last executing test programs:

8m59.705087499s ago: executing program 0 (id=277):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r1, 0x6a98047402e98331, 0x70bd2a}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4886)

8m59.544218712s ago: executing program 0 (id=280):
unshare(0x22020600)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x8, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0)

8m59.069015631s ago: executing program 0 (id=285):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r2, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054)
sendmsg$NL80211_CMD_RELOAD_REGDB(r1, 0x0, 0x20008004)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4440b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)

8m58.838134136s ago: executing program 0 (id=289):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x58}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)

8m56.05607042s ago: executing program 0 (id=300):
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x7800, 0x8000, 0x101, 0x5, {{0xb, 0x4, 0x0, 0x0, 0x2c, 0x64, 0x0, 0xff, 0x14, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x17, 0xb1, [@private=0xa010101, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @multicast1]}]}}}}})

8m54.154850598s ago: executing program 3 (id=310):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r3)
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0xe9, 0x8, 0x2}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

8m51.916278492s ago: executing program 3 (id=315):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x2, 0x9}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @empty}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

8m51.580362158s ago: executing program 3 (id=316):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x8000, 0x0, 0x4}}}}]}, 0x44}}, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {0x1, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

8m49.524584829s ago: executing program 3 (id=320):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000340)={[{@utf8no}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@nfs_nostale_ro}, {}, {@fat=@check_normal}, {@fat=@nfs}, {@fat=@dmask={'dmask', 0x3d, 0x100}}, {@fat=@discard}, {@shortname_mixed}, {@fat=@quiet}, {@shortname_lower}]}, 0x0, 0x29f, &(0x7f0000000580)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhct9uW50M7TxEwRpQQwotRF1IUztREPGpGRiJCK2O7d+juLSlYL6Bbpx517cFEFw04UYaZKxaRswra1Tzf8HYU7OOe/MmZyZ8M5AJlvXn94rFwOn6NYVS5pi0rq2pcxOqWuku4y1y+Pqta5zk5/f/Xv1xs1LuXx+ftFsIbd0Pmtm0/+9evDo2f9v6pPXnk+/TGgzc2vrU/b95l+bf299XQrXXpVcW65W6+6y79lKKSg7Zld8zw08K1UCr1a3nvaiX11dbZpbWZlKrda8IDC30rSy17R61eq1prl33FLFHMexqZSGTfzQEYWNxUU3dyKDQRQm+lXWajk33rexsPErBgUAAE6XqPL/u6XASoFVqnvy+4P5f0yHyP+loc7/D4/8fxjs5P+p7vm7F/k/AAAAAAAAAAAAAAAAAAAAAAC/g+1WK91qtdLhMnwlJCUlhe+jHidOBvM/3Hp+uJeU/CeNQqPQWXbac0WV5MvT7Jj0pX08dHXKCxfz87PWltFrf60bv9YoxJUI40OZ/vFznXjrjV/TmFK9288qrZn+8dk+8Y3CuM6eaSW6W/bkKK23t1WVr5X2cb0b/3jO7MLl/L74iXY/AAAAAAD+BI59d+D6vd3uWPjYkH3tncrd+wNK/+D+wL7r61H9MxrdfgMAAAAAMEyC5sOy6/tebQgK4f8fHMsKo//okoN2HpXUrXlxWuZikEJM0lHD4z83yx8l7amZiXy6j6Pw4X7nDBikc5TfSgAAAABOQpj0j0Q9EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhtigDw8L+x/l2WM9m4tHs5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6fAtAAD//2kbF4o=")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020)

8m47.484999279s ago: executing program 3 (id=322):
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x19a)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@oldalloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x3a01, 0x17e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000005e80)={@id={0x2, 0x0, @a}})
fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setreuid(0x0, r2)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

8m47.076951197s ago: executing program 3 (id=323):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001400b5952cbd7000ffdbdf250a180000", @ANYRES32, @ANYBLOB="14000600010000000100070001000000feffffff140001"], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYBLOB="0100000000000000240012800900"], 0x44}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

8m46.683825874s ago: executing program 32 (id=323):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001400b5952cbd7000ffdbdf250a180000", @ANYRES32, @ANYBLOB="14000600010000000100070001000000feffffff140001"], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYBLOB="0100000000000000240012800900"], 0x44}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

8m42.404992488s ago: executing program 0 (id=335):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r3)
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0xe9, 0x8, 0x2}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

8m41.873090769s ago: executing program 33 (id=335):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r3)
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0xe9, 0x8, 0x2}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

8m14.80512864s ago: executing program 1 (id=386):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x1, 0x200000})
r0 = socket$netlink(0x10, 0x3, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c10000000000000000000", 0x58}], 0x1)

8m13.600582804s ago: executing program 1 (id=388):
accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x800)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
readv(r0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/163, 0xa3}], 0x1)

8m13.015150925s ago: executing program 1 (id=394):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_CORR={0x10, 0x1, {0x9de1, 0x39, 0x100}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

8m12.152950462s ago: executing program 1 (id=398):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

8m11.591047523s ago: executing program 1 (id=401):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x4040810)

8m10.696152681s ago: executing program 1 (id=406):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_CORR={0x10, 0x1, {0x9de1, 0x39, 0x100}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

8m9.971801525s ago: executing program 34 (id=406):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_CORR={0x10, 0x1, {0x9de1, 0x39, 0x100}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

8m0.53162414s ago: executing program 5 (id=437):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)
r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f0000000d40), 0x0, 0x0)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac00090400000107000009090585cf", @ANYRES16], 0x0)

7m57.281030324s ago: executing program 5 (id=442):
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r0, 0x0, 0xffffff6a)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000007, 0x20011, r1, 0x0)
r2 = userfaultfd(0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000058000000090a010400000000000000000700000008000a40000000000900020073797a3100000000090001"], 0xa0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x404})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000})
syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000800)={[{@nobarrier}, {@jqfmt_vfsv1}, {@orlov}, {@errors_remount}, {@errors_remount}, {@nodiscard}, {@grpjquota}, {@nodelalloc}, {@errors_remount}]}, 0x1, 0x563, &(0x7f0000001080)="$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")
syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f0000000000)={[{@user_xattr}, {@errors_remount}]}, 0x1, 0x576, &(0x7f0000000140)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x143941, 0x18)

7m54.016268628s ago: executing program 5 (id=452):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @remote}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @multicast}, 0x10)

7m52.829090741s ago: executing program 5 (id=453):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x12048d9, &(0x7f00000009c0)=ANY=[], 0x0, 0x2a5, &(0x7f0000000dc0)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020)

7m52.421721729s ago: executing program 5 (id=455):
accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x800)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
readv(r0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/163, 0xa3}], 0x1)

7m52.009400297s ago: executing program 5 (id=457):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x3, "5652359c3245d1c423170c010100000028a24f1700008000000000f4c077ce00", <r1=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r1, 0x4050}], 0x1, 0xffffffb3)
close_range(r0, 0xffffffffffffffff, 0x0)

7m51.425676249s ago: executing program 35 (id=457):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x3, "5652359c3245d1c423170c010100000028a24f1700008000000000f4c077ce00", <r1=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r1, 0x4050}], 0x1, 0xffffffb3)
close_range(r0, 0xffffffffffffffff, 0x0)

7m15.72507103s ago: executing program 6 (id=571):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=")
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

7m13.573013571s ago: executing program 6 (id=575):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='GPL\x00', 0x200005, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r1, 0x8b2a, &(0x7f0000000040))

7m13.14115045s ago: executing program 6 (id=578):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000100)="b8", 0x1, 0x2000c851, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="a0000100ffd720899a4667fffce6affc"], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="048d"], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300), 0x8)

7m12.930010464s ago: executing program 6 (id=579):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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")
setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff})
r0 = open(0x0, 0xca942, 0x0)
ftruncate(r0, 0x8002007ffb)
fsopen(0x0, 0x1)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x2)
io_setup(0x202, &(0x7f0000000200)=<r2=>0x0)
io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x7f000, 0x7f000}])
creat(&(0x7f0000000000)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x10100a, 0x0)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x10001, 0x400, 0x0, 0x0, 0x1, 0x11, "0e36af413bb901527fe4d0ce5d295c3676345a41499dd6aac69c4730251a0ca0ea0000000000000000000c00002000", "038447c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})

7m8.692443917s ago: executing program 6 (id=590):
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58)
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0})
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0)
syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000043c0)=ANY=[@ANYBLOB="003b09000000e9"], 0x2, 0x1a2, &(0x7f0000000440)="$eJzs0L9rE2Ecx/H397knPypUiYpDBRuweF6oJndVB6fgFCEHDi6CQUMam2KippfBlha6SEGq/Rd0qqMKOokoOBcHwUHPpZs0Q3EQB4nk8kTwb/B5Dfe57wfunodvK+pGGeD3/mqDMgmHg3xE0MC0jDqlRvnazN9Nbo2CS2beNPnM5FS0vHK73m43l/IX8+T+KYAfSfe3il5wTNEXysjn/dVGXW6GDMp01HxIrkrhEU6NrveYKT3J0Rs4DNxNLiu64lbhULHXuVeMllfOLHbqC82F5p0gmLtQOlcqnQ+KtxbbzdIrxHsoiies4YVkQia8NVI1HuzoA8wK4rVU7EihT7rG1o5z+uRsH+XtMUB45/bJfNWtvLrKKbLXh5evcER4ihMyU2VCoUkOqiBX1Evx9Sf9M6XIrjvO2cbd9vzGNSW/0ttl2cuKv0vK9QkKPnPD1XCY92zEzMRUYrZjdr8xLW+Gp4z3qteHz+dmOs4JSHO/3ust+Wn4IDokcEOCHEwmv1PJvXLw1nxjgi/jF8uyLMuyLMuyLOs/8CcAAP//o/hj9Q==")
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0)
open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="0800000002"], 0x202400)

7m7.349702984s ago: executing program 6 (id=594):
openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/schedstat\x00', 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
setxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2)
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000340), 0x0, 0x0, 0x1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES64=r1], 0xfdef)

7m6.647846988s ago: executing program 36 (id=594):
openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/schedstat\x00', 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
setxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2)
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000340), 0x0, 0x0, 0x1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES64=r1], 0xfdef)

1m58.696958621s ago: executing program 2 (id=1309):
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x15}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000180), 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000956d747b5bd57d917c9cc42b424c412e050c992a01a4d5a436633e03635bce5f53a9ae75bd3ff899"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
socket$nl_generic(0x10, 0x3, 0x10)
mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x0, &(0x7f0000000040)={'trans=tcp,', {'port', 0x3d, 0x10000004e22}})

1m57.147632802s ago: executing program 2 (id=1313):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200))
r1 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0)
syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100), 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e31, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffffffffffffff9a)
ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect)

1m56.836910838s ago: executing program 2 (id=1316):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0)
sendto$packet(r0, &(0x7f0000000580)="44c394f305916c4516999da20800", 0xe, 0x0, 0x0, 0x0)

1m55.71190785s ago: executing program 2 (id=1318):
openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100)
socket$netlink(0x10, 0x3, 0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000000)={0x5, 0x1, 0x3ff})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000004000000080000000100000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x7e, '\x00', 0x0, @fallback=0x36}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20)

1m51.428987664s ago: executing program 2 (id=1324):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x48)

1m45.927586641s ago: executing program 2 (id=1334):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000"], 0x38}}, 0x0)

1m31.012445934s ago: executing program 37 (id=1334):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000"], 0x38}}, 0x0)

18.465845538s ago: executing program 9 (id=1510):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
unshare(0x60480)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)

17.720088392s ago: executing program 9 (id=1512):
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x15}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000180), 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000956d747b5bd57d917c9cc42b424c412e050c992a01a4d5a436633e03635bce5f53a9ae75bd3ff899"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
socket$nl_generic(0x10, 0x3, 0x10)
mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x0, &(0x7f0000000040)={'trans=tcp,', {'port', 0x3d, 0x10000004e22}})

14.673075042s ago: executing program 4 (id=1520):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r1=>0xffffffffffffffff})
fsmount(0xffffffffffffffff, 0x1, 0x1)
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78)
close(0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
keyctl$update(0x2, r3, &(0x7f00000001c0)="23bd", 0x2)

13.551850984s ago: executing program 4 (id=1521):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r4 = syz_genetlink_get_family_id$tipc2(0x0, r3)
sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0xf4, r4, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x92d7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3a0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5242}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000010}, 0x8001)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r7)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000800)={'batadv0\x00', <r9=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x24, r8, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44801}, 0x40)
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)={0x24, r8, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x40)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$tun(r10, &(0x7f0000000340)=ANY=[], 0x33)
socket(0x2, 0x80805, 0x0)
r11 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000a40), 0x4)
r12 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r13=>0xffffffffffffffff})
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r12, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r14 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r14, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendfile(r10, r3, 0x0, 0x10000)
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x38, r2, 0x239b5da1764946cd, 0x70bd2d, 0x25dfcbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "887f9e1804d2635ee9cfef1cb8"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x40400d4)

11.982291875s ago: executing program 4 (id=1523):
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r0, 0x0, 0x0, 0xe7b, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = gettid()
process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0)

10.471820005s ago: executing program 4 (id=1525):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}, [@ldst={0x6, 0x0, 0x5}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
futex(&(0x7f0000000080)=0x3, 0x0, 0x1, &(0x7f0000000180)={0x0, 0x989680}, 0x0, 0x1)
sendmsg(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x51)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="130000001000000008"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r3, &(0x7f0000000240), 0x0}, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe2(0x0, 0x880)
r4 = syz_open_procfs(0x0, 0x0)
lseek(r4, 0x80000000457, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3})

10.016341104s ago: executing program 9 (id=1526):
fanotify_init(0x0, 0x1000)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844)

9.863064057s ago: executing program 7 (id=1527):
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

9.596857302s ago: executing program 7 (id=1529):
futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1)

7.970771344s ago: executing program 9 (id=1531):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r4 = syz_genetlink_get_family_id$tipc2(0x0, r3)
sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0xf4, r4, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x92d7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3a0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5242}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000010}, 0x8001)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r7)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000800)={'batadv0\x00', <r9=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x24, r8, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44801}, 0x40)
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)={0x24, r8, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x40)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$tun(r10, &(0x7f0000000340)=ANY=[], 0x33)
socket(0x2, 0x80805, 0x0)
r11 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000a40), 0x4)
r12 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r13=>0xffffffffffffffff})
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r12, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r14 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r14, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendfile(r10, r3, 0x0, 0x10000)
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x38, r2, 0x239b5da1764946cd, 0x70bd2d, 0x25dfcbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "887f9e1804d2635ee9cfef1cb8"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x40400d4)

7.876979756s ago: executing program 7 (id=1532):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r3, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x48)

5.63087589s ago: executing program 9 (id=1534):
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x15}, [@call={0x45}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000180), 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000956d747b5bd57d917c9cc42b424c412e050c992a01a4d5a436633e03635bce5f53a9ae75bd3ff899"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
socket$nl_generic(0x10, 0x3, 0x10)
mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x0, &(0x7f0000000040)={'trans=tcp,', {'port', 0x3d, 0x10000004e22}})

5.163111469s ago: executing program 7 (id=1535):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)

4.036967821s ago: executing program 8 (id=1537):
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

3.800624226s ago: executing program 8 (id=1538):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000005c0)={0x8f, 0x0, 0x4})

3.492841681s ago: executing program 8 (id=1539):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x107e)
socket$netlink(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdc03, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05000000000000000000210000000800", @ANYRES32=r3], 0x2c}}, 0x0)

3.137743488s ago: executing program 8 (id=1540):
fanotify_init(0x0, 0x1000)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844)

1.777978285s ago: executing program 8 (id=1541):
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r0, 0x0, 0x0, 0xe7b, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = gettid()
process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0)

1.777602315s ago: executing program 4 (id=1542):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r4 = syz_genetlink_get_family_id$tipc2(0x0, r3)
sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0xf4, r4, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x92d7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3a0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5242}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000010}, 0x8001)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r7)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000800)={'batadv0\x00', <r9=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x24, r8, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44801}, 0x40)
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)={0x24, r8, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x40)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$tun(r10, &(0x7f0000000340)=ANY=[], 0x33)
socket(0x2, 0x80805, 0x0)
r11 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000a40), 0x4)
r12 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r13=>0xffffffffffffffff})
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r12, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r14 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r14, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendfile(r10, r3, 0x0, 0x10000)
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x38, r2, 0x239b5da1764946cd, 0x70bd2d, 0x25dfcbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "887f9e1804d2635ee9cfef1cb8"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x40400d4)

754.242606ms ago: executing program 7 (id=1543):
unshare(0xc040400)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x3, 0x2, 0x8, 0x0, 0x9, 0x0, 0x0, 0x5, [0x20c, 0x6, 0xffffffff, 0x0, 0x0, 0x10000000, 0x0, 0x4]}})

314.812114ms ago: executing program 8 (id=1544):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r3, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x48)

