last executing test programs:

42.749924029s ago: executing program 3 (id=414):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f00000001c0)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@errors_continue}, {@orlov}, {@user_xattr}, {@quota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f0000000140)='Q', 0x1, 0x200980)
pwrite64(r0, 0x0, 0x0, 0xfecc)

42.483170633s ago: executing program 3 (id=418):
openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20)

41.44379982s ago: executing program 3 (id=422):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="020801000000fddbdf25010000000800eed90b0001000008000300"/36, @ANYRES32=0x0, @ANYBLOB="0500300001000000050030000000000008000b00ab648615"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x5)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r6 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(0x0, r6)
getsockname$packet(r6, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa18, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sys_enter\x00', r8}, 0x18)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_mtu(r9, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4)
setsockopt$inet6_udp_int(r9, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4)
sendmmsg$inet6(r9, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000100140012800b0001006970766c616e00000348028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)

40.876194969s ago: executing program 3 (id=430):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
socket$unix(0x1, 0x5, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1018e58, &(0x7f0000000380)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x605, &(0x7f0000000c00)="$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")
socket$inet_sctp(0x2, 0x1, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum64={0x1, 0x0, 0x0, 0x13, 0x0, 0x1}]}, {0x0, [0x2e, 0x30]}}, &(0x7f0000000500)=""/155, 0x28, 0x9b, 0x1, 0x0, 0x0, @void, @value}, 0x28)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8000, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

39.359249185s ago: executing program 3 (id=439):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB, @ANYBLOB], 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
syz_open_dev$vcsu(&(0x7f0000000040), 0x80000001, 0x40100)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000001100), 0x1, 0x793, &(0x7f0000001600)="$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")

35.95070059s ago: executing program 3 (id=450):
socket$key(0xf, 0x3, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000680)=ANY=[@ANYRES32=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000))

35.36283687s ago: executing program 32 (id=450):
socket$key(0xf, 0x3, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000680)=ANY=[@ANYRES32=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000))

7.89738302s ago: executing program 0 (id=622):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'team_slave_1\x00', <r0=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x138, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, r0, {0xf}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0x10c, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'netdevsim0\x00'}, @TCA_U32_SEL={0xf4, 0x5, {0x10, 0x9, 0xe, 0x10da, 0xa760, 0x0, 0x10, 0xfc, [{0x1ff, 0xd033, 0x10000, 0x8000}, {0x7, 0x7fff, 0x0, 0x40}, {0x40, 0x80000001, 0x0, 0xffffffff}, {0x5, 0x9, 0x2}, {0x8, 0x80000000, 0x1e0a}, {0xffffffff, 0x9, 0x800, 0x100}, {0x7, 0xe22, 0x9, 0x5cf4}, {0x10001, 0x7, 0xc841, 0x2}, {0x3ff, 0xb, 0x3, 0xa6d}, {0x40, 0x40, 0x3, 0x5}, {0x2, 0x8, 0x6, 0x201}, {0x1, 0x800, 0xc2e0, 0x5}, {0x94b0, 0x81, 0x80000001, 0xfffffffc}, {0xc, 0x2, 0xfffffffb}]}}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8000}, 0x24040084)

7.849715411s ago: executing program 0 (id=623):
openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20)
r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x0, 0x0)
r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000040)={[{0x2d, 'cpu'}]}, 0x5)

6.830564808s ago: executing program 0 (id=625):
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0xa, 0x300)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
socket$packet(0x11, 0xa, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

5.884245524s ago: executing program 0 (id=638):
syz_open_dev$dri(0x0, 0x1, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf25cee2d5d1c1"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x200, 0x4, 0x0, 0x70, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
syz_open_dev$dri(0x0, 0x1f, 0x202800)
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f00000001c0)=ANY=[], 0x4, 0xf82, &(0x7f0000000f00)="$eJzs3U9sHNX9APA36/W/2MRr4AcGfoQUWhEo2CGJ1PQWBOqlEuLSOygkNMJQ1NBKREBMD4hKiCIhThUHEBdKpRSpSKBKFeqp7alVb+0F9UKlKpWCemgjJa5iv1nvPu9k12N7dtf7+UjffX7zZuf7HXsTz4xn3wZgZNXWHo8dW8hCeOeztx99+ansk2vL7mqucXDtMYu9RghhvKWfJdv7Ii64cumlk53aLBxZe8z74bGLzefOhBBWwsHweWiEj5aWv/rw3UcOffza1C1vnnvmlV3a/aZ0PwAAYC+68Mflv973jz88MH/5woETYbK5PD8+b8T+TDzuPxwPlPPj5Vpo72ct0WoiWW8sRi1ZbyxZr57kqRfkG0+2M16w3kSXfGMtyzrtJwAAAAyj/Ly2EbLaYlu/VltcXD/vv+aLuYls8bkzy6fP9qlQAAAAoLR/n1+76XaIY2oAahBpTOcvsK0976Pvbv0524paxfnqFecbmSj3ehNCCCGE2LlwPCKGIFbnKrzYAAAAANBhvrBNVnZ2pq7m1hq95b/4cK3z82EHJK+/zdNO7PDr//r5pzavUGn+DnY//3if8193/z941f84AACUt1ePJvP9yo+j83kM0nkEx9qeNTO21fOPWrKd+hbrLJpXcFjmGyyqc6ziOsoqqn+rP8d+Kao/nQ9zUBXVn87TOaiK6p+suI6yiurvcOUnDOI/66L6pyuuo6yi+vdVXEdZRfXPVFxHWUX1z1ZcR1lF9d9QcR1lFdW/v+I6yiqqf1huqy2qv1FxHWUV1T+/3gz8YURR/TdWXEdZRfXfVHEdZRXVf3PFdfTLnbHNvw8HCtab6XDwN3AHgwAAAEBH/x36+f9GNOoDUIMQQgx9vLr+y7B9+VSHZWJbURuAGnYrpju9hoQQQoiBjPN9vPYAAAAADIb8fQH5u95Xo3x8bNP4396/9piP11vHpzY2kI+Pd9n+RJfxyS7jAAAAQAi/ef30bW9lG/Pdpe/p3+p8ePm8UdPhk6uhxDxG6XyEW82/3XnPtpu/84QjwzIbGwAAAHtV9p3Pr97/6HsvzF++cOBEy9nv1Xi+m88DWo/XBj6N/fy+gNmkn+Xn0Cfa89QK1kuvD9xQtL3Ht7mjAAAAMMLy8/dGyGqLLefdjVCrLS5unI8vhPHs9JnlU4djP/98lt/PjU9eW/5QxXUDAAAAvds43+98/p9/ju9CmMgWnzuzfPrsen+2uXy81npdYG5jedZ6XaCRLD9SsPxo7MfP7wzfn5teW7548gfLT+30zgMAAMCIOPviuWeeXF4+9cPR+aIeQtjWdsIg7IUvfLGrX/T7fyYAAGCnffnl2+M/Ojr72/X3/2/Mf3c1fnEw9htxbr8/xeX5fQL5+wA2vV//ifY8c0XrPd++XiNZbyzGZFL3VMt2wtp8g+3Pmy/K12jfzkRBvpkk32ySL52noJ6sn3WYSzB0mAkwX28uWZ7Ow1hPcmRJ/rs75AIAAIDc0gvPPr909sVzD5559smnTz196rmjR45/+/jxww9966Gltfv6l1rv7gcAAACG0cZNv/2uBAAAAAAAAAAAAAAAAAAAAEZXFR8n1u99BAAAgFH3r/MhhBUhCiL/gMF+1zHskQ1ADbsXq5P9r2FvR/DvUAghhBDbjP6e9005lhmMWF1NP2keAAAAYHddufTSydZ2k5VsR/M1t9ZYb67GvHk7++Bf5q9FvtrFh9uvl+zb0WoYdVW//uUf1PyTHcc/eHVn869diG9s9Lv//1dr38CJtcd67E33mvfepV8sNPOHEG6v95g/3f/He83Y7lCS/97QW/7V95L8T7T1ar3mvy/Jv6/H/Jv2//miDFPXzX9/zL8Q+4fu6TV/+y5OJtl6fQF8M9n/p0Kv+ZP9b/SYMPFAzA8Ao6j523z1fH8L2WH5UUJ+PD0T+/n+5ges6d0PWz3+ryXbqW+78vbt5sdBt8Z+86hupT1vbqv159+X2djeULLO1LDcVVJU/079HHdbUf3jFddRVlH9ExXXUVZR/Z3P3gdPUf3XP3scHEX193whos+K6h+W68pF9c9UXEdZRfXPVlxHWUX1b/X3eL8U1b+/4jrKKqp/ruI6yiqqv+RltcoV1T9fcR1lFdV/Y8V1lFVU/00V11FWUf03V1xHv9wR26Lz4fz8cy6O5f1G0p/s8L3s+Y8hAAAAwK7650DO/9dy5aDvtQghhBBiGGJsAGoQYpjjP6vr+l2HEGL3YnW1n1cf6LdsiO4VB2Dn7O5sFgw6P//R5uc/2vz8uZ78L/FZ0s+NdRmvdxkf7zI+kYxnyRMni8ajm5LtrubXNaObu4z/X9yDovH9yfN/nIzf2mX7C13Gb+syfnuX8Tu6jAMAADAabomt80MAAADYu17+5adv/PreJy7NX75w4ESY2DTv/OHYn4x/W3899tN573Pj8W/+P4n992P7u9j+PVnf/ScAAACw+/LPifH3fwAAANi78s8pdf4PAAAAe9d8bJ3/AwAAwN51Y2yd/wMAAMAelk11Xhzb/LrA3bHtdV4/AGDw/X9s74ztgdjeFduvxTY/Drgntl+vqD4AYOf8/Hs/Pf5WtjHf/9Fk/EpcnrebrKxfKchq7TP5T8d2X2y/0WM96ecB9Jo/t7/HPLuVf26b+QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvaO29njs2EIWwjufvf3ozybe+PO1ZXc11zi49pjFXiOEMN58Xj660f9VXPHKpZdOtrZXY5uFIyELWXN5eOxiM9NMCGElHAyfh0b4aGn5qw/ffeTQx69N3fLmuWde2cVvQdv+AQAAwF70vwAAAP//7lUWHg==")
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0))
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSFLAGS1(r4, 0x4004743a, &(0x7f0000000300))
ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000001f00))
sendmmsg(r2, &(0x7f0000007180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010000)

4.494114337s ago: executing program 1 (id=649):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180), r1)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000101000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880)

4.193158222s ago: executing program 5 (id=652):
openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20)

4.050414384s ago: executing program 1 (id=654):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000e80)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000003c0)="e3", 0x1}], 0x1}}], 0x1, 0x8041)
shutdown(r0, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket(0x1e, 0x4, 0x0)
r3 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r4 = dup3(r3, r2, 0x0)
recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18)
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

3.118470969s ago: executing program 5 (id=657):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
getrlimit(0x6, &(0x7f0000000500))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000580), 0x8)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x0, 0x0, 0x8000, 0x654, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r2}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x33, "a4c3ea051fc8f66eedf1c6676b4e9ac4711a3ee41b102a78284f8818400000fe", "c493c69907ac61ee57f3ff6656218f8c880cab0b7f5f977f29b54144914986b5", "7795433781033bb967429b7c68c2566066943f3a566d7fd05557583a535a3b9e", "cba936683f411a1265d9ffb369dbe16de72fd8ee91c60f531196c136add25f43", "3fda464b4ffcb83f5c89e20fe8814b4e26bb81519905d65c5a0ae43be09d9f7b", "9900255a099270427859ce54", 0x43dd5e67, 0x9, 0x4, 0x5, 0x9}})
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = gettid()
tkill(r8, 0x16)

2.973240952s ago: executing program 2 (id=658):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14)
fcntl$setsig(r1, 0xa, 0x13)
fcntl$setlease(r1, 0x400, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)

2.421295971s ago: executing program 4 (id=664):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
accept(r0, 0x0, 0x0)

2.372490251s ago: executing program 4 (id=665):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x2c, r1, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0)

2.295713533s ago: executing program 4 (id=666):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
acct(&(0x7f0000000140)='./file0\x00')
acct(0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)

2.293399833s ago: executing program 1 (id=667):
openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r3], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20)

2.275264773s ago: executing program 4 (id=668):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140), 0x4)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r2 = accept(r0, 0x0, 0x0)
sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0)
shutdown(r2, 0x1)
recvfrom(r1, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x900, 0x0, 0x0)

1.351635778s ago: executing program 2 (id=669):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b7030000000000008500000006000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x5}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000), r2, 0x0, 0x2, 0x4}}, 0x20)

1.350595888s ago: executing program 5 (id=670):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x138, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0x10c, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'netdevsim0\x00'}, @TCA_U32_SEL={0xf4, 0x5, {0x10, 0x9, 0xe, 0x10da, 0xa760, 0x0, 0x10, 0xfc, [{0x1ff, 0xd033, 0x10000, 0x8000}, {0x7, 0x7fff, 0x0, 0x40}, {0x40, 0x80000001, 0x0, 0xffffffff}, {0x5, 0x9, 0x2}, {0x8, 0x80000000, 0x1e0a}, {0xffffffff, 0x9, 0x800, 0x100}, {0x7, 0xe22, 0x9, 0x5cf4}, {0x10001, 0x7, 0xc841, 0x2}, {0x3ff, 0xb, 0x3, 0xa6d}, {0x40, 0x40, 0x3, 0x5}, {0x2, 0x8, 0x6, 0x201}, {0x1, 0x800, 0xc2e0, 0x5}, {0x94b0, 0x81, 0x80000001, 0xfffffffc}, {0xc, 0x2, 0xfffffffb}]}}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8000}, 0x24040084)

