last executing test programs:

13.735551983s ago: executing program 3 (id=70):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCBRDELBR(r0, 0x89a3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat(0xffffffffffffff9c, 0x0, 0x80500, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000340)=[@in6={0xa, 0x4e20, 0x4, @local, 0x1}], 0x1c)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000007c0)={[{@nouid32}, {@nogrpid}, {@bh}]}, 0x1, 0x529, &(0x7f0000000cc0)="$eJzs3c9vHFcdAPDvjLO2k7h1WnoABG1oCwFFWcebNqp6gHJCCFVC9AhSauyNFWU3a3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezYWdu7zibOei3v5yON5r2Z8Xzfy2bem3n74wUwsa5GxHZETEfE+xExX25PyiXe6S75cZ/tPFze3Xm4nESWvffPpNifb4uev8ldLs85GxE/+E7Ej5OjcdubW/eXGo36eplf6DTXFtqbWzfuNZdW66v1B7Xa7cXbN9+69WbtCWoze+zeV5rTZerLn/5h+xs/zYs1V27prcez1K16ZT9O7kJEfG8UwcZgqqzP9LgLwlNJI+LFiHi1uP7nY6p4NQGA8yzL5iOb780DAOddWoyBJWm1HAuYizStVrtjeC/FpbTRaneu321tPFjpjpVdiUp6916jfrMcK7wSlSTPLxbpR/naofytiHghIn4xc7HIV5dbjZVx3vgAwAS7fKj//89Mt/8HAM654z82AwCcR/p/AJg8+n8AmDz6fwCYPN3+/+KT/lmWZT8bRXEAgFPg+R8AJo/+HwAmyvfffTdfst3y969XPtjcuN/64MZKvX2/2txYri631teqq63WavGbPc3Hna/Raq0tvhEbH1755lq7s9De3LrTbG086Nwpftf7Tr1SHLV9CjUDAAZ54ZVP/pzkPfLbF4sleuZyqIy1ZMCopeMuADA2U+MuADA2ZvuCyfXoGf+JPwRgeADOiT5T9B4w2+8LQlmWZaMrEjBi175g/B8mVc/4v08Bw4R53Ph/MTewNwnhXDL+D5Mry5Jh5/yPYQ8EAM62Y8b4r5zmfQgwPgPe/3+xXP+2fHPgRyuHj/h4lKUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAs21v/t9qOc3vXKRptRrxXDEBUCW5e69RvxkRz0fEn2YqM3l+ccxlBgBOKv1bUs7/dW3+9bkDu16+vJ+cjoif/Oq9X3641Oms/zFiOvnXzN72zsfl9tpjg82OogYAwPH2+uli3fMg/9nOw+W95TTL8/dvd+8K8ri7O9Oxux//Qlwo1rNRiYhL/07KfFfSM3ZxEtsfRcTn+9U/ibliDKR7y3I4fh77uRHHnz8QPz0QPy0naE7Lf4vPPYOywKT5JG9/3ul3/aVxtVj3v/5nixbq5Mr2Lz/V8m7RBj6Kv9f+TQ1o/64OG+ON33+3m7p4dN9HEV+8ELEXe7en/dmLnwyI//qQ8f/ypZdfHbQv+3XEtegfvzfWQqe5ttDe3Lpxr7m0Wl+tP6jVbi/evvnWrTdrC8UY9cLg3uAfb19/ftC+vP6XBsSfHVj/qWLbV4es/2/+9/4Pv3JM/K+/1i9+Gi8NjB9Fn/i1IeMvXfrdwOfuPP7K0fonw7z+14eM/+lft45MGw4AjE97c+v+UqNRXz9holKe76TnkZA4JpH/FzsDxeib+NZpxZqO/rt+/lrfazDLnirWoBbjWYy6AWfB/kUfEf8dd2EAAAAAAAAAAAAAAIC+TuMbS+OuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOfX/wMAAP//en/QdA==")
creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r4, &(0x7f0000000cc0)=ANY=[], 0x678)

13.237745033s ago: executing program 3 (id=73):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x8800)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000020301030000000000000000010000090800054000000000090002000000000000000000080001000100001a0900020000000006000000008390d1dca86d46a0f1c1f8f2fd3a5040ad107dd785bfa8ce472c41d34e1727db513968dc2f055388b260da7256aa8235688b087bf955fcbb07bb"], 0x3c}}, 0x4000000)

12.937779166s ago: executing program 3 (id=75):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@noinit_itable}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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")

7.36690364s ago: executing program 3 (id=110):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe2$9p(0x0, 0x80)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x40810, 0x0)
r4 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, &(0x7f0000000500), 0x0)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x814)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106400000000006113740000000000bfa00000000000000700000008ffffffd50301001774004095000000000000006916360000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)

6.162035968s ago: executing program 3 (id=115):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x9}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0xffffffff, 0x10000, 0x81, 0x107f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x7, 0x2234, 0x7f, 0x81b, 0x800, 0x5, 0x0, 0x1, 0x7ed53619, 0x1, 0x9, 0x9644, 0x5, 0x58b, 0x2, 0x1003ff, 0x9, 0x2, 0x1, 0x0, 0x80000004, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xfffffffb, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0xfffffff9, 0x100006, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x4, 0x4, 0x3, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0xffff, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x5, 0x8, 0x100, 0xc0000000, 0x6, 0x4, 0x6, 0x12a, 0x80000001, 0x8, 0x1d24, 0x2, 0x5, 0x1, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x9, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda5a, 0x7ffffffe, 0x9, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x3e, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x3, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x9, 0x10001, 0x7, 0x7f, 0x5, 0x3, 0x200000a, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x8000399d, 0x6, 0x8ab6, 0x18000, 0x2, 0x72f7, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0x4, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x2007, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x4, 0x5, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x200, 0x4, 0xec2, 0x6, 0x80000008, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0x103, 0x5, 0x37f, 0x30, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x46, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x1, 0xd, 0x40006, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xfdc4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x2, 0x365, 0x8, 0x8, 0x4000000f, 0x8, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x1000092, 0x0, 0x7, 0x1, 0x7ff, 0x9, 0x40000002, 0x0, 0x3, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x200101, 0xadd9, 0x1, 0x4, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x9, 0x4, 0x3, 0x40008, 0x7, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x8d7, 0x200, 0x3, 0x1, 0x3, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x9, 0x7, 0x40000000, 0x5, 0xffffdbb7, 0x50, 0xf, 0xf, 0x12, 0x5, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x5, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x5, 0xfff, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x100006, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x4000003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xffffffec, 0x5, 0x0, 0xb9a6, 0x522, 0x101, 0x2, 0x900, 0x6, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dca, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xffe, 0x1, 0x89d, 0x8, 0x3, 0x710, 0xe, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x4, 0x5, 0x1, 0xdbec, {0x8, 0x1, 0x8001, 0x5, 0x7, 0x9}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x8, 0xffffffff, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r9 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmmsg$inet(r4, &(0x7f0000000b80), 0x0, 0x0)

6.089789921s ago: executing program 4 (id=116):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x18)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$inet(r3, 0x0, 0x48014)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="050000000600000008000000ae"], 0x50)
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd2a, 0x25dfcbfe, {0x0, 0x0, 0x0, 0x0, {0xb}, {0xa, 0xffff}, {0x5}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40040c0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)

5.916930028s ago: executing program 0 (id=119):
socket$can_raw(0x1d, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x800, 0x0)

4.835389352s ago: executing program 3 (id=121):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@noinit_itable}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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")

4.835020212s ago: executing program 0 (id=122):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000480)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@errors_continue}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f)