247.071145ms ago: executing program 7 (id=1545):
syz_mount_image$iso9660(&(0x7f0000000800), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000001640)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000009,overriderockperm,utf8,map=acorn,iocharset=iso8859-1,mode=0x00000000000000c9,cruft,map=off,check=strict,overriderockperm,block=0x0000000000000200,cruft,nocompress,cruft,session=0x000000000000002e,gid=', @ANYRES64, @ANYBLOB="2c7362736563746f723d3078303030303030303030303030303030332c00d4215a15701bca521647652b2623aac16363b7c886c8e01c34c1be48fac31ff64fd975416483f623de07f461566ca6ee1f45ee43de3a417c9f293dce66ea364d3d2e284b815c568722445db6e7bc85745e23605586296a7c3b961a6202dc4d36efbb967e286625378fc6af8ffdc648cbda4797ab0d6ad05169b0e2236e6cbf8f752dbf0496b0ba34761d90d049f3be85f3c0c0e38b6daad6f29cb7ee0f1aea54884f0983e098cd5497ff80c97d0fcc"], 0x1, 0xa2f, &(0x7f0000000c00)="$eJzs3c1vXFdfB/DvHduJH/chydOGUqK2nqQkdVvj2A5NiLooiT1JXPyCbEdqxKIpjYOiGAotSG2F1FRCrFqBBGIBu4oVq0rdUBaoGwQ7umKBhPovVKzCyujOjO2xPeNxjGO76edjzcx9+d1zfnfuy/HM3JkTflxWjm8YW1mp33Y5fvMf9yFjDrGrk99/+dUX5e2zBzmSnrxe/FPSn6Sa9CZ5LumbmJyfm+lS0P3kdpJvkyLJ0TQed+R2ir/Mz9fHv03x92W9HR3Zacl0s8JP2kHvfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcBgVE5Ojo2PFkUzN3ny72pBUt5iYnJ8rsrKydc7qMg3f1Hv9Lr7pWm9SlLf096929f3cyfXZzyapnsnzjbHn6x2Spz+fPPXsiTee6a2sLt8pm/+Xozsv9sOPP7n/7vLy0gdt5xbFHmZ1yDT2keu12amFuamZK9dr1amFuerlixdHz9+4tlC9NjVdW7i1sFibqU7M164szs1XhyZeqY5dvnyhWhu5NXdz9vrkyHRtdeKlXx8fHb1YfWvkd2pX5hfmZs+/NbIwcWNqenpq9no9ppxdxlwqd8TfnlqsLtauzFSrd+8tL13YlFlPNu2/ZdBYt/Upg8a7BY2Pjo+PjY2Pj33W7D17bcLF1y+/fml0tHd0k2yJeEw7LYfLzzpv5r0/icMuVRrtfzKdqczmZt5Ote3fRCYzn7nMdJjftNr+nz1f27batLT/zVa+t2X+qfLuTF5sjvZ3aP875LJ/fx/m43yS+3k3y1nOUj448Iz29+96apnNVBYyl6nM5Ep9SrU5pZrLuZiLGc07uZHBLKQ31zKV6dSykFtZyGJq9T1qIvOp5UoWM5f5VDOUibySasZyOZdzIdXUMpJbmcvNzOZ6JnOlXsrd3Ks/7xe2yXEtaGwnQePbBG1pzB+5/a9t/ueEJ1Bl2638GM7isDsrzfb/SPfQoYn9SAgAAADYc7/67zl28ul/+++kyAv1z+WvTU3XRg86LQAAAGAP1S/Xe7586CuHXkjh9T8AAAA8aYr6d+yKJAMZbAytfhPKmwAAAADwhKh//v9iisH1CV7/AwAAwBOm+2/sd40ohld//rd6p/F4pxnRGCsGrk1N10Ym5qbfGMu5+q8M1L9psKW0nqToq3/94NWcbkSdHmg8DqyXWNbZX0aNjbwxlldzprkiQy+VDy8NtYkcb0S+3Ih8uTWyJxsiL5SRAPCkO7NNe7zT9v/VDDcihk/Vm/zeUxva4J56yzqqZQWAw2Ktj53/bXZp1qb9b0a82Kn9/41tXv+XEU/n7mDjkoKRvJf3s5w7GU7zioPBdqWu9kbQuAxhuMu7AQPNSxa+u1TJ8Jb3A/rX1rU1dinjGW77jkBLucVqDhcacT2PZxsAwH47s207vNb+927X/g9v//q/pc11SSEAHAZrPdg/6sDgzoMPeh0BgI200gAAAAAAAAAAAAAAAAAAAAAAAAAAALD3dvQD/v9xLlleXkp221lAm4Hv/vWff6ljzOdPJf2PkuH2A5XsTc6Hf6AnyUHV/mYeealyGx+Wp87AxoEDPjEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwL4qkp930SnI0yWiS8/uf1ePz4KAT2CvV3S1WPMzDfJRje50OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBPXfP3/ytpPD7VmJTeSnI2ye0kv3vQOT6K/i7zH+5THofPH9TvW37/v5L0ZaVIb2Ozp+ibmJyfmyl3heJoOf/7L7/6orx1LPLT1YGtvSqUBZQ1bOhcollDy5S+jUv9or7UwOTSh/f/5P0/qk5ere+YVxevTU/OXJ//rfXAZ4uvG10gtHaDsJrvn539l79qmXykWfnX5Zq2t7nea/V6J7fW+yvtlu5Q7w7cW14aL2tarL29+Kd/WGmd9XROJy8NJUMba/r98tahptObn8+Nih+KvyiO5W9zu779y2ejWCnKTXS8vv4/u3tveWnkvfeX76zl9Om9j1oKOJHBJHc2HmVdchqsn0/aqu91lb6y1tF6UHl3skt522opcWz9ed2wDr+o7zIDj7QO1c7rUNfleW9mdGFzRivlQfLXf/xMzm27pY+2KfFclxrbKn4o/qu4kf/Mn7f0/1Ept//ZtD062xRRj2zZU1rnbTi8KmfX13y8dcY7m8vseFTyGHye38tvrm3/Ssv5v7mtOhw3a+ejN1smdjhuVg+tbY6Llhq3HBdN3Y6LrUfqPxzf0qKsqx9GJze1SM2zT6dlmnmebER1yPOX81rSe+qRziivdTmjdFt+t8f/3xVD+Z880P8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw+BVJT7vpleRskhNJjpfj1WRlc8yDXdRXGSh2k+ae2U3OPz5FxxUtHuZhPsqx/c4IAAAAAAAAgMfj6uT3X371RXmrfx7fk1+rNOdUk94kJ4q/6ZuYnJ+b6VJQX3J79SP9/vYhHSbndnn38/Xxb8ux57rUd7CXDwDAj9r/BQAA//+CGm1g")
mount$binder(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1000810, 0x0)
symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='./file0\x00')

246.001135ms ago: executing program 4 (id=1546):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000003c0)={[{@delalloc}, {@data_err_abort}, {@bh}, {@dioread_lock}, {@nombcache}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@noload}, {@init_itable}, {@bh}, {@dioread_nolock}]}, 0x1, 0x56b, &(0x7f0000000fc0)="$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")
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e21, @private=0xa010101}, 0x10)
sched_rr_get_interval(r1, &(0x7f00000001c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@usrquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x513, &(0x7f0000000440)="$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")
syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, 0x0)
shmget$private(0x0, 0x2000, 0x10, &(0x7f0000748000/0x2000)=nil)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12)
r4 = syz_mount_image$exfat(0x0, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1880c20, 0x0, 0x3, 0x0, &(0x7f0000000000))
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
statx(r4, &(0x7f0000000280)='./file1\x00', 0x2000, 0x1, &(0x7f0000000700))

