last executing test programs:

2m35.830979398s ago: executing program 0 (id=845):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x7c}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setrlimit(0x8, 0x0)
r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff)
keyctl$read(0x2, r6, &(0x7f00000003c0)=""/4096, 0x1000)
vmsplice(r5, 0x0, 0x0, 0x4)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f00000013c0)=ANY=[@ANYRES16, @ANYBLOB, @ANYRESOCT=r1])
chdir(&(0x7f0000000300)='./file0\x00')
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
removexattr(0x0, &(0x7f0000000280)=@known='trusted.overlay.impure\x00')
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r7, &(0x7f00000004c0)="ab", 0xff04, 0xc0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r2, 0x1, 0x123, 0x234}, 0x14}}, 0x0)

2m34.660774411s ago: executing program 0 (id=859):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
getrlimit(0x1, 0x0)
r4 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x1, 0x0)
fchdir(r5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000180)={[{@test_dummy_encryption_v1}, {@nolazytime}]}, 0x1, 0x241, &(0x7f00000020c0)="$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")
syz_usb_connect(0x3, 0x2fa, &(0x7f0000000340)=ANY=[], &(0x7f0000000a80)={0x0, 0x0, 0x2e, &(0x7f0000000880)=ANY=[@ANYBLOB="050f2e0004bb101263f69a6388a41d7b3a0710021a9000100710020651ad00afbd0f2e6b92cc1c253644e86c3b7b"], 0x7, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x441}}, {0x0, 0x0}, {0x29, &(0x7f0000000640)=ANY=[@ANYBLOB="29033ce069ea9dd34206969e4a9bdbb23788b0e0c90d000023f4278c696df4cd1dfd63932465e897babc7d"]}, {0x0, 0x0}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x82c}}, {0x0, 0x0}]})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000040)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)

2m31.045702231s ago: executing program 0 (id=869):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000000)={[{@compress_algo={'compress', 0x3d, 'lzo'}}, {@clear_cache}, {@compress_algo={'compress', 0x3d, 'lzo'}}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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")
ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000001c0)={0x5, 0x200000000000000, 0x4, 0x6, 0x0, [0x7, 0x9, 0x3, 0xfffffffe]})

2m30.697970289s ago: executing program 0 (id=874):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = userfaultfd(0x801)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa080019"], 0x58}}, 0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000042000b0026bd7000004000000300000008000200070000100a0001"], 0x28}}, 0x4040080)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400000000fddbdf250000007c", @ANYRES32=0x0, @ANYBLOB="90010000305200001c00128009000100626f6e64000000000c000280050016"], 0x3c}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0)
r7 = userfaultfd(0x80801)
personality(0xc)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0))
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r8)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20044844}, 0x4)

2m30.178462238s ago: executing program 0 (id=876):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x4041080)

2m29.843958985s ago: executing program 0 (id=879):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]})
mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0)
ioctl$sock_bt_hci(r3, 0x400448c9, 0x0)
unshare(0x40020000)

2m13.943658624s ago: executing program 32 (id=879):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]})
mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0)
ioctl$sock_bt_hci(r3, 0x400448c9, 0x0)
unshare(0x40020000)

19.340070808s ago: executing program 5 (id=1544):
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x12, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000f8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000005a80)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f0000000540)="$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")

18.72882263s ago: executing program 5 (id=1548):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf"], 0x66)

17.229581041s ago: executing program 1 (id=1556):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
setsockopt$packet_int(r0, 0x107, 0xe, 0x0, 0x0)

17.106128053s ago: executing program 1 (id=1557):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYRES8=0x0, @ANYBLOB="fe"], 0x48}}, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

12.124398465s ago: executing program 4 (id=1567):
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4f0c3000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x4000000000000c5, 0x400)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f00000022c0)='./bus\x00', 0x810094, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES32=0x0, @ANYRESHEX], 0x6, 0x2de, &(0x7f0000000480)="$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")
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000040)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000000))
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)

10.821612751s ago: executing program 4 (id=1568):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3004000, &(0x7f0000000340), 0x2, 0x7ad, &(0x7f0000000380)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10)
r7 = io_uring_setup(0xad5, &(0x7f0000000040)={0x0, 0xfffffffc})
close(r7)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001d00)=@bpf_ext={0x1c, 0x1, &(0x7f0000000980)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], &(0x7f0000000a00)='GPL\x00', 0x8, 0x1000, &(0x7f0000000c00)=""/4096, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x22d19, r6, 0x4, &(0x7f0000001c40)=[r5, r5, 0xffffffffffffffff, r5, r4, r4, 0xffffffffffffffff], &(0x7f0000001c80)=[{0x5, 0x4, 0x9, 0x3}, {0x5, 0x5, 0xd, 0x2}, {0x4, 0x3, 0x4, 0x9}, {0x2, 0x1, 0x6, 0x1}], 0x10, 0x9}, 0x94)
clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r6, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000680)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000006c0)=[0x0], &(0x7f0000000700)=[0x0], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x8, 0xb0, 0x8, 0x8, &(0x7f0000000800)}}, 0x10)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x5c, r8, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
chdir(&(0x7f0000000080)='./file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x79)

4.93302203s ago: executing program 4 (id=1570):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
getpid()
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000940)=0x28, 0x4)
sendmmsg$inet6(r1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x106f)

4.93238283s ago: executing program 1 (id=1571):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, 0x0)

4.93170797s ago: executing program 5 (id=1572):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
getresuid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000640))
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000740)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @val={@void, {0x8100, 0x4, 0x1, 0x4}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={0xac, 0x14, 0x14, 0x26}, @broadcast, @private=0xa010102}}}}, &(0x7f00000007c0)={0x0, 0x1, [0x79, 0x62e, 0x458, 0x4e7]})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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")
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0)
read$FUSE(r7, &(0x7f00000020c0)={0x2020}, 0x2020)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r8}, 0x18)
pwritev(0xffffffffffffffff, &(0x7f0000003ac0)=[{&(0x7f0000000000)="b6", 0x1}], 0x1, 0x2, 0x5)
setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000f00)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x220, 0x220, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000800), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x21}, @rand_addr=0x64010100, 0xffffff00, 0xffffff00, 0x6, 0x6, {@empty, {[0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x660934d4dbb84bcc, 0xff, 0xff]}}, 0x2, 0x4, 0x2, 0x0, 0x1, 0x80, 'vcan0\x00', 'batadv_slave_0\x00', {}, {}, 0x0, 0x50}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @loopback, 0x7, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @multicast1, @empty, 0x1, 0x1}}}, {{@arp={@local, @local, 0xffffff00, 0xffffffff, 0x4, 0xc, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x7, 0x7f, 0x7fff, 0x6, 0x4, 0x6be, 'batadv_slave_0\x00', 'macvlan1\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)

4.318467213s ago: executing program 2 (id=1573):
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff87, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r0}, 0x10)
syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0)

4.049928228s ago: executing program 5 (id=1574):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000162, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)

4.016426269s ago: executing program 3 (id=1575):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0xa5, 0xa, 0x0, 0x0, 0x18, 0x61, 0x11, 0x6c}}, &(0x7f0000000000)='GPL\x00'}, 0x94)

3.782199674s ago: executing program 2 (id=1576):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c", @ANYRES16, @ANYBLOB], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x800)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x11c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x16}]}, @CTA_TUPLE_ORIG={0xb8, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_TUPLE_ORIG={0x4}, @CTA_ID={0x8}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x1c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x7}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x3}, @CTA_PROTOINFO_TCP_STATE={0x5}]}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x80}, 0x4000004)
write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910006000000000000000a"], 0xfe33)

3.609663197s ago: executing program 1 (id=1577):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, <r3=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r3})

3.567102348s ago: executing program 2 (id=1578):
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4f0c3000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x4000000000000c5, 0x400)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f00000022c0)='./bus\x00', 0x810094, &(0x7f00000001c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d302c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d302c757466383d312c726f6469722c636865636b3d7374726963742c756e695f786c6174653d312c73686f72746e616d653d77696e39352c696f636861727365743d63703935302c636f6465706167653d3835352c696f636861727365743d63703836322c73686f72746e616d653d6d697865642c646d61736b3d30303030303030303030303030303030303030303130302c757466383d312c756e695f786c6174653d302c696f636861727365743d69736f383835392d362c73686f72746e616d653d6d008000002c6e6e6f6e75008361690400312c73686f72746e616d6577696e39352c726f6469722c757466383d302c696f636861727365743d6575632d6a702c757466383d312c757466383d302c726f6f74636f6e746578743d73746166665f752c009d54d2aaf6d06f18be776bb0ffac7a5551d56f69676c5a4b4e936050f5015a88410ba0676d48b0d307dfb550ec405bfcf6345121e4ef37982c969e2ff5915d729aa2982209cd4f06a1b6fa7ff4d2a7ce636cbde5339573fbd7c5ff9ff4481d415a136dba0a11246055ee1246a02b888f9aa72f3e876b621297de4e141d9700eee76208a6b62fc18d5dce7a798b1920830452b000dfc54ce2735b49179188ca936edb03581e240974fc368283677a20dc700c5f6d3995b3ea4611d52f2dafd6a9e8ad74e3b18058a210222bd6486148f7a294c215544f477f891c", @ANYRES64=0x0, @ANYRES32=0x0, @ANYRESHEX], 0x6, 0x2de, &(0x7f0000000480)="$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")
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000040)=0x4000000)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)

3.546017949s ago: executing program 1 (id=1579):
prctl$PR_GET_CHILD_SUBREAPER(0x25)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c)
mkdirat(0xffffffffffffff9c, 0x0, 0x180)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(r5, 0x4b68, 0x0)
prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffa000/0x4000)=nil)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newtfilter={0x88c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x9, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xb, 0x7, 0x4, 0x8, 0x5, 0x1, 0x0, 0xc0, 0x6, 0x101, 0x920, 0x7, 0x3, 0x2, 0x2c9d, 0x6, 0x26, 0x2, 0x10, 0xffffffa0, 0x7d0, 0xffff, 0x10000, 0x3, 0x3, 0xfffffff9, 0xe5, 0x3, 0x8, 0x3, 0x3, 0x9, 0x1, 0xfffffff9, 0x22, 0x2, 0x1, 0x2, 0x0, 0x0, 0xea3, 0x1, 0x0, 0x4, 0x91, 0x4, 0x3, 0x5, 0x7, 0x4, 0x7f, 0x6, 0xd9a, 0xc, 0xb, 0x100, 0xed7, 0x8, 0xad4, 0x15, 0x9, 0xfffffff5, 0x31, 0x7, 0x1, 0x3, 0x8, 0x17028692, 0x3, 0x4, 0x7f, 0x4, 0xfe, 0x4, 0xffff, 0x3f, 0x6, 0x5, 0xdf, 0x40000, 0x9, 0x7, 0xb, 0x7ff, 0x3fb3c724, 0x7, 0x7, 0x8, 0x6, 0x7fff, 0x8, 0x6, 0x2, 0x3, 0x5, 0x5, 0x1, 0x10, 0x3, 0x97, 0x3, 0x0, 0x1, 0x5b5b, 0x9, 0x8, 0x9, 0x2000, 0x4ce, 0x8, 0xfff, 0x6, 0x8db3, 0x9, 0x6, 0x279, 0x6, 0x6, 0xffff, 0x0, 0x3, 0x4, 0x4, 0xfff, 0x5, 0x2, 0x800, 0xffff, 0x4, 0x0, 0x7, 0x10000, 0x8000, 0x6, 0xad9b, 0x7, 0x0, 0x3ff, 0x7, 0x8, 0x1, 0x1, 0x7, 0xd6e4, 0x4, 0x533, 0x9, 0x276, 0x7, 0xff, 0x4, 0x2, 0x1166, 0xfffffffa, 0x3, 0xb20e, 0xe8, 0x4, 0x7f4, 0x7, 0x1, 0xfff, 0x3, 0x8001, 0x4, 0x3, 0x4, 0x8, 0x8, 0xca2, 0x6, 0x1000, 0x3, 0x2, 0x4, 0x18, 0xc6, 0x7, 0x7, 0x4, 0x80000000, 0x0, 0x7, 0xb68, 0x7ab, 0x52, 0x3, 0x80, 0x9, 0x2da, 0x5, 0x9, 0x7fff, 0x2, 0xd5916ed, 0x0, 0xb8, 0x6, 0x5, 0x9, 0x2cc, 0x0, 0x2, 0xb7, 0x3, 0xb6b6, 0x0, 0x4, 0x9, 0x5, 0x2, 0x0, 0x4, 0xfce2, 0x8, 0xc, 0x3f5c, 0x100, 0xdb03, 0xfffffff9, 0x4, 0xf84, 0x6, 0xd7d2, 0xffffffff, 0xf300, 0x9a84, 0x8, 0x516, 0x3, 0x3, 0x8, 0x2, 0x1000, 0xffffffff, 0x3, 0x6, 0x200, 0xfffffffc, 0x6, 0x7fff, 0x8, 0x6, 0x8001, 0x8, 0x4, 0x5, 0x8, 0x1, 0xcdb9, 0x70, 0xf1, 0x10, 0x6, 0x93d5eea, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0xb, 0x7, 0x5, 0x101, 0x8000, 0x80000000, 0x5, 0x10, 0xffffffff, 0x7, 0x7fffffff, 0xffffffff, 0x4, 0x3ff, 0x8, 0x693d24ac, 0x9, 0x5, 0x7f, 0x9, 0x2, 0xe9, 0x14b, 0x3, 0x40, 0x8d, 0x1, 0x6, 0x101, 0xfff, 0x9, 0x7, 0x6, 0x10000, 0x8, 0x8001, 0x10c4, 0x3, 0x205, 0x9, 0x8, 0x60b, 0xd, 0xffff, 0x4, 0x1, 0xe, 0x1, 0x9, 0xffff, 0x8, 0x5, 0x0, 0x9, 0x5, 0x8, 0xfffffff9, 0x401, 0xd, 0x800, 0x4, 0x6, 0x3, 0x9, 0x3ff, 0x10, 0x8, 0x80000000, 0x6, 0x2afa, 0xffffffff, 0x6, 0x2, 0x3ff, 0x0, 0xd, 0x5, 0x6, 0x8, 0x2, 0x2000000, 0x7, 0x6, 0xfff, 0x3, 0x7, 0x8, 0x8, 0x6, 0x5, 0x7fff, 0x3, 0x1200, 0x9, 0xbc, 0x1, 0x8001, 0x9, 0xf, 0x5, 0x2, 0x3192212c, 0x3, 0x1, 0x3, 0x1000, 0x0, 0x9, 0x8000, 0xfffffff8, 0x3dae, 0x80, 0x5, 0x9, 0x9, 0x7, 0x698, 0x1, 0x7, 0x7f, 0x6, 0x401, 0x5, 0x7, 0x7fffffff, 0x7, 0x10001, 0xffffffe3, 0x7ff, 0x4, 0x10, 0x7, 0x1, 0x7, 0x9, 0x1ff, 0x7, 0xc5dd, 0x2, 0x7, 0x80, 0x3, 0xa, 0xff, 0x9, 0x6, 0x1, 0xd, 0x45, 0x10000, 0x553, 0x800, 0x0, 0x3, 0x4, 0x1b, 0xb, 0x1, 0x8, 0x59, 0x200, 0x1, 0x6, 0x5, 0xd, 0x8001, 0x5c34a762, 0x4, 0x9, 0x3, 0xf, 0x0, 0x9, 0x3, 0x40, 0xf9, 0xfffffff8, 0x2d1f, 0x0, 0x6, 0x3, 0x80000001, 0x4, 0x40, 0x0, 0xffffffff, 0x80000000, 0x9, 0x8, 0x7, 0xfffffff1, 0x5, 0x7f, 0x9, 0x81, 0x9, 0xeb5e, 0x4, 0x6, 0x2, 0x3, 0xf9d, 0xf, 0xce, 0xea5, 0x6, 0x4, 0x6, 0x400, 0x2, 0x300, 0x15, 0x8, 0x2, 0x6, 0x3, 0x9, 0x800, 0xa, 0x200, 0x6, 0x442b89e0, 0x3, 0x0, 0x35b4, 0x10001, 0x3, 0x10001, 0x5, 0x9, 0x4, 0xf, 0x6, 0x7, 0x0, 0x7, 0x0, 0x8ba2, 0x8, 0x2, 0x10001, 0x8, 0x9, 0x6, 0x7fffffff, 0x1, 0x3, 0x6, 0xbd3, 0x9, 0x7fffffff, 0x7, 0xffffd4a4, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x6, 0xbc, 0x7fffffff, 0x12b0abb7, {0xe, 0x0, 0x3, 0x9, 0x40, 0xfffffffb}, {0x1, 0x2, 0xfff7, 0x101, 0x8000, 0x3}, 0x8, 0x9}}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