4.693838997s ago: executing program 4 (id=123):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCBRDELBR(r0, 0x89a3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000800)=ANY=[@ANYRES32, @ANYBLOB="0700000000000000a900000000000000000000000000000000000000000000000000000000000000ffff"], 0xb8}}, 0x0)
syz_emit_ethernet(0x9a, &(0x7f0000000c80)=ANY=[], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000100)=0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000007c0)={[{@nouid32}, {@nogrpid}, {@bh}]}, 0x1, 0x529, &(0x7f0000000cc0)="$eJzs3c9vHFcdAPDvjLO2k7h1WnoABG1oCwFFWcebNqp6gHJCCFVC9AhSauyNFWU3a3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezYWdu7zibOei3v5yON5r2Z8Xzfy2bem3n74wUwsa5GxHZETEfE+xExX25PyiXe6S75cZ/tPFze3Xm4nESWvffPpNifb4uev8ldLs85GxE/+E7Ej5OjcdubW/eXGo36eplf6DTXFtqbWzfuNZdW66v1B7Xa7cXbN9+69WbtCWoze+zeV5rTZerLn/5h+xs/zYs1V27prcez1K16ZT9O7kJEfG8UwcZgqqzP9LgLwlNJI+LFiHi1uP7nY6p4NQGA8yzL5iOb780DAOddWoyBJWm1HAuYizStVrtjeC/FpbTRaneu321tPFjpjpVdiUp6916jfrMcK7wSlSTPLxbpR/naofytiHghIn4xc7HIV5dbjZVx3vgAwAS7fKj//89Mt/8HAM654z82AwCcR/p/AJg8+n8AmDz6fwCYPN3+/+KT/lmWZT8bRXEAgFPg+R8AJo/+HwAmyvfffTdfst3y969XPtjcuN/64MZKvX2/2txYri631teqq63WavGbPc3Hna/Raq0tvhEbH1755lq7s9De3LrTbG086Nwpftf7Tr1SHLV9CjUDAAZ54ZVP/pzkPfLbF4sleuZyqIy1ZMCopeMuADA2U+MuADA2ZvuCyfXoGf+JPwRgeADOiT5T9B4w2+8LQlmWZaMrEjBi175g/B8mVc/4v08Bw4R53Ph/MTewNwnhXDL+D5Mry5Jh5/yPYQ8EAM62Y8b4r5zmfQgwPgPe/3+xXP+2fHPgRyuHj/h4lKUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAs21v/t9qOc3vXKRptRrxXDEBUCW5e69RvxkRz0fEn2YqM3l+ccxlBgBOKv1bUs7/dW3+9bkDu16+vJ+cjoif/Oq9X3641Oms/zFiOvnXzN72zsfl9tpjg82OogYAwPH2+uli3fMg/9nOw+W95TTL8/dvd+8K8ri7O9Oxux//Qlwo1rNRiYhL/07KfFfSM3ZxEtsfRcTn+9U/ibliDKR7y3I4fh77uRHHnz8QPz0QPy0naE7Lf4vPPYOywKT5JG9/3ul3/aVxtVj3v/5nixbq5Mr2Lz/V8m7RBj6Kv9f+TQ1o/64OG+ON33+3m7p4dN9HEV+8ELEXe7en/dmLnwyI//qQ8f/ypZdfHbQv+3XEtegfvzfWQqe5ttDe3Lpxr7m0Wl+tP6jVbi/evvnWrTdrC8UY9cLg3uAfb19/ftC+vP6XBsSfHVj/qWLbV4es/2/+9/4Pv3JM/K+/1i9+Gi8NjB9Fn/i1IeMvXfrdwOfuPP7K0fonw7z+14eM/+lft45MGw4AjE97c+v+UqNRXz9holKe76TnkZA4JpH/FzsDxeib+NZpxZqO/rt+/lrfazDLnirWoBbjWYy6AWfB/kUfEf8dd2EAAAAAAAAAAAAAAIC+TuMbS+OuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOfX/wMAAP//en/QdA==")
creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r6, &(0x7f0000000cc0)=ANY=[], 0x678)
fallocate(0xffffffffffffffff, 0x0, 0x1, 0x2000406)

4.488415976s ago: executing program 2 (id=125):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe2$9p(0x0, 0x80)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x40810, 0x0)
r4 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, &(0x7f0000000500), 0x0)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x814)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)

4.475334886s ago: executing program 0 (id=127):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x20000000000002a5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18)
vmsplice(0xffffffffffffffff, &(0x7f0000000680), 0x0, 0x0)
r3 = dup2(r2, r0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', <r4=>0x0})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001780)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r5, @ANYBLOB="08000a005225eec3c93e67d23449034c5b1e4e7f640be00503d730fded9bb7affe0dbf53b2de17c67d52"], 0x54}, 0x1, 0x0, 0x0, 0x4048814}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1e, 0x5, 0xfffffffe, 0x5, 0x200, r3, 0x2, '\x00', r4, r5, 0x3, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100004}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0], <r9=>0x0, 0x82, &(0x7f00000006c0)=[{}], 0x8, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xe3, 0x8, 0x0, 0x0}}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000000840)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@jqfmt_vfsold}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@usrjquota}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@nobh}, {@grpid}], [], 0x2c}, 0x84, 0x4d9, &(0x7f0000000e00)="$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")
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000f8880000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c0000fb0000000000009500000000200000"], &(0x7f0000000640)='syzkaller\x00', 0x7}, 0x94)

3.394662329s ago: executing program 4 (id=129):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCBRDELBR(r0, 0x89a3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat(0xffffffffffffff9c, 0x0, 0x80500, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000340)=[@in6={0xa, 0x4e20, 0x4, @local, 0x1}], 0x1c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000007c0)={[{@nouid32}, {@nogrpid}, {@bh}]}, 0x1, 0x529, &(0x7f0000000cc0)="$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")
creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r3, &(0x7f0000000cc0)=ANY=[], 0x678)

3.324191732s ago: executing program 2 (id=130):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]})
close_range(r2, 0xffffffffffffffff, 0x0)

3.129856011s ago: executing program 1 (id=131):
r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0x2)
r1 = io_uring_setup(0xee4, &(0x7f00000002c0)={0x0, 0xe, 0x2, 0xffffffff, 0xfffffffe})
r2 = dup3(r0, r1, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r2, 0x4004550c, 0x0)

3.056196034s ago: executing program 1 (id=132):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x9}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0xffffffff, 0x10000, 0x81, 0x107f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x7, 0x2234, 0x7f, 0x81b, 0x800, 0x5, 0x0, 0x1, 0x7ed53619, 0x1, 0x9, 0x9644, 0x5, 0x58b, 0x2, 0x1003ff, 0x9, 0x2, 0x1, 0x0, 0x80000004, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xfffffffb, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0xfffffff9, 0x100006, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x4, 0x4, 0x3, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0xffff, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x5, 0x8, 0x100, 0xc0000000, 0x6, 0x4, 0x6, 0x12a, 0x80000001, 0x8, 0x1d24, 0x2, 0x5, 0x1, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x9, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda5a, 0x7ffffffe, 0x9, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x3e, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x3, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x9, 0x10001, 0x7, 0x7f, 0x5, 0x3, 0x200000a, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x8000399d, 0x6, 0x8ab6, 0x18000, 0x2, 0x72f7, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0x4, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x2007, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x4, 0x5, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x200, 0x4, 0xec2, 0x6, 0x80000008, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0x103, 0x5, 0x37f, 0x30, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x46, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x1, 0xd, 0x40006, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xfdc4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x2, 0x365, 0x8, 0x8, 0x4000000f, 0x8, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x1000092, 0x0, 0x7, 0x1, 0x7ff, 0x9, 0x40000002, 0x0, 0x3, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x200101, 0xadd9, 0x1, 0x4, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x9, 0x4, 0x3, 0x40008, 0x7, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x8d7, 0x200, 0x3, 0x1, 0x3, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x9, 0x7, 0x40000000, 0x5, 0xffffdbb7, 0x50, 0xf, 0xf, 0x12, 0x5, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x5, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x5, 0xfff, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x100006, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x4000003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xffffffec, 0x5, 0x0, 0xb9a6, 0x522, 0x101, 0x2, 0x900, 0x6, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dca, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xffe, 0x1, 0x89d, 0x8, 0x3, 0x710, 0xe, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x4, 0x5, 0x1, 0xdbec, {0x8, 0x1, 0x8001, 0x5, 0x7, 0x9}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x8, 0xffffffff, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r9 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmmsg$inet(r4, &(0x7f0000000b80), 0x0, 0x0)

3.055566234s ago: executing program 2 (id=133):
socket$can_raw(0x1d, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x800, 0x0)

2.967839747s ago: executing program 0 (id=134):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$netlink(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32], 0x70}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0)

2.046882496s ago: executing program 2 (id=135):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
pipe2$9p(0x0, 0x80)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x40810, 0x0)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, &(0x7f0000000500), 0x0)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x814)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)

1.93637329s ago: executing program 4 (id=136):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
close(0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {0xb, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20018041}, 0x4008000)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.813916815s ago: executing program 1 (id=137):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000480)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@errors_continue}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f)

1.504486478s ago: executing program 1 (id=138):
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7020000c3000000bf230000000000002703000000fefeff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400011000000404000001007d60b7030000000000006a0a00fe800000008500000026000000b7000000000000009500001000000000acaa8e53a53cb864c300094c07000000000000d94cf0987b00a749a8e53b5c9491cd1f2b94a64f1de23d03a8f0362ebfc44c77511e60070e25510070f7778d3e77ad85319f0113abbac795f8c24abca246150226eb93fe39233add8f68f87699162334343befce832cb8075c5f0ae30cde221371ff00000067e4b75da95370ae6fd2b99ac18f98403494d4a94e95fb8dcd813487b2bdb006c6465c15f04485a9f8c8e49d00000097184c8e9d34b1e382b25e9614634e8e09194f7b83138f5275d9ab463797a2f6dcb45d5f278cd4fb74559575da3560c01cdf1eaa3fc7a3fb4f1689dfd5b626174770e4dfd1c82a694efc62f9ef9c8c0ea1efa5b949ce22827f6fd1dfc69d03482d8ec264e3d96ad19a0c99a234b4b71b0bc22573f8594b91781cd8ff7f000000000000299ebf94588e60abe9a565c5bbdc0358226f8580dc1a83c6a44408de23475a74ef0deda8da4089269ccb4e728dee6320444576c87cc576291e5367a5f1a5d5a12f8313ffff0b7f73335279aa2b68c9f045831119881764c71bb65b5138c50e06024e80fd9656bc077e4e259695748989335ba9eeef288de73815f20fefd4acfb6813ffff00000b971aec1a3e618a08a94ecbd401c8109c87ee3f5c0501857538d2a766bfcf4128fbe726903aca577aa8943af747760718dee5a21396dce6f61c6f3c7e000000cb0868b48719e47296f2299df3ecfb5f3f0e42f6f1eb1dc64dcc8e397366d12033f6288edbda3b838100000000000000000000800000edd4e1266dc9d73223fe614f025a7f284de76b3b676a13c57a0ed24f6270c4cbbf93472eb8093d8296c68dfbb03ddedc3e029b08959b145a7b110068ba071e75d75716243052ad24b624fddc2f0f3a018c0085c2319c248d643cd09fa855b20a6d453f2e954ff0e55c010000008547c5a0ecefcc44cc9532f729167f215937357a4bb9746193c1ec000000000000dd43c108c2109d221b7b26b7c9c209000005b7918a6cd856b8fa806c85480443159c6bed51a0e021f05f7caa1b99cdb4d08d9031210ac00e67d8c40a18503cb7aabcc066dfbfd7f87abe1122f00e5454bec3563a19582e0000000000000000000000000084b27fc6a3f95bf02b4eb5f1599dd46edcad432cc216316fe07afe27649c89cf022a90d895a2d70fcde7a9c37ede0c47c27f44595ab4b1fb1ed5b1d91314b2d50f94a768fb605679485041a6376b8344a39af68aed2be39794dd86ae82f9660cf4f935255d71f9fab2e430ac42bba1f54141cf39d4d50c4ded504beacb0de210d7a3716dca7362c134b91cef3efc514fbcb4747e6814ac16449ac02a43d9d4151697b4b7890ec6b481c5f0ca8c52a6322f34a796fa5941d23409ecf73458223baaffb94a89ee2884df000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x40000f0, 0xf, 0x0, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12", 0x0, 0x8001}, 0x50)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
write(0xffffffffffffffff, &(0x7f00000004c0)="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", 0x210)