0s ago: executing program 9 (id=1547):
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.47' (ED25519) to the list of known hosts.
[   82.076149][ T5773] cgroup: Unknown subsys name 'net'
[   82.240289][ T5773] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   83.965942][ T5773] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   85.813858][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   85.816754][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   85.823725][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   85.837262][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   85.847612][ T5802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   85.855692][ T5802] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   85.863327][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   85.870933][ T5802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   85.871232][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   85.890723][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   85.898715][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   85.908066][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   85.908600][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   85.916307][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   85.930238][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   85.937960][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   85.938747][ T5792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   85.955295][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   85.963004][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   85.971378][ T5797] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   85.981547][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   85.994746][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   86.003910][ T5799] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   86.013186][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   86.479570][ T5786] chnl_net:caif_netlink_parms(): no params data found
[   86.552810][ T5784] chnl_net:caif_netlink_parms(): no params data found
[   86.675167][ T5787] chnl_net:caif_netlink_parms(): no params data found
[   86.695265][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.702786][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.710295][ T5786] bridge_slave_0: entered allmulticast mode
[   86.717623][ T5786] bridge_slave_0: entered promiscuous mode
[   86.744649][ T5785] chnl_net:caif_netlink_parms(): no params data found
[   86.783213][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.790363][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.798032][ T5786] bridge_slave_1: entered allmulticast mode
[   86.805598][ T5786] bridge_slave_1: entered promiscuous mode
[   86.871440][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.878660][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.885988][ T5784] bridge_slave_0: entered allmulticast mode
[   86.894172][ T5784] bridge_slave_0: entered promiscuous mode
[   86.936335][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.947254][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.955560][ T5784] bridge_slave_1: entered allmulticast mode
[   86.963800][ T5784] bridge_slave_1: entered promiscuous mode
[   86.992816][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.005347][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.093530][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.119537][ T5786] team0: Port device team_slave_0 added
[   87.126566][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.134743][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.142306][ T5787] bridge_slave_0: entered allmulticast mode
[   87.149364][ T5787] bridge_slave_0: entered promiscuous mode
[   87.158169][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.165460][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.172853][ T5787] bridge_slave_1: entered allmulticast mode
[   87.180086][ T5787] bridge_slave_1: entered promiscuous mode
[   87.189027][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.214933][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.225601][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.233054][ T5785] bridge_slave_0: entered allmulticast mode
[   87.240539][ T5785] bridge_slave_0: entered promiscuous mode
[   87.252724][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.259866][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.268004][ T5785] bridge_slave_1: entered allmulticast mode
[   87.275320][ T5785] bridge_slave_1: entered promiscuous mode
[   87.284180][ T5786] team0: Port device team_slave_1 added
[   87.353800][ T5784] team0: Port device team_slave_0 added
[   87.536364][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.554494][ T5784] team0: Port device team_slave_1 added
[   87.599631][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.606903][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.634133][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.648624][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.697091][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.707186][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.714897][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.741575][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.764754][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.772047][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.798359][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.811929][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.872981][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.880001][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.906205][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.936047][ T5785] team0: Port device team_slave_0 added
[   87.952154][ T5100] Bluetooth: hci3: command tx timeout
[   87.962648][ T5787] team0: Port device team_slave_0 added
[   87.976991][ T5785] team0: Port device team_slave_1 added
[   87.988003][ T5786] hsr_slave_0: entered promiscuous mode
[   87.995891][ T5786] hsr_slave_1: entered promiscuous mode
[   88.005232][ T5787] team0: Port device team_slave_1 added
[   88.032289][ T5100] Bluetooth: hci1: command tx timeout
[   88.038257][ T5789] Bluetooth: hci2: command tx timeout
[   88.085388][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.093634][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.119702][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.121532][ T5789] Bluetooth: hci0: command tx timeout
[   88.133140][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.142830][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.168948][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.186776][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.193970][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.220247][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.233168][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.240169][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.266192][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.330619][ T5784] hsr_slave_0: entered promiscuous mode
[   88.338036][ T5784] hsr_slave_1: entered promiscuous mode
[   88.344600][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.354090][ T5784] Cannot create hsr debugfs directory
[   88.423927][ T5787] hsr_slave_0: entered promiscuous mode
[   88.430602][ T5787] hsr_slave_1: entered promiscuous mode
[   88.437499][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.445280][ T5787] Cannot create hsr debugfs directory
[   88.519471][ T5785] hsr_slave_0: entered promiscuous mode
[   88.527274][ T5785] hsr_slave_1: entered promiscuous mode
[   88.533675][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.541701][ T5785] Cannot create hsr debugfs directory
[   88.895167][ T5786] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   88.920135][ T5786] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   88.933080][ T5786] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   88.957481][ T5786] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   89.039705][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   89.057892][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   89.078349][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   89.093691][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   89.187021][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   89.206166][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   89.221433][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   89.233218][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   89.319883][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   89.335035][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   89.347542][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   89.358427][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   89.417699][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.499269][ T5786] 8021q: adding VLAN 0 to HW filter on device team0
[   89.535040][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.542454][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.577587][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.584816][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.623077][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.654328][ T5784] 8021q: adding VLAN 0 to HW filter on device team0
[   89.684816][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.692244][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.729394][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.754891][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.762125][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.817724][ T5785] 8021q: adding VLAN 0 to HW filter on device team0
[   89.829625][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.890456][ T3503] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.897726][ T3503] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.919793][ T3503] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.927058][ T3503] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.958840][ T5787] 8021q: adding VLAN 0 to HW filter on device team0
[   89.999391][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.006638][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.031566][ T5789] Bluetooth: hci3: command tx timeout
[   90.058175][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.065553][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.114813][ T5789] Bluetooth: hci1: command tx timeout
[   90.120301][ T5789] Bluetooth: hci2: command tx timeout
[   90.191371][ T5789] Bluetooth: hci0: command tx timeout
[   90.198411][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   90.326956][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.410903][ T5786] veth0_vlan: entered promiscuous mode
[   90.460869][ T5786] veth1_vlan: entered promiscuous mode
[   90.486051][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.562621][ T5786] veth0_macvtap: entered promiscuous mode
[   90.586978][ T5786] veth1_macvtap: entered promiscuous mode
[   90.674813][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.705489][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.714927][ T5784] veth0_vlan: entered promiscuous mode
[   90.740092][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.772882][ T5786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.783973][ T5786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.792806][ T5786] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.801679][ T5786] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.842171][ T5784] veth1_vlan: entered promiscuous mode
[   90.903361][ T5785] veth0_vlan: entered promiscuous mode
[   90.946719][ T5785] veth1_vlan: entered promiscuous mode
[   90.969668][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.975797][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.995883][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.027769][ T5784] veth0_macvtap: entered promiscuous mode
[   91.059786][ T5784] veth1_macvtap: entered promiscuous mode
[   91.068860][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.078817][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.123121][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.136760][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.154109][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.178247][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.193671][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.205763][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.224280][ T5785] veth0_macvtap: entered promiscuous mode
[   91.249459][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.259656][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.275231][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.285334][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.309113][ T5785] veth1_macvtap: entered promiscuous mode
[   91.362520][ T5787] veth0_vlan: entered promiscuous mode
[   91.407872][ T5787] veth1_vlan: entered promiscuous mode
[   91.505145][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.525978][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.568126][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.590111][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.623445][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.685010][ T5787] veth0_macvtap: entered promiscuous mode
[   91.697241][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.713194][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.727580][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.745367][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.764881][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.814369][ T5787] veth1_macvtap: entered promiscuous mode
[   91.841409][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.851658][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.866601][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.876654][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.887028][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.898079][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.986053][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.005148][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.017291][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.034754][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.044824][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.055655][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.067450][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.079010][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.093416][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.104352][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.115227][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.126619][ T5789] Bluetooth: hci3: command tx timeout
[   92.136370][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.148386][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.158718][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.171436][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.183170][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.192429][ T5789] Bluetooth: hci1: command tx timeout
[   92.192571][ T5100] Bluetooth: hci2: command tx timeout
[   92.263964][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.273634][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.282986][ T5100] Bluetooth: hci0: command tx timeout
[   92.288606][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.297426][   T27] cfg80211: failed to load regulatory.db
[   92.303832][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.391913][ T5891] netlink: 'syz.1.9': attribute type 16 has an invalid length.
[   92.421202][ T5891] netlink: 'syz.1.9': attribute type 17 has an invalid length.
[   92.457341][ T5891] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   92.620352][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.665254][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.897148][ T5899] Zero length message leads to an empty skb
[   92.978076][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.022597][ T3503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.033568][ T3503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.042681][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.197596][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.213328][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.115654][ T5909] netlink: 'syz.2.10': attribute type 13 has an invalid length.
[   94.127275][ T5909] netlink: 'syz.2.10': attribute type 17 has an invalid length.
[   94.201512][ T5100] Bluetooth: hci3: command tx timeout
[   94.272450][ T5100] Bluetooth: hci2: command tx timeout
[   94.272539][ T5789] Bluetooth: hci1: command tx timeout
[   94.314588][ T5909] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   94.342570][ T5912] syzkaller0: entered promiscuous mode
[   94.348159][ T5912] syzkaller0: entered allmulticast mode
[   94.355356][ T5789] Bluetooth: hci0: command tx timeout
[   94.376992][ T5921] wg1 speed is unknown, defaulting to 1000
[   94.399927][ T5928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.505211][ T5921] wg1 speed is unknown, defaulting to 1000
[   94.535455][ T5921] wg1 speed is unknown, defaulting to 1000
[   94.578248][ T5921] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   94.628925][ T5921] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   94.808197][ T5921] wg1 speed is unknown, defaulting to 1000
[   94.883591][ T5921] wg1 speed is unknown, defaulting to 1000
[   94.922982][ T5921] wg1 speed is unknown, defaulting to 1000
[   94.933601][ T5921] wg1 speed is unknown, defaulting to 1000
[   94.947166][ T5921] wg1 speed is unknown, defaulting to 1000
[   95.049518][ T5945] syz.1.16 uses obsolete (PF_INET,SOCK_PACKET)
[   95.187237][ T5943] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.494536][ T5943] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.656161][ T5943] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.708860][ T5960] netlink: 'syz.1.21': attribute type 4 has an invalid length.
[   95.870734][ T5943] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.914829][ T5963] netlink: 'syz.1.21': attribute type 4 has an invalid length.
[   95.999083][ T5960] syz.1.21 (5960) used greatest stack depth: 20552 bytes left
[   96.228402][ T5943] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.275484][ T5943] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.325572][ T5943] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.376248][ T5943] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.888685][ T5994] netlink: 32 bytes leftover after parsing attributes in process `syz.1.33'.
[   97.175862][ T6004] tipc: Started in network mode
[   97.183333][ T6004] tipc: Node identity b24c0513b8a9, cluster identity 4711
[   97.196499][ T6004] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.212440][ T6004] syzkaller0: entered promiscuous mode
[   97.227199][ T6004] syzkaller0: entered allmulticast mode
[   97.303002][ T6004] tipc: Resetting bearer <eth:syzkaller0>
[   97.317979][ T6003] tipc: Resetting bearer <eth:syzkaller0>
[   97.357100][ T6003] tipc: Disabling bearer <eth:syzkaller0>
[   97.723678][ T6020] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   97.889649][ T6026] netlink: set zone limit has 8 unknown bytes
[   98.056165][ T6024] syzkaller0: entered promiscuous mode
[   98.061902][ T6024] syzkaller0: entered allmulticast mode
[   98.261381][ T6038] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.276335][ T6038] syzkaller0: entered promiscuous mode
[   98.285621][ T6038] syzkaller0: entered allmulticast mode
[   98.329051][ T6038] tipc: Resetting bearer <eth:syzkaller0>
[   98.362526][ T6037] tipc: Resetting bearer <eth:syzkaller0>
[   98.429574][ T6037] tipc: Disabling bearer <eth:syzkaller0>
[   98.657896][ T6049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.56'.
[   98.867657][ T6058] netlink: 180 bytes leftover after parsing attributes in process `syz.1.60'.
[   98.876883][ T6058] netlink: 180 bytes leftover after parsing attributes in process `syz.1.60'.
[   98.886275][ T6058] netlink: 14 bytes leftover after parsing attributes in process `syz.1.60'.
[   99.321928][ T6074] tipc: Started in network mode
[   99.327000][ T6074] tipc: Node identity f27f6f47c728, cluster identity 4711
[   99.335050][ T6074] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.344347][ T6074] syzkaller0: entered promiscuous mode
[   99.361475][ T6074] syzkaller0: entered allmulticast mode
[   99.395046][ T6074] tipc: Resetting bearer <eth:syzkaller0>
[   99.412393][ T6072] tipc: Resetting bearer <eth:syzkaller0>
[   99.455499][ T6072] tipc: Disabling bearer <eth:syzkaller0>
[   99.903621][ T6090] ax25_connect(): syz.3.74 uses autobind, please contact jreuter@yaina.de
[  100.892261][ T6131] siw: device registration error -23
[  102.677183][ T6207] netlink: set zone limit has 8 unknown bytes
[  102.873092][ T6212] tipc: Started in network mode
[  102.878195][ T6212] tipc: Node identity 06a6cf31056b, cluster identity 4711
[  102.888352][ T6212] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.900417][ T6212] syzkaller0: entered promiscuous mode
[  102.908604][ T6212] syzkaller0: entered allmulticast mode
[  102.951555][ T6212] tipc: Resetting bearer <eth:syzkaller0>
[  102.974716][ T6210] tipc: Resetting bearer <eth:syzkaller0>
[  103.007342][ T6210] tipc: Disabling bearer <eth:syzkaller0>
[  103.337190][ T6228] netlink: 'syz.1.124': attribute type 8 has an invalid length.
[  103.982129][ T6257] netlink: set zone limit has 8 unknown bytes
[  104.557679][ T6276] wg1 speed is unknown, defaulting to 1000
[  105.379207][ T6298] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  105.773601][ T6297] syz.0.148 (6297) used greatest stack depth: 17960 bytes left
[  106.479726][ T6313] tipc: Started in network mode
[  106.494134][ T6313] tipc: Node identity ac1414aa, cluster identity 4711
[  106.525256][ T6313] tipc: Enabled bearer <udp:syz2>, priority 10
[  106.585047][ T6315] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.617183][ T6315] syzkaller0: entered promiscuous mode
[  106.628210][ T6315] syzkaller0: entered allmulticast mode
[  106.711136][ T6315] tipc: Resetting bearer <eth:syzkaller0>
[  106.720199][ T6314] tipc: Resetting bearer <eth:syzkaller0>
[  106.774377][ T6314] tipc: Disabling bearer <eth:syzkaller0>
[  106.810906][ T6321] wg1 speed is unknown, defaulting to 1000
[  107.642524][ T5937] tipc: Node number set to 2886997162
[  107.840465][ T6348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.166'.
[  108.354665][ T6374] geneve2: entered promiscuous mode
[  108.509024][ T6379] netlink: 24 bytes leftover after parsing attributes in process `syz.0.178'.
[  108.705417][ T6383] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.740578][ T6383] syzkaller0: entered promiscuous mode
[  108.751398][ T6383] syzkaller0: entered allmulticast mode
[  108.821995][ T6383] tipc: Resetting bearer <eth:syzkaller0>
[  108.855826][ T6390] TCP: TCP_TX_DELAY enabled
[  108.863195][ T6382] tipc: Resetting bearer <eth:syzkaller0>
[  108.913827][ T6382] tipc: Disabling bearer <eth:syzkaller0>
[  108.980046][ T6395] vxcan2: entered allmulticast mode
[  109.909538][ T6424] netlink: 16 bytes leftover after parsing attributes in process `syz.3.196'.
[  109.935495][ T6424] netlink: 16 bytes leftover after parsing attributes in process `syz.3.196'.
[  109.957828][ T6424] netlink: 40 bytes leftover after parsing attributes in process `syz.3.196'.
[  110.152034][ T6434] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  110.373951][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.205'.
[  110.389022][ T6444] syz_tun: entered promiscuous mode
[  110.404922][ T6444] syz_tun: left promiscuous mode
[  110.911328][ T6462] netlink: 'syz.0.214': attribute type 21 has an invalid length.
[  110.919241][ T6462] netlink: 156 bytes leftover after parsing attributes in process `syz.0.214'.
[  110.929949][ T6460] syzkaller0: entered promiscuous mode
[  110.945752][ T6460] syzkaller0: entered allmulticast mode
[  111.239858][ T6473] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.258041][ T6473] syzkaller0: entered promiscuous mode
[  111.280661][ T6473] syzkaller0: entered allmulticast mode
[  111.349134][ T6473] tipc: Resetting bearer <eth:syzkaller0>
[  111.373546][ T6472] tipc: Resetting bearer <eth:syzkaller0>
[  111.431466][ T6472] tipc: Disabling bearer <eth:syzkaller0>
[  111.544832][ T6481] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.580341][ T6481] tipc: Resetting bearer <eth:syzkaller0>
[  111.667867][ T6479] tipc: Disabling bearer <eth:syzkaller0>
[  111.939767][ T6494] syzkaller0: entered promiscuous mode
[  111.951239][ T6494] syzkaller0: entered allmulticast mode
[  112.398699][ T6510] netlink: 28 bytes leftover after parsing attributes in process `syz.1.237'.
[  112.528881][ T6517] netlink: 16 bytes leftover after parsing attributes in process `syz.1.237'.
[  112.662654][ T6517] Bluetooth: MGMT ver 1.22
[  113.405265][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.253'.
[  113.480871][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.253'.
[  114.322384][ T6577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.268'.
[  114.551402][ T6580] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  114.654621][ T6588] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.788051][ T6588] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.863266][ T6588] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.978021][ T6588] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.237303][ T6588] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.270925][ T6588] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.373242][ T6588] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.420035][ T6588] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.452785][ T6609] syzkaller0: entered promiscuous mode
[  115.458399][ T6609] syzkaller0: entered allmulticast mode
[  116.545047][ T6641] syz.0.289[6641]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[  116.579798][ T6641] loop0: detected capacity change from 0 to 512
[  116.717578][ T6641] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.289: corrupted in-inode xattr: invalid ea_ino
[  116.810166][ T6641] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.289: couldn't read orphan inode 15 (err -117)
[  116.814787][ T6645] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.865086][ T6641] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.873123][ T6645] syzkaller0: entered promiscuous mode
[  116.896162][ T6645] syzkaller0: entered allmulticast mode
[  116.955446][ T6641] =======================================================
[  116.955446][ T6641] WARNING: The mand mount option has been deprecated and
[  116.955446][ T6641]          and is ignored by this kernel. Remove the mand
[  116.955446][ T6641]          option from the mount to silence this warning.
[  116.955446][ T6641] =======================================================
[  117.013026][ T6645] tipc: Resetting bearer <eth:syzkaller0>
[  117.040047][ T6643] tipc: Resetting bearer <eth:syzkaller0>
[  117.105944][ T6643] tipc: Disabling bearer <eth:syzkaller0>
[  117.391334][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  117.542436][ T6664] loop2: detected capacity change from 0 to 16
[  117.559258][ T6664] erofs: Unknown parameter ''
[  117.633646][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  117.736765][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  117.838596][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  119.014242][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  119.061718][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  119.072559][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  119.176255][ T5785] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  119.253579][ T5785] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 15
