last executing test programs:

1m57.160566869s ago: executing program 4 (id=36):
r0 = open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)
sendfile(r0, r0, 0x0, 0x1000200201005)
ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0)

1m56.573328974s ago: executing program 4 (id=39):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$eJzs3c1rXWkZAPDnPc1NbzrtzJ22ttaOckHBMmJJ006qpjjWyQSE4oRp04UrY5N2wtwkJclIOgzahejG/8HVbBRkQN0ILnTrQnciA67ErVEGBhRHOSfnfiUZk5mbm4/m94PknnvOcz7eAwk872cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABFff/nm8JW0308BAAAA9NM3b786PCL/BwAAgCfaHe3/AAAAAAAAAHDYpcjih5Fi9dRaOll8X1e9NbfwxurU+MTWpw2l4sxjRXz+U70ycvXaC6PXv9T8/P/n77YL8crtOzfrLy3OP1yaXV6enalPLczdW5yZ3fEVej1/o+eLF1Cff/2Nmfv3l+sjl692HV6t/e34U+dqY19++eytZuzU+MTE7Y6YgcrHvvsmengAAAAcbYORxbVIcefiz9OpiMii91x4m7qDfhuKWp5/F4WYGp8oCtKYm15YyQ9ONhPhWndOPNjMkfcgF+9JLeJ0/qyDMnoAAAB2rhJZfCZSXPhgLT0dEceaefAXiokBt79AbQ8ecgsDEXEmIi7FIcjZAQAAYJ8djyxejRS/adTimTKvLvL/r0WM7ffDAQAAALtiILK4HineG1tLtaI/QEQ8PzU+Ub91t/6NhfuLHbGTqWxRP+zjA/aSvgkAAAAcANXI4lTR4r+Wnv2QmIE9fiYAAABgdw1FFv+KFJ9/8bvFvHJRzEv/zNhXTt6Y6Jxh7vw218ljL0fExR2Oya+Ucw1OpsmUsk1Xe7wrhQMAAAAK1ZTFXyPF+3+uFt8vlbl50ugPAAAAT46UxQ8ixVcn11LasC79sY71/VsO+9j//j7/UPWlxYePluYevLay5fET1ZvfWV5Zmr639eH1tQu7ukNst44hAAAA7EAlZfHPSPH7xjutvLNcA6DsAdBONN++0c5Nq2nD0aLe4Omi3qA1huCpkZHO7S1T1o8wP16tvO+x3osNAAAAR0pKWQxGis/97pPl2v8nYlMbdBn3h0hxY/G5Mi4bzOOawwRqxe/q/bnG7HAeOx4pftloxkYRe7yMPdOOvZLH/ja/7nR3bLWMPduOHcljP4gUry1tHfuJduzVPHYpUvzsJ/Vm7Ik89mQZe64de/neYmOmby8YAAAADoBKyuJXkeLH/663hvx3t/+3W9vffqvd3r9pgr4PafPvtf2/1rHvcVkPcbysrxjYpr7ilUhx4dnnmuUp6gqa3QrW1zpo11f8I1Isfas7drCMPd2OvbLjFwsAAAAHSLP//x/v/rrV5b7MgcuvW+f/n9o4P2Cf8v/ONQnzey4/evP16UZjdmk/Nyof8azvR0TXnnQQSmHjv6WD8jx7ulH+UT0+KM/T60Zv/wcBAOAoyPP/u5Fi9b13W+3dZf5fdpVv5//vf6+d/49tvFCf8v/THfvGyvkGKgMR1ZX5h5XzEdXlR29+cW5++sHsg9mFq6MvjA6Pjl6/NlIZbDbut7d6flcAAABwWOX5/3Ck+PuPftoan7+T9v8TGy/Up/z/TMe+/J7tRr98z196LT4AAAAcCXn+/4tI8aeL77Tm0evO/zvm/3+rPc7+0mfXewu0agf6lP+f7dhXK+4bMbRLZQcAAAAAAAAAAAAAAAAAAICDopKy+E+keLc6kMoJ/3c0/9/Mxgv1afz/uY59M7E36//1/FIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgkMoii7lI8enza+nFfMe3I052fgIAAACH3v8CAAD//16XHzs=")
write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc)
open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)

1m55.939692579s ago: executing program 4 (id=43):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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")
write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc)
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178)
open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)

1m55.208398287s ago: executing program 4 (id=49):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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")
write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc)
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178)
open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)

1m54.012590806s ago: executing program 4 (id=55):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3d46e48aa31086b8703130000001f000000000000000800030018000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1m52.496896643s ago: executing program 2 (id=66):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000940)={&(0x7f00000001c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, 0x0}, 0x30004081)

1m52.406188295s ago: executing program 2 (id=67):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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")
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178)
open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)

1m52.159403961s ago: executing program 2 (id=70):
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=@base={0xa, 0x16, 0x800, 0x7f, 0x0, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50)

1m51.78253235s ago: executing program 2 (id=72):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$eJzs3c1rXWkZAPDnPc1NbzrtzJ22ttaOckHBMmJJ006qpjjWyQSE4oRp04UrY5N2wtwkJclIOgzahejG/8HVbBRkQN0ILnTrQnciA67ErVEGBhRHOSfnfiUZk5mbm4/m94PknnvOcz7eAwk872cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABFff/nm8JW0308BAAAA9NM3b786PCL/BwAAgCfaHe3/AAAAAAAAAHDYpcjih5Fi9dRaOll8X1e9NbfwxurU+MTWpw2l4sxjRXz+U70ycvXaC6PXv9T8/P/n77YL8crtOzfrLy3OP1yaXV6enalPLczdW5yZ3fEVej1/o+eLF1Cff/2Nmfv3l+sjl692HV6t/e34U+dqY19++eytZuzU+MTE7Y6YgcrHvvsmengAAAAcbYORxbVIcefiz9OpiMii91x4m7qDfhuKWp5/F4WYGp8oCtKYm15YyQ9ONhPhWndOPNjMkfcgF+9JLeJ0/qyDMnoAAAB2rhJZfCZSXPhgLT0dEceaefAXiokBt79AbQ8ecgsDEXEmIi7FIcjZAQAAYJ8djyxejRS/adTimTKvLvL/r0WM7ffDAQAAALtiILK4HineG1tLtaI/QEQ8PzU+Ub91t/6NhfuLHbGTqWxRP+zjA/aSvgkAAAAcANXI4lTR4r+Wnv2QmIE9fiYAAABgdw1FFv+KFJ9/8bvFvHJRzEv/zNhXTt6Y6Jxh7vw218ljL0fExR2Oya+Ucw1OpsmUsk1Xe7wrhQMAAAAK1ZTFXyPF+3+uFt8vlbl50ugPAAAAT46UxQ8ixVcn11LasC79sY71/VsO+9j//j7/UPWlxYePluYevLay5fET1ZvfWV5Zmr639eH1tQu7ukNst44hAAAA7EAlZfHPSPH7xjutvLNcA6DsAdBONN++0c5Nq2nD0aLe4Omi3qA1huCpkZHO7S1T1o8wP16tvO+x3osNAAAAR0pKWQxGis/97pPl2v8nYlMbdBn3h0hxY/G5Mi4bzOOawwRqxe/q/bnG7HAeOx4pftloxkYRe7yMPdOOvZLH/ja/7nR3bLWMPduOHcljP4gUry1tHfuJduzVPHYpUvzsJ/Vm7Ik89mQZe64de/neYmOmby8YAAAADoBKyuJXkeLH/663hvx3t/+3W9vffqvd3r9pgr4PafPvtf2/1rHvcVkPcbysrxjYpr7ilUhx4dnnmuUp6gqa3QrW1zpo11f8I1Isfas7drCMPd2OvbLjFwsAAAAHSLP//x/v/rrV5b7MgcuvW+f/n9o4P2Cf8v/ONQnzey4/evP16UZjdmk/Nyof8azvR0TXnnQQSmHjv6WD8jx7ulH+UT0+KM/T60Zv/wcBAOAoyPP/u5Fi9b13W+3dZf5fdpVv5//vf6+d/49tvFCf8v/THfvGyvkGKgMR1ZX5h5XzEdXlR29+cW5++sHsg9mFq6MvjA6Pjl6/NlIZbDbut7d6flcAAABwWOX5/3Ck+PuPftoan7+T9v8TGy/Up/z/TMe+/J7tRr98z196LT4AAAAcCXn+/4tI8aeL77Tm0evO/zvm/3+rPc7+0mfXewu0agf6lP+f7dhXK+4bMbRLZQcAAAAAAAAAAAAAAAAAAICDopKy+E+keLc6kMoJ/3c0/9/Mxgv1afz/uY59M7E36//1/FIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgkMoii7lI8enza+nFfMe3I052fgIAAACH3v8CAAD//16XHzs=")
write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc)
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178)
open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)

1m51.498538447s ago: executing program 4 (id=73):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178)
open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1)

1m51.448157918s ago: executing program 2 (id=74):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32}, 0x94)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc60040f030047000000053582c137153e370248018000", 0x29}], 0x1}, 0x0)
close(r0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4000, r0}, 0x18)
ioctl$TUNGETVNETLE(r0, 0x40047459, 0x0)
r3 = socket$kcm(0xa, 0x6, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10d, 0xa, &(0x7f0000000040), 0x4)
r4 = socket$kcm(0x28, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x20, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1]}, 0x94)
r5 = socket$kcm(0x11, 0x2, 0x0)
r6 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000000c0)=r5, 0x8)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000", @ANYRES32=r7], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000440)=[{&(0x7f0000000880)="d80000001e0081054e81f78206000000000000000a0014260360cf9808000f00245bde1625fcb8b20800094014000000035c0461c1d67f6f94007134cf6efb8000d74748420a963aa007a290457f01898102e807ad522a4807f13af8030ab316277ce07bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8716a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1ca9781ed0bffece0b42a9eca0200e6d5d40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x40800)
close(r5)
r9 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)=r9, 0x8)
sendmsg(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x4010)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)
ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040))

1m51.032980008s ago: executing program 32 (id=73):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178)
open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1)

1m50.804120564s ago: executing program 2 (id=77):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x4e20, @dev}, 0x10, 0x0}, 0x400c080)

1m50.225434098s ago: executing program 33 (id=77):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x4e20, @dev}, 0x10, 0x0}, 0x400c080)

1m42.73437806s ago: executing program 1 (id=121):
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000500)={[{@utf8}, {@fat=@dos1xfloppy}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@fat=@check_normal}, {@shortname_win95}, {@uni_xlateno}, {@shortname_lower}, {@uni_xlateno}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@numtail}, {@shortname_winnt}, {@numtail}, {@fat=@discard}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}]}, 0xfd, 0x2c6, &(0x7f00000010c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x101042, 0x15)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r2)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x74, r3, 0x800, 0x20}, 0x74}, 0x1, 0x0, 0x0, 0x404c844}, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7)
syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x538, 0x2c0, 0x398, 0x398, 0x398, 0x0, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0xffffff00], [], 'nicvf0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@empty, 0x39, 0x16}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x0, 0x5, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@ipv6={@mcast1, @loopback, [], [], 'batadv_slave_0\x00', 'ipvlan1\x00', {}, {}, 0x2}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'batadv0\x00', 'virt_wifi0\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)

1m42.32590494s ago: executing program 1 (id=125):
r0 = fsopen(&(0x7f0000000040)='ocfs2_dlmfs\x00', 0x0)
r1 = syz_open_dev$admmidi(0x0, 0x20, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r3, 0x0, 0x0)
readv(r1, &(0x7f00000000c0)=[{&(0x7f0000001fc0)=""/209, 0xd1}], 0x1)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20000044)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x5, 0x559a, &(0x7f0000005680)="$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")
r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x3)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
kcmp(r2, 0x0, 0x0, r0, 0xffffffffffffffff)
open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0)
r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
rt_sigqueueinfo(0x0, 0x14, &(0x7f0000000380)={0x6, 0x8, 0x10})
ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}})

1m39.955881038s ago: executing program 1 (id=132):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
writev(r0, &(0x7f0000000480)=[{&(0x7f0000000140)="2e1221b23bb601c476d3df163e75963d86dd606712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000280)="8bcceb0b6f624c06000085087509000000000800", 0x14}, {&(0x7f0000000400)="be5802a8515d2d2a5b", 0x9}], 0x3)

1m38.059424264s ago: executing program 1 (id=138):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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")
write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc)
open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)

1m37.80553686s ago: executing program 1 (id=141):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf2501000000080001000300000008000200020000001c000480050003000100000005000318050000000500030007"], 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x20000040)

1m36.925267882s ago: executing program 1 (id=144):
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0)
sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="579f28bd7080fcdbdf25160100000c0006000100000001"], 0x20}, 0x1, 0x0, 0x0, 0x20054004}, 0x200440c4)

1m36.620575059s ago: executing program 34 (id=144):
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0)
sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="579f28bd7080fcdbdf25160100000c0006000100000001"], 0x20}, 0x1, 0x0, 0x0, 0x20054004}, 0x200440c4)

1m36.615023859s ago: executing program 3 (id=146):
unshare(0x60000600)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2804000, &(0x7f0000000140)={[{@jqfmt_vfsv0}, {@nomblk_io_submit}, {@noblock_validity}, {@nomblk_io_submit}, {@inlinecrypt}, {@grpquota}, {@nomblk_io_submit}, {@noinit_itable}, {@dioread_nolock}]}, 0x1, 0x5aa, &(0x7f0000000e40)="$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")
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'lo\x00', 0x3}, 0x18)

1m32.115108928s ago: executing program 6 (id=167):
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x800)
r0 = socket(0xa, 0x5, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000008c0)=ANY=[], 0x5c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)=""/11, 0x1}, {0x0, 0x43}], 0x2, 0x5, 0x20)
syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

1m30.715636453s ago: executing program 6 (id=168):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
lseek(r1, 0xad, 0x1)
connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$kcm(0x29, 0x2, 0x0)
openat$autofs(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
dup(0xffffffffffffffff)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
unshare(0x2a020400)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x9}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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")
openat(0xffffffffffffff9c, 0x0, 0x181242, 0x148)
r2 = open(&(0x7f00000000c0)='./file1\x00', 0x167842, 0x21)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)

1m29.506791052s ago: executing program 6 (id=170):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m29.18137601s ago: executing program 6 (id=172):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178)
open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)

1m28.853353448s ago: executing program 6 (id=174):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178)
open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)

1m28.728805131s ago: executing program 3 (id=176):
syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x185d811, 0x0, 0x40, 0x0, &(0x7f0000000140))
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078)