1.339583965s ago: executing program 1 (id=139):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8800)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000020301030000000000000000010000090800054000000000090002000000000000000000080001000100001a0900020000000006000000008390d1dca86d46a0f1c1f8f2fd3a5040ad107dd785bfa8ce472c41d34e1727db513968dc2f055388b260da7256aa8235688b087bf955fcbb07bb"], 0x3c}}, 0x4000000)

1.249915999s ago: executing program 4 (id=140):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe2$9p(0x0, 0x80)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x40810, 0x0)
r4 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, &(0x7f0000000500), 0x0)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x814)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)

1.249588139s ago: executing program 1 (id=141):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCBRDELBR(r0, 0x89a3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000800)=ANY=[@ANYRES32, @ANYBLOB="0700000000000000a900000000000000000000000000000000000000000000000000000000000000ffff"], 0xb8}}, 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x80500, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000100)=0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r5}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000007c0)={[{@nouid32}, {@nogrpid}, {@bh}]}, 0x1, 0x529, &(0x7f0000000cc0)="$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")
creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r7, &(0x7f0000000cc0)=ANY=[], 0x678)
fallocate(0xffffffffffffffff, 0x0, 0x1, 0x2000406)

1.203610971s ago: executing program 0 (id=142):
r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0x2)
r1 = io_uring_setup(0xee4, &(0x7f00000002c0)={0x0, 0xe, 0x2, 0xffffffff, 0xfffffffe})
r2 = dup3(r0, r1, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r2, 0x4004550c, 0x0)

1.011685578s ago: executing program 0 (id=143):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x553, &(0x7f00000009c0)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)

973.82417ms ago: executing program 2 (id=144):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]})
close_range(r2, 0xffffffffffffffff, 0x0)

124.229034ms ago: executing program 4 (id=145):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x20000000000002a5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18)
vmsplice(0xffffffffffffffff, &(0x7f0000000680), 0x0, 0x0)
r3 = dup2(r2, r0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', <r4=>0x0})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001780)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r5, @ANYBLOB="08000a005225eec3c93e67d23449034c5b1e4e7f640be00503d730fded9bb7affe0dbf53b2de17c67d52"], 0x54}, 0x1, 0x0, 0x0, 0x4048814}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1e, 0x5, 0xfffffffe, 0x5, 0x200, r3, 0x2, '\x00', r4, r5, 0x3, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100004}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0], <r9=>0x0, 0x82, &(0x7f00000006c0)=[{}], 0x8, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xe3, 0x8, 0x0, 0x0}}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000000840)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@jqfmt_vfsold}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@usrjquota}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@nobh}, {@grpid}], [], 0x2c}, 0x84, 0x4d9, &(0x7f0000000e00)="$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")
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000f8880000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c0000fb0000000000009500000000200000"], &(0x7f0000000640)='syzkaller\x00', 0x7}, 0x94)