[  119.303778][ T5785] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 15
[  119.598678][ T6677] loop3: detected capacity change from 0 to 764
[  119.628931][ T6677] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  119.783112][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  120.492715][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  120.896702][ T6695] syzkaller0: entered promiscuous mode
[  120.902790][ T6695] syzkaller0: entered allmulticast mode
[  121.523815][    T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!!
[  121.524399][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  123.036376][ T6707] syzkaller0: entered promiscuous mode
[  123.061442][ T6707] syzkaller0: entered allmulticast mode
[  123.322093][ T6713] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  125.868032][ T6743] loop3: detected capacity change from 0 to 128
[  128.295931][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.473936][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.624688][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.744036][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.765944][ T6754] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  129.114070][   T12] tipc: Left network mode
[  129.347725][ T5100] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  129.357199][ T5100] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  129.365827][ T5100] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  129.374475][ T5100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  129.385375][ T5100] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  129.407341][ T5100] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  129.520257][ T6771] wg1 speed is unknown, defaulting to 1000
[  130.633434][ T6793] syzkaller0: entered promiscuous mode
[  130.640310][ T6793] syzkaller0: entered allmulticast mode
[  130.796810][ T6800] loop2: detected capacity change from 0 to 2048
[  130.879610][ T5798] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  130.946544][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.731287][ T5100] Bluetooth: hci0: command tx timeout
[  132.856673][ T6771] chnl_net:caif_netlink_parms(): no params data found
[  133.241812][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  133.248589][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  133.523033][ T6771] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.541222][ T6771] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.558793][ T6771] bridge_slave_0: entered allmulticast mode
[  133.570283][ T6771] bridge_slave_0: entered promiscuous mode
[  133.617854][ T6815] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  133.650350][ T6771] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.687628][ T6771] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.710252][ T6771] bridge_slave_1: entered allmulticast mode
[  133.732716][ T6771] bridge_slave_1: entered promiscuous mode
[  133.959795][   T12] hsr_slave_0: left promiscuous mode
[  133.980458][   T12] hsr_slave_1: left promiscuous mode
[  134.002639][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  134.037594][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  134.072185][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  134.079756][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  134.143708][   T12] bridge_slave_1: left allmulticast mode
[  134.149435][   T12] bridge_slave_1: left promiscuous mode
[  134.182584][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.214394][   T12] bridge_slave_0: left allmulticast mode
[  134.220137][   T12] bridge_slave_0: left promiscuous mode
[  134.250913][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.263868][ T5100] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  134.276031][ T5100] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  134.284865][ T5100] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  134.306026][ T5100] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  134.321405][ T5100] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  134.329286][ T5100] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  135.501581][ T5100] Bluetooth: hci0: command tx timeout
[  135.535030][   T12] veth1_macvtap: left promiscuous mode
[  135.558086][   T12] veth0_macvtap: left promiscuous mode
[  135.576370][   T12] veth1_vlan: left promiscuous mode
[  135.583051][   T12] veth0_vlan: left promiscuous mode
[  136.433047][ T5100] Bluetooth: hci2: command tx timeout
[  136.530858][   T12] team0 (unregistering): Port device team_slave_1 removed
[  136.619438][   T12] team0 (unregistering): Port device team_slave_0 removed
[  136.674116][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  136.719401][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  137.260554][   T12] bond0 (unregistering): Released all slaves
[  137.393060][ T6771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  137.405934][   T54] wg1 speed is unknown, defaulting to 1000
[  137.432994][ T6771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  137.551516][ T5100] Bluetooth: hci0: command tx timeout
[  137.664784][ T6771] team0: Port device team_slave_0 added
[  137.678459][ T6771] team0: Port device team_slave_1 added
[  137.835827][ T6771] batman_adv: batadv0: Adding interface: batadv_slave_0
[  137.847162][ T6771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.875441][ T6771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  137.899935][ T6771] batman_adv: batadv0: Adding interface: batadv_slave_1
[  137.926197][ T6771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.965175][ T6771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  138.199358][ T6771] hsr_slave_0: entered promiscuous mode
[  138.268523][ T6771] hsr_slave_1: entered promiscuous mode
[  138.320433][ T6771] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  138.338465][ T6771] Cannot create hsr debugfs directory
[  138.535510][ T6877] loop2: detected capacity change from 0 to 736
[  138.566807][ T5100] Bluetooth: hci2: command tx timeout
[  139.631284][ T5789] Bluetooth: hci0: command tx timeout
[  139.709992][ T6890] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  139.808834][ T6887] loop1: detected capacity change from 0 to 512
[  139.872068][ T6887] EXT4-fs: Ignoring removed orlov option
[  139.951382][ T6887] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  140.036897][ T6887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.056216][ T6887] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.114308][ T6831] chnl_net:caif_netlink_parms(): no params data found
[  140.243735][ T6771] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  140.248718][ T6868] EXT4-fs warning (device loop1): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 1918985075
[  140.295995][ T6868] EXT4-fs warning (device loop1): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 1918985075
[  140.368553][ T6771] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  140.400516][ T6771] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  140.457495][ T6911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.348'.
[  140.561309][ T6771] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  140.569834][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.592361][ T5789] Bluetooth: hci2: command tx timeout
[  140.603378][ T5786] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5902: Out of memory
[  140.619379][ T5786] EXT4-fs (loop1): Remounting filesystem read-only
[  140.640227][   T12] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.044877][   T12] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.062619][ T6831] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.069849][ T6831] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.077594][ T6831] bridge_slave_0: entered allmulticast mode
[  141.086384][ T6831] bridge_slave_0: entered promiscuous mode
[  141.149057][ T6831] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.172301][ T6831] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.182541][ T6831] bridge_slave_1: entered allmulticast mode
[  141.190659][ T6831] bridge_slave_1: entered promiscuous mode
[  141.204400][   T12] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.218828][ T6937] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.265661][ T6937] syzkaller0: entered promiscuous mode
[  141.271687][ T6937] syzkaller0: entered allmulticast mode
[  141.287813][   T12] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.306155][ T6831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  141.324165][ T6831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  141.344933][ T6937] tipc: Resetting bearer <eth:syzkaller0>
[  141.387164][ T6936] tipc: Resetting bearer <eth:syzkaller0>
[  141.422007][ T6936] tipc: Disabling bearer <eth:syzkaller0>
[  141.489649][ T6831] team0: Port device team_slave_0 added
[  141.515849][ T6831] team0: Port device team_slave_1 added
[  142.693434][ T5789] Bluetooth: hci2: command tx timeout
[  142.808653][ T6952] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  142.872654][ T6831] batman_adv: batadv0: Adding interface: batadv_slave_0
[  142.879681][ T6831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.951122][ T6831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  142.984107][ T6831] batman_adv: batadv0: Adding interface: batadv_slave_1
[  143.020383][ T6831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.101068][ T6831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  143.460774][ T6831] hsr_slave_0: entered promiscuous mode
[  143.487812][ T6831] hsr_slave_1: entered promiscuous mode
[  143.541422][ T6831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  143.549060][ T6831] Cannot create hsr debugfs directory
[  143.644238][   T12] tipc: Disabling bearer <udp:syz2>
[  143.656596][   T12] tipc: Left network mode
[  143.771350][ T6771] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.056610][ T6771] 8021q: adding VLAN 0 to HW filter on device team0
[  144.424873][ T6899] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.432162][ T6899] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.477629][ T6899] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.485022][ T6899] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.533245][ T6831] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  145.619782][ T6831] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  145.650659][ T6831] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  145.752743][ T6831] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  147.686540][ T6771] 8021q: adding VLAN 0 to HW filter on device batadv0
[  148.167298][ T7031] loop1: detected capacity change from 0 to 2048
[  148.194715][   T12] hsr_slave_0: left promiscuous mode
[  148.201817][   T12] hsr_slave_1: left promiscuous mode
[  148.220473][ T7031] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  148.233128][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  148.240629][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  148.264132][ T7031] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  148.299410][ T7031] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  148.318763][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  148.328295][ T7031] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  148.351191][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  148.371597][ T7031] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=385, location=385
[  148.382365][   T12] bridge_slave_1: left allmulticast mode
[  148.388081][   T12] bridge_slave_1: left promiscuous mode
[  148.397584][ T7031] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1)
[  148.401093][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.417471][   T12] bridge_slave_0: left allmulticast mode
[  148.427534][   T12] bridge_slave_0: left promiscuous mode
[  148.442575][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.502992][   T12] veth1_macvtap: left promiscuous mode
[  148.509592][   T12] veth0_macvtap: left promiscuous mode
[  148.540565][   T12] veth1_vlan: left promiscuous mode
[  148.561178][   T12] veth0_vlan: left promiscuous mode
[  149.918766][   T12] team0 (unregistering): Port device team_slave_1 removed
[  149.967058][   T12] team0 (unregistering): Port device team_slave_0 removed
[  150.013916][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  150.067345][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  150.549336][   T12] bond0 (unregistering): Released all slaves
[  150.634832][ T7044] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  150.651474][ T7044] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  150.666945][ T7044] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  150.745955][ T7048] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  150.974167][ T6831] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.008806][ T6771] veth0_vlan: entered promiscuous mode
[  152.609839][ T6771] veth1_vlan: entered promiscuous mode
[  152.756771][ T6831] 8021q: adding VLAN 0 to HW filter on device team0
[  152.781795][ T7071] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.813504][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.820797][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  152.861425][ T7071] syzkaller0: entered promiscuous mode
[  152.866966][ T7071] syzkaller0: entered allmulticast mode
[  152.889097][ T6993] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.896435][ T6993] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.026592][ T6771] veth0_macvtap: entered promiscuous mode
[  153.085490][ T7070] tipc: Resetting bearer <eth:syzkaller0>
[  153.166696][ T7070] tipc: Disabling bearer <eth:syzkaller0>
[  153.204000][ T6771] veth1_macvtap: entered promiscuous mode
[  153.323560][ T6771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  153.360554][ T6771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.381198][ T6771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  153.399488][ T6771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.429112][ T6771] batman_adv: batadv0: Interface activated: batadv_slave_0
[  153.465087][ T6771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  153.501283][ T6771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.521416][ T6771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  153.533367][ T6771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.546547][ T6771] batman_adv: batadv0: Interface activated: batadv_slave_1
[  153.603385][ T6771] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.640325][ T6771] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.238128][ T6771] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.288392][ T6771] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.707420][ T3503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.749614][ T3503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.822827][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.834320][ T7100] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  155.852519][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.028708][ T6831] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.564274][ T7125] Bluetooth: MGMT ver 1.22
[  158.693151][ T7134] syzkaller0: entered promiscuous mode
[  158.699008][ T7134] syzkaller0: entered allmulticast mode
[  158.972667][ T6831] veth0_vlan: entered promiscuous mode
[  159.044430][ T6831] veth1_vlan: entered promiscuous mode
[  159.167929][ T6831] veth0_macvtap: entered promiscuous mode
[  159.274338][ T6831] veth1_macvtap: entered promiscuous mode
[  159.515128][ T6831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.640361][ T6831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.841071][ T6831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.881144][ T6831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.929405][ T6831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.940221][ T6831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.952956][ T6831] batman_adv: batadv0: Interface activated: batadv_slave_0
[  159.980092][ T6831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  160.008898][ T6831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.021802][ T6831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  160.061100][ T6831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.101137][ T6831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  160.138248][ T6831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.156522][ T6831] batman_adv: batadv0: Interface activated: batadv_slave_1
[  160.169440][ T6831] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  160.194137][ T6831] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  160.211101][ T6831] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  160.238546][ T6831] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  160.270876][ T7152] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  160.590645][ T7167] capability: warning: `syz.1.386' uses deprecated v2 capabilities in a way that may be insecure
[  160.624238][ T7161] tipc: Started in network mode
[  160.629289][ T7161] tipc: Node identity fab42417bec5, cluster identity 4711
[  160.721936][ T7161] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.768571][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.808682][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.843764][ T7166] syzkaller0: entered promiscuous mode
[  160.870241][ T7166] syzkaller0: entered allmulticast mode
[  161.186301][ T7160] tipc: Resetting bearer <eth:syzkaller0>
[  161.598699][ T7160] tipc: Disabling bearer <eth:syzkaller0>
[  161.666687][ T6993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  161.735940][ T6993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  161.862719][ T7182] syzkaller0: entered promiscuous mode
[  161.868272][ T7182] syzkaller0: entered allmulticast mode
[  162.195072][ T7195] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  162.215262][ T7195] syzkaller0: entered promiscuous mode
[  162.220881][ T7195] syzkaller0: entered allmulticast mode
[  162.227103][ T7193] loop4: detected capacity change from 0 to 1024
[  162.292056][ T7195] tipc: Resetting bearer <eth:syzkaller0>
[  162.352607][ T7194] tipc: Resetting bearer <eth:syzkaller0>
[  162.430116][ T7194] tipc: Disabling bearer <eth:syzkaller0>
[  162.479358][ T7201] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  162.502816][ T7198] loop5: detected capacity change from 0 to 4096
[  162.648098][ T7198] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.925555][ T7215] syzkaller0: entered promiscuous mode
[  162.939472][ T7215] syzkaller0: entered allmulticast mode
[  163.190026][ T7198] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.205689][ T7221] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.227838][ T7224] loop1: detected capacity change from 0 to 1024
[  163.250504][ T7224] EXT4-fs: Ignoring removed bh option
[  163.278575][ T7221] tipc: Resetting bearer <eth:syzkaller0>
[  163.363450][ T7224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.405696][ T7230] loop2: detected capacity change from 0 to 1024
[  163.413982][ T7219] tipc: Disabling bearer <eth:syzkaller0>
[  163.415968][ T7230] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  163.546129][ T7230] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #11: comm syz.2.399: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  163.606518][ T7230] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.399: couldn't read orphan inode 11 (err -117)
[  163.634403][ T7230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.762591][ T7230] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.399: Invalid block bitmap block 0 in block_group 0
[  163.824118][ T7230] Quota error (device loop2): write_blk: dquota write failed
[  163.845847][ T7240] syzkaller0: entered promiscuous mode
[  163.851401][ T7240] syzkaller0: entered allmulticast mode
[  163.862195][ T7230] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  163.882810][ T7230] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.399: Failed to acquire dquot type 0
[  164.061530][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.205112][ T7249] loop5: detected capacity change from 0 to 512
[  164.299418][ T7249] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.322853][ T7249] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.382657][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.412857][   T28] audit: type=1800 audit(1757570030.902:2): pid=7249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.405" name=0AF301 dev="loop5" ino=18 res=0 errno=0
[  164.440666][ T7249] EXT4-fs error (device loop5): ext4_ext_remove_space:2929: inode #15: comm syz.5.405: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[  164.478086][ T3503] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.502293][ T7249] EXT4-fs error (device loop5): ext4_evict_inode:263: comm syz.5.405: couldn't truncate inode 15 (err -117)
[  164.662936][ T3503] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.683018][ T6831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.809169][ T3503] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.042451][ T3503] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.455541][ T3503] tipc: Left network mode
[  165.889922][ T7284] syzkaller0: entered promiscuous mode
[  165.914479][ T7284] syzkaller0: entered allmulticast mode
[  166.305733][ T5100] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  166.324137][ T5100] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  166.333964][ T5100] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  166.353529][ T5100] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  166.371148][ T5100] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  166.379532][ T5100] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  168.259211][ T5858] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  168.515182][ T5789] Bluetooth: hci3: command tx timeout
[  168.595665][ T7329] syzkaller0: entered promiscuous mode
[  168.603053][ T7329] syzkaller0: entered allmulticast mode
[  168.678715][ T5858] usb 3-1: Using ep0 maxpacket: 16
[  168.714690][ T5858] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30
[  168.741537][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  168.753756][ T5858] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[  168.778220][ T5858] usb 3-1: New USB device found, idVendor=18d1, idProduct=5022, bcdDevice= 0.00
[  168.791581][ T7332] tipc: Started in network mode
[  168.796533][ T7332] tipc: Node identity da15c9f45bd, cluster identity 4711
[  168.798903][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.828601][ T7332] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  168.837618][ T5858] usb 3-1: config 0 descriptor??
[  168.995870][ T7336] tipc: Resetting bearer <eth:syzkaller0>
[  169.018563][ T7291] chnl_net:caif_netlink_parms(): no params data found
[  169.104845][ T7346] loop4: detected capacity change from 0 to 512
[  169.115104][ T7346] EXT4-fs: Ignoring removed i_version option
[  169.132922][ T7346] ext4: Unknown parameter 'smackfsdef'
[  169.150812][ T7331] tipc: Disabling bearer <eth:syzkaller0>
[  170.075765][ T7346] loop4: detected capacity change from 0 to 256
[  170.640540][ T7346] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d)
[  170.655676][ T5789] Bluetooth: hci3: command tx timeout
[  170.801745][ T5858] usbhid 3-1:0.0: can't add hid device: -71
[  170.809635][ T5858] usbhid: probe of 3-1:0.0 failed with error -71
[  170.928506][ T5858] usb 3-1: USB disconnect, device number 2
[  171.523545][ T3503] hsr_slave_0: left promiscuous mode
[  171.555379][ T3503] hsr_slave_1: left promiscuous mode
[  171.589445][ T3503] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.626614][ T3503] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.658914][ T3503] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.714036][ T3503] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.765831][ T3503] bridge_slave_1: left allmulticast mode
[  171.779565][ T3503] bridge_slave_1: left promiscuous mode
[  171.785625][ T3503] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.830921][ T3503] bridge_slave_0: left allmulticast mode
[  171.855009][ T3503] bridge_slave_0: left promiscuous mode
[  171.875495][ T3503] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.894833][ T7354] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  171.995906][ T3503] veth1_macvtap: left promiscuous mode
[  172.019158][ T3503] veth0_macvtap: left promiscuous mode
[  172.032357][ T7355] loop2: detected capacity change from 0 to 1764
[  172.040476][ T3503] veth1_vlan: left promiscuous mode
[  172.063623][ T3503] veth0_vlan: left promiscuous mode
[  172.289625][ T7352] loop5: detected capacity change from 0 to 512
[  172.307332][ T7352] EXT4-fs: Ignoring removed orlov option
[  172.355711][ T7352] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  172.491870][ T7352] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.504761][ T7352] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.568123][ T3503] bond1 (unregistering): Released all slaves
[  172.606524][ T7352] EXT4-fs error (device loop5): ext4_do_update_inode:5230: inode #2: comm syz.5.429: corrupted inode contents
[  172.697508][ T7352] EXT4-fs (loop5): Remounting filesystem read-only
[  172.762858][ T5789] Bluetooth: hci3: command tx timeout
[  173.064498][ T6831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.095245][ T1127] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[  173.627479][ T3503] team0 (unregistering): Port device team_slave_1 removed
[  173.708462][ T3503] team0 (unregistering): Port device team_slave_0 removed
[  173.755286][ T3503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  173.811950][ T3503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  174.345458][ T3503] bond0 (unregistering): Released all slaves
[  174.573921][ T7377] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  176.380748][ T5789] Bluetooth: hci3: command tx timeout
[  176.634826][ T7291] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.642338][ T7291] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.650029][ T7291] bridge_slave_0: entered allmulticast mode
[  176.657786][ T7291] bridge_slave_0: entered promiscuous mode
[  176.669089][ T7291] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.677926][ T7291] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.686707][ T7291] bridge_slave_1: entered allmulticast mode
[  176.699149][ T7291] bridge_slave_1: entered promiscuous mode
[  176.877521][    T8] usb 6-1: new low-speed USB device number 2 using dummy_hcd
[  177.983687][ T7403] tmpfs: Bad value for 'mpol'
[  178.056835][ T7405] loop4: detected capacity change from 0 to 1024
[  178.153154][ T7405] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  178.168783][ T7291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  178.243120][ T7291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  178.276217][ T7405] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.431092][ T7405] netlink: 116 bytes leftover after parsing attributes in process `syz.4.440'.
[  178.464760][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.440'.
[  178.500555][ T7291] team0: Port device team_slave_0 added
[  178.532153][ T7291] team0: Port device team_slave_1 added
[  178.631825][ T6771] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.720892][ T7291] batman_adv: batadv0: Adding interface: batadv_slave_0
[  178.727912][ T7291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.066181][ T7291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  179.225593][ T7291] batman_adv: batadv0: Adding interface: batadv_slave_1
[  179.260921][ T7291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.353546][ T7291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  179.725914][ T7291] hsr_slave_0: entered promiscuous mode
