last executing test programs:

33.965801205s ago: executing program 2 (id=1057):
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x101)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, 0x0, 0x0)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001180)=ANY=[], 0x124}}, 0x0)
recvfrom(r1, 0x0, 0x0, 0x40000103, 0x0, 0x0)

32.411633842s ago: executing program 2 (id=1060):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}}, 0x0)

31.286756747s ago: executing program 2 (id=1063):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
mount$bind(0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setscheduler(0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x50, 0xffffffffffffffff, 0x5738d000)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0)
write$tcp_mem(r3, &(0x7f0000000240)={0x2, 0x2c, 0x0, 0x2c, 0x7, 0x2c}, 0x48)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000002780)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x6131, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
openat2(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = syz_clone(0x40100000, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000580), &(0x7f00000005c0)="2ee02c9810861e16bdad9dbeab19ce1d069a29fe9318db42c71662df058d98b8c07b5c4ef4031b1e7948d3b6a8fc3a7f7ed91fc00b486c797a6055ea127b96d699244ff56812bc209325c1c6a3be91d223d2a7a41fb4169b7084383f84e9e268f24d7d25f25e8ea6522855da7de7ebccf32e166aae3b27e2d1faeac2854d8493346683e67408dc453ece6b781f37ef4e")
sched_getscheduler(r6)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x400003, &(0x7f0000000200)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@usrquota}, {@resgid}, {@nogrpid}, {@errors_remount}, {@noinit_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@resuid, 0x32}]}, 0x1b, 0x4f0, &(0x7f0000000a40)="$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")
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000300)={[{@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@quota}, {@noinit_itable}, {@barrier_val={'barrier', 0x3d, 0x7ff}}, {@errors_continue}, {@errors_remount}, {@delalloc}, {@auto_da_alloc}, {@resgid}, {@errors_continue}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0xee, 0x442, &(0x7f0000000d00)="$eJzs281vG0UbAPBn10n6vv1KKKW0oYVAQUR8JE1aoAcuIJA4gIQEh3IMSVqFug1qgkSrCAJC5YgqcUcckfgLOMEFASckrnBHlSqIkFo4Ba29m9punObDrkP9+0nbznjHnnk8O97xTBxA1xrK/kkidkfErxHRX83WFxiq/ndjaWHy76WFySSWl9/4I6mUu760MFkULZ63K88MpxHpJ0leSb25i5fOTpTL0xfy/Oj8uXdH5y5eenrm3MSZ6TPT58dPnjxxfOy5Z8efaUmcWVzXBz+YPXzolbeuvDZ56srbP36dtffAker52jhaZSgL/M/lisZzj7W6sg7bU5NOejrYEDakFBFZd/VWxn9/lOJm5/XHyx93tHFAW2X3ph3NTy8uA3exJDrdAqAziht99v23OO7Q1GNbuPZC9QtQFveN/Kie6Yk0L9PbxvqHIuLU4j9fZEe0aR0CAKDWt9n856nV5n9pHKgptzffQxmIiHsiYl9E3BsR+yPivohK2fsj4uAG62/cGrp1/pNe3VRg65TN/57P97bq53/F7C8GSnluTyX+3uT0THn6WP6eDEfvjiw/tkYd3730y2fNztXO/7Ijq7+YC+btuNrTsEA3NTE/0apJ6bWPIgZ7Vos/WdkJSCLiUEQMbuyl9xaJmSe+Otys0O3jX0ML9pmWv4x4vNr/i9EQfyFZe39y9H9Rnj42WlwVt/rp58uvN6t/S/G3QNb/O+uv/4YS/X8ltfu1cxuv4/Jvnzb9TrPZ678vebOyZ92XP/b+xPz8hbGIvuTVSr7u8fGbzy3yRfks/uGjq4//fflzsvgfiIjsIj4SEQ9GxEN52x+OiEci4uga8f/w4qPvbD7+9srin1r182/l+h+o7/+NJ0pnv/+mWf3r6/8TldRw/kjl8+821tvArbx3AAAA8F+RRsTuSNKRlXSajoxU/4Z/f+xMy7Nz80+enn3v/FT1NwID0ZsWK139NeuhY8li/orV/Hi+VlycP56vG39e+n8lPzI5W57qcOzQ7XY1Gf+Z30udbh3Qdn6vBd2rcfynHWoHcOe5/0P3Mv6hexn/0L1WG/8fNuTtBcDdyf0fupfxD93L+IfuZfxDV9rK7/olujkR6bZoRrsScXBbNKNziU5/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALTGvwEAAP//KivtwQ==")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)

28.449823415s ago: executing program 2 (id=1068):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}}, 0x0)

27.334420743s ago: executing program 2 (id=1071):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00')

25.499883222s ago: executing program 2 (id=1077):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
mount$bind(0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setscheduler(0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x50, 0xffffffffffffffff, 0x5738d000)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0)
write$tcp_mem(r3, &(0x7f0000000240)={0x2, 0x2c, 0x0, 0x2c, 0x7, 0x2c}, 0x48)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000002780)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x6131, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[], 0x14}}, 0x0)
openat2(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = syz_clone(0x40100000, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000580), &(0x7f00000005c0)="2ee02c9810861e16bdad9dbeab19ce1d069a29fe9318db42c71662df058d98b8c07b5c4ef4031b1e7948d3b6a8fc3a7f7ed91fc00b486c797a6055ea127b96d699244ff56812bc209325c1c6a3be91d223d2a7a41fb4169b7084383f84e9e268f24d7d25f25e8ea6522855da7de7ebccf32e166aae3b27e2d1faeac2854d8493346683e67408dc453ece6b781f37ef4e")
sched_getscheduler(r6)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x400003, &(0x7f0000000200)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@usrquota}, {@resgid}, {@nogrpid}, {@errors_remount}, {@noinit_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@resuid, 0x32}]}, 0x1b, 0x4f0, &(0x7f0000000a40)="$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")
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000300)={[{@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@quota}, {@noinit_itable}, {@barrier_val={'barrier', 0x3d, 0x7ff}}, {@errors_continue}, {@errors_remount}, {@delalloc}, {@auto_da_alloc}, {@resgid}, {@errors_continue}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0xee, 0x442, &(0x7f0000000d00)="$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")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)

10.417245657s ago: executing program 0 (id=1121):
open(0x0, 0x400141042, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x6, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "5161dc20", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]})
r1 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x801)
ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000d40)={0x0, 0x0, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"})
r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000340)={"6d71f879", 0x0, 0x0, 0x0, 0x0, 0x0, "244a18d1c4e6469a005caf0c0ff58a", "ce4250d8", "bf513d1d", "136712b9", ["27e203a56a36ac4f0b8b8c4f", "5e10229555954b0f02cd1469", "cb0e83d3a15978145c38df4d", "79f56ca74227234da829edb7"]})

8.976144859s ago: executing program 0 (id=1124):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)={0x34, r0, 0x801, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_SEQ={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x50000}, 0x0)

8.431649574s ago: executing program 0 (id=1126):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x54}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}}, 0x0)

