last executing test programs:

1m47.09383648s ago: executing program 2 (id=403):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0xc0a02, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000f80)={0x281, 0x1})

1m46.885774324s ago: executing program 2 (id=407):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a0104000000000000000001"], 0x248}, 0x1, 0x0, 0x0, 0x40040}, 0x4040)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="050003"], 0x28}}, 0x80)

1m46.813254978s ago: executing program 2 (id=408):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r0, 0x3a, 0xd4, 0x0, 0x0)

1m46.715170812s ago: executing program 2 (id=410):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2208810, &(0x7f0000000140), 0xfe, 0x572, &(0x7f0000000180)="$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")
mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='jffs2\x00', 0x800000, 0x0)
chdir(&(0x7f00000008c0)='./file0\x00')
open(&(0x7f0000000900)='.\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='.\x00', 0x800, 0x63)
getdents64(r0, &(0x7f0000000780)=""/61, 0x3d)

1m46.584604617s ago: executing program 2 (id=412):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe)
listen(r1, 0x0)
accept4(r1, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000200)=0x1, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00'})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c881}, 0x40014)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x80, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "96"}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8}]}}}, {0x44, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xd4}, 0x1, 0x0, 0x0, 0x40048d1}, 0x20008040)

1m46.097541329s ago: executing program 2 (id=417):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x4000)
socket(0x2000000015, 0x80005, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c00)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x1d}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xf6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0xc818)

1m46.00469149s ago: executing program 32 (id=417):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x4000)
socket(0x2000000015, 0x80005, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c00)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x1d}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xf6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0xc818)

53.036706321s ago: executing program 3 (id=1373):
syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000540)='./file1\x00', 0x2008000, &(0x7f0000000580)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000001c80)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000080)='./bus\x00', 0x24806, 0x0, 0xfd, 0x0, &(0x7f0000000000))
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000))
renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./bus/file0\x00', 0x2)

52.987619574s ago: executing program 3 (id=1374):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001})
socket$inet_udp(0x2, 0x2, 0x0)
write$tun(r0, 0x0, 0x76)

52.782363907s ago: executing program 3 (id=1375):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x12, r1, 0x0)
getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b)

52.736093895s ago: executing program 3 (id=1378):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@fat=@debug}, {@utf8}, {@fat=@nfs}, {@utf8no}, {@uni_xlate}, {@fat=@tz_utc}, {@shortname_win95}, {@uni_xlateno}, {@rodir}, {@shortname_win95}, {@shortname_mixed}, {@fat=@flush}, {@numtail}, {@uni_xlateno}]}, 0x0, 0x2cd, &(0x7f00000001c0)="$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")
r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00', 0x0, 0x93085, 0x0)
mount$bind(&(0x7f0000000640)='.\x00', &(0x7f0000000680)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f00000006c0)={0x2020}, 0x2020)

52.652833675s ago: executing program 3 (id=1381):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xb6}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0xff6, &(0x7f0000001cc0)=""/4086, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

52.432857633s ago: executing program 3 (id=1388):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="b49ca6d3635eca62ffffffffffffffff0039e77afe100000d7bbd818c020e98099c0e957390916d6a3f707000095d8628c4167a6731fc743762ca4a81dd5ba9f22a7e23e75b6772cb8fc54103e0af84add2934db0b6c067e40e32c3b4728931c91441631878e95d5a8b1b8615cb7610078eca86551ace28081acd9b7a69669af"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x1f, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x13}, 0x94)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4100, 0x0, @loopback}, 0x1c)
r1 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000fc0)={'ip_vti0\x00', &(0x7f0000000f40)={'syztnl1\x00', <r2=>0x0, 0x8, 0x40, 0x4, 0x8, {{0xd, 0x4, 0x2, 0xf, 0x34, 0x65, 0x0, 0xfd, 0x29, 0x0, @local, @remote, {[@rr={0x7, 0x13, 0xd2, [@dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0x34}, @remote, @remote]}, @timestamp_addr={0x44, 0xc, 0xd6, 0x1, 0xf, [{@loopback, 0x10001}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000010c0)={'syztnl2\x00', &(0x7f0000001000)={'syztnl0\x00', <r3=>0x0, 0x7, 0x700, 0xf, 0x0, {{0x23, 0x4, 0x2, 0x9, 0x8c, 0x68, 0x0, 0x1, 0x0, 0x0, @multicast2, @private=0xa010102, {[@timestamp_addr={0x44, 0x24, 0x34, 0x1, 0xf, [{@remote, 0x400}, {@loopback, 0x800}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x7fff}]}, @cipso={0x86, 0x45, 0x0, [{0x7, 0xa, "a8a2eddd2f6b52c8"}, {0x6, 0x2}, {0x5, 0xe, "684f55f44a4939db20bd5782"}, {0x6, 0xd, "651e3acb57b3e20fb19a49"}, {0x0, 0x12, "cb58920773b925deef8d1bb0987423c0"}, {0x5, 0x6, "cee2ed4f"}]}, @lsrr={0x83, 0xf, 0x67, [@local, @multicast2, @loopback]}]}}}}})
r4 = socket$inet6(0xa, 0x2, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r5=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000080)={@private0, r5}, 0x14)
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f00000019c0)=ANY=[@ANYBLOB="04080000", @ANYRES16=0x0, @ANYBLOB="10002dbd7000ffdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="bc0102805c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c0004009400031000000000a303020400080000020006f8020000000400f8f70200000009001d08020000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400070000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001002a90673f6efa3dbd188e366c386e6f696e74657276616c0000000000000000000000050003000300fdff07000400ff0f000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030a6f6f9100080004000000010008000100", @ANYRES32=0x0, @ANYBLOB="a801028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000300000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400f7ffffff400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e0000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000600000008000100", @ANYRES32=0x0, @ANYBLOB="f80002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000700000008000100", @ANYRES32=0x0, @ANYBLOB="e801028038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040003000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000d02508000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000180000008000100", @ANYRES32=0x0, @ANYBLOB="7c0002803c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=0x0, @ANYBLOB="00010280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ff07000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r2, @ANYBLOB="080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB], 0x804}, 0x1, 0x0, 0x0, 0x4050}, 0x5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000002030300000000000000000000000010080001000100000077f442ac"], 0x1c}}, 0x0)
close(0x3)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x1, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r8 = socket$packet(0x11, 0x3, 0x300)
write(0xffffffffffffffff, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb1", 0x1a)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r9, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window], 0x5)
setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f00000004c0)='dctcp', 0x5)
setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b19, &(0x7f0000000040)={'wlan0\x00'})
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b700000001000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r7], 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x9, 0x0, &(0x7f0000000800)="000000000000000002", 0x0}, 0x50)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002", 0x29}, {&(0x7f0000000080)="11c9064268", 0x5}], 0x2}, 0x40)

52.259996471s ago: executing program 33 (id=1388):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="b49ca6d3635eca62ffffffffffffffff0039e77afe100000d7bbd818c020e98099c0e957390916d6a3f707000095d8628c4167a6731fc743762ca4a81dd5ba9f22a7e23e75b6772cb8fc54103e0af84add2934db0b6c067e40e32c3b4728931c91441631878e95d5a8b1b8615cb7610078eca86551ace28081acd9b7a69669af"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x1f, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x13}, 0x94)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4100, 0x0, @loopback}, 0x1c)
r1 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000fc0)={'ip_vti0\x00', &(0x7f0000000f40)={'syztnl1\x00', <r2=>0x0, 0x8, 0x40, 0x4, 0x8, {{0xd, 0x4, 0x2, 0xf, 0x34, 0x65, 0x0, 0xfd, 0x29, 0x0, @local, @remote, {[@rr={0x7, 0x13, 0xd2, [@dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0x34}, @remote, @remote]}, @timestamp_addr={0x44, 0xc, 0xd6, 0x1, 0xf, [{@loopback, 0x10001}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000010c0)={'syztnl2\x00', &(0x7f0000001000)={'syztnl0\x00', <r3=>0x0, 0x7, 0x700, 0xf, 0x0, {{0x23, 0x4, 0x2, 0x9, 0x8c, 0x68, 0x0, 0x1, 0x0, 0x0, @multicast2, @private=0xa010102, {[@timestamp_addr={0x44, 0x24, 0x34, 0x1, 0xf, [{@remote, 0x400}, {@loopback, 0x800}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x7fff}]}, @cipso={0x86, 0x45, 0x0, [{0x7, 0xa, "a8a2eddd2f6b52c8"}, {0x6, 0x2}, {0x5, 0xe, "684f55f44a4939db20bd5782"}, {0x6, 0xd, "651e3acb57b3e20fb19a49"}, {0x0, 0x12, "cb58920773b925deef8d1bb0987423c0"}, {0x5, 0x6, "cee2ed4f"}]}, @lsrr={0x83, 0xf, 0x67, [@local, @multicast2, @loopback]}]}}}}})
r4 = socket$inet6(0xa, 0x2, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r5=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000080)={@private0, r5}, 0x14)
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f00000019c0)=ANY=[@ANYBLOB="04080000", @ANYRES16=0x0, @ANYBLOB="10002dbd7000ffdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="bc0102805c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c0004009400031000000000a303020400080000020006f8020000000400f8f70200000009001d08020000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400070000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001002a90673f6efa3dbd188e366c386e6f696e74657276616c0000000000000000000000050003000300fdff07000400ff0f000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030a6f6f9100080004000000010008000100", @ANYRES32=0x0, @ANYBLOB="a801028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000300000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400f7ffffff400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e0000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000600000008000100", @ANYRES32=0x0, @ANYBLOB="f80002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000700000008000100", @ANYRES32=0x0, @ANYBLOB="e801028038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040003000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000d02508000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000180000008000100", @ANYRES32=0x0, @ANYBLOB="7c0002803c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=0x0, @ANYBLOB="00010280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ff07000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r2, @ANYBLOB="080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB], 0x804}, 0x1, 0x0, 0x0, 0x4050}, 0x5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000002030300000000000000000000000010080001000100000077f442ac"], 0x1c}}, 0x0)
close(0x3)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x1, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r8 = socket$packet(0x11, 0x3, 0x300)
write(0xffffffffffffffff, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb1", 0x1a)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r9, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window], 0x5)
setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f00000004c0)='dctcp', 0x5)
setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b19, &(0x7f0000000040)={'wlan0\x00'})
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b700000001000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r7], 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x9, 0x0, &(0x7f0000000800)="000000000000000002", 0x0}, 0x50)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002", 0x29}, {&(0x7f0000000080)="11c9064268", 0x5}], 0x2}, 0x40)

12.695613126s ago: executing program 4 (id=2001):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000240)={0x0, 0xea60}, 0x10)
accept(r0, 0x0, 0x0)

12.306461792s ago: executing program 4 (id=2002):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000012c0)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x2c}}, 0x0)

12.253832902s ago: executing program 4 (id=2003):
syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
r0 = socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ec0)={r3, &(0x7f0000000dc0)="a919", &(0x7f0000000e80)=@udp, 0x2}, 0x20)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = socket(0x10, 0x80003, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xe, "0000000000020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)

12.145109505s ago: executing program 4 (id=2005):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x9, &(0x7f0000000140)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {@auto_da_alloc}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x48d, &(0x7f00000003c0)="$eJzs3EtvG1UbAOB3xnV6/5qv3wV6AQIFEXFJmrRAF2xAIHWDhARIZRnStCpNG9QEiVYVTREqS9RfACyR+AWsYIOAFYgtSGyQEFKFuqGwGjT2TOpcHGzHjil+HsntOTNnfM47M8c+MyfjAAbWSP5PErErIr4fithTzy4vMFL/79bNy9O/37w8nUSWvfRrUiv3283L02XRcrudRWY0jUjfTeLAGvXOX7x0dmp2duZCkR9fOPfG+PzFS4+fOTd1eub0zPnJY8eOHpl46snJJ7oS5+68rfvfnju47/ir11+YPnH9ta8+yZfvKtY3xlE33PJ7b2+yfCRGlu/LBg9F/JRlWct1/N3tbkgnW/rYENpSiYj8cFXz/h97ohK3D96eeP6dvjYO6Kksy7Ktq5ZWysRiBvyDJdF0VbqpDQE2WflFn1//lq9NHH703Y1n6hdAedy3ild9zZZIizLVFde33TQSEScW//ggf8Wa9yEAALrrs3z889ha4780/t9Q7l9Rnxsajoh/R8TeiPhPRPw3Iv4XUSt7V0Tc3Wb9Iyvyq8c/3zabXumKfPz3dDG3dXv8N1SLvzBcKXK7a/FXk1NnZmcOF/tkNKpb8/zEOnV8/tx37y9lti1f1zj+y195/eVYsC79ZcuKG3QnpxamuhB6zY2rS4GuGP8mSzMBSUTsi4j9Hbx/vs/OPPLxwWbr/zr+dXRhnin7KOLh+vFfjBXxl5L15yfHt8XszOHx8qxY7etvrr3YrP4Nxd8FN65G7Fh1/kdj/MNJ43ztfPt1XPvhvabXNJ2e/0PJy7X0ULHsramFhQsTEUPJ4urlk7e3LfNl+Tz+0UNrxZ/W3uPDYrsDEZGfxPdExL0RcV/R9vsj4oGIOLRO/F8+++DrncffW3n8J9s6/u0nKme/+LRZ/a0d/6O11GixpJXPv1YbuJF9BwAAAHeKtPY38Ek6tpRO07GxiFdq93Z3pLNz8wuPnpp78/zJ+t/KD0c1Le90pQ33QyeKe8NlfnJF/kjtvnGWZdn2Wn5sem62V3PqQGt2Nun/uZ8r/W4d0HNtzaM1e6INuCO11f9XPy0E3ME8rw2Dq9X+X+1xO4DN5/sfBtda/f9KxK0+NAXYZL7/YXDp/zC49H8YXPo/DKSNPNe/XmLv8Y43zzZUe/n7Kh1u/mNP9sZ6iUqnm29t42cOepCIdM1V1YjoS3vaSqS9qyI/+drbKj+QrRa+0umJ3XZi2cfEUD8+mwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrhzwAAAP//dNfhIw==")
mount$overlay(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x0, &(0x7f0000000940)={[{@redirect_dir_nofollow}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
syz_mount_image$fuse(0x0, &(0x7f000000af40)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0)

11.960740257s ago: executing program 4 (id=2010):
syz_emit_ethernet(0xa2, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x6c, 0x2b, 0x0, @private2, @local, {[@srh={0x3b, 0x0, 0x7}], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0)

11.723017682s ago: executing program 4 (id=2015):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x83, &(0x7f0000000080), 0x8)

11.613748968s ago: executing program 34 (id=2015):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x83, &(0x7f0000000080), 0x8)

1.605770343s ago: executing program 1 (id=2149):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4)
sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @private0, 0x1b9}, 0x1c)

1.155125812s ago: executing program 0 (id=2152):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000000ec0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}}, &(0x7f0000000f00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f40)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000100), 0x0, 0x3}, 0x20)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000002c0)={0x2, 0xfffd, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x4008804)
sendmsg$kcm(r3, &(0x7f0000000380)={&(0x7f0000000440)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000ac0)="da752f575198baaac222d34e85893d37a6bd281687872ed9151c56f415698f3fecf56eebf5edb42ed5d54e0419b2a13128d3ad19b6eed6b450aad46baaa57203e0d4f567d8d79fe07e7b3142de43e55cf69c65db2469175cf60c82f49d0f9dc4c4dde733a14d57f4117ed2f46aea59", 0x6f}, {&(0x7f0000000c80)="f2", 0x1}], 0x3}, 0x8400)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)=ANY=[], 0x114}, 0x1, 0x0, 0x0, 0xa00}, 0x48000)
sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000801)

776.719474ms ago: executing program 1 (id=2153):
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)

494.830023ms ago: executing program 5 (id=2155):
syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x1008014, &(0x7f00000001c0)=ANY=[], 0x3, 0x805, &(0x7f0000000200)="$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")
newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./file1\x00', 0x0, 0x4000)
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0)

416.215919ms ago: executing program 5 (id=2156):
mkdir(&(0x7f0000000c80)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000cc0)='./my_configfs\x00', &(0x7f0000000d00)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./my_configfs/target/dbroot\x00', 0x1, 0x0)
write(r0, &(0x7f0000000d80)='.', 0x1)

364.563776ms ago: executing program 5 (id=2157):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000001a00010000000080fbdbdf2580008000000000000000000008001f"], 0x2c}}, 0x20000050)

364.149579ms ago: executing program 5 (id=2158):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

305.374558ms ago: executing program 0 (id=2159):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xffffbffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1}]}, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)

212.307503ms ago: executing program 0 (id=2160):
r0 = socket(0x1, 0x5, 0x0)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xe, 0x0, 0x4, 0x0, 0x3, 0x100}})

177.153823ms ago: executing program 1 (id=2161):
r0 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffe, 0x4)

153.319138ms ago: executing program 0 (id=2162):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x14, r1, 0x80de02bd3ca0bfdb, 0x2000000}, 0x14}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r2)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000600fc000000080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000780)={'ip6tnl0\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000880))
socket$nl_route(0x10, 0x3, 0x0)