[  179.755825][ T7291] hsr_slave_1: entered promiscuous mode
[  179.781772][ T7425] loop4: detected capacity change from 0 to 1024
[  179.827517][ T7425] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  179.859404][ T7425] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  180.002960][ T6771] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  180.284145][ T7440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.447'.
[  180.361338][ T7428] loop5: detected capacity change from 0 to 512
[  180.394785][ T7428] EXT4-fs: Ignoring removed orlov option
[  180.415715][ T7428] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  180.510642][ T7428] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  180.533045][ T7447] loop2: detected capacity change from 0 to 512
[  180.545385][ T7428] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  180.634006][ T7447] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a00cc018, mo2=0002]
[  180.659870][ T7447] System zones: 0-2, 18-18, 34-35
[  180.672820][ T7447] EXT4-fs (loop2): mounted filesystem 00000b00-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  180.694003][ T7291] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  180.715807][ T7291] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  180.737770][ T7291] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  180.738750][ T7428] EXT4-fs error (device loop5): ext4_do_update_inode:5230: inode #2: comm syz.5.442: corrupted inode contents
[  180.777165][ T7428] EXT4-fs (loop5): Remounting filesystem read-only
[  180.793137][ T7291] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  180.975622][ T5784] EXT4-fs (loop2): unmounting filesystem 00000b00-0000-0000-0000-000000000000.
[  181.154050][ T7291] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.303183][ T6831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.326760][   T48] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[  181.352486][ T7291] 8021q: adding VLAN 0 to HW filter on device team0
[  181.373986][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.381255][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[  181.475826][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.480926][ T7469] loop2: detected capacity change from 0 to 1024
[  181.483166][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.589382][ T7471] batadv_slave_1: entered promiscuous mode
[  181.949950][ T7470] batadv_slave_1: left promiscuous mode
[  182.514857][ T1127] hfsplus: b-tree write err: -5, ino 8
[  182.575406][ T7483] loop5: detected capacity change from 0 to 128
[  183.124476][ T7493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.456'.
[  183.211831][ T7291] 8021q: adding VLAN 0 to HW filter on device batadv0
[  183.345912][ T3503] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.515625][ T3503] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.731633][ T3503] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.913430][ T3503] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.396758][ T3503] tipc: Left network mode
[  184.487406][ T7520] loop2: detected capacity change from 0 to 2048
[  184.617411][ T7291] veth0_vlan: entered promiscuous mode
[  184.765407][ T7520] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  184.962601][   T28] audit: type=1800 audit(1757570051.134:3): pid=7520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.462" name="file1" dev="loop2" ino=1415 res=0 errno=0
[  185.058346][   T28] audit: type=1800 audit(1757570051.223:4): pid=7520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.462" name="file1" dev="loop2" ino=1415 res=0 errno=0
[  185.161553][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  185.176962][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  185.185832][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  185.212196][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  185.224092][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  185.233049][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  185.638549][ T7291] veth1_vlan: entered promiscuous mode
[  185.664185][ T7547] loop2: detected capacity change from 0 to 128
[  185.703373][ T7547] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  185.730858][ T7547] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.624703][ T7559] nbd: must specify a size in bytes for the device
[  186.660887][ T5784] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  186.758486][ T7291] veth0_macvtap: entered promiscuous mode
[  186.891136][ T7291] veth1_macvtap: entered promiscuous mode
[  187.317289][ T5100] Bluetooth: hci2: command tx timeout
[  187.484988][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.537513][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.564701][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.593660][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.611087][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.634486][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.665771][ T7291] batman_adv: batadv0: Interface activated: batadv_slave_0
[  187.695967][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.725929][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.736439][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.747839][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.758151][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.769201][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.817190][ T7291] batman_adv: batadv0: Interface activated: batadv_slave_1
[  187.901621][ T7291] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  187.917547][ T7291] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  187.931516][ T7291] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  187.950353][ T7291] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  187.973357][ T7535] chnl_net:caif_netlink_parms(): no params data found
[  188.040043][ T7591] loop2: detected capacity change from 0 to 256
[  188.093376][ T7591] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  188.154118][ T3503] hsr_slave_0: left promiscuous mode
[  188.170169][ T3503] hsr_slave_1: left promiscuous mode
[  188.181128][ T3503] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  188.197187][ T3503] batman_adv: batadv0: Removing interface: batadv_slave_0
[  188.225770][ T3503] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  188.400557][ T3503] batman_adv: batadv0: Removing interface: batadv_slave_1
[  188.444619][ T3503] bridge_slave_1: left allmulticast mode
[  188.473403][ T3503] bridge_slave_1: left promiscuous mode
[  188.479306][ T3503] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.506758][ T3503] bridge_slave_0: left allmulticast mode
[  188.512507][ T3503] bridge_slave_0: left promiscuous mode
[  188.540529][ T3503] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.590876][ T3503] veth1_macvtap: left promiscuous mode
[  188.598129][ T3503] veth0_macvtap: left promiscuous mode
[  188.614402][ T3503] veth1_vlan: left promiscuous mode
[  188.669591][ T3503] veth0_vlan: left promiscuous mode
[  189.414733][ T5100] Bluetooth: hci2: command tx timeout
[  190.278993][ T3503] team0 (unregistering): Port device team_slave_1 removed
[  190.336295][ T3503] team0 (unregistering): Port device team_slave_0 removed
[  190.386803][ T3503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  190.440681][ T3503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  192.330640][ T5100] Bluetooth: hci2: command tx timeout
[  192.943821][ T3503] bond0 (unregistering): Released all slaves
[  193.092001][ T7597] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  193.101939][ T7597] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  193.114784][ T7597] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  193.286447][ T7535] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.298399][ T7535] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.306694][ T7535] bridge_slave_0: entered allmulticast mode
[  193.327919][ T7535] bridge_slave_0: entered promiscuous mode
[  193.340967][ T7535] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.367688][ T7535] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.384759][ T7535] bridge_slave_1: entered allmulticast mode
[  193.403251][ T7535] bridge_slave_1: entered promiscuous mode
[  193.526618][ T7535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  193.568009][ T7535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  193.701001][ T7535] team0: Port device team_slave_0 added
[  193.729578][ T7535] team0: Port device team_slave_1 added
[  193.877644][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.887461][ T7535] batman_adv: batadv0: Adding interface: batadv_slave_0
[  193.902403][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.924157][ T7535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.984005][ T7535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  194.051878][ T7535] batman_adv: batadv0: Adding interface: batadv_slave_1
[  194.066248][ T7535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.127721][ T7535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  194.262486][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.288056][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.339979][ T7535] hsr_slave_0: entered promiscuous mode
[  194.404553][ T7535] hsr_slave_1: entered promiscuous mode
[  194.411058][ T5100] Bluetooth: hci2: command tx timeout
[  194.434212][ T7535] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  194.441852][ T7535] Cannot create hsr debugfs directory
[  194.458005][ T7637] loop4: detected capacity change from 0 to 128
[  194.513392][ T7637] EXT4-fs: Ignoring removed nobh option
[  194.626397][ T7637] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  194.664190][ T7637] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  194.842861][ T7643] loop6: detected capacity change from 0 to 2048
[  194.925225][ T7643] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  194.928425][ T6771] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  194.975167][ T7643] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  195.020190][ T7643] UDF-fs: Scanning with blocksize 512 failed
[  195.132794][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  195.139496][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  195.159324][ T7535] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  195.183365][ T7643] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  195.335321][ T7535] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  195.425561][ T7535] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  195.491076][ T7535] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  196.209369][ T7535] 8021q: adding VLAN 0 to HW filter on device bond0
[  196.277002][ T7535] 8021q: adding VLAN 0 to HW filter on device team0
[  196.319337][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.326633][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  196.390640][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.397922][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  196.892745][ T7661] loop6: detected capacity change from 0 to 512
[  196.915015][ T7661] EXT4-fs: Ignoring removed orlov option
[  196.956955][ T7661] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  197.063189][ T7661] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.072041][ T7685] syzkaller0: entered promiscuous mode
[  197.089498][ T7661] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  197.134634][ T7685] syzkaller0: entered allmulticast mode
[  197.165587][ T7661] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #2: comm syz.6.487: corrupted inode contents
[  197.187351][ T7661] EXT4-fs (loop6): Remounting filesystem read-only
[  197.403970][ T7535] 8021q: adding VLAN 0 to HW filter on device batadv0
[  197.564414][ T7291] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.576242][   T42] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[  199.283974][ T7535] veth0_vlan: entered promiscuous mode
[  199.313482][ T7535] veth1_vlan: entered promiscuous mode
[  199.412069][ T5838] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  199.413970][ T7535] veth0_macvtap: entered promiscuous mode
[  199.475285][ T7535] veth1_macvtap: entered promiscuous mode
[  199.541516][ T7535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  199.558858][ T7535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.574679][ T7535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  199.590406][ T7535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.600710][ T7535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  199.623994][ T7535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.625666][ T5838] usb 7-1: Using ep0 maxpacket: 32
[  199.643113][ T7535] batman_adv: batadv0: Interface activated: batadv_slave_0
[  199.656813][ T5838] usb 7-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  199.679999][ T7535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  199.711047][ T7535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.723138][ T7535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  199.733539][ T5838] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  199.752884][ T5838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.761146][ T7535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.781485][ T5838] usb 7-1: Product: syz
[  199.791700][ T7535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  199.798811][ T5838] usb 7-1: Manufacturer: syz
[  199.823157][ T5838] usb 7-1: SerialNumber: syz
[  199.832764][ T7535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.859706][ T5838] usb 7-1: config 0 descriptor??
[  199.875159][ T7535] batman_adv: batadv0: Interface activated: batadv_slave_1
[  199.889981][ T5838] usb 7-1: bad CDC descriptors
[  199.909854][ T5838] usb 7-1: unsupported MDLM descriptors
[  199.939297][ T7535] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  199.973577][ T7535] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  199.982376][ T7535] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  200.042259][ T7535] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  201.218962][ T7747] loop4: detected capacity change from 0 to 128
[  201.234643][ T7747] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  202.811505][    T8] usb 7-1: USB disconnect, device number 2
[  203.021554][ T3503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  203.055654][ T3503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.130517][ T7754] syzkaller0: entered promiscuous mode
[  203.141258][ T7754] syzkaller0: entered allmulticast mode
[  203.320427][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  203.342703][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.716511][ T7771] loop7: detected capacity change from 0 to 16
[  203.808957][ T7771] erofs: (device loop7): mounted with root inode @ nid 36.
[  204.102428][ T7778] loop4: detected capacity change from 0 to 1024
[  204.270976][   T28] audit: type=1800 audit(1757570070.358:5): pid=7778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.511" name="file2" dev="loop4" ino=21 res=0 errno=0
[  204.884065][ T7791] loop6: detected capacity change from 0 to 512
[  205.058687][ T7791] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  205.132580][ T7791] EXT4-fs (loop6): 1 orphan inode deleted
[  205.169218][ T7791] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.207780][ T6993] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  205.222281][ T7791] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  205.275966][ T6993] EXT4-fs error (device loop6): ext4_release_dquot:6976: comm kworker/u4:9: Failed to release dquot type 1
[  206.222886][ T7291] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.526776][ T7815] loop7: detected capacity change from 0 to 256
[  206.612806][ T7815] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d)
[  207.371080][   T27] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  207.581139][   T27] usb 8-1: Using ep0 maxpacket: 8
[  207.616053][   T27] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  207.644336][   T27] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00
[  207.671200][   T27] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.689460][   T27] usb 8-1: config 0 descriptor??
[  208.160370][   T27] corsair 0003:1B1C:1B09.0001: unbalanced collection at end of report description
[  208.217057][   T27] corsair 0003:1B1C:1B09.0001: parse failed
[  208.250880][   T27] corsair: probe of 0003:1B1C:1B09.0001 failed with error -22
[  208.357182][   T27] usb 8-1: USB disconnect, device number 2
[  209.783214][ T7893] loop6: detected capacity change from 0 to 1024
[  209.801400][ T7893] EXT4-fs: Ignoring removed bh option
[  209.818311][ T7893] EXT4-fs: Ignoring removed bh option
[  209.872497][ T7893] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  210.011925][ T7893] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  210.232239][ T7903] loop2: detected capacity change from 0 to 512
[  211.024445][ T7291] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.110807][ T7903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.340572][   T28] audit: type=1800 audit(1757570077.415:6): pid=7903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.547" name="bus" dev="loop2" ino=18 res=0 errno=0
[  213.174800][ T5789] Bluetooth: hci1: command 0x0406 tx timeout
[  213.256270][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.410547][ T7922] netlink: 24 bytes leftover after parsing attributes in process `syz.7.551'.
[  213.575598][ T7926] loop2: detected capacity change from 0 to 256
[  213.980565][ T7932] futex_wake_op: syz.4.554 tries to shift op by -1; fix this program
[  214.292654][ T7940] loop7: detected capacity change from 0 to 128
[  214.384433][ T5798] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  216.836327][ T5100] Bluetooth: hci0: Opcode 0x1407 failed: -110
[  216.846535][ T5100] Bluetooth: hci0: command 0x1407 tx timeout
[  216.965966][ T7953] loop7: detected capacity change from 0 to 128
[  216.973046][ T7953] EXT4-fs: Ignoring removed nobh option
[  217.125954][ T7953] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  217.189785][ T7953] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  217.460086][ T7535] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  217.705874][ T7965] loop2: detected capacity change from 0 to 512
[  217.802285][ T7965] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  217.866371][ T7965] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  217.874615][ T7965] System zones: 0-1, 15-15, 18-18, 34-34
[  218.005912][ T7965] EXT4-fs (loop2): orphan cleanup on readonly fs
[  218.023118][ T7965] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0
[  218.063531][ T7965] EXT4-fs warning (device loop2): ext4_enable_quotas:7175: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  218.108200][ T7965] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  218.158492][ T7965] EXT4-fs (loop2): 1 truncate cleaned up
[  218.170262][ T7965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  218.272385][ T7965] fscrypt (loop2, inode 16): Error -61 getting encryption context
[  218.496248][ T7980] loop7: detected capacity change from 0 to 256
[  218.545198][ T7980] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  218.563144][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.095051][ T7988] loop7: detected capacity change from 0 to 1024
[  219.109120][ T7990] loop6: detected capacity change from 0 to 256
[  221.922502][ T8010] warning: `syz.6.575' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  222.258854][ T8019] loop2: detected capacity change from 0 to 256
[  222.351926][ T8019] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  222.466454][ T8023] loop6: detected capacity change from 0 to 512
[  222.513614][ T8023] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  222.550956][ T8023] EXT4-fs (loop6): invalid journal inode
[  222.556923][ T8023] EXT4-fs (loop6): can't get journal size
[  222.676751][ T8023] EXT4-fs (loop6): 1 truncate cleaned up
[  222.751389][ T8023] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  222.803390][ T8031] loop2: detected capacity change from 0 to 1024
[  222.850133][ T8031] EXT4-fs: Ignoring removed bh option
[  222.936135][ T8031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  223.189981][ T8031] EXT4-fs error (device loop2): ext4_xattr_block_find:1886: inode #15: comm syz.2.581: corrupted xattr block 113: invalid header
[  223.268016][ T8031] EXT4-fs (loop2): Remounting filesystem read-only
[  223.303492][ T8039] loop6: detected capacity change from 512 to 2
[  223.352419][ T8023] syz.6.579: attempt to access beyond end of device
[  223.352419][ T8023] loop6: rw=14337, sector=74, nr_sectors = 2 limit=2
[  223.408552][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.430996][ T8023] Buffer I/O error on dev loop6, logical block 37, lost sync page write
[  223.477004][ T8023] EXT4-fs error (device loop6): ext4_splice_branch:472: inode #13: block 37: comm syz.6.579: IO error syncing itable block
[  225.201936][ T8028] EXT4-fs error (device loop6): ext4_check_bdev_write_error:225: comm ext4lazyinit: Error while async write back metadata
[  225.262047][ T8023] syz.6.579: attempt to access beyond end of device
[  225.262047][ T8023] loop6: rw=145409, sector=2, nr_sectors = 2 limit=2
[  225.314709][   T11] kworker/u4:0: attempt to access beyond end of device
[  225.314709][   T11] loop6: rw=1, sector=504, nr_sectors = 8 limit=2
[  225.371941][   T11] EXT4-fs warning (device loop6): ext4_end_bio:357: I/O error 10 writing to inode 13 starting block 252)
[  225.388517][ T8023] Buffer I/O error on dev loop6, logical block 1, lost sync page write
[  225.407515][   T11] Buffer I/O error on device loop6, logical block 252
[  225.414823][   T11] Buffer I/O error on device loop6, logical block 253
[  225.421736][   T11] Buffer I/O error on device loop6, logical block 254
[  225.428545][   T11] Buffer I/O error on device loop6, logical block 255
[  225.442057][ T8023] EXT4-fs (loop6): I/O error while writing superblock
[  225.450304][ T8023] EXT4-fs error (device loop6): ext4_check_bdev_write_error:225: comm syz.6.579: Error while async write back metadata
[  225.451013][ T8028] ext4lazyinit: attempt to access beyond end of device
[  225.451013][ T8028] loop6: rw=145409, sector=2, nr_sectors = 2 limit=2
[  225.483761][   T11] kworker/u4:0: attempt to access beyond end of device
[  225.483761][   T11] loop6: rw=1, sector=52, nr_sectors = 2 limit=2
[  225.500327][   T11] EXT4-fs warning (device loop6): ext4_end_bio:357: I/O error 10 writing to inode 13 starting block 26)
[  225.516813][   T11] Buffer I/O error on device loop6, logical block 26
[  225.524177][ T8028] Buffer I/O error on dev loop6, logical block 1, lost sync page write
[  225.539698][   T11] kworker/u4:0: attempt to access beyond end of device
[  225.539698][   T11] loop6: rw=1, sector=76, nr_sectors = 30 limit=2
[  225.565249][ T8023] EXT4-fs (loop6): previous I/O error to superblock detected
[  225.576887][ T8023] syz.6.579: attempt to access beyond end of device
[  225.576887][ T8023] loop6: rw=145409, sector=2, nr_sectors = 2 limit=2
[  225.594722][   T11] EXT4-fs warning (device loop6): ext4_end_bio:357: I/O error 10 writing to inode 13 starting block 38)
[  225.609162][ T8023] Buffer I/O error on dev loop6, logical block 1, lost sync page write
[  225.635202][   T11] Buffer I/O error on device loop6, logical block 38
[  225.641968][   T11] Buffer I/O error on device loop6, logical block 39
[  225.647595][ T8023] EXT4-fs (loop6): I/O error while writing superblock
[  225.648655][   T11] Buffer I/O error on device loop6, logical block 40
[  225.665585][ T8028] EXT4-fs (loop6): I/O error while writing superblock
[  225.691497][ T8028] ext4lazyinit: attempt to access beyond end of device
[  225.691497][ T8028] loop6: rw=2057, sector=10, nr_sectors = 16 limit=2
[  225.692328][ T8023] EXT4-fs error (device loop6): ext4_check_bdev_write_error:225: comm syz.6.579: Error while async write back metadata
[  225.732104][ T8028] ext4lazyinit: attempt to access beyond end of device
[  225.732104][ T8028] loop6: rw=2049, sector=10, nr_sectors = 16 limit=2
[  225.750767][   T11] Buffer I/O error on device loop6, logical block 41
[  225.757544][   T11] Buffer I/O error on device loop6, logical block 42
[  225.776094][ T8023] syz.6.579: attempt to access beyond end of device
[  225.776094][ T8023] loop6: rw=145409, sector=2, nr_sectors = 2 limit=2
[  225.857351][ T8023] Buffer I/O error on dev loop6, logical block 1, lost sync page write
[  225.893795][ T8023] EXT4-fs (loop6): I/O error while writing superblock
[  225.912837][ T8023] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5902: Corrupt filesystem
[  225.938054][ T8023] Buffer I/O error on dev loop6, logical block 1, lost sync page write
[  225.952532][ T8023] EXT4-fs (loop6): I/O error while writing superblock
[  225.964453][ T8023] EXT4-fs error (device loop6): ext4_dirty_inode:6106: inode #13: comm syz.6.579: mark_inode_dirty error
[  225.978631][ T8023] Buffer I/O error on dev loop6, logical block 1, lost sync page write
[  226.014968][ T8023] EXT4-fs (loop6): I/O error while writing superblock
[  226.039424][ T8023] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:478: comm syz.6.579: Invalid block bitmap block 0 in block_group 0
[  226.088973][ T8023] Buffer I/O error on dev loop6, logical block 1, lost sync page write
[  226.118920][ T8023] EXT4-fs (loop6): I/O error while writing superblock
[  226.144138][ T8023] EXT4-fs error (device loop6): ext4_discard_preallocations:5619: comm syz.6.579: Error -117 reading block bitmap for 0
[  226.201152][ T8023] Buffer I/O error on dev loop6, logical block 1, lost sync page write
[  226.218750][ T8023] EXT4-fs (loop6): I/O error while writing superblock
[  226.254141][ T8023] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.579: invalid indirect mapped block 36 (level 1)
[  226.287864][ T8023] Buffer I/O error on dev loop6, logical block 1, lost sync page write
[  226.300133][ T8023] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5902: Corrupt filesystem
[  227.880693][ T8083] loop4: detected capacity change from 0 to 128
[  227.911589][ T8083] EXT4-fs: Ignoring removed nobh option
[  227.983237][ T8083] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  228.066598][ T8083] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  228.188184][ T1127] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.320663][ T6771] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  228.465587][ T1127] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.625029][ T1127] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.881043][ T1127] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.933719][ T8096] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  229.137894][ T8105] loop7: detected capacity change from 0 to 256
[  229.182063][ T8105] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  229.777194][ T5100] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  229.788525][ T5100] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  229.797381][ T5100] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  229.828218][ T5100] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  229.881547][ T5100] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  229.889289][ T5100] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  232.143836][ T5100] Bluetooth: hci3: command tx timeout
[  232.168680][ T8137] loop2: detected capacity change from 0 to 128
[  232.210727][ T8137] EXT4-fs: Ignoring removed nobh option
[  232.307905][ T8137] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  232.449396][ T8137] ext4 filesystem being mounted at /176/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  234.655757][ T5100] Bluetooth: hci3: command tx timeout
[  235.914075][ T5784] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  236.161057][ T8156] loop2: detected capacity change from 0 to 1024