1m28.157416825s ago: executing program 3 (id=180):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/drivers/isp1760/new_id\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)='10b5 5406 ffffffff fffffff', 0x1a)

1m28.157239145s ago: executing program 6 (id=181):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x5, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e23, @private=0xa010101}}}, 0x108)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000003c0)={0x8, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e20, @multicast1}}}, 0x108)
setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000280)={0x8, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e25, @empty}}}, 0x108)

1m26.966954504s ago: executing program 35 (id=181):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x5, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e23, @private=0xa010101}}}, 0x108)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000003c0)={0x8, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e20, @multicast1}}}, 0x108)
setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000280)={0x8, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e25, @empty}}}, 0x108)

1m26.951864664s ago: executing program 3 (id=184):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178)
open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)

1m26.735675519s ago: executing program 3 (id=186):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001"], 0x18}, 0x10)

1m25.693394885s ago: executing program 3 (id=192):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178)
open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)

1m25.505170489s ago: executing program 36 (id=192):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178)
open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)

8.321280757s ago: executing program 0 (id=693):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)

8.020541214s ago: executing program 0 (id=697):
socket$inet6(0xa, 0x800000000000002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x240403, 0x0)
syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
socket$inet6(0xa, 0x80002, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fsopen(&(0x7f0000000000)='cgroup\x00', 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000))

7.917685527s ago: executing program 0 (id=700):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/mcfilter\x00')
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x13, r0, 0xa905d000)

7.742046521s ago: executing program 0 (id=703):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0xfffffbfd, [{0xa, 0x2}]}, @func={0x7, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x61]}}, 0x0, 0x3f}, 0x28)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @remote, 0xb}, 0x1c)
syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0)

7.515984186s ago: executing program 0 (id=708):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000380)="15", 0x1}], 0x1, 0x800000, 0x3)
sendfile(r0, r0, 0x0, 0x24002de8)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x4000005, 0x0, 0xffffffff, 0x18, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "07a9400978042a8bfe1406584ae7df4af14e1df82d00", [0x7d, 0xd]})

7.194726494s ago: executing program 0 (id=710):
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
unshare(0x68040200)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x2c000850)

4.001229762s ago: executing program 8 (id=735):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.835838916s ago: executing program 8 (id=736):
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x3)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@empty, 0xf23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0xff}, {0x2179, 0x110002, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0xffffffff, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x3, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in=@broadcast, 0x210000, 0x3c}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x1a, 0x0, 0x0, 0xfffffffb}}, 0xe8)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0)

3.706076059s ago: executing program 8 (id=738):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
mknod$loop(0x0, 0x6000, 0x1)
syz_open_dev$tty1(0xc, 0x4, 0x1)
signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x8]}, 0x8, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x1ffc, 0x5}]})
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
set_mempolicy(0x6005, &(0x7f0000000080)=0x1, 0x4)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3, 0xfff3}, {0x1}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101000000"], 0x57)

3.309270459s ago: executing program 5 (id=740):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000380)={'pim6reg0\x00', 0x400})
ioctl$TUNGETVNETLE(r0, 0x800454dd, 0x0)
close(0x3)

3.125293244s ago: executing program 9 (id=743):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f0000000200), 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x801)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000080))
openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0xc0844123, &(0x7f00000001c0))
r3 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
write$snddsp(r3, &(0x7f0000000500)="a70704558d3c3da3d6cff7bdf1fa0d6836ea281f705792001f223e6214448f410095282e2d0ac2e2d675077b9f9ce2efc9a0cf90f656c554d3a0a58af45b54748a909dd3a675109263d256eda07fe8269df956804807000000049154c06552ea74e3381add2258c7c0ecd947f305b5d7189163830dff95b8618df7924b0080bec37059c0f5d7d3c42a3eae4450f7c7a1635a92ff576b46cb07023b19d98d8be7b3fad0cbf5ae64cf97179af23a3978637fd8b7a85c6b12f46a738dc5d5af9e5e0073fdd7b8ee5bc72939ffe607", 0xfffffe26)

3.110885804s ago: executing program 8 (id=744):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x3, 0xc)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x400000000000004)
r4 = socket$xdp(0x2c, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000340))
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0xffff, 0x70bd2c, 0x25dfdbfb, {}, [{0x64, 0x1, [@m_nat={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xaf, 0x1, 0x2e3fa6bf2c47fb38, 0x1000, 0x10}, @empty, @multicast1, 0xff000000}}]}, {0x10, 0x6, "5422002fcf6706afb352af16"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24004040}, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)
r6 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r7=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004)
writev(r3, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)
write(r1, &(0x7f0000000040)="effd00001000ff00fd4344c007110000", 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, 0x3, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xf}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0xfffffffffffffd03, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7b4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xffff}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280))

3.030350996s ago: executing program 7 (id=745):
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000004240), &(0x7f0000004340)=0x8)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r2 = socket(0xa, 0x3, 0x87)
sendto(r2, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80)
mount$cgroup(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0)
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
prctl$PR_GET_SECCOMP(0x15)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
prctl$PR_GET_SECCOMP(0x15)
syz_open_dev$MSR(&(0x7f0000000000), 0x6, 0x0)

2.828293371s ago: executing program 5 (id=746):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x9}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x4e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

2.8274869s ago: executing program 7 (id=747):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0xa4}}, 0x0)

1.888847343s ago: executing program 7 (id=748):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x30, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x4004880)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014)

1.821383465s ago: executing program 9 (id=749):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./file0/usb_gadget/g1/idVendor\x00', 0x2, 0x0)
write(r0, &(0x7f0000000f00)='0x1d6b\x00', 0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./file0/usb_gadget/g1/idProduct\x00', 0x2, 0x0)
write(r1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./file0/usb_gadget/g1/configs/c.1\x00', 0x1ff)
symlink(&(0x7f0000001300)='file0/usb_gadget/g1/functions/ffs.usb0\x00', &(0x7f0000001400)='./file0/usb_gadget/g1/configs/c.1/ffs.usb0\x00')
pipe2(&(0x7f0000002000)={0x0, <r2=>0x0}, 0x0)
write(r2, &(0x7f0000002100)='functionfs', 0xa)
mount(&(0x7f0000000600)=@filename='usb0\x00', &(0x7f0000000500)='./file1\x00', &(0x7f0000000700)='gadgetfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000900)='./file1/ep0\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_open_dev$usbfs(0x0, 0x0, 0x2)

1.768483816s ago: executing program 5 (id=750):
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./file0/usb_gadget/g1/idVendor\x00', 0x2, 0x0)
write(r0, &(0x7f0000000f00)='0x1d6b\x00', 0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./file0/usb_gadget/g1/idProduct\x00', 0x2, 0x0)
write(r1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./file0/usb_gadget/g1/configs/c.1\x00', 0x1ff)
symlink(&(0x7f0000001300)='file0/usb_gadget/g1/functions/ffs.usb0\x00', &(0x7f0000001400)='./file0/usb_gadget/g1/configs/c.1/ffs.usb0\x00')
pipe2(&(0x7f0000002000)={0x0, <r2=>0x0}, 0x0)
write(r2, &(0x7f0000002100)='functionfs', 0xa)
mount(&(0x7f0000000600)=@filename='usb0\x00', &(0x7f0000000500)='./file1\x00', &(0x7f0000000700)='gadgetfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000900)='./file1/ep0\x00', 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r3, &(0x7f0000000d00)='dummy_udc.0', 0xb)
syz_open_dev$usbfs(0x0, 0x0, 0x2)

1.691081928s ago: executing program 9 (id=751):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xe, 0x7f, 0x800, 0x5}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0c0}, 0x44840)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0)

1.673232119s ago: executing program 8 (id=752):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
writev(r1, &(0x7f0000000800)=[{&(0x7f0000000240)="90d6", 0x2}], 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)

1.61098215s ago: executing program 5 (id=753):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0xb8}}, 0x0)

1.517207112s ago: executing program 5 (id=754):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
mknod$loop(0x0, 0x6000, 0x1)
syz_open_dev$tty1(0xc, 0x4, 0x1)
signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x8]}, 0x8, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x1ffc, 0x5}]})
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
set_mempolicy(0x6005, &(0x7f0000000080)=0x1, 0x4)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3, 0xfff3}, {0x1}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101000000"], 0x57)

1.395046425s ago: executing program 7 (id=755):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
fgetxattr(r0, &(0x7f0000000200)=@known='system.posix_acl_access\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x10, r0, 0xb2b2f000)
socket$packet(0x11, 0x3, 0x300)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000580))
ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000000)={0x1, &(0x7f0000005700)=[{0x6, 0x0, 0x5, 0xfc}]})
r2 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCGIDLE(r1, 0x8010743f, 0x0)
connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000300))
ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000001f00))
sendmmsg(r2, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)="0281", 0x2}], 0x1}}], 0x1, 0x24005805)

1.22483081s ago: executing program 9 (id=756):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
listen(r3, 0x0)
setsockopt$sock_timeval(r3, 0x1, 0x14, 0x0, 0x0)
syz_emit_vhci(0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, 0x0, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r4, &(0x7f0000000240)="e1", 0x1, 0x200080c1, &(0x7f0000000400)={0xa, 0x2, 0x3ff, @loopback, 0xffffff1f}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='scalable', 0x8)
sendto$inet6(r4, &(0x7f0000000180)='9', 0xfffffffffffffd46, 0x4820, 0x0, 0xffffffffffffff3e)

1.19526399s ago: executing program 5 (id=757):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={0x0}}, 0x20000000)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r2, r2)
setpgid(0x0, r2)
execve(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0)

248.050414ms ago: executing program 8 (id=758):
r0 = fsopen(&(0x7f0000000040)='ocfs2_dlmfs\x00', 0x0)
r1 = syz_open_dev$admmidi(0x0, 0x20, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r3, 0x0, 0x0)
readv(r1, &(0x7f00000000c0)=[{&(0x7f0000001fc0)=""/209, 0xd1}], 0x1)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20000044)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x5, 0x559a, &(0x7f0000005680)="$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")
r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x3)
kcmp(r2, 0x0, 0x0, r0, 0xffffffffffffffff)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0)
r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendfile(r5, r5, 0x0, 0x1000200201005)

219.587934ms ago: executing program 9 (id=759):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00'})
sendmsg$NL802154_CMD_SET_CHANNEL(r1, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r3)
sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8004000}, 0x4008804)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000)
setxattr$incfs_metadata(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0)
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r8 = dup2(r7, r7)
ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x3, 0x40000000, 0x10})
ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0)
r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8402)
ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5393, &(0x7f0000000000))
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x8084}, 0x20040000)

202.333115ms ago: executing program 7 (id=760):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

1.2153ms ago: executing program 9 (id=761):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./file0/usb_gadget/g1/idVendor\x00', 0x2, 0x0)
write(r0, &(0x7f0000000f00)='0x1d6b\x00', 0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./file0/usb_gadget/g1/idProduct\x00', 0x2, 0x0)
write(r1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./file0/usb_gadget/g1/configs/c.1\x00', 0x1ff)
symlink(&(0x7f0000001300)='file0/usb_gadget/g1/functions/ffs.usb0\x00', &(0x7f0000001400)='./file0/usb_gadget/g1/configs/c.1/ffs.usb0\x00')
pipe2(&(0x7f0000002000)={0x0, <r2=>0x0}, 0x0)
write(r2, &(0x7f0000002100)='functionfs', 0xa)
mount(&(0x7f0000000600)=@filename='usb0\x00', &(0x7f0000000500)='./file1\x00', &(0x7f0000000700)='gadgetfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000900)='./file1/ep0\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_open_dev$usbfs(0x0, 0x0, 0x2)

0s ago: executing program 7 (id=762):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff)
chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='control/header/h\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='streaming/uncompressed/u\x00', 0x1ff)
symlink(&(0x7f0000001000)='control/header/h\x00', &(0x7f0000001100)='control/class/fs/h\x00')
symlink(&(0x7f0000001400)='streaming/uncompressed/u\x00', &(0x7f0000001500)='streaming/header/h/u\x00')
symlink(0x0, &(0x7f0000001700)='streaming/class/fs/h\x00')
symlink(&(0x7f0000001800)='streaming/header/h\x00', &(0x7f0000001900)='streaming/class/hs/h\x00')
symlink(&(0x7f0000001a00)='streaming/header/h\x00', &(0x7f0000001b00)='streaming/class/ss/h\x00')
fchdir(r0)
symlink(&(0x7f0000001c00)='functions/uvc.usb0\x00', &(0x7f0000001d00)='configs/c.1/uvc.usb0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x0)
write(r1, &(0x7f0000001f00)='usbip-vudc.0', 0xc)

kernel console output (not intermixed with test programs):

om 0 to 64
[   80.961327][ T4528] BTRFS info (device loop0): has skinny extents
[   81.181592][ T4561] loop1: detected capacity change from 0 to 32768
[   81.193039][ T4561] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.50 (4561)
[   81.464894][ T4528] BTRFS info (device loop0): enabling ssd optimizations
[   81.473349][ T4189] BFS-fs: bfs_iget(): Bad inode number loop4:0000fe02
[   81.491938][ T4189] BFS-fs: bfs_iget(): Bad inode number loop4:0000fe02
[   81.572178][   T26] audit: type=1800 audit(1784973332.909:8): pid=4528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.44" name="file1" dev="loop0" ino=260 res=0 errno=0
[   81.654648][ T4595] device syzkaller0 entered promiscuous mode
[   81.672499][ T4268] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by udevd (4268)
[   81.675337][ T4597] netlink: 60 bytes leftover after parsing attributes in process `syz.2.56'.
[   81.761429][ T4597] netlink: 60 bytes leftover after parsing attributes in process `syz.2.56'.
[   81.935680][ T4264] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop0 scanned by udevd (4264)
[   82.438982][ T4613] loop1: detected capacity change from 0 to 64
[   82.525681][ T4597] netlink: 60 bytes leftover after parsing attributes in process `syz.2.56'.
[   82.545259][ T4608] netlink: 'syz.0.58': attribute type 10 has an invalid length.
[   82.575143][ T4608] netlink: 2 bytes leftover after parsing attributes in process `syz.0.58'.
[   82.626882][ T4608] device hsr0 entered promiscuous mode
[   82.643289][ T4608] bridge0: port 3(hsr0) entered blocking state
[   82.659013][ T4615] netlink: 'syz.2.62': attribute type 29 has an invalid length.
[   82.674795][ T4608] bridge0: port 3(hsr0) entered disabled state
[   82.707542][ T4608] bridge0: port 3(hsr0) entered blocking state
[   82.714047][ T4608] bridge0: port 3(hsr0) entered forwarding state
[   82.826531][ T4615] netlink: 'syz.2.62': attribute type 29 has an invalid length.
[   82.848299][ T4616] netlink: 'syz.2.62': attribute type 29 has an invalid length.
[   82.951033][ T4622] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.65'.
[   83.020181][ T4618] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.059577][ T4618] team0: Port device bond0 added
[   83.115722][ T4627] loop2: detected capacity change from 0 to 64
[   83.239825][    T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.400280][    T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.508962][    T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.621974][    T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.643550][ T4635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   83.747472][ T4637] loop2: detected capacity change from 0 to 64
[   83.786767][ T4635] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   83.809710][ T4620] loop0: detected capacity change from 0 to 32768
[   83.866736][ T4620] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[   83.894395][ T4620] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   83.946008][ T4620] BTRFS info (device loop0): use zstd compression, level 3
[   83.966614][ T4620] BTRFS info (device loop0): using free space tree
[   83.986864][ T4620] BTRFS info (device loop0): has skinny extents
[   84.037894][ T4188] BFS-fs: bfs_iget(): Bad inode number loop2:0000fe02
[   84.045174][ T4188] BFS-fs: bfs_iget(): Bad inode number loop2:0000fe02
[   84.356677][ T4620] BTRFS info (device loop0): enabling ssd optimizations
[   84.412722][ T4632] loop1: detected capacity change from 0 to 32768
[   84.475767][   T26] audit: type=1800 audit(1784973335.819:9): pid=4620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.64" name="bus" dev="loop0" ino=263 res=0 errno=0
[   84.569545][ T4632] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.68 (4632)
[   84.636089][   T26] audit: type=1800 audit(1784973335.849:10): pid=4620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.64" name="bus" dev="loop0" ino=263 res=0 errno=0
[   84.847089][ T4264] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (4264)
[   85.433951][ T4685] loop3: detected capacity change from 0 to 64
[   85.534609][ T4687] loop1: detected capacity change from 0 to 64
[   85.900282][ T4700] Zero length message leads to an empty skb
[   85.909797][ T4671] chnl_net:caif_netlink_parms(): no params data found
[   86.089542][ T4706] netlink: 60 bytes leftover after parsing attributes in process `syz.0.87'.
[   86.153548][ T4706] netlink: 60 bytes leftover after parsing attributes in process `syz.0.87'.
[   86.203939][ T4708] netlink: 60 bytes leftover after parsing attributes in process `syz.0.87'.
[   86.275969][ T4706] netlink: 60 bytes leftover after parsing attributes in process `syz.0.87'.
[   86.332896][ T4697] loop3: detected capacity change from 0 to 32768
[   86.556326][ T4697] ODEBUG: Out of memory. ODEBUG disabled
[   86.569655][ T1110] cfg80211: failed to load regulatory.db
[   86.625513][ T4671] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.667300][ T4671] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.697685][ T4671] device bridge_slave_0 entered promiscuous mode
[   86.756165][ T4671] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.787682][ T4671] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.826667][ T4671] device bridge_slave_1 entered promiscuous mode
[   86.837066][ T4721] loop3: detected capacity change from 0 to 4096
[   86.856180][ T4690] chnl_net:caif_netlink_parms(): no params data found
[   87.105233][    T9] device hsr_slave_0 left promiscuous mode
[   87.137318][    T9] device hsr_slave_1 left promiscuous mode
[   87.147057][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.154539][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[   87.158294][ T4480] Bluetooth: hci0: command 0x0409 tx timeout
[   87.213520][ T4697] syz.3.85 (4697): drop_caches: 2
[   87.230634][ T4721] EXT4-fs (loop3): bad block size 8192
[   87.232722][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.284776][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[   87.308219][    T9] device bridge_slave_1 left promiscuous mode
[   87.315462][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.436820][    T9] device bridge_slave_0 left promiscuous mode
[   87.443140][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.578233][    T9] device veth1_macvtap left promiscuous mode
[   87.589343][ T4723] loop0: detected capacity change from 0 to 32768
[   87.610657][    T9] device veth0_macvtap left promiscuous mode
[   87.633455][    T9] device veth1_vlan left promiscuous mode
[   87.639383][ T4723] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.89 (4723)
[   87.660988][    T9] device veth0_vlan left promiscuous mode
[   87.714206][ T4723] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[   87.739578][ T4723] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   87.784241][ T4480] Bluetooth: hci3: command 0x0409 tx timeout
[   87.785080][ T4723] BTRFS info (device loop0): use zstd compression, level 3
[   87.834865][ T4723] BTRFS info (device loop0): using free space tree
[   87.846734][ T4723] BTRFS info (device loop0): has skinny extents
[   88.041775][ T4723] BTRFS info (device loop0): enabling ssd optimizations
[   88.124745][   T26] audit: type=1800 audit(1784973339.459:11): pid=4723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.89" name="bus" dev="loop0" ino=263 res=0 errno=0
[   88.237706][   T26] audit: type=1800 audit(1784973339.489:12): pid=4723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.89" name="bus" dev="loop0" ino=263 res=0 errno=0
[   88.283813][ T4731] loop3: detected capacity change from 0 to 40427
[   88.414832][ T4731] F2FS-fs (loop3): build fault injection attr: rate: 26, type: 0x1ffff
[   88.466596][ T4731] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x76
[   88.523909][ T4731] F2FS-fs (loop3): invalid crc value
[   88.586127][ T4731] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x185/0x4b0
[   88.628894][ T4731] F2FS-fs (loop3): Found nat_bits in checkpoint
[   88.635580][ T4731] F2FS-fs (loop3) : inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x48d5/0x7050
[   88.726825][ T4731] F2FS-fs (loop3): Failed to initialize F2FS node manager (-12)
[   89.028580][    T9] team0 (unregistering): Port device team_slave_1 removed
[   89.064280][    T9] team0 (unregistering): Port device team_slave_0 removed
[   89.096034][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   89.147285][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   89.197060][ T4231] Bluetooth: hci0: command 0x041b tx timeout
[   89.281179][    T9] bond0 (unregistering): Released all slaves
[   89.382662][ T4671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.524971][ T4771] loop1: detected capacity change from 0 to 512
[   89.638135][ T4771] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   89.661089][ T4771] ext4 filesystem being mounted at /22/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.781428][ T4671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.847583][ T4401] Bluetooth: hci3: command 0x041b tx timeout
[   89.859873][ T4671] team0: Port device team_slave_0 added
[   89.904682][ T4671] team0: Port device team_slave_1 added
[   89.983133][ T4785] loop0: detected capacity change from 0 to 64
[   90.113663][ T4786] device syzkaller0 entered promiscuous mode
[   90.124765][ T4671] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.132893][ T4671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.160506][ T4671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.173272][ T4690] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.199464][ T4690] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.208125][ T4690] device bridge_slave_0 entered promiscuous mode
[   90.218700][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[   90.230187][ T4671] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.238510][ T4671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.307338][ T4671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.336732][ T4690] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.348207][ T4690] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.371357][ T4690] device bridge_slave_1 entered promiscuous mode
[   90.530424][ T4671] device hsr_slave_0 entered promiscuous mode
[   90.551337][ T4671] device hsr_slave_1 entered promiscuous mode
[   90.583440][ T4671] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.609667][ T4803] loop3: detected capacity change from 0 to 764
[   90.619399][ T4671] Cannot create hsr debugfs directory
[   90.637610][ T4690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.674364][ T4690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.706303][ T4800] device syzkaller0 entered promiscuous mode
[   90.743791][ T4803] Symlink component flag not implemented
[   90.797049][ T4803] Symlink component flag not implemented
[   90.810692][ T4803] Symlink component flag not implemented (129)
[   90.818777][ T4690] team0: Port device team_slave_0 added
[   90.846638][ T4803] Symlink component flag not implemented (6)
[   90.956633][ T4690] team0: Port device team_slave_1 added
[   90.978399][ T4813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'.
[   90.998670][ T4813] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5)
[   91.071695][ T4690] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.079233][ T4690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.170867][ T4817] capability: warning: `syz.0.109' uses 32-bit capabilities (legacy support in use)
[   91.184971][ T4690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.252392][ T4819] loop1: detected capacity change from 0 to 512
[   91.266226][ T4690] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.276749][ T1110] Bluetooth: hci0: command 0x040f tx timeout
[   91.286577][ T4690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.325503][ T4819] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   91.353750][ T4690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.384356][ T4819] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   91.537732][ T4819] EXT4-fs error (device loop1): ext4_validate_inode_bitmap:106: comm syz.1.110: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20
[   91.571503][ T4671] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   91.611722][ T4830] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem
[   91.647218][ T4690] device hsr_slave_0 entered promiscuous mode
[   91.688864][ T4690] device hsr_slave_1 entered promiscuous mode
[   91.722835][ T4690] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.740805][ T4690] Cannot create hsr debugfs directory
[   91.755485][ T4826] device syzkaller0 entered promiscuous mode
[   91.771822][ T4671] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   91.798980][ T4671] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   91.849153][ T4671] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   91.918834][ T1110] Bluetooth: hci3: command 0x040f tx timeout
[   91.986145][ T4841] loop1: detected capacity change from 0 to 1024
[   92.062604][ T4844] loop3: detected capacity change from 0 to 64
[   92.101636][ T4841] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   92.178401][ T4841] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpjquota=,noquota,barrier,auto_da_alloc,dioread_nolock,. Quota mode: none.
[   92.245055][ T4841] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.282451][ T4841] EXT4-fs (loop1): Online defrag not supported with bigalloc
[   92.820038][ T4865] loop1: detected capacity change from 0 to 256
[   92.997128][ T4671] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.092674][ T4671] 8021q: adding VLAN 0 to HW filter on device team0
[   93.176688][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   93.193553][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   93.247605][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   93.259148][ T4878] loop3: detected capacity change from 0 to 132
[   93.305691][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   93.325847][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.333031][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.356589][ T1110] Bluetooth: hci0: command 0x0419 tx timeout
[   93.379610][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   93.434847][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   93.444608][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   93.479631][ T4244] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.486904][ T4244] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.535315][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   93.579275][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   93.588927][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   93.641532][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   93.693600][ T4690] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   93.754494][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   93.804066][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   93.847747][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   93.892833][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   93.921854][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   93.971865][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   94.006716][ T1110] Bluetooth: hci3: command 0x0419 tx timeout
[   94.015868][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   94.053166][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   94.082829][ T4869] loop0: detected capacity change from 0 to 32768
[   94.122595][ T4690] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   94.141029][ T4869] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.123 (4869)
[   94.165962][ T4690] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   94.189982][ T4869] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[   94.207265][ T4869] BTRFS info (device loop0): setting nodatasum
[   94.223397][ T4690] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   94.242365][ T4869] BTRFS info (device loop0): force zlib compression, level 3
[   94.255128][ T4869] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[   94.295109][ T4869] BTRFS info (device loop0): use lzo compression, level 0
[   94.332535][ T4869] BTRFS info (device loop0): turning on flush-on-commit
[   94.362096][ T4880] loop1: detected capacity change from 0 to 32768
[   94.376553][ T4869] BTRFS info (device loop0): enabling auto defrag
[   94.383066][ T4869] BTRFS info (device loop0): max_inline at 4096
[   94.460090][ T4880] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.125 (4880)
[   94.467103][ T4869] BTRFS info (device loop0): using free space tree
[   94.499020][ T4690] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.514542][ T4869] BTRFS info (device loop0): has skinny extents
[   94.553774][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   94.594729][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   94.604918][ T4880] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[   94.657085][ T4880] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   94.660101][ T4690] 8021q: adding VLAN 0 to HW filter on device team0
[   94.707335][ T4880] BTRFS info (device loop1): use zstd compression, level 3
[   94.720032][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   94.730929][ T4880] BTRFS info (device loop1): using free space tree
[   94.737824][ T4880] BTRFS info (device loop1): has skinny extents
[   94.749224][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   94.777634][ T4869] BTRFS info (device loop0): enabling ssd optimizations
[   94.826062][ T4239] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.833263][ T4239] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.918400][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   94.949755][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   94.990690][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   95.017431][ T4880] BTRFS info (device loop1): enabling ssd optimizations
[   95.069251][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.076379][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.084037][   T26] audit: type=1800 audit(1784973346.409:13): pid=4880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.125" name="bus" dev="loop1" ino=263 res=0 errno=0
[   95.138022][   T26] audit: type=1800 audit(1784973346.469:14): pid=4880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.125" name="bus" dev="loop1" ino=263 res=0 errno=0
[   95.176656][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   95.185398][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   95.214590][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   95.235149][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   95.244158][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   95.253836][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   95.283966][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   95.305448][ T4943] netlink: 184 bytes leftover after parsing attributes in process `syz.3.128'.
[   95.323856][ T4690] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   95.456902][ T4690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   95.528102][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   95.542948][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   95.551921][ T4953] tipc: Can't bind to reserved service type 0
[   95.569541][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   95.590520][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   95.623521][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   95.704015][ T4671] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.755816][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   95.776918][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   96.174880][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   96.198554][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   96.234921][    T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.292264][ T4690] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.373247][    T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.547476][    T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.595322][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   96.633543][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   96.692545][    T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.766626][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   96.774907][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   96.834917][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   96.885806][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   96.908653][ T4671] device veth0_vlan entered promiscuous mode
[   96.961347][ T4671] device veth1_vlan entered promiscuous mode
[   97.086123][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   97.104509][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   97.130807][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   97.152152][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   97.237871][ T4671] device veth0_macvtap entered promiscuous mode
[   97.272112][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   97.290684][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   97.305693][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   97.324720][ T4671] device veth1_macvtap entered promiscuous mode
[   97.389582][ T4690] device veth0_vlan entered promiscuous mode
[   97.417777][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   97.440819][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   97.475052][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   97.491874][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   97.533162][ T5016] loop1: detected capacity change from 0 to 64
[   97.551742][ T4690] device veth1_vlan entered promiscuous mode
[   97.576958][ T5014] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   97.662595][ T4191] BFS-fs: bfs_iget(): Bad inode number loop1:0000fe02
[   97.686067][ T4191] BFS-fs: bfs_iget(): Bad inode number loop1:0000fe02
[   97.718774][ T5005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.137'.
[   97.748077][ T4671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.766104][ T4671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.776970][ T4671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.787766][ T4671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.798019][ T4671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.819128][ T4671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.831100][ T4671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.842272][ T4671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.887658][ T4671] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.919074][ T4671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.946710][ T4671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.966502][ T4671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.987422][ T4671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.007910][ T4671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.036519][ T4671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.073286][ T4671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.129930][ T4671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.142828][ T4671] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.189431][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   98.205149][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   98.214651][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   98.230153][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   98.247850][ T5020] loop0: detected capacity change from 0 to 32768
[   98.248253][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   98.266073][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   98.279205][ T5020] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.140 (5020)
[   98.296008][ T4671] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.314772][ T4671] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.315622][ T5020] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[   98.334657][ T5020] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   98.344496][ T5020] BTRFS info (device loop0): use zstd compression, level 3
[   98.355997][ T4671] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.357080][ T5020] BTRFS info (device loop0): using free space tree
[   98.370159][ T4671] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.380208][ T5020] BTRFS info (device loop0): has skinny extents
[   98.505777][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   98.543000][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   98.564292][ T5035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.143'.
[   98.589554][ T5020] BTRFS info (device loop0): enabling ssd optimizations
[   98.631431][   T26] audit: type=1800 audit(1784973349.969:15): pid=5020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.140" name="bus" dev="loop0" ino=263 res=0 errno=0
[   98.735873][ T4690] device veth0_macvtap entered promiscuous mode
[   98.743625][   T26] audit: type=1800 audit(1784973349.999:16): pid=5020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.140" name="bus" dev="loop0" ino=263 res=0 errno=0
[   98.788727][ T4690] device veth1_macvtap entered promiscuous mode
[   98.812034][ T4690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.823249][ T4690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.833880][ T4690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.844788][ T4690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.861624][ T4690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.886874][ T4690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.906496][ T4690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.936526][ T4690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.946418][ T4690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.968111][ T4690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.997350][ T4690] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.047746][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   99.066212][ T5051] loop3: detected capacity change from 0 to 1024
[   99.075183][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   99.124941][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   99.173080][ T5051] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[   99.191597][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   99.207541][ T5051] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[   99.229116][ T5051] EXT4-fs (loop3): inline encryption not supported
[   99.250846][ T5051] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[   99.259729][ T4690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.293240][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.303924][ T4690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.350890][ T5051] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   99.375138][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.390865][ T4690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.404307][ T4690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.424364][ T4690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.435462][ T4690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.447080][ T4690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.457962][ T4690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.468026][ T4690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.478576][ T4690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.487104][ T5051] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,nomblk_io_submit,noblock_validity,nomblk_io_submit,inlinecrypt,grpquota,nomblk_io_submit,noinit_itable,dioread_nolock,,errors=continue. Quota mode: writeback.
[   99.492498][ T4690] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.530756][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   99.546428][ T5051] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.558762][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   99.607254][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   99.682053][ T4690] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.688316][ T5064] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 3, id = 0
[   99.731403][ T4690] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.749869][ T4690] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.759890][ T4690] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.883666][ T5074] syz.0.149 uses obsolete (PF_INET,SOCK_PACKET)
[   99.949696][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.967989][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.017387][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  100.176144][ T1275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.191927][ T1275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.199210][ T5081] loop0: detected capacity change from 0 to 64
[  100.252808][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  100.287087][ T1275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.295140][ T1275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.341335][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  100.414871][ T5056] chnl_net:caif_netlink_parms(): no params data found
[  100.616194][    T9] device hsr_slave_0 left promiscuous mode
[  100.635831][    T9] device hsr_slave_1 left promiscuous mode
[  100.681046][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.694558][ T5102] loop0: detected capacity change from 0 to 64
[  100.717087][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.735182][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.743104][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.767938][    T9] device bridge_slave_1 left promiscuous mode
[  100.783303][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.832209][    T9] device bridge_slave_0 left promiscuous mode
[  100.841072][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.901541][    T9] device veth1_macvtap left promiscuous mode
[  100.909074][    T9] device veth0_macvtap left promiscuous mode
[  100.922893][    T9] device veth1_vlan left promiscuous mode
[  100.931565][    T9] device veth0_vlan left promiscuous mode
[  100.939730][ T5110] loop0: detected capacity change from 0 to 128
[  100.967507][ T5110] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  101.025745][ T5110] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  101.069348][ T5110] ext2 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  101.446888][ T1110] Bluetooth: hci4: command 0x0409 tx timeout
[  101.486010][    T9] team0 (unregistering): Port device team_slave_1 removed
[  101.517320][    T9] team0 (unregistering): Port device team_slave_0 removed
[  101.533971][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  101.552843][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  101.663888][    T9] bond0 (unregistering): Released all slaves
[  101.819189][ T5104] tipc: Started in network mode
[  101.824551][ T5104] tipc: Node identity , cluster identity 4711
[  101.850318][ T5104] tipc: Failed to obtain node identity
[  101.858136][ T5123] loop5: detected capacity change from 0 to 64
[  101.863022][ T5104] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[  101.988675][ T5056] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.027660][ T5056] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.050781][ T5056] device bridge_slave_0 entered promiscuous mode
[  102.067045][ T4480] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  102.134270][ T4480] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  102.228012][ T5056] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.255919][ T5056] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.298353][ T5056] device bridge_slave_1 entered promiscuous mode
[  102.373562][ T5127] fido_id[5127]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  102.433083][ T5056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  102.478219][ T5056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.574655][ T5131] device syzkaller0 entered promiscuous mode
[  102.614542][ T5056] team0: Port device team_slave_0 added
[  102.717114][ T5063] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  102.734114][ T5056] team0: Port device team_slave_1 added
[  102.852370][ T5056] batman_adv: batadv0: Adding interface: batadv_slave_0
[  102.877165][ T5056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.994892][ T5056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  103.039821][ T5056] batman_adv: batadv0: Adding interface: batadv_slave_1
[  103.094885][ T5056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.217719][ T5056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  103.401541][ T5056] device hsr_slave_0 entered promiscuous mode
[  103.438756][ T5056] device hsr_slave_1 entered promiscuous mode
[  103.461855][ T5153] loop6: detected capacity change from 0 to 1024
[  103.527011][ T4400] Bluetooth: hci4: command 0x041b tx timeout
[  103.690311][ T5153] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  103.731470][ T5153] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.945464][ T5056] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  103.998349][ T5056] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  104.022382][ T5056] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  104.052617][ T5056] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  104.287642][ T5056] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.354323][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  104.376203][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  104.418906][ T5056] 8021q: adding VLAN 0 to HW filter on device team0
[  104.447102][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  104.464102][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  104.481242][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.488413][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.541526][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  104.578168][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  104.624559][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  104.676686][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.683844][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.721629][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  104.777056][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  104.808897][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  104.858492][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  104.891666][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  104.944887][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  104.980348][ T5056] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  105.026563][ T5056] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  105.058992][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  105.083858][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  105.099970][ T5176] loop6: detected capacity change from 0 to 512
[  105.138504][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  105.160867][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  105.172199][ T5176] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  105.212569][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  105.226002][ T5176] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  105.234569][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  105.354927][ T5176] EXT4-fs error (device loop6): ext4_orphan_get:1432: comm syz.6.168: bad orphan inode 131083
[  105.376686][ T5176] EXT4-fs (loop6): mounted filesystem without journal. Opts: stripe=0x0000000000000009,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  105.431809][   T26] audit: type=1800 audit(1784973356.769:17): pid=5176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.168" name="file1" dev="loop6" ino=15 res=0 errno=0
[  105.599636][ T4400] Bluetooth: hci4: command 0x040f tx timeout
[  105.700790][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  105.715761][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  105.757788][ T5056] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.183821][ T5204] loop5: detected capacity change from 0 to 64
[  106.339378][ T5207] loop6: detected capacity change from 0 to 64
[  106.518159][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  106.532627][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  106.623353][ T4690] BFS-fs: bfs_iget(): Bad inode number loop6:0000fe02
[  106.663500][ T4690] BFS-fs: bfs_iget(): Bad inode number loop6:0000fe02
[  106.677930][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  106.718648][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  106.787079][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  106.832950][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  106.853774][ T5056] device veth0_vlan entered promiscuous mode
[  106.871258][ T5118] Set syz1 is full, maxelem 65536 reached
[  106.921017][ T5056] device veth1_vlan entered promiscuous mode
[  107.015622][ T5224] loop3: detected capacity change from 0 to 128
[  107.065488][   T26] audit: type=1800 audit(1784973358.399:18): pid=5227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.178" name="idVendor" dev="configfs" ino=35837 res=0 errno=0
[  107.097704][ T5227] file system registered
[  107.155961][   T26] audit: type=1800 audit(1784973358.429:19): pid=5227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.178" name="idProduct" dev="configfs" ino=35838 res=0 errno=0
[  107.280899][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  107.299575][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  107.349575][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  107.377811][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  108.140959][ T4591] Bluetooth: hci4: command 0x0419 tx timeout
[  108.378868][ T5056] device veth0_macvtap entered promiscuous mode
[  108.416349][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  108.464152][ T5056] device veth1_macvtap entered promiscuous mode
[  108.494756][ T5056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.511855][ T5056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.528457][ T5056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.556620][ T5056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.571266][ T5242] loop3: detected capacity change from 0 to 64
