last executing test programs:

2m45.483468472s ago: executing program 1 (id=1432):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x43c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0xd}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0xfffffffe, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39dd, 0x4, 0x7ff, 0x80000008, 0x7, 0x7fbffffe, 0x4400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x8004, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x4, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0x80, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x3, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0xb8, 0x7fff, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0xbc}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40098}, 0x0)

2m42.283129846s ago: executing program 1 (id=1439):
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x4c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x1}}, 0x4c}}, 0x800)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000800}, 0x4000840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x6000000}, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

2m42.066591842s ago: executing program 1 (id=1441):
socket$packet(0x11, 0x3, 0x300)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r3=>0x0})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20008050}, 0x0)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="08008848"], 0x92)

2m41.622223352s ago: executing program 1 (id=1446):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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")
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)

2m39.515250081s ago: executing program 1 (id=1457):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$packet(0x11, 0xa, 0x300)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x52, 0x20020084, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
writev(r0, &(0x7f0000000800)=[{&(0x7f0000000580)}], 0x1)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000300)=@tcp=r0}, 0x20)
sendto$inet(r0, &(0x7f0000000880)="91", 0x100000, 0x40, 0x0, 0x4102)

2m39.022484532s ago: executing program 1 (id=1463):
socket$packet(0x11, 0x3, 0x300)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r3=>0x0})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008050}, 0x0)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="08008848"], 0x92)

2m38.69604634s ago: executing program 32 (id=1463):
socket$packet(0x11, 0x3, 0x300)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r3=>0x0})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008050}, 0x0)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="08008848"], 0x92)

43.590930919s ago: executing program 4 (id=2031):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$eJzs3d9vU1UcAPDv7Tp+KyMhJPpgFnkQg3Rs8wcmPuCjUSKJvmOzXRaylpK1I2ySCA/y4oshJsZIYvwDfPeR+A/4V5AoCTFk0Qdfam53ywprt9EVNuznk9xyzj23nHt67vdwbs8lDWBojWcvhYhXIuLbJOJwR1kx8sLx1eNWHl6fybYkms3P/koiyfe1j0/yPw+2M8WI376OOFl4rMqx7KW+tDxfrlTShXznRKN6ZaK+tHzqUrU8l86ll6emp8+8Mz31/nvvDqytb57/54dP73505pvjK9//cv/I7STOxqG8rLMd23CjMzMe4/lnMhpnnzhwcgCV7SbJTp8AfRnJ43w0sjHgcIzkUQ/8/30VEU1gSCXiH4ZUex7Qvrcf0H3wC+PBh6s3QOvbX1z9biT2te6NDqwkj90ZJe0vMrYpq+PXP+/czrYY3PcQAJu6cTMiTheL68e/JB//+nd6C8c8WYfxD56fu9n8561u85/Co/lPdJn/HOwSu/3YPP4L9wdQTU/Z/O+DrvPffNFqLMZG8txLrexocvFSJc3Gtpcj4kSM7s3yG63nnFm51+xV1jn/y7as/vZcMD+P+8W9j79nttwob6/Vax7cjHi16/w3edT/SZf+zz6P81us41h657VeZZu3/9lq/hzxRtf+X1vRSjZen5xoXQ8T7ativb9vHfu9V/073f6s/w9s3P6xpHO9tv70dfy079+0V1m/1/+e5PNWek++71q50ViYjNiTfLJ+/9Tae9v59vFZ+08c33j863b974+IL7bY/ltHb/U8dFv9P4BF16z9s0/V/0+fuPfxlz/23/6s/99upU7ke7Yy/m31BLfz2QEAAAAAAMBuU4iIQ5EUSo/ShUKptPp8x9E4UKjU6o2TF2uvR6us9fxDob3SfbjjeYjJ/HnYdn7qifx0RByJiO9G9rfypZlaZXanGw8AAAAAAAAAAAAAAAAAAAC7xMEe//8/88fITp8d8Mz5yW8YXpvG/yB+6QnYlfz7D8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAADNT5c+eyrbny8PpMlp+9urQ4X7t6ajatz5eqizOlmdrCldJcrTZXSUsztepmf1+lVrsyORWL1yYaab0xUV9avlCtLV5uXLhULc+lF9LR59IqAAAAAAAAAAAAAAAAAAAAeLHUl5bny5VKuiAh0VeiuDtOQ2LAiZ0emQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzX8BAAD//7VBN58=")
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)

43.034124582s ago: executing program 4 (id=2035):
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000d24000/0x3000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000b37000/0x1000)=nil, &(0x7f0000724000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000780000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xcaa1, 0xc000, 0x6, 0xbe})
setresuid(0xee00, 0xee00, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

42.621235512s ago: executing program 4 (id=2040):
socket(0x2, 0x80805, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
shutdown(r0, 0x1)

42.566826802s ago: executing program 3 (id=2041):
unshare(0x20000400)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x2a, 0x0, 0x0)

42.412847696s ago: executing program 4 (id=2043):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$eJzs3d9vU1UcAPDv7Tp+KyMhJPpgFnkQg3Rs8wcmPuCjUSKJvmOzXRaylpK1I2ySCA/y4oshJsZIYvwDfPeR+A/4V5AoCTFk0Qdfam53ywprt9EVNuznk9xyzj23nHt67vdwbs8lDWBojWcvhYhXIuLbJOJwR1kx8sLx1eNWHl6fybYkms3P/koiyfe1j0/yPw+2M8WI376OOFl4rMqx7KW+tDxfrlTShXznRKN6ZaK+tHzqUrU8l86ll6emp8+8Mz31/nvvDqytb57/54dP73505pvjK9//cv/I7STOxqG8rLMd23CjMzMe4/lnMhpnnzhwcgCV7SbJTp8AfRnJ43w0sjHgcIzkUQ/8/30VEU1gSCXiH4ZUex7Qvrcf0H3wC+PBh6s3QOvbX1z9biT2te6NDqwkj90ZJe0vMrYpq+PXP+/czrYY3PcQAJu6cTMiTheL68e/JB//+nd6C8c8WYfxD56fu9n8561u85/Co/lPdJn/HOwSu/3YPP4L9wdQTU/Z/O+DrvPffNFqLMZG8txLrexocvFSJc3Gtpcj4kSM7s3yG63nnFm51+xV1jn/y7as/vZcMD+P+8W9j79nttwob6/Vax7cjHi16/w3edT/SZf+zz6P81us41h657VeZZu3/9lq/hzxRtf+X1vRSjZen5xoXQ8T7ativb9vHfu9V/073f6s/w9s3P6xpHO9tv70dfy079+0V1m/1/+e5PNWek++71q50ViYjNiTfLJ+/9Tae9v59vFZ+08c33j863b974+IL7bY/ltHb/U8dFv9P4BF16z9s0/V/0+fuPfxlz/23/6s/99upU7ke7Yy/m31BLfz2QEAAAAAAMBuU4iIQ5EUSo/ShUKptPp8x9E4UKjU6o2TF2uvR6us9fxDob3SfbjjeYjJ/HnYdn7qifx0RByJiO9G9rfypZlaZXanGw8AAAAAAAAAAAAAAAAAAAC7xMEe//8/88fITp8d8Mz5yW8YXpvG/yB+6QnYlfz7D8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAADNT5c+eyrbny8PpMlp+9urQ4X7t6ajatz5eqizOlmdrCldJcrTZXSUsztepmf1+lVrsyORWL1yYaab0xUV9avlCtLV5uXLhULc+lF9LR59IqAAAAAAAAAAAAAAAAAAAAeLHUl5bny5VKuiAh0VeiuDtOQ2LAiZ0emQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzX8BAAD//7VBN58=")
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(0x0, 0x8000, 0xa0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)

42.396997097s ago: executing program 3 (id=2044):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040))
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x74, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x38, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'veth1\x00'}]}]}]}], {0x14, 0x10}}, 0xbc}, 0x1, 0x0, 0x0, 0x20040841}, 0x0)

41.771099551s ago: executing program 4 (id=2049):
setns(0xc9, 0x0)
r0 = socket(0x2, 0x3, 0xff)
sendmmsg$unix(r0, &(0x7f0000007780)=[{{&(0x7f0000002440)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000004900)=[{&(0x7f0000004500)="d9ff3c4ae71cd8e0c2f9dae2ee2a68355807299daa97bc2784dbfc8692de61162eea3957", 0x24}], 0x1, 0x0, 0x0, 0x20008000}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000040}}], 0x2, 0x8020)

41.475684518s ago: executing program 2 (id=2054):
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})
sendmmsg$inet(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="be177dbe6dc1fe", 0x7}], 0x1}}], 0x1, 0x40)
close(r2)

41.474969488s ago: executing program 3 (id=2055):
mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed)
mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r2, &(0x7f0000000900)='0x1d6b\x00', 0x6)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r3, &(0x7f0000000b00)='0x0102\x00', 0x6)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed)
symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00')
symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed)
symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00')
symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00')
symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00')
symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed)
symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000002100)='usbip-vudc.0\x00', 0xc)

41.38959651s ago: executing program 4 (id=2056):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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")
open(0x0, 0x400141042, 0x2a)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)

41.331632661s ago: executing program 3 (id=2057):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$eJzs3d9vU1UcAPDv7Tp+KyMhJPpgFnkQg3Rs8wcmPuCjUSKJvmOzXRaylpK1I2ySCA/y4oshJsZIYvwDfPeR+A/4V5AoCTFk0Qdfam53ywprt9EVNuznk9xyzj23nHt67vdwbs8lDWBojWcvhYhXIuLbJOJwR1kx8sLx1eNWHl6fybYkms3P/koiyfe1j0/yPw+2M8WI376OOFl4rMqx7KW+tDxfrlTShXznRKN6ZaK+tHzqUrU8l86ll6emp8+8Mz31/nvvDqytb57/54dP73505pvjK9//cv/I7STOxqG8rLMd23CjMzMe4/lnMhpnnzhwcgCV7SbJTp8AfRnJ43w0sjHgcIzkUQ/8/30VEU1gSCXiH4ZUex7Qvrcf0H3wC+PBh6s3QOvbX1z9biT2te6NDqwkj90ZJe0vMrYpq+PXP+/czrYY3PcQAJu6cTMiTheL68e/JB//+nd6C8c8WYfxD56fu9n8561u85/Co/lPdJn/HOwSu/3YPP4L9wdQTU/Z/O+DrvPffNFqLMZG8txLrexocvFSJc3Gtpcj4kSM7s3yG63nnFm51+xV1jn/y7as/vZcMD+P+8W9j79nttwob6/Vax7cjHi16/w3edT/SZf+zz6P81us41h657VeZZu3/9lq/hzxRtf+X1vRSjZen5xoXQ8T7ativb9vHfu9V/073f6s/w9s3P6xpHO9tv70dfy079+0V1m/1/+e5PNWek++71q50ViYjNiTfLJ+/9Tae9v59vFZ+08c33j863b974+IL7bY/ltHb/U8dFv9P4BF16z9s0/V/0+fuPfxlz/23/6s/99upU7ke7Yy/m31BLfz2QEAAAAAAMBuU4iIQ5EUSo/ShUKptPp8x9E4UKjU6o2TF2uvR6us9fxDob3SfbjjeYjJ/HnYdn7qifx0RByJiO9G9rfypZlaZXanGw8AAAAAAAAAAAAAAAAAAAC7xMEe//8/88fITp8d8Mz5yW8YXpvG/yB+6QnYlfz7D8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAADNT5c+eyrbny8PpMlp+9urQ4X7t6ajatz5eqizOlmdrCldJcrTZXSUsztepmf1+lVrsyORWL1yYaab0xUV9avlCtLV5uXLhULc+lF9LR59IqAAAAAAAAAAAAAAAAAAAAeLHUl5bny5VKuiAh0VeiuDtOQ2LAiZ0emQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzX8BAAD//7VBN58=")
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(0x0, 0x8000, 0xa0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)

41.009727069s ago: executing program 33 (id=2056):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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")
open(0x0, 0x400141042, 0x2a)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)

41.004428989s ago: executing program 2 (id=2060):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14)

41.004321719s ago: executing program 3 (id=2061):
unshare(0x20000400)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x2a, 0x0, 0x0)

40.431040572s ago: executing program 3 (id=2065):
mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed)
mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r2, &(0x7f0000000900)='0x1d6b\x00', 0x6)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r3, &(0x7f0000000b00)='0x0102\x00', 0x6)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed)
symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00')
symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed)
symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00')
symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00')
symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00')
symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed)
symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000002100)='usbip-vudc.0\x00', 0xc)

40.123764029s ago: executing program 34 (id=2065):
mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed)
mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r2, &(0x7f0000000900)='0x1d6b\x00', 0x6)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r3, &(0x7f0000000b00)='0x0102\x00', 0x6)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed)
symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00')
symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed)
symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00')
symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00')
symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00')
symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed)
symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000002100)='usbip-vudc.0\x00', 0xc)

40.118350819s ago: executing program 2 (id=2068):
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})
sendmmsg$inet(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="be177dbe6dc1fe", 0x7}], 0x1}}], 0x1, 0x40)
close(r2)

39.986539443s ago: executing program 2 (id=2069):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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")
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(0x0, 0x8000, 0xa0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)

39.564171822s ago: executing program 2 (id=2072):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x800, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r1=>0x0}, &(0x7f00000010c0)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)={r1, 0xeea8, 0x6, "f5355820821c"}, 0xe)

38.882324418s ago: executing program 2 (id=2078):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000084, &(0x7f0000000080)={[{@jqfmt_vfsv1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xf2a5}}, {@user_xattr}, {@sb={'sb', 0x3d, 0x1}}]}, 0xfe, 0x7bd, &(0x7f00000004c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x4)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xf4fb, 0xfff, 0x9})

38.619068104s ago: executing program 35 (id=2078):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000084, &(0x7f0000000080)={[{@jqfmt_vfsv1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xf2a5}}, {@user_xattr}, {@sb={'sb', 0x3d, 0x1}}]}, 0xfe, 0x7bd, &(0x7f00000004c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x4)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xf4fb, 0xfff, 0x9})

13.246883403s ago: executing program 0 (id=2194):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0)
membarrier(0x2, 0x0)

13.002893539s ago: executing program 0 (id=2197):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./mysys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/module/ueagle_atm/parameters/sync_wait\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='0,', 0x2)

12.759395504s ago: executing program 0 (id=2200):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66}]}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x38, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {{}, {}, {0x1c, 0x17, {0x15, 0x0, @l2={'eth', 0x3a, 'macvlan0\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x2000840}, 0x40)

12.459322521s ago: executing program 0 (id=2204):
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x271b, 0x0, &(0x7f0000000040))

12.272733516s ago: executing program 0 (id=2206):
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000d24000/0x3000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000b37000/0x1000)=nil, &(0x7f0000724000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000780000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xcaa1, 0xc000, 0x6, 0xbe})
setresuid(0xee00, 0xee00, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

11.903162674s ago: executing program 0 (id=2212):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000000c0), 0x10)
write(r0, 0x0, 0x0)

2.636507239s ago: executing program 6 (id=2294):
r0 = creat(&(0x7f0000000340)='./file0\x00', 0x28)
close(r0)
r1 = socket(0x1e, 0x1, 0x0)
connect$tipc(r1, &(0x7f0000000040)=@id, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}})

2.348675786s ago: executing program 6 (id=2298):
socket$vsock_stream(0x28, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x40094}, 0x48c0)

2.132017351s ago: executing program 6 (id=2301):
personality(0x500006)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x20, 0x2}, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
unshare(0x20000180)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0xe, 0x80000)
setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000000c0)={0x71, 0x3}, 0x13)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
unshare(0x28000600)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x2)
ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x50, 0x0, 0x7, 0x5}, {0x6, 0xfc, 0x6}]})
ioctl$PPPIOCSDEBUG(r5, 0x40047440, &(0x7f0000000340)=0x1)
write$ppp(r5, &(0x7f0000000100)="5e12", 0x2)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x28004044, &(0x7f0000000140)={0xa, 0x4e23, 0xfffc, @local, 0xfffffffd}, 0x1c)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)

1.900167806s ago: executing program 7 (id=2303):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e1050000008864000f1102ee16005782973d2bd4b82b4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d76494961172959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0)

1.106896804s ago: executing program 7 (id=2304):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})
sendmmsg$inet(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="be177dbe6dc1fe", 0x7}], 0x1}}], 0x1, 0x40)
close(r2)

1.106139664s ago: executing program 5 (id=2305):
r0 = creat(&(0x7f0000000340)='./file0\x00', 0x28)
close(r0)
r1 = socket(0x1e, 0x1, 0x0)
connect$tipc(r1, &(0x7f0000000040)=@id, 0x10)
r2 = syz_pidfd_open(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

925.888579ms ago: executing program 5 (id=2306):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f00000002c0)='./proc\x00', 0x1000208)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00')

901.735919ms ago: executing program 7 (id=2307):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}}, 0x24}}, 0x0)

793.914342ms ago: executing program 6 (id=2308):
socket$vsock_stream(0x28, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40094}, 0x48c0)

699.145334ms ago: executing program 5 (id=2309):
syz_open_dev$usbfs(&(0x7f0000000080), 0xfffffffffffffffb, 0x8041)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x4014)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)

655.178265ms ago: executing program 7 (id=2310):
mkdir(&(0x7f0000000140)='./config\x00', 0x1ff)
mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
open(&(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x241, 0x1ff)
mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff)
mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff)
mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff)
r0 = open(&(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wWidth\x00', 0x241, 0x1ff)
write(r0, &(0x7f0000000540)='12', 0x2)
r1 = open(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwMaxVideoFrameBufferSize\x00', 0x241, 0x1ff)
write(r1, &(0x7f00000006c0)='1843', 0x4)

607.391256ms ago: executing program 6 (id=2311):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x2, 0x16, 0x7f, 0x7, 0xa, 0x0, 0x70bd28, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x6e6bb7, 0x7ff, {0x6, 0x3c, 0x6, 0x8, 0x0, 0x1, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0x64010101}}]}, 0x50}}, 0x4004000)

418.466871ms ago: executing program 6 (id=2312):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
connect$unix(r1, &(0x7f0000001040)=@file={0x0, '.\x00'}, 0x6e)
write$UHID_INPUT(r1, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006)
syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xb7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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")

417.903911ms ago: executing program 7 (id=2313):
r0 = creat(&(0x7f0000000340)='./file0\x00', 0x28)
close(r0)
r1 = socket(0x1e, 0x1, 0x0)
connect$tipc(r1, &(0x7f0000000040)=@id, 0x10)
r2 = syz_pidfd_open(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

391.660971ms ago: executing program 5 (id=2314):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})
sendmmsg$inet(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="be177dbe6dc1fe", 0x7}], 0x1}}], 0x1, 0x40)
close(r2)

210.791275ms ago: executing program 5 (id=2315):
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e24, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x10}}], 0x30}, 0x20002800)

136.136407ms ago: executing program 7 (id=2316):
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3f, 0xb604}, 0x80, &(0x7f0000003340)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611", 0x1f}, {&(0x7f0000000f00)="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", 0x1d7}, {&(0x7f00000022c0)="03b08259909695eb5ca0294fba511a888314cac2cc4b8fcfa8a6395f98c9495276871c1415f144fc9b74b6be1832c68c5a06cd992e2fa712186cb328d237fb2b3daa49d29c7221005ae22dfd2fa279a3a0ebe73b3093e6f66d7ab7e24362e64a1bbd1f4e7a6e2f2cf522cf9b4437037aed5091737c0883648a89f0c8ad70436a97e52561c4ac61cc619e5cc62e9a9b0fec63d844d5d10acf23eb04c3f2e1150ff6608401", 0xa4}], 0x3}, 0x0)

0s ago: executing program 5 (id=2317):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}}, 0x24}}, 0x0)

kernel console output (not intermixed with test programs):

ed: -22
[  297.967686][ T9096] tipc: Disabling bearer <eth:syzkaller0>
[  297.983218][  T174] tipc: Node number set to 447279919
[  298.097720][ T9133] syz.0.921: attempt to access beyond end of device
[  298.097720][ T9133] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  298.361874][ T9141] loop3: detected capacity change from 0 to 512
[  298.393916][ T9141] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.926: corrupted in-inode xattr: invalid ea_ino
[  298.449641][ T9141] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.926: couldn't read orphan inode 15 (err -117)
[  298.516212][ T9141] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  298.647590][ T9148] ieee802154 phy0 wpan0: encryption failed: -22
[  298.711705][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.968574][ T9158] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  299.511089][ T9164] syzkaller0: entered promiscuous mode
[  299.529729][ T9164] syzkaller0: entered allmulticast mode
[  299.558239][ T9164] tipc: Resetting bearer <eth:syzkaller0>
[  299.632247][ T9151] tipc: Resetting bearer <eth:syzkaller0>
[  300.303445][ T9175] loop3: detected capacity change from 0 to 1764
[  300.400687][ T9178] mmap: syz.2.938 (9178) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  303.487417][ T9151] tipc: Disabling bearer <eth:syzkaller0>
[  303.695649][ T9200] futex_wake_op: syz.0.943 tries to shift op by 144; fix this program
[  303.863300][ T9200] loop0: detected capacity change from 0 to 512
[  304.245439][ T5809] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  304.555269][ T5809] usb 1-1: Using ep0 maxpacket: 32
[  304.565519][ T5809] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  304.583700][ T5809] usb 1-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config
[  304.596895][ T5809] usb 1-1: config 0 has no interface number 0
[  304.603245][ T5809] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  304.617487][ T5809] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  304.627029][ T5809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.669458][ T5809] usb 1-1: config 0 descriptor??
[  304.707587][ T5809] usbhid 1-1:0.1: couldn't find an input interrupt endpoint
[  305.778438][ T9218] syz.3.944: attempt to access beyond end of device
[  305.778438][ T9218] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  305.850140][ T9200] team0: Device wg0 is of different type
[  305.879214][ T9200] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[  307.045219][ T5809] usb 1-1: USB disconnect, device number 18
[  307.300591][   T28] audit: type=1326 audit(1785577519.650:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.0.955" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc23f9e019 code=0x7ffc0000
[  307.406634][ T9236] syzkaller0: entered promiscuous mode
[  307.465129][ T9236] syzkaller0: entered allmulticast mode
[  307.494347][   T28] audit: type=1326 audit(1785577519.650:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.0.955" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc23f9e019 code=0x7ffc0000
[  307.629267][ T9246] syz.0.957: attempt to access beyond end of device
[  307.629267][ T9246] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  307.702244][   T28] audit: type=1326 audit(1785577519.660:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.0.955" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc23f9e019 code=0x7ffc0000
[  307.864956][   T28] audit: type=1326 audit(1785577519.660:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.0.955" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc23f9e019 code=0x7ffc0000
[  307.950824][   T28] audit: type=1326 audit(1785577519.670:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.0.955" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7efc23f9e019 code=0x7ffc0000
[  308.046110][   T28] audit: type=1326 audit(1785577519.670:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.0.955" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc23f9e019 code=0x7ffc0000
[  308.071983][   T28] audit: type=1326 audit(1785577519.670:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.0.955" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc23f9e019 code=0x7ffc0000
[  308.164656][   T28] audit: type=1326 audit(1785577519.670:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.0.955" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc23f9e019 code=0x7ffc0000
[  308.204244][   T28] audit: type=1326 audit(1785577519.670:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.0.955" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc23f9e019 code=0x7ffc0000
[  308.231593][   T28] audit: type=1326 audit(1785577519.680:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.0.955" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7efc23f9e019 code=0x7ffc0000
[  311.309719][ T9276] loop2: detected capacity change from 0 to 512
[  311.342623][ T9276] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.972: bad orphan inode 15
[  311.393311][ T9276] ext4_test_bit(bit=14, block=5) = 0
[  311.404462][ T9276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  311.660465][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.073045][ T9299] syzkaller0: entered promiscuous mode
[  312.083110][ T9299] syzkaller0: entered allmulticast mode
[  312.094698][ T9302] netlink: 'syz.1.977': attribute type 1 has an invalid length.
[  312.182965][ T9302] 8021q: adding VLAN 0 to HW filter on device bond1
[  312.216405][ T9306] netlink: 16 bytes leftover after parsing attributes in process `syz.1.977'.
[  312.265759][ T9306] netlink: 'syz.1.977': attribute type 1 has an invalid length.
[  312.293602][ T9306] bond1: option mode: unable to set because the bond device is up
[  312.457368][ T9321] Cannot find del_set index 0 as target
[  312.965452][ T9336] loop1: detected capacity change from 0 to 512
[  313.031455][ T9336] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.991: inode has both inline data and extents flags
[  313.058147][ T9336] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.991: couldn't read orphan inode 15 (err -117)
[  313.104587][ T9336] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  313.239565][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.036896][ T9343] xt_CT: No such helper "netbios-ns"
[  314.599357][ T9358] raw_sendmsg: syz.0.1000 forgot to set AF_INET. Fix it!
[  316.941625][ T9407] loop1: detected capacity change from 0 to 2048
[  317.134545][ T9407] loop1: detected capacity change from 0 to 4096
[  317.171894][ T9407] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  317.180578][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1028'.
[  317.237422][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  317.237439][   T28] audit: type=1804 audit(1785577529.690:118): pid=9407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1023" name="/newroot/257/file1/bus/file1" dev="loop1" ino=34 res=1 errno=0
[  317.314802][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  317.321262][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  317.422631][   T28] audit: type=1804 audit(1785577529.870:119): pid=9407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1023" name="/newroot/257/file1/bus/file1" dev="loop1" ino=34 res=1 errno=0
[  317.477140][ T9424] loop3: detected capacity change from 0 to 256
[  317.513482][   T28] audit: type=1800 audit(1785577529.960:120): pid=9424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1030" name="bus" dev="loop3" ino=1048615 res=0 errno=0
[  317.587859][ T9424] Invalid ELF header magic: != ELF
[  317.929560][ T9440] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1038'.
[  318.027483][ T9442] UDC core: g1: couldn't find an available UDC or it's busy
[  318.199689][ T9449] loop3: detected capacity change from 0 to 2048
[  318.442533][ T9449] loop3: detected capacity change from 0 to 4096
[  318.542874][ T9449] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  318.671499][ T9451] loop1: detected capacity change from 0 to 32768
[  318.698927][   T28] audit: type=1804 audit(1785577531.150:121): pid=9458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1042" name="/newroot/258/file1/bus/file1" dev="loop3" ino=34 res=1 errno=0
[  318.880963][   T28] audit: type=1804 audit(1785577531.320:122): pid=9449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1042" name="/newroot/258/file1/bus/file1" dev="loop3" ino=34 res=1 errno=0
[  319.881688][ T9469] syzkaller0: entered promiscuous mode
[  319.905123][ T9469] syzkaller0: entered allmulticast mode
[  320.926825][ T9493] configfs-gadget.g1 gadget.0: USB CDC Phonet function
[  320.933750][ T9493] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk
[  320.943124][ T9493] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[  320.950573][ T9493] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[  320.959065][ T9493] udc dummy_udc.0: failed to start g1: -22
[  320.964969][ T9493] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  320.972895][ T9493] UDC core: g1: couldn't find an available UDC or it's busy
[  321.014498][ T9494] configfs-gadget.g1 gadget.0: USB CDC Phonet function
[  321.022632][ T9494] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk
[  321.032361][ T9494] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[  321.039774][ T9494] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[  321.048355][ T9494] udc dummy_udc.0: failed to start g1: -22
[  321.054214][ T9494] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  321.062557][ T9494] UDC core: g1: couldn't find an available UDC or it's busy
[  321.898953][ T9520] configfs-gadget.g1 gadget.0: USB CDC Phonet function
[  321.899993][ T9523] loop1: detected capacity change from 0 to 2048
[  321.906075][ T9520] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk
[  321.906104][ T9520] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[  321.906128][ T9520] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[  321.906553][ T9520] udc dummy_udc.0: failed to start g1: -22
[  321.942997][ T9520] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  321.951582][ T9520] UDC core: g1: couldn't find an available UDC or it's busy
[  322.080725][ T9523] loop1: detected capacity change from 0 to 4096
[  322.113664][ T9523] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  322.168779][   T28] audit: type=1804 audit(1785577534.620:123): pid=9523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1071" name="/newroot/268/file1/file1" dev="loop1" ino=30 res=1 errno=0
[  322.246442][   T28] audit: type=1804 audit(1785577534.680:124): pid=9523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1071" name="/newroot/268/file1/file1" dev="loop1" ino=30 res=1 errno=0
[  322.876682][ T9541] netlink: 'syz.0.1080': attribute type 1 has an invalid length.
[  322.932650][ T9541] 8021q: adding VLAN 0 to HW filter on device bond1
[  324.153460][ T9561] configfs-gadget.g1 gadget.0: USB CDC Phonet function
[  324.160543][ T9561] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk
[  324.170148][ T9561] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[  324.177202][ T9561] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[  324.186198][ T9561] udc dummy_udc.0: failed to start g1: -22
[  324.192033][ T9561] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  324.200301][ T9561] UDC core: g1: couldn't find an available UDC or it's busy
[  324.643725][ T9567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1087'.
[  325.015992][ T9574] loop1: detected capacity change from 0 to 2048
[  325.069592][ T9577] loop2: detected capacity change from 0 to 512
[  325.158274][ T9577] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1092: invalid indirect mapped block 4294967295 (level 1)
[  325.315283][ T9577] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1092: invalid indirect mapped block 4294967295 (level 1)
[  325.351142][ T9577] EXT4-fs (loop2): 2 truncates cleaned up
[  325.366371][ T9577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  325.429565][ T9574] loop1: detected capacity change from 0 to 4096
[  326.627124][ T9583] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  328.527061][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.576411][ T9574] ntfs3: loop1: Failed to read $UpCase (-4).
[  329.576615][ T9613] Invalid ELF header magic: != ELF
[  329.579484][ T9615] loop2: detected capacity change from 0 to 2048
[  329.889347][ T9615] loop2: detected capacity change from 0 to 512
[  330.137393][ T9615] EXT4-fs: Ignoring removed nobh option
[  330.364404][ T9615] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  330.653291][ T9615] EXT4-fs (loop2): 1 truncate cleaned up
[  330.682093][ T9615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  331.371662][   T28] audit: type=1804 audit(1785577543.810:125): pid=9635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1108" name="/newroot/278/file2/file1" dev="loop2" ino=15 res=1 errno=0
[  331.753128][   T28] audit: type=1804 audit(1785577544.200:126): pid=9615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1108" name="/newroot/278/file2/file1" dev="loop2" ino=15 res=1 errno=0
[  331.955406][ T9635] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  331.982060][ T9644] loop3: detected capacity change from 0 to 512
[  332.061297][ T9644] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.1117: invalid block
[  332.159894][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.185689][ T9644] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1117: invalid indirect mapped block 4294967295 (level 1)
[  332.285196][ T9644] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1117: invalid indirect mapped block 4294967295 (level 1)
[  332.335540][ T9644] EXT4-fs (loop3): 2 truncates cleaned up
[  332.344268][ T9644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  332.507022][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.546287][ T9661] loop1: detected capacity change from 0 to 512
[  332.641306][ T9661] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.1124: inode has both inline data and extents flags
[  332.711957][ T9661] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1124: couldn't read orphan inode 15 (err -117)
[  332.771200][ T9661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  332.891841][   T28] audit: type=1804 audit(1785577545.340:127): pid=9661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1124" name="/newroot/281/file0/bus" dev="loop1" ino=19 res=1 errno=0
[  333.001074][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  333.384649][ T9676] loop1: detected capacity change from 0 to 2048
[  333.640747][ T9676] loop1: detected capacity change from 0 to 4096
[  333.765432][ T9676] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  333.934034][   T28] audit: type=1804 audit(1785577546.370:128): pid=9676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1129" name="/newroot/283/file1/file1" dev="loop1" ino=30 res=1 errno=0
[  334.035163][   T28] audit: type=1804 audit(1785577546.470:129): pid=9676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1129" name="/newroot/283/file1/file1" dev="loop1" ino=30 res=1 errno=0
[  334.453892][ T9687] loop1: detected capacity change from 0 to 512
[  334.513893][ T9687] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.1134: invalid block
[  334.553945][ T9687] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1134: invalid indirect mapped block 4294967295 (level 1)
[  334.569447][ T9687] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1134: invalid indirect mapped block 4294967295 (level 1)
[  334.595659][ T9687] EXT4-fs (loop1): 2 truncates cleaned up
[  334.602941][ T9687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  334.687883][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  334.812647][ T9694] loop1: detected capacity change from 0 to 512
[  334.849907][ T9694] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.1137: inode has both inline data and extents flags
[  334.872490][ T9694] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1137: couldn't read orphan inode 15 (err -117)
[  334.926384][ T9694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  334.952283][   T28] audit: type=1804 audit(1785577547.400:130): pid=9694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1137" name="/newroot/285/file0/bus" dev="loop1" ino=19 res=1 errno=0
[  335.068874][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  335.427945][ T9705] loop1: detected capacity change from 0 to 2048
[  335.680929][ T9705] loop1: detected capacity change from 0 to 4096
[  335.705525][ T9711] loop2: detected capacity change from 0 to 512
[  335.785651][ T9711] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1145: invalid indirect mapped block 4294967295 (level 1)
[  335.850139][ T9705] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  335.864379][ T9711] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1145: invalid indirect mapped block 4294967295 (level 1)
[  335.934675][ T9711] EXT4-fs (loop2): 2 truncates cleaned up
[  335.952368][ T9711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  335.999842][   T28] audit: type=1804 audit(1785577548.450:131): pid=9705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1142" name="/newroot/287/file1/file1" dev="loop1" ino=30 res=1 errno=0
[  336.075693][   T28] audit: type=1804 audit(1785577548.530:132): pid=9705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1142" name="/newroot/287/file1/file1" dev="loop1" ino=30 res=1 errno=0
[  336.287749][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.322915][ T9724] loop3: detected capacity change from 0 to 512
[  336.342033][ T9724] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.1149: inode has both inline data and extents flags
[  336.342619][ T9724] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1149: couldn't read orphan inode 15 (err -117)
[  336.355886][ T9724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  336.434185][   T28] audit: type=1804 audit(1785577548.870:133): pid=9724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1149" name="/newroot/291/file0/bus" dev="loop3" ino=19 res=1 errno=0
[  336.538142][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.041674][ T9747] loop2: detected capacity change from 0 to 512
[  338.124417][ T9747] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1158: invalid indirect mapped block 4294967295 (level 1)
[  338.166128][ T9747] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1158: invalid indirect mapped block 4294967295 (level 1)
[  338.297512][ T9747] EXT4-fs (loop2): 2 truncates cleaned up
[  338.314770][ T9747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  338.708124][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.090375][ T9762] loop2: detected capacity change from 0 to 2048
[  339.321534][ T9769] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1167'.
[  339.367962][ T9762] loop2: detected capacity change from 0 to 4096
[  339.403020][ T9762] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  339.477950][   T28] audit: type=1804 audit(1785577551.930:134): pid=9762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1161" name="/newroot/291/file1/file1" dev="loop2" ino=30 res=1 errno=0
[  339.494041][ T9773] loop3: detected capacity change from 0 to 512
[  339.605219][ T9773] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1169: invalid indirect mapped block 4294967295 (level 1)
[  339.632942][   T28] audit: type=1804 audit(1785577552.080:135): pid=9762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1161" name="/newroot/291/file1/file1" dev="loop2" ino=30 res=1 errno=0
[  339.654152][    C1] vkms_vblank_simulate: vblank timer overrun
[  339.705249][ T9773] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1169: invalid indirect mapped block 4294967295 (level 1)
[  339.790303][ T9773] EXT4-fs (loop3): 2 truncates cleaned up
[  339.818708][ T9773] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  340.044632][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  340.081716][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1174'.
[  340.342348][ T9799] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1179'.
[  340.380281][ T9798] loop3: detected capacity change from 0 to 512
[  340.402583][ T9798] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.1178: inode has both inline data and extents flags
[  340.402943][ T9798] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1178: couldn't read orphan inode 15 (err -117)
[  340.404394][ T9798] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  340.608947][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  340.722855][ T9812] loop3: detected capacity change from 0 to 512
[  340.760997][ T9812] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1185: invalid indirect mapped block 4294967295 (level 1)
[  340.763324][ T9812] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1185: invalid indirect mapped block 4294967295 (level 1)
[  340.764035][ T9812] EXT4-fs (loop3): 2 truncates cleaned up
[  340.773009][ T9812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  341.070182][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.280351][ T9821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1188'.
[  341.444606][ T9825] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1191'.
[  341.601013][ T9828] loop1: detected capacity change from 0 to 512
[  341.632422][ T9828] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.1192: bad orphan inode 15
[  341.652267][ T9828] ext4_test_bit(bit=14, block=5) = 0
[  341.672112][ T9828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  341.916880][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.339570][ T9857] loop1: detected capacity change from 0 to 2048
[  343.563738][ T9859] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1204'.
[  343.639676][ T9857] loop1: detected capacity change from 0 to 512
[  343.709927][ T9857] EXT4-fs: Ignoring removed nobh option
[  343.773502][ T9857] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  343.821734][ T9857] EXT4-fs (loop1): 1 truncate cleaned up
[  343.827475][ T9857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  343.884326][   T28] audit: type=1800 audit(1785577556.320:136): pid=9857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1202" name="file1" dev="loop1" ino=15 res=0 errno=0
[  343.942897][ T9867] loop2: detected capacity change from 0 to 512
[  343.988943][ T9867] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.1206: inode has both inline data and extents flags
[  344.008828][ T9867] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1206: couldn't read orphan inode 15 (err -117)
[  344.012832][ T9867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  344.189098][ T9874] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  344.216535][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.311715][    C1] vkms_vblank_simulate: vblank timer overrun
[  344.363700][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  345.833623][ T9901] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1219'.
[  347.142505][ T9923] netlink: 'syz.1.1229': attribute type 1 has an invalid length.
[  347.206718][ T9923] 8021q: adding VLAN 0 to HW filter on device bond2
[  350.079766][ T9966] netlink: 'syz.0.1241': attribute type 1 has an invalid length.
[  350.132981][ T9966] 8021q: adding VLAN 0 to HW filter on device bond2
[  350.162498][ T9966] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1241'.
[  350.214993][ T9966] netlink: 'syz.0.1241': attribute type 1 has an invalid length.
[  350.248806][ T9974] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1243'.
[  350.333414][ T9966] 8021q: adding VLAN 0 to HW filter on device bond3
[  350.369459][ T9958] loop3: detected capacity change from 0 to 32768
[  352.388834][T10003] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1252'.
[  353.097860][T10028] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1263'.
[  353.139024][T10010] loop3: detected capacity change from 0 to 32768
[  353.556882][T10045] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1273'.
[  353.929735][T10052] loop2: detected capacity change from 0 to 512
[  353.989746][T10052] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.1275: invalid block
[  354.035104][T10052] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1275: invalid indirect mapped block 4294967295 (level 1)
[  354.100621][T10052] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1275: invalid indirect mapped block 4294967295 (level 1)
[  354.167345][T10052] EXT4-fs (loop2): 2 truncates cleaned up
[  354.177288][T10052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  354.333842][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.440802][T10066] Invalid ELF header magic: != ELF
[  354.539662][T10070] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1282'.
[  356.673551][T10101] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1294'.
[  356.748898][T10103] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1295'.
[  357.301942][T10118] loop1: detected capacity change from 0 to 512
[  357.340183][T10122] loop3: detected capacity change from 0 to 512
[  357.379916][T10122] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.1304: bad orphan inode 15
[  357.382926][T10118] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.1302: invalid block
[  357.405140][T10122] ext4_test_bit(bit=14, block=5) = 0
[  357.411721][T10122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  357.481602][T10118] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1302: invalid indirect mapped block 4294967295 (level 1)
[  357.527870][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.538429][T10118] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1302: invalid indirect mapped block 4294967295 (level 1)
[  357.558436][T10118] EXT4-fs (loop1): 2 truncates cleaned up
[  357.561950][T10127] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1305'.
[  357.574413][T10118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  357.803378][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.083977][T10149] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1315'.
[  358.232735][T10153] loop1: detected capacity change from 0 to 512
[  358.270523][T10153] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.1317: inode has both inline data and extents flags
[  358.289400][T10153] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1317: couldn't read orphan inode 15 (err -117)
[  358.303836][T10153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  358.415601][T10153] support for cryptoloop has been removed.  Use dm-crypt instead.
[  358.450545][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.664668][T10170] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1324'.
[  358.900752][T10181] loop1: detected capacity change from 0 to 512
[  358.925346][T10181] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.1329: inode has both inline data and extents flags
[  358.976526][T10181] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1329: couldn't read orphan inode 15 (err -117)
[  359.036632][T10181] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  359.109149][T10189] loop3: detected capacity change from 0 to 512
[  359.130698][T10189] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1332: invalid indirect mapped block 4294967295 (level 1)
[  359.155659][T10181] support for cryptoloop has been removed.  Use dm-crypt instead.
[  359.210397][T10189] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1332: invalid indirect mapped block 4294967295 (level 1)
[  359.256005][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.266379][T10189] EXT4-fs (loop3): 2 truncates cleaned up
[  359.274713][T10189] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  359.430548][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.552589][T10201] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1335'.
[  359.922363][T10211] loop2: detected capacity change from 0 to 512
[  359.934657][T10214] loop1: detected capacity change from 0 to 512
[  359.971664][T10211] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.1342: inode has both inline data and extents flags
[  360.024469][T10211] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1342: couldn't read orphan inode 15 (err -117)
[  360.067117][T10214] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1343: invalid indirect mapped block 4294967295 (level 1)
[  360.071510][T10211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  360.087209][T10214] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1343: invalid indirect mapped block 4294967295 (level 1)
[  360.117710][T10214] EXT4-fs (loop1): 2 truncates cleaned up
[  360.127939][T10214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  360.263273][T10211] support for cryptoloop has been removed.  Use dm-crypt instead.
[  360.397908][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.428839][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.491295][T10230] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1348'.
[  361.007043][T10252] loop1: detected capacity change from 0 to 512
[  361.029579][T10252] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.1359: inode has both inline data and extents flags
[  361.058478][T10252] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1359: couldn't read orphan inode 15 (err -117)
[  361.091501][T10252] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  361.176524][T10255] configfs-gadget.g1 gadget.0: USB CDC Phonet function
[  361.183513][T10255] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk
[  361.192689][T10255] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[  361.199835][T10255] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[  361.210742][T10255] udc dummy_udc.0: failed to start g1: -22
[  361.216696][T10255] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  361.228764][T10255] UDC core: g1: couldn't find an available UDC or it's busy
[  361.976478][T10252] support for cryptoloop has been removed.  Use dm-crypt instead.
[  362.151213][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.393249][T10262] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1363'.
[  363.218405][T10288] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1374'.
[  363.519109][T10301] loop3: detected capacity change from 0 to 512
[  363.568490][T10301] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.1380: inode has both inline data and extents flags
[  363.583359][T10301] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1380: couldn't read orphan inode 15 (err -117)
[  363.681237][T10304] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[  363.688524][T10304] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[  363.697552][T10304] udc dummy_udc.0: failed to start g1: -22
[  363.703463][T10304] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  363.716789][T10304] UDC core: g1: couldn't find an available UDC or it's busy
[  364.025807][T10301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  364.895735][T10301] support for cryptoloop has been removed.  Use dm-crypt instead.
[  365.059984][T10315] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1385'.
[  365.085712][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  365.806461][T10337] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1396'.
[  366.275583][T10350] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[  366.282906][T10350] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[  366.291931][T10350] udc dummy_udc.0: failed to start g1: -22
[  366.297884][T10350] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  366.312863][T10350] UDC core: g1: couldn't find an available UDC or it's busy
[  367.847190][T10364] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1406'.
[  368.373815][T10379] loop1: detected capacity change from 0 to 256
[  368.669138][T10388] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1416'.
[  368.921832][T10395] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[  368.929042][T10395] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[  368.937784][T10395] udc dummy_udc.0: failed to start g1: -22
[  368.943704][T10395] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  368.955150][T10395] UDC core: g1: couldn't find an available UDC or it's busy
[  369.993564][T10408] loop1: detected capacity change from 0 to 2048
[  370.339860][T10408] loop1: detected capacity change from 0 to 4096
[  370.422648][T10408] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  370.594121][   T28] audit: type=1804 audit(1785577583.040:137): pid=10415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1424" name="/newroot/365/file1/bus/file1" dev="loop1" ino=34 res=1 errno=0
[  370.897992][   T28] audit: type=1804 audit(1785577583.350:138): pid=10408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1424" name="/newroot/365/file1/bus/file1" dev="loop1" ino=34 res=1 errno=0
[  370.935160][T10420] loop2: detected capacity change from 0 to 256
[  371.584598][T10438] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[  371.584733][T10438] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[  371.585006][T10438] udc dummy_udc.0: failed to start g1: -22
[  371.585050][T10438] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  371.588700][T10438] UDC core: g1: couldn't find an available UDC or it's busy
[  374.650812][T10451] loop3: detected capacity change from 0 to 256
[  374.958411][T10458] loop1: detected capacity change from 0 to 1024
[  374.969039][T10458] EXT4-fs: Ignoring removed bh option
[  375.071943][T10458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  375.181250][T10466] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[  375.188456][T10466] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[  375.197280][T10466] udc dummy_udc.0: failed to start g1: -22
[  375.203208][T10466] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  375.214335][T10466] UDC core: g1: couldn't find an available UDC or it's busy
[  376.315936][T10477] qrtr: Invalid version 11
[  376.907560][T10458] loop1: detected capacity change from 1024 to 64
[  377.152397][T10492] loop3: detected capacity change from 0 to 1024
[  377.181096][T10492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  377.194505][T10492] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  377.236679][T10492] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: comm syz.3.1459: lblock 0 mapped to illegal pblock 0 (length 1)
[  377.328620][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  377.353967][T10460] kmmpd-loop1: attempt to access beyond end of device
[  377.353967][T10460] loop1: rw=14337, sector=128, nr_sectors = 2 limit=64
[  377.379352][T10500] qrtr: Invalid version 11
[  377.395733][T10460] Buffer I/O error on dev loop1, logical block 64, lost sync page write
[  377.739569][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.825504][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  377.906249][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.017346][T10513] loop2: detected capacity change from 0 to 512
[  378.057943][T10513] EXT4-fs: Ignoring removed orlov option
[  378.070377][T10513] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  378.100840][T10513] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 2)!
[  378.131896][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.145913][T10513] EXT4-fs (loop2): group descriptors corrupted!
[  378.351918][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.375392][T10520] qrtr: Invalid version 11
[  378.619555][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  378.668837][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  378.681405][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  378.693090][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  378.715139][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  378.724621][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  378.749773][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  378.756219][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  378.971175][   T12] tipc: Left network mode
[  379.267751][T10554] qrtr: Invalid version 11
[  379.517587][T10527] chnl_net:caif_netlink_parms(): no params data found
[  379.588569][T10567] loop2: detected capacity change from 0 to 1024
[  379.657532][T10567] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  379.833917][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.917587][T10581] qrtr: Invalid version 11
[  380.342818][T10527] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.350197][T10527] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.358889][T10527] bridge_slave_0: entered allmulticast mode
[  380.366629][T10527] bridge_slave_0: entered promiscuous mode
[  380.766337][T10607] qrtr: Invalid version 11
[  380.829296][ T5770] Bluetooth: hci3: command tx timeout
[  382.784456][T10527] bridge0: port 2(bridge_slave_1) entered blocking state
[  382.791882][T10527] bridge0: port 2(bridge_slave_1) entered disabled state
[  382.799395][T10527] bridge_slave_1: entered allmulticast mode
[  382.806756][T10527] bridge_slave_1: entered promiscuous mode
[  382.905276][ T5770] Bluetooth: hci3: command tx timeout
[  383.023918][T10527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  383.083669][T10527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  383.393836][T10527] team0: Port device team_slave_0 added
[  383.415265][T10527] team0: Port device team_slave_1 added
[  383.695208][T10527] batman_adv: batadv0: Adding interface: batadv_slave_0
[  383.714364][T10527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  383.771030][T10527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  383.789990][T10527] batman_adv: batadv0: Adding interface: batadv_slave_1
[  383.797590][T10527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  383.824420][T10527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  384.994614][ T5770] Bluetooth: hci3: command tx timeout
[  387.070950][ T5770] Bluetooth: hci3: command tx timeout
[  387.445515][T10527] hsr_slave_0: entered promiscuous mode
[  387.466958][T10527] hsr_slave_1: entered promiscuous mode
[  387.480186][T10527] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  387.491090][T10527] Cannot create hsr debugfs directory
[  387.513548][   T12] hsr_slave_0: left promiscuous mode
[  387.535225][   T12] hsr_slave_1: left promiscuous mode
[  387.559694][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  387.585559][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  387.617929][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  387.649594][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  387.677806][   T12] bridge_slave_1: left allmulticast mode
[  387.683561][   T12] bridge_slave_1: left promiscuous mode
[  387.692926][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.711644][   T12] bridge_slave_0: left allmulticast mode
[  387.718161][   T12] bridge_slave_0: left promiscuous mode
[  387.724308][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  387.816447][   T12] veth1_macvtap: left promiscuous mode
[  387.823510][T10695] loop2: detected capacity change from 0 to 256
[  387.827294][   T12] veth0_macvtap: left promiscuous mode
[  387.847931][   T12] veth1_vlan: left promiscuous mode
[  387.860387][   T12] veth0_vlan: left promiscuous mode
[  388.321101][   T12] bond2 (unregistering): Released all slaves
[  388.574382][   T12] bond1 (unregistering): Released all slaves
[  389.191314][   T12] team0 (unregistering): Port device team_slave_1 removed
[  389.249354][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  389.312963][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  389.710967][   T12] bond0 (unregistering): Released all slaves
[  389.824983][T10698] gretap0 speed is unknown, defaulting to 1000
[  389.885739][T10698] gretap0 speed is unknown, defaulting to 1000
[  389.942314][T10698] gretap0 speed is unknown, defaulting to 1000
[  390.001908][T10698] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  390.079087][T10698] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  390.252333][T10698] gretap0 speed is unknown, defaulting to 1000
[  390.317541][T10698] gretap0 speed is unknown, defaulting to 1000
[  390.328297][T10698] gretap0 speed is unknown, defaulting to 1000
[  390.358233][T10727] loop2: detected capacity change from 0 to 256
[  390.368092][T10698] gretap0 speed is unknown, defaulting to 1000
[  390.629626][T10527] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  390.723781][T10527] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  390.790902][T10527] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  390.828606][T10740] netlink: 'syz.2.1533': attribute type 10 has an invalid length.
[  390.887063][T10527] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  391.009346][   T12] IPVS: stop unused estimator thread 0...
[  393.657175][T10760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1541'.
[  393.699307][T10527] 8021q: adding VLAN 0 to HW filter on device bond0
[  393.774445][T10527] 8021q: adding VLAN 0 to HW filter on device team0
[  393.834374][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.843067][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  393.896130][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  393.903329][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  394.175107][T10781] netlink: 'syz.0.1548': attribute type 10 has an invalid length.
[  397.156819][T10803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1553'.
[  397.290521][T10527] 8021q: adding VLAN 0 to HW filter on device batadv0
[  397.933956][T10844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1565'.
[  398.080736][T10527] veth0_vlan: entered promiscuous mode
[  398.133185][T10527] veth1_vlan: entered promiscuous mode
[  398.170171][T10853] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1567'.
[  398.240961][T10527] veth0_macvtap: entered promiscuous mode
[  398.283942][T10527] veth1_macvtap: entered promiscuous mode
[  398.332198][T10857] loop3: detected capacity change from 0 to 1024
[  398.342248][T10527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  398.359647][T10857] EXT4-fs: Ignoring removed orlov option
[  398.368724][T10527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.382856][T10527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  398.400081][T10527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.413743][T10527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  398.452879][T10857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  398.494518][T10527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.576201][T10527] batman_adv: batadv0: Interface activated: batadv_slave_0
[  398.593718][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  398.660888][T10527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  398.672902][T10839] loop2: detected capacity change from 0 to 32768
[  398.691674][T10527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.703760][T10527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  398.743662][T10527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.769048][T10527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  398.775689][T10839] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  398.782045][T10527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.804077][T10527] batman_adv: batadv0: Interface activated: batadv_slave_1
[  398.857932][T10527] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  398.867137][T10527] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  398.878728][T10527] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  398.887668][T10527] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  398.940349][T10839] XFS (loop2): Ending clean mount
[  399.040137][   T28] audit: type=1800 audit(1785577611.490:139): pid=10839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1563" name="file1" dev="loop2" ino=6150 res=0 errno=0
[  399.092674][T10839] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  399.150395][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  399.182506][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  399.302128][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  399.311006][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  399.902234][ T5767] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  400.092922][T10913] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[  400.100165][T10913] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[  400.108942][T10913] udc dummy_udc.0: failed to start g1: -22
[  400.114839][T10913] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  400.125900][T10913] UDC core: g1: couldn't find an available UDC or it's busy
[  401.076349][T10919] loop3: detected capacity change from 0 to 256
[  401.197156][T10918] UDC core: g1: couldn't find an available UDC or it's busy
[  401.220115][   T28] audit: type=1800 audit(1785577613.670:140): pid=10919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1581" name="bus" dev="loop3" ino=1048619 res=0 errno=0
[  402.112529][T10936] loop3: detected capacity change from 0 to 512
[  402.298271][T10943] loop4: detected capacity change from 0 to 512
[  402.326023][T10943] EXT4-fs: Ignoring removed bh option
[  402.405247][T10943] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  402.483247][T10943] EXT4-fs (loop4): 1 truncate cleaned up
[  402.566235][T10943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  403.568379][T10527] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  403.761867][T10974] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[  403.769110][T10974] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[  403.778064][T10974] udc dummy_udc.0: failed to start g1: -22
[  403.783939][T10974] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  403.795829][T10974] UDC core: g1: couldn't find an available UDC or it's busy
[  404.426736][T10970] UDC core: g1: couldn't find an available UDC or it's busy
[  407.673140][T11004] loop3: detected capacity change from 0 to 32768
[  408.029182][T11004] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  408.207640][T11004] XFS (loop3): Ending clean mount
[  408.319441][   T28] audit: type=1800 audit(1785577620.770:141): pid=11004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1606" name="file1" dev="loop3" ino=6150 res=0 errno=0
[  408.365983][T11004] XFS (loop3): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  409.326977][ T5771] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  409.363520][T11066] loop2: detected capacity change from 0 to 512
[  409.386523][T11066] EXT4-fs: Ignoring removed bh option
[  409.412872][T11066] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  409.414435][T11067] loop4: detected capacity change from 0 to 1024
[  409.447822][T11067] EXT4-fs: Ignoring removed bh option
[  409.519756][T11066] EXT4-fs (loop2): 1 truncate cleaned up
[  409.553377][T11066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  409.603499][T11067] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  409.693607][T11067] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  409.730758][T11079] loop3: detected capacity change from 0 to 512
[  409.748544][T11079] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  409.777728][T11079] EXT4-fs (loop3): 1 truncate cleaned up
[  409.784832][T11079] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  409.823824][T11067] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.1621: corrupted xattr block 128: invalid ea_ino
[  409.923446][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  410.789172][T10527] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  410.893970][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  412.710612][T11113] qrtr: Invalid version 63
[  412.991134][T11117] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1638'.
[  413.028095][T11115] loop3: detected capacity change from 0 to 512
[  413.056277][T11115] EXT4-fs: Ignoring removed bh option
[  413.067177][T11115] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  413.156054][T11115] EXT4-fs (loop3): 1 truncate cleaned up
[  413.164430][T11115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  413.358924][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.493404][T11125] loop2: detected capacity change from 0 to 2048
[  413.764847][T11125] loop2: detected capacity change from 0 to 4096
[  413.892607][T11125] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  414.008062][   T28] audit: type=1804 audit(1785577626.450:142): pid=11125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1640" name="/newroot/404/file1/bus/file1" dev="loop2" ino=34 res=1 errno=0
[  414.625107][   T28] audit: type=1804 audit(1785577627.070:143): pid=11125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1640" name="/newroot/404/file1/bus/file1" dev="loop2" ino=34 res=1 errno=0
[  414.833219][T11145] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1647'.
[  415.699094][T11163] loop4: detected capacity change from 0 to 512
[  415.902864][T11163] EXT4-fs error (device loop4): ext4_iget_extra_inode:4740: inode #15: comm syz.4.1652: corrupted in-inode xattr: invalid ea_ino
[  415.960168][T11163] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1652: couldn't read orphan inode 15 (err -117)
[  416.021818][T11163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  416.265563][T10527] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  416.321319][T11165] loop2: detected capacity change from 0 to 32768
[  416.394687][T11165] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  416.435962][T11182] loop4: detected capacity change from 0 to 2048
[  416.471258][T11165] XFS (loop2): Ending clean mount
[  416.498161][   T28] audit: type=1800 audit(1785577628.950:144): pid=11165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1653" name="file1" dev="loop2" ino=6150 res=0 errno=0
[  416.522236][T11165] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  416.674800][T11191] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1659'.
[  416.681253][T11182] loop4: detected capacity change from 0 to 4096
[  416.782783][T11182] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  416.880863][   T28] audit: type=1804 audit(1785577629.330:145): pid=11182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1657" name="/newroot/19/file1/bus/file1" dev="loop4" ino=34 res=1 errno=0
[  417.080311][   T28] audit: type=1804 audit(1785577629.530:146): pid=11182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1657" name="/newroot/19/file1/bus/file1" dev="loop4" ino=34 res=1 errno=0
[  417.173924][ T5767] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  418.088136][T11203] qrtr: Invalid version 63
[  418.601551][T11212] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1669'.
[  418.923672][T11217] loop4: detected capacity change from 0 to 512
[  419.042282][T11217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  419.115156][T11217] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  419.256005][T11224] loop3: detected capacity change from 0 to 2048
[  419.328247][   T28] audit: type=1804 audit(1785577631.770:147): pid=11217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1670" name="/newroot/23/file1/bus" dev="loop4" ino=18 res=1 errno=0
[  419.415746][T10527] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  419.537021][T11224] loop3: detected capacity change from 0 to 4096
[  419.616167][T11224] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  419.699827][T11236] UDC core: g1: couldn't find an available UDC or it's busy
[  419.743212][   T28] audit: type=1804 audit(1785577632.190:148): pid=11224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1672" name="/newroot/432/file1/bus/file1" dev="loop3" ino=34 res=1 errno=0
[  419.869534][T11241] qrtr: Invalid version 63
[  419.962527][T11244] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1678'.
[  420.031678][   T28] audit: type=1804 audit(1785577632.480:149): pid=11224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1672" name="/newroot/432/file1/bus/file1" dev="loop3" ino=34 res=1 errno=0
[  420.227572][T11253] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  421.346128][T11228] loop2: detected capacity change from 0 to 32768
[  421.502780][T11228] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  421.722919][T11228] XFS (loop2): Ending clean mount
[  421.889186][T11228] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  421.917985][   T28] audit: type=1800 audit(1785577634.340:150): pid=11228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1674" name="file1" dev="loop2" ino=6150 res=0 errno=0
[  422.168302][T11284] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1686'.
[  422.562480][T11291] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1688'.
[  422.773905][ T5767] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  422.846352][T11308] tipc: Started in network mode
[  422.851390][T11308] tipc: Node identity 5e5a20b42cf5, cluster identity 4711
[  422.872785][T11308] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  423.006338][T11304] syzkaller0: entered promiscuous mode
[  423.014526][T11304] syzkaller0: entered allmulticast mode
[  423.022055][T11304] tipc: Resetting bearer <eth:syzkaller0>
[  423.046854][T11314] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1696'.
[  423.093773][T11303] tipc: Resetting bearer <eth:syzkaller0>
[  424.115274][T11339] loop3: detected capacity change from 0 to 32768
[  424.162421][T11339] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  424.221950][T11350] loop2: detected capacity change from 0 to 164
[  424.305311][T11350] Unsupported NM flag settings (240)
[  424.320759][T11339] XFS (loop3): Ending clean mount
[  424.385539][   T28] audit: type=1800 audit(1785577636.840:151): pid=11339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1702" name="file1" dev="loop3" ino=6150 res=0 errno=0
[  424.425785][T11339] XFS (loop3): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  424.872072][ T5771] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  426.492843][T11358] loop3: detected capacity change from 0 to 512
[  426.522204][T11358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  426.553297][T11358] ext4 filesystem being mounted at /441/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  426.629474][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  426.856697][T11303] tipc: Disabling bearer <eth:syzkaller0>
[  426.868999][T11331] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1700'.
[  426.879590][ T5758] tipc: Node number set to 1924079796
[  427.015957][T11367] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1706'.
[  427.731413][T11389] gretap0 speed is unknown, defaulting to 1000
[  428.327323][T11397] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1714'.
[  428.479228][T11400] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  428.647544][T11400] syzkaller0: entered promiscuous mode
[  428.663526][T11400] syzkaller0: entered allmulticast mode
[  428.679833][T11400] tipc: Resetting bearer <eth:syzkaller0>
[  428.719741][T11384] loop4: detected capacity change from 0 to 32768
[  428.728418][T11399] tipc: Resetting bearer <eth:syzkaller0>
[  428.771874][T11384] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  428.964634][T11384] XFS (loop4): Ending clean mount
[  429.006238][T11384] XFS (loop4): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  429.026389][   T28] audit: type=1800 audit(1785577641.460:152): pid=11384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1712" name="file1" dev="loop4" ino=6150 res=0 errno=0
[  429.493682][T10527] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  432.373254][T11399] tipc: Disabling bearer <eth:syzkaller0>
[  432.381590][T11410] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1718'.
[  432.405499][T11440] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1726'.
[  433.010618][T11463] UDC core: g1: couldn't find an available UDC or it's busy
[  434.039077][T11471] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1736'.
[  434.163390][T11480] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  434.312474][T11480] syzkaller0: entered promiscuous mode
[  434.340807][T11480] syzkaller0: entered allmulticast mode
[  434.356121][T11480] tipc: Resetting bearer <eth:syzkaller0>
[  434.383907][T11484] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1737'.
[  434.458430][T11475] tipc: Resetting bearer <eth:syzkaller0>
[  434.616593][T11496] UDC core: g1: couldn't find an available UDC or it's busy
[  434.831715][T11507] UDC core: g1: couldn't find an available UDC or it's busy
[  434.867197][T11506] sg_write: process 1071 (syz.3.1746) changed security contexts after opening file descriptor, this is not allowed.
[  437.269444][T11475] tipc: Disabling bearer <eth:syzkaller0>
[  437.279458][T11512] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1748'.
[  437.289290][T11517] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1750'.
[  437.575548][T11527] UDC core: g1: couldn't find an available UDC or it's busy
[  437.604271][T11532] UDC core: g1: couldn't find an available UDC or it's busy
[  437.872351][T11542] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1759'.
[  438.062411][T11551] tipc: Started in network mode
[  438.085119][T11551] tipc: Node identity caa6fd38ce67, cluster identity 4711
[  438.103232][T11551] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  438.270614][T11560] UDC core: g1: couldn't find an available UDC or it's busy
[  438.291473][T11551] syzkaller0: entered promiscuous mode
[  438.315517][T11551] syzkaller0: entered allmulticast mode
[  438.321675][T11551] tipc: Resetting bearer <eth:syzkaller0>
[  438.445154][T11548] tipc: Resetting bearer <eth:syzkaller0>
[  438.511421][T11571] UDC core: g1: couldn't find an available UDC or it's busy
[  439.988413][T11588] UDC core: g1: couldn't find an available UDC or it's busy
[  440.216517][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  440.222890][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  441.979429][T11548] tipc: Disabling bearer <eth:syzkaller0>
[  441.988426][T11577] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1771'.
[  442.005169][ T5829] tipc: Node number set to 79822136
[  442.275411][T11602] UDC core: g1: couldn't find an available UDC or it's busy
[  442.521925][T11617] UDC core: g1: couldn't find an available UDC or it's busy
[  443.366500][T11625] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1787'.
[  443.561196][T11636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1792'.
[  443.588989][T11638] UDC core: g1: couldn't find an available UDC or it's busy
[  443.627378][T11633] gretap0 speed is unknown, defaulting to 1000
[  443.631450][T11635] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  443.811022][T11642] syzkaller0: entered promiscuous mode
[  443.818215][T11648] UDC core: g1: couldn't find an available UDC or it's busy
[  443.828306][T11642] syzkaller0: entered allmulticast mode
[  443.844111][T11642] tipc: Resetting bearer <eth:syzkaller0>
[  443.937356][T11632] tipc: Resetting bearer <eth:syzkaller0>
[  444.136679][T11661] loop3: detected capacity change from 0 to 512
[  444.194439][T11661] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  444.222165][T11661] ext4 filesystem being mounted at /475/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  444.286333][   T28] audit: type=1804 audit(1785577656.730:153): pid=11661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1798" name="/newroot/475/file1/bus" dev="loop3" ino=18 res=1 errno=0
[  444.311273][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  446.636528][T11632] tipc: Disabling bearer <eth:syzkaller0>
[  446.651595][T11672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1801'.
[  446.764409][T11676] UDC core: g1: couldn't find an available UDC or it's busy
[  447.100623][T11694] loop4: detected capacity change from 0 to 512
[  447.196679][T11694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  447.213539][T11694] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  447.274262][   T28] audit: type=1804 audit(1785577659.720:154): pid=11694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1807" name="/newroot/53/file1/bus" dev="loop4" ino=18 res=1 errno=0
[  447.371852][T10527] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  447.862123][T11715] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  448.686995][T11728] UDC core: g1: couldn't find an available UDC or it's busy
[  449.174440][T11715] syzkaller0: entered promiscuous mode
[  449.242858][T11715] syzkaller0: entered allmulticast mode
[  449.303870][T11715] tipc: Resetting bearer <eth:syzkaller0>
[  449.313659][T11734] loop2: detected capacity change from 0 to 512
[  449.452527][T11734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  449.482243][T11713] tipc: Resetting bearer <eth:syzkaller0>
[  449.565772][T11734] ext4 filesystem being mounted at /436/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  449.684961][   T28] audit: type=1804 audit(1785577662.130:155): pid=11734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1817" name="/newroot/436/file1/bus" dev="loop2" ino=18 res=1 errno=0
[  449.750722][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  451.048378][T11761] loop4: detected capacity change from 0 to 512
[  451.210186][T11765] UDC core: g1: couldn't find an available UDC or it's busy
[  451.566910][T11761] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  451.702448][T11761] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  451.941687][T10527] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  453.160943][T11769] UDC core: g1: couldn't find an available UDC or it's busy
[  455.308726][T11713] tipc: Disabling bearer <eth:syzkaller0>
[  455.906956][T11784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1835'.
[  456.043164][T11788] loop2: detected capacity change from 0 to 2048
[  456.083001][T11791] loop3: detected capacity change from 0 to 512
[  456.177764][T11791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  456.285195][T11791] ext4 filesystem being mounted at /486/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  456.304088][T11788] loop2: detected capacity change from 0 to 512
[  456.346307][T11788] EXT4-fs: Ignoring removed nobh option
[  456.406037][T11788] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  456.427310][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  456.464078][T11788] EXT4-fs (loop2): 1 truncate cleaned up
[  456.523711][T11788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  456.739116][T11804] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  456.851197][T11805] UDC core: g1: couldn't find an available UDC or it's busy
[  458.608966][T11812] UDC core: g1: couldn't find an available UDC or it's busy
[  459.106146][   T28] audit: type=1804 audit(1785577671.550:156): pid=11814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1836" name="/newroot/441/file2/bus/file1" dev="loop2" ino=19 res=1 errno=0
[  459.347765][   T28] audit: type=1804 audit(1785577671.800:157): pid=11788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1836" name="/newroot/441/file2/bus/file1" dev="loop2" ino=19 res=1 errno=0
[  459.873480][T11829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1846'.
[  459.978528][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  460.226750][T11831] loop3: detected capacity change from 0 to 512
[  460.410888][T11831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  460.440084][T11831] ext4 filesystem being mounted at /490/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  460.497130][T11844] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  462.717463][T11853] UDC core: g1: couldn't find an available UDC or it's busy
[  463.812259][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  464.174274][T11863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1856'.
[  464.380911][T11865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1857'.
[  464.969563][T11875] UDC core: g1: couldn't find an available UDC or it's busy
[  465.662064][T11877] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1860'.
[  465.988049][T11885] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  466.066072][T11886] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1863'.
[  466.632852][T11895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1866'.
[  466.869166][T11902] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1870'.
[  466.966526][T11904] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[  466.973646][T11904] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[  466.982345][T11904] udc dummy_udc.0: failed to start g1: -22
[  466.988715][T11904] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  467.001025][T11904] UDC core: g1: couldn't find an available UDC or it's busy
[  467.822323][T11910] loop2: detected capacity change from 0 to 512
[  467.950864][T11910] EXT4-fs error (device loop2): __ext4_iget:5079: inode #11: block 16777240: comm syz.2.1869: invalid block
[  467.973550][T11910] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1869: couldn't read orphan inode 11 (err -117)
[  467.989661][T11910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  468.339340][T11915] 9pnet_fd: Insufficient options for proto=fd
[  468.575862][T11923] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  468.867779][T11929] loop3: detected capacity change from 0 to 128
[  468.992498][T11914] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 7: invalid block bitmap
[  469.079779][T11933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1878'.
[  469.122343][T10683] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  469.238258][T11936] UDC core: g1: couldn't find an available UDC or it's busy
[  470.307156][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  470.682357][T11946] loop2: detected capacity change from 0 to 512
[  470.739915][T11946] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  470.760547][T11946] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002]
[  471.037143][T11950] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[  471.044288][T11950] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[  471.053113][T11950] udc dummy_udc.0: failed to start g1: -22
[  471.059078][T11950] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  471.070280][T11950] UDC core: g1: couldn't find an available UDC or it's busy
[  471.481268][T11946] EXT4-fs (loop2): orphan cleanup on readonly fs
[  471.562200][T11946] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #13: comm syz.2.1882: iget: bad i_size value: 12154761577498
[  471.627369][T11946] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1882: couldn't read orphan inode 13 (err -117)
[  471.669287][T11946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  471.803619][T11946] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.1882: dx entry: limit 65535 != root limit 120
[  471.854292][T11946] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1882: Corrupt directory, running e2fsck is recommended
[  471.929143][T11958] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  471.939219][T11946] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.1882: path /449/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  472.121798][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  472.640775][T11970] loop4: detected capacity change from 0 to 512
[  472.670895][T11970] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  472.853582][T11970] EXT4-fs (loop4): 1 truncate cleaned up
[  472.864203][T11970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  472.929518][T11977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1888'.
[  473.077417][T11981] UDC core: g1: couldn't find an available UDC or it's busy
[  473.838071][T10527] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  474.291659][T11992] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  475.070709][T12010] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3
[  475.120901][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1904'.
[  475.257754][T12015] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[  475.265035][T12015] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[  475.273995][T12015] udc dummy_udc.0: failed to start g1: -22
[  475.280068][T12015] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  475.291464][T12015] UDC core: g1: couldn't find an available UDC or it's busy
[  476.328235][T12028] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  476.350633][T12024] tipc: Disabling bearer <eth:syzkaller0>
[  477.102337][T12034] UDC core: g1: couldn't find an available UDC or it's busy
[  477.937357][T12044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1916'.
[  478.503884][T12055] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  478.606679][T12052] tipc: Disabling bearer <eth:syzkaller0>
[  478.966775][T12070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1927'.
[  479.047101][T12076] random: crng reseeded on system resumption
[  479.369991][T12086] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  479.543340][T12090] UDC core: g1: couldn't find an available UDC or it's busy
[  480.780511][T12101] UDC core: g1: couldn't find an available UDC or it's busy
[  481.022633][T12104] loop4: detected capacity change from 0 to 1024
[  481.076674][T12104] EXT4-fs: Ignoring removed bh option
[  481.162917][T12104] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  481.404728][T10527] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  481.619530][T12123] UDC core: g1: couldn't find an available UDC or it's busy
[  481.954035][T12139] loop4: detected capacity change from 0 to 1024
[  481.966045][T12139] EXT4-fs: Ignoring removed bh option
[  482.410433][T12139] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  482.720092][T10527] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  483.039455][T12151] UDC core: g1: couldn't find an available UDC or it's busy
[  483.279665][T12158] autofs4:pid:12158:autofs_fill_super: called with bogus options
[  483.537246][T12161] UDC core: g1: couldn't find an available UDC or it's busy
[  483.774492][T12166] loop4: detected capacity change from 0 to 1024
[  483.807069][T12166] EXT4-fs: Ignoring removed bh option
[  483.853522][T12166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  484.078205][T10527] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  485.206627][T12188] UDC core: g1: couldn't find an available UDC or it's busy
[  485.460041][T12196] loop4: detected capacity change from 0 to 1024
[  485.486333][T12196] EXT4-fs: Ignoring removed bh option
[  485.716382][T12196] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  485.795800][   T28] audit: type=1804 audit(1785577698.230:158): pid=12196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1975" name="/newroot/100/file1/bus" dev="loop4" ino=18 res=1 errno=0
[  485.891287][T10527] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  485.943274][T12210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1981'.
[  486.111769][T12212] tipc: Can't bind to reserved service type 2
[  486.420234][T12216] UDC core: g1: couldn't find an available UDC or it's busy
[  487.084770][T12232] loop2: detected capacity change from 0 to 1024
[  487.146490][T12226] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1987'.
[  487.152370][T12232] EXT4-fs: Ignoring removed bh option
[  487.240505][T12232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  487.301308][   T28] audit: type=1804 audit(1785577699.750:159): pid=12232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1990" name="/newroot/483/file1/bus" dev="loop2" ino=18 res=1 errno=0
[  487.437865][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  487.600225][T12239] loop2: detected capacity change from 0 to 512
[  487.651486][T12239] FAT-fs (loop2): Directory bread(block 199916) failed
[  487.704021][T12239] FAT-fs (loop2): Directory bread(block 199917) failed
[  487.734687][T12239] FAT-fs (loop2): Directory bread(block 199918) failed
[  487.742360][T12239] FAT-fs (loop2): Directory bread(block 199919) failed
[  487.750188][T12239] FAT-fs (loop2): Directory bread(block 199920) failed
[  487.757466][T12239] FAT-fs (loop2): Directory bread(block 199921) failed
[  487.764474][T12239] FAT-fs (loop2): Directory bread(block 199922) failed
[  487.771762][T12239] FAT-fs (loop2): Directory bread(block 199923) failed
[  488.350253][T12246] UDC core: g1: couldn't find an available UDC or it's busy
[  489.336833][T12260] loop3: detected capacity change from 0 to 512
[  489.404029][T12260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  489.614187][T12268] UDC core: g1: couldn't find an available UDC or it's busy
[  489.746916][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  489.802182][T12270] loop2: detected capacity change from 0 to 2048
[  490.031197][T12270] loop2: detected capacity change from 0 to 4096
[  490.301120][T12270] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  490.543455][   T28] audit: type=1804 audit(1785577702.990:160): pid=12270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2004" name="/newroot/486/file1/bus/file1" dev="loop2" ino=34 res=1 errno=0
[  490.860762][   T28] audit: type=1804 audit(1785577703.300:161): pid=12270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2004" name="/newroot/486/file1/bus/file1" dev="loop2" ino=34 res=1 errno=0
[  491.122074][T12286] UDC core: g1: couldn't find an available UDC or it's busy
[  491.877533][T12307] loop2: detected capacity change from 0 to 1024
[  491.916547][T12307] EXT4-fs: Ignoring removed bh option
[  491.996645][T12307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  492.109186][   T28] audit: type=1804 audit(1785577704.560:162): pid=12307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2021" name="/newroot/490/file1/bus" dev="loop2" ino=18 res=1 errno=0
[  492.293814][T12214] Set syz1 is full, maxelem 65536 reached
[  492.331812][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  492.422488][T12314] UDC core: g1: couldn't find an available UDC or it's busy
[  492.516976][T12318] loop2: detected capacity change from 0 to 512
[  492.530187][T12317] loop4: detected capacity change from 0 to 1764
[  492.541095][T12318] EXT4-fs: Ignoring removed nobh option
[  492.572561][T12318] EXT4-fs (loop2): orphan cleanup on readonly fs
[  492.639956][T12318] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #11: comm syz.2.2023: unexpected EA_INODE flag
[  492.655175][T12317] process 'syz.4.2024' launched './file0' with NULL argv: empty string added
[  492.745043][T12318] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.2023: couldn't read orphan inode 11 (err -117)
[  492.792655][T12318] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  492.899000][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  493.031115][T12334] loop4: detected capacity change from 0 to 1024
[  493.053387][T12334] EXT4-fs: Ignoring removed bh option
[  493.107721][T12334] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  493.278921][   T28] audit: type=1804 audit(1785577705.710:163): pid=12334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2031" name="/newroot/104/file1/bus" dev="loop4" ino=18 res=1 errno=0
[  493.470498][T10527] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  493.510557][T12343] UDC core: g1: couldn't find an available UDC or it's busy
[  494.208404][T12368] UDC core: g1: couldn't find an available UDC or it's busy
[  494.220920][T12364] loop4: detected capacity change from 0 to 1024
[  494.236291][T12364] EXT4-fs: Ignoring removed bh option
[  494.290850][T12364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  494.886837][T12384] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2051'.
[  494.905402][T12384] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2051'.
[  494.968478][T10527] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  495.058155][T12388] UDC core: g1: couldn't find an available UDC or it's busy
[  495.109943][ T1137] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.251735][T12392] loop3: detected capacity change from 0 to 1024
[  495.266275][T12392] EXT4-fs: Ignoring removed bh option
[  495.338897][T12392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  495.400338][ T1137] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.573180][ T1137] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.714801][ T1137] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.754405][T12398] syzkaller0: entered promiscuous mode
[  495.761730][T12398] syzkaller0: entered allmulticast mode
[  495.901556][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  495.959735][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  495.976986][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  495.989106][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  496.014440][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  496.032347][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  496.045645][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  496.276155][ T1137] tipc: Left network mode
[  496.281898][T12407] gretap0 speed is unknown, defaulting to 1000
[  496.567545][T12421] loop2: detected capacity change from 0 to 1024
[  496.606177][T12421] EXT4-fs: Ignoring removed bh option
[  496.706644][T12421] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  496.986498][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  497.000507][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  497.017835][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  497.032648][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  497.046945][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  497.056594][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  497.378962][T12434] gretap0 speed is unknown, defaulting to 1000
[  497.508675][T12407] chnl_net:caif_netlink_parms(): no params data found
[  497.525894][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  498.115068][ T5770] Bluetooth: hci1: command tx timeout
[  498.130938][T12407] bridge0: port 1(bridge_slave_0) entered blocking state
[  498.159685][T12407] bridge0: port 1(bridge_slave_0) entered disabled state
[  498.185137][T12407] bridge_slave_0: entered allmulticast mode
[  498.192502][T12407] bridge_slave_0: entered promiscuous mode
[  498.221968][T12407] bridge0: port 2(bridge_slave_1) entered blocking state
[  498.244412][T12407] bridge0: port 2(bridge_slave_1) entered disabled state
[  498.265712][T12407] bridge_slave_1: entered allmulticast mode
[  498.276713][T12407] bridge_slave_1: entered promiscuous mode
[  498.406662][T12434] chnl_net:caif_netlink_parms(): no params data found
[  498.422625][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  498.440500][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  498.456131][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  498.475894][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  498.485627][ T5775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  498.492985][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  498.555021][T12407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  498.679873][T12407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  498.769344][T12407] team0: Port device team_slave_0 added
[  498.780427][T12480] gretap0 speed is unknown, defaulting to 1000
[  498.810699][T12407] team0: Port device team_slave_1 added
[  498.839435][ T1137] hsr_slave_0: left promiscuous mode
[  498.846360][ T1137] hsr_slave_1: left promiscuous mode
[  498.852270][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  498.860695][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0
[  498.869325][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  498.877355][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1
[  498.885365][ T1137] bridge_slave_1: left allmulticast mode
[  498.891018][ T1137] bridge_slave_1: left promiscuous mode
[  498.897062][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state
[  498.916480][ T1137] bridge_slave_0: left allmulticast mode
[  498.922176][ T1137] bridge_slave_0: left promiscuous mode
[  498.927966][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state
[  498.958427][ T1137] veth1_macvtap: left promiscuous mode
[  498.963996][ T1137] veth0_macvtap: left promiscuous mode
[  498.969692][ T1137] veth1_vlan: left promiscuous mode
[  498.975973][ T1137] veth0_vlan: left promiscuous mode
[  499.145227][ T5770] Bluetooth: hci3: command tx timeout
[  499.838266][ T1137] team0 (unregistering): Port device team_slave_1 removed
[  499.901198][ T1137] team0 (unregistering): Port device team_slave_0 removed
[  499.954576][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  500.015471][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  500.185506][ T5770] Bluetooth: hci1: command tx timeout
[  500.468023][ T1137] bond0 (unregistering): Released all slaves
[  500.585801][ T5770] Bluetooth: hci0: command tx timeout
[  500.652095][T12434] bridge0: port 1(bridge_slave_0) entered blocking state
[  500.659405][T12434] bridge0: port 1(bridge_slave_0) entered disabled state
[  500.674717][T12434] bridge_slave_0: entered allmulticast mode
[  500.689648][T12434] bridge_slave_0: entered promiscuous mode
[  500.698507][T12434] bridge0: port 2(bridge_slave_1) entered blocking state
[  500.705794][T12434] bridge0: port 2(bridge_slave_1) entered disabled state
[  500.713033][T12434] bridge_slave_1: entered allmulticast mode
[  500.721153][T12434] bridge_slave_1: entered promiscuous mode
[  500.728444][T12407] batman_adv: batadv0: Adding interface: batadv_slave_0
[  500.739548][T12407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  500.766839][T12407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  500.780338][T12407] batman_adv: batadv0: Adding interface: batadv_slave_1
[  500.787677][T12407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  500.817937][T12407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  500.946172][T12434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  501.022410][T12434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  501.111908][T12407] hsr_slave_0: entered promiscuous mode
[  501.121644][T12407] hsr_slave_1: entered promiscuous mode
[  501.134051][T12407] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  501.142918][T12407] Cannot create hsr debugfs directory
[  501.189122][T12434] team0: Port device team_slave_0 added
[  501.225004][ T5770] Bluetooth: hci3: command tx timeout
[  501.261370][T12434] team0: Port device team_slave_1 added
[  501.387059][T12434] batman_adv: batadv0: Adding interface: batadv_slave_0
[  501.394067][T12434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  501.469223][T12434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  501.547486][T12434] batman_adv: batadv0: Adding interface: batadv_slave_1
[  501.556335][T12434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  501.613833][T12434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  501.630704][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  501.639519][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  501.665257][T12480] chnl_net:caif_netlink_parms(): no params data found
[  501.903398][T12434] hsr_slave_0: entered promiscuous mode
[  501.910533][T12434] hsr_slave_1: entered promiscuous mode
[  501.917934][T12434] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  501.926035][T12434] Cannot create hsr debugfs directory
[  501.978503][T12525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2092'.
[  502.011262][T12525] 8021q: adding VLAN 0 to HW filter on device bond4
[  502.035953][T12527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2092'.
[  502.045455][T12527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2092'.
[  502.265803][ T5770] Bluetooth: hci1: command tx timeout
[  502.277718][T12480] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.303017][T12480] bridge0: port 1(bridge_slave_0) entered disabled state
[  502.315234][T12480] bridge_slave_0: entered allmulticast mode
[  502.322530][T12480] bridge_slave_0: entered promiscuous mode
[  502.377327][T12480] bridge0: port 2(bridge_slave_1) entered blocking state
[  502.398328][T12480] bridge0: port 2(bridge_slave_1) entered disabled state
[  502.408911][T12480] bridge_slave_1: entered allmulticast mode
[  502.426823][T12480] bridge_slave_1: entered promiscuous mode
[  502.542594][ T1137] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.601638][T12480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  502.620860][T12480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  502.669455][ T5770] Bluetooth: hci0: command tx timeout
[  502.766082][ T1137] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.833227][T12407] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  502.916702][T12407] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  502.944672][ T1137] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.957503][T12556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2098'.
[  502.981558][T12556] 8021q: adding VLAN 0 to HW filter on device bond5
[  502.993652][T12480] team0: Port device team_slave_0 added
[  503.013912][T12480] team0: Port device team_slave_1 added
[  503.042556][T12407] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  503.052520][T12557] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2098'.
[  503.062920][T12557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2098'.
[  503.105548][ T1137] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.130275][T12407] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  503.193773][T12480] batman_adv: batadv0: Adding interface: batadv_slave_0
[  503.203732][T12480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  503.235993][T12480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  503.292443][T12480] batman_adv: batadv0: Adding interface: batadv_slave_1
[  503.301703][T12480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  503.328070][ T5770] Bluetooth: hci3: command tx timeout
[  503.333564][T12480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  503.412910][T12480] hsr_slave_0: entered promiscuous mode
[  503.419915][T12480] hsr_slave_1: entered promiscuous mode
[  503.426527][T12480] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  503.434124][T12480] Cannot create hsr debugfs directory
[  503.519935][T12434] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  503.614217][T12434] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  503.684150][T12434] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  503.726826][T12434] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  503.786368][ T1137] tipc: Left network mode
[  504.004810][T12407] 8021q: adding VLAN 0 to HW filter on device bond0
[  504.329654][T12585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2104'.
[  504.346000][ T5770] Bluetooth: hci1: command tx timeout
[  504.378495][T12585] 8021q: adding VLAN 0 to HW filter on device bond6
[  504.407464][T12407] 8021q: adding VLAN 0 to HW filter on device team0
[  504.450418][T12582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2104'.
[  504.462059][T12582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2104'.
[  504.562525][ T9165] bridge0: port 1(bridge_slave_0) entered blocking state
[  504.569877][ T9165] bridge0: port 1(bridge_slave_0) entered forwarding state
[  504.612419][T12480] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  504.687622][T12480] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  504.702849][T12480] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  504.723875][T12480] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  504.745109][ T5770] Bluetooth: hci0: command tx timeout
[  504.753486][ T9165] bridge0: port 2(bridge_slave_1) entered blocking state
[  504.760814][ T9165] bridge0: port 2(bridge_slave_1) entered forwarding state
[  504.862469][T12434] 8021q: adding VLAN 0 to HW filter on device bond0
[  504.961819][T12407] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  505.128043][T12434] 8021q: adding VLAN 0 to HW filter on device team0
[  505.161416][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  505.168661][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  505.341636][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  505.348902][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  505.385257][ T5770] Bluetooth: hci3: command tx timeout
[  505.624356][T12407] 8021q: adding VLAN 0 to HW filter on device batadv0
[  505.690139][T12617] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2110'.
[  505.752785][T12617] 8021q: adding VLAN 0 to HW filter on device bond7
[  505.801003][ T1137] hsr_slave_0: left promiscuous mode
[  505.807325][ T1137] hsr_slave_1: left promiscuous mode
[  505.814435][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  505.823731][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0
[  505.841369][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  505.853687][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1
[  505.864731][ T1137] bridge_slave_1: left allmulticast mode
[  505.874673][ T1137] bridge_slave_1: left promiscuous mode
[  505.884379][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state
[  505.899953][ T1137] bridge_slave_0: left allmulticast mode
[  505.906583][ T1137] bridge_slave_0: left promiscuous mode
[  505.913146][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state
[  506.268697][ T1137] veth1_macvtap: left promiscuous mode
[  506.274265][ T1137] veth0_macvtap: left promiscuous mode
[  506.281221][ T1137] veth1_vlan: left promiscuous mode
[  506.286827][ T1137] veth0_vlan: left promiscuous mode
[  506.830925][ T5770] Bluetooth: hci0: command tx timeout
[  507.051324][ T1137] team0 (unregistering): Port device team_slave_1 removed
[  507.113460][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  507.179302][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  507.648278][ T1137] bond0 (unregistering): Released all slaves
[  507.853768][T12614] __nla_validate_parse: 1 callbacks suppressed
[  507.853807][T12614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2110'.
[  507.922077][T12480] 8021q: adding VLAN 0 to HW filter on device bond0
[  508.113116][T12480] 8021q: adding VLAN 0 to HW filter on device team0
[  508.187562][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state
[  508.194761][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state
[  508.228614][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state
[  508.235855][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state
[  508.340065][T12407] veth0_vlan: entered promiscuous mode
[  508.354573][T12407] veth1_vlan: entered promiscuous mode
[  508.450361][T12480] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  508.480083][T12480] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  508.651475][T12434] 8021q: adding VLAN 0 to HW filter on device batadv0
[  508.675842][T12407] veth0_macvtap: entered promiscuous mode
[  508.770395][T12407] veth1_macvtap: entered promiscuous mode
[  508.847823][T12407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  508.884621][T12407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  508.906997][T12407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  508.927314][T12407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  508.940450][T12407] batman_adv: batadv0: Interface activated: batadv_slave_0
[  508.987967][T12407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  509.043936][T12407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  509.072458][T12407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  509.105073][T12407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  509.136490][T12407] batman_adv: batadv0: Interface activated: batadv_slave_1
[  509.182136][T12407] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  509.204535][T12407] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  509.224137][T12407] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  509.249648][T12407] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  509.314805][T12480] 8021q: adding VLAN 0 to HW filter on device batadv0
[  509.607303][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  509.627303][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  509.637578][T12434] veth0_vlan: entered promiscuous mode
[  509.659513][T12669] gretap0 speed is unknown, defaulting to 1000
[  509.687558][T12434] veth1_vlan: entered promiscuous mode
[  509.735623][ T2923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  509.752886][ T2923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  509.871811][T12434] veth0_macvtap: entered promiscuous mode
[  509.947359][T12434] veth1_macvtap: entered promiscuous mode
[  510.071378][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  510.101319][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.131373][T12684] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2118'.
[  510.143550][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  510.154997][T12684] unsupported nlmsg_type 40
[  510.160432][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.186077][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  510.220729][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.270414][T12434] batman_adv: batadv0: Interface activated: batadv_slave_0
[  510.308964][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  510.335497][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.345799][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  510.357666][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.375334][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  510.386569][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.410464][T12434] batman_adv: batadv0: Interface activated: batadv_slave_1
[  510.459701][T12434] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  510.477917][T12434] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  510.488230][T12434] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  510.497357][T12434] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  510.738029][T12480] veth0_vlan: entered promiscuous mode
[  510.842484][T12480] veth1_vlan: entered promiscuous mode
[  510.896209][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  510.904084][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  511.079065][ T2923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  511.084941][T12480] veth0_macvtap: entered promiscuous mode
[  511.096660][ T2923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  511.129995][T12480] veth1_macvtap: entered promiscuous mode
[  511.226249][T12711] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2126'.
[  511.282221][T12480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  511.294448][T12480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.316962][T12480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  511.328864][T12480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.341074][T12480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  511.353239][T12480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.374799][T12480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  511.394692][T12480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.425795][T12480] batman_adv: batadv0: Interface activated: batadv_slave_0
[  511.463666][T12480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  511.522103][T12480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.552996][T12480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  511.584934][T12480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.621796][T12480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  511.659605][T12480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.696643][T12480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  511.727713][T12723] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2130'.
[  511.742113][T12480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.756856][T12480] batman_adv: batadv0: Interface activated: batadv_slave_1
[  511.768764][T12480] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  511.785114][T12480] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  511.810448][T12480] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  511.828078][T12480] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  512.237018][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  512.285413][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  512.384582][ T2926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  512.417719][ T2926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  513.126304][T12755] gretap0 speed is unknown, defaulting to 1000
[  513.537119][T12763] loop7: detected capacity change from 0 to 2048
[  513.883801][T12763] loop7: detected capacity change from 0 to 4096
[  513.988652][T12763] ntfs3: loop7: Mark volume as dirty due to NTFS errors
[  514.169040][   T28] audit: type=1804 audit(1785577726.620:164): pid=12775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2141" name="/newroot/2/file1/bus/file1" dev="loop7" ino=34 res=1 errno=0
[  514.485878][   T28] audit: type=1804 audit(1785577726.940:165): pid=12763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2141" name="/newroot/2/file1/bus/file1" dev="loop7" ino=34 res=1 errno=0
[  514.850350][T12794] gretap0 speed is unknown, defaulting to 1000
[  514.934405][T12801] netlink: 'syz.0.2152': attribute type 39 has an invalid length.
[  515.082842][T12806] loop6: detected capacity change from 0 to 4096
[  515.154001][T10681] I/O error, dev loop6, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  515.276882][T12806] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2153'.
[  515.343884][T12806] netlink: 'syz.6.2153': attribute type 7 has an invalid length.
[  515.368021][T12806] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2153'.
[  515.461794][T12816] loop7: detected capacity change from 0 to 128
[  515.493995][T12806] team0: entered promiscuous mode
[  515.525108][T12806] team_slave_0: entered promiscuous mode
[  515.551917][T12806] team_slave_1: entered promiscuous mode
[  515.598363][T12806] bond0: entered promiscuous mode
[  515.608661][T12806] bond_slave_0: entered promiscuous mode
[  515.635319][T12806] bond_slave_1: entered promiscuous mode
[  515.675961][T12806] 8021q: adding VLAN 0 to HW filter on device hsr1
[  515.725526][T12823] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2160'.
[  515.743780][T12823] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2160'.
[  515.764494][T12825] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2160'.
[  515.806608][T12825] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2160'.
[  516.123847][T12833] gretap0 speed is unknown, defaulting to 1000
[  516.254232][T12840] netlink: 'syz.6.2166': attribute type 39 has an invalid length.
[  519.034024][T12848] Set syz1 is full, maxelem 65536 reached
[  520.075303][T12872] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.086010][T12872] bridge0: port 1(bridge_slave_0) entered disabled state
[  520.817283][T12872] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  520.874584][T12872] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  521.434514][T12872] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  521.435460][T12899] IPVS: set_ctl: invalid protocol: 115 172.20.20.13:20002
[  521.450597][T12872] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  521.450696][T12872] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  521.450723][T12872] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  521.612808][ T5829] IPVS: starting estimator thread 0...
[  521.716271][T12902] IPVS: using max 18 ests per chain, 43200 per kthread
[  521.980847][T12912] capability: warning: `syz.5.2181' uses 32-bit capabilities (legacy support in use)
[  522.321248][   T60] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.682149][   T60] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.853212][   T60] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.927016][T12932] loop6: detected capacity change from 0 to 128
[  523.066724][T12932] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  523.119138][   T60] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  523.142759][T12932] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  523.331459][T12434] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  523.608429][T12961] loop6: detected capacity change from 0 to 512
[  523.725262][   T60] tipc: Left network mode
[  523.733927][T12961] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  523.736406][T12965] gretap0 speed is unknown, defaulting to 1000
[  523.960530][T12977] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2202'.
[  523.989349][T12434] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  525.916918][T13046] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  525.943092][T13046] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  525.953332][T13046] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  525.970779][T13046] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  525.979861][T13046] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  525.990983][T13046] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  526.377481][T13045] gretap0 speed is unknown, defaulting to 1000
[  527.129662][   T60] hsr_slave_0: left promiscuous mode
[  527.163021][   T60] hsr_slave_1: left promiscuous mode
[  527.172467][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  527.180800][   T60] batman_adv: batadv0: Removing interface: batadv_slave_0
[  527.190437][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  527.198419][   T60] batman_adv: batadv0: Removing interface: batadv_slave_1
[  527.206779][   T60] bridge_slave_1: left allmulticast mode
[  527.213193][   T60] bridge_slave_1: left promiscuous mode
[  527.219521][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[  527.232073][   T60] bridge_slave_0: left allmulticast mode
[  527.238679][   T60] bridge_slave_0: left promiscuous mode
[  527.245651][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[  527.293743][   T60] veth1_macvtap: left promiscuous mode
[  527.302851][   T60] veth0_macvtap: left promiscuous mode
[  527.312561][   T60] veth1_vlan: left promiscuous mode
[  528.115347][T13046] Bluetooth: hci2: command tx timeout
[  528.413289][   T60] team0 (unregistering): Port device team_slave_1 removed
[  528.495652][   T60] team0 (unregistering): Port device team_slave_0 removed
[  528.585164][   T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  528.669270][T13117] loop5: detected capacity change from 0 to 32768
[  528.696528][   T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  528.799745][T13117] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  528.885889][T13117] XFS (loop5): Ending clean mount
[  528.930124][   T28] audit: type=1800 audit(1785577741.380:166): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2251" name="file1" dev="loop5" ino=6150 res=0 errno=0
[  528.966342][T13117] XFS (loop5): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  529.374563][T12407] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  529.433739][   T60] bond0 (unregistering): Released all slaves
[  529.584292][T13045] chnl_net:caif_netlink_parms(): no params data found
[  529.903330][T13045] bridge0: port 1(bridge_slave_0) entered blocking state
[  529.912273][T13045] bridge0: port 1(bridge_slave_0) entered disabled state
[  529.922005][T13045] bridge_slave_0: entered allmulticast mode
[  529.929923][T13045] bridge_slave_0: entered promiscuous mode
[  529.951554][T13045] bridge0: port 2(bridge_slave_1) entered blocking state
[  529.963186][T13045] bridge0: port 2(bridge_slave_1) entered disabled state
[  529.970998][T13045] bridge_slave_1: entered allmulticast mode
[  529.981140][T13045] bridge_slave_1: entered promiscuous mode
[  530.077532][T13045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  530.098691][T13045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  530.185861][T13046] Bluetooth: hci2: command tx timeout
[  530.212180][T13045] team0: Port device team_slave_0 added
[  530.234520][T13045] team0: Port device team_slave_1 added
[  530.321699][T13045] batman_adv: batadv0: Adding interface: batadv_slave_0
[  530.359422][T13045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  530.400371][T13045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  530.422966][T13045] batman_adv: batadv0: Adding interface: batadv_slave_1
[  530.431218][T13045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  530.457774][T13045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  530.850731][T13045] hsr_slave_0: entered promiscuous mode
[  530.926120][T13045] hsr_slave_1: entered promiscuous mode
[  530.944661][T13045] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  530.954314][T13045] Cannot create hsr debugfs directory
[  531.019640][   T60] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.214845][   T60] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.278676][T13172] hsr0: entered promiscuous mode
[  531.307784][T13178] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2261'.
[  531.523773][   T60] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.736197][   T60] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  532.220100][   T60] tipc: Left network mode
[  532.266573][T13046] Bluetooth: hci2: command tx timeout
[  532.276653][T13214] 9pnet_fd: Insufficient options for proto=fd
[  533.122400][T13239] 9pnet_fd: Insufficient options for proto=fd
[  533.232093][T13244] loop7: detected capacity change from 0 to 512
[  533.320411][T13244] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  533.550487][T12480] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  534.018401][T13045] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  534.033628][T13267] 9pnet_fd: Insufficient options for proto=fd
[  534.055094][T13045] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  534.091966][T13045] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  534.229465][T13045] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  534.342793][ T5830] gretap0 speed is unknown, defaulting to 1000
[  534.352438][T13046] Bluetooth: hci2: command tx timeout
[  535.438083][T13300] 9pnet_fd: Insufficient options for proto=fd
[  535.854559][T13045] 8021q: adding VLAN 0 to HW filter on device bond0
[  535.990011][T13045] 8021q: adding VLAN 0 to HW filter on device team0
[  536.047387][ T9165] bridge0: port 1(bridge_slave_0) entered blocking state
[  536.054587][ T9165] bridge0: port 1(bridge_slave_0) entered forwarding state
[  536.204970][   T60] hsr_slave_0: left promiscuous mode
[  536.216091][T13325] 9pnet_fd: Insufficient options for proto=fd
[  536.291274][   T60] hsr_slave_1: left promiscuous mode
[  536.292031][T13327] loop6: detected capacity change from 0 to 512
[  536.346831][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  536.346885][   T60] batman_adv: batadv0: Removing interface: batadv_slave_0
[  536.347758][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  536.347781][   T60] batman_adv: batadv0: Removing interface: batadv_slave_1
[  536.348396][   T60] bridge_slave_1: left allmulticast mode
[  536.348416][   T60] bridge_slave_1: left promiscuous mode
[  536.348566][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[  536.351051][   T60] bridge_slave_0: left allmulticast mode
[  536.351072][   T60] bridge_slave_0: left promiscuous mode
[  536.351214][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[  536.462304][T13327] ------------[ cut here ]------------
[  536.462517][T13327] EA inode 11 i_nlink=2
[  536.462782][T13327] WARNING: CPU: 1 PID: 13327 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x572/0x5d0
[  536.462878][T13327] Modules linked in:
[  536.462902][T13327] CPU: 1 PID: 13327 Comm: syz.6.2312 Not tainted syzkaller #0
[  536.462986][T13327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  536.463004][T13327] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0
[  536.463112][T13327] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 81 f5 98 ff 49 8b 34 24 48 c7 c7 60 dd de 8a 44 89 fa e8 2e 48 0a ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 68 cd 45 08
[  536.463161][T13327] RSP: 0018:ffffc90003857360 EFLAGS: 00010246
[  536.463213][T13327] RAX: f078b739ac238000 RBX: ffff8880787cc0a8 RCX: 0000000000080000
[  536.463229][T13327] RDX: ffffc9000d5a3000 RSI: 0000000000036fa9 RDI: 0000000000036faa
[  536.463244][T13327] RBP: ffffc90003857450 R08: ffff8880b8f28c53 R09: 1ffff110171e518a
[  536.463260][T13327] R10: dffffc0000000000 R11: ffffed10171e518b R12: ffff8880787cbf00
[  536.463274][T13327] R13: ffffc900038573c0 R14: dffffc0000000000 R15: 0000000000000002
[  536.463289][T13327] FS:  00007f4d601316c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  536.463306][T13327] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  536.463321][T13327] CR2: 00007fbcfb55b368 CR3: 000000005eaf2000 CR4: 00000000003506e0
[  536.463337][T13327] Call Trace:
[  536.463346][T13327]  <TASK>
[  536.463424][T13327]  ? ext4_xattr_list_entries+0x3d0/0x3d0
[  536.463518][T13327]  ? __ext4_journal_ensure_credits+0x30/0x450
[  536.463561][T13327]  ext4_xattr_inode_dec_ref_all+0x9bb/0x1030
[  536.463602][T13327]  ? ext4_xattr_delete_inode+0xd00/0xd00
[  536.463629][T13327]  ? __ext4_journal_ensure_credits+0x450/0x450
[  536.463665][T13327]  ext4_xattr_delete_inode+0xb3b/0xd00
[  536.463695][T13327]  ? ext4_truncate+0xcc0/0x1140
[  536.463724][T13327]  ? ext4_expand_extra_isize_ea+0x1e70/0x1e70
[  536.463753][T13327]  ? __ext4_mark_inode_dirty+0x4c4/0x6d0
[  536.463784][T13327]  ext4_evict_inode+0xa88/0xe70
[  536.463808][T13327]  ? evict+0x482/0x8a0
[  536.463852][T13327]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  536.463881][T13327]  ? do_raw_spin_unlock+0x121/0x230
[  536.463927][T13327]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  536.463953][T13327]  evict+0x4b7/0x8a0
[  536.463976][T13327]  ? __lock_acquire+0x7d80/0x7d80
[  536.464002][T13327]  ? proc_nr_inodes+0x230/0x230
[  536.464027][T13327]  ? do_raw_spin_unlock+0x121/0x230
[  536.464054][T13327]  ? _raw_spin_unlock+0x28/0x40
[  536.464164][T13327]  ext4_orphan_cleanup+0xc33/0x1470
[  536.464198][T13327]  ? ext4_orphan_del+0xc90/0xc90
[  536.464222][T13327]  ? ext4_register_li_request+0x182/0x930
[  536.464243][T13327]  ? errseq_check_and_advance+0x66/0x120
[  536.464295][T13327]  ext4_fill_super+0x5fb5/0x6870
[  536.464345][T13327]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  536.464371][T13327]  ? __might_sleep+0xe0/0xe0
[  536.464411][T13327]  ? read_lock_is_recursive+0x20/0x20
[  536.464432][T13327]  ? snprintf+0xe9/0x140
[  536.464498][T13327]  ? down_read_killable+0x340/0x340
[  536.464527][T13327]  ? setup_bdev_super+0x56b/0x660
[  536.464557][T13327]  get_tree_bdev+0x3e5/0x520
[  536.464580][T13327]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  536.464605][T13327]  ? setup_bdev_super+0x660/0x660
[  536.464626][T13327]  ? apparmor_capable+0x137/0x1a0
[  536.464669][T13327]  ? bpf_lsm_capable+0x9/0x10
[  536.464707][T13327]  ? security_capable+0x89/0xb0
[  536.464738][T13327]  vfs_get_tree+0x8c/0x280
[  536.464763][T13327]  do_new_mount+0x24a/0xa40
[  536.464793][T13327]  __se_sys_mount+0x2e7/0x3d0
[  536.464821][T13327]  ? __x64_sys_mount+0xc0/0xc0
[  536.464847][T13327]  ? lockdep_hardirqs_on+0x98/0x150
[  536.465347][T13327]  ? __x64_sys_mount+0x20/0xc0
[  536.465375][T13327]  do_syscall_64+0x55/0xb0
[  536.465395][T13327]  ? clear_bhb_loop+0x40/0x90
[  536.465491][T13327]  ? clear_bhb_loop+0x40/0x90
[  536.465515][T13327]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  536.465537][T13327] RIP: 0033:0x7f4d5f19f28a
[  536.465562][T13327] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  536.465581][T13327] RSP: 002b:00007f4d60130e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  536.465605][T13327] RAX: ffffffffffffffda RBX: 00007f4d60130ee0 RCX: 00007f4d5f19f28a
[  536.465621][T13327] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f4d60130ea0
[  536.465637][T13327] RBP: 00002000000009c0 R08: 00007f4d60130ee0 R09: 0000000000800718
[  536.465652][T13327] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540
[  536.465667][T13327] R13: 00007f4d60130ea0 R14: 000000000000048d R15: 0000200000000200
[  536.465700][T13327]  </TASK>
[  536.465711][T13327] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  536.465721][T13327] CPU: 1 PID: 13327 Comm: syz.6.2312 Not tainted syzkaller #0
[  536.465738][T13327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  536.465749][T13327] Call Trace:
[  536.465755][T13327]  <TASK>
[  536.465762][T13327]  dump_stack_lvl+0x18c/0x250
[  536.465785][T13327]  ? show_regs_print_info+0x20/0x20
[  536.465806][T13327]  ? load_image+0x420/0x420
[  536.465852][T13327]  panic+0x2ca/0x720
[  536.465883][T13327]  ? bpf_jit_dump+0xd0/0xd0
[  536.465925][T13327]  __warn+0x2e0/0x470
[  536.465947][T13327]  ? ext4_xattr_inode_update_ref+0x572/0x5d0
[  536.465977][T13327]  ? ext4_xattr_inode_update_ref+0x572/0x5d0
[  536.466004][T13327]  report_bug+0x2be/0x4f0
[  536.466049][T13327]  ? ext4_xattr_inode_update_ref+0x572/0x5d0
[  536.466077][T13327]  ? ext4_xattr_inode_update_ref+0x572/0x5d0
[  536.466111][T13327]  ? ext4_xattr_inode_update_ref+0x574/0x5d0
[  536.466139][T13327]  handle_bug+0xcf/0x120
[  536.466160][T13327]  exc_invalid_op+0x1a/0x50
[  536.466179][T13327]  asm_exc_invalid_op+0x1a/0x20
[  536.466197][T13327] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0
[  536.466224][T13327] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 81 f5 98 ff 49 8b 34 24 48 c7 c7 60 dd de 8a 44 89 fa e8 2e 48 0a ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 68 cd 45 08
[  536.466238][T13327] RSP: 0018:ffffc90003857360 EFLAGS: 00010246
[  536.466253][T13327] RAX: f078b739ac238000 RBX: ffff8880787cc0a8 RCX: 0000000000080000
[  536.466266][T13327] RDX: ffffc9000d5a3000 RSI: 0000000000036fa9 RDI: 0000000000036faa
[  536.466279][T13327] RBP: ffffc90003857450 R08: ffff8880b8f28c53 R09: 1ffff110171e518a
[  536.466293][T13327] R10: dffffc0000000000 R11: ffffed10171e518b R12: ffff8880787cbf00
[  536.466306][T13327] R13: ffffc900038573c0 R14: dffffc0000000000 R15: 0000000000000002
[  536.466343][T13327]  ? ext4_xattr_list_entries+0x3d0/0x3d0
[  536.466376][T13327]  ? __ext4_journal_ensure_credits+0x30/0x450
[  536.466407][T13327]  ext4_xattr_inode_dec_ref_all+0x9bb/0x1030
[  536.466448][T13327]  ? ext4_xattr_delete_inode+0xd00/0xd00
[  536.466496][T13327]  ? __ext4_journal_ensure_credits+0x450/0x450
[  536.466531][T13327]  ext4_xattr_delete_inode+0xb3b/0xd00
[  536.466561][T13327]  ? ext4_truncate+0xcc0/0x1140
[  536.466587][T13327]  ? ext4_expand_extra_isize_ea+0x1e70/0x1e70
[  536.466615][T13327]  ? __ext4_mark_inode_dirty+0x4c4/0x6d0
[  536.466648][T13327]  ext4_evict_inode+0xa88/0xe70
[  536.466670][T13327]  ? evict+0x482/0x8a0
[  536.466699][T13327]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  536.466727][T13327]  ? do_raw_spin_unlock+0x121/0x230
[  536.466752][T13327]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  536.466778][T13327]  evict+0x4b7/0x8a0
[  536.466799][T13327]  ? __lock_acquire+0x7d80/0x7d80
[  536.466823][T13327]  ? proc_nr_inodes+0x230/0x230
[  536.466846][T13327]  ? do_raw_spin_unlock+0x121/0x230
[  536.466873][T13327]  ? _raw_spin_unlock+0x28/0x40
[  536.466905][T13327]  ext4_orphan_cleanup+0xc33/0x1470
[  536.466937][T13327]  ? ext4_orphan_del+0xc90/0xc90
[  536.466959][T13327]  ? ext4_register_li_request+0x182/0x930
[  536.466978][T13327]  ? errseq_check_and_advance+0x66/0x120
[  536.467002][T13327]  ext4_fill_super+0x5fb5/0x6870
[  536.467049][T13327]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  536.467073][T13327]  ? __might_sleep+0xe0/0xe0
[  536.467096][T13327]  ? read_lock_is_recursive+0x20/0x20
[  536.467124][T13327]  ? snprintf+0xe9/0x140
[  536.467163][T13327]  ? down_read_killable+0x340/0x340
[  536.467191][T13327]  ? setup_bdev_super+0x56b/0x660
[  536.467212][T13327]  get_tree_bdev+0x3e5/0x520
[  536.467232][T13327]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  536.467255][T13327]  ? setup_bdev_super+0x660/0x660
[  536.467274][T13327]  ? apparmor_capable+0x137/0x1a0
[  536.467293][T13327]  ? bpf_lsm_capable+0x9/0x10
[  536.467318][T13327]  ? security_capable+0x89/0xb0
[  536.467342][T13327]  vfs_get_tree+0x8c/0x280
[  536.467364][T13327]  do_new_mount+0x24a/0xa40
[  536.467391][T13327]  __se_sys_mount+0x2e7/0x3d0
[  536.467417][T13327]  ? __x64_sys_mount+0xc0/0xc0
[  536.467442][T13327]  ? lockdep_hardirqs_on+0x98/0x150
[  536.467463][T13327]  ? __x64_sys_mount+0x20/0xc0
[  536.467485][T13327]  do_syscall_64+0x55/0xb0
[  536.467503][T13327]  ? clear_bhb_loop+0x40/0x90
[  536.467520][T13327]  ? clear_bhb_loop+0x40/0x90
[  536.467542][T13327]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  536.467560][T13327] RIP: 0033:0x7f4d5f19f28a
[  536.467576][T13327] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  536.467591][T13327] RSP: 002b:00007f4d60130e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  536.467610][T13327] RAX: ffffffffffffffda RBX: 00007f4d60130ee0 RCX: 00007f4d5f19f28a
[  536.467623][T13327] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f4d60130ea0
[  536.467637][T13327] RBP: 00002000000009c0 R08: 00007f4d60130ee0 R09: 0000000000800718
[  536.467650][T13327] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540
[  536.467662][T13327] R13: 00007f4d60130ea0 R14: 000000000000048d R15: 0000200000000200
[  536.467692][T13327]  </TASK>
[  536.467960][T13327] Kernel Offset: disabled