143.450569ms ago: executing program 5 (id=2163):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x5, 0x0, 0x5, 0x2, 0x0, 0x0, 0x10000, 0xffffffff}})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r1, 0x0, 0x0}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x24, 0x10, 0x801, 0x41, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048050}, 0x20040090)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x178}}, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x26, &(0x7f0000000880)={@link_local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x32, 0x18, 0x4068, 0x0, 0xd2, 0x89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "8f84e8eb"}}}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r5, 0x0, 0x8000)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a300000000005000400000000000500050002000000140007800800134040000000080012400080"], 0x64}}, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)

141.279006ms ago: executing program 1 (id=2164):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x93}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

63.100164ms ago: executing program 1 (id=2165):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000000580)={0x7, 'vlan0\x00', {0x3}, 0xf20c})
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x20, 0x16, 0x107, 0x70bd2c, 0x25dfdbfe, {0x13, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048891}, 0x8010)
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r4, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0)
sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r4, 0x1, 0xfffffffc, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20010040}, 0x4000)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={<r6=>0x0, @dev, @multicast1}, &(0x7f0000000280)=0xc)
sendmsg$FOU_CMD_GET(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="13ffffff", @ANYRES16=r4, @ANYBLOB="02002dbd7000ffdbdf25030000001400070020010000000000000000000000000000080006000a0101010400050008000b00", @ANYRES32=r6, @ANYBLOB="08e17769e108000000000001"], 0x44}, 0x1, 0x0, 0x0, 0x4004010}, 0x4c010)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0)
close(0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="050000000000000000001001000030000180060001000a000000060002000600000014000300fe8000000000000000000000000000aa060004000050"], 0x84}}, 0x0)

57.225818ms ago: executing program 0 (id=2166):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b40)={'ip6gretap0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe800000"], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

38.643461ms ago: executing program 5 (id=2167):
bpf$PROG_LOAD(0x5, &(0x7f0000003580)={0x3, 0x8, &(0x7f0000003640)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822a0269a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7ae22e16c6c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bba3d005585bf07d70e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37bc21cfdc8180c7d09c35d130d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56bd86acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd6e19946b18a45333df51d78f735999aadfcda64488160c4ae6ba9dcef0c144e3de7be7fdc1ead6a425ff6128fab1517630c1d9507e0685488a57f85298b4e4382842c0730"], &(0x7f0000004780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0xfffffffffffffff9, 0x4)
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x800000e}, 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r2}, 0x8)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f00000001c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000200)={r3, r3, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f00000002c0)={@any, 0xff, 0x5, 0x3, 0x800, 0x5, "8f1dc444b2a813bcfd8e57d84dc7115eec5fbeda733e52756349fd8d2c4fda878f0e54599180e4543cba2ef65d539ad3cd097ab0f432e66f1466ba52b445f33927335186bbab00507d36e8b17e8b3af68ca2e0d945c90c64f86ad7be6544128410589a95916675cc8006a544210f380098271a4f83f018722836306112e8b25b"})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001011404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x0, 0xffffffff}, 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r5, 0x702, 0x36, 0x0, &(0x7f0000000a80)="e460334470b8d480eb20c15286dda4fba8285e2e31ca72823a29dad4781041a996430bbe5ecac76a351df831cdb98842af6450b2abf5", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)}, 0x811)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r7}, &(0x7f0000000bc0), &(0x7f0000000c00), 0x2000000}, 0x20)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c40)='./cgroup/syz0\x00', 0x1ff)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4c014}, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000d80)={'wpan0\x00', <r9=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)={0x1c, 0x0, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000e80), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_ADD(r8, &(0x7f0000000ec0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f80)=ANY=[@ANYBLOB="3485b3009e2fde3a05f7b4f7d8245d10cbd43732a6460ea87ec82951b76109606039fa3b6b03852fe535c44e68faf2677370cb634d000ececb292df968b3a9efa3512bb0a8c9ddb4223819965a5cfadb729405fd4e729c7b94748440e8a02f81a9db0b05dff11792", @ANYRES16=r10, @ANYBLOB="040028bd7000fcdbdf25010000000800010000000000080002000200000008000200020000000800010000000000"], 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x840)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r11, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r12 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r12, 0x0, 0x33, &(0x7f0000001140)=0x80000001, 0x4)

3.833055ms ago: executing program 1 (id=2168):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f000000ac40)="$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")
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000000c0)={0x4})

0s ago: executing program 0 (id=2169):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="120000004200010a"], 0x1c}}, 0x0)

kernel console output (not intermixed with test programs):