0s ago: executing program 2 (id=146):
socket$can_raw(0x1d, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x800, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.236' (ED25519) to the list of known hosts.
[   58.813205][ T4172] cgroup: Unknown subsys name 'net'
[   58.921571][ T4172] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   60.413375][ T4172] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   62.362119][ T4182] chnl_net:caif_netlink_parms(): no params data found
[   62.481583][ T4191] chnl_net:caif_netlink_parms(): no params data found
[   62.501382][ T4185] chnl_net:caif_netlink_parms(): no params data found
[   62.525262][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.533522][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.542368][ T4182] device bridge_slave_0 entered promiscuous mode
[   62.555272][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.562413][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.570603][ T4182] device bridge_slave_1 entered promiscuous mode
[   62.620014][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.640394][ T4190] chnl_net:caif_netlink_parms(): no params data found
[   62.657015][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.745799][ T4182] team0: Port device team_slave_0 added
[   62.755009][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.762518][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.770951][ T4191] device bridge_slave_0 entered promiscuous mode
[   62.789889][ T4182] team0: Port device team_slave_1 added
[   62.803278][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.810803][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.819641][ T4191] device bridge_slave_1 entered promiscuous mode
[   62.827153][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.834441][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.842436][ T4185] device bridge_slave_0 entered promiscuous mode
[   62.877723][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.885055][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.893192][ T4185] device bridge_slave_1 entered promiscuous mode
[   62.916728][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.923910][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.931944][ T4190] device bridge_slave_0 entered promiscuous mode
[   62.941195][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.959381][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.966626][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.992668][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.004525][ T4192] chnl_net:caif_netlink_parms(): no params data found
[   63.014700][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.022061][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.030853][ T4190] device bridge_slave_1 entered promiscuous mode
[   63.039190][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.056297][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.063529][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.089487][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.126232][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.167858][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.191202][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.202724][ T4191] team0: Port device team_slave_0 added
[   63.210680][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.240102][ T4191] team0: Port device team_slave_1 added
[   63.270508][ T4185] team0: Port device team_slave_0 added
[   63.302567][ T4182] device hsr_slave_0 entered promiscuous mode
[   63.310572][ T4182] device hsr_slave_1 entered promiscuous mode
[   63.318838][ T4185] team0: Port device team_slave_1 added
[   63.332697][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.340008][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.347869][ T4192] device bridge_slave_0 entered promiscuous mode
[   63.357815][ T4190] team0: Port device team_slave_0 added
[   63.395424][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.402614][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.428858][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.440374][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.447455][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.455474][ T4192] device bridge_slave_1 entered promiscuous mode
[   63.463567][ T4190] team0: Port device team_slave_1 added
[   63.481099][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.488081][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.514808][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.527376][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.534612][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.560742][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.572865][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.580164][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.606188][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.633706][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.665575][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.691663][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.698667][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.724773][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.772103][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.779183][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.805216][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.827616][ T4192] team0: Port device team_slave_0 added
[   63.838908][ T4192] team0: Port device team_slave_1 added
[   63.847255][ T4185] device hsr_slave_0 entered promiscuous mode
[   63.854104][ T4185] device hsr_slave_1 entered promiscuous mode
[   63.862075][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.870168][ T4185] Cannot create hsr debugfs directory
[   63.911727][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.918709][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.944741][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.958945][ T4191] device hsr_slave_0 entered promiscuous mode
[   63.966022][ T4191] device hsr_slave_1 entered promiscuous mode
[   63.972882][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.980557][ T4191] Cannot create hsr debugfs directory
[   64.010524][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.017506][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.043611][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.060976][   T13] Bluetooth: hci2: command 0x0409 tx timeout
[   64.070093][   T21] Bluetooth: hci0: command 0x0409 tx timeout
[   64.076375][   T21] Bluetooth: hci1: command 0x0409 tx timeout
[   64.121834][ T4190] device hsr_slave_0 entered promiscuous mode
[   64.128594][ T4190] device hsr_slave_1 entered promiscuous mode
[   64.135405][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.143289][ T4190] Cannot create hsr debugfs directory
[   64.156869][   T21] Bluetooth: hci4: command 0x0409 tx timeout
[   64.163204][   T21] Bluetooth: hci3: command 0x0409 tx timeout
[   64.206408][ T4192] device hsr_slave_0 entered promiscuous mode
[   64.213202][ T4192] device hsr_slave_1 entered promiscuous mode
[   64.220307][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.227878][ T4192] Cannot create hsr debugfs directory
[   64.414692][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.441849][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.454227][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.469151][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.511456][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   64.522709][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   64.536938][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   64.548856][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   64.619380][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.651259][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.665346][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.689003][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.712899][ T4191] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.725986][ T4191] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.743021][ T4191] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.759427][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.782477][ T4191] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.816213][ T4182] 8021q: adding VLAN 0 to HW filter on device team0
[   64.834554][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.847815][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.876772][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   64.886067][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   64.895814][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.903152][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.914190][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   64.924954][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   64.937038][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   64.947207][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   64.960652][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   65.000983][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.014601][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   65.024435][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   65.033521][ T1386] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.040641][ T1386] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.059078][ T4190] 8021q: adding VLAN 0 to HW filter on device team0
[   65.078127][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.090246][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   65.100501][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.109146][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   65.117768][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.126459][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   65.137331][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.146475][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   65.155926][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   65.164655][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.171770][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.180535][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   65.189161][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.198110][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   65.207240][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   65.244721][ T4185] 8021q: adding VLAN 0 to HW filter on device team0
[   65.257439][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   65.266786][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   65.277387][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.284498][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.294538][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   65.303485][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.312906][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   65.321880][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.330967][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   65.339376][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.348079][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   65.356034][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.364690][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   65.373531][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   65.382153][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.389211][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.397544][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   65.408073][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   65.421521][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   65.431666][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.465611][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   65.476678][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   65.485780][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   65.497177][ T1386] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.504405][ T1386] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.513275][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   65.530525][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.542504][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   65.551419][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.606420][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   65.615888][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.631410][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   65.648346][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.657533][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   65.666977][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.675920][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   65.685281][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.697260][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   65.707890][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.718143][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   65.727718][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   65.737391][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.758790][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.785699][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   65.794446][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   65.803770][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   65.812812][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.828411][ T4192] 8021q: adding VLAN 0 to HW filter on device team0
[   65.846280][ T4191] 8021q: adding VLAN 0 to HW filter on device team0