2.546198129s ago: executing program 4 (id=1580):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r3)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x11}, {0xffef, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3ff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

2.353974622s ago: executing program 5 (id=1581):
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002cc0)={0x401, 0x101, 0x4, 0x7, 0x990}, 0x14)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="2eaa00000000000061102400000000009500000000"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18)
socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c)

2.350263033s ago: executing program 1 (id=1582):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf"], 0x66)

2.294014893s ago: executing program 3 (id=1583):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80003, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0x7, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.843170283s ago: executing program 2 (id=1584):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000180)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100a8}}}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x50}}, 0x40080)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x2, 0x2}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)

1.771733794s ago: executing program 3 (id=1585):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
getresuid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000640))
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000740)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @val={@void, {0x8100, 0x4, 0x1, 0x4}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={0xac, 0x14, 0x14, 0x26}, @broadcast, @private=0xa010102}}}}, &(0x7f00000007c0)={0x0, 0x1, [0x79, 0x62e, 0x458, 0x4e7]})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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")
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0)
read$FUSE(r7, &(0x7f00000020c0)={0x2020}, 0x2020)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r8}, 0x18)
pwritev(0xffffffffffffffff, &(0x7f0000003ac0)=[{&(0x7f0000000000)="b6", 0x1}], 0x1, 0x2, 0x5)
setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000f00)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x220, 0x220, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000800), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x21}, @rand_addr=0x64010100, 0xffffff00, 0xffffff00, 0x6, 0x6, {@empty, {[0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x660934d4dbb84bcc, 0xff, 0xff]}}, 0x2, 0x4, 0x2, 0x0, 0x1, 0x80, 'vcan0\x00', 'batadv_slave_0\x00', {}, {}, 0x0, 0x50}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @loopback, 0x7, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @multicast1, @empty, 0x1, 0x1}}}, {{@arp={@local, @local, 0xffffff00, 0xffffffff, 0x4, 0xc, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x7, 0x7f, 0x7fff, 0x6, 0x4, 0x6be, 'batadv_slave_0\x00', 'macvlan1\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)

1.312575234s ago: executing program 5 (id=1586):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x1, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f00000001c0)='cpuset.memory_migrate\x00', 0x2, 0x0)
read(r6, &(0x7f00000002c0)=""/147, 0x93)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

937.309461ms ago: executing program 4 (id=1587):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, 0x0)

935.225941ms ago: executing program 2 (id=1588):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c", @ANYRES16, @ANYBLOB], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x800)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x140, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x16}]}, @CTA_TUPLE_ORIG={0xb8, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @remote}}}]}, @CTA_ID={0x8}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x1c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x7}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x3}, @CTA_PROTOINFO_TCP_STATE={0x5}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0x80}, 0x4000004)
write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910006000000000000000a"], 0xfe33)

892.957082ms ago: executing program 3 (id=1589):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000280)={r3, 0x0, 0x20000, 0x0, 0x0, [], [0x0, 0x9], [0x4, 0x0, 0x6], [0xffffffefffffffff, 0x3, 0x400000008]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000300))

816.227984ms ago: executing program 3 (id=1590):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = semget$private(0x0, 0x207, 0x0)
semctl$GETNCNT(r3, 0x2, 0xe, &(0x7f0000000340)=""/76)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000d80)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00'})
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x5, 0x0, 0x741}}, 0x30)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

73.370589ms ago: executing program 4 (id=1591):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
shutdown(r2, 0x1)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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")

61.573579ms ago: executing program 2 (id=1592):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0)

0s ago: executing program 3 (id=1593):
prctl$PR_GET_CHILD_SUBREAPER(0x25)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c)
mkdirat(0xffffffffffffff9c, 0x0, 0x180)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(r5, 0x4b68, 0x0)
prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffa000/0x4000)=nil)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newtfilter={0x88c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x9, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xb, 0x7, 0x4, 0x8, 0x5, 0x1, 0x0, 0xc0, 0x6, 0x101, 0x920, 0x7, 0x3, 0x2, 0x2c9d, 0x6, 0x26, 0x2, 0x10, 0xffffffa0, 0x7d0, 0xffff, 0x10000, 0x3, 0x3, 0xfffffff9, 0xe5, 0x3, 0x8, 0x3, 0x3, 0x9, 0x1, 0xfffffff9, 0x22, 0x2, 0x1, 0x2, 0x0, 0x0, 0xea3, 0x1, 0x0, 0x4, 0x91, 0x4, 0x3, 0x5, 0x7, 0x4, 0x7f, 0x6, 0xd9a, 0xc, 0xb, 0x100, 0xed7, 0x8, 0xad4, 0x15, 0x9, 0xfffffff5, 0x31, 0x7, 0x1, 0x3, 0x8, 0x17028692, 0x3, 0x4, 0x7f, 0x4, 0xfe, 0x4, 0xffff, 0x3f, 0x6, 0x5, 0xdf, 0x40000, 0x9, 0x7, 0xb, 0x7ff, 0x3fb3c724, 0x7, 0x7, 0x8, 0x6, 0x7fff, 0x8, 0x6, 0x2, 0x3, 0x5, 0x5, 0x1, 0x10, 0x3, 0x97, 0x3, 0x0, 0x1, 0x5b5b, 0x9, 0x8, 0x9, 0x2000, 0x4ce, 0x8, 0xfff, 0x6, 0x8db3, 0x9, 0x6, 0x279, 0x6, 0x6, 0xffff, 0x0, 0x3, 0x4, 0x4, 0xfff, 0x5, 0x2, 0x800, 0xffff, 0x4, 0x0, 0x7, 0x10000, 0x8000, 0x6, 0xad9b, 0x7, 0x0, 0x3ff, 0x7, 0x8, 0x1, 0x1, 0x7, 0xd6e4, 0x4, 0x533, 0x9, 0x276, 0x7, 0xff, 0x4, 0x2, 0x1166, 0xfffffffa, 0x3, 0xb20e, 0xe8, 0x4, 0x7f4, 0x7, 0x1, 0xfff, 0x3, 0x8001, 0x4, 0x3, 0x4, 0x8, 0x8, 0xca2, 0x6, 0x1000, 0x3, 0x2, 0x4, 0x18, 0xc6, 0x7, 0x7, 0x4, 0x80000000, 0x0, 0x7, 0xb68, 0x7ab, 0x52, 0x3, 0x80, 0x9, 0x2da, 0x5, 0x9, 0x7fff, 0x2, 0xd5916ed, 0x0, 0xb8, 0x6, 0x5, 0x9, 0x2cc, 0x0, 0x2, 0xb7, 0x3, 0xb6b6, 0x0, 0x4, 0x9, 0x5, 0x2, 0x0, 0x4, 0xfce2, 0x8, 0xc, 0x3f5c, 0x100, 0xdb03, 0xfffffff9, 0x4, 0xf84, 0x6, 0xd7d2, 0xffffffff, 0xf300, 0x9a84, 0x8, 0x516, 0x3, 0x3, 0x8, 0x2, 0x1000, 0xffffffff, 0x3, 0x6, 0x200, 0xfffffffc, 0x6, 0x7fff, 0x8, 0x6, 0x8001, 0x8, 0x4, 0x5, 0x8, 0x1, 0xcdb9, 0x70, 0xf1, 0x10, 0x6, 0x93d5eea, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0xb, 0x7, 0x5, 0x101, 0x8000, 0x80000000, 0x5, 0x10, 0xffffffff, 0x7, 0x7fffffff, 0xffffffff, 0x4, 0x3ff, 0x8, 0x693d24ac, 0x9, 0x5, 0x7f, 0x9, 0x2, 0xe9, 0x14b, 0x3, 0x40, 0x8d, 0x1, 0x6, 0x101, 0xfff, 0x9, 0x7, 0x6, 0x10000, 0x8, 0x8001, 0x10c4, 0x3, 0x205, 0x9, 0x8, 0x60b, 0xd, 0xffff, 0x4, 0x1, 0xe, 0x1, 0x9, 0xffff, 0x8, 0x5, 0x0, 0x9, 0x5, 0x8, 0xfffffff9, 0x401, 0xd, 0x800, 0x4, 0x6, 0x3, 0x9, 0x3ff, 0x10, 0x8, 0x80000000, 0x6, 0x2afa, 0xffffffff, 0x6, 0x2, 0x3ff, 0x0, 0xd, 0x5, 0x6, 0x8, 0x2, 0x2000000, 0x7, 0x6, 0xfff, 0x3, 0x7, 0x8, 0x8, 0x6, 0x5, 0x7fff, 0x3, 0x1200, 0x9, 0xbc, 0x1, 0x8001, 0x9, 0xf, 0x5, 0x2, 0x3192212c, 0x3, 0x1, 0x3, 0x1000, 0x0, 0x9, 0x8000, 0xfffffff8, 0x3dae, 0x80, 0x5, 0x9, 0x9, 0x7, 0x698, 0x1, 0x7, 0x7f, 0x6, 0x401, 0x5, 0x7, 0x7fffffff, 0x7, 0x10001, 0xffffffe3, 0x7ff, 0x4, 0x10, 0x7, 0x1, 0x7, 0x9, 0x1ff, 0x7, 0xc5dd, 0x2, 0x7, 0x80, 0x3, 0xa, 0xff, 0x9, 0x6, 0x1, 0xd, 0x45, 0x10000, 0x553, 0x800, 0x0, 0x3, 0x4, 0x1b, 0xb, 0x1, 0x8, 0x59, 0x200, 0x1, 0x6, 0x5, 0xd, 0x8001, 0x5c34a762, 0x4, 0x9, 0x3, 0xf, 0x0, 0x9, 0x3, 0x40, 0xf9, 0xfffffff8, 0x2d1f, 0x0, 0x6, 0x3, 0x80000001, 0x4, 0x40, 0x0, 0xffffffff, 0x80000000, 0x9, 0x8, 0x7, 0xfffffff1, 0x5, 0x7f, 0x9, 0x81, 0x9, 0xeb5e, 0x4, 0x6, 0x2, 0x3, 0xf9d, 0xf, 0xce, 0xea5, 0x6, 0x4, 0x6, 0x400, 0x2, 0x300, 0x15, 0x8, 0x2, 0x6, 0x3, 0x9, 0x800, 0xa, 0x200, 0x6, 0x442b89e0, 0x3, 0x0, 0x35b4, 0x10001, 0x3, 0x10001, 0x5, 0x9, 0x4, 0xf, 0x6, 0x7, 0x0, 0x7, 0x0, 0x8ba2, 0x8, 0x2, 0x10001, 0x8, 0x9, 0x6, 0x7fffffff, 0x1, 0x3, 0x6, 0xbd3, 0x9, 0x7fffffff, 0x7, 0xffffd4a4, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x6, 0xbc, 0x7fffffff, 0x12b0abb7, {0xe, 0x0, 0x3, 0x9, 0x40, 0xfffffffb}, {0x1, 0x2, 0xfff7, 0x101, 0x8000, 0x3}, 0x8, 0x9}}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

kernel console output (not intermixed with test programs):