1.294884289s ago: executing program 1 (id=671):
syz_pidfd_open(0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r5, 0x0, r5)

1.26643042s ago: executing program 0 (id=672):
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a0603a6ff8000000001000000006302496b3a17b42e64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)

1.243154s ago: executing program 4 (id=673):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000406, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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")
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
mount(0x0, 0x0, 0x0, 0x20, 0x0)

1.171289321s ago: executing program 2 (id=674):
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0)

1.170132231s ago: executing program 5 (id=675):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
r1 = getpid()
process_vm_writev(r1, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x0)

1.030377044s ago: executing program 2 (id=676):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x8}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000003"], 0x50)

271.484626ms ago: executing program 0 (id=677):
r0 = syz_open_pts(0xffffffffffffffff, 0x440081)
ioctl$TIOCSTI(r0, 0x5412, 0x0)
io_setup(0x6, &(0x7f0000000300))
pipe2(&(0x7f0000000c40)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4800)
fcntl$setpipe(r1, 0x407, 0x6)
recvmsg(0xffffffffffffffff, 0x0, 0x1c0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), 0x0, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f0000000600), &(0x7f0000000700)=""/127}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r5 = socket(0x2, 0x3, 0xff)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x640, 0x2e0, 0x1b8, 0x2e0, 0x0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [0x0, 0x0, 0x0, 0xffffff00], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x2, 0xffffffff}]}, 0x10)
close(r9)

270.800366ms ago: executing program 1 (id=678):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
acct(&(0x7f0000000140)='./file0\x00')
acct(0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)

270.640246ms ago: executing program 5 (id=679):
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18)
recvmmsg(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}, 0x4309}], 0x1, 0x120, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)

90.387679ms ago: executing program 2 (id=680):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x6}, 0x18)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)

65.558549ms ago: executing program 1 (id=681):
openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r3], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20)

65.073569ms ago: executing program 4 (id=682):
syz_open_dev$dri(0x0, 0x1, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf25cee2d5d1c1"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x200, 0x4, 0x0, 0x70, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
syz_open_dev$dri(0x0, 0x1f, 0x202800)
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f00000001c0)=ANY=[], 0x4, 0xf82, &(0x7f0000000f00)="$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")
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0))
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSFLAGS1(r4, 0x4004743a, &(0x7f0000000300))
ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000001f00))
sendmmsg(r2, &(0x7f0000007180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010000)

241.48µs ago: executing program 5 (id=683):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r1, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840), 0x0, <r2=>0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x8, 0x0, 0x0}}, 0x10)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
epoll_create1(0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x43}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='rtc_irq_set_state\x00', r3, 0x0, 0x7}, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0x1, 0x2, 0xe3, 0x2}, {0x8, 0x62, 0x7, 0x9}]}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='workqueue_activate_work\x00', r10}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r12, {}, {}, {0xfff3}}}, 0x24}}, 0x0)

0s ago: executing program 2 (id=684):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0)

kernel console output (not intermixed with test programs):