[   65.862106][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.869176][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   65.877194][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.885817][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   65.894434][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.905034][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   65.917203][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   65.927146][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   65.936276][ T1386] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.943376][ T1386] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.956712][ T1386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   65.970263][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   65.985260][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   65.994083][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.001233][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.062642][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.073401][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.085871][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   66.096411][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   66.106211][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   66.116294][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   66.126170][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   66.135471][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   66.144598][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.150586][ T4196] Bluetooth: hci1: command 0x041b tx timeout
[   66.151797][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.160149][ T4196] Bluetooth: hci0: command 0x041b tx timeout
[   66.166134][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   66.177890][ T4196] Bluetooth: hci2: command 0x041b tx timeout
[   66.181658][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   66.193645][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.200749][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.208564][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   66.217587][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   66.225785][ T4196] Bluetooth: hci3: command 0x041b tx timeout
[   66.232101][ T4196] Bluetooth: hci4: command 0x041b tx timeout
[   66.233868][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   66.288502][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   66.305377][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   66.314210][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   66.328931][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   66.338092][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   66.347120][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   66.356291][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   66.365051][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   66.374063][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   66.384348][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   66.394031][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   66.404464][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   66.413732][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   66.423374][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   66.431946][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   66.445342][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.453617][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   66.467229][ T4182] device veth0_vlan entered promiscuous mode
[   66.487935][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   66.496699][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.505266][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.514968][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   66.522741][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   66.543887][ T4182] device veth1_vlan entered promiscuous mode
[   66.556665][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.564227][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.576379][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   66.587022][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.602248][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.616254][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.637433][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   66.646248][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   66.701472][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.712373][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.730856][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.741241][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.770348][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.779238][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.807738][ T4182] device veth0_macvtap entered promiscuous mode
[   66.842434][ T4182] device veth1_macvtap entered promiscuous mode
[   66.858541][ T4190] device veth0_vlan entered promiscuous mode
[   66.866229][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.875520][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.884495][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.893557][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.908436][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.916723][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.938848][ T4190] device veth1_vlan entered promiscuous mode
[   66.950501][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.958618][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   66.968237][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   66.983091][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.991912][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.001905][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.010866][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.024264][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.038206][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.054892][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.071034][ T4185] device veth0_vlan entered promiscuous mode
[   67.084497][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.093924][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.104183][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.114442][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.128049][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.137929][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.147973][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.157477][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.183692][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.197822][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   67.207575][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   67.215451][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   67.225163][ T4185] device veth1_vlan entered promiscuous mode
[   67.277524][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   67.287302][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.296620][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.313371][ T4190] device veth0_macvtap entered promiscuous mode
[   67.325195][ T4190] device veth1_macvtap entered promiscuous mode
[   67.332636][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   67.343437][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.354414][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.363357][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   67.373515][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   67.437231][ T4185] device veth0_macvtap entered promiscuous mode
[   67.456001][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.466671][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.475678][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   67.484809][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.493613][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.504316][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.512137][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.526426][ T4185] device veth1_macvtap entered promiscuous mode
[   67.552897][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.565149][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.577240][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.597247][ T4191] device veth0_vlan entered promiscuous mode
[   67.610021][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.613214][ T4269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.628343][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.630424][ T4269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.640670][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.653050][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   67.662825][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   67.672680][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.687128][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.699086][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.710845][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.721482][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.730915][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.739650][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.750838][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.775443][ T4191] device veth1_vlan entered promiscuous mode
[   67.784193][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.793771][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.807938][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.820963][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.831593][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.842600][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.856015][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.883144][ T4269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.892068][ T4269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.898670][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.909447][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.920338][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   67.929645][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.941052][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.950984][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.962754][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.974057][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.997319][ T4192] device veth0_vlan entered promiscuous mode
[   68.005912][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.015837][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.025858][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   68.034404][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   68.046926][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.056036][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.065369][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.075220][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.113142][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   68.124209][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   68.178393][ T4192] device veth1_vlan entered promiscuous mode
[   68.194130][ T4191] device veth0_macvtap entered promiscuous mode
[   68.232436][   T23] Bluetooth: hci2: command 0x040f tx timeout
[   68.246037][   T23] Bluetooth: hci0: command 0x040f tx timeout
[   68.250189][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   68.261631][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   68.265473][   T23] Bluetooth: hci1: command 0x040f tx timeout
[   68.271092][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.292942][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   68.301095][   T23] Bluetooth: hci4: command 0x040f tx timeout
[   68.307248][   T23] Bluetooth: hci3: command 0x040f tx timeout
[   68.314609][ T4191] device veth1_macvtap entered promiscuous mode
[   68.404245][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.415610][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.425781][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.437477][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.447405][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.458529][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.474778][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.506924][ T4192] device veth0_macvtap entered promiscuous mode
[   68.527073][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   68.527199][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.540763][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.544756][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.561431][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   68.569177][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.570364][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.586032][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.595434][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   68.603920][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.613185][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.622791][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.633938][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.645139][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.655019][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.665533][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.675583][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.686372][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.697431][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.711144][ T4192] device veth1_macvtap entered promiscuous mode
[   68.722607][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   68.742495][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   68.752342][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.761587][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.782836][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.800071][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.808938][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.818184][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.894335][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.908369][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.918944][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.930003][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.941024][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.953166][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.966263][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.977756][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.996602][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.018878][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.026862][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.038029][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   69.047085][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.049997][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.065677][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.076015][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.092745][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.103523][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.116632][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.127074][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.143870][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.156102][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.190013][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.190600][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.198065][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.225371][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   69.236929][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.247062][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.257584][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.270188][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.278939][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.288663][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.393483][ T4269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.431821][ T4269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.500902][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.529143][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.555472][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.563871][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.588547][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.601875][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.618461][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.665408][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.676249][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.697108][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.804141][   T26] audit: type=1326 audit(1763790623.326:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9a1cc749 code=0x7ffc0000
[   69.885091][ T4308] loop1: detected capacity change from 0 to 2048
[   69.898630][   T26] audit: type=1326 audit(1763790623.356:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9a1cc749 code=0x7ffc0000
[   69.954796][ T4312] loop0: detected capacity change from 0 to 512
[   69.993775][   T26] audit: type=1326 audit(1763790623.366:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0c9a1cc749 code=0x7ffc0000
[   70.034039][ T4310] device syzkaller0 entered promiscuous mode
[   70.089216][   T26] audit: type=1326 audit(1763790623.366:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9a1cc749 code=0x7ffc0000
[   70.094412][ T4308] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   70.115838][   T26] audit: type=1326 audit(1763790623.366:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9a1cc749 code=0x7ffc0000
[   70.169868][   T26] audit: type=1326 audit(1763790623.386:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0c9a1cc749 code=0x7ffc0000
[   70.198778][ T4308] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   70.209423][   T26] audit: type=1326 audit(1763790623.396:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9a1cc749 code=0x7ffc0000
[   70.251337][ T4324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'.
[   70.279464][   T26] audit: type=1326 audit(1763790623.396:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9a1cc749 code=0x7ffc0000
[   70.312639][   T23] Bluetooth: hci1: command 0x0419 tx timeout
[   70.321352][   T23] Bluetooth: hci0: command 0x0419 tx timeout
[   70.356100][   T23] Bluetooth: hci2: command 0x0419 tx timeout
[   70.390789][ T4259] Bluetooth: hci3: command 0x0419 tx timeout
[   70.399399][ T4259] Bluetooth: hci4: command 0x0419 tx timeout
[   70.403560][   T26] audit: type=1326 audit(1763790623.396:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4311 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386f793749 code=0x7ffc0000
[   70.441729][ T4327] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2: bg 0: block 345: padding at end of block bitmap is not set
[   70.478280][   T26] audit: type=1326 audit(1763790623.396:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4311 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386f793749 code=0x7ffc0000
[   70.513525][ T4327] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 99 with error 117
[   70.534870][ T4327] EXT4-fs (loop1): This should not happen!! Data will be lost
[   70.534870][ T4327] 
[   70.559647][ T4312] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   70.657321][ T4312] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it
[   70.702320][  T154] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 115 with max blocks 1 with error 117
[   70.725378][ T4312] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.8: Corrupt directory, running e2fsck is recommended
[   70.786520][  T154] EXT4-fs (loop1): This should not happen!! Data will be lost
[   70.786520][  T154] 
[   70.806133][ T4312] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[   70.897694][ T4312] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2229: inode #15: comm syz.0.8: corrupted in-inode xattr
[   70.950073][ T4312] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.8: couldn't read orphan inode 15 (err -117)
[   71.025239][ T4312] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,dioread_lock,stripe=0x00000000000001f5,grpjquota=.barrier,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[   71.336640][ T4345] loop4: detected capacity change from 0 to 128
[   71.347123][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[   71.347317][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[   71.479933][ T4345] =======================================================
[   71.479933][ T4345] WARNING: The mand mount option has been deprecated and
[   71.479933][ T4345]          and is ignored by this kernel. Remove the mand
[   71.479933][ T4345]          option from the mount to silence this warning.
[   71.479933][ T4345] =======================================================
[   72.809852][ T4312] syz.0.8[4312] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   72.809953][ T4312] syz.0.8[4312] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   72.864184][ T4312] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   72.969119][ T4312] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it
[   73.011273][ T4312] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.8: Corrupt directory, running e2fsck is recommended
[   73.050458][ T4312] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.8: path /2/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[   73.122548][ T4312] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 64: comm syz.0.8: path /2/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   73.262496][ T4372] Zero length message leads to an empty skb
[   73.301879][ T4372] loop3: detected capacity change from 0 to 512
[   73.324771][ T4372] EXT4-fs (loop3): Ignoring removed bh option
[   73.411160][ T4357] loop1: detected capacity change from 0 to 1024
[   73.431363][ T4372] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,nogrpid,bh,,errors=continue. Quota mode: writeback.
[   73.450415][ T4372] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   73.478940][ T4357] EXT4-fs (loop1): Ignoring removed orlov option
[   73.536329][ T4357] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,errors=continue,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none.
[   74.241709][ T4390] hub 8-0:1.0: USB hub found
[   74.247027][ T4390] hub 8-0:1.0: 1 port detected
[   74.266197][ T4390] loop0: detected capacity change from 0 to 1024
[   75.004058][   T26] kauditd_printk_skb: 84 callbacks suppressed
[   75.004073][   T26] audit: type=1326 audit(1763790628.526:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4392 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9a1cc749 code=0x7ffc0000
[   75.086568][ T4393] loop3: detected capacity change from 0 to 512
[   75.138286][   T26] audit: type=1326 audit(1763790628.566:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4392 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0c9a1cc749 code=0x7ffc0000
[   75.203276][   T26] audit: type=1326 audit(1763790628.566:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4392 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0c9a1cc783 code=0x7ffc0000
[   75.260998][   T26] audit: type=1326 audit(1763790628.596:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4392 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0c9a1cb1ff code=0x7ffc0000
[   75.315646][   T26] audit: type=1326 audit(1763790628.606:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4392 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0c9a1cc7d7 code=0x7ffc0000
[   75.339680][    C1] sched: RT throttling activated
[   75.356660][   T26] audit: type=1326 audit(1763790628.606:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4392 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0c9a1caf90 code=0x7ffc0000
[   75.356699][   T26] audit: type=1326 audit(1763790628.606:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4392 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c9a1cc34b code=0x7ffc0000
[   75.356729][   T26] audit: type=1326 audit(1763790628.626:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4392 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0c9a1cb3aa code=0x7ffc0000
[   75.356758][   T26] audit: type=1326 audit(1763790628.626:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4392 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0c9a1cb3aa code=0x7ffc0000
[   75.387842][ T4390] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   75.387880][ T4390] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[   75.390568][ T4390] EXT4-fs error (device loop0): ext4_get_journal_inode:5160: inode #5: comm syz.0.21: unexpected bad inode w/o EXT4_IGET_BAD
[   75.391198][ T4390] EXT4-fs (loop0): no journal found
[   75.391214][ T4390] EXT4-fs (loop0): can't get journal size
[   75.405526][   T26] audit: type=1326 audit(1763790628.926:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4392 comm="syz.3.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0c9a1cae97 code=0x7ffc0000
[   75.407078][ T4390] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,noinit_itable,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback.
[   75.416130][ T4393] EXT4-fs (loop3): orphan cleanup on readonly fs
[   75.417593][ T4393] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.23: bad orphan inode 13
[   75.418994][ T4393] ext4_test_bit(bit=12, block=18) = 1
[   75.419014][ T4393] is_bad_inode(inode)=0
[   75.419024][ T4393] NEXT_ORPHAN(inode)=2130706432
[   75.419034][ T4393] max_ino=32
[   75.419044][ T4393] i_nlink=1
[   75.419462][ T4393] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   76.247708][ T4300] Set syz1 is full, maxelem 65536 reached
[   76.425565][ T4397] loop2: detected capacity change from 0 to 512
[   76.482862][ T4397] EXT4-fs (loop2): Ignoring removed bh option
[   76.699064][ T4397] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,nogrpid,bh,,errors=continue. Quota mode: writeback.
[   76.798278][ T4397] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   77.043995][ T4416] loop0: detected capacity change from 0 to 512
[   77.084837][ T4416] EXT4-fs (loop0): Ignoring removed nobh option
[   77.114904][ T4416] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   77.234807][ T4416] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it
[   77.285645][ T4416] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.28: Corrupt directory, running e2fsck is recommended
[   77.321335][ T4416] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[   77.345955][ T4416] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2229: inode #15: comm syz.0.28: corrupted in-inode xattr
[   77.350518][ T4419] tipc: Started in network mode
[   77.368237][ T4421] loop4: detected capacity change from 0 to 512
[   77.389268][ T4416] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.28: couldn't read orphan inode 15 (err -117)
[   77.413689][ T4419] tipc: Node identity 26e54db46cef, cluster identity 4711
[   77.423533][ T4419] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.430896][ T4424] device syzkaller0 entered promiscuous mode
[   77.440484][ T4416] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000006,jqfmt=vfsold,auto_da_alloc,grpjquota=.usrjquota=,barrier=0x0000000000000008,nobh,grpid,,,errors=continue. Quota mode: writeback.
[   77.469849][ T4421] EXT4-fs (loop4): Ignoring removed bh option
[   77.480882][ T4418] tipc: Resetting bearer <eth:syzkaller0>
[   77.573459][ T4421] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nogrpid,bh,,errors=continue. Quota mode: writeback.
[   77.629358][ T4418] tipc: Disabling bearer <eth:syzkaller0>
[   77.652673][ T4421] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   78.316726][ T4443] hub 8-0:1.0: USB hub found
[   78.336636][ T4443] hub 8-0:1.0: 1 port detected
[   78.342922][ T4429] loop3: detected capacity change from 0 to 1024
[   78.385740][ T4429] EXT4-fs (loop3): Ignoring removed orlov option
[   78.425463][ T4429] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,errors=continue,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none.
[   78.538158][ T4440] netlink: 24 bytes leftover after parsing attributes in process `syz.2.37'.
[   78.637781][ T4447] loop4: detected capacity change from 0 to 1024
[   78.833951][ T4447] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   78.854438][ T4447] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[   78.948486][ T4447] EXT4-fs error (device loop4): ext4_get_journal_inode:5160: inode #5: comm syz.4.36: unexpected bad inode w/o EXT4_IGET_BAD
[   79.073953][ T4447] EXT4-fs (loop4): no journal found
[   79.096618][ T4447] EXT4-fs (loop4): can't get journal size
[   79.167153][ T4447] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,noinit_itable,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback.
[   79.478215][ T4457] loop3: detected capacity change from 0 to 512
[   79.564552][ T4457] EXT4-fs (loop3): Ignoring removed bh option
[   79.626660][ T4457] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,nogrpid,bh,,errors=continue. Quota mode: writeback.
[   79.676115][ T4457] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   80.375695][ T4473] loop3: detected capacity change from 0 to 512
[   80.449497][ T4473] EXT4-fs (loop3): Ignoring removed nobh option
[   80.540101][ T4473] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   80.607720][ T4473] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[   80.668019][ T4473] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.45: Corrupt directory, running e2fsck is recommended
