last executing test programs:

4m50.115558038s ago: executing program 4 (id=177):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80)
mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f0000000700)='\x01)\xa8\xa7\xae\xff\x17\xd1\x95\x1c\x81}\xdfPW\x81\x86\x03|,\xb9\\\x7f\xc4\xe6\x04(>&\x10\xfd\xff\"\xa8\xfdcb\x7f\xc4\x143\xc9\x82\x81\x17\x87\xb5\x85\xd0\x99\xf1A\xdb\xd8]\xbfb>\xdb\xd3\x9dt\",\x00\x00\x00\x00\x01\x00\x00\x00\x85\xc8\xbd\xac\xbc\xe2\xd47')

4m49.903928251s ago: executing program 4 (id=179):
socket$nl_route(0x10, 0x3, 0x0)
r0 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000440)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = syz_pidfd_open(r0, 0x0)
setns(r5, 0x24020000)
syz_clone(0xb2168400, 0x0, 0x0, 0x0, 0x0, 0x0)

4m46.916632106s ago: executing program 4 (id=183):
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x14, 0x0, 0xf09, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8084)
syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00')
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})

4m41.575939968s ago: executing program 4 (id=194):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYRES16=r0, @ANYRES8=r1, @ANYBLOB="73e2ef72920eb3b2526fb4c7d868c688c68de6c803fda347650573f011e9a293bf9d46c0886f7e9461ac0039dfc53b4fd7bad4e84163dfe11e09aab0ee00ae654fb60cb6820b2d2f1dc8d976cdbe26930aff2417"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ptrace(0x8, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
pipe2$9p(0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
keyctl$reject(0x13, 0x0, 0xb, 0x202, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000003580)={&(0x7f0000001fc0)={0xa, 0x2, 0x8, @dev={0xfe, 0x80, '\x00', 0x30}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000290000000b000000000000080000000018000000000000002900000037"], 0x30}, 0x2000)

4m40.297033743s ago: executing program 4 (id=200):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}, 0x2)

4m40.248481466s ago: executing program 4 (id=201):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f00000001c0)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00'], 0x4, 0x2dc, &(0x7f0000000bc0)="$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")
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
tgkill(r3, r3, 0x21)

4m24.045799314s ago: executing program 32 (id=201):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f00000001c0)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00'], 0x4, 0x2dc, &(0x7f0000000bc0)="$eJzs3c1uG1UfBvBnEsf221fCXrBCSIwEC1ZV0ytwhFIJkRVVFsACIppKKI6QWikSH8Ltii0bFiy4AiQkLoQNd8AFILGjlSoNmvE4toubj6pu+fj9Nj45c54z/zMZJ5NFjj969fjoVpnb97/8Nf1+kY1RRnlQZJiNzNzLktE3AQD+yR5UVX6vplYdL+6tzhVJ+muuDQBYj/N+/7deOm391L52114aALAmN997/52dvb3dd8uynxvHX5/s13/Z16/T4zu380nGOcy1DPIoaR4UttI8LdTNG1VVTTrlw7Ish3njeHKyXyePP/y5nX/nt6TJb2eQYdN1+rTR5N/e290upxbyk7qOK+35R3X+egZ5+TS8lL++Ip/9bt58faH+qxnkl4/zaca51RQxzfeyt/vVdlm+VX37xxcf1OXV+WJyst9rxs1Vm8/5WwMAAAAAAAAAAAAAAAAAAAAAwL/Y1XbvnF6a/Xvqrnb/nc1H9RdbKWeGy/vzTPPFbKLF/YGqqppU+X62P8+1siyrduA838krnXRezKoBAAAAAAAAAAAAAAAAAADg7+XuZ58fHYzHh3eeSaPYmM7aSfLwZvK084wWel7L8phRstTTa1dyMB63Z8/4cLgwYafpaePZnI0pkjPLqBfxjC7LeY3/LVa42Pjhx8tO2D9/zNbqcz1V48rqazi7u44OitXXsJdZT7+9Sb7rJvMx3VywjO6TDlW5zO3XXVFhMrhIfLbW6Tz/bw5NzkileHJhm6fvy7aneHwV3eaqroxvtY089gaZ3xsXup/Tn8b/+rOisFsHAAAAAAAAAAAAAAAAAACs1fy/f1ccvH9mdKPqra0sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHiu5p//f4nGpA1fYHA3d+6+4CUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwH/BnAAAA//+lXFN6")
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
tgkill(r3, r3, 0x21)

2m6.166391635s ago: executing program 2 (id=446):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0x4, 0x4)
recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/14, 0xe}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=""/112, 0x70}, 0x8}], 0x2, 0x45833af92e4b39ff, 0x0)

2m3.479879572s ago: executing program 2 (id=462):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
prlimit64(0x0, 0xe, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x4018, 0x4)
sched_setscheduler(0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9})
fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5})
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)

2m2.14311818s ago: executing program 2 (id=466):
r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60a42, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x6002})
r2 = fsopen(&(0x7f00000002c0)='ext4\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

2m1.892548815s ago: executing program 2 (id=470):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xe4a}}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00')
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000039c0)=""/4088, 0xff8}], 0x1, 0x15f, 0x0)

1m59.07669354s ago: executing program 2 (id=489):
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$P9_RREAD(r0, &(0x7f0000000040)=ANY=[], 0x1009)

1m57.776989926s ago: executing program 2 (id=494):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000001"], 0x48)
r6 = fsmount(r3, 0x1, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000100), &(0x7f0000000140)='%pK    \x00'}, 0x20)
fchdir(r6)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r5}, 0x18)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r7, &(0x7f0000000200)={0x2020}, 0x2020)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x64, 0x6, 0x768, 0x538, 0x0, 0x2a8, 0x538, 0x0, 0x698, 0x698, 0x698, 0x698, 0x698, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0x198, 0x1d8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@remote, [], @ipv6=@private1, [0xffffffff, 0xff000000, 0xffffffff], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffffff, 0xffffffff, 0xffffffff], @ipv4=@multicast2, [0x0, 0x0, 0xff000000, 0xff], 0x0, 0x0, 0x42, 0x4e22, 0x4e24, 0x4e20, 0x4e24, 0x10, 0x23ccf3e9fd2b5143}, 0x0, 0x80, 0x0, 0x4e20, 0x4e24, 0x4e23}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x4, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7c8)

1m57.146266133s ago: executing program 33 (id=494):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000001"], 0x48)
r6 = fsmount(r3, 0x1, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000100), &(0x7f0000000140)='%pK    \x00'}, 0x20)
fchdir(r6)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r5}, 0x18)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r7, &(0x7f0000000200)={0x2020}, 0x2020)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x64, 0x6, 0x768, 0x538, 0x0, 0x2a8, 0x538, 0x0, 0x698, 0x698, 0x698, 0x698, 0x698, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0x198, 0x1d8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@remote, [], @ipv6=@private1, [0xffffffff, 0xff000000, 0xffffffff], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffffff, 0xffffffff, 0xffffffff], @ipv4=@multicast2, [0x0, 0x0, 0xff000000, 0xff], 0x0, 0x0, 0x42, 0x4e22, 0x4e24, 0x4e20, 0x4e24, 0x10, 0x23ccf3e9fd2b5143}, 0x0, 0x80, 0x0, 0x4e20, 0x4e24, 0x4e23}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x4, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7c8)

1m27.153270388s ago: executing program 0 (id=640):
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x20, 0xa, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x488c4)
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)={0x73}, 0x8)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote}, 0x80, 0x0}, 0x5b4}], 0x43, 0x0)
open(0x0, 0x143142, 0x80)

1m27.079769913s ago: executing program 1 (id=642):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$TIOCL_GETSHIFTSTATE(r4, 0x541c, 0x0)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x38, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}]}]}]}, 0x38}}, 0x0)

1m27.027986306s ago: executing program 0 (id=644):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
rt_tgsigqueueinfo(r0, r0, 0xe, &(0x7f0000000240)={0x6, 0xffffffff, 0xa7})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0)

1m25.307045446s ago: executing program 1 (id=646):
syz_emit_ethernet(0x9e, 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r2 = dup(r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20)

1m25.172085444s ago: executing program 0 (id=648):
setresuid(0x0, 0xee00, 0x0)
setrlimit(0x40000000000008, &(0x7f0000000000)={0x0, 0x5})
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x7fff, @empty, 0x2}, 0x1c)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00)

1m25.014784513s ago: executing program 0 (id=650):
mount(0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='ecryptfs\x00', 0x198402, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r1 = dup(r0)
r2 = socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x4080, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

1m24.38932321s ago: executing program 1 (id=657):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$TIOCL_GETSHIFTSTATE(r4, 0x541c, 0x0)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x38, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}]}]}]}, 0x38}}, 0x0)

1m23.678562842s ago: executing program 0 (id=664):
r0 = gettid()
timer_create(0x0, &(0x7f00000014c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000200))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@ifindex, 0x26, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

1m23.397996928s ago: executing program 1 (id=665):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x81, 0xfffff034}, {0x6}]}, 0x10)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}]}}]}, 0x48}}, 0x0)

1m23.063618178s ago: executing program 1 (id=667):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a08404, &(0x7f0000000080)={[{@grpquota}, {@noblock_validity}]}, 0x1, 0xbb6, &(0x7f0000000c00)="$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")
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4)

1m22.550900748s ago: executing program 0 (id=672):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0)
write$UHID_CREATE(r0, &(0x7f0000000400)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x0, 0x1, 0x3, 0xfffffff4, 0x1c00, 0x8}}, 0x120)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
r2 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9)
pwritev2(r2, &(0x7f0000000200)=[{&(0x7f00000003c0)="85e9bcc009", 0x5}], 0x1, 0x2000, 0x0, 0x3)

1m22.506116921s ago: executing program 1 (id=673):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x7fffffe, 0x1e8, 0xc, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248)

1m7.086557843s ago: executing program 34 (id=672):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0)
write$UHID_CREATE(r0, &(0x7f0000000400)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x0, 0x1, 0x3, 0xfffffff4, 0x1c00, 0x8}}, 0x120)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
r2 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9)
pwritev2(r2, &(0x7f0000000200)=[{&(0x7f00000003c0)="85e9bcc009", 0x5}], 0x1, 0x2000, 0x0, 0x3)

1m6.927917082s ago: executing program 35 (id=673):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x7fffffe, 0x1e8, 0xc, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248)

13.994419581s ago: executing program 3 (id=879):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb7e, &(0x7f0000000c40)="$eJzs3M1rVFcbAPDn3nwYNb6JL/LyWkoNtGChOBrFSl2py9ZFof0DDHEiIdcPkhRMcBHbhXRVC910UWgXpX9AoetstNBV6aaVFrqXShHdp9zJnWQwM0mqMx4/fj84c8/HZM7z5JK555C5E8BLa6x8yCP2R8S5LGKk6s8jYrBRG4pYWn3eg/vXJh/evzaZxcrKB39nkVV9zdfKquPuqjEUEb+cyeK/n2ycd25hcWaiKOqzVfvw/MUrh+cWFg9NX5y4UL9QvzR+YvzY8RPHjr99pGu5vrv35tmvxk/t+f7Mrauv3fj9yyxOxXA11ppHt4zFWKxUWvv7I2Ki25Ml0lflk7X0Zf0JAwIAYFN5yxrufzESfbG+eBuJW78mDQ4AAADoipW+WPsfFQAAAPCiyuz/AQAA4AXX/BzAg/vXJpsl7ScSnq57pyNitF3+/bHUOA7FQETsepBF622t2eqPPbGxiNj30+iPZYke3Ye8maXrEfH/dvlnjfxHG3dxb8w/j4hu3Jk99kj7ecr/VBfmT50/AC+n5dOrF7KN1798bf0Tba5//W2uXY8j9fWv8/pvPf++Duu/97c5R/3Ap593Gmtd/xXfvnq7nL88PlFS/8K96xGv9Hde/5T5Zx3yP7fNOQb++PmHTmNl/mW+zfK081/5JuJg2/3P+jfaZJt/P9HhqemiXj22nePG7e/2dZq/9fyXpZy/uRd4Gsrzv6tD/lud/yvbnGP5r4N/dhrbOv/87mD2YaM2WPVcnZifnx2PGMzObuw/unkszec0X6PM/83XN//7b5d/+Z6wVP0eyr3A9epYtj9+ZM5D773zxuPn31tl/ucf8/zf3OYcX382e7fTWOr8AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg+5BExHFleW6vnea0WsTsi9sWuvLg8N//W1OWPLp0vxyJGYyCfmi7qRyJiZLWdle3xRn29ffSR9rGI2BsRX4zsbLRrk5eL86mTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYM3uiBiOLK9FRB4RD0fyvFZLHRUAAADQdaOpAwAAAAB6zv4fAAAAXnz2/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTY3gPLd7KIWDq5s1FKg9XYQNLIgF7LUwcAJNOXOgAgmf7UAQDJ2OMD2RbjQx1HdnQ9FgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeXQf3L9/JImLp5M5GKQ1WYwNJIwN6LU8dAJBMX+oAgGT6UwcAJGOPD2RbjA91HNnR9VgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHYNN0qW1yIib9TzvFaL2BMRozGQTU0X9SMR8Z+I+G1kYEfZHk8dNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF03t7A4M1EU9VkVFRWVtUrqdyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFKYW1icmSiK+uxc6kgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA1OYWFmcmiqI+28NK6hwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEjnnwAAAP///JMJmQ==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)

12.47020823s ago: executing program 3 (id=886):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001440)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
writev(r0, &(0x7f0000001900)=[{&(0x7f0000000200)="ed", 0x1}, {0x0}], 0x2)

12.207023746s ago: executing program 6 (id=888):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x1000421, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
ioctl$MON_IOCX_GETX(r3, 0x80089203, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000240)='./bus\x00', 0x20000, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x200000, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000000b03ddb", @ANYRES16=r5, @ANYBLOB="000828bd7000fcdbdf2505000000050033000100000005002a0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r6 = socket(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r6, 0x11, 0x1, &(0x7f0000000040)=0x1, 0x4)
ioctl$PPPIOCGFLAGS(r6, 0x8004745a, &(0x7f0000000000))
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bridge_slave_1\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x102)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]})
mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x802c, &(0x7f0000000180)={[{@none}]})
r7 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
openat$cgroup_procs(r7, 0x0, 0x2, 0x0)
sendmmsg$inet6(r6, &(0x7f0000000200)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x1, @private0, 0x81}, 0x28, 0x0}}], 0x1, 0x8081)

10.679788495s ago: executing program 3 (id=890):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$BLKTRACETEARDOWN(r0, 0x1267, 0x0)

10.499777865s ago: executing program 6 (id=892):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000240)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@nobh}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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")
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf94d8000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ppoll(&(0x7f0000000080)=[{r4, 0x465}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0)
socket$inet_udp(0x2, 0x2, 0x0)