[  236.662901][ T8161] syzkaller0: entered promiscuous mode
[  236.688952][ T8161] syzkaller0: entered allmulticast mode
[  236.699125][ T5100] Bluetooth: hci3: command tx timeout
[  236.899717][ T8111] chnl_net:caif_netlink_parms(): no params data found
[  237.124563][ T8170] loop4: detected capacity change from 0 to 1024
[  237.154009][ T8170] EXT4-fs: Ignoring removed nobh option
[  237.176817][ T8170] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  237.244486][ T8170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.379763][ T8170] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4031: comm syz.4.609: Allocating blocks 497-513 which overlap fs metadata
[  237.456388][ T8169] EXT4-fs (loop4): pa ffff88807851e488: logic 160, phys. 305, len 13
[  237.465083][ T8169] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1
[  237.567843][ T6771] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.593226][ T8186] loop2: detected capacity change from 0 to 128
[  237.620834][ T8111] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.646201][ T8111] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.653529][ T8111] bridge_slave_0: entered allmulticast mode
[  237.669230][ T8186] EXT4-fs: Ignoring removed nobh option
[  237.677141][ T8111] bridge_slave_0: entered promiscuous mode
[  237.727858][ T8186] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  237.755431][ T8186] ext4 filesystem being mounted at /180/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  237.770255][ T1127] hsr_slave_0: left promiscuous mode
[  239.429974][ T5100] Bluetooth: hci3: command tx timeout
[  239.491719][ T1127] hsr_slave_1: left promiscuous mode
[  239.567839][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  239.575332][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_0
[  239.602631][ T5784] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  239.613600][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  239.629701][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_1
[  241.163321][ T1127] bridge_slave_1: left allmulticast mode
[  241.187475][ T1127] bridge_slave_1: left promiscuous mode
[  241.193317][ T1127] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.218797][ T1127] bridge_slave_0: left allmulticast mode
[  241.225541][ T1127] bridge_slave_0: left promiscuous mode
[  241.273598][ T1127] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.364821][ T1127] veth1_macvtap: left promiscuous mode
[  241.376241][ T1127] veth0_macvtap: left promiscuous mode
[  241.382153][ T1127] veth1_vlan: left promiscuous mode
[  241.399859][ T1127] veth0_vlan: left promiscuous mode
[  243.756241][ T1127] team0 (unregistering): Port device team_slave_1 removed
[  243.831697][ T1127] team0 (unregistering): Port device team_slave_0 removed
[  243.922687][ T1127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  243.981294][ T1127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  244.590313][ T1127] bond0 (unregistering): Released all slaves
[  244.675230][ T8111] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.682597][ T8111] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.689944][ T8111] bridge_slave_1: entered allmulticast mode
[  244.701503][ T8111] bridge_slave_1: entered promiscuous mode
[  244.794596][ T8111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  244.822452][ T8111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  244.977443][ T8111] team0: Port device team_slave_0 added
[  244.988102][ T8111] team0: Port device team_slave_1 added
[  245.173196][ T8111] batman_adv: batadv0: Adding interface: batadv_slave_0
[  245.216853][ T8111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  245.266364][ T8111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  246.691485][ T8111] batman_adv: batadv0: Adding interface: batadv_slave_1
[  246.698595][ T8111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  246.732084][ T8111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  247.083180][ T8111] hsr_slave_0: entered promiscuous mode
[  247.108844][ T8111] hsr_slave_1: entered promiscuous mode
[  247.251514][ T8240] syzkaller0: entered promiscuous mode
[  247.261112][ T8240] syzkaller0: entered allmulticast mode
[  247.808980][ T8111] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  247.826138][ T8111] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  247.856086][ T8111] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  247.927325][ T8111] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  249.047207][ T8111] 8021q: adding VLAN 0 to HW filter on device bond0
[  249.114720][ T8111] 8021q: adding VLAN 0 to HW filter on device team0
[  249.180042][ T3503] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.187252][ T3503] bridge0: port 1(bridge_slave_0) entered forwarding state
[  249.243278][ T3503] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.250544][ T3503] bridge0: port 2(bridge_slave_1) entered forwarding state
[  249.407828][ T8268] syzkaller0: entered promiscuous mode
[  249.413384][ T8268] syzkaller0: entered allmulticast mode
[  249.870575][ T8111] 8021q: adding VLAN 0 to HW filter on device batadv0
[  250.647930][ T5937] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  250.837780][ T5937] usb 8-1: Using ep0 maxpacket: 16
[  250.850198][ T5937] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30
[  251.010160][ T5937] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  251.054364][ T5937] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[  251.084618][ T5937] usb 8-1: New USB device found, idVendor=18d1, idProduct=5022, bcdDevice= 0.00
[  251.095171][ T5937] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.116166][ T5937] usb 8-1: config 0 descriptor??
[  253.579528][ T5100] Bluetooth: hci0: command 0x1407 tx timeout
[  253.582062][ T5937] usbhid 8-1:0.0: can't add hid device: -71
[  253.593068][ T5937] usbhid: probe of 8-1:0.0 failed with error -71
[  253.602615][ T5937] usb 8-1: USB disconnect, device number 3
[  253.929132][ T8313] syzkaller0: entered promiscuous mode
[  253.934713][ T8313] syzkaller0: entered allmulticast mode
[  253.984320][ T8111] veth0_vlan: entered promiscuous mode
[  254.142064][ T8111] veth1_vlan: entered promiscuous mode
[  254.232305][ T8111] veth0_macvtap: entered promiscuous mode
[  254.269409][ T8111] veth1_macvtap: entered promiscuous mode
[  254.326295][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.368120][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.398116][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.433380][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.455275][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.482759][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.510997][ T8111] batman_adv: batadv0: Interface activated: batadv_slave_0
[  254.568982][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.602441][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.622532][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.650529][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.668187][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.699898][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.711875][ T8111] batman_adv: batadv0: Interface activated: batadv_slave_1
[  254.776667][ T8111] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  254.809314][ T8111] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  254.822769][ T8111] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  254.831765][ T8111] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  255.240719][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.434621][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.090621][ T8295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.117289][ T8295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.565810][ T8346] loop8: detected capacity change from 0 to 256
[  256.576928][ T8347] loop7: detected capacity change from 0 to 256
[  256.606572][ T8347] exfat: Deprecated parameter 'namecase'
[  256.628510][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  256.635219][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  256.726092][ T8347] exfat: Deprecated parameter 'namecase'
[  256.839968][ T8347] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  256.938891][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz.7.658'.
[  257.288653][ T8358] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  257.310893][ T8358] tipc: Resetting bearer <eth:syzkaller0>
[  257.353866][ T8357] tipc: Disabling bearer <eth:syzkaller0>
[  258.709555][ T8373] loop2: detected capacity change from 0 to 1024
[  259.380908][ T8373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  259.548660][ T8373] loop2: detected capacity change from 1024 to 0
[  259.644481][ T8373] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.765074][ T8373] bio_check_eod: 11 callbacks suppressed
[  259.765090][ T8373] syz.2.667: attempt to access beyond end of device
[  259.765090][ T8373] loop2: rw=145409, sector=2, nr_sectors = 2 limit=0
[  259.842427][ T8373] buffer_io_error: 6 callbacks suppressed
[  259.842441][ T8373] Buffer I/O error on dev loop2, logical block 1, lost sync page write
[  259.887650][ T8373] EXT4-fs (loop2): I/O error while writing superblock
[  260.093500][ T8374] kmmpd-loop2: attempt to access beyond end of device
[  260.093500][ T8374] loop2: rw=14337, sector=128, nr_sectors = 2 limit=0
[  260.134495][ T8374] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  261.159429][ T8396] syzkaller0: entered promiscuous mode
[  261.204711][ T8396] syzkaller0: entered allmulticast mode
[  261.625748][ T8408] overlayfs: failed to clone upperpath
[  261.966468][ T8422] loop4: detected capacity change from 0 to 8
[  262.116800][ T8422] SQUASHFS error: Failed to read block 0x4de: -5
[  262.157718][ T8422] SQUASHFS error: Failed to read block 0x4de: -5
[  262.165724][   T28] audit: type=1800 audit(1757570128.214:7): pid=8422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.677" name="file1" dev="loop4" ino=5 res=0 errno=0
[  262.208126][ T8422] SQUASHFS error: Failed to read block 0x4de: -5
[  262.246862][ T8422] SQUASHFS error: Failed to read block 0x4de: -5
[  262.284403][ T8422] SQUASHFS error: Failed to read block 0x4de: -5
[  262.325908][ T8422] SQUASHFS error: Failed to read block 0x4de: -5
[  264.631695][ T8449] syzkaller0: entered promiscuous mode
[  264.637254][ T8449] syzkaller0: entered allmulticast mode
[  264.888949][   T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  265.108226][   T23] usb 5-1: Using ep0 maxpacket: 16
[  265.130569][   T23] usb 5-1: unable to get BOS descriptor or descriptor too short
[  265.164610][   T23] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  265.194095][   T23] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  265.210415][   T23] usb 5-1: config 1 has no interface number 1
[  265.216613][   T23] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  265.273401][   T23] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 185, changing to 7
[  265.312394][   T23] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  265.320465][ T8462] loop7: detected capacity change from 0 to 256
[  265.335764][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.358597][   T23] usb 5-1: Product: syz
[  265.362941][   T23] usb 5-1: Manufacturer: syz
[  265.367566][   T23] usb 5-1: SerialNumber: syz
[  265.409448][    T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  265.608703][    T9] usb 3-1: Using ep0 maxpacket: 16
[  265.616295][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  265.627723][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  265.663074][   T23] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  265.681934][    T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  265.698866][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.727644][    T9] usb 3-1: Product: syz
[  265.739958][    T9] usb 3-1: Manufacturer: syz
[  265.753599][    T9] usb 3-1: SerialNumber: syz
[  265.829771][   T23] usb 5-1: USB disconnect, device number 2
[  266.196250][    T9] usb 3-1: skipping empty audio interface (v1)
[  266.344258][    T9] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[  266.364150][ T8479] loop7: detected capacity change from 0 to 4096
[  266.384656][    T9] usb 3-1: USB disconnect, device number 3
[  266.420085][ T8482] loop4: detected capacity change from 0 to 164
[  266.434653][ T8479] EXT4-fs (loop7): Test dummy encryption mode enabled
[  266.447414][ T5798] udevd[5798]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  266.481903][ T8479] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  266.530515][ T8479] System zones: 0-5
[  266.547895][ T8482] loop4: detected capacity change from 0 to 2048
[  266.587024][ T8479] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  266.603140][ T8482]  loop4: p1 < > p3
[  266.640930][ T8482] loop4: p3 size 134217728 extends beyond EOD, truncated
[  266.751166][ T5155]  loop4: p1 < > p3
[  266.789370][ T5155] loop4: p3 size 134217728 extends beyond EOD, truncated
[  267.014999][ T8479] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  267.073026][ T5798] udevd[5798]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  267.100187][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  267.213396][ T5798] udevd[5798]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  267.217305][ T8505] syzkaller0: entered promiscuous mode
[  267.265160][ T5801] udevd[5801]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  267.275731][ T8479] fscrypt (loop7): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  267.328013][ T8505] syzkaller0: entered allmulticast mode
[  267.434804][ T8511] netlink: 16 bytes leftover after parsing attributes in process `syz.8.696'.
[  267.486846][ T7535] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.760856][ T5788] kernel write not supported for file bpf-prog (pid: 5788 comm: kworker/1:4)
[  271.231603][ T5789] Bluetooth: hci0: unexpected event for opcode 0x0c13
[  271.332836][ T8563] syzkaller0: entered promiscuous mode
[  271.338400][ T8563] syzkaller0: entered allmulticast mode
[  271.533538][ T8567] loop2: detected capacity change from 0 to 512
[  271.586755][ T8567] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  271.628227][ T8567] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  272.880697][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.193626][ T8590] loop2: detected capacity change from 0 to 2048
[  273.269843][ T8592] overlayfs: failed to clone upperpath
[  273.338524][ T8590] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  273.445184][ T8590] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.713: bg 0: block 464: padding at end of block bitmap is not set
[  273.551425][ T8590] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28
[  273.609799][ T8590] EXT4-fs (loop2): This should not happen!! Data will be lost
[  273.609799][ T8590] 
[  273.647896][ T8600] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  273.708997][ T8590] EXT4-fs (loop2): Total free blocks count 0
[  273.715078][ T8590] EXT4-fs (loop2): Free/Dirty block details
[  273.738926][ T8600] EXT4-fs (loop2): This should not happen!! Data will be lost
[  273.738926][ T8600] 
[  273.759768][ T8590] EXT4-fs (loop2): free_blocks=0
[  273.789473][ T8590] EXT4-fs (loop2): dirty_blocks=32
[  273.794714][ T8590] EXT4-fs (loop2): Block reservation details
[  276.042853][ T8628] loop2: detected capacity change from 0 to 1024
[  277.359085][ T8650] loop4: detected capacity change from 0 to 1024
[  277.391600][ T8650] EXT4-fs: Ignoring removed bh option
[  277.452189][ T8650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  277.544970][ T8658] netlink: 16 bytes leftover after parsing attributes in process `syz.2.729'.
[  277.775123][ T6771] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.836580][ T8664] loop2: detected capacity change from 0 to 8
[  277.931653][ T8664] SQUASHFS error: Failed to read block 0x4de: -5
[  277.961379][ T8664] SQUASHFS error: Failed to read block 0x4de: -5
[  277.980129][   T28] audit: type=1800 audit(1757570144.014:8): pid=8664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.730" name="file1" dev="loop2" ino=5 res=0 errno=0
[  278.072768][ T8668] syzkaller0: entered promiscuous mode
[  278.095058][ T8668] syzkaller0: entered allmulticast mode
[  278.869793][ T8664] SQUASHFS error: Failed to read block 0x4de: -5
[  278.876465][ T8664] SQUASHFS error: Failed to read block 0x4de: -5
[  278.889693][ T8674] loop7: detected capacity change from 0 to 1024
[  278.944575][ T8674] EXT4-fs: Ignoring removed bh option
[  279.010495][ T8674] EXT4-fs: Ignoring removed bh option
[  279.042472][ T8674] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  279.097968][ T8674] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  280.243489][ T7535] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.545443][ T8701] loop2: detected capacity change from 0 to 512
[  281.568263][ T8701] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  281.697214][ T8697] process 'syz.8.733' launched './file2' with NULL argv: empty string added
[  281.876071][ T8701] EXT4-fs (loop2): 1 truncate cleaned up
[  281.964380][ T8701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  282.198749][ T8701] EXT4-fs error (device loop2): ext4_read_inline_dir:1573: inode #12: block 7: comm syz.2.737: path /213/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0
[  282.487773][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.619917][ T8720] loop7: detected capacity change from 0 to 736
[  285.518653][ T8711] loop4: detected capacity change from 0 to 164
[  285.645991][ T8729] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  286.953443][ T8746] overlayfs: failed to clone upperpath
[  288.345020][ T8774] loop7: detected capacity change from 0 to 8
[  288.417485][ T8774] SQUASHFS error: Failed to read block 0x4de: -5
[  288.428339][ T8774] SQUASHFS error: Failed to read block 0x4de: -5
[  288.446029][   T28] audit: type=1800 audit(1757570154.484:9): pid=8774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.752" name="file1" dev="loop7" ino=5 res=0 errno=0
[  289.183516][ T8779] loop4: detected capacity change from 0 to 2048
[  289.227789][ T8779] UDF-fs: warning (device loop4): udf_fill_super: No partition found (2)
[  289.265568][ T8783] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  290.494805][ T8802] tmpfs: Bad value for 'nr_inodes'
[  291.536772][ T8823] netlink: 12 bytes leftover after parsing attributes in process `syz.8.764'.
[  292.099923][ T8839] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  295.424348][ T8879] loop7: detected capacity change from 0 to 256
[  295.513464][ T8879] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  295.660132][ T8883] netlink: 24 bytes leftover after parsing attributes in process `syz.4.774'.
[  296.000904][ T8891] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  297.855697][ T8922] loop7: detected capacity change from 0 to 2048
[  297.885145][ T8922] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found!
[  298.201883][ T8930] netlink: 24 bytes leftover after parsing attributes in process `syz.7.785'.
[  299.232688][ T8948] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  299.273756][ T8948] tipc: Resetting bearer <eth:syzkaller0>
[  299.332000][ T8947] tipc: Disabling bearer <eth:syzkaller0>
[  299.407537][ T8936] loop2: detected capacity change from 0 to 512
[  299.419008][ T8936] EXT4-fs: Ignoring removed orlov option
[  299.599679][ T8936] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  299.720482][ T8936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  299.755708][ T8936] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  299.888964][ T8936] EXT4-fs warning (device loop2): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 1918985075
[  299.923463][ T8970] loop7: detected capacity change from 0 to 512
[  300.122690][ T8970] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  300.169824][ T8970] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  300.179859][ T8970] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  300.204953][ T8970] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  300.214187][ T8970] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000]
[  300.223008][ T8970] EXT4-fs (loop7): orphan cleanup on readonly fs
[  300.549975][ T8970] EXT4-fs error (device loop7): ext4_validate_block_bitmap:439: comm syz.7.793: bg 0: block 34: padding at end of block bitmap is not set
[  300.850648][ T8970] Quota error (device loop7): write_blk: dquota write failed
[  300.929924][ T8970] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  301.011676][ T8970] EXT4-fs error (device loop7): ext4_acquire_dquot:6940: comm syz.7.793: Failed to acquire dquot type 1
[  301.073691][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.078620][ T8970] EXT4-fs (loop7): 1 truncate cleaned up
[  301.094232][ T8970] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  301.107125][ T8980] netlink: 24 bytes leftover after parsing attributes in process `syz.4.795'.
[  301.107633][ T5784] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5902: Out of memory
[  301.174383][ T5784] EXT4-fs (loop2): Remounting filesystem read-only
[  301.264255][ T7535] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.206195][ T8994] loop4: detected capacity change from 0 to 1024
[  303.230583][ T8994] EXT4-fs: Ignoring removed bh option
[  303.309061][ T8994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  303.358980][ T8994] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  303.494905][ T8994] EXT4-fs error (device loop4): ext4_map_blocks:718: inode #15: block 3: comm syz.4.799: lblock 3 mapped to illegal pblock 3 (length 3)
[  303.548374][ T8994] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  303.629249][ T8994] EXT4-fs (loop4): This should not happen!! Data will be lost
[  303.629249][ T8994] 
[  303.644333][ T9002] EXT4-fs error (device loop4): ext4_ext_remove_space:2929: inode #15: comm syz.4.799: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  303.747713][ T9002] EXT4-fs error (device loop4) in ext4_setattr:5645: Corrupt filesystem
[  303.877599][ T6771] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  304.123897][ T9010] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  304.216190][ T9010] tipc: Resetting bearer <eth:syzkaller0>
[  304.280016][ T9009] tipc: Disabling bearer <eth:syzkaller0>
[  304.887583][ T9030] netlink: 12 bytes leftover after parsing attributes in process `syz.8.805'.
[  304.963539][ T9032] overlayfs: workdir and upperdir must reside under the same mount
[  306.309174][    C0] sched: RT throttling activated
[  307.448139][ T9083] fuse: Bad value for 'fd'
[  307.692526][ T9088] syz.7.816[9088] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  307.692797][ T9088] syz.7.816[9088] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  307.747200][ T9090] netlink: 12 bytes leftover after parsing attributes in process `syz.8.817'.
[  307.920782][ T9094] overlayfs: workdir and upperdir must reside under the same mount
[  308.593297][ T9109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.822'.
[  308.672031][ T9113] loop7: detected capacity change from 0 to 16
[  308.725548][ T9113] erofs: (device loop7): z_erofs_parse_cfgs: algorithm 1 isn't enabled on this kernel
[  309.698061][ T9120] netlink: 20 bytes leftover after parsing attributes in process `syz.4.824'.
[  309.708945][ T9118] syzkaller0: entered promiscuous mode
[  309.740147][ T9118] syzkaller0: entered allmulticast mode
[  309.903051][ T5100] Bluetooth: hci2: command 0x0406 tx timeout
[  309.971436][ T9132] syz.4.826[9132] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  309.971703][ T9132] syz.4.826[9132] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  310.248744][ T9137] loop2: detected capacity change from 0 to 8
[  312.794615][ T9137] SQUASHFS error: Failed to read block 0x4de: -5
[  312.819826][ T9137] SQUASHFS error: Failed to read block 0x4de: -5
[  312.826585][   T28] audit: type=1800 audit(1757570178.873:10): pid=9137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.827" name="file1" dev="loop2" ino=5 res=0 errno=0
[  315.449285][ T2129] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  315.477969][ T9200] netlink: 20 bytes leftover after parsing attributes in process `syz.4.834'.
[  315.674314][ T2129] usb 8-1: Using ep0 maxpacket: 16
[  315.706405][ T9208] loop4: detected capacity change from 0 to 512
[  315.723067][ T2129] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  315.738137][ T2129] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  315.783612][ T9208] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  315.785190][ T2129] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  315.839634][ T2129] usb 8-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  315.848769][ T2129] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.873856][ T9208] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  315.893157][ T2129] usb 8-1: config 0 descriptor??
[  315.962018][ T9208] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  315.987744][ T9208] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  315.996654][ T9208] System zones: 0-2, 18-18, 34-35
[  316.008596][ T9208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  316.299499][    T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  316.341637][ T9212] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set
[  316.383048][ T2129] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0
[  316.422781][ T2129] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0
[  316.443479][ T2129] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0
[  316.468081][ T2129] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0
[  316.489277][ T2129] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0
[  316.507343][    T9] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[  316.525061][ T2129] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0
[  316.528220][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.539314][ T2129] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0
[  316.571074][ T2129] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0
[  316.592268][    T9] usb 5-1: config 0 descriptor??
[  316.593037][ T2129] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0
[  316.641185][ T2129] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0
[  316.710605][ T2129] hid-generic 0003:0457:07DA.0002: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.7-1/input0
[  316.780170][ T2129] usb 8-1: USB disconnect, device number 4
[  317.532174][ T5838] usb 5-1: USB disconnect, device number 3
[  317.566199][ T9227] fido_id[9227]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  318.073216][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  318.079590][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  318.358229][ T9238] loop7: detected capacity change from 0 to 16
[  318.383020][ T9238] erofs: (device loop7): mounted with root inode @ nid 36.
[  319.217362][ T6771] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.547716][ T9251] netlink: 20 bytes leftover after parsing attributes in process `syz.4.844'.
[  320.243941][ T9269] loop4: detected capacity change from 0 to 128
[  320.327943][ T9269] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  320.734686][ T9269] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  323.075433][ T9291] netlink: 20 bytes leftover after parsing attributes in process `syz.4.854'.
[  323.872474][ T9304] loop4: detected capacity change from 0 to 512
[  323.879826][ T9304] ext4: Unknown parameter 'àB'
[  323.958470][ T5798] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  325.886330][ T9329] loop7: detected capacity change from 0 to 128
[  325.955822][ T9329] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  326.105307][ T9329] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  326.194881][ T9311] loop4: detected capacity change from 0 to 512
[  326.249472][ T9311] EXT4-fs: Ignoring removed orlov option