[ T8074] 8021q: adding VLAN 0 to HW filter on device bond2
[  110.633541][ T8084] loop0: detected capacity change from 0 to 256
[  110.636846][ T8084] exfat: Deprecated parameter 'utf8'
[  110.636901][ T8084] exfat: Deprecated parameter 'namecase'
[  110.655653][ T8084] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d)
[  110.667848][ T8080] bond2: (slave gretap1): making interface the new active one
[  110.676466][ T8080] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  110.928947][ T8099] loop0: detected capacity change from 0 to 4096
[  110.957270][ T8099] ntfs3(loop0): ino=9, mi_enum_attr
[  110.957287][ T8099] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  110.959669][ T8099] ntfs3(loop0): ino=9, mi_enum_attr
[  110.959723][ T8099] ntfs3(loop0): ino=b, mi_enum_attr
[  110.959758][ T8099] ntfs3(loop0): Failed to load $Extend (-22).
[  110.959764][ T8099] ntfs3(loop0): Failed to initialize $Extend.
[  111.011694][ T8082] loop3: detected capacity change from 0 to 32768
[  111.014485][ T8082] BTRFS warning: excessive commit interval 3581, use with care
[  111.015242][ T8082] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.939 (8082)
[  111.048076][ T8082] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  111.048114][ T8082] BTRFS info (device loop3): using crc32c checksum algorithm
[  111.112234][ T8082] BTRFS info (device loop3): enabling ssd optimizations
[  111.112256][ T8082] BTRFS info (device loop3): turning on flush-on-commit
[  111.112266][ T8082] BTRFS info (device loop3): enabling free space tree
[  111.112279][ T8082] BTRFS info (device loop3): force zlib compression, level 3
[  111.112293][ T8082] BTRFS info (device loop3): max_inline set to 4096
[  111.300880][ T6630] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  111.582127][ T8139] netlink: 44 bytes leftover after parsing attributes in process `syz.3.955'.
[  112.023946][ T8160] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.023980][ T8160] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.104504][ T8160] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.104538][ T8160] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.163572][ T8166] loop0: detected capacity change from 0 to 4096
[  112.199490][ T8160] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.199513][ T8160] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.342371][ T8160] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.342442][ T8160] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.519728][ T8172] 0: reclassify loop, rule prio 0, protocol 03
[  112.643357][ T8178] loop1: detected capacity change from 0 to 256
[  112.646450][ T8178] exfat: Deprecated parameter 'utf8'
[  112.646487][ T8178] exfat: Deprecated parameter 'namecase'
[  112.646553][ T8178] exfat: Deprecated parameter 'namecase'
[  112.646568][ T8178] exfat: Deprecated parameter 'utf8'
[  112.659888][ T8178] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  112.660049][ T8178] exFAT-fs (loop1): failed to test first cluster bit of root dir(5)
[  112.668988][ T8178] exFAT-fs (loop1): start_clu is invalid cluster(0x400)
[  113.251824][ T8202] JBD2: Ignoring recovery information on journal
[  113.286575][ T8202] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  113.363503][ T5658] ocfs2: Unmounting device (7,1) on (node local)
[  113.449908][ T8204] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  113.463483][ T8204] XFS (loop0): Ending clean mount
[  113.492452][   T33] audit: type=1800 audit(1792584374.747:12): pid=8204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.986" name="file1" dev="loop0" ino=6150 res=0 errno=0
[  113.533255][ T5671] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  113.736160][ T8230] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  113.785178][ T8230] EXT4-fs (loop0): 1 orphan inode deleted
[  113.787091][ T8230] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.796741][ T8230] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.808214][  T143] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  113.808293][  T143] EXT4-fs error (device loop0): ext4_release_dquot:7115: comm kworker/u10:4: Failed to release dquot type 1
[  113.829908][ T8230] EXT4-fs (loop0): shut down requested (2)
[  113.876615][ T5671] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.980307][ T8226] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  113.983294][ T8240] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  114.032452][ T8226] XFS (loop1): Ending clean mount
[  114.106888][ T5658] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  114.210713][ T8256] set_capacity_and_notify: 6 callbacks suppressed
[  114.210738][ T8256] loop0: detected capacity change from 0 to 256
[  114.299222][ T8258] lo: entered allmulticast mode
[  114.336286][ T8258] lo: left allmulticast mode
[  114.463230][ T8272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1010'.
[  114.481850][ T8272] syzkaller1: entered promiscuous mode
[  114.481866][ T8272] syzkaller1: entered allmulticast mode
[  114.673207][ T8285] loop3: detected capacity change from 0 to 512
[  114.829821][ T8281] loop1: detected capacity change from 0 to 40427
[  114.832427][ T8281] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[  114.832444][ T8281] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  114.834352][ T8281] F2FS-fs (loop1): invalid crc value
[  114.933540][ T8281] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  114.946940][ T8281] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  114.946969][ T8281] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  115.046238][ T8307] loop0: detected capacity change from 0 to 24
[  115.053987][ T8307] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  115.086198][ T8307] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  115.376847][ T8325] XFS (nbd0): SB validate failed with error -5.
[  115.424847][   T96] I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2
[  115.442461][ T8325] XFS (nbd0): io_pages changed from 0 to 1024, not restoring.
[  115.442490][ T8325] XFS (nbd0): ra_pages changed from 0 to 64, not restoring.
[  115.839878][ T8352] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.876442][ T8354] loop0: detected capacity change from 0 to 512
[  115.889869][ T8354] EXT4-fs (loop0): 1 truncate cleaned up
[  115.891180][ T8354] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.896353][   T33] audit: type=1800 audit(1792584377.147:13): pid=8354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1043" name="file0" dev="loop0" ino=13 res=0 errno=0
[  115.922599][ T5671] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.005627][ T8358] netlink: 'syz.0.1044': attribute type 1 has an invalid length.
[  116.005648][ T8358] netlink: 'syz.0.1044': attribute type 2 has an invalid length.
[  116.311981][ T8373] IPv6: Can't replace route, no match found
[  116.431807][ T8381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1053'.
[  116.514976][ T8381] 8021q: adding VLAN 0 to HW filter on device bond1
[  116.526546][ T8385] lo: entered promiscuous mode
[  116.540564][ T8385] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  116.545798][ T8385] 8021q: adding VLAN 0 to HW filter on device bond1
[  116.576247][ T8385] bond1: (slave lo): Enslaving as an active interface with an up link
[  116.747331][ T8403] jffs2: notice: (8403) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  116.823729][ T8410] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.897312][ T8408] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  116.897782][ T8408] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  117.052697][ T8426] netlink: 'syz.3.1072': attribute type 39 has an invalid length.
[  117.187340][ T8428] loop1: detected capacity change from 0 to 256
[  117.274807][ T8430] loop3: detected capacity change from 0 to 1024
[  117.280990][ T8430] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  117.286465][ T8432] loop1: detected capacity change from 0 to 512
[  117.289135][ T8432] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  117.289149][ T8432] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  117.317561][ T8430] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 2: comm syz.3.1074: lblock 2 mapped to illegal pblock 2 (length 1)
[  117.317594][ T8430] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  117.321067][ T8430] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  117.321128][ T8430] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 48: comm syz.3.1074: lblock 0 mapped to illegal pblock 48 (length 1)
[  117.321148][ T8430] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  117.326030][ T8430] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  117.326056][ T8430] EXT4-fs error (device loop3): ext4_acquire_dquot:7079: comm syz.3.1074: Failed to acquire dquot type 0
[  117.326074][ T8430] loop3: lost filesystem error report for type 5 error -117
[  117.327262][ T8430] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6519: Corrupt filesystem
[  117.327287][ T8430] loop3: lost filesystem error report for type 5 error -117
[  117.327583][    C1] EXT4-fs (loop3): error count since last fsck: 4
[  117.327597][    C1] EXT4-fs (loop3): initial error at time 1792584378: ext4_map_blocks:790: inode 3: block 2
[  117.327619][    C1] EXT4-fs (loop3): last error at time 1792584378: ext4_reserve_inode_write:6519
[  117.337312][ T8430] EXT4-fs error (device loop3): ext4_evict_inode:269: inode #11: comm syz.3.1074: mark_inode_dirty error
[  117.337345][ T8430] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  117.337816][ T8430] EXT4-fs warning (device loop3): ext4_evict_inode:272: couldn't mark inode dirty (err -117)
[  117.337895][ T8430] EXT4-fs (loop3): 1 orphan inode deleted
[  117.339267][ T8430] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.343525][ T8432] EXT4-fs (loop1): 1 truncate cleaned up
[  117.369906][  T143] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u10:4: lblock 1 mapped to illegal pblock 1 (length 1)
[  117.372722][  T143] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  117.372774][  T143] EXT4-fs error (device loop3): ext4_release_dquot:7115: comm kworker/u10:4: Failed to release dquot type 0
[  117.375975][ T8432] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.443206][ T8432] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 156 vs 220 free clusters
[  117.473883][ T6630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.490494][  T143] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u10:4: lblock 1 mapped to illegal pblock 1 (length 1)
[  117.490535][  T143] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  117.490906][  T143] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  117.490935][  T143] EXT4-fs error (device loop3): ext4_release_dquot:7115: comm kworker/u10:4: Failed to release dquot type 0
[  117.490950][  T143] loop3: lost filesystem error report for type 5 error -117
[  117.495243][ T6630] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0
[  117.495275][ T6630] loop3: lost filesystem error report for type 5 error -117
[  117.495591][ T6630] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6519: Corrupt filesystem
[  117.495607][ T6630] loop3: lost filesystem error report for type 5 error -117
[  117.495814][ T6630] EXT4-fs error (device loop3): ext4_quota_off:7363: inode #3: comm syz-executor: mark_inode_dirty error
[  117.495833][ T6630] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  117.497891][ T6630] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0
[  117.497916][ T6630] loop3: lost filesystem error report for type 5 error -117
[  117.542911][ T5658] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.785719][ T8444] loop3: detected capacity change from 0 to 128
[  117.813918][ T8444] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  118.153180][ T8452] loop3: detected capacity change from 0 to 4096
[  118.156258][ T8452] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  118.174417][ T8452] ntfs3(loop3): volume is dirty and "force" flag is not set!
[  118.429273][ T8466] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  118.657111][ T8472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1092'.
[  118.657146][ T8472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1092'.
[  118.680238][ T8469] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.799623][ T8469] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  118.802308][ T8469] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  118.940793][ T8481] exfat: Deprecated parameter 'utf8'
[  118.940941][ T8481] exfat: Deprecated parameter 'namecase'
[  118.959505][ T8481] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x7c91c1e6, utbl_chksum : 0xe619d30d)
[  119.054568][  T807] lo speed is unknown, defaulting to 1000
[  119.080528][  T807] syz0: Port: 1 Link DOWN
[  119.143949][ T5662] lo speed is unknown, defaulting to 1000
[  119.197016][ T8487] EXT4-fs: Ignoring removed orlov option
[  119.197049][ T8487] EXT4-fs: Ignoring removed orlov option
[  119.224322][ T8487] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.290751][ T5671] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.423160][ T8502] set_capacity_and_notify: 3 callbacks suppressed
[  119.423260][ T8502] loop3: detected capacity change from 0 to 8
[  119.674541][ T8517] loop0: detected capacity change from 0 to 512
[  119.676240][ T8517] EXT4-fs: Ignoring removed i_version option
[  119.686491][ T8517] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  119.686511][ T8517] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  119.751654][ T8517] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.1111: invalid indirect mapped block 32768 (level 2)
[  119.751682][ T8517] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  119.759014][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  119.759032][    C0] EXT4-fs (loop0): initial error at time 1792584381: ext4_free_branches:1023: inode 16
[  119.759045][    C0] EXT4-fs (loop0): last error at time 1792584381: ext4_free_branches:1023: inode 16
[  119.794449][ T8520] loop1: detected capacity change from 0 to 128
[  119.796220][ T8517] EXT4-fs (loop0): Remounting filesystem read-only
[  119.806657][ T8517] EXT4-fs (loop0): 1 orphan inode deleted
[  119.806674][ T8517] EXT4-fs (loop0): 1 truncate cleaned up
[  119.807427][ T8517] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.813742][ T8520] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  119.814268][ T8520] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.854154][ T5658] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  119.867302][ T5671] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.937103][ T8527] netlink: 3560 bytes leftover after parsing attributes in process `syz.0.1114'.
[  119.942732][ T8527] sctp: [Deprecated]: syz.0.1114 (pid 8527) Use of struct sctp_assoc_value in delayed_ack socket option.
[  119.942732][ T8527] Use struct sctp_sack_info instead
[  120.059127][ T8537] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.099956][ T8543] netlink: 'syz.1.1123': attribute type 2 has an invalid length.
[  120.099970][ T8543] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1123'.
[  120.385555][ T8563] loop1: detected capacity change from 0 to 24
[  120.386284][ T8563] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  120.390820][ T8563] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  121.182071][ T8567] loop1: detected capacity change from 0 to 256
[  121.192304][ T8567] vfat: Unknown parameter 'smackfsdef'
[  121.357279][ T8580] netlink: 'syz.3.1140': attribute type 10 has an invalid length.
[  121.394223][ T8580] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  121.395633][ T8580] team0: Port device netdevsim1 added
[  121.435202][ T8582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1141'.
[  121.489602][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1141'.
[  121.489623][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1141'.
[  121.506015][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1141'.
[  121.528924][ T8566] loop0: detected capacity change from 0 to 32768
[  121.543833][ T8566] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  121.602166][ T8566] XFS (loop0): Ending clean mount
[  121.645763][ T5671] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  121.665883][ T8598] loop3: detected capacity change from 0 to 1024
[  121.677156][ T8598] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  122.552431][ T8641] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1162'.
[  122.616488][ T8643] vlan3: entered promiscuous mode
[  122.616510][ T8643] bridge0: entered promiscuous mode
[  122.616713][ T8643] vlan3: entered allmulticast mode
[  122.616723][ T8643] bridge0: entered allmulticast mode
[  122.672428][ T8645] loop3: detected capacity change from 0 to 512
[  122.682542][ T8645] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  122.684635][ T8645] EXT4-fs (loop3): orphan cleanup on readonly fs
[  122.694398][ T8645] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4223: comm syz.3.1164: Allocating blocks 41-42 which overlap fs metadata
[  122.694432][ T8645] loop3: lost filesystem error report for type 5 error -117
[  122.697858][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  122.697882][    C0] EXT4-fs (loop3): initial error at time 1792584383: ext4_mb_mark_diskspace_used:4223
[  122.697898][    C0] EXT4-fs (loop3): last error at time 1792584383: ext4_mb_mark_diskspace_used:4223
[  122.706415][ T8645] Quota error (device loop3): write_blk: dquota write failed
[  122.706487][ T8645] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  122.706512][ T8645] EXT4-fs error (device loop3): ext4_acquire_dquot:7079: comm syz.3.1164: Failed to acquire dquot type 0
[  122.706527][ T8645] loop3: lost filesystem error report for type 5 error -117
[  122.706840][ T8645] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  122.713916][ T8645] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #12: comm syz.3.1164: corrupted inode contents
[  122.713947][ T8645] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  122.714269][ T8645] EXT4-fs error (device loop3): ext4_dirty_inode:6733: inode #12: comm syz.3.1164: mark_inode_dirty error
[  122.714287][ T8645] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  122.714515][ T8645] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #12: comm syz.3.1164: corrupted inode contents
[  122.714531][ T8645] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  122.714671][ T8645] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #12: comm syz.3.1164: mark_inode_dirty error
[  122.714686][ T8645] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  122.714859][ T8645] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #12: comm syz.3.1164: corrupted inode contents
[  122.714996][ T8645] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  122.715185][ T8645] EXT4-fs error (device loop3) in ext4_orphan_del:304: Corrupt filesystem
[  122.715199][ T8645] loop3: lost filesystem error report for type 5 error -117
[  122.715357][ T8645] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #12: comm syz.3.1164: corrupted inode contents
[  122.715374][ T8645] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  122.715507][ T8645] EXT4-fs error (device loop3): ext4_truncate:4721: inode #12: comm syz.3.1164: mark_inode_dirty error
[  122.715522][ T8645] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  122.715622][ T8645] EXT4-fs error (device loop3) in ext4_process_orphan:346: Corrupt filesystem
[  122.715630][ T8645] loop3: lost filesystem error report for type 5 error -117
[  122.717356][ T8645] EXT4-fs (loop3): 1 truncate cleaned up
[  122.722532][ T8645] EXT4-fs (loop3): pa ffff8881102f9828: logic 1, phys. 41, len 23
[  122.722558][ T8645] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5460: group 0, free 22, pa_free 23
[  122.726761][ T8645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  122.797880][ T6630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.958513][ T8626] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  123.192175][ T8656] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.194891][ T8656] 8021q: adding VLAN 0 to HW filter on device team0
[  123.208575][ T8657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1169'.
[  123.215534][ T8656] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.226681][ T8657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1169'.
[  123.254170][ T8652] loop3: detected capacity change from 0 to 32768
[  123.364177][ T8656] batman_adv: batadv0: Interface activated: batadv_slave_0
[  123.366572][ T8656] batman_adv: batadv0: Interface activated: batadv_slave_1
[  123.382391][ T8656] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  123.382501][  T807] lo speed is unknown, defaulting to 1000
[  123.382548][  T807] syz0: Port: 1 Link ACTIVE
[  123.382619][  T807] lo speed is unknown, defaulting to 1000
[  123.396673][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.396760][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state
[  123.580764][ T8659] loop0: detected capacity change from 0 to 32768
[  123.589789][ T8659] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1170 (8659)
[  123.609528][ T8659] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  123.609551][ T8659] BTRFS info (device loop0): using sha256 checksum algorithm
[  123.694663][ T8659] BTRFS info (device loop0): enabling ssd optimizations
[  123.694683][ T8659] BTRFS info (device loop0): turning on async discard