10.303605677s ago: executing program 3 (id=894):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x5, 0x7, 0x0, {0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x20000404)

9.369024222s ago: executing program 3 (id=897):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000300)={[{@nombcache}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@journal_dev={'journal_dev', 0x3d, 0x460b8000}}]}, 0x1, 0x52a, &(0x7f0000001440)="$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")
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb)

8.819816793s ago: executing program 3 (id=900):
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x80)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
add_key$keyring(&(0x7f0000000300), &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8)
ftruncate(0xffffffffffffffff, 0x2000009)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r5, 0x400455c8, 0x4)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000019080)=0x30)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000300)={[{@test_dummy_encryption}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@sb}, {@commit={'commit', 0x3d, 0x5}}, {@nodelalloc}, {@max_batch_time}, {@abort}, {@data_err_abort}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5f1, &(0x7f0000001200)="$eJzs3c9vVFUbAOD3zrSlpfC1kC/fJy6kiTGQKC0tYIhxAVtDGvwRN26stCBSoKE1WjShJLgxMW6MMXHlQvwvlMiWla5MdOPKkBA1LE0cc2fuLZ32TktLO7cyz5MMc+89c3veYfr2nDlzzp0AOtZQ+k8lYl9EzCQRA8nCYllXZIVDjcfd//PDM+ktiVrt1d+TSLJj+eOT7L4/O7k3In74Pom91ZX1zs5fvTAxPT11Jdsfmbs4MzI7f/XQ+YsT56bOTV0ae37s+LGjx46PHt7Q87pWcOzUjXfeG/h4/I2vv/wrGf3ml/EkTsRL2QOXPo/NMhRD9f+TZGVR//HNrqwk1ez3ZOlLnHSVGBDrkr9+3RHx/xiIajx48Qbio5dLDQ7YUrUkogZ0qET+Q4fK+wH5e/vl74MrpfRKgHa4d7IxALAy/7saY4PRWx8b2Hk/iaXDOklEbGxkrtmuiLhze/zG2dvjN2KLxuGAYgvXI+KJovxP6vk/GL0xWM//SlP+p/2C09l9evyVDda/fKhY/kP7NPK/d9X8jxb5/2Z6v7ux/9YG6x96sPl2X1P+923wJwIAAAAAAEDnunUyIp4r+vy/sjj/Jwrm//RHxIlNqH9o2f7Kz/8rdzehGqDAvZMRLxbO/63ks38Hq9nW7vp8gO7k7PnpqcMR8Z+IOBjdO9L90VXqOPTJ3i9alQ1l8//yW1r/nWwuYBbH3a4dzedMTsxNPOrzBiLuXY94snD+b7LY/icF7X/692DmIevY+8zN063K1s5/YKvUvoo4UNj+P7hqRbL69TlG6v2BkbxXkFmycOipDz79tlX9G81/l5iAR5e2/ztXz//BZOn1embXX8eR+a5aq7KN9v97ktfql5zpyY69PzE3d2U0oic5VU2PNh0fW3/M8DjK8yHPlzT/Dz69+vhfUf+/LyIWlv3s5I/mNcW5//3d/2urePT/oTxp/k+uq/1f/8bYzcHvWtX/cO3/0XpbfzA7YvwPGj7P07Sn+XhBOnYVFbU7XgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4HFQiYlckleHF7UpleDiiPyL+Gzsr05dn5549e/ndS5NpWf37/yv5N/0ONPaT/Pv/B5fsjy3bPxIReyLis2pffX/4zOXpybKfPAAAAAAAAAAAAAAAAAAAAGwT/S3W/6d+q5YdHbDlusoOAChNQf7/WEYcQPtp/6FzyX/oXPIfOldx/v/c9jiA9tP+Q+eS/9C55D90LvkPAAAAAACPlT37b/2URMTCC331W6onK+suNTJgq1XKDgAoTeMSP7WywwBKYOoPdC7v8YFkjfLelietdeZqZs48wskAAAAAAAAAAAAA0HEO7LP+HzrVquv/T7cvDqD9qmUHAJQmX/+/v+Q4gPbzHh+INVbyF67/X/MsAAAAAAAAAAAAAGAzzc5fvTAxPT11xcbr2yOMdm7UarVr6W/BdonnX76RT4XfLvEs28jX+j3cWeX9TQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJr9EwAA//+Fxyb7")

8.080650657s ago: executing program 5 (id=902):
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000001080)='GPL\x00', 0xfffffffb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
close(0x3)

6.311777091s ago: executing program 8 (id=910):
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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")
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x10)
r0 = open(&(0x7f0000000100)='.\x00', 0x10000, 0x0)
getdents(r0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

5.28789398s ago: executing program 8 (id=912):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9})
fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5})
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

4.680600726s ago: executing program 5 (id=914):
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='statm\x00')
fcntl$setstatus(r0, 0x4, 0x40800)
r1 = syz_io_uring_setup(0x6170, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x1}, &(0x7f0000000380)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4000, @fd=r0, 0x792, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/140, 0x8c}, {0x0}], 0x2, 0x0, 0x1})
io_uring_enter(r1, 0x567, 0x1000a387, 0x0, 0x0, 0x0)

3.960464758s ago: executing program 6 (id=915):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
prlimit64(0x0, 0xe, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x4018, 0x4)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9})
fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5})
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)

3.846713075s ago: executing program 8 (id=916):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a000000060a0b04000000000000000002a307368e00048024000180090001006d657461000000001400028008000140000000150800024000000004280001800b0001006f626a7265660000180002800900020073797a310000000008000140000000080900010073797a30000000000900020073797a32000000001400000011"], 0xa4}}, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27031c00d8f714000000002f1eafbcf706e105000000894f000f1102ee1680ca8286cee844000000000019b0fb0bba00"/65, 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe73}], 0x4}, 0x0)

3.846379575s ago: executing program 5 (id=917):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x60042, 0x1)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

3.645132877s ago: executing program 5 (id=919):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x440c, &(0x7f0000000080), 0x6, 0x454, &(0x7f0000000ac0)="$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")

3.645022337s ago: executing program 7 (id=920):
socket$l2tp(0x2, 0x2, 0x73)
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10)

3.644941337s ago: executing program 8 (id=921):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
socket$nl_xfrm(0x10, 0x3, 0x6)
write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a0488a80180c20000035d76243d65328100520086dd69000400000006"], 0x3e)

3.407961371s ago: executing program 7 (id=922):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0)

3.192981383s ago: executing program 8 (id=923):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYRES8], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)

3.07490303s ago: executing program 7 (id=924):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000001c0), 0x12)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0)

2.981208615s ago: executing program 8 (id=925):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000240)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@nobh}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$eJzs3d9rW+UbAPDnpM1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdKhv+Af8VAB0NG0QtvKic9abs1adIuWzrz+cDZ3jfnJO95cs7z9n1zTkgAA2s0+6cQ8WJEfJVEHI6IJF83HPnK0dXtlh9en8qWJFZWPv4zaWyX1Zuv1XzewbzyQkT8+kXEycLmdmuLS7PlSiWdz+tj9bkrY7XFpVOX5soz6Ux6eWJy8sybkxPvvP1Wz2J97fzf33509/0zXx5f/uan+0duJ3E2DuXrNsbxBG5srIzGaP6eFOPsYxuOr/7XizZ3haTfO8CODOV5XoysDzgcQ3nWA/99n0fECjCgEvkPA6o5DmjO7Xs0D35uPHhvdQK0Of7h1c9GYl9jbnRgOXlkZpTNd0d60H7Wxs9/3LmdLdG7zyEAOrpxMyJODw9v7v+SvP/budNdbPN4G/o/eHbuZuOf11uNfwpr459oMf452CJ3d6Jz/hfu96CZtrLx37stx79rF61GhvLa/xpjvmJy8VIlzfq2/0fEiSjuzerjW7RxZvneSrt1G8d/2ZK13xwL5vtxf3jvo8+ZLtfLTxLzRg9uRrzUcvybrB3/pMXxz96P8122cSy980q7dZ3jf7pWfoh4teXxX7+ilWx9fXKscT6MNc+Kzf66dey3du33O/7s+B/YOv6RZOP12tr22/h+3z9pu3WPxB/dn/97kk8a5T35Y9fK9fr8eMSe5MPNj0+sP7dZb26fxX/i+Nb93/r5/8va6+yPiE+7jP/W0R9f3tdN/H06/tPbOv7bL9z74LPv2rXfXf/3RqN0In+km/6vw34VY8dnMwAAAAAAAOxehYg4FEmhtFYuFEql1fs7jsaBQqVaq5+8WF24PB2N78qORLHQvNJ9eMP9EOP5/bDN+sRj9cmIOBIRXw/tb9RLU9XKdL+DBwAAAAAAAAAAAAAAAAAAgF3iYJvv/2d+H+r33gFPnZ/8hsHVMf978UtPwK7k7z8MLvkPg0v+w+CS/zC45D8MLvkPg0v+w+CS/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBT58+dy5aV5YfXp7L69NXFhdnq1VPTaW22NLcwVZqqzl8pzVSrM5W0NFWd6/R6lWr1yvhELFwbq6e1+lhtcenCXHXhcv3CpbnyTHohLT6TqAAAAAAAAAAAAAAAAAAAAOD5Ultcmi1XKum8gsKOCsO7YzcUelzod88EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOv+DQAA//8Kozfs")
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf94d8000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ppoll(&(0x7f0000000080)=[{r4, 0x465}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0)
socket$inet_udp(0x2, 0x2, 0x0)

2.91117234s ago: executing program 5 (id=926):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9})
fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5})
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

1.293081614s ago: executing program 5 (id=927):
r0 = gettid()
timer_create(0x0, &(0x7f00000014c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000200))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fsync(r1)

563.741637ms ago: executing program 7 (id=928):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40)

427.983265ms ago: executing program 6 (id=929):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x13f, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118)

427.740315ms ago: executing program 7 (id=930):
unshare(0x60400)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000980)={{0x100000a, 0x2000006}, {0xc563, 0x1}, 0x400006, 0x6})

331.259841ms ago: executing program 7 (id=931):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@noblock_validity}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x478, &(0x7f0000000840)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="08000000020000000b"], 0x0)

245.664605ms ago: executing program 6 (id=932):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001380)={'wpan3\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x166efe3bb75458e3}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x3c, r1, 0x0, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x200000c1)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000014c0), r0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x5c, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xfffffffffffffffd}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4)

0s ago: executing program 6 (id=933):
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
ioctl$LOOP_CONFIGURE(r0, 0xc0c0128e, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}})

kernel console output (not intermixed with test programs):