[  326.299456][ T9311] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  326.537102][ T9311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  326.656382][ T9311] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  326.720995][ T9311] EXT4-fs warning (device loop4): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 1918985075
[  327.157025][ T5789] Bluetooth: hci2: unexpected cc 0x204b length: 9 > 3
[  327.164072][ T5789] Bluetooth: hci2: unexpected event for opcode 0x204b
[  327.283964][ T9352] loop2: detected capacity change from 0 to 256
[  330.913431][ T9333] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:487: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1768189806
[  330.987055][ T9333] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:487: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1768189806
[  331.397754][ T7535] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  331.468691][ T6771] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.537371][ T6771] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5902: Out of memory
[  331.579335][ T9343] EXT4-fs warning (device loop4): kmmpd:168: kmmpd being stopped since MMP feature has been disabled.
[  331.599634][ T6771] EXT4-fs (loop4): Remounting filesystem read-only
[  334.682131][ T9401] fuse: Bad value for 'fd'
[  334.989698][ T9409] netlink: 16 bytes leftover after parsing attributes in process `syz.2.876'.
[  336.255257][ T9429] loop7: detected capacity change from 0 to 128
[  336.339545][ T9429] FAT-fs (loop7): bogus number of FAT structure
[  336.359899][ T9429] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; no bootstrapping code
[  336.399355][ T9429] FAT-fs (loop7): Can't find a valid FAT filesystem
[  336.606206][ T9415] loop2: detected capacity change from 0 to 512
[  336.634791][ T9415] EXT4-fs: Ignoring removed orlov option
[  336.658698][ T9415] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  336.704521][ T9415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  336.818996][ T9415] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  336.971040][ T9415] EXT4-fs warning (device loop2): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 1918985075
[  337.446001][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.494587][ T5784] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5902: Out of memory
[  337.531821][ T9457] netlink: 16 bytes leftover after parsing attributes in process `syz.7.886'.
[  337.552812][ T5784] EXT4-fs (loop2): Remounting filesystem read-only
[  340.053512][ T9472] loop4: detected capacity change from 0 to 8
[  340.761433][ T9472] SQUASHFS error: Failed to read block 0x4de: -5
[  340.796203][ T9472] SQUASHFS error: Failed to read block 0x4de: -5
[  340.807574][   T28] audit: type=1800 audit(1757570206.863:11): pid=9472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.892" name="file1" dev="loop4" ino=5 res=0 errno=0
[  340.829021][ T9472] SQUASHFS error: zlib decompression failed, data probably corrupt
[  340.856563][ T9472] SQUASHFS error: Failed to read block 0x4de: -5
[  340.880938][ T9472] SQUASHFS error: Failed to read block 0x4de: -5
[  340.909941][ T9472] SQUASHFS error: Failed to read block 0x4de: -5
[  340.945190][ T9472] SQUASHFS error: Failed to read block 0x4de: -5
[  340.982036][ T9472] SQUASHFS error: Failed to read block 0x4de: -5
[  341.024500][ T9472] SQUASHFS error: Failed to read block 0x4de: -5
[  341.055157][ T9472] SQUASHFS error: Failed to read block 0x4de: -5
[  341.062443][ T9472] SQUASHFS error: Failed to read block 0x4de: -5
[  341.069863][ T9472] SQUASHFS error: Failed to read block 0x4de: -5
[  341.076394][ T9472] SQUASHFS error: Failed to read block 0x4de: -5
[  341.084203][ T9472] SQUASHFS error: Failed to read block 0x4de: -5
[  341.090796][ T9472] SQUASHFS error: Failed to read block 0x4de: -5
[  341.097408][ T9472] SQUASHFS error: Failed to read block 0x4de: -5
[  341.104073][ T9472] SQUASHFS error: Failed to read block 0x4de: -5
[  341.110652][ T9472] SQUASHFS error: Failed to read block 0x4de: -5
[  341.129423][ T9472] SQUASHFS error: Failed to read block 0x4de: -5
[  341.136138][ T9472] SQUASHFS error: Failed to read block 0x4de: -5
[  341.169368][ T9472] SQUASHFS error: Failed to read block 0x4de: -5
[  341.199568][ T9472] SQUASHFS error: Failed to read block 0x4de: -5
[  341.232132][ T9472] SQUASHFS error: Failed to read block 0x4de: -5
[  341.282072][ T9472] SQUASHFS error: Failed to read block 0x535f2: -5
[  342.114923][ T9507] netlink: 16 bytes leftover after parsing attributes in process `syz.8.899'.
[  342.472064][ T9512] loop7: detected capacity change from 0 to 512
[  342.500540][ T9512] EXT4-fs: Ignoring removed orlov option
[  342.513091][ T9512] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  342.544744][ T9512] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  342.829995][ T9512] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  343.259018][ T9534] loop4: detected capacity change from 0 to 1764
[  343.303870][ T9492] EXT4-fs warning (device loop7): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 1918985075
[  343.739911][ T9520] EXT4-fs warning (device loop7): ext4_read_block_bitmap_nowait:487: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1768189806
[  343.797651][ T9520] EXT4-fs warning (device loop7): ext4_read_block_bitmap_nowait:487: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1768189806
[  343.945847][ T7535] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.958867][ T9552] loop4: detected capacity change from 0 to 512
[  343.972840][ T7535] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5902: Out of memory
[  343.984713][ T9552] EXT4-fs: Ignoring removed orlov option
[  344.003202][ T9552] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  344.015241][ T7535] EXT4-fs (loop7): Remounting filesystem read-only
[  344.079152][ T9552] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[  344.161792][ T9552] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2244: inode #15: comm syz.4.905: corrupted in-inode xattr: e_value size too large
[  344.201522][ T9560] netlink: 64 bytes leftover after parsing attributes in process `syz.7.906'.
[  344.421338][ T9552] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.905: couldn't read orphan inode 15 (err -117)
[  344.470960][ T9552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  344.737991][ T9568] loop7: detected capacity change from 0 to 1024
[  344.764582][ T6771] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.798412][ T9568] EXT4-fs: Ignoring removed i_version option
[  344.849336][ T9568] EXT4-fs: inline encryption not supported
[  345.077451][ T9568] EXT4-fs (loop7): Test dummy encryption mode enabled
[  345.116161][ T9568] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  345.359633][   T28] audit: type=1326 audit(1757570211.403:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896918eba9 code=0x7ffc0000
[  346.425364][   T28] audit: type=1326 audit(1757570212.383:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896918eba9 code=0x7ffc0000
[  346.509119][ T7535] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.509743][   T28] audit: type=1326 audit(1757570212.383:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f896918eba9 code=0x7ffc0000
[  346.541620][   T28] audit: type=1326 audit(1757570980.399:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896918eba9 code=0x7ffc0000
[  346.563898][   T28] audit: type=1326 audit(1757570980.399:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896918eba9 code=0x7ffc0000
[  346.652074][ T9583] syzkaller0: entered promiscuous mode
[  346.657972][ T9583] syzkaller0: entered allmulticast mode
[  347.335652][ T9592] netlink: 36 bytes leftover after parsing attributes in process `syz.7.913'.
[  350.871737][ T9609] loop2: detected capacity change from 0 to 128
[  351.180752][ T9614] loop4: detected capacity change from 0 to 1024
[  351.380011][ T9614] EXT4-fs: Ignoring removed i_version option
[  351.386138][ T9614] EXT4-fs: inline encryption not supported
[  351.532957][ T9614] EXT4-fs (loop4): Test dummy encryption mode enabled
[  351.562379][ T9614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  354.064965][ T6771] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.189764][ T9641] loop4: detected capacity change from 0 to 2048
[  355.318303][ T5798] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  356.554831][   T28] audit: type=1326 audit(1757570990.216:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9640 comm="syz.4.927" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f896918eba9 code=0x0
[  356.577549][ T5100] Bluetooth: hci3: command 0x0406 tx timeout
[  357.061856][ T9639] loop7: detected capacity change from 0 to 512
[  357.091052][ T9639] EXT4-fs: Ignoring removed orlov option
[  357.179723][ T9639] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  357.319744][ T9639] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  357.376939][ T9639] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  357.590712][ T9639] EXT4-fs warning (device loop7): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 1918985075
[  357.659370][ T9661] EXT4-fs warning (device loop7): ext4_read_block_bitmap_nowait:487: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1768189806
[  357.750163][ T9661] EXT4-fs warning (device loop7): ext4_read_block_bitmap_nowait:487: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1768189806
[  359.566854][ T7535] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.721960][ T7535] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5902: Out of memory
[  359.735771][ T7535] EXT4-fs (loop7): Remounting filesystem read-only
[  361.266994][ T9692] fuse: Bad value for 'fd'
[  361.720239][ T9697] loop7: detected capacity change from 0 to 1024
[  361.760840][ T9697] EXT4-fs: Ignoring removed bh option
[  361.766394][ T9697] EXT4-fs: Ignoring removed bh option
[  361.854880][ T9697] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  361.952535][ T9697] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  362.975665][ T7535] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.874344][ T5788] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  364.075739][ T5788] usb 8-1: Using ep0 maxpacket: 16
[  364.094570][ T5788] usb 8-1: config 0 has an invalid interface number: 231 but max is 0
[  364.154723][ T5788] usb 8-1: config 0 has no interface number 0
[  364.167544][ T5788] usb 8-1: New USB device found, idVendor=0411, idProduct=006e, bcdDevice=c1.05
[  364.197127][ T5788] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.228032][ T5788] usb 8-1: config 0 descriptor??
[  364.271209][ T9717] loop4: detected capacity change from 0 to 512
[  364.347623][ T9717] EXT4-fs: Ignoring removed orlov option
[  364.433338][ T5788] asix 8-1:0.231 (unnamed net_device) (uninitialized): invalid hw address, using random
[  364.447575][ T9717] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  364.526326][ T9717] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  364.603517][ T9717] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  364.636548][ T5788] asix 8-1:0.231 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  364.648029][ T5788] asix 8-1:0.231 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  364.660217][ T5788] asix: probe of 8-1:0.231 failed with error -71
[  364.671913][ T5788] usb 8-1: USB disconnect, device number 5
[  364.789818][ T9717] EXT4-fs warning (device loop4): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 1918985075
[  364.933605][ T9740] loop2: detected capacity change from 0 to 512
[  365.656515][ T9742] netlink: 6 bytes leftover after parsing attributes in process `syz.2.946'.
[  366.641851][ T9706] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:487: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1768189806
[  366.724110][ T9706] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:487: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1768189806
[  367.135343][ T6771] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  367.182392][ T6771] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5902: Out of memory
[  367.237559][ T6771] EXT4-fs (loop4): Remounting filesystem read-only
[  368.388924][ T9757] loop4: detected capacity change from 0 to 8
[  368.570735][ T9757] SQUASHFS error: Failed to read block 0x1ec: -5
[  368.596690][ T9757] SQUASHFS error: Unable to read metadata cache entry [1ea]
[  368.912480][   T42] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting
[  369.092873][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  369.290627][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  370.866641][ T9790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.957'.
[  371.049308][ T9792] loop7: detected capacity change from 0 to 1024
[  371.119934][ T9792] EXT4-fs: Ignoring removed i_version option
[  371.191159][ T9792] EXT4-fs: inline encryption not supported
[  371.246406][ T9792] EXT4-fs (loop7): Test dummy encryption mode enabled
[  371.349469][ T9792] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  372.369397][ T7535] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  372.472867][ T9806] loop4: detected capacity change from 0 to 1024
[  372.498050][ T9806] ext3: Unknown parameter 'uid<00000000000000000000'
[  372.609715][ T5801] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  374.080028][ T9825] loop7: detected capacity change from 0 to 8
[  374.166911][ T9825] SQUASHFS error: Failed to read block 0x4de: -5
[  374.377031][ T9825] SQUASHFS error: Failed to read block 0x4de: -5
[  374.402435][   T28] audit: type=1800 audit(1757571009.860:18): pid=9825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.965" name="file1" dev="loop7" ino=5 res=0 errno=0
[  376.782797][ T5789] Bluetooth: hci2: unexpected event for opcode 0x0c13
[  376.876649][ T9848] loop2: detected capacity change from 0 to 1024
[  376.943799][ T9848] EXT4-fs: Ignoring removed bh option
[  376.982267][ T9848] EXT4-fs: Ignoring removed bh option
[  377.020968][ T9848] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  377.103436][ T9848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  378.096690][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  378.103304][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  378.154189][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.458547][ T9867] loop4: detected capacity change from 0 to 16
[  378.531076][ T9867] erofs: (device loop4): mounted with root inode @ nid 36.
[  380.040999][ T9867] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  380.104110][ T9867] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851]
[  380.166840][ T9867] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  380.784308][ T9883] loop7: detected capacity change from 0 to 8
[  380.827010][ T9883] SQUASHFS error: Failed to read block 0x4de: -5
[  380.836395][ T9883] SQUASHFS error: Failed to read block 0x4de: -5
[  380.981280][   T28] audit: type=1800 audit(1757571016.621:19): pid=9883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.971" name="file1" dev="loop7" ino=5 res=0 errno=0
[  381.666703][ T9891] loop2: detected capacity change from 0 to 512
[  382.806662][ T5789] Bluetooth: hci0: unexpected event for opcode 0x0c13
[  382.861092][ T9891] EXT4-fs: Ignoring removed orlov option
[  382.909234][ T9891] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  382.970703][ T9891] EXT4-fs warning (device loop2): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop2.
[  383.696589][ T9907] loop2: detected capacity change from 0 to 1024
[  383.757158][ T9907] EXT4-fs: Ignoring removed bh option
[  383.799468][ T9907] EXT4-fs: Ignoring removed bh option
[  383.838765][ T9907] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  383.990696][ T9907] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  388.771296][   T28] audit: type=1800 audit(1757571024.811:20): pid=9917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.982" name="file1" dev="loop2" ino=15 res=0 errno=0
[  388.819333][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  392.935410][ T5789] Bluetooth: hci0: unexpected event for opcode 0x0c13
[  395.103413][ T9969] loop7: detected capacity change from 0 to 1024
[  395.173514][ T9969] EXT4-fs: Ignoring removed bh option
[  395.179164][ T9969] EXT4-fs: Ignoring removed bh option
[  395.230812][ T9969] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  395.363593][ T9969] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  395.689398][ T9983] loop2: detected capacity change from 0 to 128
[  396.037853][ T7535] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  396.325004][   T28] audit: type=1800 audit(1757571032.874:21): pid=9988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.993" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=1048614 res=0 errno=0
[  397.640069][ T9992] loop7: detected capacity change from 0 to 1024
[  397.647398][ T9992] hfsplus: gid requires an argument
[  397.653188][ T9992] hfsplus: unable to parse mount options
[  398.635986][ T9973] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  400.844942][T10017] loop2: detected capacity change from 0 to 1024
[  400.868238][T10017] EXT4-fs: Ignoring removed bh option
[  400.873785][T10017] EXT4-fs: Ignoring removed bh option
[  400.932722][T10017] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  401.038291][T10017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  401.756510][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  403.974567][ T5789] Bluetooth: hci2: unexpected event for opcode 0x0c13
[  407.240011][T10126] loop2: detected capacity change from 0 to 1024
[  407.259314][T10126] EXT4-fs: Ignoring removed bh option
[  407.264848][T10126] EXT4-fs: Ignoring removed bh option
[  407.315468][T10126] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  407.346743][T10125] loop7: detected capacity change from 0 to 4096
[  407.415750][T10125] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  407.432934][T10126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  408.259349][   T27] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  408.429468][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  408.477451][   T27] usb 8-1: Using ep0 maxpacket: 32
[  408.497781][   T27] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  408.728927][   T27] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  408.969899][   T27] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  409.023009][   T27] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.278652][   T27] usb 8-1: config 0 descriptor??
[  410.659470][   T27] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0
[  410.702149][   T27] usb 8-1: USB disconnect, device number 6
[  410.731329][ T7535] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  412.323070][T10181] fido_id[10181]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  412.594528][T10199] loop7: detected capacity change from 0 to 1024
[  412.631209][T10199] EXT4-fs: Ignoring removed bh option
[  412.636845][T10199] EXT4-fs: Ignoring removed bh option
[  412.688416][T10199] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  412.809528][T10199] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  413.531878][ T7535] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.963078][T10227] netlink: 'syz.8.1031': attribute type 3 has an invalid length.
[  414.009443][T10227] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1031'.
[  415.245407][T10233] hub 9-0:1.0: USB hub found
[  415.301703][T10233] hub 9-0:1.0: 1 port detected
[  418.322062][T10279] loop7: detected capacity change from 0 to 256
[  419.008915][T10291] loop7: detected capacity change from 0 to 1024
[  419.028372][T10291] EXT4-fs: Ignoring removed i_version option
[  419.067096][T10291] EXT4-fs: inline encryption not supported
[  419.094177][T10291] EXT4-fs (loop7): Test dummy encryption mode enabled
[  420.375473][T10291] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  421.053174][ T7535] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  422.066769][T10321] syzkaller0: entered promiscuous mode
[  422.088352][T10321] syzkaller0: entered allmulticast mode
[  422.528821][T10328] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1054'.
[  424.257060][   T28] audit: type=1326 audit(1757571062.198:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10339 comm="syz.4.1057" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f896918eba9 code=0x0
[  424.356117][T10341] loop7: detected capacity change from 0 to 2048
[  424.374891][T10341] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found!
[  426.371656][T10360] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1064'.
[  429.385576][T10416] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1074'.
[  431.502277][T10421] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  432.785230][   T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  433.083636][ T5799] Bluetooth: hci3: unexpected event for opcode 0x204e
[  433.174782][   T27] usb 3-1: Using ep0 maxpacket: 16
[  433.200331][   T27] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30
[  433.241284][   T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  433.282005][   T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[  433.308071][   T27] usb 3-1: New USB device found, idVendor=18d1, idProduct=5022, bcdDevice= 0.00
[  433.327903][   T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  433.353410][   T27] usb 3-1: config 0 descriptor??
[  434.181612][T10469] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  434.304303][T10474] loop7: detected capacity change from 0 to 1024
[  434.319750][T10474] EXT4-fs (loop7): bad geometry: first data block is 0 with a 1k block and cluster size
[  434.803964][   T28] audit: type=1326 audit(1757571073.212:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10473 comm="syz.7.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d4f8eba9 code=0x7ffc0000
[  435.301138][   T27] usbhid 3-1:0.0: can't add hid device: -71
[  435.309903][   T27] usbhid: probe of 3-1:0.0 failed with error -71
[  435.319366][   T27] usb 3-1: USB disconnect, device number 4
[  435.427167][   T28] audit: type=1326 audit(1757571073.212:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10473 comm="syz.7.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa6d4f8eba9 code=0x7ffc0000
[  435.520113][   T28] audit: type=1326 audit(1757571073.223:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10473 comm="syz.7.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d4f8eba9 code=0x7ffc0000
[  435.623889][   T28] audit: type=1326 audit(1757571073.223:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10473 comm="syz.7.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa6d4f8eba9 code=0x7ffc0000
[  435.745983][   T28] audit: type=1326 audit(1757571073.223:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10473 comm="syz.7.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d4f8eba9 code=0x7ffc0000
[  435.906648][   T28] audit: type=1326 audit(1757571073.233:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10473 comm="syz.7.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa6d4f8eba9 code=0x7ffc0000
[  436.451329][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  436.457716][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  436.540449][T10497] loop7: detected capacity change from 0 to 1024
[  436.556859][T10497] ext3: Unknown parameter 'uid<00000000000000000000'
[  437.408576][T10520] loop2: detected capacity change from 0 to 512
[  437.458031][T10520] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  437.480154][T10520] UDF-fs: Scanning with blocksize 512 failed
[  437.523688][T10520] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  437.565814][T10520] UDF-fs: Scanning with blocksize 1024 failed
[  437.609783][T10520] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  437.643491][T10520] UDF-fs: Scanning with blocksize 2048 failed
[  437.690923][T10520] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  437.764149][T10520] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  438.854831][T10541] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1107'.
[  440.774332][T10562] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  440.842661][T10565] syzkaller0: entered promiscuous mode
[  440.868770][T10565] syzkaller0: entered allmulticast mode
[  442.839402][T10580] loop2: detected capacity change from 0 to 512
[  442.901945][T10580] EXT4-fs: Ignoring removed orlov option
[  442.967179][T10580] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  443.126643][T10580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  443.167749][T10580] ext4 filesystem being mounted at /282/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  443.227220][T10580] EXT4-fs warning (device loop2): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 1918985075
[  443.794078][T10597] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:487: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1768189806
[  443.917647][T10597] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:487: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1768189806
[  444.506543][T10617] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1118'.
[  444.999777][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  445.303476][ T5784] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5902: Out of memory
[  445.332233][T10632] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  445.344672][ T5784] EXT4-fs (loop2): Remounting filesystem read-only
[  445.751341][T10641] loop2: detected capacity change from 0 to 1024
[  445.759447][T10641] EXT4-fs: Ignoring removed bh option
[  445.915572][T10641] EXT4-fs: Ignoring removed bh option
[  445.957358][T10641] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  446.531946][T10641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  448.997478][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  450.070645][T10677] syzkaller0: entered promiscuous mode
[  450.090162][T10677] syzkaller0: entered allmulticast mode
[  450.902606][T10691] loop7: detected capacity change from 0 to 1024
[  450.930094][T10691] EXT4-fs: Ignoring removed i_version option
[  450.936220][T10691] EXT4-fs: inline encryption not supported
[  451.025851][T10691] EXT4-fs (loop7): Test dummy encryption mode enabled
[  451.119065][T10691] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  451.867412][ T7535] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  453.191947][T10717] loop7: detected capacity change from 0 to 8
[  453.320292][T10717] SQUASHFS error: Failed to read block 0x4de: -5
[  453.329255][T10717] SQUASHFS error: Failed to read block 0x4de: -5
[  453.340119][   T28] audit: type=1800 audit(1757571092.730:29): pid=10717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1136" name="file1" dev="loop7" ino=5 res=0 errno=0
[  458.624154][   T54] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  458.934495][   T54] usb 3-1: Using ep0 maxpacket: 16
[  458.978555][   T54] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30
[  459.024732][   T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  459.046666][   T54] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[  459.082687][   T54] usb 3-1: New USB device found, idVendor=18d1, idProduct=5022, bcdDevice= 0.00
[  459.102206][   T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  459.133080][   T54] usb 3-1: config 0 descriptor??
[  460.886491][   T54] usbhid 3-1:0.0: can't add hid device: -71
[  460.919610][   T54] usbhid: probe of 3-1:0.0 failed with error -71
[  460.986610][   T54] usb 3-1: USB disconnect, device number 5
[  462.415057][ T5799] Bluetooth: hci0: unexpected event for opcode 0x0c13
[  466.308071][T10860] fuse: Bad value for 'fd'
[  468.682257][ T5799] Bluetooth: hci3: unexpected event for opcode 0x0c13
[  469.721621][T10902] syzkaller0: entered promiscuous mode
[  469.739820][T10902] syzkaller0: entered allmulticast mode