[   80.690829][ T4473] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[   80.702475][ T4473] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2229: inode #15: comm syz.3.45: corrupted in-inode xattr
[   80.750305][ T4473] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.45: couldn't read orphan inode 15 (err -117)
[   80.820258][ T4473] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000006,jqfmt=vfsold,auto_da_alloc,grpjquota=.usrjquota=,barrier=0x0000000000000008,nobh,grpid,,,errors=continue. Quota mode: writeback.
[   80.999379][ T4477] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.035108][ T4477] device syzkaller0 entered promiscuous mode
[   81.073295][ T4476] tipc: Resetting bearer <eth:syzkaller0>
[   81.151020][ T4476] tipc: Disabling bearer <eth:syzkaller0>
[   81.168813][ T4479] loop3: detected capacity change from 0 to 512
[   81.243867][ T4479] EXT4-fs (loop3): Ignoring removed bh option
[   81.313518][ T4479] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,nogrpid,bh,,errors=continue. Quota mode: writeback.
[   81.382125][ T4479] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   82.333946][ T4497] loop3: detected capacity change from 0 to 128
[   82.343072][ T4496] loop0: detected capacity change from 0 to 1024
[   82.518885][ T4496] EXT4-fs (loop0): Ignoring removed orlov option
[   82.600883][ T4496] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,errors=continue,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none.
[   82.814963][  T144] attempt to access beyond end of device
[   82.814963][  T144] loop3: rw=1, want=1041, limit=128
[   82.896550][ T4503] loop2: detected capacity change from 0 to 512
[   82.963830][ T4503] EXT4-fs (loop2): Ignoring removed bh option
[   83.082779][ T4503] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,nogrpid,bh,,errors=continue. Quota mode: writeback.
[   83.215487][ T4503] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   83.440214][ T4512] loop3: detected capacity change from 0 to 512
[   83.485426][ T4512] EXT4-fs (loop3): Ignoring removed nobh option
[   83.498502][ T4512] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   83.639799][ T4512] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[   83.650546][ T4512] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.58: Corrupt directory, running e2fsck is recommended
[   83.680719][ T4512] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[   83.699881][ T4512] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2229: inode #15: comm syz.3.58: corrupted in-inode xattr
[   83.712297][ T4517] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.754444][ T4512] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.58: couldn't read orphan inode 15 (err -117)
[   83.783490][ T4517] device syzkaller0 entered promiscuous mode
[   83.819629][ T4512] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000006,jqfmt=vfsold,auto_da_alloc,grpjquota=.usrjquota=,barrier=0x0000000000000008,nobh,grpid,,,errors=continue. Quota mode: writeback.
[   83.861393][ T4516] tipc: Resetting bearer <eth:syzkaller0>
[   83.913077][ T4516] tipc: Disabling bearer <eth:syzkaller0>
[   84.274734][ T4523] loop3: detected capacity change from 0 to 512
[   84.331038][ T4523] EXT4-fs (loop3): Ignoring removed bh option
[   84.413075][ T4523] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,nogrpid,bh,,errors=continue. Quota mode: writeback.
[   84.436509][ T4523] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   85.754955][ T4540] loop3: detected capacity change from 0 to 1024
[   85.789011][ T4540] EXT4-fs (loop3): Ignoring removed orlov option
[   85.861222][ T4540] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,errors=continue,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none.
[   86.167218][ T4549] loop3: detected capacity change from 0 to 512
[   86.215451][ T4549] EXT4-fs (loop3): Ignoring removed bh option
[   86.347267][ T4549] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,nogrpid,bh,,errors=continue. Quota mode: writeback.
[   86.395738][ T4549] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   86.463783][ T4553] loop0: detected capacity change from 0 to 512
[   86.558510][ T4553] EXT4-fs (loop0): Ignoring removed nobh option
[   86.578891][ T4555] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.591357][ T4553] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   86.649389][ T4559] device syzkaller0 entered promiscuous mode
[   86.684662][ T4553] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it
[   86.702885][ T1324] cfg80211: failed to load regulatory.db
[   86.760903][ T4553] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.71: Corrupt directory, running e2fsck is recommended
[   86.791427][ T4553] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[   86.804456][ T4554] tipc: Resetting bearer <eth:syzkaller0>
[   86.853179][ T4561] loop4: detected capacity change from 0 to 512
[   86.860232][ T4553] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2229: inode #15: comm syz.0.71: corrupted in-inode xattr
[   86.870883][ T4554] tipc: Disabling bearer <eth:syzkaller0>
[   86.894127][ T4561] EXT4-fs (loop4): Ignoring removed bh option
[   86.945610][ T4553] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.71: couldn't read orphan inode 15 (err -117)
[   86.986426][ T4553] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000006,jqfmt=vfsold,auto_da_alloc,grpjquota=.usrjquota=,barrier=0x0000000000000008,nobh,grpid,,,errors=continue. Quota mode: writeback.
[   87.018250][ T4561] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nogrpid,bh,,errors=continue. Quota mode: writeback.
[   87.089752][ T4567] hub 8-0:1.0: USB hub found
[   87.094672][ T4561] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   87.124428][ T4567] hub 8-0:1.0: 1 port detected
[   87.333911][ T4573] loop3: detected capacity change from 0 to 1024
[   87.405076][ T4573] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   87.548085][ T4573] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[   87.619836][ T4573] EXT4-fs error (device loop3): ext4_get_journal_inode:5160: inode #5: comm syz.3.75: unexpected bad inode w/o EXT4_IGET_BAD
[   87.690676][ T4573] EXT4-fs (loop3): no journal found
[   87.696086][ T4573] EXT4-fs (loop3): can't get journal size
[   87.718367][ T4573] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,noinit_itable,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback.
[   87.921652][ T4403] syz.1.22 (4403) used greatest stack depth: 19184 bytes left
[   88.294178][ T4591] loop0: detected capacity change from 0 to 1024
[   88.366392][ T4591] EXT4-fs (loop0): Ignoring removed orlov option
[   88.444124][ T4591] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,errors=continue,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none.
[   88.682477][ T4596] loop0: detected capacity change from 0 to 512
[   88.773232][ T4596] EXT4-fs (loop0): Ignoring removed bh option
[   88.857844][ T4596] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,nogrpid,bh,,errors=continue. Quota mode: writeback.
[   88.943627][ T4596] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   89.182493][ T4604] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.194479][ T4606] xt_CT: You must specify a L4 protocol and not use inversions on it
[   89.228964][ T4604] device syzkaller0 entered promiscuous mode
[   89.257268][ T4603] tipc: Resetting bearer <eth:syzkaller0>
[   89.359900][ T4611] loop0: detected capacity change from 0 to 512
[   89.371019][ T4603] tipc: Disabling bearer <eth:syzkaller0>
[   89.394651][ T4611] EXT4-fs (loop0): Ignoring removed nobh option
[   89.428317][ T4611] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   89.560266][ T4611] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it
[   89.582207][ T4614] loop1: detected capacity change from 0 to 512
[   89.626994][ T4611] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.88: Corrupt directory, running e2fsck is recommended
[   89.697379][ T4611] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[   89.715354][ T4614] EXT4-fs (loop1): Ignoring removed bh option
[   89.727365][ T4611] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2229: inode #15: comm syz.0.88: corrupted in-inode xattr
[   89.746732][ T4611] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.88: couldn't read orphan inode 15 (err -117)
[   89.785966][ T4614] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,nogrpid,bh,,errors=continue. Quota mode: writeback.
[   89.814192][ T4614] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   89.844465][ T4611] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000006,jqfmt=vfsold,auto_da_alloc,grpjquota=.usrjquota=,barrier=0x0000000000000008,nobh,grpid,,,errors=continue. Quota mode: writeback.
[   90.190796][ T4626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'.
[   90.206316][ T4627] loop1: detected capacity change from 0 to 1024
[   90.265473][ T4627] EXT4-fs (loop1): Ignoring removed orlov option
[   90.458158][ T4627] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,errors=continue,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none.
[   90.927784][ T4640] loop1: detected capacity change from 0 to 512
[   90.968714][ T4640] EXT4-fs (loop1): Ignoring removed bh option
[   91.034479][ T4640] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,nogrpid,bh,,errors=continue. Quota mode: writeback.
[   91.205923][ T4640] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   91.382955][ T4647] tipc: Started in network mode
[   91.387882][ T4647] tipc: Node identity be57e194cd41, cluster identity 4711
[   91.460581][ T4647] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.614439][ T4651] device syzkaller0 entered promiscuous mode
[   91.741433][ T4651] tipc: Resetting bearer <eth:syzkaller0>
[   91.815919][ T4651] tipc: Disabling bearer <eth:syzkaller0>
[   91.834190][ T4659] loop1: detected capacity change from 0 to 512
[   91.865287][ T4659] EXT4-fs (loop1): Ignoring removed bh option
[   91.975076][ T4659] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,nogrpid,bh,,errors=continue. Quota mode: writeback.
[   92.045699][ T4666] loop0: detected capacity change from 0 to 512
[   92.065907][ T4669] loop4: detected capacity change from 0 to 1024
[   92.075406][ T4659] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   92.138460][ T4666] EXT4-fs (loop0): Ignoring removed nobh option
[   92.167095][ T4669] EXT4-fs (loop4): Ignoring removed orlov option
[   92.193209][ T4666] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   92.313047][ T4666] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it
[   92.324156][ T4666] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.107: Corrupt directory, running e2fsck is recommended
[   92.326006][ T4669] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,errors=continue,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none.
[   92.448257][ T4666] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[   92.477857][ T4666] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2229: inode #15: comm syz.0.107: corrupted in-inode xattr
[   92.514988][ T4666] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.107: couldn't read orphan inode 15 (err -117)
[   92.546120][ T4678] loop2: detected capacity change from 0 to 512
[   92.552583][ T4666] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000006,jqfmt=vfsold,auto_da_alloc,grpjquota=.usrjquota=,barrier=0x0000000000000008,nobh,grpid,,,errors=continue. Quota mode: writeback.
[   92.687596][ T4678] EXT4-fs (loop2): Ignoring removed bh option
[   93.178104][ T4678] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,nogrpid,bh,,errors=continue. Quota mode: writeback.
[   93.563420][ T4678] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   93.797662][ T4699] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   93.806899][ T4699] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   93.815835][ T4699] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   93.824796][ T4699] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   93.897391][ T4699] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   93.906608][ T4699] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   93.915545][ T4699] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   93.924469][ T4699] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   94.955774][ T4714] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.984400][ T4714] device syzkaller0 entered promiscuous mode
[   94.992467][ T4718] loop0: detected capacity change from 0 to 1024
[   95.013992][ T4713] tipc: Resetting bearer <eth:syzkaller0>
[   95.042342][ T4718] EXT4-fs (loop0): Ignoring removed orlov option
[   95.054957][ T4713] tipc: Disabling bearer <eth:syzkaller0>
[   95.115076][ T4721] loop4: detected capacity change from 0 to 512
[   95.125001][ T4722] hub 8-0:1.0: USB hub found
[   95.143140][ T4718] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,errors=continue,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none.
[   95.154380][ T4722] hub 8-0:1.0: 1 port detected
[   95.195957][ T4721] EXT4-fs (loop4): Ignoring removed bh option
[   95.304843][ T4721] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nogrpid,bh,,errors=continue. Quota mode: writeback.
[   95.479991][ T4721] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   95.557007][ T4735] loop0: detected capacity change from 0 to 512
[   95.632251][ T4735] EXT4-fs (loop0): Ignoring removed nobh option
[   96.075151][ T4735] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   96.362476][ T4735] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it
[   96.419421][ T4735] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.127: Corrupt directory, running e2fsck is recommended
[   96.436563][ T4735] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[   96.471329][ T4735] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2229: inode #15: comm syz.0.127: corrupted in-inode xattr
[   96.597087][ T4735] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.127: couldn't read orphan inode 15 (err -117)
[   96.640566][ T4735] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000006,jqfmt=vfsold,auto_da_alloc,grpjquota=.usrjquota=,barrier=0x0000000000000008,nobh,grpid,,,errors=continue. Quota mode: writeback.
[   96.648622][ T4748] loop4: detected capacity change from 0 to 512
[   96.799894][ T4748] EXT4-fs (loop4): Ignoring removed bh option
[   97.190550][ T4748] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nogrpid,bh,,errors=continue. Quota mode: writeback.
[   97.475875][ T4748] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   97.724543][ T4763] netlink: 52 bytes leftover after parsing attributes in process `syz.0.134'.
[   97.770996][ T4763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'.
[   98.018827][ T4768] loop1: detected capacity change from 0 to 1024
[   98.046371][ T4768] EXT4-fs (loop1): Ignoring removed orlov option
[   98.109107][ T4768] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,errors=continue,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none.
[   98.207439][ T4772] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.234050][ T4772] device syzkaller0 entered promiscuous mode
[   98.266015][ T4771] tipc: Resetting bearer <eth:syzkaller0>
[   98.372377][ T4771] tipc: Disabling bearer <eth:syzkaller0>
[   99.553953][ T4786] loop0: detected capacity change from 0 to 512
[   99.675325][ T4786] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   99.689449][ T4785] loop1: detected capacity change from 0 to 512
[   99.762432][ T4786] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.143: bad orphan inode 13
[   99.784641][ T4785] EXT4-fs (loop1): Ignoring removed bh option
[   99.859078][ T4786] ext4_test_bit(bit=12, block=18) = 1
[   99.868252][ T4794] loop4: detected capacity change from 0 to 512
[   99.885498][ T4786] is_bad_inode(inode)=0
[   99.974897][ T4786] NEXT_ORPHAN(inode)=0
[   99.988461][ T4786] max_ino=32
[  100.166754][ T4794] EXT4-fs (loop4): Ignoring removed nobh option
[  100.256522][ T4786] i_nlink=1
[  100.366997][ T4786] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  100.475815][ T4785] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,nogrpid,bh,,errors=continue. Quota mode: writeback.
[  100.582194][ T4794] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  100.651644][ T4786] 
[  100.654014][ T4786] ======================================================
[  100.661222][ T4786] WARNING: possible circular locking dependency detected
[  100.668256][ T4786] syzkaller #0 Not tainted
[  100.672677][ T4786] ------------------------------------------------------
[  100.679698][ T4786] syz.0.143/4786 is trying to acquire lock:
[  100.685598][ T4786] ffff88805fa86628 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x32f/0x1b30
[  100.695225][ T4786] 
[  100.695225][ T4786] but task is already holding lock:
[  100.702598][ T4786] ffff88802a3be208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_read_dquot+0x4a/0x110
[  100.712031][ T4786] 
[  100.712031][ T4786] which lock already depends on the new lock.
[  100.712031][ T4786] 
[  100.722449][ T4786] 
[  100.722449][ T4786] the existing dependency chain (in reverse order) is:
[  100.730763][ T4785] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  100.731474][ T4786] 
[  100.731474][ T4786] -> #2 (&s->s_dquot.dqio_sem){++++}-{3:3}:
[  100.741775][ T4794] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it
[  100.749708][ T4786]        down_read+0x44/0x2e0
[  100.749737][ T4786]        v2_read_dquot+0x4a/0x110
[  100.769493][ T4786]        dquot_acquire+0x152/0x520
[  100.774628][ T4786]        ext4_acquire_dquot+0x2d9/0x4a0
[  100.780194][ T4786]        dqget+0x778/0xeb0
[  100.784632][ T4786]        __dquot_initialize+0x3b6/0xcb0
[  100.790199][ T4786]        ext4_create+0x8c/0x460
[  100.795069][ T4786]        path_openat+0x11e1/0x2f30
[  100.800199][ T4786]        do_filp_open+0x1b3/0x3e0
[  100.805247][ T4786]        do_sys_openat2+0x142/0x4a0
[  100.810479][ T4786]        __x64_sys_creat+0x8c/0xb0
[  100.815612][ T4786]        do_syscall_64+0x4c/0xa0
[  100.820576][ T4786]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  100.827023][ T4786] 
[  100.827023][ T4786] -> #1 (&dquot->dq_lock){+.+.}-{3:3}:
[  100.834688][ T4786]        __mutex_lock_common+0x1eb/0x2390
[  100.840431][ T4786]        mutex_lock_nested+0x17/0x20
[  100.845747][ T4786]        dquot_commit+0x5a/0x410
[  100.850716][ T4786]        ext4_write_dquot+0x1f0/0x360
[  100.856118][ T4786]        mark_all_dquot_dirty+0xf9/0x400
[  100.861774][ T4786]        __dquot_free_space+0x7ca/0xb90
[  100.866700][ T4794] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.145: Corrupt directory, running e2fsck is recommended
[  100.867340][ T4786]        ext4_free_blocks+0x1af5/0x2480
[  100.885637][ T4786]        ext4_ext_remove_space+0x1eaa/0x43a0
[  100.891642][ T4786]        ext4_ext_truncate+0x192/0x240
[  100.897117][ T4786]        ext4_truncate+0x9f1/0x10d0
[  100.902346][ T4786]        ext4_setattr+0xffe/0x19e0
[  100.907475][ T4786]        notify_change+0xbcd/0xee0
[  100.912605][ T4786]        do_truncate+0x197/0x220
[  100.917562][ T4786]        path_openat+0x28af/0x2f30
[  100.922687][ T4786]        do_filp_open+0x1b3/0x3e0
[  100.927728][ T4786]        do_sys_openat2+0x142/0x4a0
[  100.932951][ T4786]        __x64_sys_openat+0x135/0x160
[  100.933373][ T4794] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  100.938344][ T4786]        do_syscall_64+0x4c/0xa0
[  100.938365][ T4786]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  100.938386][ T4786] 
[  100.938386][ T4786] -> #0 (&ei->i_data_sem/2){++++}-{3:3}:
[  100.938421][ T4786]        __lock_acquire+0x2c33/0x7c60
[  100.938443][ T4786]        lock_acquire+0x197/0x3f0
[  100.938462][ T4786]        down_read+0x44/0x2e0
[  100.938482][ T4786]        ext4_map_blocks+0x32f/0x1b30
[  100.938500][ T4786]        ext4_getblk+0x16d/0x630
[  100.938516][ T4786]        ext4_bread+0x26/0x180
[  100.938533][ T4786]        ext4_quota_read+0x1b3/0x3a0
[  100.938552][ T4786]        find_tree_dqentry+0x188/0xb30
[  100.938573][ T4786]        find_tree_dqentry+0x3eb/0xb30
[  100.938594][ T4786]        find_tree_dqentry+0x3eb/0xb30
[  100.938615][ T4786]        find_tree_dqentry+0x3eb/0xb30
[  100.938635][ T4786]        qtree_read_dquot+0x13c/0x680
[  100.938655][ T4786]        v2_read_dquot+0xc0/0x110
[  100.938674][ T4786]        dquot_acquire+0x152/0x520
[  100.938693][ T4786]        ext4_acquire_dquot+0x2d9/0x4a0
[  100.938713][ T4786]        dqget+0x778/0xeb0
[  100.938731][ T4786]        __dquot_initialize+0x328/0xcb0
[  100.938750][ T4786]        ext4_file_open+0x2d1/0x6a0
[  100.938770][ T4786]        do_dentry_open+0x7ff/0xf80
[  100.938791][ T4786]        path_openat+0x2682/0x2f30
[  100.938809][ T4786]        do_filp_open+0x1b3/0x3e0
[  100.938827][ T4786]        do_sys_openat2+0x142/0x4a0
[  100.938847][ T4786]        __x64_sys_open+0x11b/0x140
[  100.938867][ T4786]        do_syscall_64+0x4c/0xa0
[  100.938884][ T4786]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  100.938904][ T4786] 
[  100.938904][ T4786] other info that might help us debug this:
[  100.938904][ T4786] 
[  100.938910][ T4786] Chain exists of:
[  100.938910][ T4786]   &ei->i_data_sem/2 --> &dquot->dq_lock --> &s->s_dquot.dqio_sem
[  100.938910][ T4786] 
[  100.938949][ T4786]  Possible unsafe locking scenario:
[  100.938949][ T4786] 
[  100.938954][ T4786]        CPU0                    CPU1
[  100.938959][ T4786]        ----                    ----
[  100.938964][ T4786]   lock(
[  100.978248][ T4794] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2229: inode #15: comm syz.4.145: corrupted in-inode xattr
[  100.981304][ T4786] &s->s_dquot.dqio_sem);
[  100.981322][ T4786]                                lock(&dquot->dq_lock);
[  100.981337][ T4786]                                lock(&s->s_dquot.dqio_sem
[  100.987561][ T4794] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.145: couldn't read orphan inode 15 (err -117)
[  100.991646][ T4786] );
[  100.991653][ T4786]   lock(&ei->i_data_sem/2);
[  100.991673][ T4786] 
[  100.991673][ T4786]  *** DEADLOCK ***
[  100.991673][ T4786] 
[  100.991677][ T4786] 2 locks held by syz.0.143/4786:
[  100.991688][ T4786]  #0: ffff88805fa5b928 (&dquot->dq_lock
[  101.007024][ T4794] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000006,jqfmt=vfsold,auto_da_alloc,grpjquota=.usrjquota=,barrier=0x0000000000000008,nobh,grpid,,,errors=continue. Quota mode: writeback.
[  101.007230][ T4786] ){+.+.}-{3:3}, at: dquot_acquire+0x63/0x520
[  101.239708][ T4786]  #1: ffff88802a3be208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_read_dquot+0x4a/0x110
[  101.249574][ T4786] 
[  101.249574][ T4786] stack backtrace:
[  101.255491][ T4786] CPU: 0 PID: 4786 Comm: syz.0.143 Not tainted syzkaller #0
[  101.262792][ T4786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  101.272869][ T4786] Call Trace:
[  101.276156][ T4786]  <TASK>
[  101.279095][ T4786]  dump_stack_lvl+0x168/0x230
[  101.283799][ T4786]  ? load_image+0x3b0/0x3b0
[  101.288319][ T4786]  ? show_regs_print_info+0x20/0x20
[  101.293540][ T4786]  ? print_circular_bug+0x12b/0x1a0
[  101.298907][ T4786]  check_noncircular+0x274/0x310
[  101.303873][ T4786]  ? add_chain_block+0x940/0x940
[  101.308845][ T4786]  ? lockdep_lock+0xdc/0x1e0
[  101.313456][ T4786]  ? mark_lock+0x94/0x320
[  101.317808][ T4786]  ? mark_lock+0x94/0x320
[  101.322166][ T4786]  __lock_acquire+0x2c33/0x7c60
[  101.327050][ T4786]  ? verify_lock_unused+0x140/0x140
[  101.332271][ T4786]  ? verify_lock_unused+0x140/0x140
[  101.337511][ T4786]  ? verify_lock_unused+0x140/0x140
[  101.342743][ T4786]  lock_acquire+0x197/0x3f0
[  101.347275][ T4786]  ? ext4_map_blocks+0x32f/0x1b30
[  101.352333][ T4786]  ? mark_lock+0x94/0x320
[  101.356688][ T4786]  ? __might_sleep+0xf0/0xf0
[  101.361302][ T4786]  ? read_lock_is_recursive+0x10/0x10
[  101.366720][ T4786]  ? percpu_counter_add_batch+0x13b/0x160
[  101.372460][ T4786]  ? rcu_is_watching+0x11/0xa0
[  101.377243][ T4786]  down_read+0x44/0x2e0
[  101.381465][ T4786]  ? ext4_map_blocks+0x32f/0x1b30
[  101.386519][ T4786]  ext4_map_blocks+0x32f/0x1b30
[  101.391405][ T4786]  ? stack_depot_save+0x404/0x440
[  101.392464][ T4809] loop3: detected capacity change from 0 to 1024
[  101.396448][ T4786]  ? ext4_issue_zeroout+0x250/0x250
[  101.396474][ T4786]  ? __kasan_kmalloc+0xcc/0xf0
[  101.412767][ T4786]  ? __kasan_kmalloc+0xb5/0xf0
[  101.417553][ T4786]  ? find_tree_dqentry+0x55/0xb30
[  101.422692][ T4786]  ? find_tree_dqentry+0x3eb/0xb30
[  101.427944][ T4786]  ? find_tree_dqentry+0x3eb/0xb30
[  101.433069][ T4786]  ? find_tree_dqentry+0x3eb/0xb30
[  101.438186][ T4786]  ? qtree_read_dquot+0x13c/0x680
[  101.443221][ T4786]  ? dquot_acquire+0x152/0x520
[  101.448129][ T4786]  ? ext4_acquire_dquot+0x2d9/0x4a0
[  101.453339][ T4786]  ? dqget+0x778/0xeb0
[  101.457424][ T4786]  ext4_getblk+0x16d/0x630
[  101.461845][ T4786]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  101.467917][ T4786]  ? ext4_get_block_unwritten+0x30/0x30
[  101.473475][ T4786]  ext4_bread+0x26/0x180
[  101.477725][ T4786]  ext4_quota_read+0x1b3/0x3a0
[  101.482494][ T4786]  ? ext4_show_options+0x50/0x50
[  101.487435][ T4786]  find_tree_dqentry+0x188/0xb30
[  101.492383][ T4786]  find_tree_dqentry+0x3eb/0xb30
[  101.497327][ T4786]  find_tree_dqentry+0x3eb/0xb30
[  101.502292][ T4786]  find_tree_dqentry+0x3eb/0xb30
[  101.507241][ T4786]  qtree_read_dquot+0x13c/0x680
[  101.512092][ T4786]  ? preempt_count_add+0x8d/0x190
[  101.517119][ T4786]  ? down_read+0x1aa/0x2e0
[  101.521538][ T4786]  v2_read_dquot+0xc0/0x110
[  101.526047][ T4786]  dquot_acquire+0x152/0x520
[  101.530643][ T4786]  ext4_acquire_dquot+0x2d9/0x4a0
[  101.535675][ T4786]  dqget+0x778/0xeb0
[  101.539581][ T4786]  __dquot_initialize+0x328/0xcb0
[  101.544612][ T4786]  ? dquot_initialize+0x20/0x20
[  101.549468][ T4786]  ? fsverity_file_open+0x6b/0x270
[  101.554579][ T4786]  ? generic_file_open+0x91/0xc0
[  101.559521][ T4786]  ext4_file_open+0x2d1/0x6a0
[  101.564213][ T4786]  ? ext4_file_mmap+0x360/0x360
[  101.569084][ T4786]  ? preempt_count_add+0x8d/0x190
[  101.574134][ T4786]  ? tomoyo_file_open+0xe9/0x170
[  101.579078][ T4786]  ? fsnotify_perm+0x254/0x560
[  101.583856][ T4786]  ? ext4_file_mmap+0x360/0x360
[  101.588705][ T4786]  do_dentry_open+0x7ff/0xf80
[  101.593393][ T4786]  path_openat+0x2682/0x2f30
[  101.597995][ T4786]  ? do_filp_open+0x3e0/0x3e0
[  101.602679][ T4786]  do_filp_open+0x1b3/0x3e0
[  101.607191][ T4786]  ? vfs_tmpfile+0x300/0x300
[  101.611788][ T4786]  ? _raw_spin_unlock+0x24/0x40
[  101.616732][ T4786]  ? alloc_fd+0x598/0x630
[  101.621068][ T4786]  do_sys_openat2+0x142/0x4a0
[  101.625757][ T4786]  ? do_sys_open+0xe0/0xe0
[  101.630180][ T4786]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  101.636168][ T4786]  ? lock_chain_count+0x20/0x20
[  101.641020][ T4786]  ? vtime_user_exit+0x2dc/0x400
[  101.645983][ T4786]  __x64_sys_open+0x11b/0x140
[  101.650683][ T4786]  do_syscall_64+0x4c/0xa0
[  101.655104][ T4786]  ? clear_bhb_loop+0x30/0x80
[  101.659784][ T4786]  ? clear_bhb_loop+0x30/0x80
[  101.664459][ T4786]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  101.670364][ T4786] RIP: 0033:0x7f386f793749
[  101.674796][ T4786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  101.694400][ T4786] RSP: 002b:00007f386d9fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  101.702818][ T4786] RAX: ffffffffffffffda RBX: 00007f386f9e9fa0 RCX: 00007f386f793749
[  101.710791][ T4786] RDX: 0000000000000000 RSI: 0000000000145142 RDI: 0000200000000240
[  101.718761][ T4786] RBP: 00007f386f817f91 R08: 0000000000000000 R09: 0000000000000000
[  101.726741][ T4786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  101.734718][ T4786] R13: 00007f386f9ea038 R14: 00007f386f9e9fa0 R15: 00007fffd0fe3718
[  101.742786][ T4786]  </TASK>
[  101.751948][ T4725] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set
[  101.768049][ T4786] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  101.768761][ T4809] EXT4-fs (loop3): Ignoring removed orlov option
[  101.803467][ T4786] __quota_error: 82 callbacks suppressed
[  101.803482][ T4786] Quota error (device loop0): write_blk: dquota write failed
[  101.810829][ T4809] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,errors=continue,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none.
[  101.819577][ T4786] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  101.846234][ T4786] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.143: Failed to acquire dquot type 1
[  101.885135][ T4813] loop1: detected capacity change from 0 to 512
[  101.892886][ T4813] EXT4-fs (loop1): Ignoring removed bh option
[  101.931172][ T4813] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,nogrpid,bh,,errors=continue. Quota mode: writeback.
[  101.945117][ T4813] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff)