/0x410
[  568.154787][   T28]  ? vprintk_emit+0x59f/0x6a0
[  568.175704][   T28]  ? printk_sprint+0x460/0x460
[  568.180512][   T28]  nmi_cpu_backtrace+0x3e6/0x460
[  568.185583][   T28]  ? nmi_trigger_cpumask_backtrace+0x450/0x450
[  568.192576][   T28]  ? _printk+0xda/0x130
[  568.196797][   T28]  ? load_image+0x410/0x410
[  568.201451][   T28]  ? load_image+0x410/0x410
[  568.206031][   T28]  ? nmi_trigger_cpumask_backtrace+0xf3/0x450
[  568.212198][   T28]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  568.218412][   T28]  nmi_trigger_cpumask_backtrace+0x1d4/0x450
[  568.224462][   T28]  watchdog+0xf0e/0xf50
[  568.228704][   T28]  ? watchdog+0x1ed/0xf50
[  568.233092][   T28]  kthread+0x29d/0x330
[  568.237204][   T28]  ? hungtask_pm_notify+0x40/0x40
[  568.242279][   T28]  ? kthread_blkcg+0xd0/0xd0
[  568.246909][   T28]  ret_from_fork+0x1f/0x30
[  568.251377][   T28]  </TASK>
[  568.255080][   T28] Sending NMI from CPU 0 to CPUs 1:
[  568.260360][    C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xb/0x10
[  568.285936][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[  568.292867][   T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0
[  568.300117][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  568.310279][   T28] Call Trace:
[  568.313696][   T28]  <TASK>
[  568.316679][   T28]  dump_stack_lvl+0x188/0x24e
[  568.321431][   T28]  ? memcpy+0x3c/0x60
[  568.325527][   T28]  ? show_regs_print_info+0x12/0x12
[  568.330762][   T28]  ? load_image+0x410/0x410
[  568.335305][   T28]  panic+0x2d3/0x710
[  568.339246][   T28]  ? schedule_preempt_disabled+0x20/0x20
[  568.344916][   T28]  ? bpf_jit_dump+0xd0/0xd0
[  568.349460][   T28]  ? __irq_work_queue_local+0x12c/0x190
[  568.355046][   T28]  ? nmi_trigger_cpumask_backtrace+0x35b/0x450
[  568.361231][   T28]  ? nmi_trigger_cpumask_backtrace+0x360/0x450
[  568.367419][   T28]  watchdog+0xf4d/0xf50
[  568.371608][   T28]  ? watchdog+0x1ed/0xf50
[  568.375975][   T28]  kthread+0x29d/0x330
[  568.380155][   T28]  ? hungtask_pm_notify+0x40/0x40
[  568.385383][   T28]  ? kthread_blkcg+0xd0/0xd0
[  568.389996][   T28]  ret_from_fork+0x1f/0x30
[  568.394535][   T28]  </TASK>
[  568.397745][   T28] Kernel Offset: disabled
[  568.402087][   T28] Rebooting in 86400 seconds..