[  123.694691][ T8659] BTRFS info (device loop0): enabling free space tree
[  123.785858][ T8659] BTRFS info (device loop0): setting compat-ro feature flag for VERITY (0x4)
[  123.904280][ T5671] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  124.259534][ T8682] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  124.343902][ T8682] XFS (loop3): Ending clean mount
[  124.391800][ T6630] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  124.838864][ T8724] set_capacity_and_notify: 1 callbacks suppressed
[  124.838883][ T8724] loop3: detected capacity change from 0 to 512
[  124.880304][ T8724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.880450][ T8724] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.921803][ T8724] EXT4-fs error (device loop3): ext4_get_first_dir_block:3539: inode #12: comm syz.3.1187: Attempting to read directory block (0) that is past i_size (3)
[  124.959331][ T6630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.094735][ T8736] loop0: detected capacity change from 0 to 8192
[  125.332539][ T8741] loop1: detected capacity change from 0 to 32768
[  125.334608][ T8741] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1194 (8741)
[  125.343099][ T8741] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  125.343120][ T8741] BTRFS info (device loop1): using sha256 checksum algorithm
[  125.399337][   T64] BTRFS warning (device loop1): checksum verify failed on logical 5312512 mirror 1 wanted 0xad3491f02143bbdffac915d60d465609ae738cf44bd4edc228323e06632ebcf6 found 0xad3491f02143bbdffac915d60d465609ae738cf44bd4edc228323e9c632ebcf6 level 0
[  125.399495][ T8741] BTRFS error (device loop1 state C): failed to load root csum
[  125.443382][ T8760] loop0: detected capacity change from 0 to 512
[  125.443987][ T8760] EXT4-fs: Ignoring removed i_version option
[  125.515148][ T8760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  125.515214][ T8760] ext4 filesystem being mounted at /359/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.532531][ T8741] BTRFS error (device loop1 state C): open_ctree failed: -EIO
[  125.579445][ T8760] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  125.579516][ T8760] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  125.579544][ T8760] EXT4-fs error (device loop0): ext4_acquire_dquot:7079: comm syz.0.1199: Failed to acquire dquot type 0
[  125.644552][ T8770] loop3: detected capacity change from 0 to 2048
[  125.665932][ T5671] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  125.670347][ T8772] kAFS: unparsable volume name
[  125.692123][ T8770]  loop3: p2 < > p3 < p5 > p4
[  125.692145][ T8770] loop3: partition table partially beyond EOD, truncated
[  125.692336][ T8770] loop3: p2 start 4278190080 is beyond EOD, truncated
[  125.695812][ T8770] loop3: p4 size 8192 extends beyond EOD, truncated
[  125.709512][ T8770] loop3: p5 size 8192 extends beyond EOD, truncated
[  125.936243][ T5593] udevd[5593]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  125.939700][ T5632] udevd[5632]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[  125.942197][ T8773] udevd[8773]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  125.982311][ T8785] vcan0: tx address claim with dlc 0
[  126.113031][ T8794] netlink: 'syz.3.1212': attribute type 25 has an invalid length.
[  126.113054][ T8794] netlink: 'syz.3.1212': attribute type 3 has an invalid length.
[  126.113063][ T8794] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1212'.
[  126.124155][ T8794] gre1: entered promiscuous mode
[  126.218984][ T8806] loop1: detected capacity change from 0 to 64
[  126.402176][ T8815] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1222'.
[  126.552072][ T8823] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  126.552072][ T8823] 
[  126.552323][ T8823] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  126.552363][ T8823] CIFS mount error: No usable UNC path provided in device string!
[  126.552363][ T8823] 
[  126.552435][ T8823] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  126.621932][ T8827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1225'.
[  126.665610][ T8826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1224'.
[  126.703121][ T8829] loop0: detected capacity change from 0 to 2048
[  126.712498][ T8773] udevd[8773]: incorrect nilfs2 checksum on /dev/loop0
[  126.724329][ T8829] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  126.795001][ T8831] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  126.866344][ T8834] loop1: detected capacity change from 0 to 4096
[  126.894209][ T8835] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  126.935921][ T8834] NILFS error (device loop1): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1
[  126.948083][ T8834] Remounting filesystem read-only
[  127.173303][ T8846] loop0: detected capacity change from 0 to 64
[  127.205705][ T8849] tipc: Started in network mode
[  127.205725][ T8849] tipc: Node identity ac14140f, cluster identity 4711
[  127.206397][ T8849] tipc: Enabled bearer <udp:syz2>, priority 10
[  127.353497][ T8859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1240'.
[  127.390460][ T8861] netlink: 'syz.0.1241': attribute type 1 has an invalid length.
[  127.407225][ T8863] loop3: detected capacity change from 0 to 1024
[  127.734471][ T8869] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  127.734489][ T8869] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  127.736022][ T8869] F2FS-fs (loop3): invalid crc value
[  127.806734][ T8884] exfat: Deprecated parameter 'namecase'
[  127.806795][ T8884] exfat: Deprecated parameter 'namecase'
[  127.820018][ T8884] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xef5d2b8f, utbl_chksum : 0xe619d30d)
[  127.834701][ T8869] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  127.839763][ T8869] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  127.839779][ T8869] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  128.068549][ T8891] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  128.069303][ T8891] ntfs3(loop1): Failed to load $BadClus (-22).
[  128.204726][  T807] tipc: Node number set to 2886997007
[  128.279354][ T8899] syzkaller0: entered promiscuous mode
[  128.279379][ T8899] syzkaller0: entered allmulticast mode
[  128.385394][ T8905] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1260'.
[  128.394026][ T8905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1260'.
[  128.429973][ T8907] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  128.460196][ T8909] ip_tables: iptables: counters copy to user failed while replacing table
[  128.474670][ T8911] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1263'.
[  128.474694][ T8911] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1263'.
[  128.509420][ T8909] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.660357][ T8909] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  128.666130][ T8909] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  128.690031][  T807] lo speed is unknown, defaulting to 1000
[  128.690170][  T807] syz0: Port: 1 Link DOWN
[  128.690232][  T807] lo speed is unknown, defaulting to 1000
[  128.855759][ T8936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1269'.
[  129.179945][ T8957] ip_tables: iptables: counters copy to user failed while replacing table
[  130.023956][ T8990] ip_tables: iptables: counters copy to user failed while replacing table
[  130.699855][ T8997] netlink: 'syz.0.1295': attribute type 11 has an invalid length.
[  130.784176][ T8999] 8021q: adding VLAN 0 to HW filter on device bond3
[  130.811894][ T9004] set_capacity_and_notify: 3 callbacks suppressed
[  130.811913][ T9004] loop0: detected capacity change from 0 to 128
[  130.826620][ T8999] macvtap1: entered allmulticast mode
[  130.843904][ T9004] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  130.847761][ T9004] ext4 filesystem being mounted at /394/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  130.851534][ T8999] bond3: (slave sit1): refused to change device type
[  130.906078][ T5671] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  131.081175][ T9012] vlan0: entered promiscuous mode
[  131.081199][ T9012] syz_tun: entered promiscuous mode
[  131.254693][ T9028] loop3: detected capacity change from 0 to 512
[  131.255230][ T9028] vfat: Unknown parameter ''
[  131.306586][ T9031] loop1: detected capacity change from 0 to 512
[  131.320133][ T9031] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.1309: bad orphan inode 15
[  131.320154][ T9031] loop1: lost filesystem error report for type 5 error -117
[  131.320335][ T9031] ext4_test_bit(bit=14, block=5) = 0
[  131.321032][ T9031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.345644][ T9031] EXT4-fs (loop1): shut down requested (2)
[  131.417617][ T5658] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.490965][ T9037] __nla_validate_parse: 6 callbacks suppressed
[  131.490978][ T9037] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1312'.
[  131.490996][ T9037] bond0: ARP target 0.0.0.2 is already present
[  131.491006][ T9037] bond0: option arp_ip_target: invalid value (33554432)
[  131.842503][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1318'.
[  131.883976][ T9060] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1318'.
[  132.034165][ T9070] loop1: detected capacity change from 0 to 256
[  132.155287][ T9078] loop1: detected capacity change from 0 to 256
[  132.173991][ T9078] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[  132.174008][ T9078] FAT-fs (loop1): Filesystem has been set read-only
[  132.274919][ T9080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1327'.
[  132.294598][ T9074] loop0: detected capacity change from 0 to 40427
[  132.295706][ T9074] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  132.295722][ T9074] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  132.296279][ T9074] F2FS-fs (loop0): invalid crc value
[  132.354588][ T9074] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  132.363644][ T9041] orangefs_mount: mount request failed with -4
[  132.364187][ T9074] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  132.364240][ T9074] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  132.400315][   T33] audit: type=1800 audit(1792584393.657:14): pid=9074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1324" name="file1" dev="loop0" ino=10 res=0 errno=0
[  132.481556][ T9091] loop1: detected capacity change from 0 to 256
[  132.520986][ T9091] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  132.833372][ T9098] netlink: 'syz.0.1330': attribute type 16 has an invalid length.
[  132.833400][ T9098] netlink: 'syz.0.1330': attribute type 17 has an invalid length.
[  132.936694][ T9098] macsec1: left promiscuous mode
[  132.942167][ T9098] 8021q: adding VLAN 0 to HW filter on device eth0
[  132.950627][ T9098] 8021q: adding VLAN 0 to HW filter on device eth1
[  132.953391][ T9098] 8021q: adding VLAN 0 to HW filter on device eth2
[  132.956719][ T9098] 8021q: adding VLAN 0 to HW filter on device eth3
[  132.961619][ T9098] vlan0: left promiscuous mode
[  132.961642][ T9098] syz_tun: left promiscuous mode
[  133.086063][ T9110] loop1: detected capacity change from 0 to 764
[  133.094676][ T9110] rock: directory entry would overflow storage
[  133.094683][ T9110] rock: sig=0x4654, size=5, remaining=4
[  133.142819][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  133.142925][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  133.459653][ T9132] rxe_eth0 speed is unknown, defaulting to 1000
[  133.541077][ T9128] loop1: detected capacity change from 0 to 32768
[  133.571922][ T9128] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  133.585530][ T9132] lo speed is unknown, defaulting to 1000
[  133.611740][ T9128] XFS (loop1): Ending clean mount
[  133.696268][ T5658] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  133.919965][ T9151] loop0: detected capacity change from 0 to 512
[  133.955108][ T9151] EXT4-fs (loop0): bad geometry: first data block is 0 with a 1k block and cluster size
[  134.128876][ T9158] ufs: ufstype=nextstep-cd is supported read-only
[  134.395587][ T9172] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1364'.
[  134.566060][ T9181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.566132][ T9181] ext4 filesystem being mounted at /419/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  134.661445][ T5671] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.875581][ T9197] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  134.876293][ T9197] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  134.934509][  T316] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  135.057907][ T9202] FAULT_INJECTION: forcing a failure.
[  135.057907][ T9202] name failslab, interval 1, probability 0, space 0, times 0
[  135.057928][ T9202] CPU: 1 UID: 0 PID: 9202 Comm: syz.1.1376 Not tainted syzkaller #0 PREEMPT(full) 
[  135.057939][ T9202] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  135.057944][ T9202] Call Trace:
[  135.057948][ T9202]  <TASK>
[  135.057952][ T9202]  dump_stack_lvl+0xe8/0x150
[  135.057971][ T9202]  should_fail_ex+0x410/0x560
[  135.057987][ T9202]  should_failslab+0xa8/0x100
[  135.058000][ T9202]  __kmalloc_cache_noprof+0x9e/0x600
[  135.058010][ T9202]  ? p9_client_create+0xbc/0xc60
[  135.058024][ T9202]  ? p9_client_create+0xbc/0xc60
[  135.058039][ T9202]  p9_client_create+0xbc/0xc60
[  135.058052][ T9202]  ? __pfx_p9_client_create+0x10/0x10
[  135.058071][ T9202]  v9fs_session_init+0x46/0xd40
[  135.058081][ T9202]  ? __kmalloc_cache_noprof+0x148/0x600
[  135.058089][ T9202]  ? v9fs_get_tree+0xaa/0xac0
[  135.058099][ T9202]  ? v9fs_get_tree+0xaa/0xac0
[  135.058111][ T9202]  v9fs_get_tree+0xbd/0xac0
[  135.058121][ T9202]  ? __pfx_vfs_parse_comma_sep+0x10/0x10
[  135.058132][ T9202]  ? __pfx_v9fs_get_tree+0x10/0x10
[  135.058146][ T9202]  vfs_get_tree+0x92/0x2a0
[  135.058155][ T9202]  do_new_mount+0x325/0xb00
[  135.058167][ T9202]  ? __pfx_do_new_mount+0x10/0x10
[  135.058216][ T9202]  ? ns_capable+0x84/0xe0
[  135.058232][ T9202]  ? path_mount+0x647/0x1050
[  135.058244][ T9202]  ? user_path_at+0xd4/0x160
[  135.058260][ T9202]  __se_sys_mount+0x31d/0x420
[  135.058274][ T9202]  ? __pfx___se_sys_mount+0x10/0x10
[  135.058291][ T9202]  ? __x64_sys_mount+0x20/0xc0
[  135.058303][ T9202]  do_syscall_64+0x166/0x520
[  135.058314][ T9202]  ? trace_irq_disable+0x3b/0x140
[  135.058322][ T9202]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.058332][ T9202]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.058340][ T9202] RIP: 0033:0x7fc85d39f559
[  135.058349][ T9202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  135.058357][ T9202] RSP: 002b:00007fc85e20b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  135.058369][ T9202] RAX: ffffffffffffffda RBX: 00007fc85d625fa0 RCX: 00007fc85d39f559
[  135.058375][ T9202] RDX: 0000200000000c40 RSI: 0000200000000c00 RDI: 0000200000000bc0
[  135.058381][ T9202] RBP: 00007fc85d436b20 R08: 0000200000000440 R09: 0000000000000000
[  135.058387][ T9202] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000
[  135.058392][ T9202] R13: 00007fc85d626038 R14: 00007fc85d625fa0 R15: 00007ffe034df5a8
[  135.058406][ T9202]  </TASK>
[  135.617136][ T6722] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.723201][ T6722] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.785446][ T9233] netlink: del zone limit has 4 unknown bytes
[  135.812995][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  135.823516][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  135.826160][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  135.831421][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  135.836387][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  135.878614][ T6722] team0: Port device netdevsim1 removed
[  135.886143][ T6722] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.015509][ T6722] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.194275][ T6722] bridge_slave_1: left allmulticast mode
[  136.194295][ T6722] bridge_slave_1: left promiscuous mode
[  136.194424][ T6722] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.199497][ T6722] bridge_slave_0: left allmulticast mode
[  136.199518][ T6722] bridge_slave_0: left promiscuous mode
[  136.199792][ T6722] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.306519][ T9256] set_capacity_and_notify: 4 callbacks suppressed
[  136.306544][ T9256] loop0: detected capacity change from 0 to 1024
[  136.633702][ T6722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  136.640276][ T6722] bond0 (unregistering): (slave 50): Releasing backup interface
[  136.646972][ T6722] bond0 (unregistering): Released all slaves
[  136.655882][ T6722] bond1 (unregistering): (slave lo): Releasing backup interface
[  136.656683][ T6722] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  136.658486][ T6722] bond1 (unregistering): Released all slaves
[  136.684205][ T5338] 8021q: adding VLAN 0 to HW filter on device eth5
[  136.703511][ T9231] rxe_eth0 speed is unknown, defaulting to 1000
[  137.008352][ T9279] loop1: detected capacity change from 0 to 512
[  137.046489][ T9279] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.046562][ T9279] ext4 filesystem being mounted at /453/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  137.115715][ T5658] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.160425][ T9231] lo speed is unknown, defaulting to 1000
[  137.163073][ T5338] 8021q: adding VLAN 0 to HW filter on device eth6
[  137.196489][ T9290] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  137.417083][ T9305] loop0: detected capacity change from 0 to 128
[  137.432542][ T9305] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  137.436077][ T9305] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  137.436739][ T9303] syzkaller0: entered promiscuous mode
[  137.436753][ T9303] syzkaller0: entered allmulticast mode
[  137.458918][ T5338] 8021q: adding VLAN 0 to HW filter on device eth7
[  137.500472][  T143] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  137.676872][ T9311] loop0: detected capacity change from 0 to 128
[  137.765348][ T9314] FAULT_INJECTION: forcing a failure.
[  137.765348][ T9314] name fail_futex, interval 1, probability 0, space 0, times 1
[  137.765369][ T9314] CPU: 0 UID: 0 PID: 9314 Comm: syz.1.1416 Not tainted syzkaller #0 PREEMPT(full) 
[  137.765378][ T9314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  137.765384][ T9314] Call Trace:
[  137.765388][ T9314]  <TASK>
[  137.765393][ T9314]  dump_stack_lvl+0xe8/0x150
[  137.765413][ T9314]  should_fail_ex+0x410/0x560
[  137.765430][ T9314]  get_futex_key+0x1ab/0x1410
[  137.765447][ T9314]  ? __pfx_get_futex_key+0x10/0x10
[  137.765456][ T9314]  ? _copy_to_user+0x8a/0xb0
[  137.765467][ T9314]  futex_wake+0x119/0x5f0
[  137.765480][ T9314]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  137.765491][ T9314]  ? __pfx_futex_wake+0x10/0x10
[  137.765507][ T9314]  do_futex+0x458/0x4e0
[  137.765519][ T9314]  ? __pfx_do_futex+0x10/0x10
[  137.765526][ T9314]  ? __fget_files+0x3a2/0x420
[  137.765538][ T9314]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  137.765553][ T9314]  __se_sys_futex+0x3a8/0x450
[  137.765563][ T9314]  ? ksys_read+0x242/0x270
[  137.765575][ T9314]  ? __pfx___se_sys_futex+0x10/0x10
[  137.765584][ T9314]  ? __pfx_ksys_read+0x10/0x10
[  137.765597][ T9314]  ? __x64_sys_futex+0x21/0xf0
[  137.765607][ T9314]  do_syscall_64+0x166/0x520
[  137.765618][ T9314]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.765630][ T9314]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.765639][ T9314] RIP: 0033:0x7fc85d39f559
[  137.765649][ T9314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  137.765656][ T9314] RSP: 002b:00007fc85e20b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  137.765666][ T9314] RAX: ffffffffffffffda RBX: 00007fc85d625fa8 RCX: 00007fc85d39f559
[  137.765672][ T9314] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc85d625fac
[  137.765677][ T9314] RBP: 00007fc85d625fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  137.765682][ T9314] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  137.765687][ T9314] R13: 00007fc85d626038 R14: 00007ffe034df4c0 R15: 00007ffe034df5a8
[  137.765699][ T9314]  </TASK>
[  137.928122][   T55] Bluetooth: hci1: command tx timeout
[  137.989891][ T6722] hsr_slave_0: left promiscuous mode
[  137.990750][ T6722] hsr_slave_1: left promiscuous mode
[  137.991197][ T6722] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.991210][ T6722] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.991901][ T6722] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.991913][ T6722] batman_adv: batadv0: Removing interface: batadv_slave_1
[  138.019893][ T6722] veth1_macvtap: left promiscuous mode
[  138.020026][ T6722] veth0_macvtap: left promiscuous mode
[  138.022434][ T6722] veth1_vlan: left promiscuous mode
[  138.024219][ T6722] veth0_vlan: left promiscuous mode
[  138.416821][ T6722] team0 (unregistering): Port device team_slave_1 removed
[  138.432994][ T6722] team0 (unregistering): Port device team_slave_0 removed
[  138.578990][ T5338] 8021q: adding VLAN 0 to HW filter on device eth8
[  138.724362][ T9341] loop1: detected capacity change from 0 to 2048
[  138.837843][ T9343] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  138.905033][ T9231] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.905202][ T9231] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.905363][ T9231] bridge_slave_0: entered allmulticast mode
[  138.906695][ T9231] bridge_slave_0: entered promiscuous mode