03] capability: warning: `syz.0.327' uses 32-bit capabilities (legacy support in use)
[   70.340978][ T5407] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   70.342691][ T5407] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   70.343995][ T5407] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   70.345325][ T5407] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   70.467116][ T5414] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   70.871083][ T5421] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   70.883481][ T5421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   70.886998][ T5421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   70.891033][ T5421] device bridge_slave_0 left promiscuous mode
[   70.894456][ T5421] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.935641][ T5421] device bridge_slave_1 left promiscuous mode
[   70.936918][ T5421] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.985386][ T5421] bond0: (slave bond_slave_0): Releasing backup interface
[   71.026837][ T5421] bond0: (slave bond_slave_1): Releasing backup interface
[   71.085968][ T5421] team0: Port device team_slave_0 removed
[   71.095757][ T5421] team0: Port device team_slave_1 removed
[   71.169609][ T5443] netlink: 20 bytes leftover after parsing attributes in process `syz.4.339'.
[   71.171162][ T5443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.339'.
[   71.221257][ T5443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.339'.
[   71.287824][ T5442] loop0: detected capacity change from 0 to 32768
[   71.879375][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   71.886125][ T5442] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   71.951341][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   71.953804][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   71.955838][ T5466] device bridge_slave_0 left promiscuous mode
[   71.956956][ T5466] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.982056][ T4320] ocfs2: Unmounting device (7,0) on (node local)
[   72.196100][ T5466] device bridge_slave_1 left promiscuous mode
[   72.197798][ T5466] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.244477][ T5466] bond0: (slave bond_slave_0): Releasing backup interface
[   72.298682][ T5466] bond0: (slave bond_slave_1): Releasing backup interface
[   72.372359][ T5466] team0: Port device team_slave_0 removed
[   72.392711][ T5466] team0: Port device team_slave_1 removed
[   72.394168][ T5466] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.395925][ T5466] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.404663][ T5466] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.406104][ T5466] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.435732][ T5478] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   72.644165][ T5497] loop4: detected capacity change from 0 to 2048
[   72.648342][ T5497] NILFS (loop4): unrecognized mount option "cp=0x0000000000000003±£ø¢þápô"
[   72.901827][ T5501] loop3: detected capacity change from 0 to 32768
[   73.011000][ T5501] XFS (loop3): Mounting V5 Filesystem
[   73.034225][ T5501] XFS (loop3): Ending clean mount
[   73.221553][ T5524] loop1: detected capacity change from 0 to 1024
[   73.229895][ T5524] EXT4-fs: Ignoring removed orlov option
[   73.902212][ T4331] XFS (loop3): Unmounting Filesystem
[   73.928747][ T5524] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   73.987526][ T5535] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   73.991053][ T5538] capability: warning: `syz.2.362' uses deprecated v2 capabilities in a way that may be insecure
[   73.997014][ T5535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   73.999489][ T5535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   74.123448][ T4321] EXT4-fs (loop1): unmounting filesystem.
[   74.167294][ T5550] __nla_validate_parse: 3 callbacks suppressed
[   74.167306][ T5550] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.367'.
[   74.172032][ T5548] loop4: detected capacity change from 0 to 4096
[   74.195864][ T5548] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   74.210381][ T4319] EXT4-fs (loop4): unmounting filesystem.
[   74.222219][ T5553] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   74.318842][ T5563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.370'.
[   74.364324][ T5544] loop2: detected capacity change from 0 to 40427
[   74.372354][ T5544] F2FS-fs (loop2): Unrecognized mount option "age_extent_cache" or missing value
[   74.594727][ T5575] loop4: detected capacity change from 0 to 8192
[   75.190408][ T5586] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.378'.
[   75.191522][ T5588] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   75.600450][ T5588] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   75.601960][ T5588] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   75.619694][ T5591] loop2: detected capacity change from 0 to 4096
[   75.634592][ T5591] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   75.651615][ T4322] EXT4-fs (loop2): unmounting filesystem.
[   75.693803][ T5600] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   75.720725][ T5603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.383'.
[   75.782145][ T5610] loop2: detected capacity change from 0 to 1024
[   75.885207][ T4834] hfsplus: b-tree write err: -5, ino 4
[   76.123244][ T5622] loop4: detected capacity change from 0 to 128
[   76.129047][ T5622] EXT4-fs (loop4): Test dummy encryption mode enabled
[   76.138427][ T5622] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   76.147023][ T5622] EXT4-fs (loop4): unmounting filesystem.
[   76.160846][ T5622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   76.162379][ T5622] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   76.285030][ T5631] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.390'.
[   76.746842][ T5636] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   76.749482][ T5636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   76.751233][ T5636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   76.779168][ T5639] loop0: detected capacity change from 0 to 4096
[   76.845868][ T5639] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   76.869544][ T4320] EXT4-fs (loop0): unmounting filesystem.
[   76.897439][ T5645] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   76.911053][ T5647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.396'.
[   77.445574][ T5679] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.403'.
[   77.534298][ T5683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.404'.
[   77.559802][ T5650] loop2: detected capacity change from 0 to 32768
[   78.107582][ T5697] loop1: detected capacity change from 0 to 512
[   78.121625][ T5691] wlan0 speed is unknown, defaulting to 1000
[   78.122238][ T5697] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   78.126303][ T5697] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   78.144886][ T5650] XFS (loop2): Mounting V5 Filesystem
[   78.148903][ T5697] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.407: corrupted in-inode xattr
[   78.161864][ T5697] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.407: couldn't read orphan inode 15 (err -117)
[   78.164252][ T5697] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   78.172587][ T4332] Bluetooth: hci1: command 0x201b tx timeout
[   78.194349][ T5650] XFS (loop2): Ending clean mount
[   78.522726][ T4322] XFS (loop2): Unmounting Filesystem
[   78.950966][ T4321] EXT4-fs (loop1): unmounting filesystem.
[   79.180354][ T5724] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.415'.
[   79.793155][ T5734] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   80.067318][ T5746] loop3: detected capacity change from 0 to 4096
[   80.109719][ T5746] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   80.138882][ T4331] EXT4-fs (loop3): unmounting filesystem.
[   80.164427][ T5754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   80.170528][ T5754] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.275667][ T5761] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.426'.
[   80.409354][ T5769] loop4: detected capacity change from 0 to 128
[   80.720543][ T5769] FAT-fs (loop4): error, clusters badly computed (0 != 1)
[   80.737187][ T5769] FAT-fs (loop4): Filesystem has been set read-only
[   80.740609][ T5769] FAT-fs (loop4): error, clusters badly computed (1 != 2)
[   80.742761][ T5769] FAT-fs (loop4): error, clusters badly computed (2 != 3)
[   80.744647][ T5769] FAT-fs (loop4): error, clusters badly computed (3 != 4)
[   80.745969][ T5769] FAT-fs (loop4): error, clusters badly computed (4 != 5)
[   80.747197][ T5769] FAT-fs (loop4): error, clusters badly computed (5 != 6)
[   80.748389][ T5769] FAT-fs (loop4): error, clusters badly computed (6 != 7)
[   80.749875][ T5769] FAT-fs (loop4): error, clusters badly computed (7 != 8)
[   80.751129][ T5769] FAT-fs (loop4): error, clusters badly computed (8 != 9)
[   80.752342][ T5769] FAT-fs (loop4): error, clusters badly computed (9 != 10)
[   80.753666][ T5769] FAT-fs (loop4): error, clusters badly computed (10 != 11)
[   80.754937][ T5769] FAT-fs (loop4): error, clusters badly computed (11 != 12)
[   80.756352][ T5769] FAT-fs (loop4): error, clusters badly computed (12 != 13)
[   80.757603][ T5769] FAT-fs (loop4): error, clusters badly computed (13 != 14)
[   80.758950][ T5769] FAT-fs (loop4): error, clusters badly computed (14 != 15)
[   80.760194][ T5769] FAT-fs (loop4): error, clusters badly computed (15 != 16)
[   80.761428][ T5769] FAT-fs (loop4): error, clusters badly computed (16 != 17)
[   80.763678][ T5766] loop0: detected capacity change from 0 to 32768
[   80.764106][ T5769] FAT-fs (loop4): error, clusters badly computed (17 != 18)
[   80.766089][ T5769] FAT-fs (loop4): error, clusters badly computed (18 != 19)
[   80.767500][ T5769] FAT-fs (loop4): error, clusters badly computed (19 != 20)
[   80.768788][ T5769] FAT-fs (loop4): error, clusters badly computed (20 != 21)
[   80.770074][ T5769] FAT-fs (loop4): error, clusters badly computed (21 != 22)
[   80.771309][ T5769] FAT-fs (loop4): error, clusters badly computed (22 != 23)
[   80.771807][ T5766] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.427 (5766)
[   80.779472][ T5769] FAT-fs (loop4): error, clusters badly computed (23 != 24)
[   80.780888][ T5769] FAT-fs (loop4): error, clusters badly computed (24 != 25)
[   80.782143][ T5769] FAT-fs (loop4): error, clusters badly computed (25 != 26)
[   80.783476][ T5766] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   80.785313][ T5769] FAT-fs (loop4): error, clusters badly computed (26 != 27)
[   80.785639][ T5766] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[   80.786703][ T5769] FAT-fs (loop4): error, clusters badly computed (27 != 28)
[   80.788349][ T5766] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   80.789379][ T5769] FAT-fs (loop4): error, clusters badly computed (28 != 29)
[   80.791365][ T5766] BTRFS info (device loop0): use zstd compression, level 3
[   80.792022][ T5769] FAT-fs (loop4): error, clusters badly computed (29 != 30)
[   80.793537][ T5766] BTRFS info (device loop0): using free space tree
[   80.796114][ T5769] FAT-fs (loop4): error, clusters badly computed (30 != 31)
[   80.797401][ T5769] FAT-fs (loop4): error, clusters badly computed (31 != 32)
[   80.838931][ T5766] BTRFS info (device loop0): enabling ssd optimizations
[   80.916906][ T5794] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   81.165619][ T4320] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   81.267778][ T5811] loop2: detected capacity change from 0 to 4096
[   81.284092][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   81.286129][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   81.287840][ T5813] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.438'.
[   81.293713][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   81.301530][ T5811] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   81.335254][ T4322] EXT4-fs (loop2): unmounting filesystem.
[   81.558454][ T5841] netlink: 16 bytes leftover after parsing attributes in process `syz.4.442'.
[   82.432123][ T5862] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   82.454724][ T5860] loop2: detected capacity change from 0 to 4096
[   82.504434][ T5860] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   82.542603][ T4322] EXT4-fs (loop2): unmounting filesystem.
[   83.082847][ T5881] loop3: detected capacity change from 0 to 32768
[   83.127895][ T5885] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   83.130004][ T5885] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   83.135723][ T5881] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   83.166795][ T5885] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   83.175190][ T5885] device bridge_slave_0 left promiscuous mode
[   83.176244][ T5885] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.218345][ T5885] device bridge_slave_1 left promiscuous mode
[   83.219672][ T5885] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.259255][ T5885] bond0: (slave bond_slave_0): Releasing backup interface
[   83.349611][ T5885] bond0: (slave bond_slave_1): Releasing backup interface
[   83.409536][ T5885] team0: Port device team_slave_0 removed
[   83.448228][ T5885] team0: Port device team_slave_1 removed
[   83.452295][ T4331] ocfs2: Unmounting device (7,3) on (node local)
[   83.474070][ T5885] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.481798][ T5885] batman_adv: batadv0: Removing interface: batadv_slave_0
[   83.498155][ T5885] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.503707][ T5885] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.121052][ T5916] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   84.501490][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   84.519902][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   84.521079][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   84.557109][ T5943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   84.558619][ T5943] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   84.578996][ T5943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   84.602155][ T5943] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   84.731038][ T5954] rdma_rxe: rxe_register_device failed with error -23
[   84.734822][ T5954] rdma_rxe: failed to add veth0_vlan
[   86.042806][ T5981] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   86.045181][ T5981] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   86.048450][ T5981] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   86.447208][ T5987] rdma_rxe: rxe_register_device failed with error -23
[   86.448565][ T5987] rdma_rxe: failed to add veth0_vlan
[   86.812041][ T5995] loop2: detected capacity change from 0 to 1024
[   86.821448][ T5995] EXT4-fs: Ignoring removed nobh option
[   86.823022][ T5995] EXT4-fs: Ignoring removed bh option
[   86.852247][ T5995] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   86.914755][ T5995] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   87.250859][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.491'.
[   87.489476][ T6013] loop4: detected capacity change from 0 to 128
[   87.493137][ T6015] netlink: 40 bytes leftover after parsing attributes in process `syz.1.498'.
[   87.506206][ T6013] EXT4-fs (loop4): Test dummy encryption mode enabled
[   87.521909][ T5995] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.491: Allocating blocks 497-513 which overlap fs metadata
[   87.569887][ T6020] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.498'.
[   87.571909][ T5995] EXT4-fs (loop2): pa 00000000526e6ad7: logic 128, phys. 385, len 8
[   87.573255][ T6013] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   87.574050][ T6013] EXT4-fs (loop4): unmounting filesystem.
[   87.575048][ T5995] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1
[   87.605510][ T6013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.607047][ T6013] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.010438][ T5995] EXT4-fs warning (device loop2): ext4_resize_begin:74: won't resize using backup superblock at 1
[   88.039206][ T6015] netlink: 40 bytes leftover after parsing attributes in process `syz.1.498'.
[   88.055750][ T4322] EXT4-fs (loop2): unmounting filesystem.
[   88.128072][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   88.136793][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   88.141146][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   88.188817][ T6015] netlink: 40 bytes leftover after parsing attributes in process `syz.1.498'.
[   88.286489][ T6033] rdma_rxe: already configured on veth0_vlan
[   88.969381][ T6038] loop1: detected capacity change from 0 to 32768
[   89.001600][ T6038] JBD2: Ignoring recovery information on journal
[   89.097272][ T6038] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   89.190701][ T4321] ocfs2: Unmounting device (7,1) on (node local)
[   89.231914][ T6057] netlink: 40 bytes leftover after parsing attributes in process `syz.2.511'.
[   89.239202][ T6059] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   89.241243][ T6059] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   89.276790][ T6059] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   89.278799][ T6059] device bridge_slave_0 left promiscuous mode
[   89.279803][ T6059] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.284462][ T6062] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.511'.
[   89.330670][ T6057] netlink: 40 bytes leftover after parsing attributes in process `syz.2.511'.
[   89.354919][ T6059] device bridge_slave_1 left promiscuous mode
[   89.360137][ T6059] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.397620][ T6057] netlink: 40 bytes leftover after parsing attributes in process `syz.2.511'.
[   89.694861][ T6059] bond0: (slave bond_slave_0): Releasing backup interface
[   89.737008][ T6059] bond0: (slave bond_slave_1): Releasing backup interface
[   89.799719][ T6059] team0: Port device team_slave_0 removed
[   89.820901][ T6059] team0: Port device team_slave_1 removed
[   89.824428][ T6059] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.827903][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_0
[   89.847295][ T6079] rdma_rxe: rxe_register_device failed with error -23
[   89.848612][ T6079] rdma_rxe: failed to add veth0_vlan
[   89.852033][ T6059] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.860122][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.867620][ T6059] infiniband syz0: set active
[   89.919191][ T6081] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.931066][ T6081] device syzkaller0 entered promiscuous mode
[   90.474787][ T6095] syz.3.521 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   90.479839][ T6081] tipc: Resetting bearer <eth:syzkaller0>
[   90.508043][ T6080] tipc: Resetting bearer <eth:syzkaller0>
[   90.617541][ T6080] tipc: Disabling bearer <eth:syzkaller0>
[   90.772799][ T4374] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   90.887794][ T6103] netlink: 40 bytes leftover after parsing attributes in process `syz.1.525'.
[   90.952453][ T4374] usb 1-1: Using ep0 maxpacket: 32
[   90.954868][ T4374] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[   90.956273][ T4374] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[   90.958069][ T4374] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[   90.959883][ T4374] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[   90.970250][ T4374] usb 1-1: config 0 interface 0 has no altsetting 0