_slave_0) entered forwarding state
[   40.502382][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   40.505774][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   40.508837][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   40.522640][ T4308] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.526893][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   40.529484][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   40.532414][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   40.535884][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   40.538279][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.540234][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.542519][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   40.548524][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   40.551209][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.553091][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.556382][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   40.561039][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   40.563674][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   40.581201][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   40.588010][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   40.590647][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   40.593514][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.595491][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.598529][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   40.607166][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   40.610025][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   40.625046][ T4308] 8021q: adding VLAN 0 to HW filter on device team0
[   40.628187][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   40.631701][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   40.639010][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   40.641423][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   40.660103][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   40.663369][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   40.667631][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   40.670667][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   40.673347][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   40.677233][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   40.679841][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   40.682446][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   40.700152][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   40.703420][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   40.706950][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   40.710040][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   40.712608][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   40.717473][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   40.720022][  T417] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.721934][  T417] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.728647][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   40.731217][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   40.748716][ T4296] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.751822][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   40.778668][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   40.781379][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   40.788083][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.790028][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.792253][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   40.797516][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   40.815935][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   40.818944][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   40.822436][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   40.825433][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   40.828208][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   40.830821][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   40.841009][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   40.846019][ T1853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   40.850303][ T1853] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   40.852961][ T1853] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   40.870044][ T4296] 8021q: adding VLAN 0 to HW filter on device team0
[   40.872448][ T1853] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   40.876473][ T1853] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   40.878581][ T1853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   40.881911][ T1853] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   40.899250][ T4299] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.902419][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   40.905436][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   40.912305][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   40.914923][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   40.918774][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   40.922034][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   40.932716][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   40.943569][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   40.947130][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   40.950068][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.952017][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.960002][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   40.962664][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   40.966323][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.968261][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.970670][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   40.979542][ T4306] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.983584][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   40.993725][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   41.013680][ T1853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   41.022436][ T1853] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   41.026421][ T1853] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   41.041657][ T1853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   41.046089][ T1853] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   41.051219][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   41.053729][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   41.063456][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   41.066682][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   41.069559][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   41.072084][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   41.088177][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   41.090818][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   41.102485][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   41.105070][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   41.107495][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   41.110633][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   41.115833][ T4299] device veth0_vlan entered promiscuous mode
[   41.125981][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   41.136127][ T4299] device veth1_vlan entered promiscuous mode
[   41.150542][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   41.153165][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   41.157644][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   41.159721][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   41.162318][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   41.165968][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   41.168378][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   41.175595][ T4306] device veth0_vlan entered promiscuous mode
[   41.192618][ T4300] 8021q: adding VLAN 0 to HW filter on device batadv0
[   41.197087][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   41.199673][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   41.201757][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   41.217693][ T4306] device veth1_vlan entered promiscuous mode
[   41.231806][ T4308] 8021q: adding VLAN 0 to HW filter on device batadv0
[   41.257058][ T1853] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   41.259553][ T1853] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   41.261966][ T1853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   41.266909][ T1853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   41.273331][ T4299] device veth0_macvtap entered promiscuous mode
[   41.280722][ T1853] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   41.283281][ T1853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   41.287390][ T1853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   41.301215][ T4299] device veth1_macvtap entered promiscuous mode
[   41.319419][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   41.321944][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   41.326621][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   41.334695][ T4306] device veth0_macvtap entered promiscuous mode
[   41.341962][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   41.349900][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   41.352710][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   41.356559][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   41.358937][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   41.372336][ T4306] device veth1_macvtap entered promiscuous mode
[   41.374233][ T4313] Bluetooth: hci0: command 0x041b tx timeout
[   41.381925][ T4299] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.384062][ T4302] Bluetooth: hci1: command 0x041b tx timeout
[   41.392975][ T4300] device veth0_vlan entered promiscuous mode
[   41.395644][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   41.398110][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   41.400770][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   41.403406][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   41.407251][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   41.418328][ T4299] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.420519][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   41.423214][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   41.427990][ T4296] 8021q: adding VLAN 0 to HW filter on device batadv0
[   41.446844][ T4300] device veth1_vlan entered promiscuous mode
[   41.451339][ T4299] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.454029][ T4313] Bluetooth: hci4: command 0x041b tx timeout
[   41.455562][ T4313] Bluetooth: hci2: command 0x041b tx timeout
[   41.457219][ T4313] Bluetooth: hci3: command 0x041b tx timeout
[   41.459357][ T4299] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.461764][ T4299] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.464723][ T4299] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.472833][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.483031][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.487110][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.493257][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   41.497195][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   41.499628][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   41.502357][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   41.515275][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.518349][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.522021][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.530268][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   41.532990][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   41.536655][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   41.539365][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   41.566179][ T4306] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.568700][ T4306] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.571109][ T4306] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.573464][ T4306] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.582816][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   41.586821][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   41.589545][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   41.592254][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   41.597948][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   41.600347][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   41.613480][ T4296] device veth0_vlan entered promiscuous mode
[   41.627527][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   41.630173][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   41.660028][ T4300] device veth0_macvtap entered promiscuous mode
[   41.662912][ T4362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.666709][ T4300] device veth1_macvtap entered promiscuous mode
[   41.669029][ T4362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.677527][ T4296] device veth1_vlan entered promiscuous mode
[   41.686532][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   41.689052][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   41.691791][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   41.695476][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   41.697994][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   41.700555][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   41.719643][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   41.722524][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   41.729642][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.732467][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.735505][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.738541][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.742429][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.750765][ T4308] device veth0_vlan entered promiscuous mode
[   41.759866][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   41.762707][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   41.785351][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.788174][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.790892][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.793688][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.798641][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.799908][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.800832][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.805401][ T4300] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.809191][ T4300] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.811533][ T4300] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.814544][ T4300] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.822886][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   41.826745][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   41.829525][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   41.836670][ T4308] device veth1_vlan entered promiscuous mode
[   41.854343][  T417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.856647][  T417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.859373][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   41.870836][ T4308] device veth0_macvtap entered promiscuous mode
[   41.882911][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   41.885965][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   41.888692][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   41.901951][ T4296] device veth0_macvtap entered promiscuous mode
[   41.911602][ T4308] device veth1_macvtap entered promiscuous mode
[   41.918432][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   41.921030][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   41.924165][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   41.930692][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   41.964026][  T417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.966321][  T417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.973590][ T4296] device veth1_macvtap entered promiscuous mode
[   41.991545][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   41.994855][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   42.012408][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   42.016394][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.019344][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   42.022253][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.025320][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   42.028189][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.032177][ T4308] batman_adv: batadv0: Interface activated: batadv_slave_0
[   42.054257][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   42.057230][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   42.073657][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   42.077468][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.080268][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   42.083093][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.086793][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   42.089599][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.093590][ T4308] batman_adv: batadv0: Interface activated: batadv_slave_1
[   42.112681][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   42.115276][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   42.118302][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   42.121575][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   42.125629][ T4308] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   42.128081][ T4308] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   42.130446][ T4308] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   42.132746][ T4308] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   42.159373][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   42.170456][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   42.176027][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.179216][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   42.182284][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.185306][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   42.189489][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.192464][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   42.197600][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.202102][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_0