[  138.909672][ T9231] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.909791][ T9231] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.909889][ T9231] bridge_slave_1: entered allmulticast mode
[  138.911352][ T9231] bridge_slave_1: entered promiscuous mode
[  138.941418][ T9231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  138.949441][ T9231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  138.952759][ T6722] IPVS: stop unused estimator thread 0...
[  138.989032][ T9231] team0: Port device team_slave_0 added
[  138.993128][ T9231] team0: Port device team_slave_1 added
[  139.039974][ T9352] loop0: detected capacity change from 0 to 164
[  139.040524][ T9352] iso9660: Unknown parameter '184467440737095516150177777777777777777777718446744073709551615	jXb&㯳c4/A%~+ټ<TF'
[  139.077402][ T9354] loop1: detected capacity change from 0 to 512
[  139.084983][ T9231] batman_adv: batadv0: Adding interface: batadv_slave_0
[  139.084995][ T9231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  139.085005][ T9231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  139.086047][ T9231] batman_adv: batadv0: Adding interface: batadv_slave_1
[  139.086055][ T9231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  139.086065][ T9231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  139.124184][ T9354] EXT4-fs (loop1): 1 truncate cleaned up
[  139.125534][ T9354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.126528][ T9358] loop0: detected capacity change from 0 to 8
[  139.137376][ T9353] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.1425: bg 0: block 465: padding at end of block bitmap is not set
[  139.145635][ T9231] hsr_slave_0: entered promiscuous mode
[  139.146481][ T9231] hsr_slave_1: entered promiscuous mode
[  139.147175][ T9231] debugfs: 'hsr0' already exists in 'hsr'
[  139.147192][ T9231] Cannot create hsr debugfs directory
[  139.195781][ T9358] SQUASHFS error: Unable to read inode 0xe3
[  139.287014][ T5658] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.440791][ T9370] loop0: detected capacity change from 0 to 64
[  139.576960][ T9377] loop0: detected capacity change from 0 to 8
[  139.598471][ T9377] squashfs image failed sanity check
[  139.644976][ T9231] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  139.676765][ T9231] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  139.681045][ T9231] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  139.697647][ T9231] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  139.702324][ T9231] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  139.719515][ T9231] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  139.721429][ T9231] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  139.736582][ T9382] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  139.758747][ T9231] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  139.955393][ T9231] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.989096][ T9231] 8021q: adding VLAN 0 to HW filter on device team0
[  140.000995][  T143] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.001085][  T143] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.008083][   T55] Bluetooth: hci1: command tx timeout
[  140.023040][  T143] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.023158][  T143] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.293753][ T9408] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1447'.
[  140.305980][ T9408] netlink: 'syz.1.1447': attribute type 11 has an invalid length.
[  140.386306][ T9407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.493227][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 10 > 9
[  140.514947][ T9422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1451'.
[  140.571307][ T9231] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.813478][ T9231] veth0_vlan: entered promiscuous mode
[  140.822864][ T9440] netlink: 'syz.0.1455': attribute type 5 has an invalid length.
[  140.835771][ T9231] veth1_vlan: entered promiscuous mode
[  140.875775][ T9231] veth0_macvtap: entered promiscuous mode
[  140.879566][ T9231] veth1_macvtap: entered promiscuous mode
[  140.901091][ T9231] batman_adv: batadv0: Interface activated: batadv_slave_0
[  140.914710][ T9231] batman_adv: batadv0: Interface activated: batadv_slave_1
[  141.022263][ T5689] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.022308][ T5689] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.022328][ T5689] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.022349][ T5689] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.089808][   T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.089833][   T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.145715][   T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.145738][   T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.224780][ T9442] f2fs: Bad value for 'memory'
[  141.387385][ T9454] set_capacity_and_notify: 2 callbacks suppressed
[  141.387404][ T9454] loop0: detected capacity change from 0 to 512
[  141.407923][ T9454] EXT4-fs (loop0): Test dummy encryption mode enabled
[  141.407946][ T9454] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  141.407956][ T9454] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  141.414554][ T9454] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.1461: bad orphan inode 131083
[  141.414587][ T9454] loop0: lost filesystem error report for type 5 error -117
[  141.438739][ T9454] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.461822][ T9454] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #2: block 13: comm syz.0.1461: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1
[  141.511548][ T5671] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.550467][ T9448] loop1: detected capacity change from 0 to 32768
[  141.553222][ T9462] syzkaller0: entered promiscuous mode
[  141.553247][ T9462] syzkaller0: entered allmulticast mode
[  141.630226][ T9464] loop0: detected capacity change from 0 to 1024
[  141.648879][ T9464] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5
[  141.648909][ T9464] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  141.648918][ T9464] EXT4-fs error (device loop0): ext4_acquire_dquot:7079: comm syz.0.1465: Failed to acquire dquot type 0
[  141.648928][ T9464] loop0: lost filesystem error report for type 5 error -117
[  141.650390][ T9464] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  141.667527][    C0] EXT4-fs (loop0): error count since last fsck: 2
[  141.667542][    C0] EXT4-fs (loop0): initial error at time 1792584402: ext4_acquire_dquot:7079
[  141.667553][    C0] EXT4-fs (loop0): last error at time 1792584402: mb_free_blocks:2049: inode 13: block 160
[  141.672141][ T9464] EXT4-fs (loop0): 1 truncate cleaned up
[  141.672832][ T9464] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.689242][ T9448] UFO tlock:0xffffc90002b021b0
[  141.712212][ T9464] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5
[  141.712375][ T9464] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  141.712391][ T9464] EXT4-fs error (device loop0): ext4_acquire_dquot:7079: comm syz.0.1465: Failed to acquire dquot type 0
[  141.760421][ T5671] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.045218][ T9467] loop0: detected capacity change from 0 to 32768
[  142.087739][   T55] Bluetooth: hci1: command tx timeout
[  142.103634][ T9467] ea_get: invalid extended attribute
[  142.103647][ T9467] ffff8881b17a8bf0: 04 00 00 00                                      ....
[  142.106613][ T9467] ea_get: invalid extended attribute
[  142.106625][ T9467] ffff8881b17a8bf0: 04 00 00 00                                      ....
[  142.107223][ T9467] ea_get: invalid extended attribute
[  142.107229][ T9467] ffff8881b17a8bf0: 04 00 00 00                                      ....
[  144.167803][   T55] Bluetooth: hci1: command tx timeout
[  145.147911][ T9474] loop1: detected capacity change from 0 to 32768
[  145.182133][ T9474] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  145.216783][ T9474] XFS (loop1): Ending clean mount
[  145.255273][ T9474] XFS (loop1): Quotacheck needed: Please wait.
[  145.281865][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.281880][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.324326][ T9474] XFS (loop1): Quotacheck: Done.
[  145.530377][ T5658] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  145.849452][ T9514] loop4: detected capacity change from 0 to 512
[  145.856584][ T9514] EXT4-fs (loop4): Test dummy encryption mode enabled
[  145.856602][ T9514] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  145.856607][ T9514] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  145.877391][ T9514] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.1482: bad orphan inode 131083
[  145.877414][ T9514] loop4: lost filesystem error report for type 5 error -117
[  145.877533][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  145.877542][    C0] EXT4-fs (loop4): initial error at time 1792584407: ext4_orphan_get:1429
[  145.877553][    C0] EXT4-fs (loop4): last error at time 1792584407: ext4_orphan_get:1429
[  145.894027][ T9514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  145.942387][ T9231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.005448][ T9521] loop4: detected capacity change from 0 to 17
[  146.011588][ T9521] (syz.4.1485,9521,0):ocfs2_get_sector:1705 ERROR: status = -12
[  146.011608][ T9521] (syz.4.1485,9521,0):ocfs2_sb_probe:790 ERROR: status = -12
[  146.011617][ T9521] (syz.4.1485,9521,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  146.011626][ T9521] (syz.4.1485,9521,0):ocfs2_fill_super:1177 ERROR: status = -12
[  146.205932][ T9533] loop4: detected capacity change from 0 to 4096
[  146.226927][ T9533] ntfs3(loop4): Failed to load $Extend (-22).
[  146.226955][ T9533] ntfs3(loop4): Failed to initialize $Extend.
[  146.367436][ T9547] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1498'.
[  146.516307][ T9561] loop1: detected capacity change from 0 to 256
[  146.614700][ T9565] loop1: detected capacity change from 0 to 764
[  146.788515][ T9571] loop1: detected capacity change from 0 to 8192
[  146.894735][ T9581] netlink: 5428 bytes leftover after parsing attributes in process `syz.0.1514'.
[  146.894752][ T9581] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  147.081963][ T9589] loop4: detected capacity change from 0 to 2048
[  147.104208][ T9589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.140151][ T9589] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  147.166830][ T9231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.278927][ T9596] loop4: detected capacity change from 0 to 4096
[  147.294305][ T9591] loop1: detected capacity change from 0 to 32768
[  147.309342][ T9591] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  147.332717][ T9591] XFS (loop1): Ending clean mount
[  147.356296][ T5658] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  147.725349][ T9614] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  147.755506][ T9614] bond1: (slave lo): Enslaving as an active interface with an up link
[  147.759246][ T9614] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  147.833772][ T9625] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  147.872225][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1529'.
[  147.910822][ T9629] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1530'.
[  147.910850][ T9629] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1530'.
[  147.910859][ T9629] netlink: 580 bytes leftover after parsing attributes in process `syz.4.1530'.
[  148.233174][ T9638] loop0: detected capacity change from 0 to 32768
[  148.243136][ T9638] JBD2: Ignoring recovery information on journal
[  148.287182][ T9638] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  148.338741][ T9638] syz.0.1534 (9638) used greatest stack depth: 19720 bytes left
[  148.919830][ T9649] loop1: detected capacity change from 0 to 8192
[  149.775348][ T5671] ocfs2: Unmounting device (7,0) on (node local)
[  149.975447][ T9656] loop4: detected capacity change from 0 to 256
[  149.991066][ T9656] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbf4f98ab, utbl_chksum : 0xe619d30d)
[  150.069236][ T9658] loop0: detected capacity change from 0 to 4096
[  150.085941][ T9658] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.204443][ T1112] IPVS: starting estimator thread 0...
[  150.257411][ T5671] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.279767][ T9672] sctp: [Deprecated]: syz.4.1545 (pid 9672) Use of struct sctp_assoc_value in delayed_ack socket option.
[  150.279767][ T9672] Use struct sctp_sack_info instead
[  150.280455][ T9672] sctp: [Deprecated]: syz.4.1545 (pid 9672) Use of struct sctp_assoc_value in delayed_ack socket option.
[  150.280455][ T9672] Use struct sctp_sack_info instead
[  150.291129][ T9669] IPVS: using max 53 ests per chain, 127200 per kthread
[  150.574690][ T9691] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1550'.
[  150.756009][ T9695] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.766146][ T9695] EXT4-fs warning (device loop0): ext4_group_add:1735: No reserved GDT blocks, can't resize
[  150.794999][ T5671] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.005724][ T9703] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1553 (9703)
[  151.014128][ T9703] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  151.014149][ T9703] BTRFS info (device loop0): using crc32c checksum algorithm
[  151.096451][ T9703] BTRFS info (device loop0): setting nodatasum
[  151.096467][ T9703] BTRFS info (device loop0): setting nodatacow
[  151.096476][ T9703] BTRFS info (device loop0): turning on async discard
[  151.096483][ T9703] BTRFS info (device loop0): enabling free space tree
[  151.096490][ T9703] BTRFS info (device loop0): enabling auto defrag
[  151.096498][ T9703] BTRFS info (device loop0): max_inline set to 0
[  151.160573][ T5671] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  151.585368][ T9733] set_capacity_and_notify: 2 callbacks suppressed
[  151.585382][ T9733] loop4: detected capacity change from 0 to 32768
[  151.610763][ T9733] JBD2: Ignoring recovery information on journal
[  151.633352][ T9733] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  151.699486][ T9231] ocfs2: Unmounting device (7,4) on (node local)
[  151.824363][ T9744] loop4: detected capacity change from 0 to 1024
[  151.839630][ T9744] hfsplus: (loop4): Extents Overflow File (cnid 0x3) map record invalid or bitmap corruption detected, forcing read-only.
[  151.839657][ T9744] hfsplus: Run fsck.hfsplus to repair.
[  151.882850][ T9744] CacheFiles: Failed to register: -95
[  151.940916][ T9750] FAULT_INJECTION: forcing a failure.
[  151.940916][ T9750] name failslab, interval 1, probability 0, space 0, times 0
[  151.940947][ T9750] CPU: 0 UID: 0 PID: 9750 Comm: syz.1.1563 Not tainted syzkaller #0 PREEMPT(full) 
[  151.940959][ T9750] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  151.940965][ T9750] Call Trace:
[  151.940970][ T9750]  <TASK>
[  151.940975][ T9750]  dump_stack_lvl+0xe8/0x150
[  151.940996][ T9750]  should_fail_ex+0x410/0x560
[  151.941048][ T9750]  should_failslab+0xa8/0x100
[  151.941069][ T9750]  kmem_cache_alloc_lru_noprof+0xa2/0x5f0
[  151.941092][ T9750]  ? __d_alloc+0x37/0x820
[  151.941112][ T9750]  ? __d_alloc+0x37/0x820
[  151.941127][ T9750]  __d_alloc+0x37/0x820
[  151.941142][ T9750]  d_alloc+0x4b/0x190
[  151.941153][ T9750]  ? lookup_one_qstr_excl+0xc4/0x360
[  151.941169][ T9750]  lookup_one_qstr_excl+0xd8/0x360
[  151.941185][ T9750]  filename_create+0x20e/0x370
[  151.941199][ T9750]  ? __pfx_filename_create+0x10/0x10
[  151.941218][ T9750]  filename_symlinkat+0xf7/0x410
[  151.941235][ T9750]  ? __pfx_filename_symlinkat+0x10/0x10
[  151.941251][ T9750]  ? do_getname+0x151/0x250
[  151.941270][ T9750]  __se_sys_symlink+0x4d/0x2b0
[  151.941287][ T9750]  do_syscall_64+0x166/0x520
[  151.941323][ T9750]  ? trace_irq_disable+0x3b/0x140
[  151.941333][ T9750]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.941344][ T9750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.941354][ T9750] RIP: 0033:0x7fc85d39f559
[  151.941364][ T9750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  151.941372][ T9750] RSP: 002b:00007fc85e20b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[  151.941382][ T9750] RAX: ffffffffffffffda RBX: 00007fc85d625fa0 RCX: 00007fc85d39f559
[  151.941389][ T9750] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000200000000380
[  151.941395][ T9750] RBP: 00007fc85d436b20 R08: 0000000000000000 R09: 0000000000000000
[  151.941400][ T9750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  151.941406][ T9750] R13: 00007fc85d626038 R14: 00007fc85d625fa0 R15: 00007ffe034df5a8
[  151.941421][ T9750]  </TASK>
[  151.990441][ T9754] netlink: ct_mark mask cannot be 0
[  151.990458][ T9754] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.281133][ T9771] loop1: detected capacity change from 0 to 1024
[  152.281782][ T9773] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  152.295111][ T9771] EXT4-fs: quotafile must be on filesystem root
[  152.513335][ T9771] loop1: detected capacity change from 0 to 40427
[  152.522995][ T9771] F2FS-fs (loop1): invalid crc value
[  152.572484][ T9771] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  152.576678][ T9771] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0
[  152.576699][ T9771] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  152.576712][ T9771] F2FS-fs (loop1): Start checkpoint disabled!
[  152.584151][ T9771] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0
[  152.584170][ T9771] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  152.620640][ T9771] overlayfs: failed to resolve './file0': -2
[  152.661109][  T316] kworker/u9:4: attempt to access beyond end of device
[  152.661109][  T316] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  152.661161][  T316] CPU: 0 UID: 0 PID: 316 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) 
[  152.661171][  T316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  152.661177][  T316] Workqueue: writeback wb_workfn (flush-7:1)
[  152.661196][  T316] Call Trace:
[  152.661200][  T316]  <TASK>
[  152.661205][  T316]  dump_stack_lvl+0xe8/0x150
[  152.661222][  T316]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  152.661262][  T316]  f2fs_write_end_bio+0x1211/0x16e0
[  152.661281][  T316]  ? blkg_put+0x22/0x240
[  152.661302][  T316]  __submit_merged_bio+0x258/0x6a0
[  152.661310][  T316]  ? rcu_is_watching+0x16/0xb0
[  152.661324][  T316]  __submit_merged_write_cond+0x3c9/0x4e0
[  152.661342][  T316]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  152.661365][  T316]  f2fs_write_data_pages+0x2a1d/0x36f0
[  152.661390][  T316]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  152.661405][  T316]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  152.661431][  T316]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  152.661449][  T316]  ? __lock_acquire+0x747/0x2de0
[  152.661470][  T316]  ? __lock_acquire+0x747/0x2de0
[  152.661481][  T316]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  152.661491][  T316]  do_writepages+0x338/0x560
[  152.661505][  T316]  ? reacquire_held_locks+0x117/0x1a0
[  152.661513][  T316]  ? writeback_sb_inodes+0x450/0x1af0
[  152.661527][  T316]  __writeback_single_inode+0x136/0x1220
[  152.661538][  T316]  ? do_raw_spin_unlock+0x4d/0x200
[  152.661551][  T316]  writeback_sb_inodes+0x9de/0x1af0
[  152.661561][  T316]  ? __lock_acquire+0x747/0x2de0
[  152.661584][  T316]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  152.661613][  T316]  ? rcu_is_watching+0x16/0xb0
[  152.661622][  T316]  ? queue_io+0x2d3/0x470
[  152.661633][  T316]  wb_writeback+0x41c/0xad0
[  152.661645][  T316]  ? queue_io+0x291/0x470
[  152.661657][  T316]  ? __pfx_wb_writeback+0x10/0x10
[  152.661666][  T316]  ? do_raw_spin_lock+0x12b/0x2f0
[  152.661683][  T316]  wb_workfn+0x431/0x10f0
[  152.661701][  T316]  ? __pfx_wb_workfn+0x10/0x10
[  152.661713][  T316]  ? trace_hrtimer_start+0x82/0x200
[  152.661727][  T316]  ? do_raw_spin_lock+0x12b/0x2f0
[  152.661741][  T316]  ? lock_acquire+0x115/0x350
[  152.661757][  T316]  ? rcu_is_watching+0x16/0xb0
[  152.661766][  T316]  ? process_scheduled_works+0x97a/0x1630
[  152.661779][  T316]  process_scheduled_works+0xc3d/0x1630
[  152.661802][  T316]  ? __pfx_process_scheduled_works+0x10/0x10
[  152.661814][  T316]  ? assign_work+0x3cf/0x5d0
[  152.661826][  T316]  worker_thread+0xa47/0xfb0
[  152.661842][  T316]  ? __kthread_parkme+0x71/0x1f0
[  152.661857][  T316]  kthread+0x38b/0x480
[  152.661869][  T316]  ? __pfx_worker_thread+0x10/0x10
[  152.661877][  T316]  ? __pfx_kthread+0x10/0x10
[  152.661889][  T316]  ret_from_fork+0x514/0xb70
[  152.661900][  T316]  ? __pfx_ret_from_fork+0x10/0x10
[  152.661907][  T316]  ? __switch_to+0xc78/0x1410
[  152.661922][  T316]  ? __pfx_kthread+0x10/0x10
[  152.661933][  T316]  ret_from_fork_asm+0x1a/0x30
[  152.661949][  T316]  </TASK>
[  152.666605][  T316] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  152.837369][ T9775] loop0: detected capacity change from 0 to 32768
[  152.886551][ T9775] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  152.923694][ T9775] XFS (loop0): Ending clean mount
[  153.007278][ T5671] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  153.199489][ T9810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.302572][ T9808] 8021q: adding VLAN 0 to HW filter on device bond4