[   90.977355][ T4374] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[   90.982083][ T4374] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[   90.988949][ T4374] usb 1-1: Product: syz
[   90.990885][ T4374] usb 1-1: Manufacturer: syz
[   90.998347][ T4374] usb 1-1: SerialNumber: syz
[   91.013898][ T4374] usb 1-1: config 0 descriptor??
[   91.026967][ T4374] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[   91.048125][ T4374] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[   91.502695][ T6115] rdma_rxe: already configured on veth0_vlan
[   91.560839][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   91.567828][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   91.571346][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   91.580998][ T6117] infiniband syz0: set active
[   91.780247][ T4600] usb 1-1: USB disconnect, device number 7
[   92.291137][ T4600] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[   92.346759][ T6136] wlan0 speed is unknown, defaulting to 1000
[   92.557844][ T6135] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   92.729610][ T6144] __nla_validate_parse: 3 callbacks suppressed
[   92.729620][ T6144] netlink: 40 bytes leftover after parsing attributes in process `syz.0.536'.
[   93.052015][ T6147] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.536'.
[   93.075793][ T6153] rdma_rxe: rxe_register_device failed with error -23
[   93.077113][ T6153] rdma_rxe: failed to add veth0_vlan
[   93.086794][ T6144] netlink: 40 bytes leftover after parsing attributes in process `syz.0.536'.
[   93.140064][ T6161] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   93.143410][ T6161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   93.144892][ T6161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   93.183009][ T6164] netlink: 'syz.2.544': attribute type 4 has an invalid length.
[   93.188562][ T6144] netlink: 40 bytes leftover after parsing attributes in process `syz.0.536'.
[   93.454127][ T6172] loop0: detected capacity change from 0 to 32768
[   93.581243][ T6172] XFS (loop0): Mounting V5 Filesystem
[   93.631922][ T6193] rdma_rxe: already configured on veth0_vlan
[   93.653867][ T6172] XFS (loop0): Ending clean mount
[   93.670338][ T6172] XFS (loop0): Quotacheck needed: Please wait.
[   93.713419][ T6172] XFS (loop0): Quotacheck: Done.
[   93.852097][ T6204] netlink: 40 bytes leftover after parsing attributes in process `syz.3.557'.
[   93.903609][ T6206] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.557'.
[   93.921241][ T6204] netlink: 40 bytes leftover after parsing attributes in process `syz.3.557'.
[   93.926875][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   93.929128][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   93.930379][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   93.939550][ T6208] infiniband syz0: set active
[   94.050404][ T4320] XFS (loop0): Unmounting Filesystem
[   94.068296][ T6204] netlink: 40 bytes leftover after parsing attributes in process `syz.3.557'.
[   94.570550][ T6228] rdma_rxe: rxe_register_device failed with error -23
[   94.571783][ T6228] rdma_rxe: failed to add veth0_vlan
[   94.636753][ T6237] loop0: detected capacity change from 0 to 1024
[   94.680555][ T6237] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   94.686781][ T6244] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.571'.
[   94.725134][ T6246] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   94.727295][ T6246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   94.728637][ T6246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   96.056246][ T6264] rdma_rxe: rxe_register_device failed with error -23
[   96.057467][ T6264] rdma_rxe: failed to add veth0_vlan
[   96.196597][ T4320] EXT4-fs (loop0): unmounting filesystem.
[   96.767769][ T6284] loop0: detected capacity change from 0 to 1024
[   96.786878][ T6284] hfsplus: creator requires a 4 character value
[   96.789208][ T6284] hfsplus: unable to parse mount options
[   96.967795][ T6288] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.586'.
[   97.035518][ T6290] loop1: detected capacity change from 0 to 256
[   97.058072][ T6290] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   97.107544][ T6290] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[   97.111513][ T6290] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[   98.017313][ T6298] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   98.023457][ T6298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   98.024801][ T6298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   98.055762][ T6299] exFAT-fs (loop1): hint_cluster is invalid (17)
[   98.192126][ T6304] rdma_rxe: rxe_register_device failed with error -23
[   98.200261][ T6304] rdma_rxe: failed to add veth0_vlan
[   98.280450][ T6306] loop2: detected capacity change from 0 to 128
[   98.285476][ T6306] EXT4-fs (loop2): Test dummy encryption mode enabled
[   98.532526][ T6306] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   98.540812][ T6306] EXT4-fs (loop2): unmounting filesystem.
[   99.368117][ T6305] sched: RT throttling activated
[   99.424106][ T4560] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   99.429668][ T6305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.431218][ T6305] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.492644][ T6331] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  100.494831][ T6331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  100.496124][ T6331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  100.584049][ T6284] Set syz1 is full, maxelem 65536 reached
[  100.842860][ T6353] Bluetooth: MGMT ver 1.22
[  100.848500][ T6353] trusted_key: encrypted_key: insufficient parameters specified
[  102.440732][ T6372] loop0: detected capacity change from 0 to 1024
[  102.456113][ T6370] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  102.457388][ T6374] loop2: detected capacity change from 0 to 4096
[  102.458472][ T6370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  102.468850][ T6370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  102.507941][ T6374] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  102.530829][ T6374] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #15: comm syz.2.614: corrupted inode contents
[  102.557293][ T6374] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #15: comm syz.2.614: mark_inode_dirty error
[  102.575097][ T6374] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #15: comm syz.2.614: corrupted inode contents
[  102.582092][ T6374] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.614: mark_inode_dirty error
[  102.611841][ T6374] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #15: comm syz.2.614: corrupted inode contents
[  102.618277][ T6374] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.614: mark_inode_dirty error
[  102.629177][ T6374] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #15: comm syz.2.614: corrupted inode contents
[  102.646367][ T6384] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.648156][ T6384] device syzkaller0 entered promiscuous mode
[  102.652947][ T6374] EXT4-fs error (device loop2): ext4_truncate:4312: inode #15: comm syz.2.614: mark_inode_dirty error
[  102.664292][ T6374] EXT4-fs error (device loop2): ext4_evict_inode:290: comm syz.2.614: couldn't truncate inode 15 (err -117)
[  102.689704][ T6392] netlink: 80 bytes leftover after parsing attributes in process `syz.1.623'.
[  102.723584][ T6392] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.623'.
[  102.726170][ T4322] EXT4-fs (loop2): unmounting filesystem.
[  102.801211][ T6395] loop4: detected capacity change from 0 to 128
[  103.392179][ T6395] EXT4-fs (loop4): Test dummy encryption mode enabled
[  103.763907][ T4405] tipc: Node number set to 61434723
[  103.866811][ T6395] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  103.869953][ T6395] EXT4-fs (loop4): unmounting filesystem.
[  103.894556][ T6398] tipc: Resetting bearer <eth:syzkaller0>
[  103.916823][ T6394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  103.918482][ T6394] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  103.996631][ T4560] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  104.006973][ T6382] tipc: Resetting bearer <eth:syzkaller0>
[  104.213066][ T6382] tipc: Disabling bearer <eth:syzkaller0>
[  104.364513][ T6418] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  104.376839][ T6418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  104.378820][ T6418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  104.786257][ T6431] netlink: 80 bytes leftover after parsing attributes in process `syz.3.635'.
[  104.814456][ T6431] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.635'.
[  105.978726][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  105.981459][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  105.994532][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  106.481622][ T6463] netlink: 64 bytes leftover after parsing attributes in process `syz.0.646'.
[  106.534316][ T6467] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.646'.
[  106.633845][ T6466] loop2: detected capacity change from 0 to 32768
[  106.852547][ T5261] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  107.013674][ T6485] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  107.015915][ T6485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  107.032706][ T5261] usb 1-1: Using ep0 maxpacket: 32
[  107.034908][ T5261] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  107.036063][ T5261] usb 1-1: config 0 has no interface number 0
[  107.039659][ T5261] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  107.041142][ T5261] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.042356][ T5261] usb 1-1: Product: syz
[  107.044932][ T5261] usb 1-1: Manufacturer: syz
[  107.045662][ T5261] usb 1-1: SerialNumber: syz
[  107.050789][ T5261] usb 1-1: config 0 descriptor??
[  107.054580][ T6485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  107.059833][ T5261] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  107.061222][ T5261] usb 1-1: selecting invalid altsetting 1
[  107.074398][ T5261] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  107.094200][ T5261] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  107.095901][ T5261] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  107.097216][ T5261] usb 1-1: media controller created
[  107.112228][ T5261] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  107.135130][ T6479] loop3: detected capacity change from 0 to 32768
[  107.206283][ T6479] XFS (loop3): Mounting V5 Filesystem
[  107.237138][ T6479] XFS (loop3): Ending clean mount
[  107.822100][ T6496] loop2: detected capacity change from 0 to 32768
[  107.829316][ T6496] XFS: noikeep mount option is deprecated.
[  107.868537][ T4331] XFS (loop3): Unmounting Filesystem
[  107.915587][ T6505] wlan0 speed is unknown, defaulting to 1000
[  107.934670][ T6496] XFS (loop2): Mounting V5 Filesystem
[  107.954846][ T6496] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  107.964129][ T6496] XFS (loop2): Starting recovery (logdev: internal)
[  107.970685][ T6496] XFS (loop2): Ending recovery (logdev: internal)
[  107.976531][ T6496] XFS (loop2): Metadata corruption detected at xfs_btree_lookup_get_block+0x3ac/0x590, xfs_finobt block 0x20
[  107.978796][ T6496] XFS (loop2): Unmount and run xfs_repair
[  107.979971][ T6496] XFS (loop2): Failed to initialize disk quotas.
[  108.030740][ T4322] XFS (loop2): Unmounting Filesystem
[  108.534765][ T5261] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  108.536427][ T5261] zl10353_read_register: readreg error (reg=127, ret==-110)
[  108.576493][ T6469] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32
[  108.580889][ T5261] usb 1-1: USB disconnect, device number 8
[  108.660768][ T6527] loop4: detected capacity change from 0 to 1024
[  109.487125][ T6540] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  109.501964][ T6540] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  109.506036][ T6540] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  109.510463][ T6540] infiniband syz0: set active
[  109.527141][ T6542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.534041][ T6542] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.690976][ T6548] loop0: detected capacity change from 0 to 1024
[  109.708455][ T6548] hfsplus: creator requires a 4 character value
[  109.714988][ T6548] hfsplus: unable to parse mount options
[  109.751293][ T6551] loop1: detected capacity change from 0 to 4096
[  109.805753][ T6551] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  109.880260][ T4321] EXT4-fs (loop1): unmounting filesystem.
[  110.000526][ T6568] wlan0 speed is unknown, defaulting to 1000
[  110.417652][ T6578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.420481][ T6578] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.478279][ T6580] netlink: 60 bytes leftover after parsing attributes in process `syz.2.680'.
[  110.508681][ T6582] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  110.511028][ T6582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  110.512302][ T6582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  110.633740][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.683'.
[  110.670514][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.683'.
[  110.672174][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.683'.
[  110.809675][ T6594] loop0: detected capacity change from 0 to 4096
[  110.835071][ T6594] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  110.858840][ T4320] EXT4-fs (loop0): unmounting filesystem.
[  110.891924][ T6605] loop0: detected capacity change from 0 to 256
[  110.952517][ T6610] loop2: detected capacity change from 0 to 128
[  111.016773][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  111.018871][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  111.020086][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  111.032067][ T6610] EXT4-fs (loop2): Test dummy encryption mode enabled
[  111.038195][ T6605] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  111.040457][ T6605] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  111.067818][ T6610] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  111.070144][ T6610] EXT4-fs (loop2): unmounting filesystem.
[  111.505844][ T6610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.508134][ T6610] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.660190][ T6624] loop4: detected capacity change from 0 to 256
[  111.784362][ T6624] loop4: detected capacity change from 0 to 512
[  111.865099][ T6624] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  111.896200][ T6624] EXT4-fs (loop4): 1 truncate cleaned up
[  111.897291][ T6624] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  112.330127][ T4319] EXT4-fs (loop4): unmounting filesystem.
[  112.369542][ T6618] loop1: detected capacity change from 0 to 32768
[  112.373006][ T6618] XFS: attr2 mount option is deprecated.
[  112.375052][ T6618] XFS: ikeep mount option is deprecated.
[  112.398891][ T6618] XFS (loop1): Mounting V5 Filesystem
[  112.441975][ T6618] XFS (loop1): Ending clean mount
[  112.448046][ T6618] XFS (loop1): Quotacheck needed: Please wait.
[  112.464525][ T6618] XFS (loop1): Quotacheck: Done.
[  112.504773][ T4321] XFS (loop1): Unmounting Filesystem
[  112.694212][ T6643] loop3: detected capacity change from 0 to 4096
[  112.707995][ T6643] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  112.727167][ T4331] EXT4-fs (loop3): unmounting filesystem.
[  113.028204][   T27] audit: type=1326 audit(113.010:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6651 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac55c068 code=0x7ffc0000
[  113.032391][   T27] audit: type=1326 audit(113.010:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6651 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=92 compat=0 ip=0xffffac55c068 code=0x7ffc0000
[  113.036800][   T27] audit: type=1326 audit(113.020:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6651 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac55c068 code=0x7ffc0000
[  113.041851][   T27] audit: type=1326 audit(113.020:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6651 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=274 compat=0 ip=0xffffac55c068 code=0x7ffc0000
[  113.046572][   T27] audit: type=1326 audit(113.020:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6651 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac55c068 code=0x7ffc0000
[  113.052301][   T27] audit: type=1326 audit(113.020:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6651 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffac55c068 code=0x7ffc0000
[  113.057548][   T27] audit: type=1326 audit(113.020:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6651 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac55c068 code=0x7ffc0000
[  113.064107][   T27] audit: type=1326 audit(113.020:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6651 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffac55c068 code=0x7ffc0000
[  113.067863][   T27] audit: type=1326 audit(113.020:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6651 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac55c068 code=0x7ffc0000
[  113.071397][   T27] audit: type=1326 audit(113.020:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6651 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffac55e60c code=0x7ffc0000
[  113.112800][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  113.115469][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  113.116830][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  113.808308][ T6676] loop3: detected capacity change from 0 to 4096
[  113.819361][ T6676] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  113.857069][ T4331] EXT4-fs (loop3): unmounting filesystem.
[  114.000255][ T6689] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  114.068250][ T6692] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.070639][ T6694] loop3: detected capacity change from 0 to 8192
[  114.075988][ T6691] tipc: Resetting bearer <eth:syzkaller0>
[  114.181526][ T6705] loop0: detected capacity change from 0 to 4096
[  114.215863][ T6705] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  114.230851][ T6709] loop4: detected capacity change from 0 to 8
[  114.237800][ T4320] EXT4-fs (loop0): unmounting filesystem.
[  114.277472][ T4560] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  114.323866][ T6711] loop0: detected capacity change from 0 to 4096
[  114.328296][ T6713] loop4: detected capacity change from 0 to 1024
[  114.339853][ T6713] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  114.345173][ T6711] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  114.405621][ T4320] EXT4-fs (loop0): unmounting filesystem.
[  115.082558][ T4429] tipc: Node number set to 3368297513
[  115.424056][    C0] vxcan1: j1939_tp_rxtimer: 0x0000000031ab18a9: rx timeout, send abort
[  115.426768][    C0] vxcan1: j1939_xtp_rx_abort_one: 0x0000000031ab18a9: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  115.992091][ T6738] loop0: detected capacity change from 0 to 128
[  115.998785][ T6738] EXT4-fs (loop0): Test dummy encryption mode enabled
[  116.029833][ T6738] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  116.036642][ T6738] EXT4-fs (loop0): unmounting filesystem.
[  116.947810][ T6750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.949376][ T6750] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.052450][ T5261] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  117.202446][ T5261] usb 1-1: device descriptor read/64, error -71
[  117.482517][ T5261] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  117.877511][ T5261] usb 1-1: device descriptor read/64, error -71
[  117.993178][ T5261] usb usb1-port1: attempt power cycle
[  118.412556][ T5261] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  118.442941][ T5261] usb 1-1: device descriptor read/8, error -71
[  118.576597][ T6759] loop0: detected capacity change from 0 to 4096
[  118.585129][ T6759] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  118.599274][ T4320] EXT4-fs (loop0): unmounting filesystem.
[  125.932976][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  125.934088][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[  127.406644][ T6691] tipc: Disabling bearer <eth:syzkaller0>
[  127.465074][ T6773] rdma_rxe: rxe_register_device failed with error -23
[  127.466291][ T6773] rdma_rxe: failed to add veth0_vlan
[  127.596789][ T6785] loop1: detected capacity change from 0 to 64
[  127.709569][ T6790] loop0: detected capacity change from 0 to 4096
[  127.746100][ T4319] EXT4-fs (loop4): unmounting filesystem.
[  127.746100][ T6790] ntfs3: loop0: ntfs_set_state r=3 failed, -22.
[  127.780170][ T6789] ntfs3: loop0: ino=1e, "file1" attr_set_size
[  127.796246][ T6094] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22.
[  127.801339][ T4320] ntfs3: loop0: ntfs_set_state r=3 failed, -22.
[  127.803746][ T4320] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  127.804974][ T4320] ntfs3: loop0: ntfs_set_state r=3 failed, -22.
[  127.806792][ T6094] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22.
[  127.812190][ T4320] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22.
[  127.858403][ T6797] loop3: detected capacity change from 0 to 4096
[  127.866754][ T6797] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  127.936444][ T6804] loop4: detected capacity change from 0 to 128
[  127.967509][ T6804] EXT4-fs (loop4): Test dummy encryption mode enabled
[  128.127149][ T6804] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  128.145848][ T6804] EXT4-fs (loop4): unmounting filesystem.
[  128.229519][ T6804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.231216][ T6804] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.239882][ T6797] ntfs3: loop3: ino=1e, "file1" attr_set_size
[  129.290469][ T6800] loop0: detected capacity change from 0 to 32768
[  129.592513][ T6800] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  129.739518][ T6802] loop1: detected capacity change from 0 to 32768
[  129.741701][ T6802] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.755 (6802)
[  129.753298][ T6802] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  129.980361][ T6802] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  129.988272][ T6802] BTRFS info (device loop1): force zlib compression, level 3
[  129.989796][ T6802] BTRFS info (device loop1): force clearing of disk cache
[  129.991100][ T6802] BTRFS info (device loop1): turning off barriers
[  129.997683][ T6802] BTRFS info (device loop1): doing ref verification
[  129.999979][ T6802] BTRFS info (device loop1): enabling disk space caching
[  130.001174][ T6802] BTRFS info (device loop1): disk space caching is enabled
[  130.055232][ T4320] ocfs2: Unmounting device (7,0) on (node local)
[  130.056881][ T6826] loop3: detected capacity change from 0 to 256
[  130.071682][ T6826] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  130.078288][ T6826] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  130.244781][ T6802] BTRFS info (device loop1): enabling ssd optimizations
[  130.503502][ T6802] BTRFS info (device loop1): rebuilding free space tree
[  130.514175][ T6802] BTRFS info (device loop1): disabling free space tree
[  130.515423][ T6802] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  130.517424][ T6802] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  130.557737][ T6830] loop2: detected capacity change from 0 to 32768
[  130.568822][ T6830] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.762 (6830)
[  130.569901][ T6802] BTRFS error (device loop1): balance: mixed groups data and metadata options must be the same
[  130.578076][ T6830] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  130.579799][ T6830] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm
[  130.586582][ T6830] BTRFS info (device loop2): using free space tree
[  130.598327][ T4321] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  130.866919][ T6830] BTRFS info (device loop2): enabling ssd optimizations
[  130.922322][ T4322] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  131.266552][ T6900] loop1: detected capacity change from 0 to 32768
[  131.275899][ T6900] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.784 (6900)
[  131.287610][ T6900] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  131.291695][ T6900] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  131.296872][ T6900] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  131.298624][ T6900] BTRFS info (device loop1): use zstd compression, level 3
[  131.304094][ T6900] BTRFS info (device loop1): using free space tree
[  131.382357][ T6900] BTRFS info (device loop1): enabling ssd optimizations
[  131.605988][ T6922] loop0: detected capacity change from 0 to 32768
[  131.607702][ T6922] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.775 (6922)
[  131.618797][ T6922] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  131.620482][ T6922] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  131.621923][ T6922] BTRFS info (device loop0): force zlib compression, level 3
[  131.623508][ T6922] BTRFS info (device loop0): force clearing of disk cache
[  131.624662][ T6922] BTRFS info (device loop0): turning off barriers
[  131.625733][ T6922] BTRFS info (device loop0): doing ref verification
[  131.626800][ T6922] BTRFS info (device loop0): enabling disk space caching
[  131.627959][ T6922] BTRFS info (device loop0): disk space caching is enabled
[  131.638846][ T6922] BTRFS info (device loop0): enabling ssd optimizations
[  131.641819][ T6922] BTRFS info (device loop0): rebuilding free space tree
[  131.648818][ T6922] BTRFS info (device loop0): disabling free space tree
[  131.650225][ T6922] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  131.651997][ T6922] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  131.672121][ T6922] BTRFS error (device loop0): balance: mixed groups data and metadata options must be the same
[  131.697863][ T4320] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  132.059294][ T4321] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  132.436530][ T6953] netlink: 32 bytes leftover after parsing attributes in process `syz.0.781'.
[  132.771208][ T6971] loop0: detected capacity change from 0 to 1024
[  132.772923][ T6971] EXT4-fs: Ignoring removed nobh option
[  132.773897][ T6971] EXT4-fs: Ignoring removed bh option
[  132.775175][ T6971] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  132.799392][ T6971] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  132.862107][ T6969] loop2: detected capacity change from 0 to 32768
[  132.870193][ T6969] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.788 (6969)
[  132.877918][ T6969] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  132.881242][ T6969] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  132.884399][ T6969] BTRFS info (device loop2): force zlib compression, level 3
[  132.886880][ T6969] BTRFS info (device loop2): force clearing of disk cache
[  132.889432][ T6969] BTRFS info (device loop2): turning off barriers
[  132.891795][ T6969] BTRFS info (device loop2): doing ref verification
[  132.896607][ T6969] BTRFS info (device loop2): enabling disk space caching
[  132.899215][ T6969] BTRFS info (device loop2): disk space caching is enabled
[  132.971345][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.798'.
[  133.008895][ T6985] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3836: comm syz.0.798: Allocating blocks 497-513 which overlap fs metadata
[  133.017383][ T6985] EXT4-fs (loop0): pa 000000007c2ef200: logic 128, phys. 385, len 8
[  133.018761][ T6985] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1
[  133.062616][ T6969] BTRFS info (device loop2): enabling ssd optimizations
[  133.064638][ T6969] BTRFS info (device loop2): rebuilding free space tree
[  133.069619][ T6969] BTRFS info (device loop2): disabling free space tree
[  133.087580][ T6969] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  133.089215][ T6969] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  133.104781][ T6985] EXT4-fs warning (device loop0): ext4_resize_begin:74: won't resize using backup superblock at 1
[  133.187996][ T6969] BTRFS error (device loop2): balance: mixed groups data and metadata options must be the same
[  133.229542][ T4322] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  133.786134][ T4320] EXT4-fs (loop0): unmounting filesystem.
[  144.028699][ T7057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  144.030201][ T7057] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  144.426510][ T7055] loop0: detected capacity change from 0 to 32768
[  144.452036][ T7055] XFS (loop0): Mounting V5 Filesystem
[  144.474415][ T7055] XFS (loop0): Ending clean mount
[  144.486580][ T7055] XFS (loop0): Unmounting Filesystem
[  144.537255][ T7080] loop1: detected capacity change from 0 to 1024
[  144.554854][ T7080] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  145.154061][ T7090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  145.161375][ T7092] loop4: detected capacity change from 0 to 128
[  145.165596][ T7090] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  145.187466][ T7085] loop2: detected capacity change from 0 to 32768
[  145.198873][ T7085] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.812 (7085)
[  145.270104][ T7085] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  145.271870][ T7085] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm
[  145.273362][ T7085] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  145.274781][ T7085] BTRFS info (device loop2): use lzo compression, level 0
[  145.275845][ T7085] BTRFS info (device loop2): force clearing of disk cache
[  145.276944][ T7085] BTRFS info (device loop2): using free space tree
[  146.117097][ T4321] EXT4-fs (loop1): unmounting filesystem.
[  146.270776][ T7112] device syzkaller0 entered promiscuous mode
[  146.323762][ T7085] BTRFS info (device loop2): enabling ssd optimizations
[  146.325249][ T7085] BTRFS info (device loop2): rebuilding free space tree
[  146.815182][ T4322] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  147.378572][ T7148] loop2: detected capacity change from 0 to 4096
[  147.395343][ T7148] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  147.413378][ T4322] EXT4-fs (loop2): unmounting filesystem.
[  147.892459][ T4437] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  147.936776][ T7157] loop2: detected capacity change from 0 to 32768
[  148.202706][ T4437] usb 1-1: Using ep0 maxpacket: 8
[  148.268451][ T4437] usb 1-1: unable to get BOS descriptor or descriptor too short
[  148.270763][ T4437] usb 1-1: config 7 has an invalid interface number: 58 but max is 0
[  148.272082][ T4437] usb 1-1: config 7 has no interface number 0
[  148.273198][ T4437] usb 1-1: config 7 interface 58 altsetting 3 endpoint 0xE has invalid wMaxPacketSize 0
[  148.274703][ T4437] usb 1-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  148.285376][ T4437] usb 1-1: config 7 interface 58 has no altsetting 0
[  148.292049][ T4437] usb 1-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f
[  148.295863][ T4437] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.298349][ T4437] usb 1-1: Product: syz
[  148.299041][ T4437] usb 1-1: Manufacturer: syz
[  148.300883][ T4437] usb 1-1: SerialNumber: syz
[  148.334947][ T7165] netlink: 'syz.4.830': attribute type 7 has an invalid length.
[  148.339510][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.830'.
[  148.676256][ T4437] usb 1-1: USB disconnect, device number 13
[  148.741002][ T7179] device syzkaller0 entered promiscuous mode
[  150.613246][ T7197] loop4: detected capacity change from 0 to 128
[  150.804556][ T7197] EXT4-fs (loop4): Test dummy encryption mode enabled
[  151.005630][ T7197] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  151.012129][ T7197] EXT4-fs (loop4): unmounting filesystem.
[  151.585689][ T7194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  151.586933][ T7173] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  151.588928][ T7194] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  151.652294][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.842'.
[  151.691294][ T7208] loop3: detected capacity change from 0 to 1024
[  151.793628][ T7202] loop1: detected capacity change from 0 to 32768
[  152.130278][ T7219] loop2: detected capacity change from 0 to 1024
[  152.147671][ T7219] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  152.887882][ T7234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.889653][ T7234] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.901208][ T7238] device syzkaller0 entered promiscuous mode
[  153.000704][ T4322] EXT4-fs (loop2): unmounting filesystem.
[  153.445780][ T7258] loop3: detected capacity change from 0 to 1024
[  153.447715][ T7251] loop2: detected capacity change from 0 to 32768
[  153.454955][ T7251] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.854 (7251)
[  153.527654][ T7251] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  153.529907][ T7251] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm
[  153.531569][ T7251] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  153.533487][ T7251] BTRFS info (device loop2): use lzo compression, level 0
[  153.534869][ T7251] BTRFS info (device loop2): force clearing of disk cache
[  153.536222][ T7251] BTRFS info (device loop2): using free space tree
[  153.546752][ T7251] BTRFS info (device loop2): enabling ssd optimizations
[  153.548321][ T7251] BTRFS info (device loop2): rebuilding free space tree
[  153.572219][ T4322] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  154.028122][ T7204] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 10 /dev/loop2 scanned by udevd (7204)
[  154.034543][ T7288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  154.037318][ T7288] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  154.426799][ T7293] loop0: detected capacity change from 0 to 128
[  154.462052][ T7293] EXT4-fs (loop0): Test dummy encryption mode enabled
[  154.773305][ T7293] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  154.782102][ T7293] EXT4-fs (loop0): unmounting filesystem.
[  155.352644][ T4388] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  155.502598][ T4388] usb 1-1: device descriptor read/64, error -71
[  155.720269][ T7299] tipc: Started in network mode
[  155.721198][ T7299] tipc: Node identity 0a6bb6c47201, cluster identity 4711
[  155.722342][ T7299] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.745603][ T7299] device syzkaller0 entered promiscuous mode
[  155.752228][ T7306] netlink: 'syz.1.864': attribute type 4 has an invalid length.
[  155.775893][ T7309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.777364][ T7309] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  155.802481][ T4388] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  155.979179][ T4388] usb 1-1: device descriptor read/64, error -71
[  156.094547][ T4388] usb usb1-port1: attempt power cycle
[  156.153003][ T7319] loop1: detected capacity change from 0 to 1024
[  156.168792][ T7319] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  156.194142][ T7307] wlan0 speed is unknown, defaulting to 1000
[  156.225288][ T7323] tipc: Resetting bearer <eth:syzkaller0>
[  156.247622][ T7297] tipc: Resetting bearer <eth:syzkaller0>
[  157.202248][ T7313] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  157.563984][ T6887] tipc: Node number set to 2020259524
[  157.567212][ T7297] tipc: Disabling bearer <eth:syzkaller0>
[  157.619022][ T7337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  157.620599][ T7337] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  157.710160][ T4321] EXT4-fs (loop1): unmounting filesystem.
[  157.742989][ T7335] loop2: detected capacity change from 0 to 32768
[  157.813400][ T7333] loop0: detected capacity change from 0 to 32768
[  157.821648][ T7342] loop1: detected capacity change from 0 to 1024
[  157.825349][ T7333] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  157.923589][ T7173] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  158.228283][ T7351] netlink: 20 bytes leftover after parsing attributes in process `syz.0.874'.
[  158.232856][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'.
[  158.235647][ T7351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.874'.
[  159.187021][ T7368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.205397][ T7368] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.253960][ T7373] loop2: detected capacity change from 0 to 1024
[  159.281747][ T7373] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  161.324144][ T4332] Bluetooth: hci2: command 0x0406 tx timeout
[  161.325286][ T4332] Bluetooth: hci1: command 0x0406 tx timeout
[  161.325488][ T4329] Bluetooth: hci3: command 0x0406 tx timeout
[  161.410456][ T7376] loop3: detected capacity change from 0 to 32768
[  161.414838][ T7376] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  161.446222][ T7173] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  161.463282][ T7383] wlan0 speed is unknown, defaulting to 1000
[  161.466101][ T4322] EXT4-fs (loop2): unmounting filesystem.
[  161.536079][ T7372] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  161.598263][ T7396] loop3: detected capacity change from 0 to 1024
[  173.594407][ T7399] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  173.595891][ T7399] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  173.597279][ T7399] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  173.598709][ T7399] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  174.650596][ T7439] netlink: 108 bytes leftover after parsing attributes in process `syz.3.901'.
[  174.706770][ T7444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  174.718281][ T7444] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  174.789833][ T4329] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  174.792323][ T4329] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  174.802902][ T7446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.904'.
[  174.822307][ T4329] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  174.824486][ T4329] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  174.826029][ T4329] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  174.827312][ T4329] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  174.919595][ T7451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  174.924363][ T7451] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  175.068585][ T7447] wlan0 speed is unknown, defaulting to 1000
[  175.115291][ T7447] chnl_net:caif_netlink_parms(): no params data found
[  175.147863][ T7447] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.149198][ T7447] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.150881][ T7447] device bridge_slave_0 entered promiscuous mode
[  175.153127][ T7447] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.154289][ T7447] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.155931][ T7447] device bridge_slave_1 entered promiscuous mode