[   42.213006][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   42.215885][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   42.221829][ T4382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   42.226754][ T4382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.229348][ T4382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   42.232125][ T4382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.236750][ T4382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   42.239953][ T4382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.242896][ T4382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   42.246939][ T4382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.322565][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   42.326401][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.329228][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   42.332061][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.336317][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   42.342641][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.347793][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   42.351228][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   42.356229][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_1
[   42.365208][ T1853] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   42.368237][ T1853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   42.380537][  T417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   42.382752][  T417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   42.386395][  T417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   42.401049][ T4386] loop2: detected capacity change from 0 to 512
[   42.426194][ T4296] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   42.428533][ T4296] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   42.430825][ T4296] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   42.433246][ T4296] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   42.452741][ T4386] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   42.467919][ T4386] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   42.500265][ T4386] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   42.519667][ T4386] EXT4-fs (loop2): 1 truncate cleaned up
[   42.521623][ T4386] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   42.531399][ T4390] loop3: detected capacity change from 0 to 64
[   42.563022][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   42.566444][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   42.568570][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   42.571900][ T4392] device bridge_slave_0 left promiscuous mode
[   42.574367][ T4392] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.614938][ T4393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   42.617581][ T4393] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   42.621758][ T4299] EXT4-fs (loop2): unmounting filesystem.
[   42.625955][ T4392] device bridge_slave_1 left promiscuous mode
[   42.627703][ T4392] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.679447][ T4397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   42.693746][ T4397] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   42.744317][ T4392] bond0: (slave bond_slave_0): Releasing backup interface
[   42.784768][ T4347] hid-generic 0002:0004:04C5.0001: item fetching failed at offset 2/5
[   42.787397][ T4347] hid-generic: probe of 0002:0004:04C5.0001 failed with error -22
[   42.797932][ T4392] bond0: (slave bond_slave_1): Releasing backup interface
[   42.885290][ T4392] team0: Port device team_slave_0 removed
[   42.909457][ T4392] team0: Port device team_slave_1 removed
[   42.911699][ T4392] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   42.916012][ T4392] batman_adv: batadv0: Removing interface: batadv_slave_0
[   42.920005][ T4392] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   42.922266][ T4392] batman_adv: batadv0: Removing interface: batadv_slave_1
[   43.010128][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   43.016630][ T4404] loop2: detected capacity change from 0 to 32768
[   43.029023][ T4404] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.12 (4404)
[   43.033523][   T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   43.039506][   T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   43.042221][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   43.051799][ T4404] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   43.055475][ T4404] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[   43.058005][ T4404] BTRFS info (device loop2): doing ref verification
[   43.059770][ T4404] BTRFS info (device loop2): force clearing of disk cache
[   43.061722][ T4404] BTRFS info (device loop2): allowing degraded mounts
[   43.063581][ T4404] BTRFS info (device loop2): disabling tree log
[   43.065507][ T4404] BTRFS info (device loop2): using free space tree
[   43.079954][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   43.082675][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   43.144278][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   43.146549][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   43.149719][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   43.176410][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   43.178598][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   43.191779][   T11] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x6683c582e6d194bc found 0xcf8164119813a55f level 0
[   43.196758][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   43.213186][ T4404] BTRFS warning (device loop2): couldn't read tree root
[   43.235217][ T4404] BTRFS error (device loop2): open_ctree failed: -22
[   43.304870][ T4424] device vlan2 entered promiscuous mode
[   43.401515][ T4428] loop0: detected capacity change from 0 to 1024
[   43.409363][ T4428] =======================================================
[   43.409363][ T4428] WARNING: The mand mount option has been deprecated and
[   43.409363][ T4428]          and is ignored by this kernel. Remove the mand
[   43.409363][ T4428]          option from the mount to silence this warning.
[   43.409363][ T4428] =======================================================
[   43.424349][ T4428] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   43.431728][ T4428] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c800e02c, mo2=0000]
[   43.454258][ T4302] Bluetooth: hci1: command 0x040f tx timeout
[   43.456013][ T4302] Bluetooth: hci0: command 0x040f tx timeout
[   43.503136][ T4428] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 2: comm syz.0.1: lblock 2 mapped to illegal pblock 2 (length 1)
[   43.542602][ T4313] Bluetooth: hci3: command 0x040f tx timeout
[   43.544007][ T4302] Bluetooth: hci2: command 0x040f tx timeout
[   43.544462][ T4313] Bluetooth: hci4: command 0x040f tx timeout
[   43.554163][ T4428] EXT4-fs (loop0): Remounting filesystem read-only
[   43.555988][ T4428] Quota error (device loop0): qtree_write_dquot: dquota write failed
[   43.558394][ T4428] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 48: comm syz.0.1: lblock 0 mapped to illegal pblock 48 (length 1)
[   43.564402][ T4428] EXT4-fs (loop0): Remounting filesystem read-only
[   43.566314][ T4428] Quota error (device loop0): v2_write_file_info: Can't write info structure
[   43.568887][ T4428] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.1: Failed to acquire dquot type 0
[   43.584250][ T4428] EXT4-fs (loop0): Remounting filesystem read-only
[   43.586219][ T4428] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5914: Corrupt filesystem
[   43.607896][ T4428] EXT4-fs (loop0): Remounting filesystem read-only
[   43.609899][ T4428] EXT4-fs error (device loop0): ext4_evict_inode:279: inode #11: comm syz.0.1: mark_inode_dirty error
[   43.641618][ T4428] EXT4-fs (loop0): Remounting filesystem read-only
[   43.643510][ T4428] EXT4-fs warning (device loop0): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[   43.674622][ T4428] EXT4-fs (loop0): 1 orphan inode deleted
[   43.676189][ T4428] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   43.690474][ T4440] loop2: detected capacity change from 0 to 64
[   43.703690][ T1853] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1)
[   43.709202][ T1853] EXT4-fs (loop0): Remounting filesystem read-only
[   43.710944][ T1853] Quota error (device loop0): remove_tree: Can't read quota data block 1
[   43.713257][ T1853] EXT4-fs error (device loop0): ext4_release_dquot:6850: comm kworker/u4:5: Failed to release dquot type 0
[   43.742027][ T4441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.747228][ T1853] EXT4-fs (loop0): Remounting filesystem read-only
[   43.750037][ T4441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.821411][ T4440] Trying to free block not in datazone
[   43.828916][ T4440] Trying to free block not in datazone
[   43.831420][ T4296] EXT4-fs (loop0): unmounting filesystem.
[   43.833291][ T4296] EXT4-fs error (device loop0): __ext4_get_inode_loc:4507: comm syz-executor: Invalid inode table block 1 in block_group 0
[   43.838077][ T4440] Trying to free block not in datazone
[   43.839835][ T4440] Trying to free block not in datazone
[   43.845629][ T4296] EXT4-fs (loop0): Remounting filesystem read-only
[   43.847384][ T4296] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5914: Corrupt filesystem
[   43.850344][ T4441] bridge0: port 3(vlan2) entered blocking state
[   43.855254][ T4440] Trying to free block not in datazone
[   43.856772][ T4440] minix_free_block (loop2:6): bit already cleared
[   43.858667][ T4440] Trying to free block not in datazone
[   43.860202][ T4440] Trying to free block not in datazone
[   43.861846][ T4441] bridge0: port 3(vlan2) entered disabled state
[   43.867835][ T4296] EXT4-fs (loop0): Remounting filesystem read-only
[   43.869688][ T4296] EXT4-fs error (device loop0): ext4_quota_off:7120: inode #3: comm syz-executor: mark_inode_dirty error
[   43.877550][ T4444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.880158][ T4444] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.883726][ T4440] Trying to free block not in datazone
[   43.887384][ T4296] EXT4-fs (loop0): Remounting filesystem read-only
[   43.973512][ T4444] loop1: detected capacity change from 0 to 4096
[   43.975500][ T4447] loop4: detected capacity change from 0 to 4096
[   43.988525][ T4450] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18'.
[   43.999152][ T4450] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18'.
[   44.006473][ T4445] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18'.
[   44.073955][ T4451] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   44.084175][ T4452] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   44.259429][ T4458] loop0: detected capacity change from 0 to 1024
[   44.303332][ T4458] EXT4-fs: Ignoring removed oldalloc option
[   44.312935][ T4458] EXT4-fs: Ignoring removed orlov option
[   44.318533][ T4456] loop2: detected capacity change from 0 to 40427
[   44.336377][ T4456] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   44.338567][ T4456] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   44.351544][ T4456] F2FS-fs (loop2): invalid crc value
[   44.381338][ T4456] F2FS-fs (loop2): Found nat_bits in checkpoint
[   44.403064][ T4458] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   44.420079][ T4469] loop4: detected capacity change from 0 to 64
[   44.427043][ T4456] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   44.429276][ T4456] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   44.519009][   T11] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   44.538151][   T11] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   44.562142][ T4469] capability: warning: `syz.4.25' uses deprecated v2 capabilities in a way that may be insecure
[   44.638272][ T4296] EXT4-fs (loop0): unmounting filesystem.
[   44.791375][ T4473] loop3: detected capacity change from 0 to 1024
[   44.798270][ T4477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   44.815092][ T4477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   44.831403][ T4473] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.29: bad orphan inode 196608
[   44.855606][ T4473] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   44.861524][ T4477] team0: No ports can be present during mode change
[   44.872759][ T4477] netlink: 'syz.2.26': attribute type 10 has an invalid length.
[   44.967586][ T4477] 8021q: adding VLAN 0 to HW filter on device bond0
[   44.980928][ T4477] team0: Port device bond0 added
[   44.998340][ T4483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26'.
[   45.050017][ T4306] EXT4-fs (loop3): unmounting filesystem.
[   45.319503][ T4491] loop4: detected capacity change from 0 to 32768
[   45.325677][ T4491] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.34 (4491)
[   45.332301][ T4491] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   45.335149][ T4491] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[   45.337630][ T4491] BTRFS info (device loop4): doing ref verification
[   45.339488][ T4491] BTRFS info (device loop4): force clearing of disk cache
[   45.341460][ T4491] BTRFS info (device loop4): allowing degraded mounts
[   45.343337][ T4491] BTRFS info (device loop4): disabling tree log
[   45.345301][ T4491] BTRFS info (device loop4): using free space tree
[   45.452266][   T11] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x6683c582e6d194bc found 0xcf8164119813a55f level 0
[   45.457585][ T4491] BTRFS warning (device loop4): couldn't read tree root
[   45.473102][ T4491] BTRFS error (device loop4): open_ctree failed: -22
[   45.543931][ T4313] Bluetooth: hci0: command 0x0419 tx timeout
[   45.545761][ T4313] Bluetooth: hci1: command 0x0419 tx timeout
[   45.552856][ T4288] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by udevd (4288)
[   45.614598][ T4297] Bluetooth: hci2: command 0x0419 tx timeout
[   45.616331][ T4297] Bluetooth: hci3: command 0x0419 tx timeout
[   45.625846][ T4313] Bluetooth: hci4: command 0x0419 tx timeout
[   46.766691][ T4534] loop1: detected capacity change from 0 to 4096
[   46.817794][ T4535] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   46.820571][ T4530] loop4: detected capacity change from 0 to 40427
[   46.824617][ T4530] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   46.826696][ T4530] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   46.832254][ T4530] F2FS-fs (loop4): invalid crc value
[   46.871511][ T4530] F2FS-fs (loop4): Found nat_bits in checkpoint
[   46.874892][ T4483] team0 (unregistering): Port device team_slave_0 removed
[   46.888997][ T4483] team0 (unregistering): Port device team_slave_1 removed
[   46.921755][ T4530] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   46.923756][ T4530] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   46.924978][ T4483] team0 (unregistering): Port device bond0 removed
[   46.999816][ T4492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.32'.
[   47.005008][ T4492] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   47.061333][    T9] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   47.080452][    T9] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   47.106280][ T4492] batman_adv: batadv0: Removing interface: batadv_slave_0
[   47.233279][ T4546] device vlan2 entered promiscuous mode
[   47.354360][ T4552] loop0: detected capacity change from 0 to 1024
[   47.414461][ T4556] loop3: detected capacity change from 0 to 64
[   47.489992][ T4552] EXT4-fs: Ignoring removed oldalloc option
[   47.491758][ T4552] EXT4-fs: Ignoring removed orlov option
[   48.354021][ T4552] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   48.417192][ T4574] loop2: detected capacity change from 0 to 1024
[   48.443297][ T4572] loop3: detected capacity change from 0 to 4096
[   48.457608][ T4296] EXT4-fs (loop0): unmounting filesystem.
[   48.463371][ T4576] loop4: detected capacity change from 0 to 1024
[   48.471550][ T4574] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.51: bad orphan inode 196608
[   48.500197][ T4574] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   48.512093][ T4576] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   48.530012][ T4576] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c800e02c, mo2=0000]
[   48.537664][ T4581] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   48.580814][ T4576] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 2: comm syz.4.54: lblock 2 mapped to illegal pblock 2 (length 1)
[   48.594130][ T4576] EXT4-fs (loop4): Remounting filesystem read-only
[   48.596068][ T4576] Quota error (device loop4): qtree_write_dquot: dquota write failed
[   48.598309][ T4576] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 48: comm syz.4.54: lblock 0 mapped to illegal pblock 48 (length 1)
[   48.637448][ T4587] loop0: detected capacity change from 0 to 128
[   48.649710][ T4576] EXT4-fs (loop4): Remounting filesystem read-only
[   48.651525][ T4576] Quota error (device loop4): v2_write_file_info: Can't write info structure
[   48.654312][ T4576] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.54: Failed to acquire dquot type 0
[   48.659741][ T4576] EXT4-fs (loop4): Remounting filesystem read-only
[   48.693997][ T4576] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5914: Corrupt filesystem
[   48.696711][ T4576] EXT4-fs (loop4): Remounting filesystem read-only
[   48.698771][ T4576] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #11: comm syz.4.54: mark_inode_dirty error
[   48.709517][ T4576] EXT4-fs (loop4): Remounting filesystem read-only
[   48.711507][ T4576] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[   48.719062][ T4576] EXT4-fs (loop4): 1 orphan inode deleted
[   48.720834][ T4576] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   48.734904][ T4362] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1)
[   48.739243][ T4362] EXT4-fs (loop4): Remounting filesystem read-only
[   48.742427][ T4362] Quota error (device loop4): remove_tree: Can't read quota data block 1
[   48.749419][ T4592] netlink: 'syz.1.59': attribute type 10 has an invalid length.
[   48.759665][ T4362] EXT4-fs error (device loop4): ext4_release_dquot:6850: comm kworker/u4:6: Failed to release dquot type 0
[   48.772181][ T4362] EXT4-fs (loop4): Remounting filesystem read-only
[   48.828667][ T4308] EXT4-fs (loop4): unmounting filesystem.
[   48.837837][ T4299] EXT4-fs (loop2): unmounting filesystem.
[   48.840025][ T4308] EXT4-fs error (device loop4): __ext4_get_inode_loc:4507: comm syz-executor: Invalid inode table block 1 in block_group 0
[   48.849328][ T4308] EXT4-fs (loop4): Remounting filesystem read-only
[   48.870100][ T4308] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5914: Corrupt filesystem
[   48.880229][ T4308] EXT4-fs (loop4): Remounting filesystem read-only
[   48.882090][ T4308] EXT4-fs error (device loop4): ext4_quota_off:7120: inode #3: comm syz-executor: mark_inode_dirty error
[   48.922563][ T4308] EXT4-fs (loop4): Remounting filesystem read-only
[   50.022263][ T4617] loop0: detected capacity change from 0 to 1024
[   50.025957][ T4617] EXT4-fs: Ignoring removed oldalloc option
[   50.027991][ T4617] EXT4-fs: Ignoring removed orlov option
[   50.064821][ T4619] loop3: detected capacity change from 0 to 4096