[  153.348271][  T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.458190][  T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.487952][  T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.528329][  T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.667886][  T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.757950][ T8923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.058959][ T9860] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1605'.
[  154.156018][ T9865] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1606'.
[  154.221654][ T9866] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1605'.
[  154.221682][ T9866] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1605'.
[  154.278230][ T9860] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1605'.
[  154.278268][ T9860] nbd: device at index 64 is going down
[  154.647892][ T9880] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1612'.
[  154.669659][ T9880] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1612'.
[  154.853401][ T9899] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1622'.
[  155.402678][ T9933] sctp: [Deprecated]: syz.1.1637 (pid 9933) Use of struct sctp_assoc_value in delayed_ack socket option.
[  155.402678][ T9933] Use struct sctp_sack_info instead
[  155.594518][ T9931] loop0: detected capacity change from 0 to 32768
[  155.602619][ T9931] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1636 (9931)
[  155.607385][ T9931] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  155.607407][ T9931] BTRFS info (device loop0): using blake2b checksum algorithm
[  155.685467][ T9931] BTRFS info (device loop0): enabling ssd optimizations
[  155.685486][ T9931] BTRFS info (device loop0): turning on async discard
[  155.685494][ T9931] BTRFS info (device loop0): enabling free space tree
[  155.685502][ T9931] BTRFS info (device loop0): use zstd compression, level 3
[  155.715433][ T5671] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  155.980392][ T9968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1647'.
[  156.282081][ T9984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1654'.
[  156.391327][ T9990] xt_CT: No such helper "netbios-ns"
[  156.991872][T10021] loop0: detected capacity change from 0 to 1764
[  157.023766][T10021] iso9660: Corrupted directory entry in block 14 of inode 1920
[  157.113989][T10033] loop0: detected capacity change from 0 to 512
[  157.160343][T10033] fscrypt (loop0, inode 2): Error -61 getting encryption context
[  157.160580][T10033] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61
[  157.161148][T10033] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #13: comm syz.0.1677: iget: bad i_size value: 12154757448730
[  157.161164][T10033] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  157.161541][T10033] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.1677: couldn't read orphan inode 13 (err -117)
[  157.161564][T10033] loop0: lost filesystem error report for type 5 error -117
[  157.162902][T10033] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.194458][T10033] fscrypt (loop0, inode 2): Error -61 getting encryption context
[  157.230312][ T5671] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.501699][T10060] loop1: detected capacity change from 0 to 2048
[  157.538126][T10060] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  157.647213][T10068] loop1: detected capacity change from 0 to 1024
[  157.669480][T10068] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  157.670973][T10068] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  157.672199][T10068] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.726784][ T5658] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.866855][T10085] loop0: detected capacity change from 0 to 16
[  157.881041][T10085] erofs (device loop0): invalid checksum 0xfd4538cb, 0x2a6de271 expected
[  157.932279][T10087] netlink: 'syz.1.1696': attribute type 2 has an invalid length.
[  158.223029][T10104] loop1: detected capacity change from 0 to 8192
[  158.426268][T10135] loop0: detected capacity change from 0 to 512
[  158.436747][T10135] EXT4-fs: Ignoring removed bh option
[  158.436768][T10135] EXT4-fs: Ignoring removed mblk_io_submit option
[  158.444720][T10142] bond1: (slave lo): Releasing backup interface
[  158.464022][T10142] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  158.466598][T10135] EXT4-fs (loop0): bad geometry: first data block 0 is beyond end of filesystem (0)
[  158.499895][T10142] bridge_slave_0: left allmulticast mode
[  158.499917][T10142] bridge_slave_0: left promiscuous mode
[  158.502550][T10142] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.519663][T10142] bridge_slave_1: left allmulticast mode
[  158.519691][T10142] bridge_slave_1: left promiscuous mode
[  158.519971][T10142] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.543701][T10142] bond0: (slave bond_slave_0): Releasing backup interface
[  158.554261][T10142] bond0: (slave bond_slave_1): Releasing backup interface
[  158.582019][T10142] team0: Port device team_slave_0 removed
[  158.595101][T10142] team0: Port device team_slave_1 removed
[  158.595576][T10142] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  158.595586][T10142] batman_adv: batadv0: Removing interface: batadv_slave_0
[  158.596692][T10142] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  158.596704][T10142] batman_adv: batadv0: Removing interface: batadv_slave_1
[  158.610388][T10142] net_ratelimit: 4 callbacks suppressed
[  158.610403][T10142] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  158.625536][T10144] team0: Mode changed to "broadcast"
[  158.632067][T10145] vlan0: entered promiscuous mode
[  158.668353][T10145] team0: Port device vlan0 added
[  158.671648][T10153] tipc: Started in network mode
[  158.671674][T10153] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  158.672062][T10153] tipc: Enabled bearer <eth:team0>, priority 0
[  158.704805][T10155] loop0: detected capacity change from 0 to 256
[  158.724573][T10155] FAT-fs (loop0): IO charset none not found
[  158.750634][T10158] loop1: detected capacity change from 0 to 256
[  158.948762][T10168] syzkaller0: entered promiscuous mode
[  158.948778][T10168] syzkaller0: entered allmulticast mode
[  159.085729][T10178] batman_adv: batadv0: Adding interface: syzkaller0
[  159.085742][T10178] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  159.085757][T10178] batman_adv: batadv0: Interface activated: syzkaller0
[  159.258909][T10183] loop4: detected capacity change from 0 to 32768
[  159.365356][T10183] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  159.435340][T10177] batman_adv: batadv0: Interface deactivated: syzkaller0
[  159.467243][ T9231] ocfs2: Unmounting device (7,4) on (node local)
[  159.481037][T10177] batman_adv: batadv0: Removing interface: syzkaller0
[  159.581638][T10193] netlink: 'syz.4.1725': attribute type 4 has an invalid length.
[  159.585333][T10193] netlink: 'syz.4.1725': attribute type 4 has an invalid length.
[  159.652568][T10197] squashfs image failed sanity check
[  159.688111][ T8925] tipc: Node number set to 11578026
[  159.735355][T10203] exfat: Deprecated parameter 'utf8'
[  159.735527][T10203] exfat: Deprecated parameter 'utf8'
[  159.750006][T10203] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xff6615b4, utbl_chksum : 0xe619d30d)
[  159.909604][T10209] __nla_validate_parse: 3 callbacks suppressed
[  159.909628][T10209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1733'.
[  159.935057][T10209] tipc: Resetting bearer <eth:team0>
[  159.939494][T10209] tipc: Resetting bearer <eth:team0>
[  159.973820][T10205] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  159.976844][T10129] tipc: Resetting bearer <eth:team0>
[  159.989008][T10205] XFS (loop0): Ending clean mount
[  159.992293][   T33] audit: type=1800 audit(1792584421.247:15): pid=10205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1731" name="file1" dev="loop0" ino=4422 res=0 errno=0
[  160.023105][ T5671] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  160.187651][T10219] netlink: 'syz.4.1735': attribute type 1 has an invalid length.
[  160.309999][T10227] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  160.501809][T10246] openvswitch: netlink: IP tunnel dst address not specified
[  160.503147][T10241] Bluetooth: ISO socket layer initialized
[  160.562446][T10249] syzkaller0: entered promiscuous mode
[  160.562469][T10249] syzkaller0: entered allmulticast mode
[  160.946221][T10280] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  161.174566][T10293] EXT4-fs: Ignoring removed mblk_io_submit option
[  161.175542][T10293] EXT4-fs (loop1): external journal device major/minor numbers have changed
[  161.500559][T10284] ftl_cs: FTL header not found.
[  161.553670][T10293] block device autoloading is deprecated and will be removed.
[  161.554449][T10293] EXT4-fs (loop1): external journal has bad superblock
[  161.721768][T10284] block2mtd: mtd1: [/dev/loop0] erase_size = 4KiB [4096]
[  161.884497][T10338] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  161.895862][T10338] cramfs: root is not a directory
[  161.941965][T10336] tc_dump_action: action bad kind
[  162.188438][T10346] set_capacity_and_notify: 6 callbacks suppressed
[  162.188459][T10346] loop1: detected capacity change from 0 to 512
[  162.189940][T10346] EXT4-fs (loop1): Test dummy encryption mode enabled
[  162.195981][T10346] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.1772: inode has both inline data and extents flags
[  162.196011][T10346] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  162.196253][T10346] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.1772: couldn't read orphan inode 15 (err -117)
[  162.196272][T10346] loop1: lost filesystem error report for type 5 error -117
[  162.198268][T10346] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.245195][ T5658] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.876637][T10358] loop4: detected capacity change from 0 to 32768
[  162.878569][T10358] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1776 (10358)
[  162.898563][T10358] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  162.898597][T10358] BTRFS info (device loop4): using sha256 checksum algorithm
[  162.954336][T10358] BTRFS info (device loop4): setting nodatasum
[  162.954355][T10358] BTRFS info (device loop4): allowing degraded mounts
[  162.954363][T10358] BTRFS info (device loop4): setting nodatacow
[  162.954370][T10358] BTRFS info (device loop4): enabling ssd optimizations
[  162.954377][T10358] BTRFS info (device loop4): using spread ssd allocation scheme
[  162.954384][T10358] BTRFS info (device loop4): turning off barriers
[  162.954391][T10358] BTRFS info (device loop4): turning on sync discard
[  162.954504][T10358] BTRFS info (device loop4): enabling free space tree
[  163.020314][T10358] BTRFS critical (device loop4 state EH): emergency shutdown
[  163.057663][ T9231] BTRFS info (device loop4 state EH): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  163.396194][T10383] loop1: detected capacity change from 0 to 4096
[  163.401035][T10383] EXT4-fs: Ignoring removed nobh option
[  163.401101][T10383] EXT4-fs: Ignoring removed bh option
[  163.403579][T10383] EXT4-fs (loop1): Test dummy encryption mode enabled
[  163.412788][T10383] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.454839][ T5658] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.587787][T10391] macvtap2: entered promiscuous mode
[  163.587814][T10391] bridge0: entered promiscuous mode
[  163.636933][T10393] loop1: detected capacity change from 0 to 256
[  163.641007][T10393] vfat: Unknown parameter 'umtail'
[  164.027831][T10423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1798'.
[  164.027849][T10423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1798'.
[  164.496003][T10458] loop4: detected capacity change from 0 to 16
[  164.496798][T10458] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  164.605161][T10429] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input4
[  164.824850][T10470] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1819'.
[  164.824960][T10470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1819'.
[  165.421934][T10479] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1823'.
[  165.557028][T10477] loop1: detected capacity change from 0 to 32768
[  165.565167][T10477] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1822 (10477)
[  165.609913][T10477] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  165.609938][T10477] BTRFS info (device loop1): using crc32c checksum algorithm
[  165.670403][T10477] BTRFS info (device loop1): enabling ssd optimizations
[  165.670432][T10477] BTRFS info (device loop1): turning on flush-on-commit
[  165.670442][T10477] BTRFS info (device loop1): enabling free space tree
[  165.670452][T10477] BTRFS info (device loop1): enabling auto defrag
[  165.670465][T10477] BTRFS info (device loop1): use lzo compression, level 1
[  165.670477][T10477] BTRFS info (device loop1): max_inline set to 4096
[  165.751488][   T33] audit: type=1800 audit(1792584427.007:16): pid=10477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1822" name="file1" dev="loop1" ino=260 res=0 errno=0
[  165.752819][T10477] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  165.752860][T10477] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  166.375313][ T5658] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  166.670627][T10534] loop4: detected capacity change from 0 to 64
[  166.877668][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1852'.
[  166.877689][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1852'.
[  167.851218][T10581] loop4: detected capacity change from 0 to 1024
[  167.855523][T10581] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869)
[  167.855609][T10581] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  167.872746][T10581] EXT4-fs (loop4): failed to initialize system zone (-117)
[  167.872802][T10581] EXT4-fs (loop4): mount failed
[  168.111082][T10588] loop1: detected capacity change from 0 to 32768
[  168.140814][T10588] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  168.170728][T10588] (syz.1.1866,10588,1):ocfs2_check_set_options:1243 ERROR: Invalid heartbeat mount options
[  168.222660][ T5658] ocfs2: Unmounting device (7,1) on (node local)
[  168.285718][T10598] loop4: detected capacity change from 0 to 2048
[  168.293491][T10598] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  168.322543][T10602] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  168.410872][T10607] loop1: detected capacity change from 0 to 512
[  168.433045][T10607] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.1874: Unrecognised inode hash code 255
[  168.433069][T10607] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1874: Corrupt directory, running e2fsck is recommended
[  168.456406][T10607] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  168.456978][T10607] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.1874: corrupted in-inode xattr: invalid ea_ino
[  168.457000][T10607] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  168.457324][T10607] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.1874: couldn't read orphan inode 15 (err -117)
[  168.457343][T10607] loop1: lost filesystem error report for type 5 error -117
[  168.457707][    C1] EXT4-fs (loop1): error count since last fsck: 2
[  168.457718][    C1] EXT4-fs (loop1): initial error at time 1792584429: ext4_iget_extra_inode:5210: inode 15
[  168.457738][    C1] EXT4-fs (loop1): last error at time 1792584429: ext4_orphan_get:1408
[  168.461922][T10607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.481544][T10607] EXT4-fs error (device loop1): __ext4_remount:6882: comm syz.1.1874: Abort forced by user
[  168.481969][T10607] EXT4-fs (loop1): Remounting filesystem read-only
[  168.481981][T10607] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  168.482896][T10607] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.1874: Unrecognised inode hash code 255
[  168.482915][T10607] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1874: Corrupt directory, running e2fsck is recommended
[  168.540698][ T5658] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.752723][T10630] ip6gre1: entered promiscuous mode
[  168.752749][T10630] ip6gre1: entered allmulticast mode
[  168.770073][T10632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1885'.
[  168.770101][T10632] netlink: 580 bytes leftover after parsing attributes in process `syz.1.1885'.
[  168.798189][ T5689] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  168.798369][ T5689] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  168.829224][ T5770] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  168.863556][T10636] loop4: detected capacity change from 0 to 256
[  168.864659][T10636] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  168.968189][ T5663] Bluetooth: hci1: command 0x0405 tx timeout
[  169.039738][T10644] loop1: detected capacity change from 0 to 256
[  169.043034][T10644] exfat: Deprecated parameter 'utf8'
[  169.043089][T10644] exfat: Deprecated parameter 'namecase'
[  169.043153][T10644] exfat: Deprecated parameter 'namecase'
[  169.043169][T10644] exfat: Deprecated parameter 'utf8'
[  169.065370][T10644] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[  169.065618][T10644] exFAT-fs (loop1): failed to test first cluster bit of root dir(5)
[  169.147918][   T32] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  169.168646][   T32] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  169.212261][T10650] bridge1: entered promiscuous mode
[  169.212301][T10650] bridge1: entered allmulticast mode
[  169.234958][T10642] loop4: detected capacity change from 0 to 40427
[  169.236684][T10642] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  169.236698][T10642] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  169.237291][T10642] F2FS-fs (loop4): invalid crc value
[  169.324744][T10642] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  169.337246][T10642] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  169.337266][T10642] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  169.829734][ T9231] syz-executor: attempt to access beyond end of device
[  169.829734][ T9231] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  169.839175][ T9231] CPU: 1 UID: 0 PID: 9231 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  169.839191][ T9231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  169.839197][ T9231] Call Trace:
[  169.839202][ T9231]  <TASK>
[  169.839206][ T9231]  dump_stack_lvl+0xe8/0x150
[  169.839227][ T9231]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  169.839245][ T9231]  f2fs_write_end_bio+0x1211/0x16e0
[  169.839258][ T9231]  ? blkg_put+0x22/0x240
[  169.839278][ T9231]  __submit_merged_bio+0x258/0x6a0
[  169.839287][ T9231]  ? rcu_is_watching+0x16/0xb0
[  169.839299][ T9231]  __submit_merged_write_cond+0x3c9/0x4e0
[  169.839315][ T9231]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  169.839337][ T9231]  f2fs_write_data_pages+0x2a1d/0x36f0
[  169.839346][ T9231]  ? __lock_acquire+0x747/0x2de0
[  169.839372][ T9231]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  169.839398][ T9231]  ? __pfx_hlock_conflict+0x10/0x10
[  169.839406][ T9231]  ? __bfs+0x153/0x290
[  169.839413][ T9231]  ? __pfx_hlock_conflict+0x10/0x10
[  169.839428][ T9231]  ? lockdep_unlock+0x5c/0xd0
[  169.839438][ T9231]  ? __lock_acquire+0x1511/0x2de0
[  169.839459][ T9231]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  169.839469][ T9231]  do_writepages+0x338/0x560
[  169.839482][ T9231]  ? do_raw_spin_unlock+0x4d/0x200
[  169.839494][ T9231]  filemap_fdatawrite+0x1e9/0x2f0
[  169.839506][ T9231]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  169.839531][ T9231]  ? do_raw_spin_unlock+0x4d/0x200
[  169.839542][ T9231]  f2fs_sync_dirty_inodes+0x30e/0x830
[  169.839558][ T9231]  f2fs_write_checkpoint+0xa38/0x2710
[  169.839567][ T9231]  ? __lock_acquire+0x747/0x2de0
[  169.839590][ T9231]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  169.839622][ T9231]  kill_f2fs_super+0x2dd/0x700
[  169.839637][ T9231]  ? __pfx_kill_f2fs_super+0x10/0x10
[  169.839651][ T9231]  ? call_rcu+0x64d/0x8b0
[  169.839659][ T9231]  ? lockdep_hardirqs_on+0x7b/0x110
[  169.839677][ T9231]  deactivate_locked_super+0xbe/0x110
[  169.839690][ T9231]  cleanup_mnt+0x204/0x2a0
[  169.839701][ T9231]  task_work_run+0x1d9/0x260
[  169.839711][ T9231]  ? __pfx_task_work_run+0x10/0x10
[  169.839726][ T9231]  exit_to_user_mode_loop+0x204/0x770
[  169.839734][ T9231]  ? rcu_is_watching+0x16/0xb0
[  169.839744][ T9231]  do_syscall_64+0x328/0x520
[  169.839754][ T9231]  ? trace_irq_disable+0x3b/0x140
[  169.839762][ T9231]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.839773][ T9231]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.839781][ T9231] RIP: 0033:0x7f8ba7ba0797
[  169.839790][ T9231] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  169.839797][ T9231] RSP: 002b:00007ffc74c9aa78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  169.839808][ T9231] RAX: 0000000000000000 RBX: 00007f8ba7c35f63 RCX: 00007f8ba7ba0797
[  169.839813][ T9231] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc74c9ab30
[  169.839818][ T9231] RBP: 00007ffc74c9ab30 R08: 00007ffc74c9bb30 R09: 00000000ffffffff
[  169.839848][ T9231] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc74c9bbc0
[  169.839854][ T9231] R13: 00007f8ba7c35f63 R14: 00000000000296d9 R15: 00007ffc74c9bc00
[  169.839867][ T9231]  </TASK>
[  169.839872][ T9231] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  169.855128][ T8924] loop4: lost filesystem error report for type 5 error -108