T5760] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.328: invalid indirect mapped block 256 (level 2)
[  215.157202][ T5764] overlayfs: conflicting lowerdir path
[  215.193862][ T5760] EXT4-fs (loop1): 2 truncates cleaned up
[  215.232968][ T5760] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback.
[  217.352755][ T5789] loop2: detected capacity change from 0 to 1024
[  217.470088][ T5789] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,grpquota,. Quota mode: writeback.
[  217.545189][   T26] audit: type=1804 audit(1768940968.762:37): pid=5789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.331" name="/newroot/54/file2/bus" dev="loop2" ino=18 res=1 errno=0
[  218.606390][ T5805] loop1: detected capacity change from 0 to 512
[  218.662109][ T5805] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.333: invalid indirect mapped block 256 (level 2)
[  218.713830][ T5805] EXT4-fs (loop1): 2 truncates cleaned up
[  218.729911][ T5805] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback.
[  219.918180][ T5823] loop1: detected capacity change from 0 to 512
[  220.011251][ T5823] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.334: bg 0: block 248: padding at end of block bitmap is not set
[  220.070361][ T5823] Quota error (device loop1): write_blk: dquota write failed
[  220.084586][ T5823] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  220.101896][ T5823] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.334: Failed to acquire dquot type 1
[  220.139721][ T5830] loop5: detected capacity change from 0 to 512
[  220.165255][ T5823] EXT4-fs (loop1): 1 truncate cleaned up
[  220.170967][ T5823] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  220.191763][ T5823] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  220.260849][ T5830] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.335: invalid indirect mapped block 256 (level 2)
[  220.377886][ T5830] EXT4-fs (loop5): 2 truncates cleaned up
[  220.421671][ T5830] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback.
[  222.706614][ T5855] loop2: detected capacity change from 0 to 512
[  222.723543][ T5856] loop3: detected capacity change from 0 to 512
[  222.765179][ T5859] loop5: detected capacity change from 0 to 512
[  222.824690][ T5856] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.339: bg 0: block 248: padding at end of block bitmap is not set
[  222.898888][ T5859] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.340: invalid indirect mapped block 256 (level 2)
[  222.948708][ T5856] Quota error (device loop3): write_blk: dquota write failed
[  222.950505][ T5855] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.338: invalid indirect mapped block 256 (level 2)
[  222.973556][ T5855] EXT4-fs (loop2): 2 truncates cleaned up
[  222.979374][ T5855] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback.
[  223.018046][ T5859] EXT4-fs (loop5): 2 truncates cleaned up
[  223.024716][ T5856] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  223.067544][ T5859] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback.
[  223.111687][ T5856] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.339: Failed to acquire dquot type 1
[  223.190150][ T5856] EXT4-fs (loop3): 1 truncate cleaned up
[  223.248013][ T5856] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  223.351851][ T5856] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  227.011709][ T5747] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  230.282418][ T4292] Quota error (device loop3): remove_tree: Getting block too big (0 >= 6)
[  230.291031][ T4292] EXT4-fs error (device loop3): ext4_release_dquot:6270: comm kworker/u4:5: Failed to release dquot type 1
[  231.441360][ T5941] loop3: detected capacity change from 0 to 1024
[  232.607116][ T5941] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,grpquota,. Quota mode: writeback.
[  233.263392][   T26] audit: type=1804 audit(1768940984.482:38): pid=5955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.348" name="/newroot/66/file2/bus" dev="loop3" ino=18 res=1 errno=0
[  233.324617][ T5956] loop2: detected capacity change from 0 to 512
[  234.961855][ T5956] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.352: bg 0: block 248: padding at end of block bitmap is not set
[  235.072049][ T5956] Quota error (device loop2): write_blk: dquota write failed
[  235.131711][ T5956] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  235.183398][ T5956] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.352: Failed to acquire dquot type 1
[  235.410166][ T5956] EXT4-fs (loop2): 1 truncate cleaned up
[  235.422773][ T5956] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  235.455819][ T5956] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  235.468772][ T5975] loop1: detected capacity change from 0 to 512
[  235.741682][ T5975] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.357: invalid indirect mapped block 256 (level 2)
[  235.765271][ T5975] EXT4-fs (loop1): 2 truncates cleaned up
[  235.771153][ T5975] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback.
[  236.733409][ T5988] loop5: detected capacity change from 0 to 512
[  237.227112][ T5988] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.359: bg 0: block 248: padding at end of block bitmap is not set
[  237.312058][ T5947] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  237.548406][ T5988] Quota error (device loop5): write_blk: dquota write failed
[  237.658208][ T5988] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  237.693843][ T5988] EXT4-fs error (device loop5): ext4_acquire_dquot:6234: comm syz.5.359: Failed to acquire dquot type 1
[  237.835296][ T5988] EXT4-fs (loop5): 1 truncate cleaned up
[  237.841011][ T5988] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  237.920468][ T5988] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  238.775011][ T6000] loop1: detected capacity change from 0 to 512
[  239.537145][ T6000] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.361: invalid indirect mapped block 256 (level 2)
[  239.969049][ T6000] EXT4-fs (loop1): 2 truncates cleaned up
[  240.034937][ T6000] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback.
[  240.113699][ T6010] loop2: detected capacity change from 0 to 512
[  240.698725][ T6010] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.363: invalid indirect mapped block 256 (level 2)
[  240.811668][ T5947] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  240.896106][ T6010] EXT4-fs (loop2): 2 truncates cleaned up
[  240.956131][ T6010] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback.
[  245.287278][ T6042] loop1: detected capacity change from 0 to 512
[  245.340225][ T6045] loop2: detected capacity change from 0 to 512
[  245.541192][ T6045] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.371: invalid indirect mapped block 256 (level 2)
[  245.555995][ T6045] EXT4-fs (loop2): 2 truncates cleaned up
[  245.562250][ T6045] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback.
[  245.760104][ T6042] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.370: bg 0: block 248: padding at end of block bitmap is not set
[  245.812583][ T6042] Quota error (device loop1): write_blk: dquota write failed
[  245.821293][ T6042] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  245.831912][ T6042] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.370: Failed to acquire dquot type 1
[  246.079379][ T6042] EXT4-fs (loop1): 1 truncate cleaned up
[  246.159885][ T6042] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  246.386012][ T6042] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  246.414199][ T6056] loop5: detected capacity change from 0 to 512
[  246.619671][ T6056] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.372: invalid indirect mapped block 256 (level 2)
[  246.640253][ T6056] EXT4-fs (loop5): 2 truncates cleaned up
[  246.651792][ T6056] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback.
[  248.432916][    T9] Quota error (device loop1): remove_tree: Getting block too big (0 >= 6)
[  248.452693][    T9] EXT4-fs error (device loop1): ext4_release_dquot:6270: comm kworker/u4:0: Failed to release dquot type 1
[  248.541511][ T6074] loop2: detected capacity change from 0 to 512
[  248.647074][ T6076] loop1: detected capacity change from 0 to 512
[  248.710207][ T6074] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.376: invalid indirect mapped block 256 (level 2)
[  248.902485][ T6074] EXT4-fs (loop2): 2 truncates cleaned up
[  248.908299][ T6074] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback.
[  248.947702][ T6076] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.375: invalid indirect mapped block 256 (level 2)
[  248.986820][ T6076] EXT4-fs (loop1): 2 truncates cleaned up
[  249.182433][ T6076] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback.
[  251.330114][ T6048] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  251.473659][ T6089] loop3: detected capacity change from 0 to 512
[  251.580303][ T6089] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.378: bg 0: block 248: padding at end of block bitmap is not set
[  251.934105][ T6089] Quota error (device loop3): write_blk: dquota write failed
[  251.977270][ T6089] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  252.038380][ T6089] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.378: Failed to acquire dquot type 1
[  252.098767][ T6089] EXT4-fs (loop3): 1 truncate cleaned up
[  252.125142][ T6089] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  252.167348][ T6089] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  252.777864][ T6100] overlayfs: conflicting lowerdir path
[  254.420741][ T6113] loop5: detected capacity change from 0 to 512
[  254.625225][ T6118] loop2: detected capacity change from 0 to 128
[  254.930984][ T6113] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.383: invalid indirect mapped block 256 (level 2)
[  254.968425][ T6118] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  255.234586][ T6118] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  255.406741][ T6113] EXT4-fs (loop5): 2 truncates cleaned up
[  255.464123][ T6113] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback.
[  255.668443][  T155] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  256.301653][ T6048] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  257.878260][ T6140] loop5: detected capacity change from 0 to 512
[  257.911125][ T6142] loop1: detected capacity change from 0 to 512
[  258.131382][ T6140] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.390: invalid indirect mapped block 256 (level 2)
[  258.191068][ T6140] EXT4-fs (loop5): 2 truncates cleaned up
[  258.223241][ T6140] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback.
[  258.554762][ T6142] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.391: invalid indirect mapped block 256 (level 2)
[  258.852032][ T6145] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  258.878906][ T6142] EXT4-fs (loop1): 2 truncates cleaned up
[  258.901743][ T6142] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback.
[  259.349524][ T6151] loop3: detected capacity change from 0 to 512
[  259.663326][ T6151] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.393: invalid indirect mapped block 256 (level 2)
[  259.955395][ T6151] EXT4-fs (loop3): 2 truncates cleaned up
[  260.003107][ T6151] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback.
[  260.078946][ T6159] overlayfs: conflicting lowerdir path
[  261.012890][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  261.019392][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  261.399497][ T6168] loop1: detected capacity change from 0 to 512
[  261.507647][ T6169] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.189265][ T6168] EXT4-fs (loop1): 1 orphan inode deleted
[  262.229196][ T6168] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  262.273691][ T6178] loop3: detected capacity change from 0 to 512
[  262.309770][ T6168] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  262.333423][ T6171] device batadv_slave_0 entered promiscuous mode
[  262.343474][ T6174] device batadv_slave_0 left promiscuous mode
[  262.590495][ T6169] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.806584][ T6178] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.398: invalid indirect mapped block 256 (level 2)
[  263.065321][ T6178] EXT4-fs (loop3): 2 truncates cleaned up
[  263.179602][ T6178] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback.
[  263.640340][ T6192] loop2: detected capacity change from 0 to 512
[  264.197979][ T6192] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.402: invalid indirect mapped block 256 (level 2)
[  264.253877][ T6169] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.268289][ T6195] netlink: 32 bytes leftover after parsing attributes in process `syz.3.398'.
[  264.313265][ T6192] EXT4-fs (loop2): 2 truncates cleaned up
[  264.347200][ T6192] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback.
[  264.423366][ T6169] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.627021][ T6169] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  264.677988][ T6202] loop3: detected capacity change from 0 to 1024
[  264.702958][ T6169] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  264.823643][ T6202] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  265.143470][ T6169] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  265.251406][ T6169] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  265.511333][ T6211] loop2: detected capacity change from 0 to 512
[  265.596825][ T6211] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.405: invalid indirect mapped block 256 (level 2)
[  265.667230][ T6211] EXT4-fs (loop2): 2 truncates cleaned up
[  265.707782][ T6211] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback.
[  268.140764][ T5191] Bluetooth: hci6: command 0x0406 tx timeout
[  268.981245][ T6236] loop5: detected capacity change from 0 to 512
[  269.110502][ T6236] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.413: invalid indirect mapped block 256 (level 2)
[  269.156755][ T6236] EXT4-fs (loop5): 2 truncates cleaned up
[  269.170589][ T6236] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback.
[  269.193466][ T6246] loop3: detected capacity change from 0 to 512
[  269.305978][ T6246] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.415: invalid indirect mapped block 256 (level 2)
[  269.343251][ T6246] EXT4-fs (loop3): 2 truncates cleaned up
[  269.349485][ T6246] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback.
[  270.791752][ T6253] netlink: 32 bytes leftover after parsing attributes in process `syz.5.413'.
[  271.667175][ T6214] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  271.892403][ T6260] loop2: detected capacity change from 0 to 512
[  272.319913][ T6260] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.419: bg 0: block 248: padding at end of block bitmap is not set
[  272.645872][ T6260] Quota error (device loop2): write_blk: dquota write failed
[  272.726115][ T6260] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  272.764788][ T6260] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.419: Failed to acquire dquot type 1
[  272.835491][ T6260] EXT4-fs (loop2): 1 truncate cleaned up
[  272.851964][ T6214] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  272.898431][ T6260] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  272.971242][ T6260] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  275.100114][ T6303] loop1: detected capacity change from 0 to 1024
[  275.360603][ T6303] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  275.443114][ T6303] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  275.470059][ T6307] netlink: 32 bytes leftover after parsing attributes in process `syz.0.430'.
[  275.561431][ T6303] EXT4-fs error (device loop1): ext4_get_journal_inode:5185: inode #5: comm syz.1.429: unexpected bad inode w/o EXT4_IGET_BAD
[  275.807024][ T6303] EXT4-fs (loop1): no journal found
[  275.915190][ T6303] EXT4-fs (loop1): can't get journal size
[  276.127487][ T6303] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,noinit_itable,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback.
[  276.490934][ T6290] netlink: 28 bytes leftover after parsing attributes in process `syz.3.427'.
[  276.578163][ T6290] netlink: 28 bytes leftover after parsing attributes in process `syz.3.427'.
[  276.745579][ T6316] loop1: detected capacity change from 0 to 512
[  276.886138][ T6316] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.433: invalid indirect mapped block 256 (level 2)
[  276.932320][ T6316] EXT4-fs (loop1): 2 truncates cleaned up
[  276.940558][ T6316] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback.
[  277.311820][ T6319] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  278.284592][ T6340] loop1: detected capacity change from 0 to 512
[  278.899558][ T6340] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.441: invalid indirect mapped block 256 (level 2)
[  279.229568][ T6347] loop2: detected capacity change from 0 to 1024
[  279.253294][ T6340] EXT4-fs (loop1): 2 truncates cleaned up
[  279.259269][ T6340] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback.
[  280.495426][ T6347] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,grpquota,. Quota mode: writeback.
[  280.952254][ T6356] netlink: 32 bytes leftover after parsing attributes in process `syz.1.441'.
[  281.680719][ T6346] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  283.246959][ T6380] loop1: detected capacity change from 0 to 256
[  284.384201][ T6393] loop1: detected capacity change from 0 to 128
[  284.437397][ T6393] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  284.450746][ T6393] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  284.658741][ T6407] loop5: detected capacity change from 0 to 512
[  284.744452][ T6407] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  284.781599][ T6407] EXT4-fs (loop5): bad geometry: first data block is 0 with a 1k block and cluster size
[  285.969647][ T6415] Zero length message leads to an empty skb
[  286.249492][ T6429] loop2: detected capacity change from 0 to 512
[  286.468381][ T6429] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[  286.549601][ T6429] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  286.719725][ T6429] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3887: comm syz.2.470: Allocating blocks 41-42 which overlap fs metadata
[  286.833657][ T6429] Quota error (device loop2): write_blk: dquota write failed
[  286.851424][ T6429] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5
[  286.922826][ T6429] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  287.005021][ T6429] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.470: Failed to acquire dquot type 1
[  287.071314][ T6429] EXT4-fs error (device loop2): mb_free_blocks:1876: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  287.109203][ T6429] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #12: comm syz.2.470: corrupted inode contents
[  287.151819][ T6429] EXT4-fs error (device loop2): ext4_dirty_inode:6058: inode #12: comm syz.2.470: mark_inode_dirty error
[  287.177529][ T6429] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #12: comm syz.2.470: corrupted inode contents
[  287.223585][ T6429] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #12: comm syz.2.470: mark_inode_dirty error
[  288.323266][ T6429] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #12: comm syz.2.470: corrupted inode contents
[  288.388085][ T6429] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  288.432090][ T6429] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #12: comm syz.2.470: corrupted inode contents
[  288.503247][ T6429] EXT4-fs error (device loop2): ext4_truncate:4279: inode #12: comm syz.2.470: mark_inode_dirty error
[  288.567427][ T6429] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  288.641831][ T6429] EXT4-fs (loop2): 1 truncate cleaned up
[  288.657297][ T6429] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,jqfmt=vfsold,noinit_itable,max_dir_size_kb=0x0000000000000e4a,noauto_da_alloc,sysvgroups,resgid=0x00000000000000002,errors=continue. Quota mode: writeback.
[  289.010812][ T4183] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  289.068407][ T6475] 9pnet: Could not find request transport: f|a3²¯W†T•áˆ!÷å�d
[  289.083244][ T4183] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  289.114880][ T6481] loop1: detected capacity change from 0 to 1024
[  289.219013][ T6481] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,grpquota,. Quota mode: writeback.
[  289.246805][ T6488] loop5: detected capacity change from 0 to 1024
[  289.281059][   T26] audit: type=1804 audit(1768941040.492:39): pid=6481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.488" name="/newroot/113/file2/bus" dev="loop1" ino=18 res=1 errno=0
[  289.465449][ T6488] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  290.379664][ T6509] loop1: detected capacity change from 0 to 512
[  290.516626][ T6509] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.495: invalid indirect mapped block 256 (level 2)
[  290.538742][ T6505] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  290.570522][ T6505] loop5: detected capacity change from 0 to 1024
[  290.638547][ T6509] EXT4-fs (loop1): 2 truncates cleaned up
[  290.681725][ T6509] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback.
[  290.878736][ T6505] EXT4-fs (loop5): Test dummy encryption mode enabled
[  291.021886][ T6505] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #4: comm syz.5.491: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  291.040171][ T6505] EXT4-fs error (device loop5): ext4_quota_enable:6445: comm syz.5.491: Bad quota inode: 4, type: 1
[  291.051974][ T6505] EXT4-fs warning (device loop5): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  291.068318][ T6505] EXT4-fs (loop5): mount failed
[  291.240003][ T6517] netlink: 20 bytes leftover after parsing attributes in process `syz.1.495'.
[  292.287206][ T4435] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.794151][ T4435] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.198759][ T6533] loop5: detected capacity change from 0 to 512
[  293.301031][ T6537] loop3: detected capacity change from 0 to 1024
[  293.379503][ T4435] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.392822][ T6533] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  293.438036][ T6537] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,grpquota,. Quota mode: writeback.
[  293.517801][ T6533] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3887: comm syz.5.502: Allocating blocks 41-42 which overlap fs metadata
[  293.532532][ T6533] Quota error (device loop5): write_blk: dquota write failed
[  293.539983][ T6533] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5
[  293.549408][ T6533] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3887: comm syz.5.502: Allocating blocks 41-42 which overlap fs metadata
[  293.566933][   T26] audit: type=1804 audit(1768941044.782:40): pid=6537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.503" name="/newroot/92/file2/bus" dev="loop3" ino=18 res=1 errno=0
[  293.574183][ T6533] Quota error (device loop5): write_blk: dquota write failed
[  293.771224][ T6533] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  293.790597][ T6533] EXT4-fs error (device loop5): ext4_acquire_dquot:6234: comm syz.5.502: Failed to acquire dquot type 1
[  293.847150][ T6533] EXT4-fs error (device loop5): mb_free_blocks:1876: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  293.872983][   T26] audit: type=1326 audit(1768941044.822:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.1.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe247cacb9 code=0x7ffc0000
[  293.899098][ T4435] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.911794][ T6533] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #12: comm syz.5.502: corrupted inode contents
[  293.927246][ T6552] 9pnet: Could not find request transport: f|a3²¯W†T•áˆ!÷å�d
[  293.949905][   T26] audit: type=1326 audit(1768941044.822:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.1.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe247cacb9 code=0x7ffc0000
[  293.967778][ T6551] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  293.991689][ T6551] EXT4-fs (loop3): Remounting filesystem read-only
[  294.009103][ T6533] EXT4-fs error (device loop5): ext4_dirty_inode:6058: inode #12: comm syz.5.502: mark_inode_dirty error
[  294.097778][ T6533] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #12: comm syz.5.502: corrupted inode contents
[  294.122013][ T6533] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #12: comm syz.5.502: mark_inode_dirty error
[  294.238665][ T6533] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #12: comm syz.5.502: corrupted inode contents
[  294.251303][ T6533] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  294.261921][ T6533] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #12: comm syz.5.502: corrupted inode contents
[  294.279497][ T6533] EXT4-fs error (device loop5): ext4_truncate:4279: inode #12: comm syz.5.502: mark_inode_dirty error
[  294.291351][ T6533] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem
[  294.306961][ T6533] EXT4-fs (loop5): 1 truncate cleaned up
[  294.312718][ T6533] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,resgid=0x0000000000000000,noinit_itable,quota,noauto_da_alloc,sysvgroups,resgid=0x00000000000000002,errors=continue. Quota mode: writeback.
[  294.641063][ T6531] chnl_net:caif_netlink_parms(): no params data found
[  294.655333][ T6533] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3887: comm syz.5.502: Allocating blocks 41-42 which overlap fs metadata
[  294.694300][ T6533] Quota error (device loop5): write_blk: dquota write failed
[  294.709837][ T6533] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  294.743764][ T6533] EXT4-fs error (device loop5): ext4_acquire_dquot:6234: comm syz.5.502: Failed to acquire dquot type 1
[  294.908204][ T6531] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.930080][ T6531] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.081140][ T6531] device bridge_slave_0 entered promiscuous mode
[  295.614272][ T4248] Bluetooth: hci0: command 0x0409 tx timeout
[  296.064356][ T6531] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.079696][ T6531] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.160129][ T6531] device bridge_slave_1 entered promiscuous mode
[  296.259311][ T6531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  296.311357][ T6531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  296.452253][ T6531] team0: Port device team_slave_0 added
[  296.460629][ T6531] team0: Port device team_slave_1 added
[  296.607935][ T6531] batman_adv: batadv0: Adding interface: batadv_slave_0
[  296.640062][ T6531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  296.729821][ T6531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  296.783084][ T6531] batman_adv: batadv0: Adding interface: batadv_slave_1
[  296.813730][ T6531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  296.909975][ T6531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  296.911188][ T6598] loop1: detected capacity change from 0 to 512
[  296.981851][ T6598] EXT4-fs (loop1): Ignoring removed bh option
[  297.074738][ T6598] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  297.115110][ T6598] EXT4-fs (loop1): external journal device major/minor numbers have changed
[  297.201936][ T6598] EXT4-fs (loop1): failed to open journal device unknown-block(8,224) -6
[  297.273331][ T6531] device hsr_slave_0 entered promiscuous mode
[  297.331125][ T6531] device hsr_slave_1 entered promiscuous mode
[  297.372715][ T6531] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  297.423755][ T6531] Cannot create hsr debugfs directory
[  297.598092][ T4435] device hsr_slave_0 left promiscuous mode
[  297.615948][ T4435] device hsr_slave_1 left promiscuous mode
[  297.651745][ T4255] Bluetooth: hci0: command 0x041b tx timeout
[  297.658904][ T4435] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  297.681235][ T4435] batman_adv: batadv0: Removing interface: batadv_slave_0
[  297.713496][ T4435] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  297.729992][ T4435] batman_adv: batadv0: Removing interface: batadv_slave_1
[  297.756653][ T4435] device bridge_slave_1 left promiscuous mode
[  297.769772][ T4435] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.799275][ T4435] device bridge_slave_0 left promiscuous mode
[  297.822044][ T4435] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.858674][ T4435] device veth1_macvtap left promiscuous mode
[  297.880586][ T4435] device veth0_macvtap left promiscuous mode
[  297.900091][ T4435] device veth1_vlan left promiscuous mode
[  297.924673][ T4435] device veth0_vlan left promiscuous mode
[  298.256025][ T6615] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿÛß%
[  298.840069][ T4435] team0 (unregistering): Port device team_slave_1 removed
[  298.892444][ T4435] team0 (unregistering): Port device team_slave_0 removed
[  298.920265][ T4435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  298.959735][ T4435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  299.154902][ T4435] bond0 (unregistering): Released all slaves
[  299.313466][ T6636] loop7: detected capacity change from 0 to 16384
[  299.805577][ T6647] loop1: detected capacity change from 0 to 1024
[  299.815809][ T1111] Bluetooth: hci0: command 0x040f tx timeout
[  299.980974][ T6647] EXT4-fs (loop1): Test dummy encryption mode enabled
[  300.227563][ T6647] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #4: comm syz.1.522: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  300.246971][ T6647] EXT4-fs error (device loop1): ext4_quota_enable:6445: comm syz.1.522: Bad quota inode: 4, type: 1
[  300.261856][ T6647] EXT4-fs warning (device loop1): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  300.291086][ T6647] EXT4-fs (loop1): mount failed
[  300.795959][ T6657] loop5: detected capacity change from 0 to 128
[  300.809421][ T6531] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  300.862877][ T6531] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  300.877554][   T26] audit: type=1804 audit(1768941052.092:43): pid=6657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.526" name="/newroot/47/file0/bus" dev="loop5" ino=1048598 res=1 errno=0
[  300.921127][ T6531] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  300.940975][ T6662] loop3: detected capacity change from 0 to 1024
[  300.963887][ T6531] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  301.022494][ T6662] EXT4-fs (loop3): Ignoring removed orlov option
[  301.141264][ T6662] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,quota,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,nodelalloc,noauto_da_alloc,stripe=0x0000000000000005,orlov,,errors=continue. Quota mode: writeback.
[  301.214116][ T6662] EXT4-fs error (device loop3): ext4_check_all_de:667: inode #12: block 7: comm syz.3.527: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0
[  301.412375][ T6662] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2806: Unable to expand inode 12. Delete some EAs or run e2fsck.
[  301.850929][ T6682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.529'.
[  301.918735][ T6681] loop1: detected capacity change from 0 to 256
[  302.147061][ T1111] Bluetooth: hci0: command 0x0419 tx timeout
[  302.163135][ T6681] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  302.262096][ T6531] 8021q: adding VLAN 0 to HW filter on device bond0
[  302.352711][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  302.389447][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  302.457588][ T6531] 8021q: adding VLAN 0 to HW filter on device team0
[  302.482033][ T6695] netlink: 'syz.3.531': attribute type 5 has an invalid length.
[  302.493105][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  302.541847][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.531'.
[  302.552293][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  302.568762][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.575945][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  302.642188][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  302.726205][ T6531] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  302.748903][ T6531] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  302.839393][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  302.876116][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  302.916526][ T4292] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.923761][ T4292] bridge0: port 2(bridge_slave_1) entered forwarding state
[  303.071057][ T6711] loop5: detected capacity change from 0 to 1024
[  303.177081][ T6711] EXT4-fs (loop5): Test dummy encryption mode enabled
[  303.372553][ T6711] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #4: comm syz.5.534: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  303.395952][ T6711] EXT4-fs error (device loop5): ext4_quota_enable:6445: comm syz.5.534: Bad quota inode: 4, type: 1
[  303.409051][ T6711] EXT4-fs warning (device loop5): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  303.433213][ T6711] EXT4-fs (loop5): mount failed
[  303.646917][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  303.730730][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  303.769133][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  303.835205][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  303.856743][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  303.880431][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  303.929854][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  303.974740][ T6717] netlink: 240 bytes leftover after parsing attributes in process `syz.3.536'.
[  303.994732][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  304.029335][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  304.081334][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  304.129775][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  304.144836][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  304.603445][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  304.611009][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  304.663204][ T6531] 8021q: adding VLAN 0 to HW filter on device batadv0
[  304.675111][ T6737] loop5: detected capacity change from 0 to 512
[  304.759967][ T6737] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  304.880426][ T6737] EXT4-fs (loop5): 1 truncate cleaned up
[  304.891600][ T6737] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,noinit_itable,nodiscard,nomblk_io_submit,barrier=0x0000000000000000,jqfmt=vfsv1,,errors=continue. Quota mode: none.
[  304.957794][ T6737] EXT4-fs (loop5): Online resizing not supported with sparse_super2
[  305.102272][ T6750] loop5: detected capacity change from 0 to 128
[  305.248054][ T6750] attempt to access beyond end of device
[  305.248054][ T6750] loop5: rw=2049, want=140, limit=128
[  305.645256][ T6764] loop1: detected capacity change from 0 to 1024
[  305.788360][ T6764] EXT4-fs (loop1): Test dummy encryption mode enabled
[  305.968043][ T6764] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #4: comm syz.1.546: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  305.988528][ T6764] EXT4-fs error (device loop1): ext4_quota_enable:6445: comm syz.1.546: Bad quota inode: 4, type: 1
[  306.003842][ T6764] EXT4-fs warning (device loop1): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  306.029780][ T6764] EXT4-fs (loop1): mount failed
[  306.470499][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  306.562695][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  306.585173][ T6771] loop5: detected capacity change from 0 to 1024
[  306.658718][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  306.692472][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  306.723455][ T6771] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  306.769810][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  306.839702][ T6771] EXT4-fs (loop5): orphan cleanup on readonly fs
[  306.868882][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  306.905780][ T6771] Quota error (device loop5): v2_read_file_info: Can't read info structure
[  306.946147][ T6531] device veth0_vlan entered promiscuous mode
[  306.972067][ T6771] EXT4-fs warning (device loop5): ext4_enable_quotas:6486: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  307.033314][ T6531] device veth1_vlan entered promiscuous mode
[  307.072099][ T6771] EXT4-fs (loop5): Cannot turn on quotas: error -5
[  307.105624][ T6771] EXT4-fs (loop5): 1 truncate cleaned up
[  307.111370][ T6771] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback.
[  307.187453][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  307.196849][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  307.244382][ T6771] EXT4-fs error (device loop5): ext4_iget_extra_inode:4566: inode #15: comm syz.5.548: corrupted in-inode xattr
[  307.284204][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  307.312980][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  307.399893][ T6531] device veth0_macvtap entered promiscuous mode
[  307.451325][ T6531] device veth1_macvtap entered promiscuous mode
[  307.499491][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  307.532387][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  307.556994][ T6531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.571620][ T6531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.625699][ T6531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.637068][ T6789] 9pnet: Could not find request transport: f|a3²¯W†T•áˆ!÷å�d
[  307.668295][ T6531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.719543][ T6531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.719595][ T6531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.719619][ T6531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.719633][ T6531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.721217][ T6531] batman_adv: batadv0: Interface activated: batadv_slave_0
[  307.729201][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  307.730093][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  307.735876][ T6531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.735899][ T6531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.735911][ T6531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.735924][ T6531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.735943][ T6531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.735957][ T6531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.735971][ T6531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.735985][ T6531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.737048][ T6531] batman_adv: batadv0: Interface activated: batadv_slave_1
[  307.737129][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  307.737750][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  307.764626][ T6531] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  307.764717][ T6531] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  307.764754][ T6531] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  307.764783][ T6531] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  307.940909][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  307.940978][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  307.945033][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  308.012561][ T4463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  308.012641][ T4463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  308.017357][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  308.508413][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.6.496'.
[  308.570276][ T6808] device bridge0 entered promiscuous mode
[  308.589233][ T6808] device bridge0 left promiscuous mode
[  309.158475][ T6825] loop6: detected capacity change from 0 to 128
[  309.761895][   T26] audit: type=1804 audit(1768941060.902:44): pid=6825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.562" name="/newroot/2/file0/bus" dev="loop6" ino=1048603 res=1 errno=0
[  309.903941][   T26] audit: type=1326 audit(1768941061.112:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6838 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b1fc0cb9 code=0x7ffc0000
[  309.943197][   T26] audit: type=1326 audit(1768941061.162:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6838 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fd5b1fc0cb9 code=0x7ffc0000
[  310.006834][ T6843] loop5: detected capacity change from 0 to 512
[  310.044487][   T26] audit: type=1326 audit(1768941061.162:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6838 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b1fc0cb9 code=0x7ffc0000
[  310.125164][ T6845] loop1: detected capacity change from 0 to 1024
[  310.131899][ T6843] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  310.155540][   T26] audit: type=1326 audit(1768941061.162:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6838 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b1fc0cb9 code=0x7ffc0000
[  310.221573][   T26] audit: type=1326 audit(1768941061.202:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6838 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd5b1fc0cb9 code=0x7ffc0000
[  310.274353][   T26] audit: type=1326 audit(1768941061.202:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6838 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b1fc0cb9 code=0x7ffc0000
[  310.367531][   T26] audit: type=1326 audit(1768941061.202:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6838 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b1fc0cb9 code=0x7ffc0000
[  310.413585][   T26] audit: type=1326 audit(1768941061.202:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6838 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fd5b1fc0cb9 code=0x7ffc0000
[  310.468575][ T6843] EXT4-fs error (device loop5): xattr_find_entry:297: inode #15: comm syz.5.566: corrupted xattr entries
[  310.536782][ T6845] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,grpquota,. Quota mode: writeback.
[  310.582370][ T6843] EXT4-fs (loop5): 1 orphan inode deleted
[  310.588481][ T6843] EXT4-fs (loop5): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,min_batch_time=0x0000000000000002,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,journal_ioprio=0x0000000000000002,,errors=continue. Quota mode: none.
[  310.614613][ T6850] 9pnet: Could not find request transport: f|a3²¯W†T•áˆ!÷å�d
[  311.332790][ T6883] loop1: detected capacity change from 0 to 512
[  311.445537][ T6883] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  311.494841][ T6881] loop5: detected capacity change from 0 to 1024
[  311.510205][ T4463] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 1
[  311.512925][ T6883] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  311.535880][ T4463] Bluetooth: hci4: Frame reassembly failed (-84)
[  311.550623][ T6881] EXT4-fs (loop5): Test dummy encryption mode enabled
[  311.604696][ T6881] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #4: comm syz.5.575: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  311.641994][ T6881] EXT4-fs error (device loop5): ext4_quota_enable:6445: comm syz.5.575: Bad quota inode: 4, type: 1
[  311.653341][ T6881] EXT4-fs warning (device loop5): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  311.669258][ T6881] EXT4-fs (loop5): mount failed
[  312.507418][ T6909] loop6: detected capacity change from 0 to 8192
[  312.746791][ T6918] loop3: detected capacity change from 0 to 1024
[  312.872007][ T6918] EXT4-fs (loop3): inline encryption not supported
[  312.878696][ T6918] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  312.959345][ T6918] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,journal_dev=0x0000000000000d5b,data_err=ignore,nodiscard,user_xattr,grpquota,init_itable,user_xattr,mb_optimize_scan=0x0000000000000001,errors=remount-ro,lazytime,. Quota mode: writeback.
[  313.014268][ T6924] loop6: detected capacity change from 0 to 1024
[  313.093679][ T6924] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,grpquota,. Quota mode: writeback.
[  313.153689][   T26] kauditd_printk_skb: 4 callbacks suppressed
[  313.153704][   T26] audit: type=1804 audit(1768941064.372:57): pid=6924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.583" name="/newroot/7/file2/bus" dev="loop6" ino=18 res=1 errno=0
[  313.571738][ T4289] Bluetooth: hci4: command 0x1003 tx timeout
[  313.577970][ T4194] Bluetooth: hci4: sending frame failed (-49)
[  314.538359][ T6991] loop3: detected capacity change from 0 to 512
[  314.581790][ T6991] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  314.598048][ T6991] EXT4-fs (loop3): ea_inode feature is not supported for Hurd
[  314.781643][   T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  314.853770][ T7001] loop6: detected capacity change from 0 to 1024
[  314.904600][ T7001] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,grpquota,. Quota mode: writeback.
[  314.965043][   T26] audit: type=1804 audit(1768941066.182:58): pid=7001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.601" name="/newroot/9/file2/bus" dev="loop6" ino=18 res=1 errno=0
[  314.981805][   T21] usb 2-1: device descriptor read/64, error -71
[  315.261599][   T21] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  315.451621][   T21] usb 2-1: device descriptor read/64, error -71
[  315.696324][ T1111] Bluetooth: hci4: command 0x1001 tx timeout
[  315.702510][   T21] usb usb2-port1: attempt power cycle
[  315.710875][ T4194] Bluetooth: hci4: sending frame failed (-49)
[  316.121944][   T21] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  316.455335][   T21] usb 2-1: device descriptor read/8, error -71
[  316.880845][ T7028] 9pnet: Could not find request transport: f|a3²¯W†T•áˆ!÷å�d
[  316.891648][   T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  316.977270][ T7032] netlink: 24 bytes leftover after parsing attributes in process `syz.3.611'.
[  316.997340][   T21] usb 2-1: device descriptor read/8, error -71
[  317.028418][ T7034] loop3: detected capacity change from 0 to 512
[  317.038875][ T7034] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[  317.049346][ T7034] EXT4-fs (loop3): Ignoring removed bh option
[  317.069850][ T7034] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,nogrpid,bh,,errors=continue. Quota mode: writeback.
[  317.083379][ T7034] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  317.129473][   T21] usb usb2-port1: unable to enumerate USB device
[  317.570865][ T7047] loop1: detected capacity change from 0 to 1024
[  317.674662][ T7052] loop3: detected capacity change from 0 to 512
[  317.689109][ T7047] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,grpquota,. Quota mode: writeback.
[  317.740738][ T7055] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  317.745092][ T1111] Bluetooth: hci4: command 0x1009 tx timeout
[  317.755599][ T7055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  317.765181][ T7055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  317.786356][ T7052] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.619: bg 0: block 248: padding at end of block bitmap is not set
[  317.819513][ T7055] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  317.827541][ T7052] Quota error (device loop3): write_blk: dquota write failed
[  317.836535][ T7055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  317.846990][ T7052] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  317.857289][ T7052] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.619: Failed to acquire dquot type 1
[  317.877416][ T7052] EXT4-fs (loop3): 1 truncate cleaned up
[  317.884237][ T7052] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  317.897716][ T7052] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  317.908743][ T7055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  317.933346][   T26] audit: type=1804 audit(1768941069.152:59): pid=7047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.618" name="/newroot/142/file2/bus" dev="loop1" ino=18 res=1 errno=0
[  319.192662][ T7085] netlink: 'syz.1.623': attribute type 3 has an invalid length.
[  319.212457][ T7085] netlink: 28 bytes leftover after parsing attributes in process `syz.1.623'.
[  319.890675][ T7099] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.010880][ T7099] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.260870][ T7099] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.279844][ T7105] 9pnet: Could not find request transport: f|a3²¯W†T•áˆ!÷å�d
[  320.337708][ T7112] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  320.374504][ T7112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  320.398605][ T7112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  320.521342][ T7099] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.715935][ T7099] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  320.740632][ T7099] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  320.766886][ T7099] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  320.851039][ T7099] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  321.232022][ T7147] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  322.619244][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  322.641774][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  322.805021][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.647'.
[  322.928995][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  322.983718][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  322.997260][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  323.045468][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  323.080219][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  323.180853][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  323.232168][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  323.404848][ T7175] 9pnet: Could not find request transport: f|a3²¯W†T•áˆ!÷å�d
[  323.467949][ T7182] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  323.490781][ T7182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  323.965799][ T7197] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  324.060791][ T7205] loop6: detected capacity change from 0 to 1024
[  324.157174][ T7205] EXT4-fs (loop6): inline encryption not supported
[  324.171827][ T7205] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  324.269854][ T7205] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,sysvgroups,data_err=ignore,barrier=0x000000000000007f,data_err=ignore,grpquota,dioread_nolock,nobarrier,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback.
[  324.642488][ T7217] loop5: detected capacity change from 0 to 4096
[  324.784521][ T7228] loop6: detected capacity change from 0 to 128
[  324.828059][ T7217] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  324.867415][ T7228] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  324.901750][ T7228] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  325.128686][ T7232] EXT4-fs (loop5): shut down requested (0)
[  325.185589][ T7237] loop1: detected capacity change from 0 to 4096
[  325.269697][ T7242] device syzkaller1 entered promiscuous mode
[  325.330386][ T7237] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,noblock_validity,,errors=continue. Quota mode: writeback.
[  325.441424][ T7246] loop3: detected capacity change from 0 to 2048
[  325.622984][ T7246] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  325.722106][   T26] audit: type=1800 audit(1768941076.942:60): pid=7246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.671" name="bus" dev="loop3" ino=18 res=0 errno=0
[  327.030234][ T7281] loop5: detected capacity change from 0 to 512
[  327.096133][ T7281] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  327.982576][ T7281] EXT4-fs (loop5): orphan cleanup on readonly fs
[  328.024848][ T7281] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3887: comm syz.5.678: Allocating blocks 41-42 which overlap fs metadata
[  328.075588][ T7281] Quota error (device loop5): write_blk: dquota write failed
[  328.091577][ T7281] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5
[  328.132586][ T7281] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3887: comm syz.5.678: Allocating blocks 41-42 which overlap fs metadata
[  328.249039][ T7281] Quota error (device loop5): write_blk: dquota write failed
[  328.288247][ T7281] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  328.361781][ T7281] EXT4-fs error (device loop5): ext4_acquire_dquot:6234: comm syz.5.678: Failed to acquire dquot type 1
[  328.447362][ T7281] EXT4-fs error (device loop5): mb_free_blocks:1876: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  328.663632][ T7281] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #12: comm syz.5.678: corrupted inode contents
[  328.714463][ T7296] FAT-fs (loop7): bogus number of reserved sectors
[  328.721173][ T7296] FAT-fs (loop7): Can't find a valid FAT filesystem
[  328.860680][ T7281] EXT4-fs error (device loop5): ext4_dirty_inode:6058: inode #12: comm syz.5.678: mark_inode_dirty error
[  329.161754][ T7281] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #12: comm syz.5.678: corrupted inode contents
[  329.212119][ T7281] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #12: comm syz.5.678: mark_inode_dirty error
[  329.272860][ T7281] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #12: comm syz.5.678: corrupted inode contents
[  329.302150][ T7281] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  329.344794][ T7281] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #12: comm syz.5.678: corrupted inode contents
[  329.379272][ T7281] EXT4-fs error (device loop5): ext4_truncate:4279: inode #12: comm syz.5.678: mark_inode_dirty error
[  329.412584][ T7299] loop3: detected capacity change from 0 to 512
[  329.449700][ T7281] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem
[  329.459290][ T7299] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[  329.490732][ T7281] EXT4-fs (loop5): 1 truncate cleaned up
[  329.506339][ T7299] EXT4-fs (loop3): orphan cleanup on readonly fs
[  329.516682][ T7281] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,resgid=0x0000000000000000,noinit_itable,quota,noauto_da_alloc,sysvgroups,resgid=0x00000000000000002,errors=continue. Quota mode: writeback.
[  329.542952][ T7299] EXT4-fs warning (device loop3): ext4_enable_quotas:6486: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  329.577647][ T7281] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #13: comm syz.5.678: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  329.607662][ T7299] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  329.614487][ T7299] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.680: bad orphan inode 768
[  329.625325][ T7299] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,noauto_da_alloc,delalloc,,errors=continue. Quota mode: writeback.
[  329.705554][ T7299] EXT4-fs (loop3): Ignoring removed orlov option
[  329.717698][ T7299] EXT4-fs (loop3): Remounting file system with no journal so ignoring journalled data option
[  329.745577][ T7299] EXT4-fs (loop3): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,delalloc,usrjquota=,orlov,norecovery,barrier,data=journal,. Quota mode: writeback.
[  330.266066][ T7320] loop5: detected capacity change from 0 to 512
[  330.463590][ T7320] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  330.708893][ T7335] loop5: detected capacity change from 0 to 256
[  330.861403][ T7335] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  330.927486][   T26] audit: type=1800 audit(1768941082.142:61): pid=7335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.688" name="file1" dev="loop5" ino=1048605 res=0 errno=0
[  331.016512][   T26] audit: type=1800 audit(1768941082.172:62): pid=7335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.688" name="file1" dev="loop5" ino=1048605 res=0 errno=0
[  332.496508][ T7366] loop3: detected capacity change from 0 to 512
[  332.610110][ T7371] netlink: 172 bytes leftover after parsing attributes in process `syz.6.695'.
[  332.616181][ T7366] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  332.672914][ T7366] EXT4-fs (loop3): invalid journal inode
[  332.678772][ T7366] EXT4-fs (loop3): can't get journal size
[  332.786112][ T7378] netlink: 32 bytes leftover after parsing attributes in process `syz.5.696'.
[  332.845648][ T7366] EXT4-fs (loop3): 1 truncate cleaned up
[  332.851363][ T7366] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,sysvgroups,sysvgroups,lazytime,,errors=continue. Quota mode: none.
[  333.040874][ T7382] mmap: syz.5.698 (7382) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  333.062205][   T26] audit: type=1800 audit(1768941084.282:63): pid=7366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.693" name="file1" dev="loop3" ino=15 res=0 errno=0
[  333.900048][   T26] audit: type=1800 audit(1768941084.732:64): pid=7366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.693" name="file1" dev="loop3" ino=15 res=0 errno=0
[  335.247314][ T7398] loop3: detected capacity change from 0 to 512
[  335.452579][ T7398] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.700: inode has both inline data and extents flags
[  335.550716][ T7398] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.700: couldn't read orphan inode 15 (err -117)
[  335.623811][ T7398] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsdgroups,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none.
[  336.254456][ T7423] overlayfs: failed to resolve './bus': -2
[  336.484796][ T7422] device syzkaller1 entered promiscuous mode
[  336.854145][ T5145] kernel write not supported for file [eventfd] (pid: 5145 comm: kworker/0:8)
[  336.901864][ T7433] netlink: 20 bytes leftover after parsing attributes in process `syz.6.707'.
[  339.520304][ T7466] netlink: 24 bytes leftover after parsing attributes in process `syz.3.715'.
[  339.766518][ T7470] blk_update_request: I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  339.777628][ T7470] FAT-fs (loop13): unable to read boot sector
[  339.994519][ T7472] loop3: detected capacity change from 0 to 512
[  340.065309][ T7472] EXT4-fs (loop3): Unrecognized mount option "appraise_type=imasig" or missing value
[  340.289829][ T7474] loop3: detected capacity change from 0 to 512
[  340.359684][ T7478] loop5: detected capacity change from 0 to 512
[  340.414389][ T7474] EXT4-fs (loop3): Ignoring removed nobh option
[  340.436598][ T7474] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  340.455283][ T7480] loop6: detected capacity change from 0 to 1024
[  340.490774][ T7478] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.719: bg 0: block 248: padding at end of block bitmap is not set
[  340.539126][ T7474] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002]
[  340.572477][ T7474] System zones: 1-12
[  340.578530][ T7478] Quota error (device loop5): write_blk: dquota write failed
[  340.592062][ T7474] EXT4-fs (loop3): 1 truncate cleaned up
[  340.597763][ T7474] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,noinit_itable,jqfmt=vfsold,debug,max_dir_size_kb=0x000000000000c456,nobh,,errors=continue. Quota mode: none.
[  340.641673][ T7478] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  340.674957][ T7480] EXT4-fs (loop6): mounted filesystem without journal. Opts: nombcache,journal_dev=0x00000000000000ff,nombcache,nobarrier,init_itable,errors=remount-ro,. Quota mode: none.
[  340.747175][ T7478] EXT4-fs error (device loop5): ext4_acquire_dquot:6234: comm syz.5.719: Failed to acquire dquot type 1
[  340.848773][ T7474] EXT4-fs (loop3): shut down requested (2)
[  340.861006][ T7478] EXT4-fs (loop5): 1 truncate cleaned up
[  340.917973][ T7478] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  340.942067][ T7478] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  342.419921][ T7502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.724'.
[  342.526532][ T7502] device bridge1 entered promiscuous mode
[  343.640824][ T7518] loop6: detected capacity change from 0 to 512
[  343.653088][ T7494] chnl_net:caif_netlink_parms(): no params data found
[  343.861672][ T7518] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  343.879465][ T7499] chnl_net:caif_netlink_parms(): no params data found
[  343.879737][ T7518] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  344.083459][   T26] audit: type=1800 audit(1768941095.302:65): pid=7518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.728" name="bus" dev="loop6" ino=18 res=0 errno=0
[  344.131600][ T4291] Bluetooth: hci4: command 0x0409 tx timeout
[  344.150038][ T7494] bridge0: port 1(bridge_slave_0) entered blocking state
[  344.163205][ T7494] bridge0: port 1(bridge_slave_0) entered disabled state
[  344.172212][ T7494] device bridge_slave_0 entered promiscuous mode
[  344.189788][ T7494] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.197270][ T7494] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.209730][ T7494] device bridge_slave_1 entered promiscuous mode
[  344.381866][ T5145] Bluetooth: hci5: command 0x0409 tx timeout
[  344.554101][ T7494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  344.610205][ T7499] bridge0: port 1(bridge_slave_0) entered blocking state
[  344.656628][ T7499] bridge0: port 1(bridge_slave_0) entered disabled state
[  344.702803][ T7499] device bridge_slave_0 entered promiscuous mode
[  344.757170][ T7494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  344.802799][ T7499] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.809974][ T7499] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.862830][ T7499] device bridge_slave_1 entered promiscuous mode
[  344.977234][ T7544] loop5: detected capacity change from 0 to 256
[  345.002592][ T7499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  345.055755][ T7494] team0: Port device team_slave_0 added
[  345.074074][ T7499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  345.126960][ T7494] team0: Port device team_slave_1 added
[  345.226535][ T7499] team0: Port device team_slave_0 added
[  345.264098][ T7494] batman_adv: batadv0: Adding interface: batadv_slave_0
[  345.271105][ T7494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  345.371025][ T7494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  345.412955][ T7499] team0: Port device team_slave_1 added
[  345.419581][ T7494] batman_adv: batadv0: Adding interface: batadv_slave_1
[  345.438201][ T7494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  345.561525][ T7494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  345.831252][ T7499] batman_adv: batadv0: Adding interface: batadv_slave_0
[  345.881580][ T7499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  346.647837][ T7499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  346.740864][ T1108] Bluetooth: hci4: command 0x041b tx timeout
[  346.747196][ T1108] Bluetooth: hci5: command 0x041b tx timeout
[  346.852233][ T4436] Bluetooth: hci3: Frame reassembly failed (-84)
[  346.917183][ T7494] device hsr_slave_0 entered promiscuous mode
[  346.928890][ T7494] device hsr_slave_1 entered promiscuous mode
[  346.936806][ T7494] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  346.944646][ T7494] Cannot create hsr debugfs directory
[  346.950870][ T7499] batman_adv: batadv0: Adding interface: batadv_slave_1
[  346.965471][ T7499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  347.031532][ T7499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  347.161363][ T7568] loop6: detected capacity change from 0 to 512
[  347.201109][ T7499] device hsr_slave_0 entered promiscuous mode
[  347.209617][ T7499] device hsr_slave_1 entered promiscuous mode
[  347.219120][ T7499] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  347.227641][ T7499] Cannot create hsr debugfs directory
[  347.313565][ T7568] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.742: bg 0: block 248: padding at end of block bitmap is not set
[  347.328606][ T7568] Quota error (device loop6): write_blk: dquota write failed
[  347.337084][ T7568] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  347.347591][ T7568] EXT4-fs error (device loop6): ext4_acquire_dquot:6234: comm syz.6.742: Failed to acquire dquot type 1
[  347.360464][ T7568] EXT4-fs (loop6): 1 truncate cleaned up
[  347.367005][ T7568] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  347.379444][ T7568] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  347.556828][ T7252] syz.0.672 (7252) used greatest stack depth: 19440 bytes left
[  347.647994][ T7573] loop3: detected capacity change from 0 to 512
[  347.671417][ T7573] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  347.682427][ T7573] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  347.775324][ T7573] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  348.011649][ T7573] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  348.030192][ T7573] System zones: 0-2, 18-18, 34-35
[  348.065761][ T7573] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  348.316954][ T7499] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  348.346019][ T7499] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  348.359429][ T7499] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  348.370763][ T7499] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  348.437283][ T7494] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  348.514737][ T7494] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  348.548099][ T7494] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  348.596763][ T7494] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  348.744719][ T7499] 8021q: adding VLAN 0 to HW filter on device bond0
[  348.759591][ T7596] loop6: detected capacity change from 0 to 512
[  348.771748][ T4291] Bluetooth: hci5: command 0x040f tx timeout
[  348.781878][ T4291] Bluetooth: hci4: command 0x040f tx timeout
[  348.799159][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  348.817744][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  348.853131][ T7596] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  348.869111][ T5145] Bluetooth: hci3: command 0x1003 tx timeout
[  348.879982][ T7499] 8021q: adding VLAN 0 to HW filter on device team0
[  348.886970][ T4195] Bluetooth: hci3: sending frame failed (-49)
[  348.948993][ T7596] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  348.960233][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  349.000406][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  349.042977][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.050100][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  349.072511][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  349.094784][ T7494] 8021q: adding VLAN 0 to HW filter on device bond0
[  349.121880][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  349.130754][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  349.153400][ T4456] bridge0: port 2(bridge_slave_1) entered blocking state
[  349.160558][ T4456] bridge0: port 2(bridge_slave_1) entered forwarding state
[  349.172725][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  349.182397][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  349.202789][ T7494] 8021q: adding VLAN 0 to HW filter on device team0
[  349.312268][ T7494] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  349.368021][ T7494] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  349.429059][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  349.446130][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  349.472361][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  349.516715][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  349.557744][ T4456] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.564956][ T4456] bridge0: port 1(bridge_slave_0) entered forwarding state
[  349.624288][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  349.672531][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  349.709849][ T4456] bridge0: port 2(bridge_slave_1) entered blocking state
[  349.717094][ T4456] bridge0: port 2(bridge_slave_1) entered forwarding state
[  349.777825][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  349.823385][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  349.863493][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  349.872713][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  349.881575][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  349.890639][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  349.900024][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  349.909088][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  349.918693][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  349.927788][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  349.937313][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  349.947454][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  349.959561][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  349.970197][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  350.016255][ T7499] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  350.052971][ T7499] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  350.101638][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  350.110966][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  350.119468][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  350.130587][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  350.153229][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  350.171953][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  350.183903][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  350.202928][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  350.222751][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  350.462680][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  350.470285][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  350.514564][ T7494] 8021q: adding VLAN 0 to HW filter on device batadv0
[  351.392341][ T7527] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set
[  351.479916][ T4291] Bluetooth: hci4: command 0x0419 tx timeout
[  351.494533][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  351.501995][ T4291] Bluetooth: hci5: command 0x0419 tx timeout
[  351.502093][ T4291] Bluetooth: hci3: command 0x1001 tx timeout
[  351.514280][ T4195] Bluetooth: hci3: sending frame failed (-49)
[  351.531833][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  351.560181][ T7499] 8021q: adding VLAN 0 to HW filter on device batadv0
[  351.871766][ T7631] loop6: detected capacity change from 0 to 512
[  351.899974][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  351.936936][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  351.974210][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  352.010584][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  352.020839][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  352.037251][ T7631] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.752: bg 0: block 248: padding at end of block bitmap is not set
[  352.062481][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  352.082426][ T7631] Quota error (device loop6): write_blk: dquota write failed
[  352.099208][ T7631] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  352.123671][ T7494] device veth0_vlan entered promiscuous mode
[  352.144213][ T7631] EXT4-fs error (device loop6): ext4_acquire_dquot:6234: comm syz.6.752: Failed to acquire dquot type 1
[  352.172770][ T7494] device veth1_vlan entered promiscuous mode
[  352.200633][ T7631] EXT4-fs (loop6): 1 truncate cleaned up
[  352.235190][ T7631] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  352.268404][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  352.277500][ T7631] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  352.295876][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  352.319157][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  352.339614][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  352.385454][ T7494] device veth0_macvtap entered promiscuous mode
[  352.424856][ T7494] device veth1_macvtap entered promiscuous mode
[  352.473395][ T7494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  352.501607][ T7494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.522066][ T7494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  352.541537][ T7494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.601937][ T7494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  352.650083][ T7494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.660472][ T7494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  352.671133][ T7494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.681677][ T7494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  352.692707][ T7494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.704570][ T7494] batman_adv: batadv0: Interface activated: batadv_slave_0
[  352.716755][ T7494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  352.729320][ T7494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.741429][ T7494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  352.799146][ T7494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.799263][ T7494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  352.799334][ T7494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.799601][ T7494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  352.799667][ T7494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.799867][ T7494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  352.799933][ T7494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.820673][ T7494] batman_adv: batadv0: Interface activated: batadv_slave_1
[  353.053278][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  353.054129][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  353.073542][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  353.077582][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  353.078266][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  353.082413][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  353.083207][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  353.083853][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  353.273490][ T7499] device veth0_vlan entered promiscuous mode
[  353.287951][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  353.288673][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  353.290645][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  353.291205][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  353.397629][ T7494] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  353.397673][ T7494] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  353.397728][ T7494] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  353.397760][ T7494] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  353.452254][ T7499] device veth1_vlan entered promiscuous mode
[  353.571913][ T5143] Bluetooth: hci3: command 0x1009 tx timeout
[  353.597012][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  353.609593][ T7647] loop6: detected capacity change from 0 to 256
[  353.624032][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  353.624900][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  353.625676][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  353.629024][ T7499] device veth0_macvtap entered promiscuous mode
[  353.673100][ T7499] device veth1_macvtap entered promiscuous mode
[  353.726208][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  353.726234][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.726246][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  353.726259][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.726271][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  353.726284][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.726298][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  353.726311][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.726323][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  353.726337][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.726349][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  353.726443][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.728276][ T7499] batman_adv: batadv0: Interface activated: batadv_slave_0
[  353.728409][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  353.729127][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  353.729870][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  353.730543][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  353.733538][ T4292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  353.733607][ T4292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  353.738340][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  354.041303][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  354.072631][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.084153][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  354.100234][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.112952][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  354.130023][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.151160][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  354.170546][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.184295][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  354.203791][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.214311][ T7499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  354.225282][ T7499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.239486][ T7499] batman_adv: batadv0: Interface activated: batadv_slave_1
[  354.249936][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  354.262688][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  354.313873][ T7499] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  354.329948][ T7499] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  354.349007][ T7499] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  354.363084][ T7499] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  354.683320][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  354.693937][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  354.721838][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  355.040971][ T4292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.074529][ T4292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.107277][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  355.221837][ T4456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.235867][ T4456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.298604][ T4386] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.357320][ T7661] loop3: detected capacity change from 0 to 1024
[  355.372272][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  355.549999][ T7661] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000008,nodioread_nolock,,errors=continue. Quota mode: none.
[  355.570755][ T7661] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  355.615940][   T26] audit: type=1800 audit(1768941106.832:66): pid=7661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.758" name="file1" dev="loop3" ino=15 res=0 errno=0
[  355.647929][ T7661] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: comm syz.3.758: lblock 0 mapped to illegal pblock 0 (length 1)
[  355.719664][ T7661] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: block 3: comm syz.3.758: lblock 3 mapped to illegal pblock 3 (length 3)
[  355.725024][ T4386] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.831563][ T7674] blk_update_request: I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  355.843008][ T7674] FAT-fs (loop13): unable to read boot sector
[  356.018989][ T7661] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  356.449468][ T7661] EXT4-fs (loop3): This should not happen!! Data will be lost
[  356.449468][ T7661] 
[  356.542926][ T4456] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: block 8: comm kworker/u4:11: lblock 8 mapped to illegal pblock 8 (length 8)
[  356.591040][ T7676] loop8: detected capacity change from 0 to 512
[  356.625084][ T4456] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  356.638122][ T4456] EXT4-fs (loop3): This should not happen!! Data will be lost
[  356.638122][ T4456] 
[  356.657299][ T4386] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.672439][ T7678] loop6: detected capacity change from 0 to 128
[  357.654991][ T7678] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  357.681755][ T7678] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  357.734590][ T7676] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.762: bg 0: block 248: padding at end of block bitmap is not set
[  357.755317][ T4386] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.773199][ T7676] Quota error (device loop8): write_blk: dquota write failed
[  357.780920][ T7676] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota
[  357.791441][ T7676] EXT4-fs error (device loop8): ext4_acquire_dquot:6234: comm syz.8.762: Failed to acquire dquot type 1
[  357.805020][ T7676] EXT4-fs (loop8): 1 truncate cleaned up
[  357.808013][ T7689] loop7: detected capacity change from 0 to 512
[  357.810746][ T7676] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  357.830811][ T7676] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  357.927954][ T7689] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.765: invalid indirect mapped block 256 (level 2)
[  357.982388][ T7689] EXT4-fs (loop7): 2 truncates cleaned up
[  357.988194][ T7689] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback.
[  358.078025][ T4386] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.551155][   T26] audit: type=1800 audit(1768941111.762:67): pid=7704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.762" name="file1" dev="loop8" ino=15 res=0 errno=0
[  360.622103][ T7701] IPv6: NLM_F_REPLACE set, but no existing node found!
[  360.772670][ T4292] Quota error (device loop8): remove_tree: Getting block too big (0 >= 6)
[  360.811997][ T7712] netlink: 'syz.5.770': attribute type 2 has an invalid length.
[  360.820209][ T7712] netlink: 'syz.5.770': attribute type 1 has an invalid length.
[  360.829837][ T4292] EXT4-fs error (device loop8): ext4_release_dquot:6270: comm kworker/u4:5: Failed to release dquot type 1
[  360.892435][ T7712] netlink: 16 bytes leftover after parsing attributes in process `syz.5.770'.
[  360.949548][ T4386] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.476486][ T7735] loop3: detected capacity change from 0 to 128
[  362.515790][ T7734] loop7: detected capacity change from 0 to 512
[  362.542735][ T7735] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  362.583478][ T4386] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.614140][ T7735] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  362.735822][ T4386] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.753834][ T7734] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  362.810606][ T7753] loop5: detected capacity change from 0 to 512
[  362.817305][ T7734] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  362.983842][ T7735] EXT4-fs (loop3): Ignoring removed orlov option
[  363.081020][ T7760] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  363.234545][ T7760] loop8: detected capacity change from 0 to 1024
[  363.254826][ T5329] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 0
[  363.310487][ T7735] EXT4-fs (loop3): Remounting file system with no journal so ignoring journalled data option
[  363.575206][ T7735] EXT4-fs (loop3): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,sysvgroups,usrjquota=,orlov,norecovery,barrier,data=journal,. Quota mode: none.
[  363.725050][ T5329] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  363.745456][ T7753] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.782: bg 0: block 248: padding at end of block bitmap is not set
[  363.798652][ T7760] EXT4-fs (loop8): Test dummy encryption mode enabled
[  363.817355][ T7760] EXT4-fs error (device loop8): ext4_ext_check_inode:501: inode #4: comm syz.8.781: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  363.840062][ T4292] Bluetooth: hci2: Frame reassembly failed (-84)
[  363.849165][ T7760] EXT4-fs error (device loop8): ext4_quota_enable:6445: comm syz.8.781: Bad quota inode: 4, type: 1
[  363.862262][ T7760] EXT4-fs warning (device loop8): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  363.878313][ T7760] EXT4-fs (loop8): mount failed
[  363.921735][ T7753] Quota error (device loop5): write_blk: dquota write failed
[  363.932590][ T7753] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  363.973119][ T7753] EXT4-fs error (device loop5): ext4_acquire_dquot:6234: comm syz.5.782: Failed to acquire dquot type 1
[  364.091718][ T7753] EXT4-fs (loop5): 1 truncate cleaned up
[  364.114567][ T7753] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  364.181736][ T7753] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  364.876253][ T7780] tmpfs: Bad value for 'mpol'
[  365.086585][ T7782] loop7: detected capacity change from 0 to 1024
[  365.550316][ T7782] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000000a,usrquota,nodiscard,noinit_itable,,errors=continue. Quota mode: writeback.
[  365.679994][ T4289] Bluetooth: hci2: command 0x1003 tx timeout
[  365.686358][ T4195] Bluetooth: hci2: sending frame failed (-49)
[  367.514368][ T7807] loop5: detected capacity change from 0 to 512
[  367.788499][ T7807] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled
[  368.194033][ T7807] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled
[  368.286166][ T7807] EXT4-fs (loop5): Journaled quota options ignored when QUOTA feature is enabled
[  368.302960][ T7815] loop6: detected capacity change from 0 to 764
[  368.327102][   T23] Bluetooth: hci2: command 0x1001 tx timeout
[  368.334869][ T4195] Bluetooth: hci2: sending frame failed (-49)
[  368.354494][ T7807] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  368.363685][ T7807] EXT4-fs (loop5): ea_inode feature is not supported for Hurd
[  368.433809][ T7821] program syz.7.796 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  369.456995][ T7832] loop6: detected capacity change from 0 to 164
[  369.548018][ T7836] loop5: detected capacity change from 0 to 8192
[  369.636119][ T7838] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[  369.643277][ T7838] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  369.685829][ T7838] vhci_hcd vhci_hcd.0: Device attached
[  369.724645][ T7839] vhci_hcd: connection closed
[  369.728049][  T155] vhci_hcd: stop threads
[  369.747939][  T155] vhci_hcd: release socket
[  369.781033][  T155] vhci_hcd: disconnect device
[  371.752779][ T4228] Bluetooth: hci2: command 0x1009 tx timeout
[  373.376567][ T7872] overlayfs: missing 'lowerdir'
[  374.298397][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.7.816'.
[  374.438737][ T7892] blk_update_request: I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  374.449935][ T7892] FAT-fs (loop13): unable to read boot sector
[  375.002061][ T7890] netlink: 4 bytes leftover after parsing attributes in process `syz.7.816'.
[  375.141699][ T7890] device wireguard0 entered promiscuous mode
[  376.845845][ T7931] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  376.855497][ T7931] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  376.863294][ T7931] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  377.570290][ T7930] loop6: detected capacity change from 0 to 512
[  377.637090][ T7927] loop8: detected capacity change from 0 to 2048
[  377.705879][ T7936] tipc: Started in network mode
[  377.734538][ T7936] tipc: Node identity fe800000000000000000000000000011, cluster identity 4711
[  377.795850][ T7930] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.826: invalid indirect mapped block 256 (level 2)
[  377.817524][ T7936] tipc: Enabled bearer <udp:syz0>, priority 10
[  377.837148][ T7927] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  377.870483][ T7930] EXT4-fs (loop6): 2 truncates cleaned up
[  377.879478][   T26] audit: type=1800 audit(1768941129.092:68): pid=7927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.825" name="bus" dev="loop8" ino=18 res=0 errno=0
[  377.908709][ T7930] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback.
[  378.429987][ T4386] device hsr_slave_0 left promiscuous mode
[  379.033911][ T4386] device hsr_slave_1 left promiscuous mode
[  379.045289][ T7952] netlink: 16 bytes leftover after parsing attributes in process `syz.3.830'.
[  379.129535][ T4386] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  379.180053][ T4386] batman_adv: batadv0: Removing interface: batadv_slave_0
[  380.405945][ T7966] overlayfs: missing 'lowerdir'
[  380.718380][ T4386] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  380.825666][ T4386] batman_adv: batadv0: Removing interface: batadv_slave_1
[  380.921940][ T4386] device bridge_slave_1 left promiscuous mode
[  380.928241][ T4386] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.103222][ T4386] device bridge_slave_0 left promiscuous mode
[  381.109522][ T4386] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.223630][ T4386] device hsr_slave_0 left promiscuous mode
[  381.251782][ T7941] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  381.490118][ T7989] loop7: detected capacity change from 0 to 1024
[  381.514032][ T4386] device hsr_slave_1 left promiscuous mode
[  381.531107][ T4386] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  381.602771][ T4386] batman_adv: batadv0: Removing interface: batadv_slave_0
[  381.729099][ T7989] EXT4-fs (loop7): Ignoring removed nobh option
[  382.554773][ T7989] EXT4-fs (loop7): inline encryption not supported
[  382.638066][ T7989] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  382.792646][ T4386] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  382.843034][ T4386] batman_adv: batadv0: Removing interface: batadv_slave_1
[  382.882738][ T7989] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsddf,delalloc,usrquota,auto_da_alloc=0x0000000000000945,nolazytime,resgid=0x0000000000000000,nodelalloc,grpid,nobh,inlinecrypt,bsddf,dioread_nolock,,errors=continue. Quota mode: writeback.
[  382.932233][ T4386] device bridge_slave_1 left promiscuous mode
[  382.969211][ T4386] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.190102][ T4386] device bridge_slave_0 left promiscuous mode
[  383.198167][ T4386] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.244612][ T4386] device veth1_macvtap left promiscuous mode
[  383.263005][ T4386] device veth0_macvtap left promiscuous mode
[  383.285164][ T4386] device veth1_vlan left promiscuous mode
[  383.298543][ T4386] device veth0_vlan left promiscuous mode
[  383.336386][ T4386] device veth1_macvtap left promiscuous mode
[  383.345474][ T4386] device veth0_macvtap left promiscuous mode
[  383.374122][ T4386] device veth1_vlan left promiscuous mode
[  383.380645][ T4386] device veth0_vlan left promiscuous mode
[  383.826731][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  383.833149][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  383.856953][ T8006] loop7: detected capacity change from 0 to 512
[  383.874220][ T4386] team0 (unregistering): Port device team_slave_1 removed
[  383.906543][ T8006] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  383.998615][ T4386] team0 (unregistering): Port device team_slave_0 removed
[  384.024757][ T8006] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #17: comm syz.7.844: inode has both inline data and extents flags
[  384.058777][ T4386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  384.070753][ T8006] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.844: couldn't read orphan inode 17 (err -117)
[  384.086223][ T8006] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  384.136509][ T4386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  384.344636][ T4386] bond0 (unregistering): Released all slaves
[  384.473697][ T8015] 9pnet: Could not find request transport: f|a3²¯W†T•áˆ!÷å�d
[  384.490031][ T4386] bond1 (unregistering): Released all slaves
[  384.718071][ T4386] team0 (unregistering): Port device team_slave_1 removed
[  384.760373][ T8019] overlayfs: missing 'lowerdir'
[  385.182623][ T4386] team0 (unregistering): Port device team_slave_0 removed
[  385.432109][ T4386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  385.481844][ T4386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  385.679871][ T8025] loop5: detected capacity change from 0 to 128
[  385.792997][ T8025] FAT-fs (loop5): Directory bread(block 32) failed
[  385.809283][ T8025] FAT-fs (loop5): Directory bread(block 33) failed
[  385.816198][ T8025] FAT-fs (loop5): Directory bread(block 34) failed
[  385.830865][ T8025] FAT-fs (loop5): Directory bread(block 35) failed
[  385.837762][ T8025] FAT-fs (loop5): Directory bread(block 36) failed
[  385.858111][ T8025] FAT-fs (loop5): Directory bread(block 37) failed
[  385.879029][ T4386] bond0 (unregistering): Released all slaves
[  385.902449][ T8025] FAT-fs (loop5): Directory bread(block 38) failed
[  385.949577][ T8025] FAT-fs (loop5): Directory bread(block 39) failed
[  385.956444][ T8025] FAT-fs (loop5): Directory bread(block 40) failed
[  385.963096][ T8025] FAT-fs (loop5): Directory bread(block 41) failed
[  386.169353][ T8030] loop7: detected capacity change from 0 to 1024
[  386.332798][ T7949] IPv6: NLM_F_REPLACE set, but no existing node found!
[  386.755732][ T7951] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 1
[  386.764092][ T4291] tipc: Node number set to 4269801489
[  386.783177][ T7992] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  386.792886][ T7992] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  386.800598][ T7992] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  386.880875][ T7951] Bluetooth: hci2: Frame reassembly failed (-84)
[  386.954316][ T8030] EXT4-fs (loop7): Test dummy encryption mode enabled
[  386.995903][ T8030] EXT4-fs error (device loop7): ext4_ext_check_inode:501: inode #4: comm syz.7.852: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  387.014873][ T8030] EXT4-fs error (device loop7): ext4_quota_enable:6445: comm syz.7.852: Bad quota inode: 4, type: 1
[  387.027380][ T8030] EXT4-fs warning (device loop7): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  387.043355][ T8030] EXT4-fs (loop7): mount failed
[  388.185011][ T8047] loop8: detected capacity change from 0 to 512
[  388.221842][ T4255] Bluetooth: hci2: command 0x1003 tx timeout
[  388.233260][ T4195] Bluetooth: hci2: sending frame failed (-49)
[  388.269442][ T8047] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  388.317666][ T8047] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem
[  388.372144][ T8055] device batadv0 entered promiscuous mode