[   50.069882][ T4617] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   50.126069][ T4624] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   50.150250][ T4623] team0: No ports can be present during mode change
[   50.170936][ T4623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.69'.
[   50.221112][ T4626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.223473][ T4626] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   50.269683][ T4296] EXT4-fs (loop0): unmounting filesystem.
[   50.563581][ T4644] loop0: detected capacity change from 0 to 64
[   51.471128][ T4655] loop2: detected capacity change from 0 to 1024
[   51.480901][ T4655] EXT4-fs: Ignoring removed oldalloc option
[   51.482841][ T4655] EXT4-fs: Ignoring removed orlov option
[   51.493580][ T4656] loop1: detected capacity change from 0 to 4096
[   51.522970][ T4662] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   51.532192][ T4655] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   51.633103][ T4299] EXT4-fs (loop2): unmounting filesystem.
[   51.849484][ T4623] team0 (unregistering): Port device team_slave_0 removed
[   51.882619][ T4623] team0 (unregistering): Port device team_slave_1 removed
[   52.823527][ T4686] loop1: detected capacity change from 0 to 4096
[   52.852746][ T4689] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   52.949122][ T4696] loop3: detected capacity change from 0 to 1024
[   52.951594][ T4696] EXT4-fs: Ignoring removed oldalloc option
[   52.953310][ T4696] EXT4-fs: Ignoring removed orlov option
[   52.988528][ T4699] loop2: detected capacity change from 0 to 128
[   53.023231][ T4705] loop4: detected capacity change from 0 to 64
[   53.031530][ T4706] loop0: detected capacity change from 0 to 64
[   53.037950][ T4696] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   53.240477][ T4712] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.105'.
[   53.312804][ T4306] EXT4-fs (loop3): unmounting filesystem.
[   54.187296][ T4721] team0: No ports can be present during mode change
[   54.204229][ T4721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.108'.
[   54.322650][ T4724] loop0: detected capacity change from 0 to 4096
[   54.370017][ T4734] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   54.696678][ T4747] loop0: detected capacity change from 0 to 64
[   54.909406][ T4721] team0 (unregistering): Port device team_slave_0 removed
[   54.930273][ T4721] team0 (unregistering): Port device team_slave_1 removed
[   54.970103][ T4730] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0
[   55.211279][ T4757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   55.232706][ T4757] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   55.265305][ T4758] loop4: detected capacity change from 0 to 1024
[   55.267993][ T4758] EXT4-fs: Ignoring removed oldalloc option
[   55.269650][ T4758] EXT4-fs: Ignoring removed orlov option
[   55.277012][ T4758] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   55.299728][ T4765] netlink: 'syz.1.127': attribute type 10 has an invalid length.
[   55.301927][ T4765] netlink: 40 bytes leftover after parsing attributes in process `syz.1.127'.
[   56.014497][ T4765] batman_adv: batadv0: Adding interface: veth0_vlan
[   56.016535][ T4765] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.062175][ T4765] batman_adv: batadv0: Interface activated: veth0_vlan
[   56.180865][ T4308] EXT4-fs (loop4): unmounting filesystem.
[   56.214019][ T4775] loop1: detected capacity change from 0 to 64
[   56.304771][ T4782] netlink: 'syz.2.134': attribute type 10 has an invalid length.
[   56.316539][ T4782] bond0: (slave bond_slave_0): Releasing backup interface
[   56.392410][ T4784] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0
[   56.487371][ T4786] team0: Mode changed to "loadbalance"
[   56.512326][ T4789] loop2: detected capacity change from 0 to 128
[   56.519333][ T4787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.136'.
[   57.809991][ T4806] loop2: detected capacity change from 0 to 1024
[   57.812322][ T4806] EXT4-fs: Ignoring removed oldalloc option
[   57.823530][ T4806] EXT4-fs: Ignoring removed orlov option
[   57.851492][ T4808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.862359][ T4808] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.888144][ T4806] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   57.968556][ T4299] EXT4-fs (loop2): unmounting filesystem.
[   58.653989][ T4821] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0
[   58.800601][ T4827] loop4: detected capacity change from 0 to 128
[   59.813073][ T4302] Bluetooth: hci5: command 0x1003 tx timeout
[   59.816003][ T4297] Bluetooth: hci5: Opcode 0x1003 failed: -110
[   59.828266][ T4841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.831944][ T4841] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   61.561026][ T4892] loop2: detected capacity change from 0 to 128
[   61.795479][ T4902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   61.814770][ T4902] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   62.042544][ T4913] loop1: detected capacity change from 0 to 64
[   62.372484][ T4924] loop4: detected capacity change from 0 to 128
[   62.832193][ T4945] loop2: detected capacity change from 0 to 64
[   62.841678][ T4948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   62.869001][ T4347] hid-generic 0002:0004:04C5.0002: item fetching failed at offset 2/3
[   62.871617][ T4347] hid-generic: probe of 0002:0004:04C5.0002 failed with error -22
[   62.926231][ T4948] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   63.180353][   T27] audit: type=1326 audit(63.150:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4959 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5a7a8 code=0x7ffc0000
[   63.186336][   T27] audit: type=1326 audit(63.150:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4959 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5a7a8 code=0x7ffc0000
[   63.191933][   T27] audit: type=1326 audit(63.150:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4959 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=61 compat=0 ip=0xffff91b5a7a8 code=0x7ffc0000
[   63.208116][   T27] audit: type=1326 audit(63.150:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4959 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5a7a8 code=0x7ffc0000
[   63.219420][   T27] audit: type=1326 audit(63.150:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4959 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5a7a8 code=0x7ffc0000
[   63.247755][ T4968] loop3: detected capacity change from 0 to 64
[   63.576027][ T4344] hid-generic 0002:0004:04C5.0003: hidraw0: <UNKNOWN> HID v8.02 Device [syz0] on syz0
[   63.707051][ T4984] fido_id[4984]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   63.848165][ T5000] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0
[   63.960302][ T5003] loop3: detected capacity change from 0 to 64
[   64.005794][ T5008] loop1: detected capacity change from 0 to 512
[   64.044655][ T5010] process 'syz.0.231' launched './file1' with NULL argv: empty string added
[   64.252485][ T5008] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.229: Parent and EA inode have the same ino 15
[   64.409260][ T5008] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.229: Parent and EA inode have the same ino 15
[   64.418065][ T5008] EXT4-fs (loop1): 1 orphan inode deleted
[   64.419661][ T5008] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   64.496146][ T2059] ieee802154 phy0 wpan0: encryption failed: -22
[   64.498123][ T2059] ieee802154 phy1 wpan1: encryption failed: -22
[   64.543070][ T4300] EXT4-fs (loop1): unmounting filesystem.
[   64.547028][ T4347] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   64.643063][ T5030] loop3: detected capacity change from 0 to 512
[   64.661460][ T5030] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   64.673926][ T5030] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   64.695257][ T5030] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.239: invalid indirect mapped block 4294967295 (level 1)
[   64.701393][ T5030] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.239: invalid indirect mapped block 4294967295 (level 1)
[   64.707598][ T5030] EXT4-fs (loop3): 2 truncates cleaned up
[   64.711519][ T5030] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   64.750826][ T4347] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   64.753907][ T4347] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   64.758067][ T4347] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   64.760614][ T4347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   64.762930][ T4347] usb 1-1: SerialNumber: syz
[   64.787916][ T4306] EXT4-fs (loop3): unmounting filesystem.
[   64.890183][ T5039] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0
[   64.983835][   T27] audit: type=1326 audit(64.950:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5043 comm="syz.1.243" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb015a7a8 code=0x7ffc0000
[   64.990065][   T27] audit: type=1326 audit(64.950:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5043 comm="syz.1.243" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb015a7a8 code=0x7ffc0000
[   64.997078][   T27] audit: type=1326 audit(64.950:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5043 comm="syz.1.243" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb015a7a8 code=0x7ffc0000
[   65.004373][   T27] audit: type=1326 audit(64.950:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5043 comm="syz.1.243" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb015a7a8 code=0x7ffc0000
[   65.010459][   T27] audit: type=1326 audit(64.950:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5043 comm="syz.1.243" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb015a7a8 code=0x7ffc0000
[   65.047159][ T4347] usb 1-1: 0:2 : does not exist
[   65.079101][ T4347] usb 1-1: USB disconnect, device number 2
[   65.316649][ T4482] udevd[4482]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   65.600986][ T5064] lo speed is unknown, defaulting to 1000
[   65.603251][ T5064] lo speed is unknown, defaulting to 1000
[   65.658021][ T5064] lo speed is unknown, defaulting to 1000
[   65.677478][ T5064] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   65.700274][ T5064] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   65.762019][ T5064] lo speed is unknown, defaulting to 1000
[   65.767952][ T5064] lo speed is unknown, defaulting to 1000
[   65.772422][ T5064] lo speed is unknown, defaulting to 1000
[   65.778925][ T5064] lo speed is unknown, defaulting to 1000
[   65.793032][ T5064] lo speed is unknown, defaulting to 1000
[   65.802344][ T5064] lo speed is unknown, defaulting to 1000
[   65.885492][ T5077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.887967][ T5077] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.893355][ T5078] loop0: detected capacity change from 0 to 512
[   65.905875][ T5078] EXT4-fs: Ignoring removed mblk_io_submit option
[   65.907645][ T5078] ext4: Unknown parameter 'seclabel'
[   65.963677][ T5085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.258'.
[   66.069639][ T5087] loop4: detected capacity change from 0 to 2048
[   67.492942][ T5121] loop4: detected capacity change from 0 to 512
[   67.512676][ T5121] EXT4-fs: Ignoring removed oldalloc option
[   67.578399][ T5121] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.274: Parent and EA inode have the same ino 15
[   67.672593][ T5121] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.274: Parent and EA inode have the same ino 15
[   67.679422][ T5121] EXT4-fs (loop4): 1 orphan inode deleted
[   67.681150][ T5121] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   67.692265][ T5132] loop2: detected capacity change from 0 to 2048
[   67.753304][ T5138] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   67.761276][ T4308] EXT4-fs (loop4): unmounting filesystem.
[   67.771039][ T5132] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   67.839749][ T4299] EXT4-fs (loop2): unmounting filesystem.
[   67.925943][ T5135] netlink: 'syz.1.273': attribute type 21 has an invalid length.
[   68.143836][ T5145] loop4: detected capacity change from 0 to 512
[   68.461621][ T5145] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   69.104031][ T4343] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   69.413791][    C0] sched: RT throttling activated
[   69.419161][ T4343] usb 1-1: Using ep0 maxpacket: 32
[   69.480508][ T4343] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[   69.482770][ T4343] usb 1-1: config 0 has no interface number 0
[   69.484838][ T4343] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   69.487876][ T4343] usb 1-1: config 0 interface 85 has no altsetting 0
[   70.211231][   T14] cfg80211: failed to load regulatory.db
[   70.214229][ T5128] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set
[   70.619388][ T4343] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[   70.621939][ T4343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.624210][ T4343] usb 1-1: Product: syz
[   70.625335][ T4343] usb 1-1: Manufacturer: syz
[   70.626510][ T4343] usb 1-1: SerialNumber: syz
[   70.646090][ T4343] usb 1-1: config 0 descriptor??
[   71.073157][ T4308] EXT4-fs (loop4): unmounting filesystem.
[   71.221817][ T4343] appletouch 1-1:0.85: Failed to read mode from device.
[   71.224118][ T4343] appletouch: probe of 1-1:0.85 failed with error -5
[   71.233253][ T4343] usb 1-1: USB disconnect, device number 3
[   71.416211][ T5173] netlink: 24 bytes leftover after parsing attributes in process `syz.3.292'.
[   71.599405][ T5173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.292'.
[   71.612753][   T27] kauditd_printk_skb: 59 callbacks suppressed
[   71.612765][   T27] audit: type=1326 audit(71.580:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5180 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb015a7a8 code=0x7ffc0000
[   71.631549][   T27] audit: type=1326 audit(71.600:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5180 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb015a7a8 code=0x7ffc0000
[   71.638182][   T27] audit: type=1326 audit(71.610:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5180 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb015a7a8 code=0x7ffc0000
[   71.651678][   T27] audit: type=1326 audit(71.610:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5180 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb015a7a8 code=0x7ffc0000
[   71.661005][   T27] audit: type=1326 audit(71.610:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5180 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb015a7a8 code=0x7ffc0000
[   71.678058][   T27] audit: type=1326 audit(71.610:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5180 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb015a7a8 code=0x7ffc0000
[   71.692024][   T27] audit: type=1326 audit(71.610:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5180 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb015a7a8 code=0x7ffc0000
[   71.701587][   T27] audit: type=1326 audit(71.620:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5180 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb015a7a8 code=0x7ffc0000
[   71.711700][   T27] audit: type=1326 audit(71.620:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5180 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb015a7a8 code=0x7ffc0000
[   71.721385][   T27] audit: type=1326 audit(71.620:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5180 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb015a7a8 code=0x7ffc0000
[   71.730646][ T5183] loop4: detected capacity change from 0 to 1024
[   71.855296][ T5183] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   72.110668][ T5194] loop2: detected capacity change from 0 to 512
[   72.117258][ T5194] EXT4-fs: Ignoring removed orlov option
[   72.326414][ T5194] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.295: bad orphan inode 67108864
[   72.330854][ T5194] EXT4-fs (loop2): Remounting filesystem read-only
[   72.332678][ T5194] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   72.605098][ T5191] loop1: detected capacity change from 0 to 512
[   72.607437][ T5191] journal_path: Lookup failure for './file0/../file0'
[   72.733955][ T5191] EXT4-fs: error: could not find journal device path
[   72.785905][ T4299] EXT4-fs (loop2): unmounting filesystem.
[   72.872994][ T4308] EXT4-fs (loop4): unmounting filesystem.
[   73.088938][ T5211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   73.092715][ T5211] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   76.127885][ T5208] loop2: detected capacity change from 0 to 512
[   76.196393][ T5208] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   76.207176][ T5208] EXT4-fs (loop2): orphan cleanup on readonly fs
[   76.212581][ T5208] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.300: Failed to acquire dquot type 1
[   76.219590][ T5208] EXT4-fs (loop2): 1 truncate cleaned up
[   76.222653][ T5208] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   76.247399][ T5208] lo speed is unknown, defaulting to 1000
[   76.495155][ T4299] EXT4-fs (loop2): unmounting filesystem.
[   76.580372][ T5226] loop0: detected capacity change from 0 to 1024
[   76.585761][ T5226] EXT4-fs: Ignoring removed bh option
[   76.588502][ T5224] netlink: 48 bytes leftover after parsing attributes in process `syz.4.305'.
[   76.625856][ T5229] IPv4: Oversized IP packet from 127.202.26.0
[   76.639114][ T5226] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   76.893997][ T5235] random: crng reseeded on system resumption
[   76.913421][ T4296] EXT4-fs (loop0): unmounting filesystem.
[   77.086567][ T5243] loop2: detected capacity change from 0 to 64
[   77.289894][ T5248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.317'.
[   78.002780][ T5248] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   78.095789][ T5248] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   78.173525][ T5257] loop1: detected capacity change from 0 to 64
[   78.216975][ T5258] loop4: detected capacity change from 0 to 128
[   78.298466][ T5264] netlink: 16 bytes leftover after parsing attributes in process `syz.1.323'.
[   78.381504][ T5266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.324'.
[   78.386670][ T5266] device vlan4 entered promiscuous mode
[   78.388480][ T5266] device ip6gretap0 entered promiscuous mode
[   78.831947][ T5283] loop1: detected capacity change from 0 to 64
[   79.027243][ T5285] loop2: detected capacity change from 0 to 512
[   79.147832][ T5285] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   79.280411][ T5285] EXT4-fs (loop2): 1 truncate cleaned up
[   79.282079][ T5285] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   79.926679][ T5294] loop0: detected capacity change from 0 to 64
[   80.078862][ T5296] loop4: detected capacity change from 0 to 1024
[   80.104557][ T5296] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   80.171656][ T5299] loop0: detected capacity change from 0 to 128
[   80.185173][ T5296] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   80.260892][ T5299] 9pnet_fd: Insufficient options for proto=fd
[   80.347034][ T4308] EXT4-fs (loop4): unmounting filesystem.
[   80.945358][ T5308] loop0: detected capacity change from 0 to 512
[   80.953007][ T5308] EXT4-fs: Ignoring removed oldalloc option
[   80.954995][ T5308] EXT4-fs: Ignoring removed mblk_io_submit option
[   81.416396][ T5304] loop4: detected capacity change from 0 to 512
[   81.445410][ T5308] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   81.514176][ T5307] loop1: detected capacity change from 0 to 512
[   81.533373][ T5304] EXT2-fs (loop4): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[   81.566967][ T5308] EXT4-fs (loop0): orphan cleanup on readonly fs
[   81.574701][ T5308] __quota_error: 8 callbacks suppressed
[   81.574714][ T5308] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5
[   81.579087][ T5308] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[   81.581704][ T5308] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.337: Failed to acquire dquot type 1
[   81.586566][ T5308] EXT4-fs (loop0): 1 truncate cleaned up
[   81.588494][ T5308] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   81.610136][ T4299] EXT4-fs (loop2): unmounting filesystem.
[   81.631033][ T5304] EXT2-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended
[   81.661630][ T5304] EXT2-fs (loop4): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[   81.713284][ T5304] syz.4.336: attempt to access beyond end of device
[   81.713284][ T5304] loop4: rw=0, sector=1022032, nr_sectors = 8 limit=512
[   81.769623][ T5319] syz.4.336: attempt to access beyond end of device
[   81.769623][ T5319] loop4: rw=0, sector=1022032, nr_sectors = 8 limit=512
[   81.791464][ T4296] EXT4-fs (loop0): unmounting filesystem.
[   81.872679][ T5307] EXT4-fs (loop1): 1 orphan inode deleted
[   81.889920][ T4610] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   81.892630][ T4610] EXT4-fs error (device loop1): ext4_release_dquot:6850: comm kworker/u4:11: Failed to release dquot type 1
[   81.907730][ T5307] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   82.006297][ T5325] loop0: detected capacity change from 0 to 1024
[   82.008639][ T5325] EXT4-fs: Ignoring removed oldalloc option
[   82.010280][ T5325] EXT4-fs: Ignoring removed orlov option
[   82.092715][ T4300] EXT4-fs (loop1): unmounting filesystem.
[   82.101300][ T5325] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   82.142297][ T5332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   82.145106][ T5332] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   82.147564][ T5333] loop4: detected capacity change from 0 to 64
[   82.281182][ T5340] Zero length message leads to an empty skb
[   82.326304][ T5340] loop3: detected capacity change from 0 to 512
[   82.349922][ T5340] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   82.510361][ T5340] EXT4-fs (loop3): orphan cleanup on readonly fs
[   82.520900][ T5340] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5
[   82.523867][ T5340] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[   82.526389][ T5340] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.349: Failed to acquire dquot type 1
[   82.541322][ T5340] EXT4-fs (loop3): 1 truncate cleaned up
[   82.544560][ T5340] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   82.762390][ T5340] lo speed is unknown, defaulting to 1000
[   83.398466][ T4296] EXT4-fs (loop0): unmounting filesystem.
[   83.441695][ T5332] loop2: detected capacity change from 0 to 4096
[   84.454091][ T5347] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   84.853363][ T5353] loop1: detected capacity change from 0 to 8192
[   84.859050][ T5353] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   85.107372][ T4306] EXT4-fs (loop3): unmounting filesystem.
[   85.258537][ T5364] siw: device registration error -23
[   85.259553][ T5366] IPv6: sit1: Disabled Multicast RS
[   86.464472][ T5384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   86.468156][ T5384] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   86.530330][ T5389] netlink: 'syz.2.364': attribute type 10 has an invalid length.
[   86.542424][ T5389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.364'.
[   86.657229][ T5394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.369'.
[   86.864220][ T5400] loop3: detected capacity change from 0 to 1024
[   86.877223][ T5400] EXT4-fs: Ignoring removed oldalloc option
[   86.878940][ T5400] EXT4-fs: Ignoring removed orlov option
[   86.910380][ T5402] loop4: detected capacity change from 0 to 2048
[   86.925799][ T5400] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   87.018707][ T5402] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   87.136960][ T4308] EXT4-fs (loop4): unmounting filesystem.
[   87.209699][ T4306] EXT4-fs (loop3): unmounting filesystem.
[   87.238063][ T5413] loop0: detected capacity change from 0 to 128
[   87.272831][ T5411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.282687][ T5411] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.441203][ T5411] loop2: detected capacity change from 0 to 4096
[   87.517206][ T5423] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   88.459966][   T27] audit: type=1326 audit(88.430:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5427 comm="syz.3.381" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb015a7a8 code=0x7ffc0000
[   88.474375][   T27] audit: type=1326 audit(88.450:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5427 comm="syz.3.381" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffffb015a7a8 code=0x7ffc0000
[   88.481895][   T27] audit: type=1326 audit(88.450:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5427 comm="syz.3.381" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb015a7a8 code=0x7ffc0000
[   88.491268][   T27] audit: type=1326 audit(88.460:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5427 comm="syz.3.381" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb015a7a8 code=0x7ffc0000
[   88.516914][ T5433] loop4: detected capacity change from 0 to 2048
[   88.766696][ T5443] loop3: detected capacity change from 0 to 1024
[   88.777747][ T5443] EXT4-fs: Ignoring removed oldalloc option
[   88.778671][ T4377] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   88.779471][ T5443] EXT4-fs: Ignoring removed orlov option
[   88.813028][ T5443] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   88.880573][ T4306] EXT4-fs (loop3): unmounting filesystem.
[   88.953913][ T4377] usb 1-1: Using ep0 maxpacket: 32
[   88.957458][ T4377] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[   88.959685][ T4377] usb 1-1: config 0 has no interface number 0
[   88.961312][ T4377] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   88.974550][ T4377] usb 1-1: config 0 interface 85 has no altsetting 0
[   88.978288][ T4377] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[   88.980826][ T4377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.982973][ T4377] usb 1-1: Product: syz
[   88.992933][ T5447] loop3: detected capacity change from 0 to 128
[   88.994764][ T4377] usb 1-1: Manufacturer: syz
[   88.996007][ T4377] usb 1-1: SerialNumber: syz
[   88.998970][ T4377] usb 1-1: config 0 descriptor??
[   89.053968][ T4302] Bluetooth: hci5: command 0x1003 tx timeout
[   89.056782][ T4297] Bluetooth: hci5: Opcode 0x1003 failed: -110
[   90.171522][ T5471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.180259][ T5471] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.222756][ T5471] loop4: detected capacity change from 0 to 4096
[   90.225298][ T5435] team0: No ports can be present during mode change
[   90.227639][ T5474] netlink: 'syz.0.384': attribute type 10 has an invalid length.
[   90.251417][ T5476] loop1: detected capacity change from 0 to 1024
[   90.269630][ T5474] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.278758][ T5476] EXT4-fs: Ignoring removed oldalloc option
[   90.280507][ T5476] EXT4-fs: Ignoring removed orlov option
[   90.289491][ T5474] team0: Port device bond0 added
[   90.298881][ T5435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.384'.
[   90.308302][ T5477] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   90.369301][ T5476] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   90.437421][ T4300] EXT4-fs (loop1): unmounting filesystem.
[   90.555730][ T5488] loop2: detected capacity change from 0 to 1024
[   90.580586][ T5488] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   90.590233][ T5488] EXT4-fs (loop2): orphan cleanup on readonly fs
[   90.598805][ T5488] EXT4-fs error (device loop2): __ext4_get_inode_loc:4507: comm syz.2.405: Invalid inode table block 0 in block_group 0
[   90.621924][ T5488] EXT4-fs (loop2): Remounting filesystem read-only
[   90.628850][ T5488] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5914: Corrupt filesystem
[   91.283331][ T5488] EXT4-fs (loop2): Remounting filesystem read-only
[   91.285346][ T5488] EXT4-fs error (device loop2): ext4_quota_write:7226: inode #3: comm syz.2.405: mark_inode_dirty error
[   91.290398][ T5488] EXT4-fs (loop2): Remounting filesystem read-only
[   91.292184][ T5488] Quota error (device loop2): write_blk: dquota write failed
[   91.298598][ T5488] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   91.301285][ T5488] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.405: Failed to acquire dquot type 0
[   91.314423][ T5488] EXT4-fs (loop2): Remounting filesystem read-only
[   91.314997][ T5496] loop1: detected capacity change from 0 to 2048
[   91.318137][ T5488] EXT4-fs error (device loop2): __ext4_get_inode_loc:4507: comm syz.2.405: Invalid inode table block 0 in block_group 0
[   91.335726][ T5488] EXT4-fs (loop2): Remounting filesystem read-only
[   91.337536][ T5488] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5914: Corrupt filesystem
[   91.359911][ T5488] EXT4-fs (loop2): Remounting filesystem read-only
[   91.361806][ T5488] EXT4-fs error (device loop2): ext4_ext_truncate:4453: inode #15: comm syz.2.405: mark_inode_dirty error
[   91.371180][ T5488] EXT4-fs (loop2): Remounting filesystem read-only
[   91.394819][ T5488] EXT4-fs error (device loop2): __ext4_get_inode_loc:4507: comm syz.2.405: Invalid inode table block 0 in block_group 0
[   91.409760][ T5488] EXT4-fs (loop2): Remounting filesystem read-only
[   91.419874][ T5488] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5914: Corrupt filesystem
[   91.422871][ T5488] EXT4-fs (loop2): Remounting filesystem read-only
[   91.427690][ T5488] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[   91.430337][ T5488] EXT4-fs (loop2): Remounting filesystem read-only
[   91.433058][ T5488] EXT4-fs error (device loop2): __ext4_get_inode_loc:4507: comm syz.2.405: Invalid inode table block 0 in block_group 0
[   91.438119][ T5488] EXT4-fs (loop2): Remounting filesystem read-only
[   91.439960][ T5488] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5914: Corrupt filesystem
[   91.442663][ T5488] EXT4-fs (loop2): Remounting filesystem read-only
[   91.444583][ T5488] EXT4-fs error (device loop2): ext4_truncate:4312: inode #15: comm syz.2.405: mark_inode_dirty error
[   91.448176][ T5488] EXT4-fs (loop2): Remounting filesystem read-only
[   91.450084][ T5488] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[   91.452780][ T5488] EXT4-fs (loop2): Remounting filesystem read-only
[   91.475092][ T5488] EXT4-fs (loop2): 1 truncate cleaned up
[   91.498242][ T5488] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   91.553226][ T4299] EXT4-fs (loop2): unmounting filesystem.
[   92.638449][ T5435] team0 (unregistering): Port device team_slave_0 removed
[   92.653313][ T5435] team0 (unregistering): Port device team_slave_1 removed
[   92.668897][ T5510] loop1: detected capacity change from 0 to 8192
[   92.693059][ T5435] team0 (unregistering): Port device bond0 removed
[   92.706133][ T5508] loop2: detected capacity change from 0 to 2048
[   92.756298][ T5508] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   92.785215][ T5492] lo speed is unknown, defaulting to 1000
[   92.936498][ T4377] appletouch 1-1:0.85: Failed to request geyser raw mode
[   92.938520][ T4377] appletouch: probe of 1-1:0.85 failed with error -5
[   92.950330][ T4377] usb 1-1: USB disconnect, device number 4
[   93.085684][ T4299] EXT4-fs (loop2): unmounting filesystem.
[   93.103139][ T5522] 9pnet_fd: Insufficient options for proto=fd
[   93.104211][ T5523] loop3: detected capacity change from 0 to 1024
[   93.109147][ T5523] EXT4-fs: Ignoring removed oldalloc option
[   93.110906][ T5523] EXT4-fs: Ignoring removed orlov option
[   93.180205][ T5523] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   93.305175][ T4306] EXT4-fs (loop3): unmounting filesystem.
[   94.312971][ T5251] Bluetooth: Error in BCSP hdr checksum
[   94.397638][ T5544] 9pnet_fd: Insufficient options for proto=fd
[   94.457786][ T5547] loop0: detected capacity change from 0 to 512
[   94.482133][ T5546] netlink: 'syz.3.422': attribute type 1 has an invalid length.
[   94.553087][ T5547] EXT4-fs (loop0): 1 orphan inode deleted
[   94.559727][ T5547] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   94.564311][ T4769] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   94.567024][ T4769] EXT4-fs error (device loop0): ext4_release_dquot:6850: comm kworker/u4:13: Failed to release dquot type 1
[   94.635332][ T5546] 8021q: adding VLAN 0 to HW filter on device bond1
[   94.655782][ T5558] netlink: 'syz.2.426': attribute type 1 has an invalid length.
[   94.656217][ T5553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.422'.
[   94.660544][ T5558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.426'.
[   94.664401][ T5559] 9pnet_fd: Insufficient options for proto=fd
[   94.680207][ T5553] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   94.698138][ T5553] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   94.705628][ T5553] bond1: (slave ipvlan2): Error -95 calling set_mac_address
[   94.822050][ T5563] loop2: detected capacity change from 0 to 1024
[   94.829943][ T5563] EXT4-fs: Ignoring removed oldalloc option
[   94.831698][ T5563] EXT4-fs: Ignoring removed orlov option
[   94.868028][ T5563] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   94.970833][ T4299] EXT4-fs (loop2): unmounting filesystem.
[   95.047524][ T5569] loop3: detected capacity change from 0 to 1024
[   95.134373][ T5569] EXT4-fs: inline encryption not supported
[   95.136052][ T5569] EXT4-fs: Ignoring removed i_version option
[   95.196930][ T5569] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   95.199701][ T5569] EXT4-fs (loop3): orphan cleanup on readonly fs
[   95.208417][ T5569] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 2: comm syz.3.430: lblock 2 mapped to illegal pblock 2 (length 1)
[   95.212374][ T5569] Quota error (device loop3): qtree_write_dquot: dquota write failed
[   95.234033][ T5569] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 48: comm syz.3.430: lblock 0 mapped to illegal pblock 48 (length 1)
[   95.665486][ T4302] Bluetooth: hci5: command 0x1003 tx timeout
[   95.668888][ T4297] Bluetooth: hci5: Opcode 0x1003 failed: -110
[   96.038746][ T5569] Quota error (device loop3): v2_write_file_info: Can't write info structure
[   96.041149][ T5569] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.430: Failed to acquire dquot type 0
[   96.082026][ T5581] netlink: 72 bytes leftover after parsing attributes in process `syz.2.433'.
[   96.083994][ T5569] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5914: Corrupt filesystem
[   96.091594][ T5569] EXT4-fs error (device loop3): ext4_evict_inode:279: inode #11: comm syz.3.430: mark_inode_dirty error
[   96.108124][ T5569] EXT4-fs warning (device loop3): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[   96.122713][ T5569] EXT4-fs (loop3): 1 orphan inode deleted
[   96.129275][    T9] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1)
[   96.133443][    T9] Quota error (device loop3): remove_tree: Can't read quota data block 1
[   96.140200][    T9] EXT4-fs error (device loop3): ext4_release_dquot:6850: comm kworker/u4:0: Failed to release dquot type 0
[   96.143673][ T5569] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   96.186452][ T5569] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 16: comm syz.3.430: lblock 0 mapped to illegal pblock 16 (length 1)
[   96.220719][ T5583] mmap: syz.2.435 (5583) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   96.225544][ T5569] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 16: comm syz.3.430: lblock 0 mapped to illegal pblock 16 (length 1)
[   96.240000][ T4296] EXT4-fs (loop0): unmounting filesystem.
[   96.415223][ T4306] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1)
[   96.518208][ T5591] loop0: detected capacity change from 0 to 8192
[   96.535044][   T27] audit: type=1326 audit(96.510:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5592 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5a7a8 code=0x7ffc0000
[   96.542230][   T27] audit: type=1326 audit(96.510:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5592 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5a7a8 code=0x7ffc0000
[   96.551799][   T27] audit: type=1326 audit(96.510:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5592 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=91 compat=0 ip=0xffff91b5a7a8 code=0x7ffc0000
[   96.561190][   T27] audit: type=1326 audit(96.510:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5592 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5a7a8 code=0x7ffc0000
[   96.563885][ T5591] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   96.571709][   T27] audit: type=1326 audit(96.510:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5592 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5a7a8 code=0x7ffc0000
[   96.680650][ T5596] loop2: detected capacity change from 0 to 1024
[   96.685397][ T5596] EXT4-fs: Ignoring removed oldalloc option
[   96.692685][ T5596] EXT4-fs: Ignoring removed orlov option
[   96.744215][ T5596] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   96.795683][   T27] audit: type=1326 audit(96.770:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5590 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9495a7a8 code=0x7ffc0000
[   96.920975][ T4299] EXT4-fs (loop2): unmounting filesystem.
[   97.124487][ T4515] Process accounting resumed
[   98.471812][ T5613] loop1: detected capacity change from 0 to 512
[   98.492019][ T5613] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   98.673091][ T5613] EXT4-fs (loop1): 1 truncate cleaned up
[   98.674959][ T5613] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   99.693076][ T5588] EXT4-fs (loop3): unmounting filesystem.
[   99.878460][ T5621] hub 6-0:1.0: USB hub found
[   99.883681][ T5621] hub 6-0:1.0: 8 ports detected
[   99.984336][   T27] kauditd_printk_skb: 17 callbacks suppressed
[   99.984347][   T27] audit: type=1326 audit(99.960:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5622 comm="syz.0.449" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9495a7a8 code=0x7ffc0000