[  170.617396][T10718] batman_adv: batadv0: Adding interface: macsec0
[  170.617411][T10718] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  170.634137][T10718] batman_adv: batadv0: Interface activated: macsec0
[  170.835061][T10724] loop4: detected capacity change from 0 to 4096
[  170.852223][T10724] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  170.852250][T10724] EXT4-fs (loop4): Test dummy encryption mode enabled
[  170.887257][T10724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.961759][ T9231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.089680][T10736] loop4: detected capacity change from 0 to 512
[  171.105410][T10736] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  171.108610][T10732] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.109397][T10732] 8021q: adding VLAN 0 to HW filter on device team0
[  171.124198][T10732] 8021q: adding VLAN 0 to HW filter on device batadv0
[  171.181944][T10736] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  171.198625][T10732] batman_adv: batadv0: Interface activated: batadv_slave_0
[  171.201186][T10732] batman_adv: batadv0: Interface activated: batadv_slave_1
[  171.227073][T10732] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  171.227093][T10732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  171.244779][T10732] veth1_vlan: left promiscuous mode
[  171.249710][T10732] veth0_vlan: left promiscuous mode
[  171.253389][T10732] veth0_vlan: entered promiscuous mode
[  171.261182][T10732] veth1_vlan: entered promiscuous mode
[  171.275028][T10732] veth1_macvtap: left promiscuous mode
[  171.275621][T10732] veth0_macvtap: left promiscuous mode
[  171.285739][T10732] veth0_macvtap: entered promiscuous mode
[  171.288943][T10732] veth1_macvtap: entered promiscuous mode
[  171.317890][T10732] 8021q: adding VLAN 0 to HW filter on device bond1
[  171.322997][T10732] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check.
[  171.323057][ T8924] lo speed is unknown, defaulting to 1000
[  171.335220][T10127] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.335272][T10127] bridge0: port 2(bridge_slave_1) entered forwarding state
[  171.338859][ T8924] syz0: Port: 1 Link ACTIVE
[  171.430909][ T8923] lo speed is unknown, defaulting to 1000
[  171.491638][ T5689] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex
[  171.505159][ T5689] bond1: (slave veth3): making interface the new active one
[  171.515862][ T5689] bond1: active interface up!
[  171.531999][T10743] batadv1: entered promiscuous mode
[  171.532023][T10743] batadv1: entered allmulticast mode
[  171.856582][T10755] loop1: detected capacity change from 0 to 40427
[  171.861246][T10755] F2FS-fs (loop1): invalid crc value
[  171.922140][T10755] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  171.933156][T10755] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  172.278933][T10781] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1946'.
[  172.425019][T10779] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1949 (10779)
[  172.459243][T10779] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  172.459267][T10779] BTRFS info (device loop4): using crc32c checksum algorithm
[  172.537159][T10779] BTRFS info (device loop4): enabling ssd optimizations
[  172.537179][T10779] BTRFS info (device loop4): turning on flush-on-commit
[  172.537186][T10779] BTRFS info (device loop4): enabling free space tree
[  172.537193][T10779] BTRFS info (device loop4): enabling auto defrag
[  172.537202][T10779] BTRFS info (device loop4): use lzo compression, level 1
[  172.537210][T10779] BTRFS info (device loop4): max_inline set to 4096
[  172.766228][ T9231] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  172.807783][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  172.937962][T10814] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1957'.
[  173.006668][   T69] IPVS: starting estimator thread 0...
[  173.098474][T10820] IPVS: using max 49 ests per chain, 117600 per kthread
[  173.636307][T10857] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1975'.
[  174.000230][T10873] netlink: 'syz.4.1983': attribute type 1 has an invalid length.
[  174.021891][T10873] 8021q: adding VLAN 0 to HW filter on device bond2
[  174.029339][T10873] gretap1: entered promiscuous mode
[  174.037366][T10873] bond2: (slave gretap1): making interface the new active one
[  174.041555][T10873] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  174.079101][T10873] 8021q: adding VLAN 0 to HW filter on device bond3
[  174.082247][T10873] bond2: (slave bond3): Enslaving as an active interface with a down link
[  174.128859][T10873] bond2 (unregistering): (slave gretap1): Releasing active interface
[  174.183048][T10873] bond2 (unregistering): (slave bond3): Releasing active interface
[  174.190126][T10873] bond2 (unregistering): Released all slaves
[  174.368645][T10884] block nbd1: server does not support multiple connections per device.
[  174.382235][T10884] block nbd1: shutting down sockets
[  174.790028][T10910] set_capacity_and_notify: 2 callbacks suppressed
[  174.790042][T10910] loop1: detected capacity change from 0 to 64
[  174.964357][T10920] loop1: detected capacity change from 0 to 128
[  174.967251][T10920] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  174.974019][T10920] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  175.090994][T10907] loop4: detected capacity change from 0 to 32768
[  175.114181][T10907] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  175.156501][T10907] XFS (loop4): Ending clean mount
[  175.194817][ T9231] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  175.203753][T10889] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  175.203795][T10889] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  175.398708][T10937] bridge_slave_1: left allmulticast mode
[  175.398726][T10937] bridge_slave_1: left promiscuous mode
[  175.398924][T10937] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.480590][T10889] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  175.480609][T10889] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  175.599904][T10889] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  175.599920][T10889] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  175.780652][T10961] loop4: detected capacity change from 0 to 512
[  175.793058][T10963] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2006'.
[  175.819385][T10961] EXT4-fs (loop4): orphan cleanup on readonly fs
[  175.819402][T10961] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  175.821914][T10961] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  175.824906][T10961] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.2005: attempt to clear invalid blocks 2 len 1
[  175.824928][T10961] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  175.827528][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  175.827542][    C0] EXT4-fs (loop4): initial error at time 1792584437: ext4_mb_generate_buddy:1317
[  175.827552][    C0] EXT4-fs (loop4): last error at time 1792584437: ext4_mb_generate_buddy:1317
[  175.870801][T10961] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2005: invalid indirect mapped block 1819239214 (level 0)
[  175.870826][T10961] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  175.871018][T10961] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2005: invalid indirect mapped block 1819239214 (level 1)
[  175.871032][T10961] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  175.871435][T10961] EXT4-fs (loop4): 1 truncate cleaned up
[  175.872205][T10961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  175.879830][T10969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2008'.
[  175.955201][ T9231] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: inode out of bounds - offset=24, inode=85, rec_len=20, size=1024 fake=0
[  176.025347][T10975] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  176.062385][T10974] netlink: 'syz.0.2009': attribute type 21 has an invalid length.
[  176.062408][T10974] IPv6: NLM_F_CREATE should be specified when creating new route
[  176.070803][T10974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2009'.
[  176.084643][T10977] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  176.173417][ T9231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.352329][ T5689] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.424988][ T5663] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  176.442174][ T5663] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  176.445623][ T5663] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  176.446565][ T5663] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  176.460623][ T5663] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  176.473289][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  176.473624][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  176.473971][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  176.474984][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  176.476931][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  176.540570][ T5689] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.684674][ T5689] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.746124][T11018] netlink: Conntrack attr has 8 unknown bytes
[  176.746144][T11018] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.780370][ T5689] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.827035][T10990] rxe_eth0 speed is unknown, defaulting to 1000
[  177.184376][ T5689] bond0 (unregistering): Released all slaves
[  177.187419][ T5689] bond1 (unregistering): Released all slaves
[  177.200101][ T5689] bond3 (unregistering): Released all slaves
[  177.216217][T10990] lo speed is unknown, defaulting to 1000
[  177.361373][ T5689] tipc: Disabling bearer <eth:team0>
[  177.362123][ T5689] tipc: Left network mode
[  177.750990][T10990] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.751092][T10990] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.751160][T10990] bridge_slave_0: entered allmulticast mode
[  177.752060][T10990] bridge_slave_0: entered promiscuous mode
[  177.762968][T10990] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.763048][T10990] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.763120][T10990] bridge_slave_1: entered allmulticast mode
[  177.764670][T10990] bridge_slave_1: entered promiscuous mode
[  177.813137][T10990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.817212][ T5689] hsr_slave_0: left promiscuous mode
[  177.824034][ T5689] hsr_slave_1: left promiscuous mode
[  177.833537][ T5689] batman_adv: batadv0: Interface deactivated: macsec0
[  177.834507][ T5689] batman_adv: batadv0: Removing interface: macsec0
[  177.845848][ T5689] veth1_macvtap: left promiscuous mode
[  177.845886][ T5689] veth0_macvtap: left promiscuous mode
[  177.845968][ T5689] veth1_vlan: left promiscuous mode
[  177.964387][ T5689] team0 (unregistering): Port device vlan0 removed
[  178.126588][T10990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  178.141178][T10990] team0: Port device team_slave_0 added
[  178.142445][T10990] team0: Port device team_slave_1 added
[  178.172285][T10990] batman_adv: batadv0: Adding interface: batadv_slave_0
[  178.172305][T10990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  178.172322][T10990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  178.174110][T10990] batman_adv: batadv0: Adding interface: batadv_slave_1
[  178.174123][T10990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  178.174141][T10990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  178.253683][T10990] hsr_slave_0: entered promiscuous mode
[  178.254609][T10990] hsr_slave_1: entered promiscuous mode
[  178.255277][T10990] debugfs: 'hsr0' already exists in 'hsr'
[  178.255292][T10990] Cannot create hsr debugfs directory
[  178.385879][ T5689] IPVS: stop unused estimator thread 0...
[  178.567901][   T55] Bluetooth: hci1: command tx timeout
[  179.639865][T11007] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  179.666260][T10990] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  179.703920][T10990] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  179.704589][T10990] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  179.715656][T10990] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  179.716377][T10990] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  179.729620][T10990] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  179.732628][T10990] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  179.746266][T10990] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  179.842825][T10990] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.906114][T10990] 8021q: adding VLAN 0 to HW filter on device team0
[  179.926177][T10123] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.926267][T10123] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.978639][T10123] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.978766][T10123] bridge0: port 2(bridge_slave_1) entered forwarding state
[  180.036238][T11058] loop1: detected capacity change from 0 to 512
[  180.063103][T11058] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  180.063194][T11058] System zones: 1-12
[  180.064820][T11058] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.2031: missing EA_INODE flag
[  180.064840][T11058] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  180.067582][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  180.067600][    C0] EXT4-fs (loop1): initial error at time 1792584441: ext4_xattr_inode_iget:437: inode 12
[  180.067623][    C0] EXT4-fs (loop1): last error at time 1792584441: ext4_xattr_inode_iget:437: inode 12
[  180.068442][T11058] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.2031: error while reading EA inode 12 err=-117
[  180.068535][T11058] loop1: lost filesystem error report for type 5 error -117
[  180.075614][T11058] EXT4-fs (loop1): 1 orphan inode deleted
[  180.084711][T11058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  180.135590][T11058] fscrypt (loop1, inode 15): Mutually exclusive encryption flags (0x1a)
[  180.225226][ T5658] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.225277][ T5338] 8021q: adding VLAN 0 to HW filter on device eth9
[  180.494921][T11100] loop1: detected capacity change from 0 to 64
[  180.511233][T10990] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.539739][ T5338] 8021q: adding VLAN 0 to HW filter on device eth10
[  180.647670][   T55] Bluetooth: hci1: command tx timeout
[  180.806886][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2039'.
[  180.852042][T10990] veth0_vlan: entered promiscuous mode
[  180.865823][T10990] veth1_vlan: entered promiscuous mode
[  180.883632][ T5338] 8021q: adding VLAN 0 to HW filter on device eth11
[  180.912390][T10990] veth0_macvtap: entered promiscuous mode
[  180.922243][T10990] veth1_macvtap: entered promiscuous mode
[  180.942920][T11138] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  180.942941][T11138] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  180.942964][T11138] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  180.953077][T10990] batman_adv: batadv0: Interface activated: batadv_slave_0
[  180.982116][T11138] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  180.997778][T11138] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  181.002843][T10990] batman_adv: batadv0: Interface activated: batadv_slave_1
[  181.033874][T11142] ip_tables: iptables: counters copy to user failed while replacing table
[  181.044698][ T5689] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.111421][T11138] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2041'.
[  181.283557][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.283572][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.288696][ T5489] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.289968][ T6722] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.290624][ T6722] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.370578][   T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.370596][   T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.387974][ T5338] 8021q: adding VLAN 0 to HW filter on device eth12
[  181.740545][T10127] IPVS: starting estimator thread 0...
[  181.814088][T11177] block nbd0: reconnected socket
[  181.828278][   T57] block nbd0: Receive control failed (result -32)
[  181.852049][T11172] IPVS: using max 79 ests per chain, 189600 per kthread
[  181.882930][T11183] loop1: detected capacity change from 0 to 1024
[  181.916738][T11183] hfsplus: invalid length 1280 has been corrected to 255
[  181.916901][T11183] hfsplus: invalid length 1280 has been corrected to 255
[  181.916999][T11183] hfsplus: invalid length 1280 has been corrected to 255
[  181.964516][T10125] hfsplus: invalid length 1280 has been corrected to 255
[  181.966893][T11187] block nbd0: reconnected socket
[  181.966907][T11187] nbd: socks must be embedded in a SOCK_ITEM attr
[  181.974190][   T56] block nbd0: Receive control failed (result -32)
[  182.048271][T11189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2059'.
[  182.151342][T11201] loop5: detected capacity change from 0 to 16
[  182.221158][T11201] erofs (device loop5): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  182.221968][T11201] erofs (device loop5): mounted with root inode @ nid 36.
[  182.224560][T11201] syz.5.2063: attempt to access beyond end of device
[  182.224560][T11201] loop5: rw=0, sector=301990144, nr_sectors = 257 limit=16
[  182.224655][T11201] syz.5.2063: attempt to access beyond end of device
[  182.224655][T11201] loop5: rw=0, sector=301990400, nr_sectors = 2 limit=16
[  182.235779][T11193] loop1: detected capacity change from 0 to 32768
[  182.264663][T11201] erofs (device loop5): read error -5 @ 0 of nid 36
[  182.266039][T11193] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  182.276434][T11193] XFS (loop1): Ending clean mount
[  182.357847][ T5658] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  182.495621][T11225] Cannot find add_set index 0 as target
[  182.600717][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2073'.
[  182.651597][T11233] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  182.651642][ T8925] lo speed is unknown, defaulting to 1000
[  182.651662][ T8925] syz0: Port: 1 Link DOWN
[  182.653840][ T8924] lo speed is unknown, defaulting to 1000
[  182.713637][T11236] loop5: detected capacity change from 0 to 2048
[  182.725876][T11236] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  182.727652][   T55] Bluetooth: hci1: command tx timeout
[  182.902804][T11250] syzkaller0: entered promiscuous mode
[  182.902820][T11250] syzkaller0: entered allmulticast mode
[  183.442972][T11258] /dev/loop0: Can't open blockdev
[  183.476866][T11260] syzkaller0: entered promiscuous mode
[  183.476883][T11260] syzkaller0: entered allmulticast mode
[  183.571891][T11262] netlink: 'syz.0.2087': attribute type 3 has an invalid length.
[  183.897920][T11276] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2094'.
[  184.046513][T11286] syzkaller1: entered promiscuous mode
[  184.046536][T11286] syzkaller1: entered allmulticast mode
[  184.112636][T11292] loop1: detected capacity change from 0 to 2048
[  184.159504][T11292]  loop1: AHDI p1 p2
[  184.159748][T11292] loop1: p1 size 100663296 extends beyond EOD, truncated
[  184.223725][T10996] udevd[10996]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  184.239910][T10996] udevd[10996]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  184.336541][T11310] loop5: detected capacity change from 0 to 512
[  184.337129][T11310] EXT4-fs: Ignoring removed nobh option
[  184.342276][T11310] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  184.342286][T11310] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  184.350122][T11310] EXT4-fs (loop5): 1 truncate cleaned up
[  184.360035][T11310] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  184.365191][T11310] EXT4-fs warning (device loop5): ext4_group_add:1735: No reserved GDT blocks, can't resize
[  184.395404][T10990] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.752414][T11338] loop1: detected capacity change from 0 to 4096
[  184.764949][T11338] ntfs3(loop1): ino=9, mi_enum_attr
[  184.764971][T11338] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  184.773766][T11338] ntfs3(loop1): ino=9, mi_enum_attr
[  184.773837][T11338] ntfs3(loop1): ino=b, mi_enum_attr
[  184.773878][T11338] ntfs3(loop1): Failed to load $Extend (-22).
[  184.773886][T11338] ntfs3(loop1): Failed to initialize $Extend.
[  184.807702][   T55] Bluetooth: hci1: command tx timeout
[  184.983188][T10127] ntfs3(loop1): ino=5, mi_enum_attr
[  184.983779][T10127] ntfs3(loop1): ino=5, mi_enum_attr
[  185.309536][T11356] nbd1: detected capacity change from 0 to 63
[  185.319198][   T56] block nbd1: Receive control failed (result -104)
[  185.320665][  T218] block nbd1: Send control failed (result -32)
[  185.320792][  T218] block nbd1: Request send failed, requeueing
[  185.330883][  T218] block nbd1: Dead connection, failed to find a fallback
[  185.330904][  T218] block nbd1: shutting down sockets
[  185.330916][  T218] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  185.331015][  T218] Buffer I/O error on dev nbd1, logical block 3, async page read
[  185.716542][T11363] syzkaller1: entered promiscuous mode
[  185.716567][T11363] syzkaller1: entered allmulticast mode
[  185.893744][T11375] netlink: 'syz.0.2139': attribute type 2 has an invalid length.