[  175.165835][ T7447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  175.168226][ T7447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  175.176678][ T7447] team0: Port device team_slave_0 added
[  175.179580][ T7447] team0: Port device team_slave_1 added
[  175.187436][ T7447] batman_adv: batadv0: Adding interface: batadv_slave_0
[  175.188548][ T7447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.192727][ T7447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  175.547346][ T7447] batman_adv: batadv0: Adding interface: batadv_slave_1
[  175.548815][ T7447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.553139][ T7447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  175.613666][ T7447] device hsr_slave_0 entered promiscuous mode
[  175.653614][ T7447] device hsr_slave_1 entered promiscuous mode
[  175.680026][ T7480] netlink: 108 bytes leftover after parsing attributes in process `syz.3.914'.
[  175.713117][ T7447] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  175.715344][ T7447] Cannot create hsr debugfs directory
[  176.425401][ T7489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  176.429435][ T7489] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  176.433302][ T7491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  176.434845][ T7491] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  176.544898][    T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  176.546793][    T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.553094][ T7493] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  176.554538][ T7493] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  176.555907][ T7493] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  176.557278][ T7493] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  176.593827][ T7447] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  176.708150][ T7504] netlink: 108 bytes leftover after parsing attributes in process `syz.3.924'.
[  176.753691][ T7447] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  176.863955][    T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  176.868030][    T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.877590][ T7447] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  176.936803][ T4334] Bluetooth: hci5: command 0x0409 tx timeout
[  177.357161][ T7447] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  177.463822][    T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  177.465592][    T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.897527][    T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  177.899256][    T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.935310][ T7535] netlink: 20 bytes leftover after parsing attributes in process `syz.3.930'.
[  177.940852][ T7447] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.942318][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.930'.
[  177.955717][ T7535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.930'.
[  177.995009][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  177.996673][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  178.015274][ T7447] 8021q: adding VLAN 0 to HW filter on device team0
[  178.036128][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  178.038508][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  178.040118][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.041294][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.115013][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  178.118878][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  178.122204][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  178.129286][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.130436][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.147114][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  178.209764][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  178.233957][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  178.240269][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  178.246751][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  178.251503][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  178.285708][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  178.295659][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  178.313777][ T7447] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  178.316514][ T7447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  178.350702][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  178.353722][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  178.355479][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  178.396762][ T6887] hid-generic 0005:15C2:5505.0001: unknown main item tag 0x0
[  178.398360][ T6887] hid-generic 0005:15C2:5505.0001: unknown main item tag 0x0
[  178.400816][ T6887] hid-generic 0005:15C2:5505.0001: unknown main item tag 0xe
[  178.435104][ T6887] hid-generic 0005:15C2:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  178.503314][    T9] tipc: Left network mode
[  178.858304][ T7564] loop4: detected capacity change from 0 to 128
[  178.867618][ T7564] EXT4-fs (loop4): Test dummy encryption mode enabled
[  179.052603][ T4334] Bluetooth: hci5: command 0x041b tx timeout
[  179.270721][ T7564] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  179.277404][ T7564] EXT4-fs (loop4): unmounting filesystem.
[  179.967984][ T7542] loop1: detected capacity change from 0 to 32768
[  179.969616][ T7542] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  180.040288][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  180.041556][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  180.043206][ T7574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  180.044668][ T7574] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  180.049194][ T7447] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.053377][ T7547] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  180.057180][ T7563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  180.058606][ T7563] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  180.424406][ T7425] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  180.556209][ T7589] netlink: 40 bytes leftover after parsing attributes in process `syz.1.940'.
[  180.585265][ T7589] netlink: 40 bytes leftover after parsing attributes in process `syz.1.940'.
[  180.607442][ T7598] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.940'.
[  180.642626][ T4915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  180.644629][ T4915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  180.651097][ T7589] netlink: 40 bytes leftover after parsing attributes in process `syz.1.940'.
[  180.657511][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  180.659215][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  180.660921][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  180.664884][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  180.667650][ T7447] device veth0_vlan entered promiscuous mode
[  180.671629][ T7447] device veth1_vlan entered promiscuous mode
[  180.681376][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  180.688474][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  180.691934][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  180.698150][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  180.749633][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  180.756633][ T7609] infiniband syz0: set active
[  180.762586][ T7447] device veth0_macvtap entered promiscuous mode
[  180.770678][ T7447] device veth1_macvtap entered promiscuous mode
[  180.780991][ T7447] batman_adv: batadv0: Interface activated: batadv_slave_0
[  180.782809][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  180.784504][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  180.786110][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  180.787770][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  180.792119][ T7447] batman_adv: batadv0: Interface activated: batadv_slave_1
[  180.797476][ T7447] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.799257][ T7447] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.800704][ T7447] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.802135][ T7447] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.916250][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  180.918235][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  181.152755][ T4329] Bluetooth: hci5: command 0x040f tx timeout
[  181.321693][ T7632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  181.323737][ T7632] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  181.336309][ T7634] netlink: 108 bytes leftover after parsing attributes in process `syz.1.948'.
[  181.378286][ T7641] netlink: 40 bytes leftover after parsing attributes in process `syz.1.950'.
[  181.399305][ T4915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.404776][ T4915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.412296][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  181.422171][ T4915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.423703][ T4915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.426271][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  181.429518][ T7646] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.950'.
[  181.445560][ T7641] netlink: 40 bytes leftover after parsing attributes in process `syz.1.950'.
[  181.533418][ T7641] netlink: 40 bytes leftover after parsing attributes in process `syz.1.950'.
[  182.031493][ T4334] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11
[  182.078268][ T7681] loop2: detected capacity change from 0 to 4096
[  182.408701][ T7681] ntfs3: Unknown parameter 'windows_names'
[  182.420684][ T7679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  182.422048][ T7679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  182.477788][ T7687] netlink: 108 bytes leftover after parsing attributes in process `syz.2.958'.
[  182.540385][ T7692] loop5: detected capacity change from 0 to 64
[  183.429295][ T4334] Bluetooth: hci5: command 0x0419 tx timeout
[  183.727992][ T7713] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  183.766657][ T7720] loop3: detected capacity change from 0 to 256
[  183.779903][ T7720] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  183.783136][ T7720] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  184.522810][ T7724] loop2: detected capacity change from 0 to 32768
[  184.546460][ T7714] wlan0 speed is unknown, defaulting to 1000
[  184.636507][ T7724] XFS (loop2): Mounting V5 Filesystem
[  184.700956][ T7724] XFS (loop2): Ending clean mount
[  184.743156][    T9] device hsr_slave_0 left promiscuous mode
[  184.829540][    T9] device hsr_slave_1 left promiscuous mode
[  185.217784][ T4334] block nbd1: Receive control failed (result -107)
[  185.230877][ T7771] block nbd1: shutting down sockets
[  185.252903][    T9] device veth1_macvtap left promiscuous mode
[  185.254772][    T9] device veth0_macvtap left promiscuous mode
[  185.256575][    T9] device veth1_vlan left promiscuous mode
[  185.257724][    T9] device veth0_vlan left promiscuous mode
[  187.463217][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  187.468757][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[  187.715049][ T7801] __nla_validate_parse: 4 callbacks suppressed
[  187.715061][ T7801] netlink: 88 bytes leftover after parsing attributes in process `syz.3.983'.
[  188.360032][ T7817] loop4: detected capacity change from 0 to 128
[  188.363534][ T7817] EXT4-fs (loop4): Test dummy encryption mode enabled
[  188.434458][ T7817] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  188.439512][ T7817] EXT4-fs (loop4): unmounting filesystem.
[  188.801762][ T7817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.803376][ T7817] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  190.099130][ T7833] netlink: 88 bytes leftover after parsing attributes in process `syz.3.994'.
[  190.170528][ T7839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  190.172206][ T7839] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.183806][    T9] bond0 (unregistering): Released all slaves
[  192.220513][ T7864] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1005'.
[  192.395990][ T7754] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  192.398049][ T7754] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  192.399251][ T7754] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  192.401033][ T7754] device bridge_slave_0 left promiscuous mode
[  192.402047][ T7754] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.454731][ T7754] device bridge_slave_1 left promiscuous mode
[  192.455786][ T7754] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.495329][ T7754] bond0: (slave bond_slave_0): Releasing backup interface
[  192.546702][ T7754] bond0: (slave bond_slave_1): Releasing backup interface
[  192.601277][ T7754] team0: Port device team_slave_0 removed
[  192.613402][ T7754] team0: Port device team_slave_1 removed
[  192.614921][ T7754] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.616321][ T7754] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.618265][ T7754] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.619645][ T7754] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.671801][ T4322] XFS (loop2): Unmounting Filesystem
[  192.702865][ T7857] device syzkaller1 entered promiscuous mode
[  192.704925][ T7870] netlink: 5820 bytes leftover after parsing attributes in process `syz.4.1007'.
[  192.710428][ T7873] netlink: 1010 bytes leftover after parsing attributes in process `syz.5.1008'.
[  192.711903][ T7873] bridge: RTM_NEWNEIGH with invalid state 0x1d25
[  192.843945][ T7883] loop5: detected capacity change from 0 to 128
[  192.860292][ T7883] EXT4-fs (loop5): Test dummy encryption mode enabled
[  193.221336][ T7883] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  193.224694][ T7883] EXT4-fs (loop5): unmounting filesystem.
[  194.171881][ T7881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.173621][ T7881] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.297090][ T7914] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1016'.
[  194.328852][ T7917] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1017'.
[  194.369713][ T7922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.371860][ T7922] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.405893][ T7925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  194.408365][ T7925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  194.591728][ T7941] device pim6reg1 entered promiscuous mode
[  194.635175][ T7945] loop1: detected capacity change from 0 to 256
[  194.648236][ T7945] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  194.653756][ T7945] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  195.260289][ T7972] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1027'.
[  195.321910][ T7975] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1029'.
[  196.295459][ T8008] loop3: detected capacity change from 0 to 32768
[  196.381065][ T8032] loop4: detected capacity change from 0 to 128
[  196.383586][ T8032] EXT4-fs (loop4): Test dummy encryption mode enabled
[  196.443982][ T8008] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  196.546843][ T8032] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  196.549571][ T8032] EXT4-fs (loop4): unmounting filesystem.
[  196.858287][ T8032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.859822][ T8032] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.028118][ T4331] ocfs2: Unmounting device (7,3) on (node local)
[  197.341473][ T8049] ÿÿÿÿÿÿ: renamed from vlan1
[  197.900547][ T8053] wlan0 speed is unknown, defaulting to 1000
[  197.981038][ T8068] wlan0 speed is unknown, defaulting to 1000
[  198.036025][ T8074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  198.037547][ T8074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  198.047426][ T8070] wlan0 speed is unknown, defaulting to 1000
[  198.898181][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  198.899611][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  199.010460][ T8126] device pim6reg1 entered promiscuous mode
[  199.119931][ T8136] device veth1_macvtap left promiscuous mode
[  199.122116][ T8136] device macsec0 entered promiscuous mode
[  199.246848][ T8150] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  199.249913][ T8150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  199.251354][ T8150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  199.786525][ T8175] device pim6reg1 entered promiscuous mode
[  199.882451][ T8179] wlan0 speed is unknown, defaulting to 1000
[  199.920349][ T8187] loop1: detected capacity change from 0 to 128
[  199.922576][ T8187] EXT4-fs (loop1): Test dummy encryption mode enabled
[  200.318074][ T8187] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  200.325026][ T8187] EXT4-fs (loop1): unmounting filesystem.
[  201.094528][ T7547] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  201.098087][ T8186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  201.099506][ T8186] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  201.179210][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  201.200958][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  201.202382][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  201.860266][ T8235] device pim6reg1 entered promiscuous mode
[  201.920802][ T8243] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  201.928148][ T8243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  201.934191][ T8243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  202.073871][ T8256] device pim6reg1 entered promiscuous mode
[  202.380204][ T8280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  202.388156][ T8280] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  202.398592][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1138'.
[  202.447129][ T8294] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  202.449179][ T8294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  202.450415][ T8294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  202.524919][ T8298] wlan0 speed is unknown, defaulting to 1000
[  203.146784][ T8332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  203.148405][ T8332] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  203.188791][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  203.194440][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  203.305163][ T8349] ÿ: renamed from bond_slave_0
[  203.542147][ T8352] loop4: detected capacity change from 0 to 128
[  203.563831][ T8352] EXT4-fs (loop4): Test dummy encryption mode enabled
[  203.890915][ T8352] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  203.899918][ T8352] EXT4-fs (loop4): unmounting filesystem.
[  204.544943][ T7425] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  204.725641][ T8352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  204.727121][ T8352] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.899275][ T8374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  204.900745][ T8374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  206.003379][ T8412] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  206.005782][ T8412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  206.007072][ T8412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  206.025690][ T8414] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  206.027330][ T8414] device syzkaller0 entered promiscuous mode