[  388.405687][ T8047] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended
[  388.483469][ T8047] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  388.561660][ T8047] System zones: 0-2, 18-18, 34-35
[  388.586817][ T8047] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  388.675778][ T8065] loop6: detected capacity change from 0 to 128
[  389.282528][ T8067] overlayfs: missing 'lowerdir'
[  389.592985][ T8070] 9pnet: Could not find request transport: f|a3²¯W†T•áˆ!÷å�d
[  390.356461][ T8087] loop8: detected capacity change from 0 to 512
[  390.391015][ T4289] Bluetooth: hci2: command 0x1001 tx timeout
[  390.397337][ T4195] Bluetooth: hci2: sending frame failed (-49)
[  390.579747][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  390.597539][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  390.607455][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  391.329256][ T8087] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.864: invalid indirect mapped block 256 (level 2)
[  391.383965][ T8087] EXT4-fs (loop8): 2 truncates cleaned up
[  391.390096][ T8087] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback.
[  391.438383][ T8093] loop6: detected capacity change from 0 to 4096
[  391.787567][ T8105] IPv6: NLM_F_REPLACE set, but no existing node found!
[  392.006129][ T8093] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  392.529598][ T4248] Bluetooth: hci2: command 0x1009 tx timeout
[  392.622391][ T8118] loop8: detected capacity change from 0 to 512
[  392.648990][ T8120] loop6: detected capacity change from 0 to 512
[  392.672074][ T8118] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  392.765907][ T8118] EXT4-fs (loop8): 1 truncate cleaned up
[  392.800576][ T8118] EXT4-fs (loop8): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none.
[  392.837300][ T8096] loop3: detected capacity change from 0 to 1024
[  392.847863][ T8120] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback.
[  392.892085][ T8120] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  392.954838][ T8096] EXT4-fs (loop3): Ignoring removed bh option
[  392.982888][ T8120] EXT4-fs error (device loop6): ext4_do_update_inode:5222: inode #2: comm syz.6.873: corrupted inode contents
[  393.078612][ T8096] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  393.160510][   T26] audit: type=1800 audit(1768941144.262:69): pid=8131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.871" name="bus" dev="loop8" ino=18 res=0 errno=0
[  393.211573][ T8120] EXT4-fs error (device loop6): ext4_dirty_inode:6058: inode #2: comm syz.6.873: mark_inode_dirty error
[  393.308615][ T8137] overlayfs: missing 'lowerdir'
[  393.577279][ T8120] EXT4-fs error (device loop6): ext4_do_update_inode:5222: inode #2: comm syz.6.873: corrupted inode contents
[  393.675394][ T8120] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #2: comm syz.6.873: mark_inode_dirty error
[  393.762457][ T8139] EXT4-fs warning (device loop6): ext4_empty_dir:3147: inode #18: comm syz.6.873: directory missing '.'
[  393.983436][ T8147] loop8: detected capacity change from 0 to 512
[  394.100697][ T8147] EXT4-fs (loop8): Ignoring removed orlov option
[  394.151716][ T8147] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[  394.246584][ T8147] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[  394.299880][ T8151] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  394.316512][ T8151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  394.325264][ T8151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  394.899445][ T8147] EXT4-fs error (device loop8): ext4_iget_extra_inode:4566: inode #15: comm syz.8.877: corrupted in-inode xattr
[  395.061952][ T8147] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.877: couldn't read orphan inode 15 (err -117)
[  395.152805][ T8147] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsold,debug,noblock_validity,noload,nombcache,orlov,min_batch_time=0x0000000000000002,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none.
[  395.214506][ T8153] loop3: detected capacity change from 0 to 4096
[  395.324664][ T8153] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  395.690478][ T8175] loop5: detected capacity change from 0 to 512
[  395.905047][ T8175] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback.
[  396.327584][ T8190] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  396.337173][ T8190] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  397.495983][ T8175] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  397.816265][ T8203] loop6: detected capacity change from 0 to 1024
[  397.880250][ T8207] program syz.8.893 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  398.303428][ T8203] EXT4-fs (loop6): Ignoring removed nobh option
[  398.509695][ T8203] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  398.641885][ T8203] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,nodioread_nolock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,nouid32,nobh,user_xattr,nouid32,dioread_nolock,,errors=continue. Quota mode: none.
[  398.695484][ T8223] loop3: detected capacity change from 0 to 512
[  398.829818][ T8223] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,max_dir_size_kb=0x0000000000000a30,journal_dev=0x00000000460b8000,,errors=continue. Quota mode: writeback.
[  398.953948][ T8223] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  398.972177][ T8221] loop8: detected capacity change from 0 to 4096
[  399.158632][ T8221] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  399.819437][ T8252] loop3: detected capacity change from 0 to 1024
[  400.002131][ T8252] EXT4-fs (loop3): Test dummy encryption mode enabled
[  400.225658][ T8252] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #4: comm syz.3.900: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  400.246584][ T8252] EXT4-fs error (device loop3): ext4_quota_enable:6445: comm syz.3.900: Bad quota inode: 4, type: 1
[  400.258373][ T8252] EXT4-fs warning (device loop3): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  400.275520][ T8252] EXT4-fs (loop3): mount failed
[  400.343551][ T4292] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 1
[  400.651310][ T5179] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  400.682803][ T5179] Bluetooth: hci2: Frame reassembly failed (-84)
[  401.005012][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.8.904'.
[  401.044642][ T8266] netlink: 12 bytes leftover after parsing attributes in process `syz.8.904'.
[  401.846850][ T8285] loop8: detected capacity change from 0 to 512
[  401.959319][ T8285] EXT4-fs warning (device loop8): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  401.971624][ T8285] EXT4-fs warning (device loop8): dx_probe:881: Enable large directory feature to access it
[  401.981801][ T8285] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.910: Corrupt directory, running e2fsck is recommended
[  402.009135][ T8285] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117
[  402.017537][ T8285] EXT4-fs error (device loop8): ext4_iget_extra_inode:4566: inode #15: comm syz.8.910: corrupted in-inode xattr
[  402.032120][ T8285] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.910: couldn't read orphan inode 15 (err -117)
[  402.044444][ T8285] EXT4-fs (loop8): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.journal_async_commit,resuid=0x0000000000000000,barrier=0x0000000000001000,grpid,,,errors=continue. Quota mode: writeback.
[  402.104792][ T8285] EXT4-fs warning (device loop8): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  402.116919][ T8285] EXT4-fs warning (device loop8): dx_probe:881: Enable large directory feature to access it
[  402.127154][ T8285] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.910: Corrupt directory, running e2fsck is recommended
[  402.140524][ T8285] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 3: comm syz.8.910: path /30/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  402.142107][ T4255] Bluetooth: hci2: command 0x1003 tx timeout
[  402.171893][ T8285] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 8: comm syz.8.910: path /30/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[  402.397644][ T4195] Bluetooth: hci2: sending frame failed (-49)
[  402.548073][ T8297] blk_update_request: I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  402.559569][ T8297] FAT-fs (loop15): unable to read boot sector
[  403.453720][ T8308] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  404.293937][ T8314] 9pnet: Insufficient options for proto=fd
[  404.415406][ T8321] loop5: detected capacity change from 0 to 512
[  404.461615][ T4228] Bluetooth: hci2: command 0x1001 tx timeout
[  404.478049][ T4195] Bluetooth: hci2: sending frame failed (-49)
[  404.554644][ T8321] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  404.684077][ T8321] EXT4-fs (loop5): orphan file too big: 4294967295
[  404.691869][ T8321] EXT4-fs (loop5): mount failed
[  404.746143][ T8331] netlink: 4 bytes leftover after parsing attributes in process `syz.7.922'.
[  405.370267][ T8342] loop8: detected capacity change from 0 to 1024
[  406.739769][ T4228] Bluetooth: hci2: command 0x1009 tx timeout
[  407.142831][ T8347] blk_update_request: I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  407.153926][ T8347] FAT-fs (loop15): unable to read boot sector
[  407.546504][ T8342] EXT4-fs (loop8): Ignoring removed nobh option
[  407.561593][ T8342] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  407.680198][ T8342] EXT4-fs (loop8): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,nodioread_nolock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,nouid32,nobh,user_xattr,nouid32,dioread_nolock,,errors=continue. Quota mode: none.
[  407.847456][ T8364] loop7: detected capacity change from 0 to 512
[  408.107930][ T8364] ------------[ cut here ]------------
[  408.151590][ T8364] EA inode 11 i_nlink=0
[  408.151856][ T8364] WARNING: CPU: 0 PID: 8364 at fs/ext4/xattr.c:1005 ext4_xattr_inode_update_ref+0x4bd/0x510
[  408.168862][ T8364] Modules linked in:
[  408.175137][ T8364] CPU: 0 PID: 8364 Comm: syz.7.931 Not tainted syzkaller #0
[  408.208467][ T8364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  408.221615][ T8364] RIP: 0010:ext4_xattr_inode_update_ref+0x4bd/0x510
[  408.231858][ T8364] Code: 7c 24 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 14 e8 a1 ff 49 8b 37 48 c7 c7 80 8f 3d 8a 89 da e8 a3 5d 93 07 <0f> 0b 4c 8b 64 24 08 4c 8b 7c 24 10 e9 a9 fe ff ff e8 3d 4a 9e 07
[  408.351676][ T8364] RSP: 0018:ffffc9000332f3a0 EFLAGS: 00010246
[  408.357835][ T8364] RAX: 87aa17c695b2a700 RBX: 0000000000000000 RCX: 0000000000080000
[  408.374403][ T8364] RDX: ffffc90018489000 RSI: 000000000000b7fe RDI: 000000000000b7ff
[  408.405274][ T8364] RBP: ffffc9000332f490 R08: ffff8880b902795b R09: 1ffff11017204f2b
[  408.436236][ T8364] R10: dffffc0000000000 R11: ffffed1017204f2c R12: ffff88807110f048
[  408.461389][ T8364] R13: 1ffff1100e221e48 R14: dffffc0000000000 R15: ffff88807110f088
[  408.479049][ T8364] FS:  00007f575f1a86c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  408.498502][ T8364] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  408.522959][ T8364] CR2: 0000555bc4b31950 CR3: 000000002bbc4000 CR4: 00000000003526f0
[  408.544534][ T8364] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  408.573094][ T8364] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  408.597357][ T8364] Call Trace:
[  408.615093][ T8364]  <TASK>
[  408.631569][ T8364]  ? ext4_xattr_block_csum+0x560/0x560
[  408.637140][ T8364]  ? __ext4_journal_ensure_credits+0x2c/0x450
[  408.671622][ T8364]  ext4_xattr_inode_dec_ref_all+0x960/0xfc0
[  408.677622][ T8364]  ? errseq_check+0x3c/0x70
[  408.707040][ T8364]  ? ext4_xattr_delete_inode+0xca0/0xca0
[  408.731565][ T8364]  ? __ext4_journal_ensure_credits+0x450/0x450
[  408.737849][ T8364]  ? ext4_get_inode_loc+0xf6/0x120
[  408.751530][ T8364]  ext4_xattr_delete_inode+0xad1/0xca0
[  408.761590][ T8364]  ? ext4_expand_extra_isize_ea+0x19b0/0x19b0
[  408.777995][ T8364]  ext4_evict_inode+0xc53/0x1090
[  408.791523][ T8364]  ? _raw_spin_unlock+0x24/0x40
[  408.796504][ T8364]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  408.811513][ T8364]  ? do_raw_spin_unlock+0x11d/0x230
[  408.821786][ T8364]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  408.827764][ T8364]  evict+0x4c9/0x8d0
[  408.851980][ T8364]  ? proc_nr_inodes+0x320/0x320
[  408.857096][ T8364]  ? do_raw_spin_unlock+0x11d/0x230
[  408.871848][ T8364]  ? _raw_spin_unlock+0x24/0x40
[  408.884795][ T8364]  ? iput+0x706/0x8a0
[  408.899987][ T8364]  ext4_orphan_cleanup+0xad2/0x1320
[  408.912858][ T8364]  ? ext4_orphan_del+0xbf0/0xbf0
[  408.919043][ T8364]  ? errseq_check_and_advance+0x62/0x120
[  408.930044][ T8364]  ext4_fill_super+0x8e25/0x95a0
[  408.935438][ T8364]  ? ext4_mount+0x40/0x40
[  408.939830][ T8364]  ? set_blocksize+0x1f3/0x370
[  408.953673][ T8364]  ? sb_set_blocksize+0xa5/0xe0
[  408.960034][ T8364]  mount_bdev+0x287/0x3c0
[  408.971101][ T8364]  ? ext4_mount+0x40/0x40
[  408.976058][ T8364]  legacy_get_tree+0xe6/0x180
[  408.981048][ T8364]  ? ext4_errno_to_code+0x160/0x160
[  408.993034][ T8364]  vfs_get_tree+0x88/0x270
[  408.997533][ T8364]  do_new_mount+0x24a/0xa40
[  409.006111][ T8364]  __se_sys_mount+0x2e3/0x3d0
[  409.010882][ T8364]  ? __x64_sys_mount+0xc0/0xc0
[  409.020152][ T8364]  ? lockdep_hardirqs_on+0x94/0x140
[  409.029184][ T8364]  ? __x64_sys_mount+0x1c/0xc0
[  409.036749][ T8364]  do_syscall_64+0x4c/0xa0
[  409.041334][ T8364]  ? clear_bhb_loop+0x30/0x80
[  409.049912][ T8364]  ? clear_bhb_loop+0x30/0x80
[  409.057491][ T8364]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  409.073829][ T8364] RIP: 0033:0x7f5760f4df4a
[  409.078323][ T8364] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  409.101675][ T8364] RSP: 002b:00007f575f1a7e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  409.115220][ T8364] RAX: ffffffffffffffda RBX: 00007f575f1a7ee0 RCX: 00007f5760f4df4a
[  409.133009][ T8364] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f575f1a7ea0
[  409.148886][ T8364] RBP: 0000200000000180 R08: 00007f575f1a7ee0 R09: 0000000000800700
[  409.164220][ T8364] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[  409.178214][ T8364] R13: 00007f575f1a7ea0 R14: 0000000000000478 R15: 000000000000002c
[  409.188954][ T8364]  </TASK>
[  409.196313][ T8364] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  409.203668][ T8364] CPU: 0 PID: 8364 Comm: syz.7.931 Not tainted syzkaller #0
[  409.210998][ T8364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  409.221095][ T8364] Call Trace:
[  409.224425][ T8364]  <TASK>
[  409.227501][ T8364]  dump_stack_lvl+0x188/0x250
[  409.232230][ T8364]  ? show_regs_print_info+0x20/0x20
[  409.237471][ T8364]  ? load_image+0x400/0x400
[  409.242034][ T8364]  panic+0x2e5/0x810
[  409.245997][ T8364]  ? bpf_jit_dump+0xd0/0xd0
[  409.250559][ T8364]  ? ext4_xattr_inode_update_ref+0x4bd/0x510
[  409.256632][ T8364]  __warn+0x248/0x2b0
[  409.260694][ T8364]  ? ext4_xattr_inode_update_ref+0x4bd/0x510
[  409.266727][ T8364]  report_bug+0x1b7/0x2e0
[  409.271150][ T8364]  handle_bug+0x3a/0x70
[  409.275344][ T8364]  exc_invalid_op+0x16/0x40
[  409.279897][ T8364]  asm_exc_invalid_op+0x16/0x20
[  409.284788][ T8364] RIP: 0010:ext4_xattr_inode_update_ref+0x4bd/0x510
[  409.291431][ T8364] Code: 7c 24 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 14 e8 a1 ff 49 8b 37 48 c7 c7 80 8f 3d 8a 89 da e8 a3 5d 93 07 <0f> 0b 4c 8b 64 24 08 4c 8b 7c 24 10 e9 a9 fe ff ff e8 3d 4a 9e 07
[  409.311086][ T8364] RSP: 0018:ffffc9000332f3a0 EFLAGS: 00010246
[  409.317204][ T8364] RAX: 87aa17c695b2a700 RBX: 0000000000000000 RCX: 0000000000080000
[  409.325219][ T8364] RDX: ffffc90018489000 RSI: 000000000000b7fe RDI: 000000000000b7ff
[  409.333235][ T8364] RBP: ffffc9000332f490 R08: ffff8880b902795b R09: 1ffff11017204f2b
[  409.341268][ T8364] R10: dffffc0000000000 R11: ffffed1017204f2c R12: ffff88807110f048
[  409.349286][ T8364] R13: 1ffff1100e221e48 R14: dffffc0000000000 R15: ffff88807110f088
[  409.357335][ T8364]  ? ext4_xattr_block_csum+0x560/0x560
[  409.362872][ T8364]  ? __ext4_journal_ensure_credits+0x2c/0x450
[  409.369004][ T8364]  ext4_xattr_inode_dec_ref_all+0x960/0xfc0
[  409.374957][ T8364]  ? errseq_check+0x3c/0x70
[  409.379502][ T8364]  ? ext4_xattr_delete_inode+0xca0/0xca0
[  409.385195][ T8364]  ? __ext4_journal_ensure_credits+0x450/0x450
[  409.391401][ T8364]  ? ext4_get_inode_loc+0xf6/0x120
[  409.396562][ T8364]  ext4_xattr_delete_inode+0xad1/0xca0
[  409.402075][ T8364]  ? ext4_expand_extra_isize_ea+0x19b0/0x19b0
[  409.408199][ T8364]  ext4_evict_inode+0xc53/0x1090
[  409.413186][ T8364]  ? _raw_spin_unlock+0x24/0x40
[  409.418089][ T8364]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  409.424024][ T8364]  ? do_raw_spin_unlock+0x11d/0x230
[  409.429285][ T8364]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  409.435232][ T8364]  evict+0x4c9/0x8d0
[  409.439186][ T8364]  ? proc_nr_inodes+0x320/0x320
[  409.444083][ T8364]  ? do_raw_spin_unlock+0x11d/0x230
[  409.449330][ T8364]  ? _raw_spin_unlock+0x24/0x40
[  409.454237][ T8364]  ? iput+0x706/0x8a0
[  409.458271][ T8364]  ext4_orphan_cleanup+0xad2/0x1320
[  409.463525][ T8364]  ? ext4_orphan_del+0xbf0/0xbf0
[  409.468511][ T8364]  ? errseq_check_and_advance+0x62/0x120
[  409.474189][ T8364]  ext4_fill_super+0x8e25/0x95a0
[  409.479231][ T8364]  ? ext4_mount+0x40/0x40
[  409.483600][ T8364]  ? set_blocksize+0x1f3/0x370
[  409.488414][ T8364]  ? sb_set_blocksize+0xa5/0xe0
[  409.493308][ T8364]  mount_bdev+0x287/0x3c0
[  409.497683][ T8364]  ? ext4_mount+0x40/0x40
[  409.502082][ T8364]  legacy_get_tree+0xe6/0x180
[  409.506800][ T8364]  ? ext4_errno_to_code+0x160/0x160
[  409.512052][ T8364]  vfs_get_tree+0x88/0x270
[  409.516536][ T8364]  do_new_mount+0x24a/0xa40
[  409.521115][ T8364]  __se_sys_mount+0x2e3/0x3d0
[  409.525856][ T8364]  ? __x64_sys_mount+0xc0/0xc0
[  409.530664][ T8364]  ? lockdep_hardirqs_on+0x94/0x140
[  409.535905][ T8364]  ? __x64_sys_mount+0x1c/0xc0
[  409.540717][ T8364]  do_syscall_64+0x4c/0xa0
[  409.545174][ T8364]  ? clear_bhb_loop+0x30/0x80
[  409.549894][ T8364]  ? clear_bhb_loop+0x30/0x80
[  409.554624][ T8364]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  409.560573][ T8364] RIP: 0033:0x7f5760f4df4a
[  409.565030][ T8364] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  409.584679][ T8364] RSP: 002b:00007f575f1a7e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  409.593141][ T8364] RAX: ffffffffffffffda RBX: 00007f575f1a7ee0 RCX: 00007f5760f4df4a
[  409.601159][ T8364] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f575f1a7ea0
[  409.609177][ T8364] RBP: 0000200000000180 R08: 00007f575f1a7ee0 R09: 0000000000800700
[  409.617195][ T8364] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[  409.625214][ T8364] R13: 00007f575f1a7ea0 R14: 0000000000000478 R15: 000000000000002c
[  409.633253][ T8364]  </TASK>
[  409.636797][ T8364] Kernel Offset: disabled
[  409.641547][ T8364] Rebooting in 86400 seconds..