[  185.897092][T11376] loop5: detected capacity change from 0 to 256
[  185.907121][T11376] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0x917246c7, utbl_chksum : 0xe619d30d)
[  185.982071][T11380] batadv_slave_1: entered promiscuous mode
[  186.177249][T11391] loop5: detected capacity change from 0 to 512
[  186.196742][T11391] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  186.196855][T11391] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.204049][T11391] Quota error (device loop5): do_check_range: Getting block 773 out of range 1-5
[  186.204126][T11391] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  186.204141][T11391] EXT4-fs error (device loop5): ext4_acquire_dquot:7079: comm syz.5.2146: Failed to acquire dquot type 1
[  186.204594][T11391] EXT4-fs (loop5): Remounting filesystem read-only
[  186.211260][T11391] fs-verity (loop5, inode 15): Error -117 getting verity descriptor size
[  186.226096][T10990] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.334144][T11402] loop5: detected capacity change from 0 to 512
[  186.335117][T11402] EXT4-fs: Ignoring removed mblk_io_submit option
[  186.343643][T11402] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  186.345135][T11402] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  186.345264][T11402] EXT4-fs (loop5): orphan cleanup on readonly fs
[  186.346299][T11402] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:487: comm syz.5.2150: Invalid block bitmap block 0 in block_group 0
[  186.346316][T11402] loop5: lost filesystem error report for type 5 error -117
[  186.348789][    C0] EXT4-fs (loop5): last error at time 1792584447: ext4_read_block_bitmap_nowait:487
[  186.355203][T11402] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:487: comm syz.5.2150: Invalid block bitmap block 0 in block_group 0
[  186.355232][T11402] loop5: lost filesystem error report for type 5 error -117
[  186.361206][T11402] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:487: comm syz.5.2150: Invalid block bitmap block 0 in block_group 0
[  186.361238][T11402] loop5: lost filesystem error report for type 5 error -117
[  186.361603][T11402] Quota error (device loop5): write_blk: dquota write failed
[  186.361646][T11402] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota
[  186.361693][T11402] EXT4-fs error (device loop5): ext4_acquire_dquot:7079: comm syz.5.2150: Failed to acquire dquot type 1
[  186.361708][T11402] loop5: lost filesystem error report for type 5 error -28
[  186.362188][T11402] EXT4-fs (loop5): 1 orphan inode deleted
[  186.370896][T10125] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-5
[  186.370967][T10125] EXT4-fs error (device loop5): ext4_release_dquot:7115: comm kworker/u9:7: Failed to release dquot type 1
[  186.370982][T10125] loop5: lost filesystem error report for type 5 error -117
[  186.375555][T11402] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  186.403575][T11402] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000.
[  186.431165][T10990] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.484901][T11405] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2151'.
[  186.492417][T11405] bridge0: port 3(vlan2) entered blocking state
[  186.492537][T11405] bridge0: port 3(vlan2) entered disabled state
[  186.492740][T11405] vlan2: entered allmulticast mode
[  186.492750][T11405] geneve0: entered allmulticast mode
[  186.493551][T11405] vlan2: entered promiscuous mode
[  186.493562][T11405] geneve0: entered promiscuous mode
[  187.169703][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.169723][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  187.186507][T11414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  187.424805][T11418] loop5: detected capacity change from 0 to 764
[  187.449261][T11418] Symlink component flag not implemented
[  187.449269][T11418] Symlink component flag not implemented
[  187.603565][T11426] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2158'.
[  187.631181][T11426] 8021q: adding VLAN 0 to HW filter on device bond1
[  187.691953][T11426] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  187.712366][T11426] netlink: 'syz.5.2158': attribute type 10 has an invalid length.
[  187.712391][T11426] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2158'.
[  187.712528][T11426] dummy0: entered promiscuous mode
[  187.714373][T11426] bond1: (slave dummy0): Releasing backup interface
[  187.898919][T11441] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2165'.
[  187.905372][T11443] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2166'.
[  187.933719][T11445] 
[  187.934841][T11445] ======================================================
[  187.937784][T11445] WARNING: possible circular locking dependency detected
[  187.940613][T11445] syzkaller #0 Not tainted
[  187.942616][T11445] ------------------------------------------------------
[  187.945488][T11445] syz.5.2167/11445 is trying to acquire lock:
[  187.948053][T11445] ffff8881012d4210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x539/0x6b0
[  187.952268][T11445] 
[  187.952268][T11445] but task is already holding lock:
[  187.955974][T11445] ffff8881012d4180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x510
[  187.959755][T11445] 
[  187.959755][T11445] which lock already depends on the new lock.
[  187.959755][T11445] 
[  187.964045][T11445] 
[  187.964045][T11445] the existing dependency chain (in reverse order) is:
[  187.967755][T11445] 
[  187.967755][T11445] -> #9 (&root->kernfs_rwsem){++++}-{4:4}:
[  187.970915][T11445]        down_write+0x91/0x200
[  187.972886][T11445]        kernfs_add_one+0x41/0x510
[  187.974936][T11445]        kernfs_create_dir_ns+0x18c/0x220
[  187.977203][T11445]        internal_create_group+0x440/0x1180
[  187.979511][T11445]        cpuhp_invoke_callback+0x434/0x810
[  187.981909][T11445]        cpuhp_issue_call+0x3f0/0x750
[  187.984222][T11445]        __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0
[  187.986975][T11445]        __cpuhp_setup_state+0x3f/0x60
[  187.989347][T11445]        do_one_initcall+0x250/0x870
[  187.991592][T11445]        do_initcall_level+0x10a/0x1a0
[  187.993935][T11445]        do_initcalls+0x59/0xa0
[  187.996213][T11445]        kernel_init_freeable+0x29d/0x3e0
[  187.998578][T11445]        kernel_init+0x22/0x1d0
[  188.000608][T11445]        ret_from_fork+0x514/0xb70
[  188.002766][T11445]        ret_from_fork_asm+0x1a/0x30
[  188.004944][T11445] 
[  188.004944][T11445] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}:
[  188.007997][T11445] 
[  188.007997][T11445] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  188.011177][T11445]        cpus_read_lock+0x3d/0x160
[  188.013525][T11445]        static_key_slow_inc+0x12/0x30
[  188.015776][T11445]        nbd_genl_reconnect_sock_cb+0x69a/0xbb0
[  188.018406][T11445]        nbd_genl_foreach_sock+0x265/0x450
[  188.020848][T11445]        nbd_genl_reconfigure+0xbbb/0x1040
[  188.023264][T11445]        genl_family_rcv_msg_doit+0x233/0x340
[  188.025757][T11445]        genl_rcv_msg+0x614/0x7a0
[  188.027815][T11445]        netlink_rcv_skb+0x226/0x4a0
[  188.029932][T11445]        genl_rcv+0x28/0x40
[  188.031813][T11445]        netlink_unicast+0x8ef/0xa80
[  188.033948][T11445]        netlink_sendmsg+0x7f0/0xb20
[  188.036136][T11445]        sock_sendmsg_nosec+0x13a/0x180
[  188.038400][T11445]        ____sys_sendmsg+0x54e/0x850
[  188.040587][T11445]        ___sys_sendmsg+0x2a5/0x360
[  188.042783][T11445]        __x64_sys_sendmsg+0x1b1/0x290
[  188.045081][T11445]        do_syscall_64+0x166/0x520
[  188.047164][T11445]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.049772][T11445] 
[  188.049772][T11445] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  188.052840][T11445]        __mutex_lock+0x197/0x15a0
[  188.054987][T11445]        nbd_queue_rq+0x373/0xff0
[  188.057088][T11445]        blk_mq_dispatch_rq_list+0x499/0x1990
[  188.059662][T11445]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  188.062517][T11445]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  188.065216][T11445]        blk_mq_run_work_fn+0x167/0x2f0
[  188.067476][T11445]        process_scheduled_works+0xc3d/0x1630
[  188.069803][T11445]        worker_thread+0xa47/0xfb0
[  188.071783][T11445]        kthread+0x38b/0x480
[  188.073580][T11445]        ret_from_fork+0x514/0xb70
[  188.075723][T11445]        ret_from_fork_asm+0x1a/0x30
[  188.077949][T11445] 
[  188.077949][T11445] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  188.080934][T11445]        __mutex_lock+0x197/0x15a0
[  188.083071][T11445]        nbd_queue_rq+0xc1/0xff0
[  188.085086][T11445]        blk_mq_dispatch_rq_list+0x499/0x1990
[  188.087559][T11445]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  188.090328][T11445]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  188.092957][T11445]        blk_mq_run_work_fn+0x167/0x2f0
[  188.095208][T11445]        process_scheduled_works+0xc3d/0x1630
[  188.097700][T11445]        worker_thread+0xa47/0xfb0
[  188.099748][T11445]        kthread+0x38b/0x480
[  188.101588][T11445]        ret_from_fork+0x514/0xb70
[  188.103596][T11445]        ret_from_fork_asm+0x1a/0x30
[  188.105717][T11445] 
[  188.105717][T11445] -> #4 (set->srcu){.+.+}-{0:0}:
[  188.108552][T11445]        __synchronize_srcu+0xc9/0x2e0
[  188.110874][T11445]        elevator_switch+0x1e8/0x7b0
[  188.113061][T11445]        elevator_change+0x2fa/0x480
[  188.115275][T11445]        elevator_set_default+0x375/0x440
[  188.117679][T11445]        blk_register_queue+0x3f3/0x4e0
[  188.119884][T11445]        __add_disk+0x6b8/0xdb0
[  188.121872][T11445]        add_disk_fwnode+0x100/0x3a0
[  188.123916][T11445]        nbd_dev_add+0x733/0xb60
[  188.125883][T11445]        nbd_init+0x168/0x1f0
[  188.127759][T11445]        do_one_initcall+0x250/0x870
[  188.129892][T11445]        do_initcall_level+0x10a/0x1a0
[  188.132090][T11445]        do_initcalls+0x59/0xa0
[  188.134056][T11445]        kernel_init_freeable+0x29d/0x3e0
[  188.136333][T11445]        kernel_init+0x22/0x1d0
[  188.138246][T11445]        ret_from_fork+0x514/0xb70
[  188.140325][T11445]        ret_from_fork_asm+0x1a/0x30
[  188.142447][T11445] 
[  188.142447][T11445] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  188.145565][T11445]        __mutex_lock+0x197/0x15a0
[  188.147698][T11445]        queue_requests_store+0x45b/0x5f0
[  188.150005][T11445]        queue_attr_store+0x207/0x2b0
[  188.152233][T11445]        kernfs_fop_write_iter+0x3a4/0x540
[  188.154574][T11445]        vfs_write+0x612/0xba0
[  188.156470][T11445]        ksys_write+0x150/0x270
[  188.158402][T11445]        do_syscall_64+0x166/0x520
[  188.160423][T11445]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.162988][T11445] 
[  188.162988][T11445] -> #2 (&q->q_usage_counter(io)#66){++++}-{0:0}:
[  188.166484][T11445]        blk_alloc_queue+0x544/0x690
[  188.168506][T11445]        __blk_mq_alloc_disk+0x194/0x390
[  188.170779][T11445]        null_add_dev+0xe82/0x1d70
[  188.172836][T11445]        null_init+0x1e3/0x390
[  188.174675][T11445]        do_one_initcall+0x250/0x870
[  188.176751][T11445]        do_initcall_level+0x10a/0x1a0
[  188.178955][T11445]        do_initcalls+0x59/0xa0
[  188.181000][T11445]        kernel_init_freeable+0x29d/0x3e0
[  188.183303][T11445]        kernel_init+0x22/0x1d0
[  188.185312][T11445]        ret_from_fork+0x514/0xb70
[  188.187394][T11445]        ret_from_fork_asm+0x1a/0x30
[  188.189516][T11445] 
[  188.189516][T11445] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  188.192207][T11445]        fs_reclaim_acquire+0x71/0x100
[  188.194272][T11445]        kmem_cache_alloc_noprof+0x5f/0x600
[  188.196744][T11445]        __kernfs_iattrs+0xdd/0x380
[  188.198848][T11445]        kernfs_iop_setattr+0xe6/0x3f0
[  188.201094][T11445]        notify_change+0xbba/0xea0
[  188.203107][T11445]        do_truncate+0x1c2/0x250
[  188.205110][T11445]        path_openat+0x18a6/0x20f0
[  188.207182][T11445]        do_file_open+0x23e/0x4a0
[  188.209203][T11445]        do_sys_openat2+0x115/0x200
[  188.211333][T11445]        __x64_sys_openat+0x138/0x170
[  188.213559][T11445]        do_syscall_64+0x166/0x520
[  188.215672][T11445]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.218209][T11445] 
[  188.218209][T11445] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[  188.221669][T11445]        __lock_acquire+0x164c/0x2de0
[  188.223887][T11445]        lock_acquire+0x115/0x350
[  188.226002][T11445]        down_write+0x91/0x200
[  188.228027][T11445]        kernfs_link_sibling+0x539/0x6b0
[  188.230339][T11445]        kernfs_add_one+0x30a/0x510
[  188.232475][T11445]        kernfs_create_dir_ns+0x18c/0x220
[  188.234825][T11445]        sysfs_create_dir_ns+0x12f/0x2a0
[  188.237114][T11445]        kobject_add_internal+0x622/0xcd0
[  188.239377][T11445]        kobject_add+0x163/0x240
[  188.241406][T11445]        device_add+0x3fa/0xb80
[  188.243406][T11445]        input_register_device+0x9d7/0x1150
[  188.245842][T11445]        hidp_session_probe+0x1a5/0x890
[  188.248142][T11445]        l2cap_register_user+0xbd/0x1d0
[  188.250384][T11445]        hidp_connection_add+0x1570/0x1a00
[  188.252697][T11445]        hidp_sock_ioctl+0x403/0x650
[  188.254812][T11445]        sock_do_ioctl+0x101/0x320
[  188.256817][T11445]        sock_ioctl+0x57a/0x7e0
[  188.258812][T11445]        __se_sys_ioctl+0xfc/0x170
[  188.260941][T11445]        do_syscall_64+0x166/0x520
[  188.263060][T11445]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.265676][T11445] 
[  188.265676][T11445] other info that might help us debug this:
[  188.265676][T11445] 
[  188.269668][T11445] Chain exists of:
[  188.269668][T11445]   &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem
[  188.269668][T11445] 
[  188.275287][T11445]  Possible unsafe locking scenario:
[  188.275287][T11445] 
[  188.278306][T11445]        CPU0                    CPU1
[  188.280482][T11445]        ----                    ----
[  188.282707][T11445]   lock(&root->kernfs_rwsem);
[  188.284725][T11445]                                lock(cpuhp_state_mutex);
[  188.287660][T11445]                                lock(&root->kernfs_rwsem);
[  188.290456][T11445]   lock(&root->kernfs_iattr_rwsem);
[  188.292586][T11445] 
[  188.292586][T11445]  *** DEADLOCK ***
[  188.292586][T11445] 
[  188.295878][T11445] locks held by syz.5.2167/11445: 3, last CPU#1:
[  188.298507][T11445]  #0: ffff8881bd40faf8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_register_user+0x34/0x1d0
[  188.302428][T11445]  #1: ffffffff91408428 (hidp_session_sem){++++}-{4:4}, at: hidp_session_probe+0x98/0x890
[  188.306383][T11445]  #2: ffff8881012d4180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x510
[  188.310241][T11445] 
[  188.310241][T11445] stack backtrace:
[  188.312627][T11445] CPU: 1 UID: 0 PID: 11445 Comm: syz.5.2167 Not tainted syzkaller #0 PREEMPT(full) 
[  188.316438][T11445] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  188.320321][T11445] Call Trace:
[  188.321664][T11445]  <TASK>
[  188.322845][T11445]  dump_stack_lvl+0xe8/0x150
[  188.324673][T11445]  print_circular_bug+0x2e2/0x300
[  188.326674][T11445]  check_noncircular+0x12f/0x150
[  188.328754][T11445]  __lock_acquire+0x164c/0x2de0
[  188.330732][T11445]  ? __lock_acquire+0x747/0x2de0
[  188.332780][T11445]  lock_acquire+0x115/0x350
[  188.334541][T11445]  ? kernfs_link_sibling+0x539/0x6b0
[  188.336544][T11445]  down_write+0x91/0x200
[  188.338246][T11445]  ? kernfs_link_sibling+0x539/0x6b0
[  188.340344][T11445]  ? __pfx_down_write+0x10/0x10
[  188.342212][T11445]  ? kernfs_root+0x1c/0x230
[  188.343961][T11445]  ? kernfs_root+0x1c/0x230
[  188.345774][T11445]  ? kernfs_root+0x1c/0x230
[  188.347532][T11445]  ? kernfs_root+0x1ea/0x230
[  188.349316][T11445]  kernfs_link_sibling+0x539/0x6b0
[  188.351379][T11445]  kernfs_add_one+0x30a/0x510
[  188.353201][T11445]  kernfs_create_dir_ns+0x18c/0x220
[  188.355306][T11445]  sysfs_create_dir_ns+0x12f/0x2a0
[  188.357249][T11445]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  188.359311][T11445]  ? do_raw_spin_unlock+0x4d/0x200
[  188.361230][T11445]  kobject_add_internal+0x622/0xcd0
[  188.363168][T11445]  kobject_add+0x163/0x240
[  188.364935][T11445]  ? __pfx_kobject_add+0x10/0x10
[  188.366947][T11445]  ? _raw_spin_unlock+0x28/0x50
[  188.368865][T11445]  ? get_device_parent+0x366/0x3a0
[  188.370844][T11445]  device_add+0x3fa/0xb80
[  188.372381][T11445]  input_register_device+0x9d7/0x1150
[  188.374356][T11445]  hidp_session_probe+0x1a5/0x890
[  188.376216][T11445]  ? l2cap_register_user+0x34/0x1d0
[  188.377985][T11445]  ? __pfx_hidp_session_probe+0x10/0x10
[  188.379971][T11445]  ? __init_waitqueue_head+0xa8/0x150
[  188.381684][T11445]  l2cap_register_user+0xbd/0x1d0
[  188.383243][T11445]  hidp_connection_add+0x1570/0x1a00
[  188.385110][T11445]  hidp_sock_ioctl+0x403/0x650
[  188.386939][T11445]  ? __pfx_hidp_sock_ioctl+0x10/0x10
[  188.389005][T11445]  ? do_vfs_ioctl+0x116f/0x1530
[  188.390698][T11445]  sock_do_ioctl+0x101/0x320
[  188.392185][T11445]  ? __pfx_sock_do_ioctl+0x10/0x10
[  188.393817][T11445]  ? do_futex+0x458/0x4e0
[  188.395213][T11445]  sock_ioctl+0x57a/0x7e0
[  188.396592][T11445]  ? __fget_files+0x2a/0x420
[  188.398115][T11445]  ? __pfx_sock_ioctl+0x10/0x10
[  188.399598][T11445]  ? __fget_files+0x2a/0x420
[  188.401211][T11445]  ? __fget_files+0x2a/0x420
[  188.402942][T11445]  ? bpf_lsm_file_ioctl+0x9/0x20
[  188.404599][T11445]  ? __pfx_sock_ioctl+0x10/0x10
[  188.406188][T11445]  __se_sys_ioctl+0xfc/0x170
[  188.407682][T11445]  do_syscall_64+0x166/0x520
[  188.409160][T11445]  ? trace_irq_disable+0x3b/0x140
[  188.410766][T11445]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.412705][T11445]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.414689][T11445] RIP: 0033:0x7f40d8b9f559
[  188.416434][T11445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  188.423553][T11445] RSP: 002b:00007f40d99b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  188.426212][T11445] RAX: ffffffffffffffda RBX: 00007f40d8e25fa0 RCX: 00007f40d8b9f559
[  188.428702][T11445] RDX: 0000200000000200 RSI: 00000000400448c8 RDI: 0000000000000009
[  188.431185][T11445] RBP: 00007f40d8c36b20 R08: 0000000000000000 R09: 0000000000000000
[  188.433681][T11445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  188.436071][T11445] R13: 00007f40d8e26038 R14: 00007f40d8e25fa0 R15: 00007ffe9e0795f8
[  188.438531][T11445]  </TASK>
[  188.442811][T11445] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5
[  188.443509][T11449] loop1: detected capacity change from 0 to 32768
[  188.445804][T11449] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2168 (11449)
[  188.457824][T11449] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  188.457852][T11449] BTRFS info (device loop1): using sha256 checksum algorithm
[  188.520771][T11449] BTRFS info (device loop1): enabling ssd optimizations
[  188.520789][T11449] BTRFS info (device loop1): turning on async discard
[  188.520796][T11449] BTRFS info (device loop1): enabling free space tree
[  188.531463][T11449] BTRFS info (device loop1): setting incompat feature flag for SIMPLE_QUOTA (0x10000)
[  188.565690][ T5658] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  192.008159][  T218] block nbd1: Connection timed out, retrying (0/1 alive)
[  192.008198][  T218] block nbd1: Connection timed out, retrying (0/1 alive)
[  192.008219][  T218] block nbd1: Connection timed out, retrying (0/1 alive)
[  192.008254][  T218] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  192.008275][  T218] Buffer I/O error on dev nbd1, logical block 2, async page read
[  192.008291][  T218] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  192.008305][  T218] Buffer I/O error on dev nbd1, logical block 1, async page read
[  192.008316][  T218] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  192.008330][  T218] Buffer I/O error on dev nbd1, logical block 0, async page read
[  192.008424][  T218] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  192.008439][  T218] Buffer I/O error on dev nbd1, logical block 0, async page read
[  192.008484][  T218] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  192.008500][  T218] Buffer I/O error on dev nbd1, logical block 1, async page read
[  192.008542][  T218] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  192.008555][  T218] Buffer I/O error on dev nbd1, logical block 2, async page read
[  192.008598][  T218] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  192.008647][  T218] Buffer I/O error on dev nbd1, logical block 3, async page read
[  192.008704][  T218] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  192.008717][  T218] Buffer I/O error on dev nbd1, logical block 0, async page read
[  192.008757][  T218] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  192.008771][  T218] Buffer I/O error on dev nbd1, logical block 1, async page read
[  192.008812][  T218] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  192.008825][  T218] Buffer I/O error on dev nbd1, logical block 2, async page read
[  192.010099][T10996] ldm_validate_partition_table(): Disk read failed.
[  192.010721][T10996] Dev nbd1: unable to read RDB block 0
[  192.011440][T10996]  nbd1: unable to read partition table
[  192.014981][T10996] ldm_validate_partition_table(): Disk read failed.
[  192.015572][T10996] Dev nbd1: unable to read RDB block 0
[  192.016237][T10996]  nbd1: unable to read partition table
[  194.568968][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  194.568993][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