[  100.002333][   T27] audit: type=1326 audit(99.960:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5622 comm="syz.0.449" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9495a7a8 code=0x7ffc0000
[  100.023213][   T27] audit: type=1326 audit(99.970:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5622 comm="syz.0.449" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9495a7a8 code=0x7ffc0000
[  100.041860][   T27] audit: type=1326 audit(99.980:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5622 comm="syz.0.449" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff9495a7a8 code=0x7ffc0000
[  100.062222][   T27] audit: type=1326 audit(99.980:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5622 comm="syz.0.449" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9495a7a8 code=0x7ffc0000
[  100.076873][   T27] audit: type=1326 audit(99.980:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5622 comm="syz.0.449" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=230 compat=0 ip=0xffff9495a7a8 code=0x7ffc0000
[  100.145142][ T5619] loop2: detected capacity change from 0 to 8192
[  100.420325][ T5619]  loop2: p2 p3
[  100.424694][ T5619] loop2: p2 start 3506442254 is beyond EOD, truncated
[  100.426814][ T5619] loop2: p3 size 49412 extends beyond EOD, truncated
[  100.733624][ T4300] EXT4-fs (loop1): unmounting filesystem.
[  100.860194][ T4482] udevd[4482]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  101.358077][ T1853] Bluetooth: Error in BCSP hdr checksum
[  101.704308][ T4297] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  101.712912][ T4297] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  101.715655][ T4297] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  101.718459][ T4297] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  101.719155][ T5632] loop1: detected capacity change from 0 to 1024
[  101.722774][ T4297] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  101.731323][ T4297] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  101.732910][ T5632] EXT4-fs: Ignoring removed oldalloc option
[  101.773209][ T5632] EXT4-fs: Ignoring removed orlov option
[  101.850670][ T5632] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  101.991847][ T4300] EXT4-fs (loop1): unmounting filesystem.
[  102.051037][ T5631] lo speed is unknown, defaulting to 1000
[  102.093612][   T27] audit: type=1326 audit(102.060:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5622 comm="syz.0.449" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9495a7a8 code=0x7ffc0000
[  102.112509][   T27] audit: type=1326 audit(102.060:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5622 comm="syz.0.449" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9495a7a8 code=0x7ffc0000
[  102.123998][   T27] audit: type=1326 audit(102.070:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5622 comm="syz.0.449" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=83 compat=0 ip=0xffff9495a7a8 code=0x7ffc0000
[  102.133061][   T27] audit: type=1326 audit(102.070:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5622 comm="syz.0.449" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9495a7a8 code=0x7ffc0000
[  102.341531][ T5631] chnl_net:caif_netlink_parms(): no params data found
[  102.350902][  T112] Process accounting resumed
[  102.384343][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.386380][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.388889][ T5631] device bridge_slave_0 entered promiscuous mode
[  102.394884][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.398654][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.401277][ T5631] device bridge_slave_1 entered promiscuous mode
[  102.577829][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  102.582171][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.134375][ T4313] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  103.255861][ T5631] team0: Port device team_slave_0 added
[  103.259155][ T5631] team0: Port device team_slave_1 added
[  103.279691][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.281628][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.295574][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  103.299932][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1
[  103.301847][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.316188][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  103.403675][ T5668] loop4: detected capacity change from 0 to 256
[  103.489895][ T5631] device hsr_slave_0 entered promiscuous mode
[  103.555871][ T5671] loop4: detected capacity change from 0 to 1024
[  103.558227][ T5671] EXT4-fs: Ignoring removed oldalloc option
[  103.570541][ T5671] EXT4-fs: Ignoring removed orlov option
[  103.577156][ T5631] device hsr_slave_1 entered promiscuous mode
[  103.613260][ T5671] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  103.614196][ T5631] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  103.617983][ T5631] Cannot create hsr debugfs directory
[  103.733355][ T4308] EXT4-fs (loop4): unmounting filesystem.
[  103.773935][ T4297] Bluetooth: hci5: command 0x0409 tx timeout
[  103.906224][ T5631] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  103.943480][ T5679] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  103.948065][ T5631] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  103.986490][ T5631] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  104.007368][ T5631] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  104.010841][  T112] Process accounting resumed
[  104.282757][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.059411][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  105.064282][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  105.092731][ T5631] 8021q: adding VLAN 0 to HW filter on device team0
[  105.099103][ T5697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  105.102112][ T5697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  105.115608][ T5697] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.117544][ T5697] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.120326][ T5697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  105.128029][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  105.136373][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  105.151201][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.153196][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.176723][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  105.191242][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  105.216597][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  105.230094][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  105.254347][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  105.266674][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  105.269530][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  105.283216][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  105.286097][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  105.300817][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  105.303664][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  105.324733][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  105.586724][ T5715] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  105.864020][ T4297] Bluetooth: hci5: command 0x041b tx timeout
[  106.365439][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  106.367667][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  106.387263][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.610173][ T5732] fuse: Bad value for 'fd'
[  106.612582][  T112] Process accounting resumed
[  106.616186][ T5733] loop0: detected capacity change from 0 to 512
[  106.651988][ T5733] EXT2-fs (loop0): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  106.661428][ T5733] EXT2-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended
[  106.711436][ T5733] EXT2-fs (loop0): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  106.719563][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  106.722424][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  106.874756][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  106.877508][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  106.880486][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  106.888416][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  106.897023][ T5631] device veth0_vlan entered promiscuous mode
[  106.942026][ T5631] device veth1_vlan entered promiscuous mode
[  107.015267][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  107.022570][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  107.035131][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  107.048385][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  107.062378][ T5631] device veth0_macvtap entered promiscuous mode
[  107.612483][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  107.635438][ T5631] device veth1_macvtap entered promiscuous mode
[  107.812058][ T5631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  107.824439][ T5631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.827174][ T5631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  107.829917][ T5631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.868595][ T5631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  107.871456][ T5631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.895766][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.901684][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  107.910955][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  107.933902][ T4297] Bluetooth: hci5: command 0x040f tx timeout
[  107.951278][ T5631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.954598][ T5631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.965440][ T5631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.968349][ T5631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.970929][ T5631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.973623][ T5631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.980075][ T5631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.982997][ T5631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.997281][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.999839][ T5697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  108.002966][ T5697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  108.005060][ T5764] fuse: Bad value for 'fd'
[  108.015503][ T4515] Process accounting resumed
[  108.025292][ T5631] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.048178][ T5631] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.050583][ T5631] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.052912][ T5631] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.282074][ T5771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.497'.
[  108.303542][ T5763] loop2: detected capacity change from 0 to 8192
[  109.735635][ T4610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.737988][ T4610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.816486][ T5697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  109.829038][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.831386][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.840574][ T5763]  loop2: p2 p3 p4
[  109.841731][ T5763] loop2: p2 size 327551 extends beyond EOD, truncated
[  109.849402][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  109.879055][ T5781] loop4: detected capacity change from 0 to 1024
[  109.893986][ T5763] loop2: p3 size 16776960 extends beyond EOD, truncated
[  109.899749][ T5763] loop2: p4 size 3599499392 extends beyond EOD, truncated
[  109.902595][ T5781] EXT4-fs: inline encryption not supported
[  109.922262][ T5781] EXT4-fs: Ignoring removed bh option
[  110.013865][ T4313] Bluetooth: hci5: command 0x0419 tx timeout
[  110.100502][ T5781] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  110.201306][ T5793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.233213][ T5793] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.270772][ T4399] udevd[4399]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  110.270860][ T4482] udevd[4482]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  110.426418][ T5799] siw: device registration error -23
[  111.015753][ T4308] EXT4-fs (loop4): unmounting filesystem.
[  111.062326][ T4290] udevd[4290]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  111.121131][ T5806] fuse: Bad value for 'fd'
[  111.159887][ T5793] loop5: detected capacity change from 0 to 4096
[  111.169058][  T112] Process accounting resumed
[  111.212491][ T5810] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  111.323435][ T5813] loop2: detected capacity change from 0 to 512
[  111.512814][ T5813] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  112.873049][ T5829] netlink: 20 bytes leftover after parsing attributes in process `syz.1.514'.
[  113.549334][ T4299] EXT4-fs (loop2): unmounting filesystem.
[  113.736642][   T27] kauditd_printk_skb: 16 callbacks suppressed
[  113.736653][   T27] audit: type=1326 audit(113.710:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5a7a8 code=0x7ffc0000
[  113.757893][   T27] audit: type=1326 audit(113.730:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff91b5a7a8 code=0x7ffc0000
[  113.765720][   T27] audit: type=1326 audit(113.740:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5a7a8 code=0x7ffc0000
[  113.771682][   T27] audit: type=1326 audit(113.740:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5a7a8 code=0x7ffc0000
[  113.803917][   T27] audit: type=1326 audit(113.740:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff91b5a7a8 code=0x7ffc0000
[  113.809722][   T27] audit: type=1326 audit(113.740:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5a7a8 code=0x7ffc0000
[  113.839678][   T27] audit: type=1326 audit(113.740:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5a7a8 code=0x7ffc0000
[  113.847226][   T27] audit: type=1326 audit(113.760:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff91b5a7a8 code=0x7ffc0000
[  113.852907][   T27] audit: type=1326 audit(113.760:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5a7a8 code=0x7ffc0000
[  113.860628][   T27] audit: type=1326 audit(113.760:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5a7a8 code=0x7ffc0000
[  114.039552][ T5868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  114.043732][ T5868] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  114.832587][ T5868] loop1: detected capacity change from 0 to 4096
[  114.916437][ T5871] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  115.152361][ T5877] loop2: detected capacity change from 0 to 512
[  115.181659][ T5877] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  115.841883][ T4299] EXT4-fs (loop2): unmounting filesystem.
[  115.989114][ T5894] loop1: detected capacity change from 0 to 512
[  116.018271][ T5894] EXT4-fs: Ignoring removed mblk_io_submit option
[  116.021804][ T5894] ext4: Unknown parameter 'seclabel'
[  116.132370][ T5901] loop5: detected capacity change from 0 to 512
[  116.148748][ T5901] EXT4-fs: Ignoring removed i_version option
[  116.228475][ T5901] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  116.232383][ T5901] EXT4-fs (loop5): unmounting filesystem.
[  116.301507][ T5904] lo speed is unknown, defaulting to 1000
[  116.440992][ T5911] loop2: detected capacity change from 0 to 512
[  117.174757][ T5911] EXT4-fs: Ignoring removed nomblk_io_submit option
[  117.242164][ T5911] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  117.251546][ T5911] EXT4-fs (loop2): 1 truncate cleaned up
[  117.253244][ T5911] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  117.315562][ T5911] EXT4-fs (loop2): shut down requested (0)
[  117.361111][ T5917] netlink: 24 bytes leftover after parsing attributes in process `syz.4.547'.
[  117.793377][ T5938] loop4: detected capacity change from 0 to 1024
[  117.843231][ T5938] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.552: Invalid block bitmap block 0 in block_group 0
[  117.883387][ T5938] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.552: Failed to acquire dquot type 0
[  117.904977][ T5938] EXT4-fs error (device loop4): ext4_free_blocks:6210: comm syz.4.552: Freeing blocks not in datazone - block = 0, count = 4096
[  117.922191][ T5938] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.552: Invalid inode bitmap blk 0 in block_group 0
[  117.928110][ T4299] EXT4-fs (loop2): unmounting filesystem.
[  117.928668][ T5938] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem
[  117.943941][ T5938] EXT4-fs (loop4): 1 orphan inode deleted
[  117.945810][ T5938] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  117.950054][ T4610] EXT4-fs error (device loop4): ext4_release_dquot:6850: comm kworker/u4:11: Failed to release dquot type 0
[  118.049780][ T4308] EXT4-fs (loop4): unmounting filesystem.
[  118.141396][ T5948] hub 6-0:1.0: USB hub found
[  118.142885][ T5948] hub 6-0:1.0: 8 ports detected
[  118.231755][ T5949] infiniband syz1: set down
[  118.233229][ T5949] infiniband syz1: added veth0_to_team
[  118.272036][ T5949] RDS/IB: syz1: added
[  118.274204][ T5949] smc: adding ib device syz1 with port count 1
[  118.276058][ T5949] smc:    ib device syz1 port 1 has pnetid 
[  118.310321][ T5955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  118.312958][ T5955] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  118.382828][ T5951] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  118.561843][ T5955] loop4: detected capacity change from 0 to 4096
[  118.663995][ T5959] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  118.869192][ T5960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  118.873196][ T5960] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.884782][ T5968] loop4: detected capacity change from 0 to 512
[  119.889224][ T5968] EXT4-fs: Ignoring removed i_version option
[  119.913198][ T5968] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  119.917152][ T5968] EXT4-fs (loop4): unmounting filesystem.
[  119.986734][   T27] kauditd_printk_skb: 15 callbacks suppressed
[  119.986754][   T27] audit: type=1326 audit(2000000003.560:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9495a7a8 code=0x7ffc0000
[  120.019631][   T27] audit: type=1326 audit(2000000003.590:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9495a7a8 code=0x7ffc0000
[  120.028994][   T27] audit: type=1326 audit(2000000003.600:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9495a7a8 code=0x7ffc0000
[  120.033364][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.560'.
[  120.035463][   T27] audit: type=1326 audit(2000000003.600:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9495a7a8 code=0x7ffc0000
[  120.041805][ T5972] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.049728][   T27] audit: type=1326 audit(2000000003.600:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9495a7a8 code=0x7ffc0000
[  120.054167][ T5972] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.055849][   T27] audit: type=1326 audit(2000000003.600:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9495a7a8 code=0x7ffc0000
[  120.065594][ T5972] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.069418][   T27] audit: type=1326 audit(2000000003.600:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9495a7a8 code=0x7ffc0000
[  120.073460][ T5974] loop4: detected capacity change from 0 to 736
[  120.075476][   T27] audit: type=1326 audit(2000000003.600:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9495a7a8 code=0x7ffc0000
[  120.075508][   T27] audit: type=1326 audit(2000000003.600:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9495a7a8 code=0x7ffc0000
[  120.075537][   T27] audit: type=1326 audit(2000000003.600:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9495a7a8 code=0x7ffc0000
[  120.075922][ T5972] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.538094][ T5986] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0
[  120.649716][ T5989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.654800][ T5989] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.685779][ T5989] loop4: detected capacity change from 0 to 4096
[  121.717194][ T5999] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  122.888010][ T6016] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  123.692088][ T6024] netlink: 32 bytes leftover after parsing attributes in process `syz.1.580'.
[  123.702632][ T6024] netlink: 56 bytes leftover after parsing attributes in process `syz.1.580'.
[  125.294869][ T6050] hub 6-0:1.0: USB hub found
[  125.298031][ T6050] hub 6-0:1.0: 8 ports detected
[  125.815024][ T6052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.591'.
[  125.935989][ T2059] ieee802154 phy0 wpan0: encryption failed: -22
[  125.937824][ T2059] ieee802154 phy1 wpan1: encryption failed: -22
[  126.082142][ T6062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.103751][ T6062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.183503][ T6062] loop5: detected capacity change from 0 to 4096
[  126.205083][ T6065] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  126.461895][ T6073] loop1: detected capacity change from 0 to 2048
[  126.468662][ T6072] 9pnet: Could not find request transport: 0xffffffffffffffff
[  126.524822][ T6073] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  126.530093][ T6073] EXT4-fs error (device loop1): ext4_find_extent:936: inode #2: comm syz.1.598: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  126.558584][ T6073] EXT4-fs (loop1): Remounting filesystem read-only
[  126.566844][   T27] kauditd_printk_skb: 22 callbacks suppressed
[  126.566854][   T27] audit: type=1326 audit(2000000010.140:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9495a7a8 code=0x7ffc0000
[  126.590505][   T27] audit: type=1326 audit(2000000010.160:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9495a7a8 code=0x7ffc0000
[  126.592383][ T4300] EXT4-fs (loop1): unmounting filesystem.
[  126.616855][   T27] audit: type=1326 audit(2000000010.190:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9495a7a8 code=0x7ffc0000
[  126.623123][   T27] audit: type=1326 audit(2000000010.190:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9495a7a8 code=0x7ffc0000
[  126.633334][   T27] audit: type=1326 audit(2000000010.190:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9495a7a8 code=0x7ffc0000
[  126.643338][   T27] audit: type=1326 audit(2000000010.210:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9495a7a8 code=0x7ffc0000
[  126.649516][   T27] audit: type=1326 audit(2000000010.210:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9495a7a8 code=0x7ffc0000
[  126.652947][ T6079] loop0: detected capacity change from 0 to 1024
[  126.665856][   T27] audit: type=1326 audit(2000000010.210:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9495a7a8 code=0x7ffc0000
[  126.683453][   T27] audit: type=1326 audit(2000000010.210:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9495a7a8 code=0x7ffc0000
[  126.689448][   T27] audit: type=1326 audit(2000000010.210:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9495a7a8 code=0x7ffc0000
[  126.699058][ T6079] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  126.798870][ T4296] EXT4-fs (loop0): unmounting filesystem.
[  127.172101][ T6109] loop5: detected capacity change from 0 to 256
[  127.278266][ T6107] loop0: detected capacity change from 0 to 8192
[  127.301183][ T6107] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  127.318052][ T6114] loop2: detected capacity change from 0 to 1024
[  127.326612][ T6114] EXT4-fs: inline encryption not supported
[  127.328225][ T6114] EXT4-fs: Ignoring removed bh option
[  127.401522][ T6114] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  127.479501][ T4299] EXT4-fs (loop2): unmounting filesystem.
[  127.547008][ T6121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  127.551471][ T6121] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.622137][ T6121] loop2: detected capacity change from 0 to 4096
[  127.708172][ T6125] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  129.050417][ T6148] netlink: 'syz.4.626': attribute type 1 has an invalid length.
[  129.069476][ T6148] 8021q: adding VLAN 0 to HW filter on device bond1
[  129.082528][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.626'.
[  129.185598][ T6148] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  129.206266][ T6148] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  129.226829][ T6148] bond1: (slave ipvlan2): Error -95 calling set_mac_address
[  129.320291][ T6155] loop2: detected capacity change from 0 to 1024
[  129.358646][ T6155] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  129.396113][ T6157] fuse: Bad value for 'fd'
[  129.408210][ T4515] Process accounting resumed
[  129.431954][ T6155] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  129.437489][ T6155] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.560435][ T4299] EXT4-fs (loop2): unmounting filesystem.
[  130.712375][ T6187] loop5: detected capacity change from 0 to 2048
[  130.762019][ T6189] fuse: Bad value for 'fd'
[  130.770877][   T22] Process accounting resumed
[  130.804781][ T6187] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  130.925355][ T6187] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  130.982832][ T6187] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 766 with error 28
[  130.988193][ T6187] EXT4-fs (loop5): This should not happen!! Data will be lost
[  130.988193][ T6187] 
[  130.990940][ T6187] EXT4-fs (loop5): Total free blocks count 0
[  130.992559][ T6187] EXT4-fs (loop5): Free/Dirty block details
[  130.994756][ T6187] EXT4-fs (loop5): free_blocks=2415919104
[  130.996325][ T6187] EXT4-fs (loop5): dirty_blocks=768
[  130.997793][ T6187] EXT4-fs (loop5): Block reservation details
[  130.999414][ T6187] EXT4-fs (loop5): i_reserved_data_blocks=48
[  131.001680][ T6197] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  131.093070][   T22] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  131.119830][ T5631] EXT4-fs (loop5): unmounting filesystem.
[  131.319347][   T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  131.322351][   T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  131.327210][   T22] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  131.330879][   T22] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  131.353900][   T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.359343][   T22] usb 1-1: config 0 descriptor??
[  131.378455][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.648'.
[  131.421343][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.648'.
[  131.426460][ T6216] loop5: detected capacity change from 0 to 256
[  131.600361][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.648'.
[  131.662863][ T4344] Process accounting resumed
[  131.828393][   T22] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xe
[  131.830599][   T22] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  131.838272][   T22] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  131.857247][   T22] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  132.614767][   T27] kauditd_printk_skb: 35 callbacks suppressed
[  132.614781][   T27] audit: type=1326 audit(2000000016.190:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.2.655" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5a7a8 code=0x7ffc0000
[  132.622736][   T27] audit: type=1326 audit(2000000016.190:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.2.655" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=180 compat=0 ip=0xffff91b5a7a8 code=0x7ffc0000
[  132.642994][   T27] audit: type=1326 audit(2000000016.190:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.2.655" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5a7a8 code=0x7ffc0000
[  132.649212][   T27] audit: type=1326 audit(2000000016.190:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.2.655" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5a7a8 code=0x7ffc0000
[  132.675335][   T27] audit: type=1326 audit(2000000016.210:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.2.655" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=184 compat=0 ip=0xffff91b5a7a8 code=0x7ffc0000
[  132.681335][   T27] audit: type=1326 audit(2000000016.210:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.2.655" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5a7a8 code=0x7ffc0000
[  132.703130][   T27] audit: type=1326 audit(2000000016.210:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.2.655" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5a7a8 code=0x7ffc0000
[  132.986781][ T6191] loop0: detected capacity change from 0 to 4096
[  133.060902][ T6242] netdevsim netdevsim5: Direct firmware load for ÈöníñÆgkNšÄq>ä*x(Oˆ@ failed with error -2
[  133.063951][ T6242] netdevsim netdevsim5: Falling back to sysfs fallback for: ÈöníñÆgkNšÄq>ä*x(Oˆ@
[  133.074198][ T6243] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  133.222779][ T4344] usb 1-1: USB disconnect, device number 5
[  133.285161][ T6251] loop4: detected capacity change from 0 to 512
[  133.288372][ T6251] journal_path: Lookup failure for './file0/../file0'
[  133.290397][ T6251] EXT4-fs: error: could not find journal device path
[  133.479075][ T4344] Process accounting resumed
[  134.719706][   T27] audit: type=1326 audit(2000000018.291:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.5.675" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f75a7a8 code=0x7ffc0000
[  134.726710][ T6279] loop4: detected capacity change from 0 to 512
[  134.731713][   T27] audit: type=1326 audit(2000000018.301:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.5.675" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7f75a7a8 code=0x7ffc0000
[  134.748231][   T27] audit: type=1326 audit(2000000018.321:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.5.675" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f75a7a8 code=0x7ffc0000
[  135.562210][ T6279] EXT4-fs (loop4): 1 orphan inode deleted
[  135.564076][ T6279] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  135.573340][ T6279] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  135.573956][ T5251] EXT4-fs error (device loop4): ext4_release_dquot:6850: comm kworker/u4:16: Failed to release dquot type 1
[  135.598371][ T6279] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[  135.656125][ T3421] Process accounting resumed
[  135.734273][ T4308] EXT4-fs (loop4): unmounting filesystem.
[  135.735495][ T6296] netlink: 'syz.0.677': attribute type 39 has an invalid length.
[  135.799797][ T6302] loop2: detected capacity change from 0 to 512
[  135.802297][ T6302] EXT4-fs: Ignoring removed i_version option
[  135.815418][ T6302] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  135.855803][ T6302] EXT4-fs (loop2): 1 truncate cleaned up
[  135.857621][ T6302] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  135.863912][ T6308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.867226][ T6308] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.910611][ T6302] 
[  135.911329][ T6302] ======================================================
[  135.913304][ T6302] WARNING: possible circular locking dependency detected
[  135.915219][ T6302] 6.1.141-syzkaller #0 Not tainted
[  135.916668][ T6302] ------------------------------------------------------
[  135.918626][ T6302] syz.2.684/6302 is trying to acquire lock:
[  135.920279][ T6302] ffff0000e1d24030 (&sb->s_type->i_mutex_key#9/1){+.+.}-{3:3}, at: ext4_xattr_inode_lookup_create+0x126c/0x18c4
[  135.923522][ T6302] 
[  135.923522][ T6302] but task is already holding lock:
[  135.925557][ T6302] ffff0000e1e70288 (&ei->i_data_sem/3){++++}-{3:3}, at: ext4_setattr+0xfd8/0x150c
[  135.928311][ T6302] 
[  135.928311][ T6302] which lock already depends on the new lock.
[  135.928311][ T6302] 
[  135.931268][ T6302] 
[  135.931268][ T6302] the existing dependency chain (in reverse order) is:
[  135.933800][ T6302] 
[  135.933800][ T6302] -> #1 (&ei->i_data_sem/3){++++}-{3:3}:
[  135.936026][ T6302]        down_write+0x5c/0x88
[  135.937300][ T6302]        ext4_xattr_inode_lookup_create+0x1198/0x18c4
[  135.939189][ T6302]        ext4_xattr_ibody_set+0x1b4/0x600
[  135.940859][ T6302]        ext4_xattr_set_handle+0x900/0x102c
[  135.942523][ T6302]        ext4_xattr_set+0x1e0/0x2b4
[  135.943945][ T6302]        ext4_xattr_security_set+0x4c/0x64
[  135.945618][ T6302]        __vfs_setxattr+0x388/0x3a4
[  135.947034][ T6302]        __vfs_setxattr_noperm+0x120/0x564
[  135.948758][ T6302]        __vfs_setxattr_locked+0x1ec/0x218
[  135.950384][ T6302]        vfs_setxattr+0x158/0x2ac
[  135.951760][ T6302]        setxattr+0x228/0x28c
[  135.953028][ T6302]        path_setxattr+0x12c/0x25c
[  135.954440][ T6302]        __arm64_sys_setxattr+0xbc/0xd8
[  135.955998][ T6302]        invoke_syscall+0x98/0x2bc
[  135.957450][ T6302]        el0_svc_common+0x138/0x258
[  135.958941][ T6302]        do_el0_svc+0x58/0x13c
[  135.960279][ T6302]        el0_svc+0x58/0x138
[  135.961509][ T6302]        el0t_64_sync_handler+0x84/0xf0
[  135.963071][ T6302]        el0t_64_sync+0x18c/0x190
[  135.964403][ T6302] 
[  135.964403][ T6302] -> #0 (&sb->s_type->i_mutex_key#9/1){+.+.}-{3:3}:
[  135.966811][ T6302]        __lock_acquire+0x293c/0x6544
[  135.968334][ T6302]        lock_acquire+0x20c/0x644
[  135.969681][ T6302]        down_write+0x5c/0x88
[  135.970976][ T6302]        ext4_xattr_inode_lookup_create+0x126c/0x18c4
[  135.972831][ T6302]        ext4_xattr_block_set+0x1b4/0x2810
[  135.974414][ T6302]        ext4_expand_extra_isize_ea+0xcb8/0x15cc
[  135.976179][ T6302]        __ext4_expand_extra_isize+0x298/0x358
[  135.977994][ T6302]        __ext4_mark_inode_dirty+0x3e4/0x790
[  135.979671][ T6302]        ext4_setattr+0x102c/0x150c
[  135.981149][ T6302]        notify_change+0xb0c/0xdcc
[  135.982558][ T6302]        do_truncate+0x178/0x1f0
[  135.983936][ T6302]        path_openat+0x20d0/0x2680
[  135.985341][ T6302]        do_filp_open+0x174/0x344
[  135.986762][ T6302]        do_sys_openat2+0x128/0x3d8
[  135.988247][ T6302]        __arm64_sys_openat+0x120/0x154
[  135.989799][ T6302]        invoke_syscall+0x98/0x2bc
[  135.991286][ T6302]        el0_svc_common+0x138/0x258
[  135.992808][ T6302]        do_el0_svc+0x58/0x13c
[  135.994176][ T6302]        el0_svc+0x58/0x138
[  135.995444][ T6302]        el0t_64_sync_handler+0x84/0xf0
[  135.996963][ T6302]        el0t_64_sync+0x18c/0x190
[  135.998364][ T6302] 
[  135.998364][ T6302] other info that might help us debug this:
[  135.998364][ T6302] 
[  136.001204][ T6302]  Possible unsafe locking scenario:
[  136.001204][ T6302] 
[  136.003332][ T6302]        CPU0                    CPU1
[  136.004815][ T6302]        ----                    ----
[  136.006301][ T6302]   lock(&ei->i_data_sem/3);
[  136.007563][ T6302]                                lock(&sb->s_type->i_mutex_key#9/1);
[  136.009883][ T6302]                                lock(&ei->i_data_sem/3);
[  136.011861][ T6302]   lock(&sb->s_type->i_mutex_key#9/1);
[  136.013451][ T6302] 
[  136.013451][ T6302]  *** DEADLOCK ***
[  136.013451][ T6302] 
[  136.015667][ T6302] 5 locks held by syz.2.684/6302:
[  136.017120][ T6302]  #0: ffff0000f0c06460 (sb_writers#3){++++}-{0:0}, at: mnt_want_write+0x44/0x9c
[  136.019713][ T6302]  #1: ffff0000e1e70400 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: do_truncate+0x164/0x1f0
[  136.022602][ T6302]  #2: ffff0000e1e705a0 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_setattr+0xbc4/0x150c
[  136.025513][ T6302]  #3: ffff0000e1e70288 (&ei->i_data_sem/3){++++}-{3:3}, at: ext4_setattr+0xfd8/0x150c
[  136.028192][ T6302]  #4: ffff0000e1e700c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x37c/0x790
[  136.031231][ T6302] 
[  136.031231][ T6302] stack backtrace:
[  136.032853][ T6302] CPU: 0 PID: 6302 Comm: syz.2.684 Not tainted 6.1.141-syzkaller #0
[  136.035062][ T6302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  136.037861][ T6302] Call trace:
[  136.038750][ T6302]  dump_backtrace+0x1c8/0x1f4
[  136.040034][ T6302]  show_stack+0x2c/0x3c
[  136.041139][ T6302]  __dump_stack+0x30/0x40
[  136.042373][ T6302]  dump_stack_lvl+0xf8/0x160
[  136.043695][ T6302]  dump_stack+0x1c/0x5c
[  136.044824][ T6302]  print_circular_bug+0x148/0x1b0
[  136.046247][ T6302]  check_noncircular+0x240/0x2d4
[  136.047610][ T6302]  __lock_acquire+0x293c/0x6544
[  136.048991][ T6302]  lock_acquire+0x20c/0x644
[  136.050227][ T6302]  down_write+0x5c/0x88
[  136.051372][ T6302]  ext4_xattr_inode_lookup_create+0x126c/0x18c4
[  136.053132][ T6302]  ext4_xattr_block_set+0x1b4/0x2810
[  136.054556][ T6302]  ext4_expand_extra_isize_ea+0xcb8/0x15cc
[  136.056208][ T6302]  __ext4_expand_extra_isize+0x298/0x358
[  136.057838][ T6302]  __ext4_mark_inode_dirty+0x3e4/0x790
[  136.059399][ T6302]  ext4_setattr+0x102c/0x150c
[  136.060707][ T6302]  notify_change+0xb0c/0xdcc
[  136.061968][ T6302]  do_truncate+0x178/0x1f0
[  136.063246][ T6302]  path_openat+0x20d0/0x2680
[  136.064571][ T6302]  do_filp_open+0x174/0x344
[  136.065963][ T6302]  do_sys_openat2+0x128/0x3d8
[  136.067251][ T6302]  __arm64_sys_openat+0x120/0x154
[  136.068622][ T6302]  invoke_syscall+0x98/0x2bc
[  136.069897][ T6302]  el0_svc_common+0x138/0x258
[  136.071232][ T6302]  do_el0_svc+0x58/0x13c
[  136.072517][ T6302]  el0_svc+0x58/0x138
[  136.073634][ T6302]  el0t_64_sync_handler+0x84/0xf0
[  136.075059][ T6302]  el0t_64_sync+0x18c/0x190
[  136.103908][ T6307] netlink: 4 bytes leftover after parsing attributes in process `syz.5.683'.
[  136.106536][ T6307] device bridge_slave_1 left promiscuous mode
[  136.108378][ T6307] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.117859][ T6308] loop4: detected capacity change from 0 to 4096
[  136.488956][ T6307] device bridge_slave_0 left promiscuous mode
[  136.502511][ T6307] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.513130][ T4299] EXT4-fs (loop2): unmounting filesystem.
[  136.536255][ T6314] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds