last executing test programs:

5m13.271377056s ago: executing program 1 (id=53):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000ff000000bfa300000000000007030000f0ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000a1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)

5m12.607185359s ago: executing program 1 (id=55):
syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x3008000, &(0x7f0000000000)={[{@errors_remount}]}, 0x30, 0x516, &(0x7f0000000740)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x8800, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20)

5m11.241015498s ago: executing program 1 (id=62):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000600200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff0000000000"], 0x254}}, 0x0)

5m10.275710035s ago: executing program 1 (id=66):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xc8d0, &(0x7f0000000500)=ANY=[], 0x4, 0x2d5, &(0x7f0000000200)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x48)
pwrite64(r0, &(0x7f0000003a80)='\t', 0x1, 0x8000c61)
sched_setscheduler(0x0, 0x1, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(0x0, 0x0, 0x0)
ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000080)=0x3f)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x6000, 0x69)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
fallocate(0xffffffffffffffff, 0x8, 0x2000000, 0x10000)

5m8.88925977s ago: executing program 1 (id=71):
r0 = socket(0xf, 0x803, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000)
r1 = socket(0x11, 0x3, 0x0)
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000880)=0x5, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dcdc14"], 0xdd12}], 0x1}, 0x200400d1)

5m7.490917796s ago: executing program 1 (id=76):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, 'Z\vB', 0x84, 0x6, 0x0, @empty, @mcast1, {[@srh={0x87, 0x6, 0x4, 0x3, 0x2, 0x40, 0x2, [@mcast2, @private1, @empty]}, @dstopts={0x21, 0x2, '\x00', [@ra={0x5, 0x2, 0x8}, @generic={0x6b}, @padn, @calipso={0x7, 0x8, {0x2, 0x0, 0x43, 0x668c}}]}], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}}}}}}, 0xac)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x10, @loopback, 0x3}, 0x1c)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

5m5.371042846s ago: executing program 32 (id=76):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, 'Z\vB', 0x84, 0x6, 0x0, @empty, @mcast1, {[@srh={0x87, 0x6, 0x4, 0x3, 0x2, 0x40, 0x2, [@mcast2, @private1, @empty]}, @dstopts={0x21, 0x2, '\x00', [@ra={0x5, 0x2, 0x8}, @generic={0x6b}, @padn, @calipso={0x7, 0x8, {0x2, 0x0, 0x43, 0x668c}}]}], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}}}}}}, 0xac)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x10, @loopback, 0x3}, 0x1c)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

3m8.332174606s ago: executing program 2 (id=480):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'lo\x00', <r2=>0x0})
writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f00000005c0)="1a9ef439feffff090000000003001000", 0x10}], 0x2)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x148, 0xffffffff, 0xffffffff, 0x148, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0xff000000], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d0)
sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r2}, 0x10, 0x0, 0x2, 0x0, 0x0, 0x44984}, 0x8005)

3m7.301268098s ago: executing program 2 (id=484):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001640)=""/139, 0x0)

3m5.291733683s ago: executing program 2 (id=486):
getrandom(0x0, 0x0, 0x3)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4ea7, 0x0, @local, 0x1}, 0x1c)
sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

3m0.024112507s ago: executing program 2 (id=492):
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)

2m57.838161245s ago: executing program 2 (id=499):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xf, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x200000000000000)

2m55.680029358s ago: executing program 2 (id=505):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r0, 0x1)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0xfffffffe, @empty, 0x3}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x30, r1, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x51, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e15}, 0x94)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
vmsplice(r5, 0x0, 0x0, 0x8)
write$cgroup_devices(r5, &(0x7f00000001c0)={'b', ' *:* ', 'wm\x00'}, 0x9)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94)
syz_emit_ethernet(0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004500002e"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0x70bd2c, 0x25dfdbfd, {0x2}}, 0x18}, 0x1, 0x0, 0x0, 0x4402}, 0x100000000000000)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWTABLE={0xfffffffffffffdf8, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0xffff}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_DESC={0x0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x0, 0x2, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN]}, {0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0xea}]}, {0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x7e0d}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x1}]}, {0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0xae95}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0xff}]}, {0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0xb6}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x20000000}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x5}]}, {0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0xd600}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x4}]}]}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x9}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x4e}, 0x28)

2m40.124878106s ago: executing program 33 (id=505):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r0, 0x1)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0xfffffffe, @empty, 0x3}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x30, r1, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x51, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e15}, 0x94)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
vmsplice(r5, 0x0, 0x0, 0x8)
write$cgroup_devices(r5, &(0x7f00000001c0)={'b', ' *:* ', 'wm\x00'}, 0x9)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94)
syz_emit_ethernet(0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004500002e"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0x70bd2c, 0x25dfdbfd, {0x2}}, 0x18}, 0x1, 0x0, 0x0, 0x4402}, 0x100000000000000)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWTABLE={0xfffffffffffffdf8, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0xffff}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_DESC={0x0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x0, 0x2, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN]}, {0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0xea}]}, {0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x7e0d}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x1}]}, {0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0xae95}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0xff}]}, {0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0xb6}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x20000000}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x5}]}, {0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0xd600}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x4}]}]}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x9}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x4e}, 0x28)

2m39.800965968s ago: executing program 4 (id=527):
r0 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

2m38.9280432s ago: executing program 4 (id=530):
sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000)
r0 = socket(0x11, 0x3, 0x0)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000880)=0x5, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1a}, 0x94)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dcdc14"], 0xdd12}], 0x1}, 0x200400d1)

2m38.200108181s ago: executing program 4 (id=532):
r0 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1)
read(r0, &(0x7f0000002400)=""/4077, 0xfed)

2m37.236457592s ago: executing program 4 (id=535):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xc8d0, &(0x7f0000000500)=ANY=[], 0x4, 0x2d5, &(0x7f0000000200)="$eJzs3L9PE2EYwPGnpZRSAtfBaDQxvNFFlwvU3dgYSIxNJEiNPxLjAVdterak12BqjOjkavwjHAgjG4nyD7C4Obm4sZg4yGA80/tRChTBQjmg309C7oHnfcr7XoE874W79fvvnxfztp43qhJNKImIiGyIpCQqgYh/jLpxXJq9kasDP79evPvg4e1MNjs2qdR4ZupaWik1NPzpxat+f9hKn6ylHq//SH9fO7t2fv3P1LOCrQq2KpWrylDT5W9VY9oy1WzBLupKTVimYZuqULLNipcve/m8VZ6bqymjNDuYnKuYtq2MUk0VzZqqllW1UlPGU6NQUrquq8GkYC+5xclJI9Nm8cwhTwYdUqlkjB4R6d+RyS2GMiEAABAqv/9vdPvRekvfTv8fa9n/L11arQ7cWx7y+/+VeL3/F2nq/59svtaW/j8hIh3v/3d2RKeL4/w7f6D+HydEvf9P+r+/rrePlkbcgP4fAAAAAAAAAAAAAAAAAAAAAICTYMNxNMdxtOAYfPSJSMK9g8T7POx5ojN4/7vb5oM7YkMi1rv53HzOO/oDVkXEElNGRJPf7s+Drx4H9wKqupR8thb8+oX5XI+byeSl4NaPiiap7fWOM34rOzaqPFvreyXZXJ8WTc60rk+3rI/LlctN9bpo8mVGymLJrH9nXFD/elSpm3ey2+r73XEAAAAAAJwGumpo7N/7mvP6zry3P/byjf11y+sD3v56pOX+PCYXYmGtGgAAAACA7mLXXhYNyzIrpy4IVrjfquB/GXYZE5HIbqlDCIJvfjxO3T6CaFtTHY7/55vSMgguG+02RibaeWVHEznoaTn34eOvwzvP15cTe6y0Y0Hv0f0FAgAAAHBUNpv+4Cs3wp0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABd6CgeJxb2GgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDj4m8AAAD//87sChQ=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x48)
pwrite64(r0, &(0x7f0000003a80)='\t', 0x1, 0x8000c61)
sched_setscheduler(0x0, 0x1, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
open(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x6000, 0x69)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})

2m30.256267696s ago: executing program 4 (id=538):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x10)
sendmmsg$inet6(r3, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000)

2m29.065086657s ago: executing program 4 (id=540):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000020601080000000000800000000000040900020073797a3100000000050004000300000011000300686173683a6e65742c6e65740000000005000500020000000500010006"], 0x4c}}, 0x20000044)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}]}, 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4)

2m28.960016633s ago: executing program 5 (id=541):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0xffffffffffffff23, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x400100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x408, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x5, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x8009, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x8, 0x4, 0x1e, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x6, 0x8, 0x5, 0x48002, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0x4, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x101, 0x5, 0x80000001, 0x1, 0x0, 0xe0, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x200100, 0x2, 0x8, 0xfffffffe, 0x6, 0x8, 0xe, 0x4247dc8c, 0x6, 0x204, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0xffffffff, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x4, 0x120000, 0x9, 0x7fffffff, 0x7, 0x8, 0x80000004, 0x5, 0x7e5, 0x49, 0x9, 0x8, 0x10, 0x3, 0x6, 0xf, 0xff, 0x11, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x49, 0x1a, 0x2000004, 0x1ff, 0x844, 0x6, 0x10000, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0xfffffffe, 0x2, 0xebf, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000003000000000000080100000000"], 0x0, 0x44}, 0x28)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000010"], 0x18}}], 0x1, 0x0)
sendmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0)
close(r1)
sendmsg$nl_xfrm(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@flushpolicy={0x10, 0x1d, 0x300, 0x70bd2d, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x490, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r2}, 0x38)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000380)={0x0, 0x9}, 0x8)
socket(0x200000000000011, 0x2, 0x0)
syz_emit_ethernet(0x16, &(0x7f0000000ac0)={@random="e7c86361b5c8", @empty, @void, {@llc={0x4, {@snap={0xaa, 0x0, "bf", "fe976c", 0x1}}}}}, 0x0)

2m26.296541692s ago: executing program 34 (id=540):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000020601080000000000800000000000040900020073797a3100000000050004000300000011000300686173683a6e65742c6e65740000000005000500020000000500010006"], 0x4c}}, 0x20000044)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}]}, 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4)

2m26.24948833s ago: executing program 5 (id=543):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r2, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x7, 0x8000, 0x101, 0x200, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x66, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @loopback}}}})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r4, 0x8b2a, &(0x7f0000000040))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000000000030000000003000000020000000800000000000000000000010500000020000000000000000000000b"], 0x0, 0x4e}, 0x28)
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4048800}, 0x20008801)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0xfffffffe, 0x8000, 0x4, 0x40000, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1, 0xa}, 0x50)
bind$alg(r1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
accept4(r0, 0x0, 0x0, 0x800)

2m24.939165454s ago: executing program 5 (id=546):
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
pread64(r0, 0x0, 0x0, 0x1000000000)

2m24.15017992s ago: executing program 5 (id=548):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xc8d0, &(0x7f0000000500)=ANY=[], 0x4, 0x2d5, &(0x7f0000000200)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x48)
pwrite64(r0, &(0x7f0000003a80)='\t', 0x1, 0x8000c61)
sched_setscheduler(0x0, 0x1, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x6000, 0x69)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})

2m23.495850071s ago: executing program 0 (id=549):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x10)
sendmmsg$inet6(r3, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000)

2m22.906461327s ago: executing program 5 (id=550):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x10}, {0x10, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x140040c5)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2m21.714628808s ago: executing program 0 (id=551):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0xffffffffffffff23, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x400100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x408, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x5, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x8009, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x8, 0x4, 0x1e, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x6, 0x8, 0x5, 0x48002, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0x4, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x101, 0x5, 0x80000001, 0x1, 0x0, 0xe0, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x200100, 0x2, 0x8, 0xfffffffe, 0x6, 0x8, 0xe, 0x4247dc8c, 0x6, 0x204, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0xffffffff, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x4, 0x120000, 0x9, 0x7fffffff, 0x7, 0x8, 0x80000004, 0x5, 0x7e5, 0x49, 0x9, 0x8, 0x10, 0x3, 0x6, 0xf, 0xff, 0x11, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x49, 0x1a, 0x2000004, 0x1ff, 0x844, 0x6, 0x10000, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0xfffffffe, 0x2, 0xebf, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000003000000000000080100000000"], 0x0, 0x44}, 0x28)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000010"], 0x18}}], 0x1, 0x0)
sendmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0)
close(r1)
sendmsg$nl_xfrm(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@flushpolicy={0x10, 0x1d, 0x300, 0x70bd2d, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x490, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r2}, 0x38)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000380)={0x0, 0x9}, 0x8)
socket(0x200000000000011, 0x2, 0x0)
syz_emit_ethernet(0x16, &(0x7f0000000ac0)={@random="e7c86361b5c8", @empty, @void, {@llc={0x4, {@snap={0xaa, 0x0, "bf", "fe976c", 0x1}}}}}, 0x0)

2m21.163460843s ago: executing program 0 (id=552):
sched_setscheduler(0x0, 0x1, 0x0)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9})
unshare(0x22020400)
fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5})
fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)

2m19.45611923s ago: executing program 5 (id=554):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r2, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x7, 0x8000, 0x101, 0x200, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x66, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @loopback}}}})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r4, 0x8b2a, &(0x7f0000000040))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000000000030000000003000000020000000800000000000000000000010500000020000000000000000000000b"], 0x0, 0x4e}, 0x28)
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4048800}, 0x20008801)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0xfffffffe, 0x8000, 0x4, 0x40000, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1, 0xa}, 0x50)
bind$alg(r1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
accept4(r0, 0x0, 0x0, 0x800)

2m16.653823159s ago: executing program 35 (id=554):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r2, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x7, 0x8000, 0x101, 0x200, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x66, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @loopback}}}})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r4, 0x8b2a, &(0x7f0000000040))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000000000030000000003000000020000000800000000000000000000010500000020000000000000000000000b"], 0x0, 0x4e}, 0x28)
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4048800}, 0x20008801)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0xfffffffe, 0x8000, 0x4, 0x40000, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1, 0xa}, 0x50)
bind$alg(r1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
accept4(r0, 0x0, 0x0, 0x800)

2m16.539835604s ago: executing program 0 (id=558):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xc8d0, &(0x7f0000000500)=ANY=[], 0x4, 0x2d5, &(0x7f0000000200)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x48)
pwrite64(r0, &(0x7f0000003a80)='\t', 0x1, 0x8000c61)
sched_setscheduler(0x0, 0x1, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x6000, 0x69)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})

2m15.533598508s ago: executing program 0 (id=560):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0xffffffffffffff23, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x400100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x408, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x5, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x8009, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x8, 0x4, 0x1e, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x6, 0x8, 0x5, 0x48002, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0x4, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x101, 0x5, 0x80000001, 0x1, 0x0, 0xe0, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x200100, 0x2, 0x8, 0xfffffffe, 0x6, 0x8, 0xe, 0x4247dc8c, 0x6, 0x204, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0xffffffff, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x4, 0x120000, 0x9, 0x7fffffff, 0x7, 0x8, 0x80000004, 0x5, 0x7e5, 0x49, 0x9, 0x8, 0x10, 0x3, 0x6, 0xf, 0xff, 0x11, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x49, 0x1a, 0x2000004, 0x1ff, 0x844, 0x6, 0x10000, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0xfffffffe, 0x2, 0xebf, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000003000000000000080100000000"], 0x0, 0x44}, 0x28)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000010"], 0x18}}], 0x1, 0x0)
sendmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0)
close(r1)
sendmsg$nl_xfrm(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@flushpolicy={0x10, 0x1d, 0x300, 0x70bd2d, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x490, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r2}, 0x38)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000380)={0x0, 0x9}, 0x8)
socket(0x200000000000011, 0x2, 0x0)
syz_emit_ethernet(0x16, &(0x7f0000000ac0)={@random="e7c86361b5c8", @empty, @void, {@llc={0x4, {@snap={0xaa, 0x0, "bf", "fe976c", 0x1}}}}}, 0x0)

2m14.43541209s ago: executing program 0 (id=562):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x3eb3, &(0x7f0000000040)={0x0, 0xe955, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2m12.867322084s ago: executing program 36 (id=562):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x3eb3, &(0x7f0000000040)={0x0, 0xe955, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)

7.55755863s ago: executing program 3 (id=686):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)

7.536127264s ago: executing program 9 (id=687):
ftruncate(0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7WimlTpS56HmqVGTmdnMaoZFJUQlNiCVkLghxImj2ClN1EUCuy5YIBBIiAV7/gI2dEWFhFjDHrFARVCCBEhIRvfabhM3DhakMc39/aTbnPuwv3NifafnHt+bG0BmnU3+yUUMRsRHEXG0vrr9gLP1H5t3b0wnSy5qtctf5tLjkvXmoc3XHYmI9Yjoi4gn/hfxbO7BuJXVtfmpUqm43Fgfri4sDVdW1y7MLUzNFmeLi6MTFycnJ0bGxyb3rK03X37+5qV3H+t959uX7tx+5f33kmoNNvZtbcdeqje9J45v2XYoIv7zMIJ1QaHRnv5uV4SfJfn8fhcR59L8PxqF9NMEsqBWq9V+qB1ut3u9BhxY+XQMnMsPRUS9nM8PDdXH8L+PgXypXKn+42p5ZXGmPlY+Fj35q3Ol4kjjXOFY9OSS9dG0fH99rGV9PCIdA79a6E/Xh6bLpZn97eqAFkda8v+bQj3/gYxwyg/ZJf8hu+Q/ZJf8h+yS/5Bd8h+yS/5Ddsl/yC75D9lV6HYFgK7x/z9k0uOXLiVLrXn/+8y11ZX58rULM8XK/NDCyvTQdHl5aWi2XJ5N79lZ+Kn3K5XLS6P/jJXrw9VipTpcWV27slBeWaxeSe/rv1Ls2ZdWAZ04fubWJ7mIWP9Xf7okehv75CocbLVaLrp9DzLQHab+ILtM/UF2OccHWv9Eb+u4oK/dC5fuzxcCj5Z8tysAdM35U77/g6wy/w/ZZf4fsssYH9jhEX3b7Db/DzyazP9Ddg22ef7Xb7Y8u2skIn4bER8Xeg43n/UFHAT5z3ON8f/5o38ZbN3bm/su/YqgNyJeePPy69enqtXl0WT7V/e2V99obB/b8sK2JwxAtzTztJnHAEB2bd69Md1c9jPuF/+tX4TwYPxDjbnJvvQ7yoHN3LZrFXJ7dO3C+kZEnNwpfq7xvPP6iczAZuGB+CcaP3P1t0jreyh9bvr+xD+1Jf6ft8Q//Yt/K5ANt5L+Z2Sn/MunOR338m97/zO4R9dOtO//8vf6v0Kb/u9MhzGee+vFz9rG34g4vWP8Zry+NFZr/KRu5zuMf+fpJ//Qbl/t7fr77BS/KSkNVxeWhiuraxfmFjZmi7PFxdGJi5OTEyPjY5PDV+dKxT8daR//3yc/vL1b+wca8Xui8/Yn2/7WYfu//+MHT53dJf5fz+38+Z/YJX5/RPy9w/hfj336TLt9SfyZNr///C7xk23jHcavvPb/wx0eCgDsg8rq2vxUqVRcVlBQ6Eph49dRjZZCt3sm4GGrrCan5knSd7smAAAAAAAAAAAAQKf243LibrcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAg+DEAAP//KbnRCQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101e42, 0x148)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0))
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

6.795243502s ago: executing program 9 (id=688):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0)
ftruncate(r1, 0x5)
sendfile(r0, r1, 0x0, 0xffff)

5.955791422s ago: executing program 9 (id=689):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x400000}})
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x801, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r6, 0x6, 0x23, 0x0, 0x0)
writev(r5, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
setgroups(0x0, 0x0)

5.876168009s ago: executing program 3 (id=690):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4000)

4.958283225s ago: executing program 3 (id=691):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x2, 0x3, 0xf, 0x8, 0x4, 0x18, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x6002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0x4d, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x6739, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x8080)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4)

2.49590219s ago: executing program 3 (id=692):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8}, 0x94)

2.348167592s ago: executing program 9 (id=693):
prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000)

1.884966725s ago: executing program 3 (id=694):
syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$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")
r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)

776.303751ms ago: executing program 3 (id=695):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29})
io_uring_enter(r0, 0x2219, 0x7721, 0x1f, 0x0, 0x0)

592.983283ms ago: executing program 9 (id=696):
mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, 0x0)
open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0)
mount(&(0x7f0000000000), 0x0, &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')

0s ago: executing program 9 (id=697):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95a", 0x4}], 0x1}}], 0x1, 0x4000000)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}})

kernel console output (not intermixed with test programs):

aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  257.802629][ T6152] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  258.268149][ T6063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  258.378579][ T6063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  258.411656][ T5586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.906183][ T6063] team0: Port device team_slave_0 added
[  258.916334][ T5577] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  259.161489][ T6063] team0: Port device team_slave_1 added
[  259.360602][ T6198] loop0: detected capacity change from 0 to 4096
[  259.442950][ T6198] EXT4-fs: inline encryption not supported
[  259.551454][ T6198] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e042c018, mo2=0003]
[  259.572519][ T6198] System zones: 0-5
[  259.619956][ T6198] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.944836][ T6063] batman_adv: batadv0: Adding interface: batadv_slave_0
[  260.012561][ T6063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  260.140029][ T6063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  260.224354][ T6063] batman_adv: batadv0: Adding interface: batadv_slave_1
[  260.252330][ T6063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  260.340165][ T5578] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.363122][ T6063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  260.845808][ T5226] 8021q: adding VLAN 0 to HW filter on device eth3
[  261.359120][ T6063] hsr_slave_0: entered promiscuous mode
[  261.415419][ T6063] hsr_slave_1: entered promiscuous mode
[  262.890636][ T6245] loop0: detected capacity change from 0 to 256
[  263.463006][ T6248] loop3: detected capacity change from 0 to 512
[  263.618568][ T6248] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002]
[  263.639333][ T6248] System zones: 0-2, 18-18, 34-35
[  263.773088][ T6248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  263.818666][ T6248] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  264.243859][ T6261] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  264.311510][ T6063] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  264.371181][ T5586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.443279][ T6063] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  264.495985][ T6063] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  264.625753][ T6063] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  264.685113][ T6063] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  264.862536][ T6063] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  264.910903][ T6063] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  265.079876][ T6063] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  265.268440][ T6281] loop4: detected capacity change from 0 to 512
[  265.395626][ T6281] EXT4-fs (loop4): 1 truncate cleaned up
[  265.441471][ T6281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  265.505741][   T29] audit: type=1800 audit(1777968262.738:5): pid=6281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.130" name="file1" dev="loop4" ino=15 res=0 errno=0
[  265.570758][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  265.582676][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  266.113424][ T6289] loop0: detected capacity change from 0 to 512
[  266.276541][ T6289] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.133: bg 0: block 393: padding at end of block bitmap is not set
[  266.359902][ T6289] loop0: lost filesystem error report for type 5 error -117
[  266.361420][ T6289] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  266.369154][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  266.369240][    C0] EXT4-fs (loop0): initial error at time 1777968263: ext4_validate_block_bitmap:441
[  266.369358][    C0] EXT4-fs (loop0): last error at time 1777968263: ext4_validate_block_bitmap:441
[  266.576072][ T6294] loop2: detected capacity change from 0 to 512
[  266.599640][ T6289] loop0: lost filesystem error report for type 5 error -117
[  266.606709][ T6289] EXT4-fs (loop0): 2 truncates cleaned up
[  266.744892][ T5574] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.765237][ T6294] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.134: Invalid inode bitmap blk 4 in block_group 0
[  266.792114][ T6289] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  266.836916][ T6294] loop2: lost filesystem error report for type 5 error -117
[  266.837563][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  266.851794][    C1] EXT4-fs (loop2): initial error at time 1777968264: ext4_read_inode_bitmap:139
[  266.861195][    C1] EXT4-fs (loop2): last error at time 1777968264: ext4_read_inode_bitmap:139
[  266.943844][ T6294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.233693][ T6063] 8021q: adding VLAN 0 to HW filter on device bond0
[  267.611376][ T6063] 8021q: adding VLAN 0 to HW filter on device team0
[  267.690546][ T5577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.801397][  T134] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.809208][  T134] bridge0: port 1(bridge_slave_0) entered forwarding state
[  268.034547][  T134] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.042374][  T134] bridge0: port 2(bridge_slave_1) entered forwarding state
[  268.554016][ T6310] loop2: detected capacity change from 0 to 512
[  268.786805][ T6310] EXT4-fs (loop2): 1 orphan inode deleted
[  268.908563][ T6310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  269.014003][ T6310] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  269.197351][ T6310] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.138: iget: bad i_size value: 360287970189639690
[  269.256134][ T6310] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.138: iget: bad i_size value: 360287970189639690
[  269.624397][ T5226] 8021q: adding VLAN 0 to HW filter on device eth4
[  269.890506][ T5577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.991398][ T5578] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.609993][ T6342] loop2: detected capacity change from 0 to 512
[  271.792356][ T6349] loop4: detected capacity change from 0 to 512
[  271.801081][ T6342] EXT4-fs (loop2): 1 truncate cleaned up
[  271.805534][ T6349] EXT4-fs: Ignoring removed orlov option
[  271.857261][ T6342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  271.897348][   T29] audit: type=1800 audit(1777968269.128:6): pid=6342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.147" name="file1" dev="loop2" ino=15 res=0 errno=0
[  272.032422][ T6349] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  272.712635][ T5574] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.872777][ T6360] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.150'.
[  273.083692][ T5577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.372413][ T6366] loop3: detected capacity change from 0 to 164
[  273.732210][ T6370] loop2: detected capacity change from 0 to 512
[  273.841769][ T6370] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.153: bg 0: block 393: padding at end of block bitmap is not set
[  273.974568][ T6370] loop2: lost filesystem error report for type 5 error -117
[  273.976035][ T6370] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  273.983922][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  273.984016][    C0] EXT4-fs (loop2): initial error at time 1777968271: ext4_validate_block_bitmap:441
[  273.984160][    C0] EXT4-fs (loop2): last error at time 1777968271: ext4_validate_block_bitmap:441
[  274.132903][ T6370] loop2: lost filesystem error report for type 5 error -117
[  274.150799][ T6370] EXT4-fs (loop2): 2 truncates cleaned up
[  274.190819][ T6370] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  276.340188][ T6063] 8021q: adding VLAN 0 to HW filter on device batadv0
[  277.319643][ T6398] loop4: detected capacity change from 0 to 512
[  277.453407][ T6398] EXT4-fs: Ignoring removed orlov option
[  277.700575][ T5577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.754026][ T6398] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  277.849416][   T29] audit: type=1800 audit(1777968275.078:7): pid=6398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.160" name="file3" dev="loop4" ino=16 res=0 errno=0
[  277.903816][ T6409] loop3: detected capacity change from 0 to 512
[  278.037805][ T6409] EXT4-fs (loop3): 1 truncate cleaned up
[  278.128231][ T6409] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  278.359808][   T29] audit: type=1800 audit(1777968275.588:8): pid=6409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.162" name="file1" dev="loop3" ino=15 res=0 errno=0
[  278.394448][ T5574] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.213851][ T5586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.045861][ T6063] veth0_vlan: entered promiscuous mode
[  281.072910][ T6438] loop0: detected capacity change from 0 to 512
[  281.219153][ T6438] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.172: bg 0: block 393: padding at end of block bitmap is not set
[  281.234657][ T6438] loop0: lost filesystem error report for type 5 error -117
[  281.237572][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  281.251854][    C0] EXT4-fs (loop0): initial error at time 1777968278: ext4_validate_block_bitmap:441
[  281.261630][    C0] EXT4-fs (loop0): last error at time 1777968278: ext4_validate_block_bitmap:441
[  281.282345][ T6438] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  281.382521][ T6438] loop0: lost filesystem error report for type 5 error -117
[  281.388177][ T6438] EXT4-fs (loop0): 2 truncates cleaned up
[  281.430458][ T6438] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  281.436237][ T6063] veth1_vlan: entered promiscuous mode
[  282.299568][ T6063] veth0_macvtap: entered promiscuous mode
[  283.121474][ T6452] loop3: detected capacity change from 0 to 512
[  283.271698][ T6452] EXT4-fs (loop3): 1 truncate cleaned up
[  283.312965][ T6452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  283.493826][ T6063] veth1_macvtap: entered promiscuous mode
[  283.776655][   T29] audit: type=1800 audit(1777968280.938:9): pid=6452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.175" name="file1" dev="loop3" ino=15 res=0 errno=0
[  284.500506][ T6063] batman_adv: batadv0: Interface activated: batadv_slave_0
[  284.791965][ T6063] batman_adv: batadv0: Interface activated: batadv_slave_1
[  284.902774][ T5586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.933321][ T5578] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.035872][  T145] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  285.093666][  T145] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  285.146725][  T145] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  285.202344][  T145] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  288.093960][ T6491] loop4: detected capacity change from 0 to 512
[  288.241731][ T6491] EXT4-fs (loop4): 1 truncate cleaned up
[  288.254456][ T6491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  288.292284][   T29] audit: type=1800 audit(1777968285.518:10): pid=6491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.186" name="file1" dev="loop4" ino=15 res=0 errno=0
[  289.233923][ T5574] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.460027][   T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  289.669101][   T24] usb 4-1: Using ep0 maxpacket: 16
[  289.730107][   T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  289.775005][   T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  289.855353][   T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[  289.916320][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  289.969881][   T24] usb 4-1: SerialNumber: syz
[  290.312468][ T5666] usb 4-1: USB disconnect, device number 3
[  292.333328][ T6544] loop4: detected capacity change from 0 to 512
[  292.453707][ T6544] EXT4-fs (loop4): 1 truncate cleaned up
[  292.469162][ T6544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  292.496916][   T29] audit: type=1800 audit(1777968289.728:11): pid=6544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.202" name="file1" dev="loop4" ino=15 res=0 errno=0
[  293.524120][ T5574] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.828176][ T6566] loop0: detected capacity change from 0 to 512
[  293.880436][ T6566] EXT4-fs: Ignoring removed orlov option
[  294.081184][ T6566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  294.726007][ T5578] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.230342][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.266446][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  295.366462][ T6585] loop0: detected capacity change from 0 to 164
[  295.437766][ T6587] loop3: detected capacity change from 0 to 512
[  295.597745][ T6587] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.214: inode has both inline data and extents flags
[  295.650248][   T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.743040][   T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  295.748429][ T6587] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  295.785792][ T6587] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.214: couldn't read orphan inode 15 (err -117)
[  295.795722][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  295.795817][    C1] EXT4-fs (loop3): initial error at time 1777968293: ext4_orphan_get:1397: inode 15
[  295.795986][    C1] EXT4-fs (loop3): last error at time 1777968293: ext4_orphan_get:1397: inode 15
[  295.912775][ T6587] loop3: lost filesystem error report for type 5 error -117
[  295.946366][ T6587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  296.763295][ T6600] loop0: detected capacity change from 0 to 512
[  296.772783][ T5586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.856974][ T6600] EXT4-fs (loop0): 1 truncate cleaned up
[  296.884620][ T6600] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  297.112177][   T29] audit: type=1800 audit(1777968294.338:12): pid=6600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.218" name="file1" dev="loop0" ino=15 res=0 errno=0
[  297.326559][ T6608] syzkaller0: entered promiscuous mode
[  297.385527][ T6608] syzkaller0: entered allmulticast mode
[  298.090021][ T5578] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.343163][ T6619] loop2: detected capacity change from 0 to 512
[  298.441547][ T6619] EXT4-fs: Ignoring removed orlov option
[  298.615095][ T6619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  299.473349][ T5577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.321907][ T6659] loop5: detected capacity change from 0 to 512
[  301.556223][ T6659] EXT4-fs (loop5): 1 truncate cleaned up
[  301.600498][ T6659] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  301.754699][   T29] audit: type=1800 audit(1777968298.978:13): pid=6659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.234" name="file1" dev="loop5" ino=15 res=0 errno=0
[  302.450936][ T6063] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.111453][ T6701] loop0: detected capacity change from 0 to 512
[  305.299540][ T6701] EXT4-fs (loop0): 1 truncate cleaned up
[  305.349489][ T6701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  305.479927][   T29] audit: type=1800 audit(1777968302.708:14): pid=6701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.248" name="file1" dev="loop0" ino=15 res=0 errno=0
[  306.370143][ T5578] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.604425][ T6389] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96
[  312.447996][ T6791] loop0: detected capacity change from 0 to 512
[  312.479629][ T6793] loop2: detected capacity change from 0 to 164
[  312.591557][ T6791] EXT4-fs (loop0): 1 orphan inode deleted
[  312.694555][ T6791] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  313.286464][ T6797] loop3: detected capacity change from 0 to 512
[  313.558882][ T5578] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.589451][ T6797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  313.656571][ T6797] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  313.897217][ T6801] loop4: detected capacity change from 0 to 512
[  314.391736][ T5586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.584624][ T6838] loop3: detected capacity change from 0 to 512
[  316.842820][ T6840] syzkaller0: entered promiscuous mode
[  316.868236][ T6838] EXT4-fs error (device loop3): ext4_free_inode:354: comm syz.3.299: bit already cleared for inode 11
[  316.917861][ T6840] syzkaller0: entered allmulticast mode
[  316.991181][ T6838] loop3: lost filesystem error report for type 5 error -117
[  316.997511][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  317.011946][    C1] EXT4-fs (loop3): initial error at time 1777968314: ext4_free_inode:354
[  317.020747][    C1] EXT4-fs (loop3): last error at time 1777968314: ext4_free_inode:354
[  317.036647][ T6838] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[  317.084078][ T6838] loop3: lost filesystem error report for type 5 error -117
[  317.101066][ T6838] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[  317.205669][ T6838] loop3: lost filesystem error report for type 5 error -117
[  317.214219][ T6838] EXT4-fs (loop3): 1 orphan inode deleted
[  317.323536][ T6838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  318.820070][ T6846] Bluetooth: hci4: command 0x0406 tx timeout
[  318.821738][ T6845] Bluetooth: hci1: command 0x0406 tx timeout
[  318.827174][ T6846] Bluetooth: hci2: command 0x0406 tx timeout
[  318.833449][ T6845] Bluetooth: hci3: command 0x0406 tx timeout
[  319.226735][ T6832] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  319.741826][ T5586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.208570][ T6882] syzkaller0: entered promiscuous mode
[  320.233975][ T6882] syzkaller0: entered allmulticast mode
[  321.313661][ T6897] loop2: detected capacity change from 0 to 512
[  321.418196][ T6897] EXT4-fs (loop2): 1 truncate cleaned up
[  321.456443][ T6897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  322.371348][ T5577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.436389][ T6913] loop5: detected capacity change from 0 to 512
[  322.603922][ T6913] EXT4-fs error (device loop5): ext4_free_inode:354: comm syz.5.328: bit already cleared for inode 11
[  322.703071][ T6913] loop5: lost filesystem error report for type 5 error -117
[  322.707541][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  322.707644][    C0] EXT4-fs (loop5): initial error at time 1777968319: ext4_free_inode:354
[  322.707766][    C0] EXT4-fs (loop5): last error at time 1777968319: ext4_free_inode:354
[  322.733512][ T6913] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem
[  322.733620][ T6913] loop5: lost filesystem error report for type 5 error -117
[  322.735302][ T6913] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem
[  322.735413][ T6913] loop5: lost filesystem error report for type 5 error -117
[  322.750720][ T6913] EXT4-fs (loop5): 1 orphan inode deleted
[  322.802110][ T6913] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  323.554619][ T6926] syzkaller0: entered promiscuous mode
[  323.554726][ T6926] syzkaller0: entered allmulticast mode
[  324.994836][ T6908] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  325.539764][ T6063] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.063038][ T6959] syzkaller0: entered promiscuous mode
[  326.095844][ T6959] syzkaller0: entered allmulticast mode
[  326.537168][ T6968] process 'syz.0.351' launched './file0' with NULL argv: empty string added
[  326.616499][ T6968] Invalid argument reading file caps for ./file0
[  327.007039][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  327.013961][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  328.816263][ T7001] loop0: detected capacity change from 0 to 128
[  329.618300][ T5666] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  329.918024][ T5666] usb 4-1: Using ep0 maxpacket: 32
[  329.953092][ T5666] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  329.996514][ T5666] usb 4-1: config 2 has 0 interfaces, different from the descriptor's value: 1
[  330.059674][ T5666] usb 4-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6
[  330.105113][ T5666] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.363576][ T5666] usb 4-1: string descriptor 0 read error: -71
[  332.412650][ T5666] usb 4-1: USB disconnect, device number 4
[  333.702910][ T7020] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  335.094769][ T5666] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  335.317724][ T5666] usb 3-1: Using ep0 maxpacket: 32
[  335.343960][ T5666] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  335.426883][ T5666] usb 3-1: config 2 has 0 interfaces, different from the descriptor's value: 1
[  335.470416][ T5666] usb 3-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6
[  335.492437][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.392'.
[  335.514216][ T5666] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.383843][ T5666] usb 3-1: string descriptor 0 read error: -71
[  338.452186][ T5666] usb 3-1: USB disconnect, device number 2
[  340.548331][ T5666] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  340.799937][ T5666] usb 1-1: Using ep0 maxpacket: 32
[  340.866998][ T5666] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  340.915425][ T5666] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 1
[  340.956867][ T5666] usb 1-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6
[  341.033018][ T5666] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.474892][ T5666] usb 1-1: string descriptor 0 read error: -71
[  343.539719][ T5666] usb 1-1: USB disconnect, device number 2
[  343.703020][ T7155] loop5: detected capacity change from 0 to 4096
[  343.743352][ T7155] EXT4-fs: inline encryption not supported
[  343.815485][ T7155] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e042c018, mo2=0003]
[  343.883508][ T7155] System zones: 0-5
[  343.990502][ T7155] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  344.433053][ T6063] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.790756][ T7162] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  352.514053][ T7248] loop4: detected capacity change from 0 to 512
[  352.698608][ T7248] EXT4-fs error (device loop4): ext4_free_inode:354: comm syz.4.457: bit already cleared for inode 11
[  352.770430][ T7248] loop4: lost filesystem error report for type 5 error -117
[  352.777584][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  352.792053][    C0] EXT4-fs (loop4): initial error at time 1777968350: ext4_free_inode:354
[  352.800915][    C0] EXT4-fs (loop4): last error at time 1777968350: ext4_free_inode:354
[  352.811372][ T7248] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[  352.823714][ T7248] loop4: lost filesystem error report for type 5 error -117
[  352.831976][ T7248] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[  352.856891][ T7248] loop4: lost filesystem error report for type 5 error -117
[  352.875764][ T7248] EXT4-fs (loop4): 1 orphan inode deleted
[  352.932034][ T7248] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  355.069374][ T7238] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  355.923349][ T5574] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.402786][ T7290] IPVS: Scheduler module ip_vs_sip not found
[  360.492574][ T7301] loop2: detected capacity change from 0 to 512
[  360.801083][ T7301] EXT4-fs error (device loop2): ext4_free_inode:354: comm syz.2.475: bit already cleared for inode 11
[  360.902963][ T7301] loop2: lost filesystem error report for type 5 error -117
[  360.907576][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  360.921898][    C0] EXT4-fs (loop2): initial error at time 1777968358: ext4_free_inode:354
[  360.930772][    C0] EXT4-fs (loop2): last error at time 1777968358: ext4_free_inode:354
[  361.031436][ T7301] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  361.082234][ T7301] loop2: lost filesystem error report for type 5 error -117
[  361.107236][ T7301] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  361.199615][ T7301] loop2: lost filesystem error report for type 5 error -117
[  361.210899][ T7301] EXT4-fs (loop2): 1 orphan inode deleted
[  361.266903][ T7301] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  361.834776][ T5577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.870295][ T7332] IPVS: Scheduler module ip_vs_sip not found
[  365.668015][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  365.771235][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  370.018048][ T4870] Bluetooth: hci0: command 0x0406 tx timeout
[  370.561054][ T7363] loop5: detected capacity change from 0 to 512
[  370.732639][ T7366] loop4: detected capacity change from 0 to 512
[  370.750164][ T7367] random: crng reseeded on system resumption
[  370.860147][ T7366] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  371.009138][ T7366] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002]
[  371.058722][ T7366] System zones: 1-12
[  371.131242][ T7366] EXT4-fs (loop4): 1 truncate cleaned up
[  371.175246][ T7366] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  371.607640][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  371.781189][ T5574] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  372.822641][ T7379] IPVS: Scheduler module ip_vs_sip not found
[  373.757883][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  373.860540][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  374.347076][ T7396] netlink: 'syz.4.503': attribute type 8 has an invalid length.
[  378.370376][ T7408] loop4: detected capacity change from 0 to 512
[  378.944097][ T7410] loop0: detected capacity change from 0 to 2048
[  379.010239][ T7410] EXT4-fs: Ignoring removed i_version option
[  379.410483][ T7410] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  381.055890][ T5578] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.082267][ T7428] IPVS: Scheduler module ip_vs_sip not found
[  382.459876][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  382.767603][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!!
[  382.869659][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  383.177868][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  383.280459][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  388.473456][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  388.480725][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  389.103362][ T7448] loop5: detected capacity change from 0 to 128
[  389.449750][   T29] audit: type=1800 audit(1777968386.678:15): pid=7450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.521" name="bus" dev="loop5" ino=1048617 res=0 errno=0
[  389.566883][ T7451] netlink: 56 bytes leftover after parsing attributes in process `syz.3.522'.
[  389.647868][ T7451] openvswitch: netlink: Flow key attr not present in new flow.
[  392.056697][ T4870] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  392.070140][ T4870] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  392.080881][ T4870] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  392.105877][ T4870] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  392.118131][ T4870] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  393.272608][ T7484] loop4: detected capacity change from 0 to 128
[  393.639284][   T29] audit: type=1800 audit(1777968390.858:16): pid=7486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.535" name="bus" dev="loop4" ino=1048625 res=0 errno=0
[  393.768096][ T7486] loop4: detected capacity change from 128 to 0
[  393.772748][    C1] I/O error, dev loop4, sector 32 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  393.784176][    C1] Buffer I/O error on dev loop4, logical block 32, lost sync page write
[  393.793082][ T7484] FAT-fs (loop4): FAT read failed (blocknr 32)
[  393.819106][ T7484] Buffer I/O error on dev loop4, logical block 34, lost sync page write
[  393.893993][ T7484] FAT-fs (loop4): unable to read inode block for updating (i_pos 548)
[  394.442536][ T5580] Bluetooth: hci5: command tx timeout
[  396.509784][ T5580] Bluetooth: hci5: command tx timeout
[  399.314157][ T5580] Bluetooth: hci5: command tx timeout
[  399.838748][ T5574] FAT-fs (loop4): Directory bread(block 34) failed
[  399.882423][ T5574] FAT-fs (loop4): Directory bread(block 40) failed
[  399.950306][ T5574] Buffer I/O error on dev loop4, logical block 33, lost sync page write
[  400.674331][ T7357] FAT-fs (loop4): unable to read inode block for updating (i_pos 548)
[  400.731748][ T7357] FAT-fs (loop4): bread failed in fat_clusters_flush
[  400.782143][ T7356] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.878218][ T5574] FAT-fs (loop4): unable to read boot sector to mark fs as dirty
[  401.072224][ T7356] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.382519][ T5580] Bluetooth: hci5: command tx timeout
[  401.467083][ T7356] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.845873][ T7356] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.860380][ T7356] bridge_slave_1: left allmulticast mode
[  402.870655][ T7356] bridge_slave_1: left promiscuous mode
[  402.877539][ T7356] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.901887][ T7356] bridge_slave_0: left allmulticast mode
[  402.918034][ T7356] bridge_slave_0: left promiscuous mode
[  402.936608][ T7356] bridge0: port 1(bridge_slave_0) entered disabled state
[  403.976515][ T7356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  404.046605][ T7356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  404.097179][ T7356] bond0 (unregistering): Released all slaves
[  405.286624][ T4870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  405.309002][ T4870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  405.319101][ T4870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  405.338616][ T4870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  405.356785][ T4870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  405.502311][ T7356] hsr_slave_0: left promiscuous mode
[  405.575109][ T7356] hsr_slave_1: left promiscuous mode
[  405.633108][ T7356] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  405.697882][ T7356] batman_adv: batadv0: Removing interface: batadv_slave_0
[  405.755482][ T7356] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  405.795944][ T7356] batman_adv: batadv0: Removing interface: batadv_slave_1
[  405.918846][ T7356] veth1_macvtap: left promiscuous mode
[  405.952805][ T7356] veth0_macvtap: left promiscuous mode
[  405.976089][ T7356] veth1_vlan: left promiscuous mode
[  405.991055][ T7356] veth0_vlan: left promiscuous mode
[  406.196717][ T7530] capability: warning: `syz.0.547' uses deprecated v2 capabilities in a way that may be insecure
[  406.367159][ T7534] loop5: detected capacity change from 0 to 128
[  406.576441][   T29] audit: type=1800 audit(1777968403.798:17): pid=7536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.548" name="bus" dev="loop5" ino=1048629 res=0 errno=0
[  406.671892][ T7536] loop5: detected capacity change from 128 to 0
[  406.700239][    C1] I/O error, dev loop5, sector 32 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  406.709907][    C1] Buffer I/O error on dev loop5, logical block 32, lost sync page write
[  406.718786][ T7534] FAT-fs (loop5): FAT read failed (blocknr 32)
[  406.752651][ T7534] Buffer I/O error on dev loop5, logical block 34, lost sync page write
[  406.799174][ T7534] FAT-fs (loop5): unable to read inode block for updating (i_pos 548)
[  407.214955][ T6063] FAT-fs (loop5): Directory bread(block 34) failed
[  407.243036][ T6063] FAT-fs (loop5): Directory bread(block 40) failed
[  407.268074][ T6063] Buffer I/O error on dev loop5, logical block 33, lost sync page write
[  407.467587][ T5580] Bluetooth: hci1: command tx timeout
[  409.319877][ T7356] team0 (unregistering): Port device team_slave_1 removed
[  409.369558][ T7356] team0 (unregistering): Port device team_slave_0 removed
[  409.540600][ T5580] Bluetooth: hci1: command tx timeout
[  410.333684][ T5226] 8021q: adding VLAN 0 to HW filter on device eth5
[  410.392306][ T7357] FAT-fs (loop5): unable to read inode block for updating (i_pos 548)
[  410.430986][ T7357] FAT-fs (loop5): bread failed in fat_clusters_flush
[  410.549236][ T6063] FAT-fs (loop5): unable to read boot sector to mark fs as dirty
[  411.408533][ T7356] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.619735][ T5580] Bluetooth: hci1: command tx timeout
[  411.674435][ T7356] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.872151][ T7356] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.055451][ T7356] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.685853][ T7470] bridge0: port 1(bridge_slave_0) entered blocking state
[  412.719418][ T7470] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.750115][ T7470] bridge_slave_0: entered allmulticast mode
[  412.783936][ T7470] bridge_slave_0: entered promiscuous mode
[  412.916395][ T7470] bridge0: port 2(bridge_slave_1) entered blocking state
[  412.946952][ T7470] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.968446][ T7470] bridge_slave_1: entered allmulticast mode
[  413.001519][ T7470] bridge_slave_1: entered promiscuous mode
[  413.473122][ T7356] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.585721][ T7470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  413.647294][ T7470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  413.699616][ T5580] Bluetooth: hci1: command tx timeout
[  413.888811][ T7356] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.905878][ T7591] loop0: detected capacity change from 0 to 128
[  414.093546][   T29] audit: type=1800 audit(1777968411.328:18): pid=7593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.558" name="bus" dev="loop0" ino=1048633 res=0 errno=0
[  414.192024][ T7593] loop0: detected capacity change from 128 to 0
[  414.221824][    C1] I/O error, dev loop0, sector 32 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  414.231686][    C1] Buffer I/O error on dev loop0, logical block 32, lost sync page write
[  414.240657][ T7591] FAT-fs (loop0): FAT read failed (blocknr 32)
[  414.284413][ T7591] Buffer I/O error on dev loop0, logical block 34, lost sync page write
[  414.324977][ T7591] FAT-fs (loop0): unable to read inode block for updating (i_pos 548)
[  414.369691][ T7356] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.580436][ T5578] FAT-fs (loop0): Directory bread(block 34) failed
[  414.606268][ T5578] FAT-fs (loop0): Directory bread(block 40) failed
[  414.639801][ T5578] Buffer I/O error on dev loop0, logical block 33, lost sync page write
[  414.735418][ T7470] team0: Port device team_slave_0 added
[  414.795951][ T4870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  414.805491][ T4870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  414.814992][ T4870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  414.832289][ T4870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  414.845486][ T4870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  414.893168][ T7356] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.041514][ T7601] loop3: detected capacity change from 0 to 128
[  415.114572][ T7470] team0: Port device team_slave_1 added
[  415.198728][ T5226] 8021q: adding VLAN 0 to HW filter on device eth6
[  415.385331][ T7470] batman_adv: batadv0: Adding interface: batadv_slave_0
[  415.417542][ T7470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  415.465071][ T7357] FAT-fs (loop0): unable to read inode block for updating (i_pos 548)
[  415.473994][ T7357] FAT-fs (loop0): bread failed in fat_clusters_flush
[  415.482950][ T7470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  415.540360][ T5578] FAT-fs (loop0): unable to read boot sector to mark fs as dirty
[  415.579834][ T7470] batman_adv: batadv0: Adding interface: batadv_slave_1
[  415.586929][ T7470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  415.618081][ T7470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  416.041131][ T7400] kworker/u8:17: attempt to access beyond end of device
[  416.041131][ T7400] loop3: rw=1, sector=145, nr_sectors = 16 limit=128
[  416.085319][ T7400] kworker/u8:17: attempt to access beyond end of device
[  416.085319][ T7400] loop3: rw=1, sector=169, nr_sectors = 8 limit=128
[  416.106478][ T7400] kworker/u8:17: attempt to access beyond end of device
[  416.106478][ T7400] loop3: rw=1, sector=185, nr_sectors = 8 limit=128
[  416.124680][ T7400] kworker/u8:17: attempt to access beyond end of device
[  416.124680][ T7400] loop3: rw=1, sector=201, nr_sectors = 8 limit=128
[  416.159121][ T7400] kworker/u8:17: attempt to access beyond end of device
[  416.159121][ T7400] loop3: rw=1, sector=217, nr_sectors = 8 limit=128
[  416.217176][ T7400] kworker/u8:17: attempt to access beyond end of device
[  416.217176][ T7400] loop3: rw=1, sector=233, nr_sectors = 8 limit=128
[  416.295919][ T7400] kworker/u8:17: attempt to access beyond end of device
[  416.295919][ T7400] loop3: rw=1, sector=249, nr_sectors = 8 limit=128
[  416.319999][ T7356] bridge_slave_1: left allmulticast mode
[  416.361936][ T7356] bridge_slave_1: left promiscuous mode
[  416.380008][ T7400] kworker/u8:17: attempt to access beyond end of device
[  416.380008][ T7400] loop3: rw=1, sector=265, nr_sectors = 8 limit=128
[  416.394873][ T7356] bridge0: port 2(bridge_slave_1) entered disabled state
[  416.411162][ T7400] kworker/u8:17: attempt to access beyond end of device
[  416.411162][ T7400] loop3: rw=1, sector=281, nr_sectors = 8 limit=128
[  416.429599][ T7356] bridge_slave_0: left allmulticast mode
[  416.435671][ T7356] bridge_slave_0: left promiscuous mode
[  416.449778][ T7356] bridge0: port 1(bridge_slave_0) entered disabled state
[  416.467801][ T7400] kworker/u8:17: attempt to access beyond end of device
[  416.467801][ T7400] loop3: rw=1, sector=297, nr_sectors = 8 limit=128
[  416.502368][ T7356] bridge_slave_1: left allmulticast mode
[  416.517302][ T7356] bridge_slave_1: left promiscuous mode
[  416.525096][ T7356] bridge0: port 2(bridge_slave_1) entered disabled state
[  416.572822][ T7356] bridge_slave_0: left allmulticast mode
[  416.588985][ T7356] bridge_slave_0: left promiscuous mode
[  416.608434][ T7356] bridge0: port 1(bridge_slave_0) entered disabled state
[  416.897653][ T4870] Bluetooth: hci0: command tx timeout
[  417.440540][ T7611] netlink: 64 bytes leftover after parsing attributes in process `syz.3.564'.
[  417.515610][ T7356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  417.570227][ T7356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  417.601018][ T7356] bond0 (unregistering): Released all slaves
[  418.007020][ T5580] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  418.017726][ T5580] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  418.027258][ T5580] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  418.045239][ T5580] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  418.059566][ T5580] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  418.082236][ T7615] loop3: detected capacity change from 0 to 512
[  418.096961][ T7615] msdos: Bad value for 'uid'
[  418.102186][ T7615] msdos: Bad value for 'uid'
[  418.282445][ T7615] loop3: detected capacity change from 0 to 2048
[  418.292477][ T7356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  418.333077][ T7615]  loop3: p3 < > p4 < >
[  418.349130][ T7615] loop3: partition table partially beyond EOD, truncated
[  418.357259][ T7356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  418.370915][ T7615] loop3: p3 start 4284289 is beyond EOD, truncated
[  418.383827][ T7356] bond0 (unregistering): Released all slaves
[  418.933719][ T5771] udevd[5771]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  418.977951][ T5580] Bluetooth: hci0: command tx timeout
[  418.985196][ T7470] hsr_slave_0: entered promiscuous mode
[  419.037168][ T7470] hsr_slave_1: entered promiscuous mode
[  419.093059][ T7470] debugfs: 'hsr0' already exists in 'hsr'
[  419.113232][ T7470] Cannot create hsr debugfs directory
[  420.098046][ T5580] Bluetooth: hci2: command tx timeout
[  420.281230][ T7642] syz.3.570 (7642): /proc/7641/oom_adj is deprecated, please use /proc/7641/oom_score_adj instead.
[  420.938232][ T7356] hsr_slave_0: left promiscuous mode
[  420.945933][ T7356] hsr_slave_1: left promiscuous mode
[  420.954007][ T7356] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  420.966231][ T7356] batman_adv: batadv0: Removing interface: batadv_slave_0
[  420.982929][ T7356] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  420.991187][ T7356] batman_adv: batadv0: Removing interface: batadv_slave_1
[  421.024406][ T7356] hsr_slave_0: left promiscuous mode
[  421.032890][ T7356] hsr_slave_1: left promiscuous mode
[  421.043097][ T7356] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  421.053389][ T7356] batman_adv: batadv0: Removing interface: batadv_slave_0
[  421.067706][ T5580] Bluetooth: hci0: command tx timeout
[  421.074873][ T7356] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  421.086998][ T7356] batman_adv: batadv0: Removing interface: batadv_slave_1
[  421.193384][ T7356] veth1_macvtap: left promiscuous mode
[  421.202686][ T7356] veth0_macvtap: left promiscuous mode
[  421.210184][ T7356] veth1_vlan: left promiscuous mode
[  421.215972][ T7356] veth0_vlan: left promiscuous mode
[  421.236069][ T7356] veth1_macvtap: left promiscuous mode
[  421.256270][ T7356] veth0_macvtap: left promiscuous mode
[  421.271225][ T7356] veth1_vlan: left promiscuous mode
[  421.283699][ T7356] veth0_vlan: left promiscuous mode
[  422.178403][ T5580] Bluetooth: hci2: command tx timeout
[  422.334929][ T7356] team0 (unregistering): Port device team_slave_1 removed
[  422.360614][ T7356] team0 (unregistering): Port device team_slave_0 removed
[  422.886680][ T7356] team0 (unregistering): Port device team_slave_1 removed
[  422.924766][ T7356] team0 (unregistering): Port device team_slave_0 removed
[  423.147719][ T5580] Bluetooth: hci0: command tx timeout
[  423.716894][ T7667] loop3: detected capacity change from 0 to 512
[  423.743833][ T7667] msdos: Bad value for 'uid'
[  423.770012][ T7667] msdos: Bad value for 'uid'
[  424.005206][ T7667] loop3: detected capacity change from 0 to 2048
[  424.084820][ T7667]  loop3: p3 < > p4 < >
[  424.103589][ T7667] loop3: partition table partially beyond EOD, truncated
[  424.113916][ T7667] loop3: p3 start 4284289 is beyond EOD, truncated
[  424.257970][ T5580] Bluetooth: hci2: command tx timeout
[  424.518828][ T7518] bridge0: port 1(bridge_slave_0) entered blocking state
[  424.541599][ T7518] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.560738][ T7518] bridge_slave_0: entered allmulticast mode
[  424.604190][ T7518] bridge_slave_0: entered promiscuous mode
[  424.690712][ T7518] bridge0: port 2(bridge_slave_1) entered blocking state
[  424.718693][ T7518] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.745885][ T7518] bridge_slave_1: entered allmulticast mode
[  424.786327][ T7518] bridge_slave_1: entered promiscuous mode
[  424.799165][ T5771] udevd[5771]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  425.191853][ T7681] netlink: 'syz.3.575': attribute type 12 has an invalid length.
[  425.207891][ T7681] netlink: 'syz.3.575': attribute type 29 has an invalid length.
[  425.235808][ T7681] netlink: 148 bytes leftover after parsing attributes in process `syz.3.575'.
[  425.264971][ T7470] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  425.319050][ T7470] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  425.376551][ T7518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  425.455907][ T7518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  425.606609][ T7470] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  425.695027][ T7470] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  425.739896][ T7470] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  425.793565][ T7470] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  426.124696][ T7470] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  426.260147][ T7470] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  426.354976][ T5580] Bluetooth: hci2: command tx timeout
[  426.448997][ T7518] team0: Port device team_slave_0 added
[  426.495491][ T7518] team0: Port device team_slave_1 added
[  426.574453][ T5226] 8021q: adding VLAN 0 to HW filter on device eth7
[  426.934569][ T7518] batman_adv: batadv0: Adding interface: batadv_slave_0
[  426.942415][ T7518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  426.978539][ T7518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  427.125847][ T7518] batman_adv: batadv0: Adding interface: batadv_slave_1
[  427.149247][ T7518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  427.203603][ T7518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  427.222309][ T7699] syzkaller0: entered promiscuous mode
[  427.230517][ T7699] syzkaller0: entered allmulticast mode
[  427.660111][ T7356] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.935610][ T7356] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.954529][ T7705] tipc: Started in network mode
[  427.960809][ T7705] tipc: Node identity 84e, cluster identity 4711
[  427.968919][ T7705] tipc: Node number set to 2126
[  428.022479][ T7518] hsr_slave_0: entered promiscuous mode
[  428.036313][ T7518] hsr_slave_1: entered promiscuous mode
[  428.112108][ T7356] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.324085][ T7356] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.593949][ T7597] bridge0: port 1(bridge_slave_0) entered blocking state
[  428.619530][ T7597] bridge0: port 1(bridge_slave_0) entered disabled state
[  428.638391][ T7597] bridge_slave_0: entered allmulticast mode
[  428.669610][ T7597] bridge_slave_0: entered promiscuous mode
[  428.909482][ T7597] bridge0: port 2(bridge_slave_1) entered blocking state
[  428.918705][ T7597] bridge0: port 2(bridge_slave_1) entered disabled state
[  428.926452][ T7597] bridge_slave_1: entered allmulticast mode
[  428.937023][ T7597] bridge_slave_1: entered promiscuous mode
[  429.312815][ T7616] bridge0: port 1(bridge_slave_0) entered blocking state
[  429.325256][ T7616] bridge0: port 1(bridge_slave_0) entered disabled state
[  429.333698][ T7616] bridge_slave_0: entered allmulticast mode
[  429.352177][ T7616] bridge_slave_0: entered promiscuous mode
[  429.403745][ T7597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  429.543574][ T7616] bridge0: port 2(bridge_slave_1) entered blocking state
[  429.578233][ T7616] bridge0: port 2(bridge_slave_1) entered disabled state
[  429.598359][ T7616] bridge_slave_1: entered allmulticast mode
[  429.623241][ T7616] bridge_slave_1: entered promiscuous mode
[  429.744960][ T7597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  430.231317][ T7616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  430.489779][ T7616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  430.560642][ T7597] team0: Port device team_slave_0 added
[  430.918452][ T7597] team0: Port device team_slave_1 added
[  431.345038][ T7356] bridge_slave_1: left allmulticast mode
[  431.360069][ T7356] bridge_slave_1: left promiscuous mode
[  431.387286][ T7356] bridge0: port 2(bridge_slave_1) entered disabled state
[  431.430557][ T7356] bridge_slave_0: left allmulticast mode
[  431.437058][ T7356] bridge_slave_0: left promiscuous mode
[  431.448697][ T7356] bridge0: port 1(bridge_slave_0) entered disabled state
[  432.254795][ T7356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  432.318682][ T7356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  432.349483][ T7356] bond0 (unregistering): Released all slaves
[  432.390319][ T5226] 8021q: adding VLAN 0 to HW filter on device eth8
[  432.435632][ T7616] team0: Port device team_slave_0 added
[  432.618339][ T7616] team0: Port device team_slave_1 added
[  432.774557][ T7597] batman_adv: batadv0: Adding interface: batadv_slave_0
[  432.792827][ T7597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  432.852596][ T7597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  433.112013][ T7597] batman_adv: batadv0: Adding interface: batadv_slave_1
[  433.120117][ T7597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  433.148960][ T7597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  433.239349][ T7616] batman_adv: batadv0: Adding interface: batadv_slave_0
[  433.258863][ T7616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  433.292811][ T7616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  433.502333][ T7616] batman_adv: batadv0: Adding interface: batadv_slave_1
[  433.510469][ T7616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  433.540509][ T7616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  433.795070][ T7470] 8021q: adding VLAN 0 to HW filter on device bond0
[  433.829871][ T7356] hsr_slave_0: left promiscuous mode
[  433.843675][ T7356] hsr_slave_1: left promiscuous mode
[  433.863843][ T7356] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  433.874208][ T7356] batman_adv: batadv0: Removing interface: batadv_slave_0
[  433.901854][ T7356] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  433.909909][ T7356] batman_adv: batadv0: Removing interface: batadv_slave_1
[  433.958184][ T7356] veth1_macvtap: left promiscuous mode
[  433.969247][ T7356] veth0_macvtap: left promiscuous mode
[  433.976534][ T7356] veth1_vlan: left promiscuous mode
[  433.985239][ T7356] veth0_vlan: left promiscuous mode
[  435.610115][ T7356] team0 (unregistering): Port device team_slave_1 removed
[  435.714911][ T7356] team0 (unregistering): Port device team_slave_0 removed
[  436.679960][ T7597] hsr_slave_0: entered promiscuous mode
[  436.706861][ T7597] hsr_slave_1: entered promiscuous mode
[  436.736442][ T7597] debugfs: 'hsr0' already exists in 'hsr'
[  436.744253][ T7597] Cannot create hsr debugfs directory
[  436.846023][ T7518] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  436.891032][ T7518] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  437.030712][ T7518] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  437.081538][ T7518] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  437.103318][ T7518] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  437.151554][ T7518] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  437.231642][ T7616] hsr_slave_0: entered promiscuous mode
[  437.256317][ T7616] hsr_slave_1: entered promiscuous mode
[  437.289291][ T7616] debugfs: 'hsr0' already exists in 'hsr'
[  437.307960][ T7616] Cannot create hsr debugfs directory
[  437.437011][ T7518] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  437.526532][ T7518] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  438.034346][ T7470] 8021q: adding VLAN 0 to HW filter on device team0
[  438.692227][   T82] bridge0: port 1(bridge_slave_0) entered blocking state
[  438.699949][   T82] bridge0: port 1(bridge_slave_0) entered forwarding state
[  438.987960][  T134] bridge0: port 2(bridge_slave_1) entered blocking state
[  438.995518][  T134] bridge0: port 2(bridge_slave_1) entered forwarding state
[  439.674724][ T7756] netlink: 28 bytes leftover after parsing attributes in process `syz.3.588'.
[  439.982368][ T7761] capability: warning: `syz.3.589' uses 32-bit capabilities (legacy support in use)
[  440.053652][ T7761] program syz.3.589 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  440.365444][ T7597] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  440.425079][ T7597] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  440.514531][ T7597] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  440.574119][ T7597] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  440.593136][ T7597] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  440.652460][ T7597] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  440.678360][ T7597] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  440.707720][ T7597] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  440.724098][ T5226] 8021q: adding VLAN 0 to HW filter on device eth9
[  440.745696][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.591'.
[  440.926150][ T7766] team0 (unregistering): Port device team_slave_0 removed
[  440.952093][ T7766] team0 (unregistering): Port device team_slave_1 removed
[  441.353463][ T7616] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  441.423294][ T7616] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  441.481195][ T7518] 8021q: adding VLAN 0 to HW filter on device bond0
[  441.503386][ T7616] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  441.556619][ T7616] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  441.569182][ T7616] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  441.607148][ T7616] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  441.689696][ T7616] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  441.734132][ T7616] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  442.057139][ T7518] 8021q: adding VLAN 0 to HW filter on device team0
[  442.294868][ T7356] bridge0: port 1(bridge_slave_0) entered blocking state
[  442.302479][ T7356] bridge0: port 1(bridge_slave_0) entered forwarding state
[  442.382819][ T7782] loop3: detected capacity change from 0 to 512
[  442.443856][ T7400] bridge0: port 2(bridge_slave_1) entered blocking state
[  442.451487][ T7400] bridge0: port 2(bridge_slave_1) entered forwarding state
[  442.522125][ T7782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  442.553682][ T7782] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  442.684847][ T7782] tmpfs: Unknown parameter 'inode31'
[  443.602205][ T7597] 8021q: adding VLAN 0 to HW filter on device bond0
[  444.003676][   T29] audit: type=1800 audit(1777968441.238:19): pid=7790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.594" name="file1" dev="loop3" ino=15 res=0 errno=0
[  444.081781][ T7597] 8021q: adding VLAN 0 to HW filter on device team0
[  444.292586][ T7357] bridge0: port 1(bridge_slave_0) entered blocking state
[  444.300380][ T7357] bridge0: port 1(bridge_slave_0) entered forwarding state
[  444.522097][ T7357] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.529788][ T7357] bridge0: port 2(bridge_slave_1) entered forwarding state
[  444.720006][ T7616] 8021q: adding VLAN 0 to HW filter on device bond0
[  445.211593][ T7470] 8021q: adding VLAN 0 to HW filter on device batadv0
[  445.271468][ T7616] 8021q: adding VLAN 0 to HW filter on device team0
[  445.587994][ T7356] bridge0: port 1(bridge_slave_0) entered blocking state
[  445.595676][ T7356] bridge0: port 1(bridge_slave_0) entered forwarding state
[  445.839094][ T5226] 8021q: adding VLAN 0 to HW filter on device eth10
[  445.893095][ T7356] bridge0: port 2(bridge_slave_1) entered blocking state
[  445.900858][ T7356] bridge0: port 2(bridge_slave_1) entered forwarding state
[  446.376989][ T5586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  447.200057][ T7827] loop3: detected capacity change from 0 to 128
[  447.665481][ T7827] FAT-fs (loop3): Directory bread(block 32) failed
[  447.779047][ T7827] FAT-fs (loop3): Directory bread(block 33) failed
[  447.828861][ T7827] FAT-fs (loop3): Directory bread(block 34) failed
[  447.896562][ T7827] FAT-fs (loop3): Directory bread(block 35) failed
[  447.948886][ T7827] FAT-fs (loop3): Directory bread(block 36) failed
[  448.009679][ T7827] FAT-fs (loop3): Directory bread(block 37) failed
[  448.097790][ T7827] FAT-fs (loop3): Directory bread(block 38) failed
[  448.200394][ T7827] FAT-fs (loop3): Directory bread(block 39) failed
[  448.292795][ T7827] FAT-fs (loop3): Directory bread(block 40) failed
[  448.454637][ T7827] FAT-fs (loop3): Directory bread(block 41) failed
[  449.397721][ T7470] veth0_vlan: entered promiscuous mode
[  449.584869][ T7518] 8021q: adding VLAN 0 to HW filter on device batadv0
[  449.717276][ T7470] veth1_vlan: entered promiscuous mode
[  449.874580][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  449.889556][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  452.040314][ T7597] 8021q: adding VLAN 0 to HW filter on device batadv0
[  452.495091][ T4870] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  452.521964][ T4870] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  452.533198][ T4870] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  452.549360][ T4870] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  452.567578][ T4870] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  452.935049][ T7879] loop3: detected capacity change from 0 to 512
[  453.218899][ T7879] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.597: inode has both inline data and extents flags
[  453.381279][ T7879] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  453.383552][ T7879] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.597: couldn't read orphan inode 15 (err -117)
[  453.393280][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  453.393374][    C0] EXT4-fs (loop3): initial error at time 1777968450: ext4_orphan_get:1397: inode 15
[  453.393542][    C0] EXT4-fs (loop3): last error at time 1777968450: ext4_orphan_get:1397: inode 15
[  453.534514][ T7879] loop3: lost filesystem error report for type 5 error -117
[  453.565581][ T7879] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  453.772849][ T7616] 8021q: adding VLAN 0 to HW filter on device batadv0
[  453.819043][ T7518] veth0_vlan: entered promiscuous mode
[  454.021455][ T7887] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 13: invalid block bitmap
[  454.040214][ T5226] 8021q: adding VLAN 0 to HW filter on device eth11
[  454.120369][ T7518] veth1_vlan: entered promiscuous mode
[  454.294810][ T5586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  454.657639][ T5580] Bluetooth: hci3: command tx timeout
[  454.845471][ T7518] veth0_macvtap: entered promiscuous mode
[  455.005032][ T7900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.598'.
[  455.063885][ T7518] veth1_macvtap: entered promiscuous mode
[  455.490641][ T7518] batman_adv: batadv0: Interface activated: batadv_slave_0
[  455.836846][ T7518] batman_adv: batadv0: Interface activated: batadv_slave_1
[  456.159413][ T5699] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  456.212267][ T5699] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  456.444139][ T5699] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  456.495856][ T5699] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  456.737704][ T5580] Bluetooth: hci3: command tx timeout
[  458.287257][ T7597] veth0_vlan: entered promiscuous mode
[  458.412416][   T82] bridge_slave_1: left allmulticast mode
[  458.449585][   T82] bridge_slave_1: left promiscuous mode
[  458.468734][   T82] bridge0: port 2(bridge_slave_1) entered disabled state
[  458.509091][   T82] bridge_slave_0: left allmulticast mode
[  458.533041][   T82] bridge_slave_0: left promiscuous mode
[  458.555797][   T82] bridge0: port 1(bridge_slave_0) entered disabled state
[  458.818966][ T5580] Bluetooth: hci3: command tx timeout
[  459.233302][ T7939] loop3: detected capacity change from 0 to 164
[  459.366035][ T7939] iso9660: Corrupted directory entry in block 4 of inode 1792
[  459.531258][   T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  459.596736][   T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  459.646277][   T82] bond0 (unregistering): Released all slaves
[  459.816238][ T5226] 8021q: adding VLAN 0 to HW filter on device eth12
[  459.890291][ T7943] loop3: detected capacity change from 0 to 512
[  460.011679][ T7943] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.604: inode has both inline data and extents flags
[  460.088611][ T7943] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  460.092964][ T7943] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.604: couldn't read orphan inode 15 (err -117)
[  460.113502][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  460.113597][    C1] EXT4-fs (loop3): initial error at time 1777968457: ext4_orphan_get:1397: inode 15
[  460.113765][    C1] EXT4-fs (loop3): last error at time 1777968457: ext4_orphan_get:1397: inode 15
[  460.172135][ T7943] loop3: lost filesystem error report for type 5 error -117
[  460.183899][   T82] hsr_slave_0: left promiscuous mode
[  460.214258][ T7943] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  460.232048][   T82] hsr_slave_1: left promiscuous mode
[  460.250124][   T82] batman_adv: batadv0: Removing interface: batadv_slave_0
[  460.275691][   T82] batman_adv: batadv0: Removing interface: batadv_slave_1
[  460.335356][   T82] veth1_vlan: left promiscuous mode
[  460.362455][   T82] veth0_vlan: left promiscuous mode
[  460.526965][ T5586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  460.897761][ T5580] Bluetooth: hci3: command tx timeout
[  461.662711][   T82] team0 (unregistering): Port device team_slave_1 removed
[  461.704138][   T82] team0 (unregistering): Port device team_slave_0 removed
[  462.349563][ T7597] veth1_vlan: entered promiscuous mode
[  462.877165][ T7616] veth0_vlan: entered promiscuous mode
[  463.150419][ T7616] veth1_vlan: entered promiscuous mode
[  463.483432][ T7597] veth0_macvtap: entered promiscuous mode
[  463.945406][ T7597] veth1_macvtap: entered promiscuous mode
[  464.357064][ T7616] veth0_macvtap: entered promiscuous mode
[  464.479248][ T7597] batman_adv: batadv0: Interface activated: batadv_slave_0
[  464.649022][ T7616] veth1_macvtap: entered promiscuous mode
[  464.735531][ T7597] batman_adv: batadv0: Interface activated: batadv_slave_1
[  465.000496][  T140] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  465.047616][   T14] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  465.102776][   T14] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  465.155205][   T14] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  465.545078][ T7616] batman_adv: batadv0: Interface activated: batadv_slave_0
[  465.841604][ T7875] bridge0: port 1(bridge_slave_0) entered blocking state
[  465.886843][ T7875] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.925124][ T7875] bridge_slave_0: entered allmulticast mode
[  465.963884][ T7875] bridge_slave_0: entered promiscuous mode
[  466.086398][ T7616] batman_adv: batadv0: Interface activated: batadv_slave_1
[  466.147128][ T7875] bridge0: port 2(bridge_slave_1) entered blocking state
[  466.186902][ T7875] bridge0: port 2(bridge_slave_1) entered disabled state
[  466.222970][ T7875] bridge_slave_1: entered allmulticast mode
[  466.265898][ T7875] bridge_slave_1: entered promiscuous mode
[  466.474608][ T4870] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  466.485867][ T4870] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  466.495800][ T4870] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  466.513542][ T4870] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  466.532025][ T4870] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  466.945235][ T7875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  467.113367][ T7875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  467.342914][ T5699] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  467.399389][ T5699] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  467.441267][ T7357] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  467.635223][ T7357] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  467.750447][ T7875] team0: Port device team_slave_0 added
[  467.846023][ T7875] team0: Port device team_slave_1 added
[  468.275932][ T8004] loop3: detected capacity change from 0 to 512
[  468.391478][ T7875] batman_adv: batadv0: Adding interface: batadv_slave_0
[  468.483222][ T8004] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.611: inode has both inline data and extents flags
[  468.496994][ T7875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  468.561194][ T8004] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  468.567456][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  468.583477][    C1] EXT4-fs (loop3): initial error at time 1777968465: ext4_orphan_get:1397: inode 15
[  468.593284][    C1] EXT4-fs (loop3): last error at time 1777968465: ext4_orphan_get:1397: inode 15
[  468.617214][ T8004] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.611: couldn't read orphan inode 15 (err -117)
[  468.630153][ T4870] Bluetooth: hci5: command tx timeout
[  468.652772][ T7875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  468.680880][ T8004] loop3: lost filesystem error report for type 5 error -117
[  468.695676][ T8004] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  468.802684][ T7875] batman_adv: batadv0: Adding interface: batadv_slave_1
[  468.838650][ T7875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  468.881055][ T8004] netlink: 492 bytes leftover after parsing attributes in process `syz.3.611'.
[  468.992430][ T7875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  469.246029][ T5226] 8021q: adding VLAN 0 to HW filter on device eth13
[  469.281610][ T5586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  469.802528][  T140] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.208876][  T140] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.367581][ T7875] hsr_slave_0: entered promiscuous mode
[  470.433940][ T7875] hsr_slave_1: entered promiscuous mode
[  470.465643][ T7875] debugfs: 'hsr0' already exists in 'hsr'
[  470.499281][ T7875] Cannot create hsr debugfs directory
[  470.629492][  T140] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.657766][ T4870] Bluetooth: hci5: command tx timeout
[  471.073077][  T140] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.226745][ T8050] loop3: detected capacity change from 0 to 512
[  472.306304][ T8050] FAT-fs (loop3): bogus number of FAT sectors
[  472.328746][ T8050] FAT-fs (loop3): Can't find a valid FAT filesystem
[  472.436511][   T29] audit: type=1326 audit(1777968469.668:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8047 comm="syz.3.616" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f78b359cdd9 code=0x0
[  472.737558][ T4870] Bluetooth: hci5: command tx timeout
[  473.550808][  T140] bridge_slave_1: left allmulticast mode
[  473.576463][  T140] bridge_slave_1: left promiscuous mode
[  473.631064][  T140] bridge0: port 2(bridge_slave_1) entered disabled state
[  473.682310][  T140] bridge_slave_0: left allmulticast mode
[  473.698402][  T140] bridge_slave_0: left promiscuous mode
[  473.724286][  T140] bridge0: port 1(bridge_slave_0) entered disabled state
[  474.170285][ T8072] loop3: detected capacity change from 0 to 512
[  474.270034][ T8072] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.618: inode has both inline data and extents flags
[  474.361541][ T8072] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  474.363086][ T8072] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.618: couldn't read orphan inode 15 (err -117)
[  474.372760][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  474.372870][    C0] EXT4-fs (loop3): initial error at time 1777968471: ext4_orphan_get:1397: inode 15
[  474.373045][    C0] EXT4-fs (loop3): last error at time 1777968471: ext4_orphan_get:1397: inode 15
[  474.462464][ T8072] loop3: lost filesystem error report for type 5 error -117
[  474.466091][ T8072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  474.610582][ T8072] netlink: 492 bytes leftover after parsing attributes in process `syz.3.618'.
[  474.700625][ T5580] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  474.710130][ T5580] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  474.721470][ T5580] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  474.735199][ T5580] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  474.751509][ T5580] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  474.821650][ T5580] Bluetooth: hci5: command tx timeout
[  474.869095][ T5586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  475.033933][  T140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  475.085282][  T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  475.133898][  T140] bond0 (unregistering): Released all slaves
[  475.561537][  T140] hsr_slave_0: left promiscuous mode
[  475.592148][  T140] hsr_slave_1: left promiscuous mode
[  475.610621][  T140] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  475.630198][  T140] batman_adv: batadv0: Removing interface: batadv_slave_0
[  475.662837][  T140] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  475.683740][  T140] batman_adv: batadv0: Removing interface: batadv_slave_1
[  475.736926][  T140] veth1_macvtap: left promiscuous mode
[  475.769673][  T140] veth0_macvtap: left promiscuous mode
[  475.780508][  T140] veth1_vlan: left promiscuous mode
[  475.806427][  T140] veth0_vlan: left promiscuous mode
[  476.767171][ T8094] loop3: detected capacity change from 0 to 512
[  476.817998][ T5580] Bluetooth: hci1: command tx timeout
[  476.828787][ T8094] EXT4-fs (loop3): 1 truncate cleaned up
[  476.914964][ T8094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  477.070344][   T29] audit: type=1800 audit(1777968474.308:21): pid=8094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.623" name="file1" dev="loop3" ino=15 res=0 errno=0
[  477.481251][  T140] team0 (unregistering): Port device team_slave_1 removed
[  477.537699][  T140] team0 (unregistering): Port device team_slave_0 removed
[  477.688302][ T5586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  478.726890][ T8104] loop3: detected capacity change from 0 to 512
[  478.832609][ T8104] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.625: inode has both inline data and extents flags
[  478.900800][ T5580] Bluetooth: hci1: command tx timeout
[  478.955475][ T4870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  478.967490][ T4870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  478.976441][ T4870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  478.979127][ T8104] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  478.995159][ T8104] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.625: couldn't read orphan inode 15 (err -117)
[  478.997846][ T4870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  479.005045][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  479.030282][    C1] EXT4-fs (loop3): initial error at time 1777968476: ext4_orphan_get:1397: inode 15
[  479.040110][    C1] EXT4-fs (loop3): last error at time 1777968476: ext4_orphan_get:1397: inode 15
[  479.079330][ T4870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  479.103556][ T8104] loop3: lost filesystem error report for type 5 error -117
[  479.143032][ T8104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  479.331103][ T8104] netlink: 492 bytes leftover after parsing attributes in process `syz.3.625'.
[  479.598873][  T140] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.655006][ T5586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  479.867057][  T140] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.936569][ T7875] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  480.045543][ T7875] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  480.261840][  T140] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.332023][ T7875] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  480.410225][ T7875] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  480.446209][ T7875] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  480.490483][ T7875] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  480.691820][  T140] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.783723][ T7875] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  480.915520][ T7875] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  480.977607][ T5580] Bluetooth: hci1: command tx timeout
[  481.139046][ T5580] Bluetooth: hci0: command tx timeout
[  481.940188][ T5070] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  482.158800][ T5070] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  482.191435][ T5070] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  482.217904][ T5070] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55
[  482.239701][ T5070] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  482.249794][ T5070] usb 4-1: Product: syz
[  482.254241][ T5070] usb 4-1: Manufacturer: syz
[  482.264070][ T5070] usb 4-1: SerialNumber: syz
[  482.301665][ T5070] usb 4-1: config 0 descriptor??
[  482.494612][ T7987] bridge0: port 1(bridge_slave_0) entered blocking state
[  482.518411][ T7987] bridge0: port 1(bridge_slave_0) entered disabled state
[  482.533389][ T7987] bridge_slave_0: entered allmulticast mode
[  482.544932][ T7987] bridge_slave_0: entered promiscuous mode
[  482.572862][ T7987] bridge0: port 2(bridge_slave_1) entered blocking state
[  482.586371][ T7987] bridge0: port 2(bridge_slave_1) entered disabled state
[  482.596804][ T7987] bridge_slave_1: entered allmulticast mode
[  482.608905][ T8133] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  482.615614][ T8133] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  482.624450][ T7987] bridge_slave_1: entered promiscuous mode
[  482.642120][ T8133] vhci_hcd vhci_hcd.0: Device attached
[  482.695845][  T140] bridge_slave_1: left allmulticast mode
[  482.702227][  T140] bridge_slave_1: left promiscuous mode
[  482.713643][  T140] bridge0: port 2(bridge_slave_1) entered disabled state
[  482.729741][ T8142] vhci_hcd: connection closed
[  482.733506][ T5070] usb 4-1: USB disconnect, device number 5
[  482.746495][ T7357] vhci_hcd vhci_hcd.3: stop threads
[  482.766979][ T7357] vhci_hcd vhci_hcd.3: release socket
[  482.767213][  T140] bridge_slave_0: left allmulticast mode
[  482.794946][ T7357] vhci_hcd vhci_hcd.3: disconnect device
[  482.813916][  T140] bridge_slave_0: left promiscuous mode
[  482.835114][  T140] bridge0: port 1(bridge_slave_0) entered disabled state
[  482.863585][ T5669] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  483.058682][ T5580] Bluetooth: hci1: command tx timeout
[  483.223001][ T5580] Bluetooth: hci0: command tx timeout
[  483.462217][  T140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  483.509344][  T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  483.546515][  T140] bond0 (unregistering): Released all slaves
[  483.758508][ T5070] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  483.909458][ T5226] 8021q: adding VLAN 0 to HW filter on device eth14
[  483.930284][ T5070] usb 4-1: Using ep0 maxpacket: 16
[  483.946624][ T7987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  483.968859][ T5070] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  483.995724][ T5070] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  484.017170][ T5070] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[  484.041117][ T5070] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  484.049732][ T5070] usb 4-1: SerialNumber: syz
[  484.103273][  T140] hsr_slave_0: left promiscuous mode
[  484.112199][  T140] hsr_slave_1: left promiscuous mode
[  484.120527][  T140] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  484.130275][  T140] batman_adv: batadv0: Removing interface: batadv_slave_0
[  484.143505][  T140] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  484.152580][  T140] batman_adv: batadv0: Removing interface: batadv_slave_1
[  484.182746][  T140] veth1_macvtap: left promiscuous mode
[  484.190299][  T140] veth0_macvtap: left promiscuous mode
[  484.196548][  T140] veth1_vlan: left promiscuous mode
[  484.202853][  T140] veth0_vlan: left promiscuous mode
[  484.291191][ T5666] usb 4-1: USB disconnect, device number 6
[  484.874040][  T140] team0 (unregistering): Port device team_slave_1 removed
[  484.947552][  T140] team0 (unregistering): Port device team_slave_0 removed
[  485.271935][ T8158] loop3: detected capacity change from 0 to 512
[  485.298743][ T5580] Bluetooth: hci0: command tx timeout
[  485.349574][ T8158] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.632: inode has both inline data and extents flags
[  485.405637][ T8158] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  485.407499][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  485.418471][ T8158] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.632: couldn't read orphan inode 15 (err -117)
[  485.423510][    C0] EXT4-fs (loop3): initial error at time 1777968482: ext4_orphan_get:1397: inode 15
[  485.445072][    C0] EXT4-fs (loop3): last error at time 1777968482: ext4_orphan_get:1397: inode 15
[  485.455187][ T8158] loop3: lost filesystem error report for type 5 error -117
[  485.487553][ T8158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  485.579110][ T8158] netlink: 472 bytes leftover after parsing attributes in process `syz.3.632'.
[  485.644009][ T7987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  485.884459][ T5586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  486.370339][ T7987] team0: Port device team_slave_0 added
[  486.455950][ T7987] team0: Port device team_slave_1 added
[  486.704248][  T140] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.760241][ T7987] batman_adv: batadv0: Adding interface: batadv_slave_0
[  486.779474][ T7987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  486.817049][ T7987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  486.965517][  T140] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.995689][ T7987] batman_adv: batadv0: Adding interface: batadv_slave_1
[  487.007100][ T7987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  487.035917][ T7987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  487.115214][ T8173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.636'.
[  487.176261][  T140] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  487.378038][ T5580] Bluetooth: hci0: command tx timeout
[  487.403067][  T140] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  487.565039][   T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  487.665391][ T7987] hsr_slave_0: entered promiscuous mode
[  487.714471][ T7987] hsr_slave_1: entered promiscuous mode
[  487.728535][   T24] usb 4-1: Using ep0 maxpacket: 16
[  487.754471][   T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  487.790964][   T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  487.840341][   T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[  487.862510][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  487.884621][   T24] usb 4-1: SerialNumber: syz
[  488.129114][   T24] usb 4-1: USB disconnect, device number 7
[  488.521481][ T8076] bridge0: port 1(bridge_slave_0) entered blocking state
[  488.535556][ T8076] bridge0: port 1(bridge_slave_0) entered disabled state
[  488.554988][ T8076] bridge_slave_0: entered allmulticast mode
[  488.570424][ T8076] bridge_slave_0: entered promiscuous mode
[  488.775347][ T8076] bridge0: port 2(bridge_slave_1) entered blocking state
[  488.793368][ T8076] bridge0: port 2(bridge_slave_1) entered disabled state
[  488.820528][ T8076] bridge_slave_1: entered allmulticast mode
[  488.870417][ T8076] bridge_slave_1: entered promiscuous mode
[  489.168918][  T140] bridge_slave_1: left allmulticast mode
[  489.188653][  T140] bridge_slave_1: left promiscuous mode
[  489.199914][  T140] bridge0: port 2(bridge_slave_1) entered disabled state
[  489.233548][  T140] bridge_slave_0: left allmulticast mode
[  489.239594][  T140] bridge_slave_0: left promiscuous mode
[  489.246281][  T140] bridge0: port 1(bridge_slave_0) entered disabled state
[  489.476788][ T8196] loop3: detected capacity change from 0 to 512
[  489.526314][ T8196] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.639: inode has both inline data and extents flags
[  489.556157][ T8196] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  489.557440][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  489.573458][    C0] EXT4-fs (loop3): initial error at time 1777968486: ext4_orphan_get:1397: inode 15
[  489.583245][    C0] EXT4-fs (loop3): last error at time 1777968486: ext4_orphan_get:1397: inode 15
[  489.610318][ T8196] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.639: couldn't read orphan inode 15 (err -117)
[  489.647985][ T8196] loop3: lost filesystem error report for type 5 error -117
[  489.672962][ T8196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  489.855057][ T8196] netlink: 472 bytes leftover after parsing attributes in process `syz.3.639'.
[  490.031536][ T5586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  490.174269][  T140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  490.240362][  T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  490.305877][  T140] bond0 (unregistering): Released all slaves
[  490.668494][ T5226] 8021q: adding VLAN 0 to HW filter on device eth15
[  490.743431][ T8076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  490.790361][ T8076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  490.886295][  T140] hsr_slave_0: left promiscuous mode
[  490.895350][  T140] hsr_slave_1: left promiscuous mode
[  490.930720][  T140] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  490.949453][  T140] batman_adv: batadv0: Removing interface: batadv_slave_0
[  490.974277][  T140] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  490.998120][  T140] batman_adv: batadv0: Removing interface: batadv_slave_1
[  491.071535][  T140] veth1_macvtap: left promiscuous mode
[  491.079709][  T140] veth0_macvtap: left promiscuous mode
[  491.085710][  T140] veth1_vlan: left promiscuous mode
[  491.092365][  T140] veth0_vlan: left promiscuous mode
[  492.001098][  T140] team0 (unregistering): Port device team_slave_1 removed
[  492.046192][  T140] team0 (unregistering): Port device team_slave_0 removed
[  492.265461][ T7875] 8021q: adding VLAN 0 to HW filter on device bond0
[  492.591928][ T8076] team0: Port device team_slave_0 added
[  492.717246][ T8076] team0: Port device team_slave_1 added
[  492.867138][ T8107] bridge0: port 1(bridge_slave_0) entered blocking state
[  492.875120][ T8107] bridge0: port 1(bridge_slave_0) entered disabled state
[  492.883640][ T8107] bridge_slave_0: entered allmulticast mode
[  492.893313][ T8107] bridge_slave_0: entered promiscuous mode
[  492.956520][ T8107] bridge0: port 2(bridge_slave_1) entered blocking state
[  492.968170][ T8107] bridge0: port 2(bridge_slave_1) entered disabled state
[  492.975716][ T8107] bridge_slave_1: entered allmulticast mode
[  492.985259][ T8107] bridge_slave_1: entered promiscuous mode
[  493.003183][ T8076] batman_adv: batadv0: Adding interface: batadv_slave_0
[  493.012958][ T8076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  493.041522][ T8076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  493.067777][  T809] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  493.170064][ T8076] batman_adv: batadv0: Adding interface: batadv_slave_1
[  493.177514][ T8076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  493.203850][ T8076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  493.237905][  T809] usb 4-1: Using ep0 maxpacket: 16
[  493.260772][ T8107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  493.274302][  T809] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  493.293421][  T809] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  493.310980][  T809] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[  493.321039][  T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  493.338280][  T809] usb 4-1: SerialNumber: syz
[  493.397123][ T8107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  493.506864][ T7875] 8021q: adding VLAN 0 to HW filter on device team0
[  493.555310][ T8107] team0: Port device team_slave_0 added
[  493.600429][ T5070] usb 4-1: USB disconnect, device number 8
[  493.652634][ T8107] team0: Port device team_slave_1 added
[  493.759454][ T7358] bridge0: port 1(bridge_slave_0) entered blocking state
[  493.766967][ T7358] bridge0: port 1(bridge_slave_0) entered forwarding state
[  493.846493][ T8076] hsr_slave_0: entered promiscuous mode
[  493.855725][ T8076] hsr_slave_1: entered promiscuous mode
[  493.864135][ T8076] debugfs: 'hsr0' already exists in 'hsr'
[  493.871449][ T8076] Cannot create hsr debugfs directory
[  493.893083][ T8107] batman_adv: batadv0: Adding interface: batadv_slave_0
[  493.901468][ T8107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  493.933356][ T8107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  493.952011][ T8107] batman_adv: batadv0: Adding interface: batadv_slave_1
[  493.960300][ T8107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  493.989101][ T8107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  494.052001][ T5699] bridge0: port 2(bridge_slave_1) entered blocking state
[  494.059555][ T5699] bridge0: port 2(bridge_slave_1) entered forwarding state
[  494.535739][ T8107] hsr_slave_0: entered promiscuous mode
[  494.565915][ T8107] hsr_slave_1: entered promiscuous mode
[  494.597015][ T8107] debugfs: 'hsr0' already exists in 'hsr'
[  494.609851][ T8107] Cannot create hsr debugfs directory
[  494.624244][ T8227] loop3: detected capacity change from 0 to 512
[  494.695237][ T8227] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.646: inode has both inline data and extents flags
[  494.720514][ T8227] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  494.722692][ T8227] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.646: couldn't read orphan inode 15 (err -117)
[  494.732400][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  494.732495][    C0] EXT4-fs (loop3): initial error at time 1777968491: ext4_orphan_get:1397: inode 15
[  494.732661][    C0] EXT4-fs (loop3): last error at time 1777968491: ext4_orphan_get:1397: inode 15
[  494.792643][ T8227] loop3: lost filesystem error report for type 5 error -117
[  494.812651][ T8227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  494.885705][ T8227] netlink: 472 bytes leftover after parsing attributes in process `syz.3.646'.
[  494.984433][ T5586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  495.583536][ T7987] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  495.633062][ T7987] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  495.789724][ T7987] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  495.815107][ T7987] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  495.883574][ T8239] loop3: detected capacity change from 0 to 512
[  495.983633][ T8239] EXT4-fs error (device loop3): ext4_free_inode:354: comm syz.3.649: bit already cleared for inode 11
[  495.999106][ T8239] loop3: lost filesystem error report for type 5 error -117
[  496.006222][ T8239] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[  496.009079][ T7987] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  496.014386][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  496.036007][    C1] EXT4-fs (loop3): initial error at time 1777968493: ext4_free_inode:354
[  496.044787][    C1] EXT4-fs (loop3): last error at time 1777968493: ext4_free_inode:354
[  496.087888][ T8239] loop3: lost filesystem error report for type 5 error -117
[  496.093008][ T8239] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[  496.124812][ T7987] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  496.132695][ T8239] loop3: lost filesystem error report for type 5 error -117
[  496.140382][ T8239] EXT4-fs (loop3): 1 orphan inode deleted
[  496.196244][ T8239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  496.341497][ T7987] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  496.376445][ T7987] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  498.160791][ T5226] 8021q: adding VLAN 0 to HW filter on device eth16
[  498.458879][ T7875] 8021q: adding VLAN 0 to HW filter on device batadv0
[  498.704744][ T8235] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  498.731425][ T8076] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  498.801523][ T8076] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  498.822062][ T8107] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  498.898355][ T8107] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  498.922010][ T8107] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  498.982395][ T8107] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  499.029886][ T8076] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  499.044824][ T5586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  499.077201][ T8076] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  499.101418][ T8107] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  499.166411][ T8107] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  499.190534][ T8107] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  499.238545][ T8107] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  499.273731][ T8076] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  499.368029][ T8076] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  499.420529][ T8076] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  499.533751][ T8076] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  500.120201][   T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  500.298486][   T24] usb 4-1: Using ep0 maxpacket: 16
[  500.322829][   T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  500.358330][   T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  500.382397][   T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[  500.405656][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  500.427590][   T24] usb 4-1: SerialNumber: syz
[  500.680331][   T24] usb 4-1: USB disconnect, device number 9
[  500.796655][ T7875] veth0_vlan: entered promiscuous mode
[  501.018965][ T7875] veth1_vlan: entered promiscuous mode
[  501.193161][ T7987] 8021q: adding VLAN 0 to HW filter on device bond0
[  501.412662][ T8107] 8021q: adding VLAN 0 to HW filter on device bond0
[  501.636877][ T7987] 8021q: adding VLAN 0 to HW filter on device team0
[  501.878913][ T8107] 8021q: adding VLAN 0 to HW filter on device team0
[  501.933714][ T7357] bridge0: port 1(bridge_slave_0) entered blocking state
[  501.941380][ T7357] bridge0: port 1(bridge_slave_0) entered forwarding state
[  501.996272][ T8295] loop3: detected capacity change from 0 to 512
[  502.083364][ T7357] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.091079][ T7357] bridge0: port 1(bridge_slave_0) entered forwarding state
[  502.130753][ T8295] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.653: inode has both inline data and extents flags
[  502.182822][ T8295] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  502.185176][ T8295] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.653: couldn't read orphan inode 15 (err -117)
[  502.194859][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  502.194967][    C1] EXT4-fs (loop3): initial error at time 1777968499: ext4_orphan_get:1397: inode 15
[  502.195142][    C1] EXT4-fs (loop3): last error at time 1777968499: ext4_orphan_get:1397: inode 15
[  502.210406][ T7357] bridge0: port 2(bridge_slave_1) entered blocking state
[  502.210822][ T7357] bridge0: port 2(bridge_slave_1) entered forwarding state
[  502.262687][ T8295] loop3: lost filesystem error report for type 5 error -117
[  502.294854][ T8295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  502.351946][ T8076] 8021q: adding VLAN 0 to HW filter on device bond0
[  502.352154][ T8295] netlink: 436 bytes leftover after parsing attributes in process `syz.3.653'.
[  502.371218][ T8295] netlink: 28 bytes leftover after parsing attributes in process `syz.3.653'.
[  502.397997][ T5226] 8021q: adding VLAN 0 to HW filter on device eth17
[  502.469298][ T7875] veth0_macvtap: entered promiscuous mode
[  502.506805][ T7358] bridge0: port 2(bridge_slave_1) entered blocking state
[  502.514495][ T7358] bridge0: port 2(bridge_slave_1) entered forwarding state
[  502.546992][ T5586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  502.702699][ T7875] veth1_macvtap: entered promiscuous mode
[  502.866329][ T8076] 8021q: adding VLAN 0 to HW filter on device team0
[  503.152436][ T7357] bridge0: port 1(bridge_slave_0) entered blocking state
[  503.160102][ T7357] bridge0: port 1(bridge_slave_0) entered forwarding state
[  503.343945][  T145] bridge0: port 2(bridge_slave_1) entered blocking state
[  503.351604][  T145] bridge0: port 2(bridge_slave_1) entered forwarding state
[  503.470663][ T7875] batman_adv: batadv0: Interface activated: batadv_slave_0
[  503.606445][ T8308] loop3: detected capacity change from 0 to 512
[  503.642134][ T7875] batman_adv: batadv0: Interface activated: batadv_slave_1
[  503.717942][ T8308] EXT4-fs error (device loop3): ext4_free_inode:354: comm syz.3.656: bit already cleared for inode 11
[  503.732099][ T8308] loop3: lost filesystem error report for type 5 error -117
[  503.737869][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  503.752072][    C0] EXT4-fs (loop3): initial error at time 1777968500: ext4_free_inode:354
[  503.760840][    C0] EXT4-fs (loop3): last error at time 1777968500: ext4_free_inode:354
[  503.771882][ T8308] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[  503.786899][ T8308] loop3: lost filesystem error report for type 5 error -117
[  503.799688][ T8308] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[  503.886845][ T8308] loop3: lost filesystem error report for type 5 error -117
[  503.891216][ T8308] EXT4-fs (loop3): 1 orphan inode deleted
[  503.953215][ T8308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  504.131915][ T7357] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  504.163680][  T145] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  504.246824][  T145] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  504.280754][  T145] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  506.352591][ T8304] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  506.953011][ T5586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  507.580296][ T8352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.657'.
[  507.687685][ T8354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.657'.
[  508.637766][ T7833] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  508.656013][ T8107] 8021q: adding VLAN 0 to HW filter on device batadv0
[  508.796910][ T7987] 8021q: adding VLAN 0 to HW filter on device batadv0
[  508.843240][ T7833] usb 4-1: Using ep0 maxpacket: 16
[  508.881051][ T7833] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  508.934193][ T7833] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  508.968297][ T5226] 8021q: adding VLAN 0 to HW filter on device eth18
[  509.001229][ T7833] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[  509.032584][ T7833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  509.074993][ T7833] usb 4-1: SerialNumber: syz
[  509.419456][   T24] usb 4-1: USB disconnect, device number 10
[  509.736494][ T8076] 8021q: adding VLAN 0 to HW filter on device batadv0
[  511.312513][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  511.325833][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  511.530455][ T8400] loop3: detected capacity change from 0 to 512
[  511.670417][ T8400] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.660: inode has both inline data and extents flags
[  511.804618][ T8400] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  511.814922][ T8400] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.660: couldn't read orphan inode 15 (err -117)
[  511.824422][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  511.824511][    C0] EXT4-fs (loop3): initial error at time 1777968509: ext4_orphan_get:1397: inode 15
[  511.824680][    C0] EXT4-fs (loop3): last error at time 1777968509: ext4_orphan_get:1397: inode 15
[  511.926648][ T8400] loop3: lost filesystem error report for type 5 error -117
[  511.978470][ T8400] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  512.157835][ T8400] netlink: 436 bytes leftover after parsing attributes in process `syz.3.660'.
[  512.199098][ T8400] netlink: 28 bytes leftover after parsing attributes in process `syz.3.660'.
[  512.604790][ T8107] veth0_vlan: entered promiscuous mode
[  512.632656][ T5586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  512.649975][ T7987] veth0_vlan: entered promiscuous mode
[  512.821200][ T8107] veth1_vlan: entered promiscuous mode
[  512.899278][ T7987] veth1_vlan: entered promiscuous mode
[  512.912881][ T4870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  512.926908][ T4870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  512.939133][ T4870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  512.979824][ T4870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  512.996864][ T4870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  514.080758][ T8107] veth0_macvtap: entered promiscuous mode
[  514.178650][ T8076] veth0_vlan: entered promiscuous mode
[  514.245429][ T8107] veth1_macvtap: entered promiscuous mode
[  514.319939][ T7987] veth0_macvtap: entered promiscuous mode
[  514.467106][ T7987] veth1_macvtap: entered promiscuous mode
[  514.586583][ T8076] veth1_vlan: entered promiscuous mode
[  514.864042][ T8107] batman_adv: batadv0: Interface activated: batadv_slave_0
[  514.921219][ T5226] 8021q: adding VLAN 0 to HW filter on device eth19
[  515.068484][ T4870] Bluetooth: hci2: command tx timeout
[  515.195639][ T8107] batman_adv: batadv0: Interface activated: batadv_slave_1
[  515.267224][ T7987] batman_adv: batadv0: Interface activated: batadv_slave_0
[  515.377124][  T140] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.513048][  T145] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  515.542242][ T7833] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  515.561336][  T145] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  515.598739][ T7987] batman_adv: batadv0: Interface activated: batadv_slave_1
[  515.646405][  T140] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.725823][  T145] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  515.736231][  T145] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  515.747603][ T7833] usb 4-1: Using ep0 maxpacket: 16
[  515.772673][ T7833] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  515.802199][  T140] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.813147][ T7833] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  515.845930][ T7833] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[  515.868092][ T7833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  515.890264][ T7833] usb 4-1: SerialNumber: syz
[  515.931811][  T145] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  515.992453][  T145] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  516.039738][  T140] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.128332][  T145] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  516.200487][ T5678] usb 4-1: USB disconnect, device number 11
[  516.250647][  T145] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  516.745181][ T8076] veth0_macvtap: entered promiscuous mode
[  517.150096][ T4870] Bluetooth: hci2: command tx timeout
[  517.182348][ T8076] veth1_macvtap: entered promiscuous mode
[  517.754597][ T8459] loop3: detected capacity change from 0 to 512
[  517.846591][ T8459] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.667: inode has both inline data and extents flags
[  517.888383][ T8459] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  517.896098][ T8459] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.667: couldn't read orphan inode 15 (err -117)
[  517.905837][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  517.905932][    C1] EXT4-fs (loop3): initial error at time 1777968515: ext4_orphan_get:1397: inode 15
[  517.906111][    C1] EXT4-fs (loop3): last error at time 1777968515: ext4_orphan_get:1397: inode 15
[  517.947158][ T8459] loop3: lost filesystem error report for type 5 error -117
[  517.954796][ T8459] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  517.956854][  T140] bridge_slave_1: left allmulticast mode
[  518.052516][ T8459] netlink: 436 bytes leftover after parsing attributes in process `syz.3.667'.
[  518.084657][ T8459] netlink: 28 bytes leftover after parsing attributes in process `syz.3.667'.
[  518.091506][  T140] bridge_slave_1: left promiscuous mode
[  518.124021][  T140] bridge0: port 2(bridge_slave_1) entered disabled state
[  518.172964][  T140] bridge_slave_0: left allmulticast mode
[  518.217566][  T140] bridge_slave_0: left promiscuous mode
[  518.239425][  T140] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.407660][ T5586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  519.269588][ T4870] Bluetooth: hci2: command tx timeout
[  520.475830][  T140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  520.561925][  T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  520.696934][  T140] bond0 (unregistering): Released all slaves
[  521.297875][ T4870] Bluetooth: hci2: command tx timeout
[  522.605425][ T8076] batman_adv: batadv0: Interface activated: batadv_slave_0
[  522.651636][  T140] hsr_slave_0: left promiscuous mode
[  522.686812][  T140] hsr_slave_1: left promiscuous mode
[  522.729927][  T140] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  522.746338][  T140] batman_adv: batadv0: Removing interface: batadv_slave_0
[  522.765261][  T140] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  522.787774][  T140] batman_adv: batadv0: Removing interface: batadv_slave_1
[  522.880169][  T140] veth1_macvtap: left promiscuous mode
[  522.886010][  T140] veth0_macvtap: left promiscuous mode
[  522.894458][  T140] veth1_vlan: left promiscuous mode
[  522.900315][  T140] veth0_vlan: left promiscuous mode
[  523.815989][  T140] team0 (unregistering): Port device team_slave_1 removed
[  523.848759][  T140] team0 (unregistering): Port device team_slave_0 removed
[  524.241517][ T8076] batman_adv: batadv0: Interface activated: batadv_slave_1
[  524.473119][ T7400] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  524.527745][ T7400] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  524.651522][ T7400] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  524.700101][ T7400] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  528.563778][ T5580] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  528.577054][ T5580] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  528.591625][ T5580] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  528.608416][ T5580] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  528.627831][ T5580] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  528.737113][ T8515] loop3: detected capacity change from 0 to 512
[  528.866386][ T8515] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.674: inode has both inline data and extents flags
[  528.975461][ T8515] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  528.976946][ T8515] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.674: couldn't read orphan inode 15 (err -117)
[  528.990257][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  528.990355][    C1] EXT4-fs (loop3): initial error at time 1777968526: ext4_orphan_get:1397: inode 15
[  528.990557][    C1] EXT4-fs (loop3): last error at time 1777968526: ext4_orphan_get:1397: inode 15
[  529.160383][ T8515] loop3: lost filesystem error report for type 5 error -117
[  529.180140][ T8515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  529.345241][ T8515] netlink: 436 bytes leftover after parsing attributes in process `syz.3.674'.
[  529.373952][ T8410] bridge0: port 1(bridge_slave_0) entered blocking state
[  529.407616][ T8515] netlink: 24 bytes leftover after parsing attributes in process `syz.3.674'.
[  529.424285][ T8410] bridge0: port 1(bridge_slave_0) entered disabled state
[  529.462409][ T8410] bridge_slave_0: entered allmulticast mode
[  529.510492][ T8410] bridge_slave_0: entered promiscuous mode
[  529.593084][ T8410] bridge0: port 2(bridge_slave_1) entered blocking state
[  529.652482][ T8410] bridge0: port 2(bridge_slave_1) entered disabled state
[  529.697122][ T8410] bridge_slave_1: entered allmulticast mode
[  529.738737][ T8410] bridge_slave_1: entered promiscuous mode
[  529.962621][ T5586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  530.282872][ T8410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  530.415531][ T8410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  530.757807][ T5580] Bluetooth: hci3: command tx timeout
[  530.821388][ T8410] team0: Port device team_slave_0 added
[  530.843842][ T8410] team0: Port device team_slave_1 added
[  531.125242][ T8410] batman_adv: batadv0: Adding interface: batadv_slave_0
[  531.173167][ T8410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  531.298351][ T8410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  531.419138][ T8410] batman_adv: batadv0: Adding interface: batadv_slave_1
[  531.436438][ T8410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  531.475200][ T8410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  531.813671][ T5226] 8021q: adding VLAN 0 to HW filter on device eth20
[  531.974814][ T7356] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  532.025828][  T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  532.087909][  T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  532.502404][ T7356] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  532.744563][ T8410] hsr_slave_0: entered promiscuous mode
[  532.773576][ T8410] hsr_slave_1: entered promiscuous mode
[  532.796853][ T8410] debugfs: 'hsr0' already exists in 'hsr'
[  532.804190][ T8410] Cannot create hsr debugfs directory
[  532.817552][ T5580] Bluetooth: hci3: command tx timeout
[  532.870210][ T7356] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.032126][ T7356] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.189493][   T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  533.213827][   T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  534.897929][ T5580] Bluetooth: hci3: command tx timeout
[  535.282818][ T7356] bridge_slave_1: left allmulticast mode
[  535.319005][ T7356] bridge_slave_1: left promiscuous mode
[  535.338444][ T7356] bridge0: port 2(bridge_slave_1) entered disabled state
[  535.404756][ T7356] bridge_slave_0: left allmulticast mode
[  535.435265][ T7356] bridge_slave_0: left promiscuous mode
[  535.481316][ T7356] bridge0: port 1(bridge_slave_0) entered disabled state
[  536.092025][ T4870] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  536.101995][ T4870] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  536.115046][ T4870] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  536.139552][ T4870] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  536.156897][ T4870] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  536.977673][ T4870] Bluetooth: hci3: command tx timeout
[  537.472222][ T7356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  537.577744][ T7356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  537.654026][ T7356] bond0 (unregistering): Released all slaves
[  538.257733][ T4870] Bluetooth: hci5: command tx timeout
[  538.373875][ T8593] loop3: detected capacity change from 0 to 512
[  538.448156][ T7356] hsr_slave_0: left promiscuous mode
[  538.505418][ T7356] hsr_slave_1: left promiscuous mode
[  538.558613][ T7356] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  538.566419][ T7356] batman_adv: batadv0: Removing interface: batadv_slave_0
[  538.585591][ T8593] EXT4-fs error (device loop3): ext4_free_inode:354: comm syz.3.682: bit already cleared for inode 11
[  538.626883][ T7356] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  538.666303][ T8593] loop3: lost filesystem error report for type 5 error -117
[  538.667448][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  538.681736][    C1] EXT4-fs (loop3): initial error at time 1777968535: ext4_free_inode:354
[  538.684008][ T7356] batman_adv: batadv0: Removing interface: batadv_slave_1
[  538.690503][    C1] EXT4-fs (loop3): last error at time 1777968535: ext4_free_inode:354
[  538.710224][ T8593] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[  538.742276][ T8593] loop3: lost filesystem error report for type 5 error -117
[  538.749257][ T8593] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[  538.863016][ T7356] veth1_macvtap: left promiscuous mode
[  538.895059][ T8593] loop3: lost filesystem error report for type 5 error -117
[  538.911554][ T8593] EXT4-fs (loop3): 1 orphan inode deleted
[  538.935845][ T7356] veth0_macvtap: left promiscuous mode
[  538.970790][ T7356] veth1_vlan: left promiscuous mode
[  538.972284][ T8593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  539.011485][ T7356] veth0_vlan: left promiscuous mode
[  540.468416][ T4870] Bluetooth: hci5: command tx timeout
[  540.714010][ T5586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  542.456717][ T7356] team0 (unregistering): Port device team_slave_1 removed
[  542.492111][ T7356] team0 (unregistering): Port device team_slave_0 removed
[  542.500295][ T4870] Bluetooth: hci5: command tx timeout
[  542.826409][ T8617] loop9: detected capacity change from 0 to 512
[  542.947768][ T8617] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  542.978778][ T8617] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  543.288184][ T8107] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  543.786438][ T5226] 8021q: adding VLAN 0 to HW filter on device eth21
[  544.578781][ T4870] Bluetooth: hci5: command tx timeout
[  545.354594][ T7356] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.503179][ T8644] random: crng reseeded on system resumption
[  545.780499][ T7356] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.115175][ T7356] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.906487][ T7356] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  547.952904][ T8410] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  548.042748][ T8410] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  548.268395][ T8410] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  548.377043][ T8410] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  548.516361][ T8663] loop3: detected capacity change from 0 to 512
[  548.620586][ T8663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  548.634690][ T8663] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  548.697812][ T8410] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  548.745600][ T8410] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  548.763948][   T29] audit: type=1800 audit(1777968545.978:22): pid=8663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.694" name="file1" dev="loop3" ino=15 res=0 errno=0
[  548.786031][ T8410] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  548.909772][ T8410] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  549.375961][ T5586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  549.449664][ T7356] bridge_slave_1: left allmulticast mode
[  549.466181][ T7356] bridge_slave_1: left promiscuous mode
[  549.487065][ T7356] bridge0: port 2(bridge_slave_1) entered disabled state
[  549.538531][ T7356] bridge_slave_0: left allmulticast mode
[  549.587911][ T7356] bridge_slave_0: left promiscuous mode
[  549.603689][ T7356] bridge0: port 1(bridge_slave_0) entered disabled state
[  550.279441][ T4931] =====================================================
[  550.287676][ T4931] BUG: KMSAN: uninit-value in timespec64_add_safe+0x4b4/0x520
[  550.297926][ T4931]  timespec64_add_safe+0x4b4/0x520
[  550.304730][ T4931]  __x64_sys_epoll_wait+0x1fa/0x3a0
[  550.311066][ T4931]  x64_sys_call+0x2ece/0x3ea0
[  550.315966][ T4931]  do_syscall_64+0x134/0xf80
[  550.321730][ T4931]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  550.328844][ T4931] 
[  550.332175][ T4931] Local variable now.i.i.i created at:
[  550.337926][ T4931]  __x64_sys_epoll_wait+0xcf/0x3a0
[  550.343207][ T4931]  x64_sys_call+0x2ece/0x3ea0
[  550.348195][ T4931] 
[  550.350710][ T4931] CPU: 0 UID: 0 PID: 4931 Comm: udevd Tainted: G        W    L      syzkaller #0 PREEMPT(full) 
[  550.361656][ T4931] Tainted: [W]=WARN, [L]=SOFTLOCKUP
[  550.367023][ T4931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  550.378721][ T4931] =====================================================
[  550.385784][ T4931] Disabling lock debugging due to kernel taint
[  550.522459][ T8676] loop2: detected capacity change from 0 to 7
[  550.587066][ T8676] Dev loop2: unable to read RDB block 7
[  550.624140][ T8676]  loop2: unable to read partition table
[  550.649090][ T8676] loop2: partition table beyond EOD, truncated
[  550.660916][ T4931] Kernel panic - not syncing: kmsan.panic set ...
[  550.667552][ T4931] CPU: 0 UID: 0 PID: 4931 Comm: udevd Tainted: G    B   W    L      syzkaller #0 PREEMPT(full) 
[  550.678237][ T4931] Tainted: [B]=BAD_PAGE, [W]=WARN, [L]=SOFTLOCKUP
[  550.684881][ T4931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  550.695102][ T4931] Call Trace:
[  550.698510][ T4931]  <TASK>
[  550.701568][ T4931]  __dump_stack+0x26/0x30
[  550.706127][ T4931]  dump_stack_lvl+0x50/0x1c0
[  550.710924][ T4931]  ? dump_stack+0x12/0x25
[  550.715480][ T4931]  dump_stack+0x1e/0x25
[  550.719836][ T4931]  vpanic+0x7b4/0x1430
[  550.724157][ T4931]  panic+0x15d/0x160
[  550.728340][ T4931]  kmsan_report+0x31a/0x320
[  550.733106][ T4931]  ? __msan_warning+0x1b/0x30
[  550.737999][ T4931]  ? timespec64_add_safe+0x4b4/0x520
[  550.743510][ T4931]  ? __x64_sys_epoll_wait+0x1fa/0x3a0
[  550.749046][ T4931]  ? x64_sys_call+0x2ece/0x3ea0
[  550.754097][ T4931]  ? do_syscall_64+0x134/0xf80
[  550.759052][ T4931]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  550.765307][ T4931]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  550.771553][ T4931]  ? kmsan_get_metadata+0xf1/0x160
[  550.776876][ T4931]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  550.783441][ T4931]  ? kmsan_get_metadata+0xf1/0x160
[  550.788765][ T4931]  ? __x64_sys_epoll_wait+0x1fa/0x3a0
[  550.794316][ T4931]  ? __msan_warning+0x1b/0x30
[  550.799172][ T4931]  ? filter_irq_stacks+0x13f/0x190
[  550.804464][ T4931]  ? stack_depot_save_flags+0x35/0x790
[  550.810181][ T4931]  ? kmsan_get_metadata+0xf1/0x160
[  550.815506][ T4931]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  550.822060][ T4931]  ? kmsan_get_metadata+0xf1/0x160
[  550.827401][ T4931]  __msan_warning+0x1b/0x30
[  550.832103][ T4931]  timespec64_add_safe+0x4b4/0x520
[  550.837424][ T4931]  __x64_sys_epoll_wait+0x1fa/0x3a0
[  550.842803][ T4931]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  550.849361][ T4931]  x64_sys_call+0x2ece/0x3ea0
[  550.854236][ T4931]  do_syscall_64+0x134/0xf80
[  550.859024][ T4931]  ? clear_bhb_loop+0x50/0xa0
[  550.863879][ T4931]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  550.869976][ T4931] RIP: 0033:0x7fec27aa7407
[  550.874531][ T4931] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  550.894316][ T4931] RSP: 002b:00007ffe474be620 EFLAGS: 00000202 ORIG_RAX: 00000000000000e8
[  550.902930][ T4931] RAX: ffffffffffffffda RBX: 00007fec2816e880 RCX: 00007fec27aa7407
[  550.911089][ T4931] RDX: 0000000000000008 RSI: 00007ffe474be780 RDI: 000000000000000b
[  550.919229][ T4931] RBP: 00000000000000dc R08: 0000000000000000 R09: 0000000000000000
[  550.927341][ T4931] R10: 0000000000000bb8 R11: 0000000000000202 R12: 0000000000000000
[  550.935454][ T4931] R13: 0000560fa6af1100 R14: 0000560fdad60a90 R15: 0000000000000000
[  550.943612][ T4931]  </TASK>
[  550.947365][ T4931] Kernel Offset: disabled
[  550.951768][ T4931] Rebooting in 86400 seconds..