[  108.581818][ T5056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.636417][ T5056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.694288][ T5056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.731231][ T4190] BFS-fs: bfs_iget(): Bad inode number loop3:0000fe02
[  108.733443][ T5056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.764516][ T4190] BFS-fs: bfs_iget(): Bad inode number loop3:0000fe02
[  108.797620][ T5056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.814807][ T5056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.827905][ T5056] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.843006][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  108.890780][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  108.946246][ T5056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.977332][ T5056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.025836][ T5056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  109.057749][ T5056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.074803][ T5056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  109.104360][ T5056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.131557][ T5251] loop5: detected capacity change from 0 to 8192
[  109.134720][ T5056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  109.158588][ T5056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.175830][ T5056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  109.187047][ T5056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.209173][ T5056] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.266198][ T5251]  loop5: p1 p2 p3
[  109.293792][ T5251] loop5: partition table partially beyond EOD, truncated
[  109.305552][ T5251] loop5: p1 start 51379968 is beyond EOD, truncated
[  109.344656][ T5251] loop5: p3 size 100663552 extends beyond EOD, truncated
[  109.351975][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  109.388701][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  109.413024][ T5056] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.449262][ T5056] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.479690][ T5056] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.493481][ T5056] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.504830][   T26] audit: type=1800 audit(1784973360.839:20): pid=5266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.189" name="idVendor" dev="configfs" ino=36943 res=0 errno=0
[  109.648608][ T4285] udevd[4285]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  109.697819][ T4264] udevd[4264]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  109.834373][   T26] audit: type=1800 audit(1784973361.169:21): pid=5273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.190" name="idVendor" dev="configfs" ino=36411 res=0 errno=0
[  109.905240][    T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.928789][   T26] audit: type=1800 audit(1784973361.199:22): pid=5273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.190" name="idProduct" dev="configfs" ino=37005 res=0 errno=0
[  109.996871][ T4239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.006104][ T5279] loop5: detected capacity change from 0 to 64
[  110.056734][ T4239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.086688][    T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.153304][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  110.254005][    T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.325161][ T5253] chnl_net:caif_netlink_parms(): no params data found
[  110.332264][ T1275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.344766][ T1275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.377430][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  110.425296][    T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.695554][ T5298] loop7: detected capacity change from 0 to 128
[  111.473067][ T4400] Bluetooth: hci2: command 0x0409 tx timeout
[  111.601938][ T5253] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.626659][ T5253] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.651170][ T5298] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  111.681978][ T5309] loop0: detected capacity change from 0 to 512
[  111.693226][ T5253] device bridge_slave_0 entered promiscuous mode
[  111.703531][ T5298] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  111.730823][   T26] audit: type=1800 audit(1784973363.069:23): pid=5310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.201" name="idVendor" dev="configfs" ino=36556 res=0 errno=0
[  111.777409][ T5253] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.785054][ T5253] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.794096][ T5253] device bridge_slave_1 entered promiscuous mode
[  111.839462][   T26] audit: type=1800 audit(1784973363.109:24): pid=5310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.201" name="idProduct" dev="configfs" ino=36557 res=0 errno=0
[  111.879031][ T5298] netlink: 8 bytes leftover after parsing attributes in process `syz.7.145'.
[  111.905340][ T5309] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.200: iget: bad i_size value: 38620345925642
[  111.960790][ T5309] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.200: couldn't read orphan inode 15 (err -117)
[  111.982906][ T5309] EXT4-fs (loop0): mounted filesystem without journal. Opts: acl,quota,journal_dev=0x0000000000000011,bsddf,delalloc,usrjquota=,minixdf,,errors=continue. Quota mode: writeback.
[  112.052140][    T9] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.154868][ T5253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  112.198004][ T5314] loop5: detected capacity change from 0 to 512
[  112.249658][    T9] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.308786][ T5253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  112.373473][ T5314] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  112.396538][ T4230] Bluetooth: hci3: command 0x0409 tx timeout
[  112.437743][    T9] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.488010][ T5314] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  112.581726][ T5325] loop0: detected capacity change from 0 to 8192
[  112.640382][ T5325]  loop0: p1 p3 p4
[  112.648901][ T5325] loop0: partition table partially beyond EOD, truncated
[  112.675610][ T5253] team0: Port device team_slave_0 added
[  112.691507][ T5325] loop0: p1 start 589827 is beyond EOD, truncated
[  112.701111][ T5286] chnl_net:caif_netlink_parms(): no params data found
[  112.725180][ T5325] loop0: p3 start 33554431 is beyond EOD, truncated
[  112.737747][    T9] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.742525][ T5325] loop0: p4 start 167772160 is beyond EOD, truncated
[  112.789646][ T5253] team0: Port device team_slave_1 added
[  112.947190][ T5253] batman_adv: batadv0: Adding interface: batadv_slave_0
[  112.987034][ T5253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.130085][ T5344] hsr0: VLAN not yet supported
[  113.134034][   T26] audit: type=1800 audit(1784973364.469:25): pid=5346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.210" name="idVendor" dev="configfs" ino=37313 res=0 errno=0
[  113.238279][ T5253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  113.301722][   T26] audit: type=1800 audit(1784973364.509:26): pid=5346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.210" name="idProduct" dev="configfs" ino=37314 res=0 errno=0
[  113.363705][ T5253] batman_adv: batadv0: Adding interface: batadv_slave_1
[  113.371487][ T5352] xt_hashlimit: size too large, truncated to 1048576
[  113.382572][ T5253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.604068][ T5253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  113.618416][ T1110] Bluetooth: hci2: command 0x041b tx timeout
[  113.932250][ T5286] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.956675][ T5286] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.965126][ T5286] device bridge_slave_0 entered promiscuous mode
[  114.025024][ T5363] loop5: detected capacity change from 0 to 128
[  114.038437][ T5253] device hsr_slave_0 entered promiscuous mode
[  114.055056][ T5253] device hsr_slave_1 entered promiscuous mode
[  114.086836][ T5253] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  114.094498][ T5253] Cannot create hsr debugfs directory
[  114.106939][ T5286] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.114052][ T5286] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.150262][ T5363] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  114.186777][ T5363] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  114.190229][ T5286] device bridge_slave_1 entered promiscuous mode
[  114.224278][ T5286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  114.236058][ T5286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  114.337076][ T5363] usb usb8: usbfs: process 5363 (syz.5.215) did not claim interface 0 before use
[  114.374534][ T5286] team0: Port device team_slave_0 added
[  114.403131][ T5368] netlink: 8 bytes leftover after parsing attributes in process `syz.5.215'.
[  114.455997][ T5368] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.464374][ T5368] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.477072][ T4518] Bluetooth: hci3: command 0x041b tx timeout
[  114.511595][ T5286] team0: Port device team_slave_1 added
[  114.774519][ T5286] batman_adv: batadv0: Adding interface: batadv_slave_0
[  114.807609][ T5286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.919915][ T5286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  114.994307][ T5286] batman_adv: batadv0: Adding interface: batadv_slave_1
[  115.014878][ T5286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.076643][ T5286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  115.172306][   T26] audit: type=1800 audit(1784973366.509:27): pid=5390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.220" name="idProduct" dev="configfs" ino=37454 res=0 errno=0
[  115.283742][ T5393] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  115.324325][ T5395] loop5: detected capacity change from 0 to 64
[  115.340302][ T5286] device hsr_slave_0 entered promiscuous mode
[  115.353333][ T5286] device hsr_slave_1 entered promiscuous mode
[  115.364262][ T5286] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  115.372353][ T5286] Cannot create hsr debugfs directory
[  115.469813][ T5253] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  115.570809][ T5253] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  115.623629][ T5253] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  115.672772][ T5400] loop5: detected capacity change from 0 to 64
[  115.679740][ T4591] Bluetooth: hci2: command 0x040f tx timeout
[  115.726967][ T5253] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  116.101782][    T9] IPVS: stopping master sync thread 5064 ...
[  116.140586][ T5253] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.174990][ T5408] device syzkaller0 entered promiscuous mode
[  116.251610][ T5286] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  116.287344][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  116.297760][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  116.320866][ T5253] 8021q: adding VLAN 0 to HW filter on device team0
[  116.373688][    T9] bond0: (slave wlan1): Releasing backup interface
[  116.478034][ T5286] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  116.571876][ T1110] Bluetooth: hci3: command 0x040f tx timeout
[  116.602891][ T5286] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  116.635014][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  116.673268][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  116.707839][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.715047][ T4269] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.769804][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  116.807479][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  116.838403][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.845529][ T4269] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.883276][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  116.920656][ T5286] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  116.978254][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  117.045824][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  117.103995][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  117.177049][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  117.238396][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  117.268830][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  117.318294][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  117.758108][ T1110] Bluetooth: hci2: command 0x0419 tx timeout
[  118.043785][ T5439] loop7: detected capacity change from 0 to 64
[  118.655781][ T1110] Bluetooth: hci3: command 0x0419 tx timeout
[  118.772456][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  118.807351][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  118.906222][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  118.917666][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  119.010235][ T5253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  119.129411][    T9] device hsr_slave_0 left promiscuous mode
[  119.146293][    T9] device hsr_slave_1 left promiscuous mode
[  119.184368][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.204595][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.232597][   T26] audit: type=1326 audit(1784973370.569:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5453 comm="syz.5.238" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7972ee99 code=0x7ffc0000
[  119.281595][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.320053][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.344124][   T26] audit: type=1326 audit(1784973370.579:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5453 comm="syz.5.238" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7efd7972ee99 code=0x7ffc0000
[  119.392806][    T9] device bridge_slave_1 left promiscuous mode
[  119.403110][ T5464] loop0: detected capacity change from 0 to 256
[  119.420088][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.436729][   T26] audit: type=1326 audit(1784973370.579:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5453 comm="syz.5.238" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7972ee99 code=0x7ffc0000
[  119.492007][    T9] device bridge_slave_0 left promiscuous mode
[  119.507944][   T26] audit: type=1326 audit(1784973370.579:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5453 comm="syz.5.238" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7972ee99 code=0x7ffc0000
[  119.543585][ T5464] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  119.548809][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.594645][    T9] device hsr_slave_0 left promiscuous mode
[  119.612531][    T9] device hsr_slave_1 left promiscuous mode
[  119.647607][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.658478][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.679300][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.694973][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.733066][    T9] device bridge_slave_1 left promiscuous mode
[  119.779801][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.790510][    T9] device bridge_slave_0 left promiscuous mode
[  119.797395][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.888667][    T9] device veth1_macvtap left promiscuous mode
[  119.905950][    T9] device veth0_macvtap left promiscuous mode
[  119.927980][    T9] device veth1_vlan left promiscuous mode
[  119.947888][    T9] device veth0_vlan left promiscuous mode
[  119.983299][    T9] device veth1_macvtap left promiscuous mode
[  119.995757][    T9] device veth0_macvtap left promiscuous mode
[  120.005996][    T9] device veth1_vlan left promiscuous mode
[  120.020657][    T9] device veth0_vlan left promiscuous mode
[  120.862580][    T9] team0 (unregistering): Port device team_slave_1 removed
[  120.894331][    T9] team0 (unregistering): Port device team_slave_0 removed
[  120.925214][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  120.977797][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  121.102870][    T9] bond0 (unregistering): Released all slaves
[  121.227943][    T9] team0 (unregistering): Port device team_slave_1 removed
[  121.244047][    T9] team0 (unregistering): Port device team_slave_0 removed
[  121.260212][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  121.276177][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  121.346039][    T9] bond0 (unregistering): Released all slaves
[  121.494839][   T26] audit: type=1800 audit(1784973372.829:32): pid=5503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.251" name="idVendor" dev="configfs" ino=37657 res=0 errno=0
[  121.558261][   T26] audit: type=1800 audit(1784973372.859:33): pid=5503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.251" name="idProduct" dev="configfs" ino=37658 res=0 errno=0
[  121.660246][ T5509] Mass Storage Function, version: 2009/09/11
[  121.668730][ T5286] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.675893][ T5509] LUN: removable file: (no medium)
[  121.702197][ T5509] udc dummy_udc.0: failed to start g1: -19
[  121.736974][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  121.748382][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  121.834136][ T5286] 8021q: adding VLAN 0 to HW filter on device team0
[  121.858055][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  121.897416][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  121.916604][ T5521] netlink: 20 bytes leftover after parsing attributes in process `syz.7.254'.
[  121.927006][ T4244] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.934149][ T4244] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.040463][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  122.071324][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  122.115923][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  122.163396][ T4244] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.170591][ T4244] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.187772][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  122.208077][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  122.215639][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  122.253220][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  122.288129][ T5253] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.315424][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  122.333610][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  122.360904][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  122.389028][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  122.409494][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  122.427455][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  122.462443][ T5286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  122.490684][ T5550] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  122.527778][ T5286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  122.554826][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  122.576316][   T26] audit: type=1800 audit(1784973373.909:34): pid=5553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.261" name="idVendor" dev="configfs" ino=38356 res=0 errno=0
[  122.594077][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  122.642254][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  122.646275][   T26] audit: type=1800 audit(1784973373.919:35): pid=5553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.261" name="idProduct" dev="configfs" ino=38357 res=0 errno=0
[  122.769786][ T5561] loop0: detected capacity change from 0 to 256
[  123.057804][ T5576] netlink: 56 bytes leftover after parsing attributes in process `syz.7.268'.
[  123.106511][ T5576] netlink: 56 bytes leftover after parsing attributes in process `syz.7.268'.
[  123.304470][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  123.323793][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  123.357509][   T26] audit: type=1800 audit(1784973374.699:36): pid=5591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.271" name="idVendor" dev="configfs" ino=38422 res=0 errno=0
[  123.392952][ T5286] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.464475][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  123.493912][   T26] audit: type=1800 audit(1784973374.699:37): pid=5591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.271" name="idProduct" dev="configfs" ino=38423 res=0 errno=0
[  123.535580][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  123.563736][ T5253] device veth0_vlan entered promiscuous mode
[  123.591041][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  123.607558][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  123.645999][ T5253] device veth1_vlan entered promiscuous mode
[  123.670948][ T5596] loop7: detected capacity change from 0 to 8192
[  123.688360][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  123.708045][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  123.745412][ T5596] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  123.795417][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  123.813654][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  123.857552][ T5253] device veth0_macvtap entered promiscuous mode
[  123.881364][ T5253] device veth1_macvtap entered promiscuous mode
[  123.943720][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  123.975466][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.987217][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.018242][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.042210][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.064971][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.086012][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.122753][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.178006][ T5253] batman_adv: batadv0: Interface activated: batadv_slave_0
[  124.189959][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.200693][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.211263][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.222269][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.235593][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.268662][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.286345][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.306492][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.338260][ T5253] batman_adv: batadv0: Interface activated: batadv_slave_1
[  124.357484][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  124.392726][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  124.437625][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  124.476417][ T5622] process 'syz.5.278' launched './file0' with NULL argv: empty string added
[  124.487315][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  124.518772][ T5622] Invalid argument reading file caps for ./file0
[  124.526279][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  124.542998][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  124.900586][ T5253] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.237026][ T5253] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.305871][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  125.305886][   T26] audit: type=1800 audit(1784973376.639:39): pid=5630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.280" name="idVendor" dev="configfs" ino=37801 res=0 errno=0
[  125.345019][ T5253] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.430426][ T5253] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.525262][   T26] audit: type=1800 audit(1784973376.669:40): pid=5630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.280" name="idProduct" dev="configfs" ino=37802 res=0 errno=0
[  126.506444][    C0] sched: RT throttling activated
[  126.784500][ T5647] loop0: detected capacity change from 0 to 512
[  126.809765][ T5627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  126.833686][ T5627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  126.861579][ T5627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  126.891261][ T5627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  126.909697][ T5627] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  126.918282][ T5627] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  126.946645][ T5644] validate_nla: 2 callbacks suppressed
[  126.946661][ T5644] netlink: 'syz.5.284': attribute type 13 has an invalid length.
[  126.965165][ T5647] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  126.978600][ T5647] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  127.038514][ T5644] netlink: 'syz.5.284': attribute type 17 has an invalid length.
[  127.187300][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.194461][ T5644] bridge0: port 2(bridge_slave_1) entered listening state
[  127.201831][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.208958][ T5644] bridge0: port 1(bridge_slave_0) entered listening state
[  127.222226][ T5644] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  127.254012][ T5644] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  127.298897][ T4269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.310382][ T5286] device veth0_vlan entered promiscuous mode
[  127.330490][ T4269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.352258][ T5286] device veth1_vlan entered promiscuous mode
[  127.392154][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  127.403822][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  127.455173][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  127.477707][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  127.487005][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  127.498355][ T5286] device veth0_macvtap entered promiscuous mode
[  127.511817][ T5286] device veth1_macvtap entered promiscuous mode
[  127.552116][ T5286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.569236][ T5286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.583810][ T5286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.596889][ T5286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.616967][ T5286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.638720][ T5286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.655336][ T5286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.668469][ T5286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.683947][ T5286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.706546][ T5286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.730376][ T5286] batman_adv: batadv0: Interface activated: batadv_slave_0
[  127.744601][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  127.755058][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  127.772239][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  127.786552][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  127.798842][ T5286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.817294][ T5286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.835523][ T5286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.846349][ T5286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.863413][ T5286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.874216][ T5286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.886495][ T5286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.897292][ T5286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.907436][ T5286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.918216][ T5286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.930972][ T5286] batman_adv: batadv0: Interface activated: batadv_slave_1
[  127.939664][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  127.951009][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  127.968021][ T5286] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.977729][ T5286] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.990096][ T5286] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.999452][ T5286] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.580926][ T5678] Rounding down aligned max_sectors from 4294967295 to 4294967288
[  128.719681][ T5682] loop5: detected capacity change from 0 to 1024
[  128.747150][ T5682] EXT4-fs (loop5): Ignoring removed bh option
[  128.755670][ T5682] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e80ce028, mo2=0000]
[  128.764352][ T5682] System zones: 0-1, 3-12
[  128.799468][ T5682] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #3: block 1: comm syz.5.297: lblock 1 mapped to illegal pblock 1 (length 1)
[  128.818461][ T5682] EXT4-fs (loop5): Remounting filesystem read-only
[  128.825020][ T5682] Quota error (device loop5): write_blk: dquota write failed
[  128.833454][ T5682] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  128.843974][ T5682] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.297: Failed to acquire dquot type 0
[  128.857067][ T5682] EXT4-fs (loop5): Remounting filesystem read-only
[  128.867398][ T5682] EXT4-fs error (device loop5): ext4_free_blocks:6231: comm syz.5.297: Freeing blocks not in datazone - block = 0, count = 4096
[  128.884537][ T5682] EXT4-fs (loop5): Remounting filesystem read-only
[  128.892261][ T5682] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.297: Invalid inode bitmap blk 0 in block_group 0
[  128.907937][ T5627] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:11: lblock 1 mapped to illegal pblock 1 (length 1)
[  128.916232][ T5682] EXT4-fs (loop5): Remounting filesystem read-only
[  128.937288][ T5627] EXT4-fs (loop5): Remounting filesystem read-only
[  128.943913][ T5627] Quota error (device loop5): remove_tree: Can't read quota data block 1
[  128.945513][ T5682] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem
[  128.953361][ T5627] EXT4-fs error (device loop5): ext4_release_dquot:6272: comm kworker/u4:11: Failed to release dquot type 0
[  128.979498][ T5682] EXT4-fs (loop5): Remounting filesystem read-only
[  128.983906][ T5627] EXT4-fs (loop5): Remounting filesystem read-only
[  128.986355][ T5682] EXT4-fs (loop5): 1 orphan inode deleted
[  129.003023][ T5682] EXT4-fs (loop5): mounted filesystem without journal. Opts: ��; usrquota,auto_da_alloc,bh,max_batch_time=0x00000000000008c9,debug,errors=remount-ro,. Quota mode: writeback.
[  129.149342][ T5686] udc usbip-vudc.0: failed to start g1: -19
[  130.078967][ T5657] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  130.222597][ T4961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.264699][ T4961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.289842][ T5695] netlink: 'syz.0.301': attribute type 1 has an invalid length.
[  130.303965][ T4244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.319738][ T4244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.354074][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  130.364620][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  130.413287][ T5703] loop5: detected capacity change from 0 to 1024
[  130.432471][ T5703] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  130.456800][ T5703] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  130.481279][ T5699] 8021q: adding VLAN 0 to HW filter on device bond2
[  130.512343][ T5699] bond1: (slave bond2): making interface the new active one
[  130.527188][ T5703] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,dioread_nolock,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none.
[  130.561502][ T5699] bond1: (slave bond2): Enslaving as an active interface with an up link
[  130.607417][ T5695] bond1: (slave gretap1): Enslaving as a backup interface with an up link
[  130.635039][ T4269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.677298][ T4269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.686172][   T26] audit: type=1800 audit(1784973382.019:41): pid=5710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.304" name="idVendor" dev="configfs" ino=38739 res=0 errno=0
[  130.728741][   T26] audit: type=1800 audit(1784973382.029:42): pid=5710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.304" name="idProduct" dev="configfs" ino=38740 res=0 errno=0
[  130.756726][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  130.803674][ T5712] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  131.092389][ T5729] loop8: detected capacity change from 0 to 128
[  131.124622][ T5731] loop7: detected capacity change from 0 to 1024
[  131.191802][ T5729] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4)
[  131.227333][ T5731] EXT4-fs error (device loop7): ext4_map_blocks:631: inode #3: block 2: comm syz.7.306: lblock 2 mapped to illegal pblock 2 (length 1)
[  131.246705][   T26] audit: type=1800 audit(1784973382.579:43): pid=5743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.313" name="UDC" dev="configfs" ino=38758 res=0 errno=0
[  131.272437][ T5744] sctp: [Deprecated]: syz.5.312 (pid 5744) Use of struct sctp_assoc_value in delayed_ack socket option.
[  131.272437][ T5744] Use struct sctp_sack_info instead
[  131.304814][ T5731] Quota error (device loop7): qtree_write_dquot: dquota write failed
[  131.333929][ T5731] EXT4-fs error (device loop7): ext4_map_blocks:631: inode #3: block 48: comm syz.7.306: lblock 0 mapped to illegal pblock 48 (length 1)
[  131.385001][ T4961] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4)
[  131.400754][ T5748] loop9: detected capacity change from 0 to 128
[  131.408356][ T5731] Quota error (device loop7): v2_write_file_info: Can't write info structure
[  131.419568][ T5731] EXT4-fs error (device loop7): ext4_acquire_dquot:6236: comm syz.7.306: Failed to acquire dquot type 0
[  131.431430][ T5731] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  131.443464][ T5731] EXT4-fs error (device loop7): ext4_evict_inode:284: inode #11: comm syz.7.306: mark_inode_dirty error
[  131.458916][ T5731] EXT4-fs warning (device loop7): ext4_evict_inode:287: couldn't mark inode dirty (err -117)
[  131.459006][ T5729] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4)
[  131.469460][ T5731] EXT4-fs (loop7): 1 orphan inode deleted
[  131.489852][ T4961] EXT4-fs error (device loop7): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1)
[  131.518948][ T5731] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_batch_time=0x0000000000008001,noblock_validity,nolazytime,max_batch_time=0x0000000000000007,nodiscard,nouid32,noauto_da_alloc,,errors=continue. Quota mode: none.
[  131.574573][ T4961] Quota error (device loop7): remove_tree: Can't read quota data block 1
[  131.585497][ T4961] EXT4-fs error (device loop7): ext4_release_dquot:6272: comm kworker/u4:9: Failed to release dquot type 0
[  131.691101][   T26] audit: type=1800 audit(1784973383.029:44): pid=5752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.315" name="idVendor" dev="configfs" ino=39426 res=0 errno=0
[  131.779552][   T26] audit: type=1800 audit(1784973383.049:45): pid=5752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.315" name="idProduct" dev="configfs" ino=39427 res=0 errno=0
[  131.909281][ T4244] EXT4-fs error (device loop7): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  131.969692][ T5760] loop0: detected capacity change from 0 to 128
[  131.994538][ T4244] Quota error (device loop7): remove_tree: Can't read quota data block 1
[  132.053758][ T4244] EXT4-fs error (device loop7): ext4_release_dquot:6272: comm kworker/u4:6: Failed to release dquot type 0
[  132.129464][ T5056] EXT4-fs error (device loop7): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0
[  132.198896][ T5056] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  132.261225][ T5765] device veth0_macvtap left promiscuous mode
[  132.277338][ T5056] EXT4-fs error (device loop7): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error
[  132.356746][ T5770] con
[  132.459169][ T5774] loop5: detected capacity change from 0 to 512
[  132.590667][ T5781] netlink: 12 bytes leftover after parsing attributes in process `syz.9.326'.
[  132.638627][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  132.645107][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  132.660091][ T5774] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  132.735543][ T5774] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.031754][ T5801] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  133.100359][ T5802] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  133.130393][ T5797] loop5: detected capacity change from 0 to 4096
[  133.241090][ T5797] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  133.296230][ T5801] loop9: detected capacity change from 0 to 1024
[  133.455171][ T4671] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22.
[  133.477480][ T5801] EXT4-fs error (device loop9): ext4_map_blocks:631: inode #3: block 2: comm syz.9.330: lblock 2 mapped to illegal pblock 2 (length 1)
[  133.491946][ T5801] Quota error (device loop9): qtree_write_dquot: dquota write failed
[  133.502213][ T5801] EXT4-fs error (device loop9): ext4_map_blocks:631: inode #3: block 48: comm syz.9.330: lblock 0 mapped to illegal pblock 48 (length 1)
[  133.518733][ T5801] EXT4-fs error (device loop9): ext4_acquire_dquot:6236: comm syz.9.330: Failed to acquire dquot type 0
[  133.532178][ T5801] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  133.639524][ T5801] EXT4-fs error (device loop9): ext4_evict_inode:284: inode #11: comm syz.9.330: mark_inode_dirty error
[  133.679329][ T5783] loop7: detected capacity change from 0 to 32768
[  133.721743][ T5801] EXT4-fs warning (device loop9): ext4_evict_inode:287: couldn't mark inode dirty (err -117)
[  133.753006][ T5783] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.327 (5783)
[  133.804117][ T5801] EXT4-fs (loop9): 1 orphan inode deleted
[  133.820345][ T4961] EXT4-fs error (device loop9): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1)
[  133.823762][ T5801] EXT4-fs (loop9): mounted filesystem without journal. Opts: max_batch_time=0x0000000000008001,noblock_validity,nolazytime,max_batch_time=0x0000000000000007,nodiscard,nouid32,noauto_da_alloc,,errors=continue. Quota mode: none.
[  133.851652][ T5783] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm
[  133.869322][ T5783] BTRFS info (device loop7): force clearing of disk cache
[  133.876686][ T5783] BTRFS info (device loop7): enabling auto defrag
[  133.877976][ T4961] EXT4-fs error (device loop9): ext4_release_dquot:6272: comm kworker/u4:9: Failed to release dquot type 0
[  133.883194][ T5783] BTRFS info (device loop7): max_inline at 0
[  133.901530][ T5783] BTRFS info (device loop7): enabling disk space caching
[  133.908928][ T5783] BTRFS info (device loop7): disk space caching is enabled
[  133.916173][ T5783] BTRFS info (device loop7): has skinny extents
[  134.032894][ T5830] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  134.167066][ T4269] EXT4-fs error (device loop9): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  134.220497][ T5783] BTRFS info (device loop7): enabling ssd optimizations
[  134.262178][ T4269] EXT4-fs error (device loop9): ext4_release_dquot:6272: comm kworker/u4:7: Failed to release dquot type 0
[  134.275686][ T5286] EXT4-fs error (device loop9): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0
[  134.296807][ T5783] BTRFS info (device loop7): clearing free space tree
[  134.303795][ T5783] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  134.354763][ T5783] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  134.373351][ T5286] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  134.425252][ T5286] EXT4-fs error (device loop9): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error
[  134.656360][ T5627] BTRFS info (device loop7): qgroup scan completed (inconsistency flag cleared)
[  134.741862][ T5813] loop5: detected capacity change from 0 to 32768
[  134.849677][ T5813] JBD2: Ignoring recovery information on journal
[  134.927593][ T5813] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  135.115498][ T4671] ocfs2: Unmounting device (7,5) on (node local)
[  135.440626][ T5877] device syzkaller0 entered promiscuous mode
[  137.260575][ T5811] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  138.088064][ T5928] loop9: detected capacity change from 0 to 64
[  138.343103][ T5941] loop9: detected capacity change from 0 to 512
[  138.552255][ T5941] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  138.847790][ T5941] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  140.085195][ T6006] netlink: 'syz.0.365': attribute type 1 has an invalid length.
[  141.291111][ T6010] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  141.350733][ T6010] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  141.389403][ T6010] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  141.454852][ T6010] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  141.539854][ T6010] bond3: (slave geneve2): making interface the new active one
[  141.560103][ T6010] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  141.606232][ T6010] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  141.676359][ T6010] syz.0.365 (6010) used greatest stack depth: 19456 bytes left
[  141.685873][ T6011] netlink: 28 bytes leftover after parsing attributes in process `syz.0.365'.
[  141.718067][ T6027] loop5: detected capacity change from 0 to 64
[  141.868821][ T6014] device syzkaller0 entered promiscuous mode
[  141.930138][ T6032] loop9: detected capacity change from 0 to 1024
[  141.939751][ T6033] loop0: detected capacity change from 0 to 512
[  141.971149][ T6032] EXT4-fs (loop9): inline encryption not supported
[  142.111119][ T6032] EXT4-fs (loop9): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,inlinecrypt,grpid,noauto_da_alloc,nouid32,,errors=continue. Quota mode: none.
[  142.406967][ T6047] udc usbip-vudc.0: failed to start g1: -19
[  142.835106][ T6067] loop7: detected capacity change from 0 to 64
[  142.940338][ T6071] device syzkaller0 entered promiscuous mode
[  143.135891][ T6075] netlink: 12 bytes leftover after parsing attributes in process `syz.9.386'.
[  143.161926][ T6076] device syzkaller0 entered promiscuous mode
[  143.329816][ T6083] udc usbip-vudc.0: failed to start g1: -19
[  143.534591][ T6048] loop0: detected capacity change from 0 to 32768
[  143.593759][ T6048] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.374 (6048)
[  143.680553][ T6093] loop9: detected capacity change from 0 to 2048
[  143.704316][ T6048] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  143.754832][ T6048] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  143.773710][ T6093] EXT4-fs (loop9): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  143.811465][ T6048] BTRFS info (device loop0): trying to use backup root at mount time
[  143.859155][ T6048] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[  143.868669][ T6048] BTRFS info (device loop0): use lzo compression, level 0
[  143.875912][ T6048] BTRFS info (device loop0): turning on flush-on-commit
[  143.883355][ T6048] BTRFS info (device loop0): enabling disk space caching
[  143.890784][ T6048] BTRFS error (device loop0): cannot disable free space tree
[  143.908410][ T6048] BTRFS error (device loop0): open_ctree failed: -22
[  144.009332][ T4264] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4264)
[  144.237827][ T6110] loop9: detected capacity change from 0 to 64
[  144.440513][ T6048] syz.0.374 (6048): drop_caches: 2
[  144.838243][ T6128] device syzkaller0 entered promiscuous mode
[  144.873003][ T6129] udc usbip-vudc.0: failed to start g1: -19
[  144.888208][ T6133] loop7: detected capacity change from 0 to 1024
[  145.053659][ T6133] EXT4-fs (loop7): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none.
[  145.241079][ T6133] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.546258][ T6158] loop7: detected capacity change from 0 to 64
[  145.585049][   T26] kauditd_printk_skb: 3 callbacks suppressed
[  145.585064][   T26] audit: type=1800 audit(1784973396.919:46): pid=6161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.412" name="idVendor" dev="configfs" ino=39883 res=0 errno=0
[  145.745566][ T6167] loop9: detected capacity change from 0 to 1024
[  145.826587][   T26] audit: type=1800 audit(1784973396.959:47): pid=6161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.412" name="idProduct" dev="configfs" ino=39884 res=0 errno=0
[  145.980899][ T6167] EXT4-fs (loop9): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: none.
[  146.026553][ T6177] device syzkaller0 entered promiscuous mode
[  146.457302][ T6038] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 440: padding at end of block bitmap is not set
[  148.157265][ T6207] loop0: detected capacity change from 0 to 64
[  148.812118][   T26] audit: type=1800 audit(1784973400.149:48): pid=6210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.426" name="idVendor" dev="configfs" ino=41013 res=0 errno=0
[  149.035256][   T26] audit: type=1800 audit(1784973400.289:49): pid=6210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.426" name="idProduct" dev="configfs" ino=40204 res=0 errno=0
[  150.354315][ T6216] se_dev->se_dev_ptr already set for storage object
[  153.500579][   T26] audit: type=1800 audit(1784973404.839:50): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.439" name="idVendor" dev="configfs" ino=40272 res=0 errno=0
[  153.601851][   T26] audit: type=1800 audit(1784973404.859:51): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.439" name="idProduct" dev="configfs" ino=40273 res=0 errno=0
[  154.232638][ T6249] device syzkaller0 entered promiscuous mode
[  156.277048][   T26] audit: type=1800 audit(1784973407.619:52): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.450" name="idVendor" dev="configfs" ino=41138 res=0 errno=0
[  156.409776][   T26] audit: type=1800 audit(1784973407.639:53): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.450" name="idProduct" dev="configfs" ino=41139 res=0 errno=0
[  156.468518][ T6281] loop0: detected capacity change from 0 to 2048
[  156.521718][   T26] audit: type=1800 audit(1784973407.859:54): pid=6283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.453" name="idVendor" dev="configfs" ino=41148 res=0 errno=0
[  156.679628][   T26] audit: type=1800 audit(1784973407.889:55): pid=6283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.453" name="idProduct" dev="configfs" ino=41149 res=0 errno=0
[  156.899879][ T6281] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  157.043887][ T6281] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  157.599042][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[  157.606607][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[  158.084940][ T6318] loop0: detected capacity change from 0 to 1024
[  158.214442][   T26] audit: type=1800 audit(1784973409.549:56): pid=6323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.462" name="idVendor" dev="configfs" ino=41223 res=0 errno=0
[  158.304857][ T6318] EXT4-fs (loop0): Ignoring removed bh option
[  158.330396][   T26] audit: type=1800 audit(1784973409.589:57): pid=6323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.462" name="idProduct" dev="configfs" ino=41224 res=0 errno=0
[  158.360772][ T6318] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback.
[  158.779528][   T26] audit: type=1800 audit(1784973410.119:58): pid=6347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.465" name="idVendor" dev="configfs" ino=41251 res=0 errno=0
[  159.774917][   T26] audit: type=1800 audit(1784973410.119:59): pid=6347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.465" name="idProduct" dev="configfs" ino=41252 res=0 errno=0
[  159.915174][ T6361] loop9: detected capacity change from 0 to 2048
[  160.263805][ T6361] Alternate GPT is invalid, using primary GPT.
[  160.289126][ T6361]  loop9: p2 p3 p7
[  160.385881][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.469'.
[  160.510140][ T6374] device syzkaller0 entered promiscuous mode
[  160.645478][ T4268] udevd[4268]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory
[  160.645752][ T4321] udevd[4321]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory
[  160.668203][ T4264] udevd[4264]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory
[  160.780040][ T4285] udevd[4285]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory
[  160.792509][ T6383] device syzkaller0 entered promiscuous mode
[  160.803266][ T4321] udevd[4321]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory
[  160.820813][ T4264] udevd[4264]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory
[  161.630826][   T26] audit: type=1326 audit(1784973412.969:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6352 comm="syz.5.470" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd7972ee99 code=0x0
[  163.168216][   T26] audit: type=1800 audit(1784973414.509:61): pid=6417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.486" name="idVendor" dev="configfs" ino=41413 res=0 errno=0
[  163.364000][   T26] audit: type=1800 audit(1784973414.529:62): pid=6417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.486" name="idProduct" dev="configfs" ino=41414 res=0 errno=0
[  164.322940][ T6439] blktrace: Concurrent blktraces are not allowed on loop10
[  165.396111][ T6449] loop0: detected capacity change from 0 to 512
[  166.031816][ T6449] EXT4-fs (loop0): 1 orphan inode deleted
[  166.037731][ T6449] EXT4-fs (loop0): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  166.052068][ T6449] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  167.006347][ T6489] netlink: 'syz.8.510': attribute type 13 has an invalid length.
[  167.133929][ T6489] netlink: 'syz.8.510': attribute type 17 has an invalid length.
[  167.499262][ T6489] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  167.590596][ T6492] loop9: detected capacity change from 0 to 8192
[  167.605472][ T6489] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  167.689246][ T6492]  loop9: p1 p3 p4
[  167.716086][ T6492] loop9: partition table partially beyond EOD, truncated
[  167.716122][ T6505] loop0: detected capacity change from 0 to 512
[  167.812356][ T6492] loop9: p1 start 589827 is beyond EOD, truncated
[  167.841744][ T6505] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  167.879003][ T6492] loop9: p3 start 33554431 is beyond EOD, truncated
[  167.885678][ T6492] loop9: p4 start 167772160 is beyond EOD, truncated
[  167.956238][ T6505] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.370855][ T6528] unsupported nla_type 36
[  168.516507][ T6530] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  168.695287][   T26] audit: type=1326 audit(1784973420.029:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.5.501" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7972ee99 code=0x7ffc0000
[  168.828590][   T26] audit: type=1326 audit(1784973420.039:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.5.501" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7efd7972ee99 code=0x7ffc0000
[  168.894595][ T6547] loop0: detected capacity change from 0 to 1764
[  168.995722][   T26] audit: type=1326 audit(1784973420.039:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.5.501" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7972ee99 code=0x7ffc0000
[  169.128657][   T26] audit: type=1800 audit(1784973420.269:66): pid=6555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.529" name="idVendor" dev="configfs" ino=40457 res=0 errno=0
[  169.288678][   T26] audit: type=1800 audit(1784973420.269:67): pid=6555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.529" name="idProduct" dev="configfs" ino=40458 res=0 errno=0
[  169.360319][ T6573] loop7: detected capacity change from 0 to 512
[  169.436007][ T6577] smc: net device ip6_vti0 applied user defined pnetid SYZ2
[  169.493822][ T6573] EXT4-fs (loop7): Ignoring removed bh option
[  169.541791][ T6573] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  169.668447][ T6573] EXT4-fs (loop7): 1 truncate cleaned up
[  169.674345][ T6573] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,errors=continue,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  169.707655][   T26] audit: type=1800 audit(1784973421.049:68): pid=6573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.536" name="file1" dev="loop7" ino=15 res=0 errno=0
[  169.837886][ T6590] netlink: 28 bytes leftover after parsing attributes in process `syz.0.545'.
[  170.029194][ T4967] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  170.031043][ T6599] loop5: detected capacity change from 0 to 1024
[  170.169072][ T6599] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  170.244945][ T6599] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv0,nouid32,noblock_validity,delalloc,journal_dev=0x0000000000000007,nouid32,nomblk_io_submit,noinit_itable,usrquota,,errors=continue. Quota mode: writeback.
[  170.256287][ T6609] device syzkaller0 entered promiscuous mode
[  170.273065][ T4967] usb 10-1: device descriptor read/64, error -71
[  170.295119][ T6611] loop7: detected capacity change from 0 to 128
[  170.315303][ T6599] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.342550][ T6599] EXT4-fs error (device loop5): ext4_free_blocks:6231: comm syz.5.549: Freeing blocks not in datazone - block = 0, count = 16
[  170.412291][ T6599] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.549: bg 0: block 112: padding at end of block bitmap is not set
[  170.511434][ T6599] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28
[  170.546681][ T4967] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  170.572982][ T6599] EXT4-fs (loop5): This should not happen!! Data will be lost
[  170.572982][ T6599] 
[  170.634888][ T6625] netlink: 'syz.7.554': attribute type 4 has an invalid length.
[  170.657152][ T6599] EXT4-fs (loop5): Total free blocks count 0
[  170.701309][ T6599] EXT4-fs (loop5): Free/Dirty block details
[  170.738206][ T6599] EXT4-fs (loop5): free_blocks=0
[  170.743287][ T6599] EXT4-fs (loop5): dirty_blocks=16
[  170.749648][   T26] audit: type=1800 audit(1784973422.089:69): pid=6628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.556" name="idVendor" dev="configfs" ino=40545 res=0 errno=0
[  170.769711][ T6599] EXT4-fs (loop5): Block reservation details
[  170.769863][ T6599] EXT4-fs (loop5): i_reserved_data_blocks=1
[  170.784364][ T4967] usb 10-1: device descriptor read/64, error -71
[  170.866194][ T6633] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4)
[  170.882682][   T26] audit: type=1800 audit(1784973422.119:70): pid=6628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.556" name="idProduct" dev="configfs" ino=41729 res=0 errno=0
[  170.914570][ T4967] usb usb10-port1: attempt power cycle
[  171.966531][ T4967] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  172.066753][ T4967] usb 10-1: device descriptor read/8, error -71
[  172.255436][ T6668] loop0: detected capacity change from 0 to 2048
[  172.336616][ T4967] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  172.396176][ T6668] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  172.456752][ T4967] usb 10-1: device descriptor read/8, error -71
[  172.546046][ T6676] device batadv0 entered promiscuous mode
[  172.578279][ T4967] usb usb10-port1: unable to enumerate USB device
[  172.667824][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.7.563'.
[  172.920542][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz.8.564'.
[  172.940833][ T6690] device syzkaller0 entered promiscuous mode
[  173.079870][   T26] audit: type=1800 audit(1784973424.419:71): pid=6697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.577" name="idVendor" dev="configfs" ino=40657 res=0 errno=0
[  173.486660][ T6718] loop9: detected capacity change from 0 to 64
[  174.003110][ T6742] xt_hashlimit: size too large, truncated to 1048576
[  174.059038][ T6745] xt_CT: You must specify a L4 protocol and not use inversions on it
[  175.411929][ T6762] tipc: Started in network mode
[  175.463707][ T6762] tipc: Node identity ac141441, cluster identity 4711
[  175.540598][ T6762] tipc: Enabled bearer <udp:syz1>, priority 10
[  175.696685][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.9.590'.
[  175.823657][ T6764] loop0: detected capacity change from 0 to 8192
[  175.866627][   T26] audit: type=1800 audit(1784973427.199:72): pid=6771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.602" name="idVendor" dev="configfs" ino=40737 res=0 errno=0
[  175.893198][ T6764] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  176.062111][ T6779] sg_write: data in/out 422876/114 bytes for SCSI command 0x0-- guessing data in;
[  176.062111][ T6779]    program syz.5.604 not setting count and/or reply_len properly
[  176.110512][ T6778] netlink: 'syz.8.605': attribute type 13 has an invalid length.
[  176.136223][ T6778] netlink: 'syz.8.605': attribute type 17 has an invalid length.
[  176.180089][ T6778] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  176.228048][ T6778] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  176.275107][ T6785] loop9: detected capacity change from 0 to 128
[  176.289148][ T6786] loop5: detected capacity change from 0 to 512
[  176.357568][ T6785] FAT-fs (loop9): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4)
[  176.397755][ T6786] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  176.413926][ T6786] EXT4-fs (loop5): orphan cleanup on readonly fs
[  176.481802][ T6786] Quota error (device loop5): v2_read_file_info: Free block number too big (0 >= 0).
[  176.530965][ T4393] tipc: Node number set to 2886997057
[  176.599175][ T6786] EXT4-fs warning (device loop5): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  176.680134][ T6786] EXT4-fs (loop5): Cannot turn on quotas: error -117
[  176.739576][ T6786] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.607: bg 0: block 40: padding at end of block bitmap is not set
[  176.774002][ T4393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  176.836904][ T4393] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  176.869426][ T6786] EXT4-fs (loop5): Remounting filesystem read-only
[  176.876006][ T6786] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  176.981738][ T6786] EXT4-fs (loop5): Remounting filesystem read-only
[  177.070164][ T6786] EXT4-fs (loop5): 1 truncate cleaned up
[  177.075884][ T6786] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier=0x00000000000000ad,errors=remount-ro,journal_dev=0x0000000000000000,noinit_itable,. Quota mode: writeback.
[  177.135329][ T6803] fido_id[6803]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  177.505958][   T26] audit: type=1800 audit(1784973428.839:73): pid=6818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.614" name="idVendor" dev="configfs" ino=41971 res=0 errno=0
[  177.610108][   T26] audit: type=1800 audit(1784973428.839:74): pid=6818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.614" name="idProduct" dev="configfs" ino=41972 res=0 errno=0
[  177.989343][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.5.620'.
[  178.249720][ T6845] loop5: detected capacity change from 0 to 512
[  178.381670][ T6845] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  178.430607][ T6845] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  178.975146][ T6880] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  179.020184][ T6881] netlink: 'syz.9.635': attribute type 21 has an invalid length.
[  179.056532][ T6881] IPv6: NLM_F_CREATE should be specified when creating new route
[  179.095866][ T6881] IPv6: Can't replace route, no match found
[  179.123432][ T6885] loop0: detected capacity change from 0 to 512
[  179.212637][ T6885] EXT4-fs (loop0): Ignoring removed orlov option
[  179.295859][ T6885] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,orlov,,errors=continue. Quota mode: writeback.
[  180.423759][ T6892] netlink: 28 bytes leftover after parsing attributes in process `syz.8.640'.
[  181.136767][ T6927] loop5: detected capacity change from 0 to 256
[  181.763795][   T26] audit: type=1800 audit(1784973433.099:75): pid=6943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.654" name="idProduct" dev="configfs" ino=40916 res=0 errno=0
[  183.760306][   T26] audit: type=1800 audit(1784973434.989:76): pid=6980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.666" name="idProduct" dev="configfs" ino=42220 res=0 errno=0
[  185.016457][ T7002] netlink: 'syz.9.676': attribute type 13 has an invalid length.
[  185.043035][ T7002] netlink: 'syz.9.676': attribute type 17 has an invalid length.
[  185.226220][ T7002] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  185.289589][ T7002] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  186.884854][ T4392] Bluetooth: hci1: command 0x0406 tx timeout
[  186.911405][ T7043] device syzkaller0 entered promiscuous mode
[  187.200713][ T7059] Illegal XDP return value 4294967282, expect packet loss!
[  187.678150][    C1] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.685552][    C1] bridge0: topology change detected, propagating
[  187.693565][ T5627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  187.693580][    C1] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.708243][    C1] bridge0: topology change detected, propagating
[  188.963819][ T7100] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.971283][ T7100] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.989446][ T7100] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.997078][ T7100] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.006279][ T7100] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.013434][ T7100] bridge0: port 1(bridge_slave_0) entered forwarding state
[  189.072643][ T7100] team0: Port device bridge0 added
[  189.155666][ T7110] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.182999][ T7110] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.191764][ T7137] netlink: 16 bytes leftover after parsing attributes in process `syz.9.717'.
[  189.285177][ T7142] netlink: 40 bytes leftover after parsing attributes in process `syz.9.719'.
[  189.650304][ T7154] loop7: detected capacity change from 0 to 128
[  189.690369][ T7155] sg_write: data in/out 426972/130 bytes for SCSI command 0x0-- guessing data in;
[  189.690369][ T7155]    program syz.5.724 not setting count and/or reply_len properly
[  189.833442][ T7154] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  189.897497][ T7161] device syzkaller0 entered promiscuous mode
[  189.903820][ T7154] ext4 filesystem being mounted at /95/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  190.285229][ T7172] netlink: 76 bytes leftover after parsing attributes in process `syz.5.727'.
[  190.429145][ T7177] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  190.842742][ T7192] loop7: detected capacity change from 0 to 1024
[  190.923424][ T7192] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  190.957776][ T7192] EXT4-fs (loop7): orphan cleanup on readonly fs
[  191.026532][ T7192] EXT4-fs error (device loop7): ext4_map_blocks:631: inode #3: block 2: comm syz.7.729: lblock 2 mapped to illegal pblock 2 (length 1)
[  191.117478][ T7192] Quota error (device loop7): qtree_write_dquot: dquota write failed
[  191.125656][ T7192] EXT4-fs error (device loop7): ext4_map_blocks:631: inode #3: block 48: comm syz.7.729: lblock 0 mapped to illegal pblock 48 (length 1)
[  191.232397][ T7192] Quota error (device loop7): v2_write_file_info: Can't write info structure
[  191.271637][ T7217] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  191.291955][ T7192] EXT4-fs error (device loop7): ext4_acquire_dquot:6236: comm syz.7.729: Failed to acquire dquot type 0
[  191.323893][ T7217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  191.371452][ T7192] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  191.386964][ T7217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  191.416216][ T7192] EXT4-fs error (device loop7): ext4_evict_inode:284: inode #11: comm syz.7.729: mark_inode_dirty error
[  191.443771][ T7217] device bridge_slave_0 left promiscuous mode
[  191.494290][ T7217] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.505378][ T7192] EXT4-fs warning (device loop7): ext4_evict_inode:287: couldn't mark inode dirty (err -117)
[  191.525419][ T7217] device bridge_slave_1 left promiscuous mode
[  191.538956][ T7192] EXT4-fs (loop7): 1 orphan inode deleted
[  191.555121][ T7217] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.571907][ T5988] EXT4-fs error (device loop7): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:18: lblock 1 mapped to illegal pblock 1 (length 1)
[  191.603243][ T5988] Quota error (device loop7): remove_tree: Can't read quota data block 1
[  191.619205][ T7217] bond0: (slave bond_slave_0): Releasing backup interface
[  191.642467][ T5988] EXT4-fs error (device loop7): ext4_release_dquot:6272: comm kworker/u4:18: Failed to release dquot type 0
[  191.697571][ T7192] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_batch_time=0x0000000000008001,noblock_validity,nolazytime,max_batch_time=0x0000000000000007,nodiscard,nouid32,noauto_da_alloc,,errors=continue. Quota mode: none.
[  191.720403][ T7217] bond0: (slave bond_slave_1): Releasing backup interface
[  191.800263][ T7192] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended
[  191.840380][ T7217] team0: Port device team_slave_0 removed
[  191.873129][ T7192] EXT4-fs (loop7): re-mounted. Opts: (null). Quota mode: none.
[  191.907263][ T7217] team0: Port device team_slave_1 removed
[  191.934120][ T7217] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  191.975010][ T7217] batman_adv: batadv0: Removing interface: batadv_slave_0
[  191.993865][ T7217] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.001960][ T7217] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.136756][ T7240] netlink: 'syz.8.738': attribute type 13 has an invalid length.
[  192.150100][ T7240] netlink: 'syz.8.738': attribute type 17 has an invalid length.
[  192.210308][ T7240] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  192.224745][ T7253] netlink: 8 bytes leftover after parsing attributes in process `syz.7.742'.
[  192.266901][ T7240] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  192.570019][ T7261] loop7: detected capacity change from 0 to 64
[  192.695197][ T7262] netlink: 14 bytes leftover after parsing attributes in process `syz.8.744'.
[  194.045043][ T7291] netlink: 'syz.5.754': attribute type 13 has an invalid length.
[  194.078400][ T7291] netlink: 'syz.5.754': attribute type 17 has an invalid length.
[  194.094228][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  194.102083][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  194.144473][ T7291] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  194.172384][ T7291] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  195.581092][ T7318] 
[  195.583507][ T7318] ======================================================
[  195.590682][ T7318] WARNING: possible circular locking dependency detected
[  195.597741][ T7318] syzkaller #0 Not tainted
[  195.602189][ T7318] ------------------------------------------------------
[  195.609232][ T7318] syz.7.762/7318 is trying to acquire lock:
[  195.615175][ T7318] ffffffff8ceceff0 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: uvcg_streaming_header_allow_link+0x6d/0x4a0
[  195.626475][ T7318] 
[  195.626475][ T7318] but task is already holding lock:
[  195.633873][ T7318] ffff888060389080 (&sb->s_type->i_mutex_key#28){++++}-{3:3}, at: configfs_symlink+0x47b/0x13b0
[  195.644381][ T7318] 
[  195.644381][ T7318] which lock already depends on the new lock.
[  195.644381][ T7318] 
[  195.654915][ T7318] 
[  195.654915][ T7318] the existing dependency chain (in reverse order) is:
[  195.663962][ T7318] 
[  195.663962][ T7318] -> #2 (&sb->s_type->i_mutex_key#28){++++}-{3:3}:
[  195.672702][ T7318]        down_write+0x38/0x60
[  195.677423][ T7318]        configfs_depend_item_unlocked+0x14f/0x430
[  195.683963][ T7318]        usbg_make_tpg+0x1f3/0x580
[  195.689115][ T7318]        target_fabric_make_tpg+0xa0/0x6d0
[  195.694960][ T7318]        configfs_mkdir+0x511/0x9e0
[  195.700190][ T7318]        vfs_mkdir+0x386/0x570
[  195.704984][ T7318]        do_mkdirat+0x1dd/0x5c0
[  195.709870][ T7318]        __x64_sys_mkdirat+0x85/0x90
[  195.715183][ T7318]        do_syscall_64+0x4c/0xa0
[  195.720144][ T7318]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  195.726587][ T7318] 
[  195.726587][ T7318] -> #1 (&opts->dep_lock){+.+.}-{3:3}:
[  195.734263][ T7318]        __mutex_lock_common+0x1e5/0x2400
[  195.740028][ T7318]        mutex_lock_nested+0x17/0x20
[  195.745346][ T7318]        tcm_set_name+0x26/0x90
[  195.750235][ T7318]        function_make+0x195/0x350
[  195.755376][ T7318]        configfs_mkdir+0x511/0x9e0
[  195.760609][ T7318]        vfs_mkdir+0x386/0x570
[  195.765407][ T7318]        do_mkdirat+0x1dd/0x5c0
[  195.770287][ T7318]        __x64_sys_mkdirat+0x85/0x90
[  195.775612][ T7318]        do_syscall_64+0x4c/0xa0
[  195.780575][ T7318]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  195.787022][ T7318] 
[  195.787022][ T7318] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}:
[  195.795314][ T7318]        __lock_acquire+0x2c66/0x7b50
[  195.800721][ T7318]        lock_acquire+0x19e/0x400
[  195.805780][ T7318]        __mutex_lock_common+0x1e5/0x2400
[  195.811531][ T7318]        mutex_lock_nested+0x17/0x20
[  195.816853][ T7318]        uvcg_streaming_header_allow_link+0x6d/0x4a0
[  195.823569][ T7318]        configfs_symlink+0x5a4/0x13b0
[  195.829064][ T7318]        vfs_symlink+0x245/0x3d0
[  195.834040][ T7318]        do_symlinkat+0x1ab/0x6b0
[  195.839092][ T7318]        __x64_sys_symlink+0x7a/0x90
[  195.844408][ T7318]        do_syscall_64+0x4c/0xa0
[  195.849404][ T7318]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  195.855854][ T7318] 
[  195.855854][ T7318] other info that might help us debug this:
[  195.855854][ T7318] 
[  195.866105][ T7318] Chain exists of:
[  195.866105][ T7318]   gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#28
[  195.866105][ T7318] 
[  195.880840][ T7318]  Possible unsafe locking scenario:
[  195.880840][ T7318] 
[  195.888326][ T7318]        CPU0                    CPU1
[  195.893713][ T7318]        ----                    ----
[  195.899098][ T7318]   lock(&sb->s_type->i_mutex_key#28);
[  195.904595][ T7318]                                lock(&opts->dep_lock);
[  195.911559][ T7318]                                lock(&sb->s_type->i_mutex_key#28);
[  195.919576][ T7318]   lock(gadget_subsys.su_mutex);
[  195.924626][ T7318] 
[  195.924626][ T7318]  *** DEADLOCK ***
[  195.924626][ T7318] 
[  195.932796][ T7318] 2 locks held by syz.7.762/7318:
[  195.937841][ T7318]  #0: ffff8881464ae460 (sb_writers#21){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  195.947130][ T7318]  #1: ffff888060389080 (&sb->s_type->i_mutex_key#28){++++}-{3:3}, at: configfs_symlink+0x47b/0x13b0
[  195.958061][ T7318] 
[  195.958061][ T7318] stack backtrace:
[  195.963983][ T7318] CPU: 1 PID: 7318 Comm: syz.7.762 Not tainted syzkaller #0
[  195.971323][ T7318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  195.981415][ T7318] Call Trace:
[  195.984724][ T7318]  <TASK>
[  195.987687][ T7318]  dump_stack_lvl+0x188/0x250
[  195.992410][ T7318]  ? load_image+0x410/0x410
[  195.996952][ T7318]  ? show_regs_print_info+0x20/0x20
[  196.002218][ T7318]  ? print_circular_bug+0x12b/0x1a0
[  196.007455][ T7318]  check_noncircular+0x296/0x330
[  196.012430][ T7318]  ? add_chain_block+0x9b0/0x9b0
[  196.017397][ T7318]  ? lockdep_lock+0xf1/0x1f0
[  196.022020][ T7318]  ? mark_lock+0x94/0x320
[  196.026372][ T7318]  ? _find_first_zero_bit+0xd1/0xf0
[  196.031598][ T7318]  __lock_acquire+0x2c66/0x7b50
[  196.036491][ T7318]  ? stack_trace_save+0xf0/0xf0
[  196.041379][ T7318]  ? arch_stack_walk+0xf2/0x140
[  196.046530][ T7318]  ? verify_lock_unused+0x140/0x140
[  196.051764][ T7318]  ? kmem_cache_free+0x8f/0x210
[  196.056652][ T7318]  ? stack_trace_save+0xa6/0xf0
[  196.061561][ T7318]  ? mark_lock+0x94/0x320
[  196.065929][ T7318]  lock_acquire+0x19e/0x400
[  196.070464][ T7318]  ? uvcg_streaming_header_allow_link+0x6d/0x4a0
[  196.076856][ T7318]  ? __might_sleep+0xf0/0xf0
[  196.081478][ T7318]  ? read_lock_is_recursive+0x10/0x10
[  196.086886][ T7318]  ? verify_lock_unused+0x140/0x140
[  196.092123][ T7318]  __mutex_lock_common+0x1e5/0x2400
[  196.097354][ T7318]  ? uvcg_streaming_header_allow_link+0x6d/0x4a0
[  196.103725][ T7318]  ? lock_chain_count+0x20/0x20
[  196.108611][ T7318]  ? uvcg_streaming_header_allow_link+0x6d/0x4a0
[  196.114982][ T7318]  ? mutex_lock_io_nested+0x60/0x60
[  196.120226][ T7318]  ? rwsem_write_trylock+0x135/0x1c0
[  196.125562][ T7318]  ? clear_nonspinnable+0x60/0x60
[  196.130620][ T7318]  mutex_lock_nested+0x17/0x20
[  196.135420][ T7318]  uvcg_streaming_header_allow_link+0x6d/0x4a0
[  196.141610][ T7318]  ? inode_permission+0xef/0x480
[  196.146577][ T7318]  ? bpf_lsm_inode_permission+0x5/0x10
[  196.152068][ T7318]  ? security_inode_permission+0xac/0xf0
[  196.157744][ T7318]  configfs_symlink+0x5a4/0x13b0
[  196.162713][ T7318]  ? end_current_label_crit_section+0x14b/0x170
[  196.168990][ T7318]  ? common_perm+0x15d/0x1b0
[  196.173610][ T7318]  ? from_kgid+0x14f/0x6a0
[  196.178063][ T7318]  ? apparmor_path_symlink+0x1ac/0x230
[  196.183693][ T7318]  ? lookup_one_qstr_excl+0x11c/0x240
[  196.189108][ T7318]  ? detach_groups+0x370/0x370
[  196.193911][ T7318]  ? inode_permission+0xef/0x480
[  196.198879][ T7318]  ? bpf_lsm_inode_symlink+0x5/0x10
[  196.204106][ T7318]  ? security_inode_symlink+0xb2/0x100
[  196.209596][ T7318]  vfs_symlink+0x245/0x3d0
[  196.214058][ T7318]  do_symlinkat+0x1ab/0x6b0
[  196.218602][ T7318]  ? vfs_symlink+0x3d0/0x3d0
[  196.223226][ T7318]  ? getname_flags+0x1f9/0x4f0
[  196.228035][ T7318]  __x64_sys_symlink+0x7a/0x90
[  196.232838][ T7318]  do_syscall_64+0x4c/0xa0
[  196.237292][ T7318]  ? clear_bhb_loop+0x30/0x80
[  196.242003][ T7318]  ? clear_bhb_loop+0x30/0x80
[  196.246713][ T7318]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  196.252655][ T7318] RIP: 0033:0x7f2dd6ea7e99
[  196.257099][ T7318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  196.276745][ T7318] RSP: 002b:00007f2dd5100028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[  196.285204][ T7318] RAX: ffffffffffffffda RBX: 00007f2dd712ffa0 RCX: 00007f2dd6ea7e99
[  196.293218][ T7318] RDX: 0000000000000000 RSI: 0000200000001500 RDI: 0000200000001400
[  196.301229][ T7318] RBP: 00007f2dd6f3deaf R08: 0000000000000000 R09: 0000000000000000
[  196.309239][ T7318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  196.317252][ T7318] R13: 00007f2dd7130038 R14: 00007f2dd712ffa0 R15: 00007ffd91ff62a8
[  196.325273][ T7318]  </TASK>
[  197.631837][ T5879] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.680257][ T5879] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.740218][ T5879] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.781075][ T5879] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.468266][ T5879] device hsr_slave_0 left promiscuous mode
[  198.474641][ T5879] device hsr_slave_1 left promiscuous mode
[  198.482608][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  198.492381][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_0
[  198.500070][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  198.507783][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_1
[  198.515285][ T5879] device bridge_slave_1 left promiscuous mode
[  198.521791][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.530425][ T5879] device bridge_slave_0 left promiscuous mode
[  198.536959][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.547478][ T5879] device veth1_macvtap left promiscuous mode
[  198.553533][ T5879] device veth0_macvtap left promiscuous mode
[  198.559676][ T5879] device veth1_vlan left promiscuous mode
[  198.565469][ T5879] device veth0_vlan left promiscuous mode
[  198.674533][ T5879] team0 (unregistering): Port device team_slave_1 removed
[  198.687238][ T5879] team0 (unregistering): Port device team_slave_0 removed
[  198.699522][ T5879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  198.713174][ T5879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  198.752402][ T5879] team0 (unregistering): Port device bond0 removed
[  198.769507][ T5879] bond0 (unregistering): Released all slaves