[  470.901135][   T23] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  471.027872][T10920] fuse: Bad value for 'fd'
[  471.176109][   T23] usb 8-1: Using ep0 maxpacket: 16
[  471.250520][   T23] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30
[  471.329243][   T23] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  471.367804][   T23] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[  471.401048][   T23] usb 8-1: New USB device found, idVendor=18d1, idProduct=5022, bcdDevice= 0.00
[  471.420257][   T23] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.458267][   T23] usb 8-1: config 0 descriptor??
[  472.533866][ T5799] Bluetooth: hci1: unexpected event for opcode 0x0c13
[  473.908625][   T23] usbhid 8-1:0.0: can't add hid device: -71
[  473.920960][   T23] usbhid: probe of 8-1:0.0 failed with error -71
[  474.038862][   T23] usb 8-1: USB disconnect, device number 7
[  474.371717][T10938] loop7: detected capacity change from 0 to 1024
[  474.381493][T10938] EXT4-fs: Ignoring removed bh option
[  474.388354][T10938] EXT4-fs: Ignoring removed bh option
[  474.939516][T10938] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  475.132007][T10938] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  475.577024][ T7535] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  476.121729][T10961] fuse: Bad value for 'fd'
[  476.262582][T10965] syzkaller0: entered promiscuous mode
[  476.281238][T10965] syzkaller0: entered allmulticast mode
[  479.994329][T11014] loop7: detected capacity change from 0 to 8
[  480.041449][T11014] SQUASHFS error: Failed to read block 0x4de: -5
[  480.049880][T11014] SQUASHFS error: Failed to read block 0x4de: -5
[  480.168763][   T28] audit: type=1800 audit(1757571120.794:30): pid=11014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1195" name="file1" dev="loop7" ino=5 res=0 errno=0
[  480.442321][T11022] fuse: Bad value for 'fd'
[  482.485421][T11035] loop2: detected capacity change from 0 to 1024
[  482.531880][T11035] ext3: Unknown parameter 'uid<00000000000000000000'
[  482.611928][T10900] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  483.900850][T11025] loop7: detected capacity change from 0 to 512
[  483.916754][T11025] EXT4-fs: Ignoring removed orlov option
[  483.955745][T11025] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  484.062763][T11025] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  484.132266][T11025] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  484.329543][T11025] EXT4-fs error (device loop7): ext4_do_update_inode:5230: inode #2: comm syz.7.1197: corrupted inode contents
[  484.346595][T11025] EXT4-fs (loop7): Remounting filesystem read-only
[  484.380493][T11062] loop2: detected capacity change from 0 to 8
[  484.398183][T11062] SQUASHFS error: Failed to read block 0x4de: -5
[  484.405237][T11062] SQUASHFS error: Failed to read block 0x4de: -5
[  484.413448][   T28] audit: type=1800 audit(1757571125.362:31): pid=11062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1206" name="file1" dev="loop2" ino=5 res=0 errno=0
[  484.976520][T11069] loop2: detected capacity change from 0 to 1024
[  485.004463][T11069] EXT4-fs: Ignoring removed bh option
[  485.024067][T11069] EXT4-fs: Ignoring removed bh option
[  485.040216][ T7535] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  485.040299][T11069] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  485.063582][T10075] Quota error (device loop7): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[  485.163658][T11069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  485.793417][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  486.279425][T11083] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1209'.
[  488.367441][T11090] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1212'.
[  488.970245][T11102] loop2: detected capacity change from 0 to 8
[  489.042097][T11102] SQUASHFS error: Failed to read block 0x4de: -5
[  489.049097][T11102] SQUASHFS error: Failed to read block 0x4de: -5
[  489.147302][   T28] audit: type=1800 audit(1757571130.244:32): pid=11102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1215" name="file1" dev="loop2" ino=5 res=0 errno=0
[  490.723579][ T5789] Bluetooth: hci1: unexpected event for opcode 0x0c13
[  492.368110][T11129] loop7: detected capacity change from 0 to 512
[  492.407968][T11129] EXT4-fs: Ignoring removed orlov option
[  492.475433][T11129] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  492.527538][T11129] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  492.540940][T11129] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  492.801264][T11115] EXT4-fs error (device loop7): ext4_do_update_inode:5230: inode #2: comm syz.7.1217: corrupted inode contents
[  492.816521][T11115] EXT4-fs (loop7): Remounting filesystem read-only
[  493.330968][T11146] loop2: detected capacity change from 0 to 1024
[  493.349322][T11146] EXT4-fs: Ignoring removed bh option
[  493.378138][T11146] EXT4-fs: Ignoring removed bh option
[  493.427976][T11146] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  493.462002][ T7535] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  493.498278][   T42] Quota error (device loop7): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[  493.572826][T11146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  495.853936][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  495.874452][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  496.804684][T11157] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1222'.
[  497.006035][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  498.062759][T11168] loop2: detected capacity change from 0 to 8
[  498.102257][T11168] SQUASHFS error: Failed to read block 0x4de: -5
[  498.109191][T11168] SQUASHFS error: Failed to read block 0x4de: -5
[  498.119278][   T28] audit: type=1800 audit(1757571139.756:33): pid=11168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1225" name="file1" dev="loop2" ino=5 res=0 errno=0
[  500.152110][ T5789] Bluetooth: hci3: unexpected event for opcode 0x0c13
[  504.172475][T11223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1236'.
[  505.851942][T11243] loop2: detected capacity change from 0 to 8
[  506.050224][T11243] SQUASHFS error: Failed to read block 0x4de: -5
[  506.057180][T11243] SQUASHFS error: Failed to read block 0x4de: -5
[  506.067733][   T28] audit: type=1800 audit(1757571148.092:34): pid=11243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1237" name="file1" dev="loop2" ino=5 res=0 errno=0
[  508.284924][T11262] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1244'.
[  508.631688][T11267] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1245'.
[  513.063530][T11313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1256'.
[  513.109177][T11310] loop7: detected capacity change from 0 to 1024
[  513.157554][T11310] EXT4-fs: Ignoring removed bh option
[  513.182737][T11310] EXT4-fs: Ignoring removed bh option
[  513.228706][T11310] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  513.343289][T11310] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  516.519613][T11369] loop2: detected capacity change from 0 to 8
[  516.538003][T11369] SQUASHFS error: Failed to read block 0x4de: -5
[  516.544837][T11369] SQUASHFS error: Failed to read block 0x4de: -5
[  516.555512][   T28] audit: type=1800 audit(1757571159.095:35): pid=11369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1261" name="file1" dev="loop2" ino=5 res=0 errno=0
[  517.697294][T11383] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  517.989803][T11391] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1266'.
[  518.077528][ T7535] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  521.010994][T11423] loop2: detected capacity change from 0 to 1024
[  521.043254][T11423] EXT4-fs: Ignoring removed bh option
[  521.084259][T11423] EXT4-fs: Ignoring removed bh option
[  521.126636][T11423] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  521.214249][T11423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  522.068170][T11432] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  522.095015][T11434] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1277'.
[  524.324060][   T54] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  524.504863][   T54] usb 8-1: Using ep0 maxpacket: 16
[  524.513707][   T54] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30
[  524.535217][   T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  524.558186][   T54] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[  524.584426][   T54] usb 8-1: New USB device found, idVendor=18d1, idProduct=5022, bcdDevice= 0.00
[  524.711053][   T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  524.735955][   T54] usb 8-1: config 0 descriptor??
[  525.855877][T11464] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1285'.
[  525.896263][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  526.079990][T11470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1286'.
[  527.573005][ T5789] Bluetooth: hci0: unexpected event for opcode 0x0c13
[  527.653468][   T54] usbhid 8-1:0.0: can't add hid device: -71
[  527.715829][   T54] usbhid: probe of 8-1:0.0 failed with error -71
[  527.779782][   T54] usb 8-1: USB disconnect, device number 8
[  528.581055][T11487] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  529.608449][T11500] loop2: detected capacity change from 0 to 1024
[  529.619719][T11500] EXT4-fs: Ignoring removed i_version option
[  529.627075][T11500] EXT4-fs: inline encryption not supported
[  529.638461][T11500] EXT4-fs (loop2): Test dummy encryption mode enabled
[  529.671589][T11500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  531.131323][ T5789] Bluetooth: hci3: unexpected event for opcode 0x0c13
[  531.168991][T11508] loop7: detected capacity change from 0 to 256
[  531.191958][T11508] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  531.286866][T11508] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  531.329918][T11508] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  531.603139][   T28] audit: type=1800 audit(1757571174.907:36): pid=11508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1296" name="bus" dev="loop7" ino=1048615 res=0 errno=0
[  534.858108][T11533] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1299'.
[  536.531559][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  536.552990][T11545] tipc: Started in network mode
[  536.558172][T11545] tipc: Node identity 7618b5432779, cluster identity 4711
[  536.566066][T11545] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  536.591302][T11545] syzkaller0: entered promiscuous mode
[  536.608712][T11545] syzkaller0: entered allmulticast mode
[  536.650762][T11545] tipc: Resetting bearer <eth:syzkaller0>
[  536.664270][T11544] tipc: Resetting bearer <eth:syzkaller0>
[  536.696512][T11544] tipc: Disabling bearer <eth:syzkaller0>
[  538.507979][T11572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1316'.
[  545.308440][T11618] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1326'.
[  546.357270][T11608] loop2: detected capacity change from 0 to 8
[  547.068261][T11608] SQUASHFS error: Failed to read block 0x4de: -5
[  547.076668][T11608] SQUASHFS error: Failed to read block 0x4de: -5
[  547.097555][   T28] audit: type=1800 audit(1757571191.170:37): pid=11608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1324" name="file1" dev="loop2" ino=5 res=0 errno=0
[  551.757101][T11672] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1336'.
[  553.214707][T11663] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1334'.
[  553.489073][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  553.495466][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  556.817702][ T5789] Bluetooth: hci2: unexpected event for opcode 0x0c13
[  561.108331][T11734] loop7: detected capacity change from 0 to 1024
[  561.119502][T11734] EXT4-fs: Ignoring removed bh option
[  561.125028][T11734] EXT4-fs: Ignoring removed bh option
[  561.313021][T11734] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  562.317956][T11734] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  564.152202][ T5789] Bluetooth: hci3: unexpected event for opcode 0x0c13
[  564.218412][ T7535] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  568.112699][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  568.124668][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  568.134639][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  568.455579][ T5858] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  568.938985][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  568.947160][ T5799] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  568.957852][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  569.823623][ T5799] Bluetooth: hci0: unexpected event for opcode 0x0c13
[  569.927871][ T5858] usb 8-1: Using ep0 maxpacket: 16
[  569.959231][ T5858] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30
[  570.014119][ T5858] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  570.064337][ T5858] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[  570.141459][ T5858] usb 8-1: New USB device found, idVendor=18d1, idProduct=5022, bcdDevice= 0.00
[  570.182185][ T5858] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  570.209181][ T5858] usb 8-1: config 0 descriptor??
[  570.305723][T10083] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.526458][T10083] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.694265][T10083] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.837637][T10083] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.928003][ T5789] Bluetooth: hci1: command tx timeout
[  571.364823][T11785] chnl_net:caif_netlink_parms(): no params data found
[  571.453154][ T5858] usbhid 8-1:0.0: can't add hid device: -71
[  571.459462][ T5858] usbhid: probe of 8-1:0.0 failed with error -71
[  571.520752][ T5858] usb 8-1: USB disconnect, device number 9
[  571.542508][T10083] tipc: Left network mode
[  572.909297][ T5789] Bluetooth: hci1: command tx timeout
[  574.899862][ T5789] Bluetooth: hci1: command tx timeout
[  575.914864][ T5789] Bluetooth: hci0: unexpected event for opcode 0x0c13
[  575.959865][T11785] bridge0: port 1(bridge_slave_0) entered blocking state
[  575.974747][T11785] bridge0: port 1(bridge_slave_0) entered disabled state
[  575.985615][T11785] bridge_slave_0: entered allmulticast mode
[  575.993511][T11785] bridge_slave_0: entered promiscuous mode
[  576.192559][T11785] bridge0: port 2(bridge_slave_1) entered blocking state
[  576.217115][T11785] bridge0: port 2(bridge_slave_1) entered disabled state
[  576.262422][T11785] bridge_slave_1: entered allmulticast mode
[  576.285909][T11785] bridge_slave_1: entered promiscuous mode
[  576.947314][ T5789] Bluetooth: hci1: command tx timeout
[  577.610513][T11785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  577.660293][T11785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  578.005588][T11785] team0: Port device team_slave_0 added
[  578.028339][T11785] team0: Port device team_slave_1 added
[  579.500996][T11785] batman_adv: batadv0: Adding interface: batadv_slave_0
[  579.563034][T11785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  580.553878][ T5789] Bluetooth: hci2: unexpected event for opcode 0x0c13
[  580.569013][T11785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  580.893552][T11785] batman_adv: batadv0: Adding interface: batadv_slave_1
[  580.914855][T11785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  580.956414][T11785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  581.275450][T11785] hsr_slave_0: entered promiscuous mode
[  581.310949][T11785] hsr_slave_1: entered promiscuous mode
[  581.325629][T11785] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  581.345879][T11785] Cannot create hsr debugfs directory
[  581.504642][T10083] hsr_slave_0: left promiscuous mode
[  581.545427][T10083] hsr_slave_1: left promiscuous mode
[  581.553941][T10083] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  581.566476][T10083] batman_adv: batadv0: Removing interface: batadv_slave_0
[  581.581041][T10083] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  581.590050][T10083] batman_adv: batadv0: Removing interface: batadv_slave_1
[  581.603632][T10083] bridge_slave_1: left allmulticast mode
[  581.622900][T10083] bridge_slave_1: left promiscuous mode
[  581.649040][T10083] bridge0: port 2(bridge_slave_1) entered disabled state
[  581.687905][T10083] bridge_slave_0: left allmulticast mode
[  581.708079][T10083] bridge_slave_0: left promiscuous mode
[  581.727243][T10083] bridge0: port 1(bridge_slave_0) entered disabled state
[  581.878168][T10083] veth1_macvtap: left promiscuous mode
[  581.896246][T10083] veth0_macvtap: left promiscuous mode
[  581.924777][T10083] veth1_vlan: left promiscuous mode
[  581.956052][T10083] veth0_vlan: left promiscuous mode
[  586.662399][T10083] team0 (unregistering): Port device team_slave_1 removed
[  586.683594][T11939] loop7: detected capacity change from 0 to 8
[  586.730542][T11939] SQUASHFS error: Failed to read block 0x4de: -5
[  586.745256][T11939] SQUASHFS error: Failed to read block 0x4de: -5
[  586.754501][   T28] audit: type=1800 audit(1757571232.810:38): pid=11939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1398" name="file1" dev="loop7" ino=5 res=0 errno=0
[  586.805232][T10083] team0 (unregistering): Port device team_slave_0 removed
[  586.882072][T10083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  586.982761][T10083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  587.836293][T10083] bond0 (unregistering): Released all slaves
[  587.938866][T11923] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  592.995835][T11973] loop7: detected capacity change from 0 to 1024
[  593.028239][T11973] EXT4-fs: Ignoring removed bh option
[  593.033792][T11973] EXT4-fs: Ignoring removed bh option
[  593.066184][T11785] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  593.104053][T11973] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  593.155586][T11785] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  593.173248][T11785] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  593.187473][ T5789] Bluetooth: hci0: unexpected event for opcode 0x0c13
[  593.212380][T11785] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  593.240982][T11973] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  595.964561][ T7535] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  596.060570][T11785] 8021q: adding VLAN 0 to HW filter on device bond0
[  596.175799][T11785] 8021q: adding VLAN 0 to HW filter on device team0
[  596.224088][ T6899] bridge0: port 1(bridge_slave_0) entered blocking state
[  596.231382][ T6899] bridge0: port 1(bridge_slave_0) entered forwarding state
[  596.277001][ T6899] bridge0: port 2(bridge_slave_1) entered blocking state
[  596.284300][ T6899] bridge0: port 2(bridge_slave_1) entered forwarding state
[  596.455516][T11785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  596.646147][T12003] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  596.698820][T12003] syzkaller0: entered promiscuous mode
[  596.721868][T12003] syzkaller0: entered allmulticast mode
[  596.769141][T12003] tipc: Resetting bearer <eth:syzkaller0>
[  596.839007][T12001] tipc: Resetting bearer <eth:syzkaller0>
[  596.940741][T12001] tipc: Disabling bearer <eth:syzkaller0>
[  597.086880][T11785] 8021q: adding VLAN 0 to HW filter on device batadv0
[  598.962585][ T5789] Bluetooth: hci0: unexpected event for opcode 0x0c13
[  599.055434][T12039] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1415'.
[  599.379174][T12047] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1416'.
[  599.655524][T11785] veth0_vlan: entered promiscuous mode
[  599.699373][T11785] veth1_vlan: entered promiscuous mode
[  599.958192][T11785] veth0_macvtap: entered promiscuous mode
[  600.038854][T11785] veth1_macvtap: entered promiscuous mode
[  600.203791][T11785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  600.237253][T11785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  600.294721][T10644] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  600.319514][T11785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  600.349432][T11785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  600.580206][T11785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  600.939794][T10644] usb 8-1: Using ep0 maxpacket: 16
[  600.968142][T10644] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30
[  600.979734][T10644] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  601.276016][T11785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  601.289549][T11785] batman_adv: batadv0: Interface activated: batadv_slave_0
[  601.314740][T11785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  601.328166][T10644] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[  601.355524][T11785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  601.365988][T10644] usb 8-1: New USB device found, idVendor=18d1, idProduct=5022, bcdDevice= 0.00
[  601.375312][T10644] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  601.413244][T10644] usb 8-1: config 0 descriptor??
[  601.421113][T11785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  601.461619][T11785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  601.752053][T11785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  602.595670][T11785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  602.622280][T11785] batman_adv: batadv0: Interface activated: batadv_slave_1
[  602.772580][T11785] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  602.835999][T11785] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  602.867076][T11785] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  602.906288][T11785] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  603.325002][T10085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  603.364854][T10085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  603.544483][ T8295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  603.580785][ T8295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  603.895330][T12090] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1424'.
[  604.297408][T10644] usbhid 8-1:0.0: can't add hid device: -71
[  604.340343][T10644] usbhid: probe of 8-1:0.0 failed with error -71
[  604.387836][T10644] usb 8-1: USB disconnect, device number 10
[  609.846148][T12162] loop7: detected capacity change from 0 to 128
[  610.038639][T12162] FAT-fs (loop7): Unrecognized mount option "ÿÿ1844674407370955161501777777777777777777777017777777777777777777770000000000000000000000401777777777777777777777ÿ0000000000000000000318446744073709551615y‹ŠK‡jp³îG" or missing value
[  612.021208][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  612.027845][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  613.113762][T12196] loop9: detected capacity change from 0 to 1024
[  613.380749][T12202] loop7: detected capacity change from 0 to 8
[  613.438342][T10083] hfsplus: b-tree write err: -5, ino 4
[  613.518369][T12202] SQUASHFS error: Failed to read block 0x4de: -5
[  613.599715][T12202] SQUASHFS error: Failed to read block 0x4de: -5
[  613.612699][   T28] audit: type=1800 audit(1757571261.000:39): pid=12202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1443" name="file1" dev="loop7" ino=5 res=0 errno=0
[  613.672522][T12204] syzkaller0: entered promiscuous mode
[  613.709072][T12204] syzkaller0: entered allmulticast mode
[  614.844327][T12221] loop9: detected capacity change from 0 to 128
[  615.191113][T12221] FAT-fs (loop9): Unrecognized mount option "ÿÿ1844674407370955161501777777777777777777777017777777777777777777770177777777777777777777701777777777777777777777ÿ0000000000000000000318446744073709551615y‹ŠK‡jp³îG" or missing value
[  616.138400][T12239] Driver unsupported XDP return value 0 on prog  (id 196) dev N/A, expect packet loss!
[  616.205527][T12231] loop9: detected capacity change from 0 to 8192
[  619.130217][T12263] loop9: detected capacity change from 0 to 128
[  619.213823][T12263] FAT-fs (loop9): Unrecognized mount option "ÿÿ1844674407370955161501777777777777777777777017777777777777777777770000000000000000000000401777777777777777777777ÿ0000000000000000000318446744073709551615y‹ŠK‡jp³îG" or missing value
[  619.424610][ T5789] Bluetooth: hci2: unexpected event for opcode 0x0c13
[  621.361426][T11802] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  621.991621][T12286] syzkaller0: entered promiscuous mode
[  621.997194][T12286] syzkaller0: entered allmulticast mode
[  625.491218][T12326] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1480'.
[  625.707252][T12334] loop7: detected capacity change from 0 to 8
[  625.905285][T12334] SQUASHFS error: Failed to read block 0x4de: -5
[  625.912197][T12334] SQUASHFS error: Failed to read block 0x4de: -5
[  626.123425][   T28] audit: type=1800 audit(1757571274.135:40): pid=12334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1468" name="file1" dev="loop7" ino=5 res=0 errno=0
Stopping sshd: stopped /usr/sbin/sshd (pid 5542)
[  631.595020][T12398] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1494'.
OK
[  631.636915][T12398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1494'.
[  631.899970][T12401] loop9: detected capacity change from 0 to 2048
Stopping crond: [  632.133967][T12401] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
stopped /usr/sbin/crond (pid 5529)
[  632.725479][T12411] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
OK
[  633.603357][T12422] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  633.626296][T12422] syzkaller0: entered promiscuous mode
[  633.638016][T11785] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  633.656976][T12422] syzkaller0: entered allmulticast mode
[  633.744277][T12422] tipc: Resetting bearer <eth:syzkaller0>
[  633.847244][T12421] tipc: Resetting bearer <eth:syzkaller0>
[  634.086808][T12421] tipc: Disabling bearer <eth:syzkaller0>
Stopping dhcpcd...
stopped /sbin/dhcpcd (pid 5449)
[  634.577476][T12442] loop7: detected capacity change from 0 to 1024
Stopping network: [  636.783169][T12470] netlink: 'syz.4.1509': attribute type 12 has an invalid length.
[  636.838944][T12470] netlink: 'syz.4.1509': attribute type 29 has an invalid length.
[  636.846847][T12470] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1509'.
[  636.893014][T12470] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1509'.
OK
Stopping iptables: OK
Stopping system message bus: [  640.510974][T12525] loop7: detected capacity change from 0 to 512
[  640.558165][T12525] EXT4-fs: Ignoring removed mblk_io_submit option
[  640.598458][T12525] EXT4-fs: Ignoring removed mblk_io_submit option
[  640.649437][T12525] EXT4-fs: Mount option(s) incompatible with ext2
done
[  645.426905][T12571] loop9: detected capacity change from 0 to 1024
[  645.464148][T12571] EXT4-fs: Ignoring removed i_version option
[  645.494483][T12571] EXT4-fs: inline encryption not supported
Stopping klogd: [  645.543723][T12571] EXT4-fs (loop9): Test dummy encryption mode enabled
[  645.759936][T12571] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  647.277344][T11785] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
OK
Stopping acpid: [  649.119461][T12611] loop7: detected capacity change from 0 to 8
[  649.164021][T12611] SQUASHFS error: Failed to read block 0x4de: -5
[  649.170908][T12611] SQUASHFS error: Failed to read block 0x4de: -5
[  649.547379][   T28] audit: type=1800 audit(1757571298.346:41): pid=12611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1532" name="file1" dev="loop7" ino=5 res=0 errno=0
OK
Stopping syslogd: stopped /sbin/syslogd (pid 5137)
OK
umount: can't remount debugfs read-only
umount: can't remount tmpfs read-only
[  651.853659][T12649] netlink: 'syz.8.1539': attribute type 72 has an invalid length.
[  651.893293][T12649] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1539'.
[  655.175160][T12671] loop7: detected capacity change from 0 to 1764
serialport: VM disconnected.