[  206.069314][ T8414] tipc: Resetting bearer <eth:syzkaller0>
[  206.073222][ T8413] tipc: Resetting bearer <eth:syzkaller0>
[  206.143176][ T8413] tipc: Disabling bearer <eth:syzkaller0>
[  206.844836][ T8459] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  206.851978][ T8459] infiniband syz0: set active
[  206.956966][ T8464] device pim6reg1 entered promiscuous mode
[  207.069228][ T8472] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  207.072208][ T8472] device syzkaller0 entered promiscuous mode
[  207.118175][ T8472] tipc: Resetting bearer <eth:syzkaller0>
[  207.128138][ T8471] tipc: Resetting bearer <eth:syzkaller0>
[  207.303727][ T8471] tipc: Disabling bearer <eth:syzkaller0>
[  207.693217][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  207.711140][ T8501] infiniband syz0: set active
[  208.136699][ T8532] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1228'.
[  208.181711][ T8532] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1228'.
[  208.190199][ T8540] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1228'.
[  208.206050][ T8543] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  208.207707][ T8543] device syzkaller0 entered promiscuous mode
[  208.227618][ T8543] tipc: Resetting bearer <eth:syzkaller0>
[  208.232355][ T8541] tipc: Resetting bearer <eth:syzkaller0>
[  208.293548][ T8541] tipc: Disabling bearer <eth:syzkaller0>
[  208.328717][ T8532] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1228'.
[  208.475223][ T8570] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  208.502168][ T8570] infiniband syz0: set active
[  209.105818][ T8572] loop2: detected capacity change from 0 to 32768
[  209.121193][ T8597] tipc: Started in network mode
[  209.125330][ T8597] tipc: Node identity 1a76e37ce729, cluster identity 4711
[  209.129874][ T8597] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  209.135266][ T8597] device syzkaller0 entered promiscuous mode
[  209.160841][ T8597] tipc: Resetting bearer <eth:syzkaller0>
[  209.170812][ T8606] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1244'.
[  209.184179][ T8596] tipc: Resetting bearer <eth:syzkaller0>
[  209.206795][ T8572] XFS (loop2): Mounting V5 Filesystem
[  209.222654][ T8613] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1244'.
[  209.225924][ T8572] XFS (loop2): Ending clean mount
[  209.254333][ T8596] tipc: Disabling bearer <eth:syzkaller0>
[  209.282973][ T8606] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1244'.
[  209.659586][ T4322] XFS (loop2): Unmounting Filesystem
[  209.675747][ T8606] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1244'.
[  210.091806][ T8649] loop1: detected capacity change from 0 to 4096
[  210.136237][ T8649] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  210.256246][ T8657] loop5: detected capacity change from 0 to 256
[  210.802259][ T8657] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0xf47d8e63, utbl_chksum : 0xe619d30d)
[  211.081044][ T4321] EXT4-fs (loop1): unmounting filesystem.
[  211.089880][ T8667] loop3: detected capacity change from 0 to 2048
[  211.162110][ T8667] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  211.241955][ T8667] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.1254: Unrecognised inode hash code 20
[  211.255198][ T8667] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1254: Corrupt directory, running e2fsck is recommended
[  211.267853][ T8667] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.1254: Inode bitmap for bg 0 marked uninitialized
[  211.320113][ T4331] EXT4-fs (loop3): unmounting filesystem.
[  211.777397][ T8689] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  211.781370][ T8689] device syzkaller0 entered promiscuous mode
[  211.852041][ T8689] tipc: Resetting bearer <eth:syzkaller0>
[  211.868024][ T8688] tipc: Resetting bearer <eth:syzkaller0>
[  212.196339][ T8688] tipc: Disabling bearer <eth:syzkaller0>
[  212.208493][ T8705] loop3: detected capacity change from 0 to 128
[  212.260421][ T8705] EXT4-fs (loop3): Test dummy encryption mode enabled
[  212.326261][ T8705] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  212.340167][ T8705] EXT4-fs (loop3): unmounting filesystem.
[  212.405197][ T8705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  212.406740][ T8705] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  212.568248][ T8698] loop4: detected capacity change from 0 to 32768
[  213.026296][ T8698] XFS (loop4): Mounting V5 Filesystem
[  213.253729][ T8698] XFS (loop4): Ending clean mount
[  214.038480][ T4319] XFS (loop4): Unmounting Filesystem
[  214.702816][ T8766] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  214.705064][ T8766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  214.706782][ T8766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  215.143166][ T8768] wlan0 speed is unknown, defaulting to 1000
[  215.165167][ T8768] loop2: detected capacity change from 0 to 512
[  215.241001][ T8779] loop1: detected capacity change from 0 to 256
[  216.093424][ T8768] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000]
[  216.094750][ T8768] System zones: 0-2, 18-18, 34-34
[  216.108764][ T8768] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #3: comm syz.2.1272: corrupted inode contents
[  216.112860][ T8768] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #3: comm syz.2.1272: mark_inode_dirty error
[  216.201335][ T8768] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #3: comm syz.2.1272: corrupted inode contents
[  216.204789][ T8768] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.1272: mark_inode_dirty error
[  216.222631][ T8768] __quota_error: 32 callbacks suppressed
[  216.222644][ T8768] Quota error (device loop2): write_blk: dquota write failed
[  216.298342][ T8792] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  216.300018][ T8792] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  216.514144][ T8768] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  216.516095][ T8768] EXT4-fs error (device loop2): ext4_acquire_dquot:6816: comm syz.2.1272: Failed to acquire dquot type 0
[  216.528201][ T8768] EXT4-fs (loop2): 1 orphan inode deleted
[  216.529225][ T8768] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  216.542990][ T7132] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  216.544697][ T7132] EXT4-fs error (device loop2): ext4_release_dquot:6852: comm kworker/u4:20: Failed to release dquot type 1
[  216.660522][ T8788] loop4: detected capacity change from 0 to 32768
[  216.688923][ T4322] EXT4-fs (loop2): unmounting filesystem.
[  216.706132][ T8788] XFS (loop4): Mounting V5 Filesystem
[  216.738765][ T8788] XFS (loop4): Ending clean mount
[  217.085178][ T8809] loop5: detected capacity change from 0 to 512
[  217.115286][ T8809] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  217.408933][ T6094] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  217.468431][ T4319] XFS (loop4): Unmounting Filesystem
[  217.900486][ T8822] wlan0 speed is unknown, defaulting to 1000
[  217.955663][ T8825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  217.960370][ T8825] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  218.788209][ T8838] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1289'.
[  219.363621][ T4412] Bluetooth: hci1: Frame reassembly failed (-84)
[  220.181871][ T8840] loop3: detected capacity change from 0 to 131072
[  220.215914][ T8840] F2FS-fs (loop3): Found nat_bits in checkpoint
[  220.238567][ T8840] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  220.398377][ T8863] loop3: detected capacity change from 0 to 32768
[  220.427111][ T8863] XFS (loop3): Mounting V5 Filesystem
[  220.452334][ T8863] XFS (loop3): Ending clean mount
[  220.930006][ T8880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1300'.
[  220.935933][ T8880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1300'.
[  221.117408][ T8888] loop1: detected capacity change from 0 to 128
[  221.133406][ T8888] EXT4-fs (loop1): Test dummy encryption mode enabled
[  221.174118][ T4331] XFS (loop3): Unmounting Filesystem
[  221.209348][ T8893] loop2: detected capacity change from 0 to 512
[  221.215581][ T8888] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  221.221035][ T8888] EXT4-fs (loop1): unmounting filesystem.
[  221.264402][ T8893] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  221.356095][ T8888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  221.357613][ T8888] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  221.372468][ T4334] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  221.394064][ T7425] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  222.882586][ T4322] EXT4-fs (loop2): unmounting filesystem.
[  223.662029][ T8918] loop3: detected capacity change from 0 to 256
[  223.688175][ T8918] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xf47d8e63, utbl_chksum : 0xe619d30d)
[  224.488179][ T8934] loop2: detected capacity change from 0 to 32768
[  224.596193][ T8934] XFS (loop2): Mounting V5 Filesystem
[  224.627649][ T8934] XFS (loop2): Ending clean mount
[  225.156680][ T4322] XFS (loop2): Unmounting Filesystem
[  225.157742][ T8953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.159503][ T8953] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  228.011216][ T8985] loop4: detected capacity change from 0 to 32768
[  228.025893][ T8985] XFS (loop4): Mounting V5 Filesystem
[  228.059750][ T8985] XFS (loop4): Ending clean mount
[  228.484053][ T9010] usb usb8: usbfs: process 9010 (syz.5.1333) did not claim interface 0 before use
[  228.505006][ T4319] XFS (loop4): Unmounting Filesystem
[  228.911919][ T9019] loop1: detected capacity change from 0 to 512
[  228.919857][ T9024] loop3: detected capacity change from 0 to 256
[  228.932824][ T9019] EXT4-fs: Ignoring removed i_version option
[  228.942337][ T9019] EXT4-fs (loop1): Test dummy encryption mode enabled
[  229.010366][ T9019] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.1338: inode #13: comm syz.1.1338: iget: illegal inode #
[  229.013285][ T9019] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1338: couldn't read orphan inode 13 (err -117)
[  229.023014][ T9019] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  229.027020][ T9019] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.1.1338: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  229.344923][ T4321] EXT4-fs (loop1): unmounting filesystem.
[  230.228205][ T9053] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  230.231799][ T9053] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  230.245283][ T9053] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  230.247223][ T9053] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  230.552650][ T9053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  231.116135][ T9060] loop2: detected capacity change from 0 to 32768
[  231.184865][ T9060] XFS (loop2): Mounting V5 Filesystem
[  231.520686][ T9077] loop1: detected capacity change from 0 to 256
[  231.551124][ T9077] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xf47d8e63, utbl_chksum : 0xe619d30d)
[  232.202381][ T9060] XFS (loop2): Ending clean mount
[  233.139436][ T9089] wlan0 speed is unknown, defaulting to 1000
[  233.246284][ T4322] XFS (loop2): Unmounting Filesystem
[  233.427820][   T27] audit: type=1326 audit(234.395:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9091 comm="syz.1.1355" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac55c068 code=0x7ffc0000
[  233.431332][   T27] audit: type=1326 audit(234.395:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9091 comm="syz.1.1355" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac55c068 code=0x7ffc0000
[  233.435740][   T27] audit: type=1326 audit(234.395:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9091 comm="syz.1.1355" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffffac55c068 code=0x7ffc0000
[  233.631570][ T9101] wlan0 speed is unknown, defaulting to 1000
[  233.736297][   T27] audit: type=1326 audit(234.405:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9091 comm="syz.1.1355" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac55c068 code=0x7ffc0000
[  233.740094][   T27] audit: type=1326 audit(234.405:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9091 comm="syz.1.1355" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac55c068 code=0x7ffc0000
[  233.849179][   T27] audit: type=1326 audit(234.405:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9099 comm="syz.1.1355" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffac586788 code=0x7ffc0000
[  233.963599][   T27] audit: type=1326 audit(234.405:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9091 comm="syz.1.1355" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=7 compat=0 ip=0xffffac55c068 code=0x7ffc0000
[  234.059033][   T27] audit: type=1326 audit(234.405:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9091 comm="syz.1.1355" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac55c068 code=0x7ffc0000
[  234.230841][   T27] audit: type=1326 audit(234.405:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9091 comm="syz.1.1355" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac55c068 code=0x7ffc0000
[  234.265818][   T27] audit: type=1326 audit(234.555:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9099 comm="syz.1.1355" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=93 compat=0 ip=0xffffac55c068 code=0x7ffc0000
[  236.289124][ T9143] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  236.290721][ T9143] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  236.302185][ T9130] loop4: detected capacity change from 0 to 32768
[  236.315629][ T9130] XFS (loop4): Mounting V5 Filesystem
[  236.571701][ T9155] loop5: detected capacity change from 0 to 512
[  236.636745][ T9155] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  236.910308][ T9155] EXT4-fs (loop5): 1 truncate cleaned up
[  236.911405][ T9155] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  237.184175][ T9130] XFS (loop4): Ending clean mount
[  237.326389][ T9162] loop1: detected capacity change from 0 to 512
[  237.327548][ T9160] loop2: detected capacity change from 0 to 128
[  237.448970][ T9160] EXT4-fs (loop2): Test dummy encryption mode enabled
[  237.582390][ T7447] EXT4-fs (loop5): unmounting filesystem.
[  237.650699][ T9160] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  237.653892][ T9160] EXT4-fs (loop2): unmounting filesystem.
[  237.679037][ T4319] XFS (loop4): Unmounting Filesystem
[  237.681618][ T9160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  237.683772][ T9160] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  237.709933][ T9169] loop3: detected capacity change from 0 to 256
[  237.731600][ T9169] FAT-fs (loop3): Directory bread(block 64) failed
[  237.779520][ T9169] FAT-fs (loop3): Directory bread(block 65) failed
[  237.780677][ T9169] FAT-fs (loop3): Directory bread(block 66) failed
[  237.781634][ T9169] FAT-fs (loop3): Directory bread(block 67) failed
[  237.782825][ T9169] FAT-fs (loop3): Directory bread(block 68) failed
[  237.783785][ T9169] FAT-fs (loop3): Directory bread(block 69) failed
[  237.784856][ T9169] FAT-fs (loop3): Directory bread(block 70) failed
[  237.786318][ T9169] FAT-fs (loop3): Directory bread(block 71) failed
[  237.787422][ T9169] FAT-fs (loop3): Directory bread(block 72) failed
[  237.788419][ T9169] FAT-fs (loop3): Directory bread(block 73) failed
[  237.939916][ T9175] loop5: detected capacity change from 0 to 512
[  237.981766][ T9175] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  238.216866][ T9175] EXT4-fs (loop5): 1 truncate cleaned up
[  238.217943][ T9175] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  238.918457][ T7447] EXT4-fs (loop5): unmounting filesystem.
[  239.025745][ T9191] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1382'.
[  239.078632][ T9193] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1382'.
[  239.104464][ T9191] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1382'.
[  239.214774][ T9191] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1382'.
[  239.247658][ T9200] serio: Serial port ptm0
[  239.338451][ T9189] loop5: detected capacity change from 0 to 32768
[  239.369426][ T9189] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  240.145190][ T7447] ocfs2: Unmounting device (7,5) on (node local)
[  241.080498][ T9219] loop1: detected capacity change from 0 to 128
[  241.082239][ T9219] EXT4-fs (loop1): Test dummy encryption mode enabled
[  241.111184][ T9219] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  241.119423][ T9219] EXT4-fs (loop1): unmounting filesystem.
[  241.128168][ T9219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.129736][ T9219] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.250277][ T9224] loop5: detected capacity change from 0 to 32768
[  241.633126][ T9224] XFS (loop5): Mounting V5 Filesystem
[  241.666235][ T9224] XFS (loop5): Ending clean mount
[  241.743740][ T9247] loop4: detected capacity change from 0 to 256
[  241.783565][ T9247] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xf47d8e63, utbl_chksum : 0xe619d30d)
[  242.217174][ T7447] XFS (loop5): Unmounting Filesystem
[  242.515349][ T9252] loop1: detected capacity change from 0 to 32768
[  242.635322][ T9252] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  243.140330][ T9262] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  243.180147][ T9265] loop3: detected capacity change from 0 to 512
[  243.181109][ T9262] device syzkaller0 entered promiscuous mode
[  243.185018][ T9265] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  243.188271][ T4321] ocfs2: Unmounting device (7,1) on (node local)
[  243.225287][ T9265] EXT4-fs (loop3): 1 truncate cleaned up
[  243.226408][ T9265] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  243.360003][ T9279] loop2: detected capacity change from 0 to 4096
[  243.374352][ T9279] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  243.389069][ T4322] EXT4-fs (loop2): unmounting filesystem.
[  243.476190][ T9286] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1394'.
[  243.521217][ T4331] EXT4-fs (loop3): unmounting filesystem.
[  243.529271][ T9289] netlink: 16410 bytes leftover after parsing attributes in process `syz.5.1394'.
[  243.540216][ T9286] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1394'.
[  243.849793][ T9291] loop3: detected capacity change from 0 to 128
[  243.887004][ T9291] EXT4-fs (loop3): Test dummy encryption mode enabled
[  243.968310][ T9291] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  243.979845][ T9291] EXT4-fs (loop3): unmounting filesystem.
[  243.998997][ T9291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  244.000470][ T9291] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  244.528925][ T9299] loop5: detected capacity change from 0 to 512
[  244.530305][ T9299] EXT4-fs: Ignoring removed nomblk_io_submit option
[  244.541274][ T9299] EXT4-fs: Ignoring removed bh option
[  245.333401][ T9299] EXT4-fs error (device loop5): mb_free_blocks:1810: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  245.343261][ T9299] EXT4-fs error (device loop5): ext4_do_update_inode:5254: inode #11: comm syz.5.1409: corrupted inode contents
[  245.353381][ T9299] EXT4-fs error (device loop5): ext4_dirty_inode:6119: inode #11: comm syz.5.1409: mark_inode_dirty error
[  245.362725][ T9299] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1409: invalid indirect mapped block 1 (level 1)
[  245.374594][ T9299] EXT4-fs error (device loop5): ext4_do_update_inode:5254: inode #11: comm syz.5.1409: corrupted inode contents
[  245.385411][ T9299] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  245.391007][ T9299] EXT4-fs error (device loop5): ext4_do_update_inode:5254: inode #11: comm syz.5.1409: corrupted inode contents
[  245.395302][ T9299] EXT4-fs error (device loop5): ext4_truncate:4312: inode #11: comm syz.5.1409: mark_inode_dirty error
[  245.407594][ T9299] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  245.417555][ T9299] EXT4-fs (loop5): 1 truncate cleaned up
[  245.418508][ T9299] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  245.547404][ T7447] EXT4-fs (loop5): unmounting filesystem.
[  247.511760][ T9305] loop1: detected capacity change from 0 to 32768
[  247.544551][ T9305] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  248.367639][ T9337] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1419'.
[  248.419525][ T9342] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1419'.
[  248.510366][ T4321] ocfs2: Unmounting device (7,1) on (node local)
[  248.534357][ T9337] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1419'.
[  248.652700][ T9346] 9pnet_fd: Insufficient options for proto=fd
[  249.159819][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  249.161052][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[  249.415419][ T9325] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  249.517547][ T9370] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  249.541952][ T9370] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  249.684315][ T9372] loop5: detected capacity change from 0 to 256
[  249.787718][ T9372] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  249.787782][ T9372] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  249.803371][ T9372] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  250.528147][ T9360] loop3: detected capacity change from 0 to 32768
[  250.750632][ T9369] loop4: detected capacity change from 0 to 32768
[  250.751729][ T9370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  250.757538][ T9377] input: syz0 as /devices/virtual/input/input3
[  250.788939][ T9369] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  250.794812][ T9360] XFS (loop3): Mounting V5 Filesystem
[  250.823087][ T9387] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1434'.
[  250.853695][ T9389] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1434'.
[  250.884724][ T9360] XFS (loop3): Ending clean mount
[  250.897320][ T9387] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1434'.
[  251.359015][ T4319] ocfs2: Unmounting device (7,4) on (node local)
[  251.468787][ T4331] XFS (loop3): Unmounting Filesystem
[  251.579299][ T9387] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1434'.
[  253.028188][ T9429] loop4: detected capacity change from 0 to 256
[  254.352227][ T9439] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1449'.
[  254.367844][ T9432] loop5: detected capacity change from 0 to 32768
[  254.440316][ T9444] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1449'.
[  254.451535][ T9432] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  254.861200][ T9439] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1449'.
[  254.887482][ T9435] loop1: detected capacity change from 0 to 32768
[  254.925963][ T7447] ocfs2: Unmounting device (7,5) on (node local)
[  254.978837][ T9435] XFS (loop1): Mounting V5 Filesystem
[  255.025015][ T9435] XFS (loop1): Ending clean mount
[  255.027776][ T9439] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1449'.
[  255.524777][ T4321] XFS (loop1): Unmounting Filesystem
[  256.356611][ T9482] loop2: detected capacity change from 0 to 256
[  257.159224][ T9491] loop2: detected capacity change from 0 to 32768
[  257.192589][ T9491] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  257.276115][ T9501] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1464'.
[  257.588909][ T9504] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1464'.
[  257.691555][ T9501] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1464'.
[  258.030951][ T9517] loop1: detected capacity change from 0 to 512
[  258.044394][ T9517] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  258.359959][ T9517] EXT4-fs (loop1): 1 truncate cleaned up
[  258.361055][ T9517] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  258.875105][ T4322] ocfs2: Unmounting device (7,2) on (node local)
[  259.112884][ T4321] EXT4-fs (loop1): unmounting filesystem.
[  259.197974][ T9514] loop5: detected capacity change from 0 to 32768
[  259.214328][ T9530] tipc: Can't bind to reserved service type 0
[  259.336984][ T9514] XFS (loop5): Mounting V5 Filesystem
[  259.384122][ T9514] XFS (loop5): Ending clean mount
[  260.349156][ T9553] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  260.445509][ T7447] XFS (loop5): Unmounting Filesystem
[  260.511927][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  260.523671][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  260.527083][ T9571] 8021q: adding VLAN 0 to HW filter on device team0
[  260.614965][ T9571] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  261.146116][ T9595] loop3: detected capacity change from 0 to 128
[  261.148720][ T9595] EXT4-fs (loop3): Test dummy encryption mode enabled
[  261.525055][ T9595] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  261.527508][ T9595] EXT4-fs (loop3): unmounting filesystem.
[  261.536710][ T9595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  261.538279][ T9595] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  261.747319][ T9604] loop2: detected capacity change from 0 to 512
[  261.750180][ T9604] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  262.495685][ T9610] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  262.497194][ T9610] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  262.498597][ T9610] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  262.499931][ T9610] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  262.589188][ T9613] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1481'.
[  262.638458][ T9613] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1481'.
[  262.641587][ T9616] netlink: 16410 bytes leftover after parsing attributes in process `syz.5.1481'.
[  262.733966][ T9614] loop2: detected capacity change from 0 to 32768
[  262.738116][ T9613] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1481'.
[  262.782462][ T9614] XFS (loop2): Mounting V5 Filesystem
[  262.814378][ T9614] XFS (loop2): Ending clean mount
[  262.908840][ T9631] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  262.918913][ T9631] device syzkaller0 entered promiscuous mode
[  262.927606][ T9631] tipc: Resetting bearer <eth:syzkaller0>
[  262.933592][ T9630] tipc: Resetting bearer <eth:syzkaller0>
[  263.273493][ T9630] tipc: Disabling bearer <eth:syzkaller0>
[  263.463599][ T4322] XFS (loop2): Unmounting Filesystem
[  264.220970][ T9656] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1505'.
[  264.533277][ T9660] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1505'.
[  264.549294][ T9656] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1505'.
[  264.568492][ T9651] loop2: detected capacity change from 0 to 40427
[  264.571289][ T9651] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  264.572789][ T9651] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  264.578212][ T9651] F2FS-fs (loop2): invalid crc value
[  264.580186][ T9651] F2FS-fs (loop2): Found nat_bits in checkpoint
[  264.589676][ T9651] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  264.590802][ T9651] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  264.659614][ T9656] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1505'.
[  265.305050][ T9706] loop2: detected capacity change from 0 to 128
[  265.306774][ T9706] EXT4-fs (loop2): Test dummy encryption mode enabled
[  265.315129][ T9706] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  265.317493][ T9706] EXT4-fs (loop2): unmounting filesystem.
[  265.326807][ T9706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.328213][ T9706] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  271.373322][ T4329] Bluetooth: hci4: command 0x0406 tx timeout
[  275.303620][ T9654] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  275.311082][ T9721] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1516'.
[  275.312630][ T9721] netem: change failed
[  275.355179][ T9726] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1517'.
[  275.389684][ T9728] loop2: detected capacity change from 0 to 128
[  275.406566][ T9732] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1517'.
[  275.434177][ T9728] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  275.435989][ T9726] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1517'.
[  276.329139][ T4322] EXT4-fs (loop2): unmounting filesystem.
[  276.364789][ T9751] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1524'.
[  277.286364][ T9774] loop4: detected capacity change from 0 to 512
[  277.298405][ T9774] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1533: casefold flag without casefold feature
[  277.300625][ T9774] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1533: couldn't read orphan inode 15 (err -117)
[  277.304620][ T9774] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  277.640424][ T9782] overlayfs: failed to resolve './file7': -2
[  278.596841][ T4319] EXT4-fs (loop4): unmounting filesystem.
[  278.931471][ T9796] 9pnet_fd: Insufficient options for proto=fd
[  289.029389][ T9775] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  289.078852][ T9801] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1536'.
[  289.083660][ T9799] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  289.085357][ T9799] device syzkaller0 entered promiscuous mode
[  289.114494][ T9801] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1536'.
[  289.130483][ T9807] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1536'.
[  289.215438][ T9801] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1536'.
[  289.790790][ T9833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.792620][ T9833] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.817967][ T9833] loop3: detected capacity change from 0 to 1024
[  289.847297][ T9833] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e816c199, mo2=0102]
[  289.848876][ T9833] System zones: 0-1, 3-12
[  289.854465][ T9833] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  289.858159][ T9825] loop5: detected capacity change from 0 to 40427
[  289.864468][ T9825] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x3ffff
[  289.869798][ T9825] F2FS-fs (loop5): invalid crc value
[  289.875690][ T9825] F2FS-fs (loop5): Found nat_bits in checkpoint
[  289.888069][ T9825] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  289.893128][ T9832] EXT4-fs (loop3): unmounting filesystem.
[  290.581494][ T9852] loop4: detected capacity change from 0 to 1024
[  290.584041][ T9852] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  290.585834][ T9852] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal
[  290.604545][ T9798] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  290.782080][ T9862] loop4: detected capacity change from 0 to 512
[  290.794737][ T9862] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  290.799530][ T9862] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[  290.946554][ T9872] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1554'.
[  291.000026][ T9874] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1554'.
[  291.036742][ T9872] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1554'.
[  291.204820][ T9872] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1554'.
[  292.211265][   T27] audit: type=1326 audit(293.105:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.4.1558" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae95c068 code=0x7ffc0000
[  292.228807][   T27] audit: type=1326 audit(293.105:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.4.1558" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae95c068 code=0x7ffc0000
[  292.363242][   T27] audit: type=1326 audit(293.115:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.4.1558" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffae95c068 code=0x7ffc0000
[  292.366883][   T27] audit: type=1326 audit(293.125:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.4.1558" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae95c068 code=0x7ffc0000
[  292.369975][   T27] audit: type=1326 audit(293.125:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.4.1558" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae95c068 code=0x7ffc0000
[  292.373212][   T27] audit: type=1326 audit(293.125:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.4.1558" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffae95c068 code=0x7ffc0000
[  292.376631][   T27] audit: type=1326 audit(293.125:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.4.1558" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae95c068 code=0x7ffc0000
[  292.379978][   T27] audit: type=1326 audit(293.125:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.4.1558" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae95c068 code=0x7ffc0000
[  292.383215][   T27] audit: type=1326 audit(293.125:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.4.1558" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffae95c068 code=0x7ffc0000
[  292.386216][   T27] audit: type=1326 audit(293.135:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.4.1558" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae95c068 code=0x7ffc0000
[  296.333780][ T9909] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1565'.
[  296.379638][ T9909] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1565'.
[  296.385511][ T9911] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1565'.
[  296.426050][ T9909] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1565'.
[  296.704284][ T9919] loop4: detected capacity change from 0 to 256
[  297.824222][ T9925] loop4: detected capacity change from 0 to 2048
[  297.827792][ T9925] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  298.221655][ T9931] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #12: block 9: comm syz.4.1568: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0
[  303.594692][ T9853] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  303.614970][ T9883] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1557'.
[  303.682786][ T4319] EXT4-fs (loop4): unmounting filesystem.
[  304.232143][ T9946] loop5: detected capacity change from 0 to 16
[  304.255164][ T9946] erofs: (device loop5): mounted with root inode @ nid 36.
[  304.304161][ T4329] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  304.314575][ T9946] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  304.342126][ T9946] x_tables: duplicate underflow at hook 1
[  304.747660][ T9955] wlan0 speed is unknown, defaulting to 1000
[  304.849653][ T9961] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1576'.
[  304.901446][ T9963] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1576'.
[  304.925854][ T9961] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1576'.
[  305.018638][ T9961] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1576'.
[  305.267084][ T9975] loop2: detected capacity change from 0 to 256
[  306.159147][ T9982] device syzkaller0 entered promiscuous mode
[  306.785025][ T9987] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  307.297921][T10008] x_tables: duplicate underflow at hook 1
[  307.713537][T10013] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1588'.
[  308.445788][T10026] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1588'.
[  308.460083][T10013] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1588'.
[  308.521377][T10013] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1588'.
[  308.657815][T10031] loop4: detected capacity change from 0 to 512
[  308.693805][T10031] ------------[ cut here ]------------
[  308.694931][T10031] EA inode 11 i_nlink=2
[  308.695670][T10031] WARNING: CPU: 0 PID: 10031 at fs/ext4/xattr.c:1021 ext4_xattr_inode_update_ref+0x468/0x4ac
[  308.697800][T10031] Modules linked in:
[  308.698334][T10031] CPU: 0 PID: 10031 Comm: syz.4.1591 Not tainted syzkaller #0
[  308.699410][T10031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[  308.700961][T10031] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
[  308.702141][T10031] pc : ext4_xattr_inode_update_ref+0x468/0x4ac
[  308.703108][T10031] lr : ext4_xattr_inode_update_ref+0x464/0x4ac
[  308.704153][T10031] sp : ffff8000210d6e80
[  308.704798][T10031] x29: ffff8000210d6f00 x28: 0000000000000000 x27: dfff800000000000
[  308.706134][T10031] x26: 1fffe0001eab3317 x25: ffff70000421add0 x24: 0000000000000000
[  308.707436][T10031] x23: ffff800017a8b000 x22: ffff8000210d6e80 x21: 0000000000000002
[  308.708691][T10031] x20: 0000000000000001 x19: ffff0000f55996c0 x18: ffff800011abbcc0
[  308.710006][T10031] x17: 1fffe00033ed797e x16: ffff8000082d22e0 x15: 0000000040000000
[  308.711286][T10031] x14: 0000000000000002 x13: 1ffff00002a180b1 x12: 0000000000ff0100
[  308.712490][T10031] x11: ff0080000a893b14 x10: 0000000000000003 x9 : 37be6f25c4fe1300
[  308.713603][T10031] x8 : 37be6f25c4fe1300 x7 : ffff800008251e10 x6 : 0000000000000000
[  308.714850][T10031] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000
[  308.716117][T10031] x2 : 0000000000000006 x1 : ffff800011abd7c0 x0 : ffff80018a6a7000
[  308.717407][T10031] Call trace:
[  308.717916][T10031]  ext4_xattr_inode_update_ref+0x468/0x4ac
[  308.718767][T10031]  ext4_xattr_set_entry+0x918/0x15ac
[  308.719554][T10031]  ext4_xattr_ibody_set+0x204/0x600
[  308.720342][T10031]  ext4_expand_extra_isize_ea+0xd00/0x15cc
[  308.721197][T10031]  __ext4_expand_extra_isize+0x298/0x358
[  308.722044][T10031]  __ext4_mark_inode_dirty+0x3e4/0x790
[  308.722979][T10031]  ext4_evict_inode+0xb58/0x1270
[  308.723794][T10031]  evict+0x3c8/0x810
[  308.724355][T10031]  iput+0x764/0x7f4
[  308.724977][T10031]  ext4_process_orphan+0x240/0x2b4
[  308.725814][T10031]  ext4_orphan_cleanup+0x908/0x104c
[  308.726643][T10031]  ext4_fill_super+0x6920/0x6e34
[  308.727380][T10031]  get_tree_bdev+0x358/0x544
[  308.728012][T10031]  ext4_get_tree+0x28/0x38
[  308.728681][T10031]  vfs_get_tree+0x90/0x274
[  308.729308][T10031]  do_new_mount+0x228/0x810
[  308.729976][T10031]  path_mount+0x5b4/0xe78
[  308.730607][T10031]  __arm64_sys_mount+0x49c/0x584
[  308.731365][T10031]  invoke_syscall+0x98/0x2bc
[  308.732000][T10031]  el0_svc_common+0x138/0x258
[  308.732723][T10031]  do_el0_svc+0x58/0x13c
[  308.733332][T10031]  el0_svc+0x58/0x138
[  308.733901][T10031]  el0t_64_sync_handler+0x84/0xf0
[  308.734726][T10031]  el0t_64_sync+0x18c/0x190
[  308.735363][T10031] irq event stamp: 46246
[  308.736079][T10031] hardirqs last  enabled at (46245): [<ffff800008251ea4>] finish_lock_switch+0xb0/0x1c4
[  308.737603][T10031] hardirqs last disabled at (46246): [<ffff8000119576b0>] el1_dbg+0x24/0x80
[  308.738932][T10031] softirqs last  enabled at (44922): [<ffff80000803092c>] local_bh_enable+0x10/0x34
[  308.740377][T10031] softirqs last disabled at (44920): [<ffff8000080308f8>] local_bh_disable+0x10/0x34
[  308.741828][T10031] ---[ end trace 0000000000000000 ]---
[  308.742715][    C0] vkms_vblank_simulate: vblank timer overrun
[  308.749278][T10031] EXT4-fs (loop4): 1 orphan inode deleted
[  308.750393][T10031] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  308.798461][ T4319] EXT4-fs (loop4): unmounting filesystem.
[  310.262843][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  310.263993][ T2061] ieee802154 phy1 wpan1: encryption failed: -22