7.264603561s ago: executing program 4 (id=1131):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000c00)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xa}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x842}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0)

7.225987856s ago: executing program 0 (id=1132):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x3210052, &(0x7f0000000840)={[{}, {@nodiscard}, {@norecovery}, {@order_strict}, {@nobarrier}, {@order_strict}, {@nodiscard}, {@order_relaxed}], [], 0x2c}, 0x3, 0xebd, &(0x7f0000004540)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0x118)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0186e86, &(0x7f0000000080)={@id={0x20000000, 0x2, @auto="660300002800a73e99ffffffffffffff"}})

7.156909664s ago: executing program 3 (id=1133):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000140)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
listen(r1, 0x1ad72f7)
connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
syz_mount_image$bcachefs(&(0x7f0000005d80), &(0x7f0000005dc0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@move_bytes_in_flight={'move_bytes_in_flight', 0x3d, 0x2}}]}, 0x1, 0x5da2, &(0x7f000000bb80)="$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")
connect$netrom(r0, 0x0, 0x0)

6.770054692s ago: executing program 4 (id=1134):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_STATFS(r2, &(0x7f0000000400)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x4, 0x1c, 0x4, 0x4, 0x1}}}, 0x60)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101141, 0x0)
pwritev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="eb", 0x1}], 0x1, 0x9, 0x0)

5.95217832s ago: executing program 4 (id=1136):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0xfd, 0x5}]})
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x2004c8, 0x0, 0x0, 0x0, 0x3], 0x0, 0x40})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.503989051s ago: executing program 1 (id=1138):
r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r1, 0x2000009)
sendfile(r0, r1, 0x0, 0x7ffff000)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

4.163853737s ago: executing program 1 (id=1139):
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000300)={0x0, 0x0, 0x10100}, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='/'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

3.532130396s ago: executing program 4 (id=1140):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
socket$nl_route(0x10, 0x3, 0x0)
dup(r0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)=0x400b1)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000200))
pselect6(0x40, &(0x7f0000004580), &(0x7f0000004e00)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x0)

3.262639916s ago: executing program 0 (id=1141):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x54}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}}, 0x0)

3.179079556s ago: executing program 1 (id=1142):
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000000300000000000004"], 0x70}}, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/203, 0x6}], 0x300)
sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000500)}}], 0x1, 0x0)

3.013784333s ago: executing program 3 (id=1143):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009050000000000000000021f0000", @ANYRES32=r2, @ANYBLOB="08000100e000000208000200e0"], 0x48}, 0x1, 0x0, 0x0, 0x804}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)

2.263390622s ago: executing program 4 (id=1144):
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x101)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x3a)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0)
recvfrom(r1, 0x0, 0x0, 0x40000103, 0x0, 0x0)

1.811528422s ago: executing program 3 (id=1145):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f00"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_STATFS(r2, &(0x7f0000000400)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x4, 0x1c, 0x4, 0x4, 0x1}}}, 0x60)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101141, 0x0)
pwritev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="eb", 0x1}], 0x1, 0x9, 0x0)

1.770117811s ago: executing program 0 (id=1146):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a})
r1 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\xdf]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x0f\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002})
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r1, 0x0)
mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x1, 0x3)
r2 = socket$inet(0x2, 0x1, 0x0)
listen(r2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x66)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}}, 0x4040004)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000))

1.619940874s ago: executing program 1 (id=1147):
r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x9c)
write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB=' '], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0)
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

1.413303566s ago: executing program 3 (id=1148):
r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r1, 0x2000009)
sendfile(r0, r1, 0x0, 0x7ffff000)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

705.53731ms ago: executing program 1 (id=1149):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x9}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x8}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4000000)
syz_emit_ethernet(0x3e, &(0x7f0000000500)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x8, 0x3a, 0x0, @private1, @local, {[], @echo_reply}}}}}, 0x0)

666.207903ms ago: executing program 4 (id=1150):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x3210052, &(0x7f0000000840)={[{}, {@nodiscard}, {@norecovery}, {@order_strict}, {@nobarrier}, {@order_strict}, {@nodiscard}, {@order_relaxed}], [], 0x2c}, 0x3, 0xebd, &(0x7f0000004540)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0x118)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0186e86, &(0x7f0000000080)={@id={0x20000000, 0x2, @auto="660300002800a73e99ffffffffffffff"}})

616.212536ms ago: executing program 3 (id=1151):
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000300)={0x0, 0x0, 0x10100}, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='/'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

38.526924ms ago: executing program 3 (id=1152):
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0)
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4010, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}})
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
write$binfmt_misc(r3, &(0x7f0000000300), 0x4)

0s ago: executing program 1 (id=1153):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
socket$nl_route(0x10, 0x3, 0x0)
dup(r0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00')
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000200))
pselect6(0x40, &(0x7f0000004580), &(0x7f0000004e00)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  506.176565][ T7549] EXT4-fs warning: 57 callbacks suppressed
[  506.176642][ T7549] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  506.196315][ T7549] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /20/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  506.249291][ T7549] EXT4-fs error (device loop3): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  506.430233][ T3010] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.567754][ T7549] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  506.648275][ T7549] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /20/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  506.718332][ T3010] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.965386][ T8145] bridge0: port 1(bridge_slave_0) entered blocking state
[  506.973356][ T8145] bridge0: port 1(bridge_slave_0) entered disabled state
[  506.981116][ T8145] bridge_slave_0: entered allmulticast mode
[  506.990472][ T8145] bridge_slave_0: entered promiscuous mode
[  507.023498][ T5200] Bluetooth: hci2: command tx timeout
[  507.182453][ T8145] bridge0: port 2(bridge_slave_1) entered blocking state
[  507.190303][ T8145] bridge0: port 2(bridge_slave_1) entered disabled state
[  507.198392][ T8145] bridge_slave_1: entered allmulticast mode
[  507.207711][ T8145] bridge_slave_1: entered promiscuous mode
[  507.280027][ T7549] EXT4-fs error (device loop3): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  507.420448][ T7549] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  507.437355][ T7549] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /20/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  507.543394][ T7549] EXT4-fs error (device loop3): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  507.571061][ T5200] Bluetooth: hci0: command tx timeout
[  507.583797][ T7549] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  507.621595][ T7549] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /20/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  507.655658][ T7549] EXT4-fs error (device loop3): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  507.685366][ T7549] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  507.900812][ T7549] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  507.977931][ T8145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  508.033216][ T3010] bridge_slave_1: left allmulticast mode
[  508.039143][ T3010] bridge_slave_1: left promiscuous mode
[  508.049324][ T3010] bridge0: port 2(bridge_slave_1) entered disabled state
[  508.076082][ T7549] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  508.112576][ T7549] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  508.167656][ T7549] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  508.289843][ T8211] loop4: detected capacity change from 0 to 1024
[  508.313927][ T3010] bridge_slave_0: left allmulticast mode
[  508.319828][ T3010] bridge_slave_0: left promiscuous mode
[  508.329273][ T3010] bridge0: port 1(bridge_slave_0) entered disabled state
[  508.405206][ T7549] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  508.434672][ T8211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  508.813700][ T7489] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /24/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  508.975334][ T7489] EXT4-fs error (device loop4): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  509.000251][ T8219] loop1: detected capacity change from 0 to 1024
[  509.053193][ T7489] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  509.081705][ T5200] Bluetooth: hci2: command tx timeout
[  509.096921][ T7489] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /24/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  509.148874][ T7489] EXT4-fs error (device loop4): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  509.191353][ T8111] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  509.205981][ T7489] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  509.230965][ T7489] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /24/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  509.251260][ T8219] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  509.291975][ T3010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  509.311434][ T7489] EXT4-fs error (device loop4): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  509.347932][ T3010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  509.353265][ T7489] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  509.370749][ T7489] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /24/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  509.418429][ T7489] EXT4-fs error (device loop4): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  509.444447][ T3010] bond0 (unregistering): Released all slaves
[  509.494160][ T7489] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  509.560495][ T8145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  509.563012][ T7489] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /24/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  509.638733][ T8171] bridge0: port 1(bridge_slave_0) entered blocking state
[  509.646583][ T8171] bridge0: port 1(bridge_slave_0) entered disabled state
[  509.654562][ T8171] bridge_slave_0: entered allmulticast mode
[  509.664084][ T8171] bridge_slave_0: entered promiscuous mode
[  509.712184][ T7489] EXT4-fs error (device loop4): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  509.736653][ T7489] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  509.776426][ T7489] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  509.802374][ T7891] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  509.830897][ T7489] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  510.035346][ T7489] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  510.110256][ T8171] bridge0: port 2(bridge_slave_1) entered blocking state
[  510.118275][ T8171] bridge0: port 2(bridge_slave_1) entered disabled state
[  510.126328][ T8171] bridge_slave_1: entered allmulticast mode
[  510.135494][ T8171] bridge_slave_1: entered promiscuous mode
[  510.242966][ T8145] team0: Port device team_slave_0 added
[  510.281512][ T7489] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  510.341692][ T7489] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  510.803263][ T8145] team0: Port device team_slave_1 added
[  511.007840][ T8171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  511.169717][ T5200] Bluetooth: hci2: command tx timeout
[  511.303036][ T8171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  511.315090][ T8145] batman_adv: batadv0: Adding interface: batadv_slave_0
[  511.325070][ T8145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  511.352651][ T8145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  511.487469][ T3010] hsr_slave_0: left promiscuous mode
[  511.504501][ T3010] hsr_slave_1: left promiscuous mode
[  511.526304][ T3010] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  511.534223][ T3010] batman_adv: batadv0: Removing interface: batadv_slave_0
[  511.555836][ T3010] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  511.563772][ T3010] batman_adv: batadv0: Removing interface: batadv_slave_1
[  511.630436][ T3010] veth1_macvtap: left promiscuous mode
[  511.636475][ T3010] veth0_macvtap: left promiscuous mode
[  511.642480][ T3010] veth1_vlan: left promiscuous mode
[  511.648387][ T3010] veth0_vlan: left promiscuous mode
[  511.823203][ T5194] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  511.925181][ T5194] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  511.938635][ T5194] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  511.961219][ T5194] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  511.972423][ T5194] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  511.981808][ T5194] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  512.508783][ T3010] team0 (unregistering): Port device team_slave_1 removed
[  512.562233][ T3010] team0 (unregistering): Port device team_slave_0 removed
[  512.610843][ T8251] loop1: detected capacity change from 0 to 1024
[  512.801900][ T8251] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  512.882544][ T8145] batman_adv: batadv0: Adding interface: batadv_slave_1
[  512.891025][ T8145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  512.918731][ T8145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  513.141718][ T8171] team0: Port device team_slave_0 added
[  513.189902][ T7891] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /10/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  513.271229][ T7891] EXT4-fs error (device loop1): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  513.302465][ T7891] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  513.316080][ T7891] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /10/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  513.326664][ T8171] team0: Port device team_slave_1 added
[  513.380081][ T7891] EXT4-fs error (device loop1): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  513.435559][ T7891] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  513.448904][ T7891] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /10/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  513.485286][ T7891] EXT4-fs error (device loop1): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  513.506332][ T7891] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  513.521147][ T7891] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /10/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  513.535412][ T8145] hsr_slave_0: entered promiscuous mode
[  513.553407][ T7891] EXT4-fs error (device loop1): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  513.578531][ T8145] hsr_slave_1: entered promiscuous mode
[  513.578569][ T7891] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  513.604116][ T7891] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /10/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  513.630774][ T7891] EXT4-fs error (device loop1): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  513.651484][ T7891] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  513.668482][ T7891] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  513.764353][ T7891] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  513.769778][ T7489] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  513.792106][ T7891] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  513.798517][ T8171] batman_adv: batadv0: Adding interface: batadv_slave_0
[  513.811067][ T8171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  513.838157][ T8171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  513.870567][ T7891] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  513.911941][ T7891] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  514.122609][ T8171] batman_adv: batadv0: Adding interface: batadv_slave_1
[  514.130146][ T8171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  514.156874][ T8171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  514.217817][ T5194] Bluetooth: hci3: command tx timeout
[  514.281497][ T3678] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  514.580379][ T3678] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  514.767081][ T5194] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  514.801751][ T5194] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  514.815993][ T5194] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  514.857590][ T5194] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  514.940313][ T5194] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  514.954673][ T5194] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  515.056737][ T3678] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.093327][ T8171] hsr_slave_0: entered promiscuous mode
[  515.143840][ T8171] hsr_slave_1: entered promiscuous mode
[  515.159764][ T8171] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  515.169064][ T8171] Cannot create hsr debugfs directory
[  515.272311][ T3678] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.919295][ T3678] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.238779][ T3678] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.263784][ T5194] Bluetooth: hci3: command tx timeout
[  516.615428][ T3678] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.808090][ T3678] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.860724][ T7891] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  516.929944][ T8246] chnl_net:caif_netlink_parms(): no params data found
[  517.063699][ T5194] Bluetooth: hci1: command tx timeout
[  517.147691][ T8257] chnl_net:caif_netlink_parms(): no params data found
[  517.746244][ T3678] bridge_slave_1: left allmulticast mode
[  517.752166][ T3678] bridge_slave_1: left promiscuous mode
[  517.761249][ T3678] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.782595][ T3678] bridge_slave_0: left allmulticast mode
[  517.789543][ T3678] bridge_slave_0: left promiscuous mode
[  517.797121][ T3678] bridge0: port 1(bridge_slave_0) entered disabled state
[  517.844706][ T3678] bridge_slave_1: left allmulticast mode
[  517.850622][ T3678] bridge_slave_1: left promiscuous mode
[  517.857342][ T3678] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.909268][ T3678] bridge_slave_0: left allmulticast mode
[  517.915505][ T3678] bridge_slave_0: left promiscuous mode
[  517.922062][ T3678] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.369743][ T5194] Bluetooth: hci3: command tx timeout
[  518.884797][ T3678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  518.934678][ T3678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  518.976517][ T3678] bond0 (unregistering): Released all slaves
[  519.015400][ T5200] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  519.031579][ T5200] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  519.034564][ T3678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  519.049959][ T5200] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  519.080161][ T3678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  519.092202][ T5200] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  519.110505][ T5200] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  519.118536][ T3678] bond0 (unregistering): Released all slaves
[  519.137035][ T5200] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  519.144972][ T5191] Bluetooth: hci1: command tx timeout
[  520.061210][ T8246] bridge0: port 1(bridge_slave_0) entered blocking state
[  520.071100][ T8246] bridge0: port 1(bridge_slave_0) entered disabled state
[  520.079050][ T8246] bridge_slave_0: entered allmulticast mode
[  520.088156][ T8246] bridge_slave_0: entered promiscuous mode
[  520.240618][ T8257] bridge0: port 1(bridge_slave_0) entered blocking state
[  520.250962][ T8257] bridge0: port 1(bridge_slave_0) entered disabled state
[  520.259813][ T8257] bridge_slave_0: entered allmulticast mode
[  520.268911][ T8257] bridge_slave_0: entered promiscuous mode
[  520.281350][ T8246] bridge0: port 2(bridge_slave_1) entered blocking state
[  520.290357][ T8246] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.298564][ T8246] bridge_slave_1: entered allmulticast mode
[  520.307791][ T8246] bridge_slave_1: entered promiscuous mode
[  520.319743][ T8257] bridge0: port 2(bridge_slave_1) entered blocking state
[  520.327647][ T8257] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.338006][ T8257] bridge_slave_1: entered allmulticast mode
[  520.347615][ T8257] bridge_slave_1: entered promiscuous mode
[  520.440244][ T5200] Bluetooth: hci3: command tx timeout
[  520.697452][ T8257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  520.727515][ T8246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  520.852442][ T8257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  520.881405][ T8246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  520.891713][ T8171] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  520.935650][ T8171] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  521.139351][ T8171] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  521.177626][ T3678] hsr_slave_0: left promiscuous mode
[  521.186414][ T3678] hsr_slave_1: left promiscuous mode
[  521.196195][ T3678] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  521.204258][ T3678] batman_adv: batadv0: Removing interface: batadv_slave_0
[  521.215371][ T3678] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  521.224519][ T3678] batman_adv: batadv0: Removing interface: batadv_slave_1
[  521.240779][ T5200] Bluetooth: hci1: command tx timeout
[  521.255711][ T3678] hsr_slave_0: left promiscuous mode
[  521.264715][ T3678] hsr_slave_1: left promiscuous mode
[  521.272373][ T3678] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  521.280416][ T3678] batman_adv: batadv0: Removing interface: batadv_slave_0
[  521.290078][ T3678] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  521.297998][ T3678] batman_adv: batadv0: Removing interface: batadv_slave_1
[  521.305426][ T5200] Bluetooth: hci4: command tx timeout
[  521.325072][ T3678] veth1_macvtap: left promiscuous mode
[  521.330735][ T3678] veth0_macvtap: left promiscuous mode
[  521.336859][ T3678] veth1_vlan: left promiscuous mode
[  521.342359][ T3678] veth0_vlan: left promiscuous mode
[  521.350106][ T3678] veth1_macvtap: left promiscuous mode
[  521.356014][ T3678] veth0_macvtap: left promiscuous mode
[  521.361931][ T3678] veth1_vlan: left promiscuous mode
[  521.367614][ T3678] veth0_vlan: left promiscuous mode
[  522.122295][ T3678] team0 (unregistering): Port device team_slave_1 removed
[  522.154721][ T3678] team0 (unregistering): Port device team_slave_0 removed
[  522.614188][ T3678] team0 (unregistering): Port device team_slave_1 removed
[  522.642722][ T3678] team0 (unregistering): Port device team_slave_0 removed
[  522.870739][ T8257] team0: Port device team_slave_0 added
[  522.918178][ T8257] team0: Port device team_slave_1 added
[  522.950238][ T8246] team0: Port device team_slave_0 added
[  523.076630][ T8171] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  523.242179][ T8246] team0: Port device team_slave_1 added
[  523.257880][ T8145] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  523.320983][ T5200] Bluetooth: hci1: command tx timeout
[  523.383143][ T5200] Bluetooth: hci4: command tx timeout
[  523.400428][ T8145] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  523.436268][ T8257] batman_adv: batadv0: Adding interface: batadv_slave_0
[  523.443790][ T8257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  523.471209][ T8257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  523.493956][ T8257] batman_adv: batadv0: Adding interface: batadv_slave_1
[  523.501117][ T8257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  523.527591][ T8257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  523.568246][ T8145] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  523.637300][ T8286] chnl_net:caif_netlink_parms(): no params data found
[  523.675934][ T8246] batman_adv: batadv0: Adding interface: batadv_slave_0
[  523.683230][ T8246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  523.709849][ T8246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  523.721933][ T8145] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  523.844880][ T8246] batman_adv: batadv0: Adding interface: batadv_slave_1
[  523.852075][ T8246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  523.878865][ T8246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  524.075576][ T8257] hsr_slave_0: entered promiscuous mode
[  524.112051][ T8257] hsr_slave_1: entered promiscuous mode
[  524.121730][ T8257] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  524.129765][ T8257] Cannot create hsr debugfs directory
[  524.432464][ T3678] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.547089][ T8246] hsr_slave_0: entered promiscuous mode
[  524.595196][ T8246] hsr_slave_1: entered promiscuous mode
[  524.616883][ T8246] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  524.625160][ T8246] Cannot create hsr debugfs directory
[  524.658957][ T3678] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.832409][ T3678] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.927779][ T3678] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.374070][ T8286] bridge0: port 1(bridge_slave_0) entered blocking state
[  525.381799][ T8286] bridge0: port 1(bridge_slave_0) entered disabled state
[  525.391364][ T8286] bridge_slave_0: entered allmulticast mode
[  525.400451][ T8286] bridge_slave_0: entered promiscuous mode
[  525.466024][ T5200] Bluetooth: hci4: command tx timeout
[  525.600805][ T8286] bridge0: port 2(bridge_slave_1) entered blocking state
[  525.609121][ T8286] bridge0: port 2(bridge_slave_1) entered disabled state
[  525.617133][ T8286] bridge_slave_1: entered allmulticast mode
[  525.626300][ T8286] bridge_slave_1: entered promiscuous mode
[  525.941407][ T3678] bridge_slave_1: left allmulticast mode
[  525.947559][ T3678] bridge_slave_1: left promiscuous mode
[  525.954800][ T3678] bridge0: port 2(bridge_slave_1) entered disabled state
[  525.978280][ T3678] bridge_slave_0: left allmulticast mode
[  525.984592][ T3678] bridge_slave_0: left promiscuous mode
[  525.991177][ T3678] bridge0: port 1(bridge_slave_0) entered disabled state
[  526.279801][ T1245] ieee802154 phy0 wpan0: encryption failed: -22
[  526.286659][ T1245] ieee802154 phy1 wpan1: encryption failed: -22
[  526.381888][ T3678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  526.401167][ T3678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  526.427581][ T3678] bond0 (unregistering): Released all slaves
[  526.605439][ T8286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  526.654465][ T8286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  526.694207][ T8171] 8021q: adding VLAN 0 to HW filter on device bond0
[  526.834609][ T8145] 8021q: adding VLAN 0 to HW filter on device bond0
[  526.964786][ T8286] team0: Port device team_slave_0 added
[  526.981899][ T8286] team0: Port device team_slave_1 added
[  527.160011][ T8286] batman_adv: batadv0: Adding interface: batadv_slave_0
[  527.168084][ T8286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  527.196190][ T8286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  527.247400][ T8171] 8021q: adding VLAN 0 to HW filter on device team0
[  527.296925][ T8286] batman_adv: batadv0: Adding interface: batadv_slave_1
[  527.304329][ T8286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  527.332464][ T8286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  527.460901][ T8286] hsr_slave_0: entered promiscuous mode
[  527.474278][ T8286] hsr_slave_1: entered promiscuous mode
[  527.489037][ T8286] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  527.497005][ T8286] Cannot create hsr debugfs directory
[  527.558822][ T5200] Bluetooth: hci4: command tx timeout
[  527.609710][ T3033] bridge0: port 1(bridge_slave_0) entered blocking state
[  527.617451][ T3033] bridge0: port 1(bridge_slave_0) entered forwarding state
[  527.671855][ T8145] 8021q: adding VLAN 0 to HW filter on device team0
[  527.759426][ T3033] bridge0: port 2(bridge_slave_1) entered blocking state
[  527.767218][ T3033] bridge0: port 2(bridge_slave_1) entered forwarding state
[  527.826610][ T3678] hsr_slave_0: left promiscuous mode
[  527.836794][ T3678] hsr_slave_1: left promiscuous mode
[  527.845889][ T3678] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  527.853995][ T3678] batman_adv: batadv0: Removing interface: batadv_slave_0
[  527.864634][ T3678] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  527.872405][ T3678] batman_adv: batadv0: Removing interface: batadv_slave_1
[  527.888282][ T3678] veth1_macvtap: left promiscuous mode
[  527.894694][ T3678] veth0_macvtap: left promiscuous mode
[  527.900414][ T3678] veth1_vlan: left promiscuous mode
[  527.906137][ T3678] veth0_vlan: left promiscuous mode
[  528.331257][ T3678] team0 (unregistering): Port device team_slave_1 removed
[  528.387446][ T3678] team0 (unregistering): Port device team_slave_0 removed
[  528.831087][ T3474] bridge0: port 1(bridge_slave_0) entered blocking state
[  528.838888][ T3474] bridge0: port 1(bridge_slave_0) entered forwarding state
[  528.857941][ T3474] bridge0: port 2(bridge_slave_1) entered blocking state
[  528.865638][ T3474] bridge0: port 2(bridge_slave_1) entered forwarding state
[  529.323215][ T8145] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  529.485975][ T8246] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  529.523094][ T8246] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  529.581330][ T8246] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  529.627823][ T8246] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  529.670281][ T8257] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  529.858199][ T8257] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  530.013752][ T8257] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  530.157827][ T8257] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  530.489282][ T8286] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  530.519164][ T8286] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  530.618764][ T8286] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  530.709581][ T8286] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  531.393516][ T8145] 8021q: adding VLAN 0 to HW filter on device batadv0
[  531.425672][ T8246] 8021q: adding VLAN 0 to HW filter on device bond0
[  531.513555][ T8171] 8021q: adding VLAN 0 to HW filter on device batadv0
[  531.702101][ T8246] 8021q: adding VLAN 0 to HW filter on device team0
[  531.818257][ T3033] bridge0: port 1(bridge_slave_0) entered blocking state
[  531.826022][ T3033] bridge0: port 1(bridge_slave_0) entered forwarding state
[  531.904543][ T3033] bridge0: port 2(bridge_slave_1) entered blocking state
[  531.912284][ T3033] bridge0: port 2(bridge_slave_1) entered forwarding state
[  532.006753][ T8257] 8021q: adding VLAN 0 to HW filter on device bond0
[  532.258314][ T8286] 8021q: adding VLAN 0 to HW filter on device bond0
[  532.283005][ T8145] veth0_vlan: entered promiscuous mode
[  532.373661][ T8257] 8021q: adding VLAN 0 to HW filter on device team0
[  532.433705][ T8171] veth0_vlan: entered promiscuous mode
[  532.532332][ T8171] veth1_vlan: entered promiscuous mode
[  532.564462][ T3678] bridge0: port 1(bridge_slave_0) entered blocking state
[  532.572134][ T3678] bridge0: port 1(bridge_slave_0) entered forwarding state
[  532.598314][ T8145] veth1_vlan: entered promiscuous mode
[  532.633404][ T8286] 8021q: adding VLAN 0 to HW filter on device team0
[  532.700526][ T3678] bridge0: port 2(bridge_slave_1) entered blocking state
[  532.708320][ T3678] bridge0: port 2(bridge_slave_1) entered forwarding state
[  532.827857][ T3678] bridge0: port 1(bridge_slave_0) entered blocking state
[  532.835647][ T3678] bridge0: port 1(bridge_slave_0) entered forwarding state
[  532.855860][ T3678] bridge0: port 2(bridge_slave_1) entered blocking state
[  532.863665][ T3678] bridge0: port 2(bridge_slave_1) entered forwarding state
[  533.026304][ T8171] veth0_macvtap: entered promiscuous mode
[  533.101389][ T8145] veth0_macvtap: entered promiscuous mode
[  533.214288][ T8171] veth1_macvtap: entered promiscuous mode
[  533.283155][ T8145] veth1_macvtap: entered promiscuous mode
[  533.337774][ T8257] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  533.361159][ T8286] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  533.373810][ T8286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  533.680474][ T8171] batman_adv: batadv0: Interface activated: batadv_slave_0
[  533.770310][ T8145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  533.781428][ T8145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  533.798794][ T8145] batman_adv: batadv0: Interface activated: batadv_slave_0
[  533.928009][ T8171] batman_adv: batadv0: Interface activated: batadv_slave_1
[  534.026241][ T8171] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  534.035476][ T8171] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  534.044713][ T8171] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  534.053953][ T8171] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  534.107338][ T8145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  534.118416][ T8145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  534.133425][ T8145] batman_adv: batadv0: Interface activated: batadv_slave_1
[  534.217905][ T8145] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  534.227377][ T8145] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  534.236662][ T8145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  534.245852][ T8145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  535.212196][ T8246] 8021q: adding VLAN 0 to HW filter on device batadv0
[  535.904424][ T8246] veth0_vlan: entered promiscuous mode
[  535.957703][ T8257] 8021q: adding VLAN 0 to HW filter on device batadv0
[  536.012184][ T8246] veth1_vlan: entered promiscuous mode
[  536.180445][ T8286] 8021q: adding VLAN 0 to HW filter on device batadv0
[  536.440741][ T8246] veth0_macvtap: entered promiscuous mode
[  536.552261][ T8246] veth1_macvtap: entered promiscuous mode
[  536.740735][ T8286] veth0_vlan: entered promiscuous mode
[  536.852340][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  536.863491][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  536.873667][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  536.884511][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  536.899660][ T8246] batman_adv: batadv0: Interface activated: batadv_slave_0
[  536.930953][ T8286] veth1_vlan: entered promiscuous mode
[  537.210065][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  537.220997][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  537.233178][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  537.244444][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  537.259511][ T8246] batman_adv: batadv0: Interface activated: batadv_slave_1
[  537.457890][ T8286] veth0_macvtap: entered promiscuous mode
[  537.531059][ T8286] veth1_macvtap: entered promiscuous mode
[  537.568128][ T8246] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  537.578203][ T8246] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  537.588867][ T8246] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  537.599703][ T8246] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  537.827361][ T8286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  537.838290][ T8286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  537.850945][ T8286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  537.861834][ T8286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  537.872055][ T8286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  537.883088][ T8286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  537.898022][ T8286] batman_adv: batadv0: Interface activated: batadv_slave_0
[  538.147933][ T8286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  538.158842][ T8286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.169151][ T8286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  538.179982][ T8286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.190240][ T8286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  538.201046][ T8286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.217749][ T8286] batman_adv: batadv0: Interface activated: batadv_slave_1
[  538.464249][ T8286] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  538.474469][ T8286] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  538.483735][ T8286] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  538.492752][ T8286] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  539.110845][ T8257] veth0_vlan: entered promiscuous mode
[  539.199645][ T8257] veth1_vlan: entered promiscuous mode
[  539.535491][ T8257] veth0_macvtap: entered promiscuous mode
[  539.638032][ T8257] veth1_macvtap: entered promiscuous mode
[  539.931179][ T8257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  539.942243][ T8257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  539.956671][ T8257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  539.969100][ T8257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  539.979416][ T8257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  539.990164][ T8257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  540.000417][ T8257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  540.011188][ T8257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  540.031462][ T8257] batman_adv: batadv0: Interface activated: batadv_slave_0
[  540.392089][ T8257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  540.403581][ T8257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  540.413840][ T8257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  540.425545][ T8257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  540.435795][ T8257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  540.446590][ T8257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  540.457909][ T8257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  540.469871][ T8257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  540.485360][ T8257] batman_adv: batadv0: Interface activated: batadv_slave_1
[  540.790729][ T8257] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  540.800047][ T8257] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  540.809703][ T8257] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  540.818880][ T8257] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  542.276878][ T3351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  542.286101][ T3351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  542.412265][ T3010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  542.420538][ T3010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  542.586212][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  542.594521][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  542.666640][ T3678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  542.675234][ T3678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  543.946790][ T8452] loop0: detected capacity change from 0 to 2048
[  544.038214][ T8452]  loop0: p3 < > p4 < >
[  544.042747][ T8452] loop0: partition table partially beyond EOD, truncated
[  544.051608][ T8452] loop0: p3 start 4284289 is beyond EOD, truncated
[  544.704941][ T8308] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  544.933078][ T8308] usb 3-1: Using ep0 maxpacket: 32
[  544.995467][ T8308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  545.009172][ T8308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  545.020004][ T8308] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  545.029520][ T8308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  545.052699][ T8308] usb 3-1: config 0 descriptor??
[  545.348315][ T8308] usbhid 3-1:0.0: can't add hid device: -71
[  545.355099][ T8308] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  545.380635][ T8308] usb 3-1: USB disconnect, device number 12
[  545.533821][ T3678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  545.542020][ T3678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  545.708758][ T3351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  545.717017][ T3351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  545.992404][ T8486] loop0: detected capacity change from 0 to 2048
[  546.088349][ T3351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  546.097074][ T3351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  546.141602][ T8486]  loop0: p3 < > p4 < >
[  546.146370][ T8486] loop0: partition table partially beyond EOD, truncated
[  546.154729][ T8486] loop0: p3 start 4284289 is beyond EOD, truncated
[  546.172430][ T8308] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  546.181136][ T3010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  546.192297][ T3010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  546.453336][ T8308] usb 1-1: Using ep0 maxpacket: 16
[  546.514056][ T8308] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 8288, setting to 64
[  546.639522][ T8308] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  546.654059][ T8308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.662457][ T8308] usb 1-1: Product: syz
[  546.667181][ T8308] usb 1-1: Manufacturer: syz
[  546.672043][ T8308] usb 1-1: SerialNumber: syz
[  546.741115][ T8496] netlink: 32 bytes leftover after parsing attributes in process `syz.2.763'.
[  546.826014][ T8308] usb 1-1: config 0 descriptor??
[  546.856106][ T8500] netlink: 32 bytes leftover after parsing attributes in process `syz.2.763'.
[  547.548441][ T8503] loop3: detected capacity change from 0 to 2048
[  547.644510][ T8503] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  547.803869][ T8511] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  547.815847][ T1864] usb 1-1: USB disconnect, device number 14
[  548.062650][ T4871] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  548.287894][ T4871] usb 3-1: Using ep0 maxpacket: 16
[  548.316147][ T4871] usb 3-1: config 0 has no interfaces?
[  548.325884][ T8513] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=18)
[  548.360336][ T4871] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  548.370853][ T4871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  548.380264][ T4871] usb 3-1: Product: syz
[  548.384987][ T4871] usb 3-1: Manufacturer: syz
[  548.392071][ T4871] usb 3-1: SerialNumber: syz
[  548.483403][ T4871] usb 3-1: config 0 descriptor??
[  548.560296][ T8513] Remounting filesystem read-only
[  548.647855][ T3474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  548.656130][ T3474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  548.718693][ T5245] usb 3-1: USB disconnect, device number 13
[  548.855336][ T3864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  548.863810][ T3864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  549.278532][ T8246] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  549.505946][ T4871] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  549.713303][ T4871] usb 2-1: Using ep0 maxpacket: 32
[  549.779628][ T4871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  549.791478][ T4871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  549.801829][ T4871] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  549.811373][ T4871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  549.909333][ T8532] loop0: detected capacity change from 0 to 2048
[  550.006550][ T4871] usb 2-1: config 0 descriptor??
[  550.162535][ T8532]  loop0: p3 < > p4 < >
[  550.167645][ T8532] loop0: partition table partially beyond EOD, truncated
[  550.176545][ T8532] loop0: p3 start 4284289 is beyond EOD, truncated
[  550.264039][ T4871] usbhid 2-1:0.0: can't add hid device: -71
[  550.270859][ T4871] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  550.376097][ T4871] usb 2-1: USB disconnect, device number 11
[  550.507750][ T8545] netlink: 48 bytes leftover after parsing attributes in process `syz.4.773'.
[  550.546331][ T8545] netlink: 48 bytes leftover after parsing attributes in process `syz.4.773'.
[  551.319036][ T8516] udevd[8516]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  552.121243][ T8566] loop1: detected capacity change from 0 to 2048
[  552.158092][ T8485] udevd[8485]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  552.335076][ T8566] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  552.424784][ T8559] loop3: detected capacity change from 0 to 2048
[  552.487858][ T8559]  loop3: p3 < > p4 < >
[  552.490942][ T5245] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  552.493382][ T8559] loop3: partition table partially beyond EOD, truncated
[  552.511232][ T8559] loop3: p3 start 4284289 is beyond EOD, truncated
[  552.562449][ T8574] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  552.642461][ T4623]  loop3: p3 < > p4 < >
[  552.647513][ T4623] loop3: partition table partially beyond EOD, truncated
[  552.656560][ T4623] loop3: p3 start 4284289 is beyond EOD, truncated
[  552.709825][   T29] audit: type=1800 audit(1727575407.422:49): pid=8566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.780" name="bus" dev="loop1" ino=18 res=0 errno=0
[  552.749024][ T5245] usb 4-1: Using ep0 maxpacket: 16
[  552.784734][ T5245] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 8288, setting to 64
[  552.805827][ T1864] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  552.871794][ T5245] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  552.881536][ T5245] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  552.890027][ T5245] usb 4-1: Product: syz
[  552.899609][ T5245] usb 4-1: Manufacturer: syz
[  552.906421][ T5245] usb 4-1: SerialNumber: syz
[  553.004593][ T1864] usb 1-1: Using ep0 maxpacket: 16
[  553.035442][ T1864] usb 1-1: config 0 has no interfaces?
[  553.054319][ T5245] usb 4-1: config 0 descriptor??
[  553.095980][ T1864] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  553.110769][ T1864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  553.120907][ T1864] usb 1-1: Product: syz
[  553.125476][ T1864] usb 1-1: Manufacturer: syz
[  553.130301][ T1864] usb 1-1: SerialNumber: syz
[  553.208505][ T8576] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=18)
[  553.229250][ T1864] usb 1-1: config 0 descriptor??
[  553.241553][ T8576] Remounting filesystem read-only
[  553.448432][ T1864] usb 1-1: USB disconnect, device number 15
[  553.935942][ T8286] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  555.003739][ T1864] usb 4-1: USB disconnect, device number 26
[  556.352022][ T8591] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  556.567011][ T8601] netlink: 48 bytes leftover after parsing attributes in process `syz.3.788'.
[  556.691114][ T8601] netlink: 48 bytes leftover after parsing attributes in process `syz.3.788'.
[  557.536172][ T8614] [U] ù
[  558.028057][ T8617] loop0: detected capacity change from 0 to 2048
[  558.090313][ T8617] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  558.173160][ T1864] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  558.181953][ T8629] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  558.403575][ T1864] usb 3-1: Using ep0 maxpacket: 16
[  558.437806][ T8617] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=18)
[  558.712641][ T1864] usb 3-1: config 0 has no interfaces?
[  558.840120][ T8617] Remounting filesystem read-only
[  558.894104][ T1864] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  558.907257][ T1864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  558.916065][ T1864] usb 3-1: Product: syz
[  558.920613][ T1864] usb 3-1: Manufacturer: syz
[  558.925578][ T1864] usb 3-1: SerialNumber: syz
[  558.935988][ T8626] loop4: detected capacity change from 0 to 2048
[  558.962147][ T1864] usb 3-1: config 0 descriptor??
[  559.103624][ T5245] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  559.127414][ T8626]  loop4: p3 < > p4 < >
[  559.132050][ T8626] loop4: partition table partially beyond EOD, truncated
[  559.146910][ T8626] loop4: p3 start 4284289 is beyond EOD, truncated
[  559.191180][ T1864] usb 3-1: USB disconnect, device number 14
[  559.337033][ T5245] usb 5-1: Using ep0 maxpacket: 16
[  559.364914][ T5245] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 8288, setting to 64
[  559.418538][ T5245] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  559.428467][ T5245] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.436894][ T5245] usb 5-1: Product: syz
[  559.441402][ T5245] usb 5-1: Manufacturer: syz
[  559.452070][ T5245] usb 5-1: SerialNumber: syz
[  559.481633][ T8648] netlink: 48 bytes leftover after parsing attributes in process `syz.3.804'.
[  559.502593][ T8648] netlink: 48 bytes leftover after parsing attributes in process `syz.3.804'.
[  559.540672][ T8145] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  559.618419][ T5245] usb 5-1: config 0 descriptor??
[  559.684211][ T4623]  loop4: p3 < > p4 < >
[  559.688746][ T4623] loop4: partition table partially beyond EOD, truncated
[  559.699057][ T4623] loop4: p3 start 4284289 is beyond EOD, truncated
[  560.422105][ T8662] netlink: 184 bytes leftover after parsing attributes in process `syz.1.807'.
[  560.605466][ T8665] [U] ù
[  560.743734][ T8664] loop3: detected capacity change from 0 to 512
[  561.124994][ T8664] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  561.138183][ T8664] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  561.457902][ T8664] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.808: corrupted inode contents
[  561.737111][ T8664] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #2: comm syz.3.808: mark_inode_dirty error
[  561.783466][ T5246] usb 5-1: USB disconnect, device number 24
[  561.831065][ T8664] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.808: corrupted inode contents
[  561.955497][ T8664] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.808: mark_inode_dirty error
[  562.253241][ T8685] loop1: detected capacity change from 0 to 2048
[  562.400428][ T8685] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  562.735591][ T8700] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  562.778513][ T8246] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  562.860368][ T8701] [U] ù
[  564.007370][ T5246] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  564.293568][ T5246] usb 1-1: Using ep0 maxpacket: 16
[  564.316340][ T5246] usb 1-1: config 0 has no interfaces?
[  564.389397][ T5246] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  564.398911][ T5246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  564.407598][ T5246] usb 1-1: Product: syz
[  564.412002][ T5246] usb 1-1: Manufacturer: syz
[  564.417108][ T5246] usb 1-1: SerialNumber: syz
[  564.645351][ T5246] usb 1-1: config 0 descriptor??
[  564.698099][ T8732] loop3: detected capacity change from 0 to 2048
[  564.823732][ T8732]  loop3: p3 < > p4 < >
[  564.828179][ T8732] loop3: partition table partially beyond EOD, truncated
[  564.836799][ T8732] loop3: p3 start 4284289 is beyond EOD, truncated
[  564.843656][ T5251] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  564.856895][ T8738] loop1: detected capacity change from 0 to 512
[  565.150702][ T5246] usb 1-1: USB disconnect, device number 16
[  565.233078][ T5251] usb 4-1: Using ep0 maxpacket: 16
[  565.243572][ T8738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  565.257014][ T8738] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  565.271557][ T5251] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 8288, setting to 64
[  565.338322][ T5251] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  565.347988][ T5251] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  565.356505][ T5251] usb 4-1: Product: syz
[  565.360989][ T5251] usb 4-1: Manufacturer: syz
[  565.366026][ T5251] usb 4-1: SerialNumber: syz
[  565.410125][ T8738] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.828: corrupted inode contents
[  565.453136][ T8738] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #2: comm syz.1.828: mark_inode_dirty error
[  565.467655][ T5251] usb 4-1: config 0 descriptor??
[  565.557928][ T8738] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.828: corrupted inode contents
[  565.599531][ T8753] sp0: Synchronizing with TNC
[  565.675966][ T8738] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.828: mark_inode_dirty error
[  565.713799][ T8750] [U] è
[  566.255552][ T8286] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  567.061096][ T8767] loop0: detected capacity change from 0 to 2048
[  567.282075][ T8767] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  567.466240][ T8774] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  567.578577][ T5245] usb 4-1: USB disconnect, device number 27
[  567.633655][   T29] audit: type=1800 audit(1727575422.332:50): pid=8767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.838" name="bus" dev="loop0" ino=18 res=0 errno=0
[  567.962076][ T8782] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=18)
[  568.108188][ T8782] Remounting filesystem read-only
[  568.910871][ T8791] loop2: detected capacity change from 0 to 512
[  569.043889][ T8791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  569.057207][ T8791] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  569.169307][ T8791] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #2: comm syz.2.847: corrupted inode contents
[  569.318107][ T8791] EXT4-fs error (device loop2): ext4_dirty_inode:5984: inode #2: comm syz.2.847: mark_inode_dirty error
[  569.395496][ T8791] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #2: comm syz.2.847: corrupted inode contents
[  569.490122][ T8791] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.847: mark_inode_dirty error
[  569.564968][ T8145] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  570.398086][ T8171] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  570.775006][ T8824] binder: 8822:8824 ioctl c0306201 0 returned -14
[  571.708171][ T8835] loop2: detected capacity change from 0 to 2048
[  571.925760][ T8835] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  571.978980][ T8514] udevd[8514]: incorrect nilfs2 checksum on /dev/loop2
[  572.015307][ T8850] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  572.057713][ T5245] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  572.119582][ T8838] loop1: detected capacity change from 0 to 2048
[  572.278072][ T8838]  loop1: p3 < > p4 < >
[  572.282518][ T8838] loop1: partition table partially beyond EOD, truncated
[  572.290989][ T8838] loop1: p3 start 4284289 is beyond EOD, truncated
[  572.308044][ T5245] usb 2-1: Using ep0 maxpacket: 16
[  572.339487][   T29] audit: type=1800 audit(1727575427.012:51): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.859" name="bus" dev="loop2" ino=18 res=0 errno=0
[  572.519864][ T8858] loop0: detected capacity change from 0 to 512
[  572.620514][ T5245] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 8288, setting to 64
[  572.696666][ T8858] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  572.709467][ T5245] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  572.709633][ T5245] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  572.709765][ T5245] usb 2-1: Product: syz
[  572.719286][ T8858] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  572.727199][ T5245] usb 2-1: Manufacturer: syz
[  572.727313][ T5245] usb 2-1: SerialNumber: syz
[  572.731793][ T5245] usb 2-1: config 0 descriptor??
[  572.775103][ T8835] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=18)
[  572.927661][ T8858] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #2: comm syz.0.865: corrupted inode contents
[  572.969901][ T8858] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #2: comm syz.0.865: mark_inode_dirty error
[  573.016127][ T8858] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #2: comm syz.0.865: corrupted inode contents
[  573.145466][ T8858] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.865: mark_inode_dirty error
[  573.183653][ T8835] Remounting filesystem read-only
[  573.818348][ T8145] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  573.853483][ T5251] usb 2-1: USB disconnect, device number 12
[  573.894973][ T8171] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  575.867057][ T8904] loop3: detected capacity change from 0 to 512
[  576.104595][ T8904] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  576.118140][ T8904] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  576.313868][ T8904] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.878: corrupted inode contents
[  576.360642][ T8904] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #2: comm syz.3.878: mark_inode_dirty error
[  576.397823][ T8906] loop2: detected capacity change from 0 to 2048
[  576.422167][ T8906] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  576.497384][ T8904] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.878: corrupted inode contents
[  576.572477][ T8904] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.878: mark_inode_dirty error
[  576.740900][ T8922] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  577.448753][ T8246] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  577.481432][ T8937] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=18)
[  577.507122][ T8936] loop1: detected capacity change from 0 to 128
[  577.788735][ T8936] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  577.824325][ T8937] Remounting filesystem read-only
[  577.965052][ T8936] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  578.133900][ T5245] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  578.317705][   T29] audit: type=1804 audit(1727575433.032:52): pid=8936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.886" name="/newroot/26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop1" ino=12 res=1 errno=0
[  578.323514][ T8934] loop0: detected capacity change from 0 to 2048
[  578.406877][ T5245] usb 1-1: Using ep0 maxpacket: 16
[  578.554059][ T5245] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 8288, setting to 64
[  578.555996][ T8171] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  578.619559][ T5245] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  578.629335][ T5245] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  578.637782][ T5245] usb 1-1: Product: syz
[  578.642302][ T5245] usb 1-1: Manufacturer: syz
[  578.647308][ T5245] usb 1-1: SerialNumber: syz
[  578.659376][ T8934]  loop0: p3 < > p4 < >
[  578.664132][ T8934] loop0: partition table partially beyond EOD, truncated
[  578.672433][ T8934] loop0: p3 start 4284289 is beyond EOD, truncated
[  578.715943][ T5245] usb 1-1: config 0 descriptor??
[  578.959338][ T8286] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  579.984627][ T5245] usb 1-1: USB disconnect, device number 17
[  580.369722][ T8972] loop3: detected capacity change from 0 to 512
[  580.563889][ T8972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  580.577685][ T8972] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  580.765303][ T8972] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.898: corrupted inode contents
[  580.810728][ T8972] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #2: comm syz.3.898: mark_inode_dirty error
[  580.878475][ T8977] loop2: detected capacity change from 0 to 2048
[  580.905793][ T8972] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.898: corrupted inode contents
[  580.925746][ T8977] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  581.024789][ T8972] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.898: mark_inode_dirty error
[  581.068703][ T8437] udevd[8437]: incorrect nilfs2 checksum on /dev/loop2
[  581.133487][ T8986] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  581.427018][   T29] audit: type=1800 audit(1727575436.102:53): pid=8977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.900" name="bus" dev="loop2" ino=18 res=0 errno=0
[  581.451695][ T8246] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  581.528520][ T8993] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=18)
[  581.763329][ T8993] Remounting filesystem read-only
[  582.134079][ T8171] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  582.878123][ T9014] loop4: detected capacity change from 0 to 64
[  583.036411][   T29] audit: type=1326 audit(1727575437.742:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9012 comm="syz.0.912" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa46897dff9 code=0x0
[  583.120847][   T29] audit: type=1800 audit(1727575437.832:55): pid=9014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.913" name="file1" dev="loop4" ino=23 res=0 errno=0
[  583.167684][ T9014] syz.4.913: attempt to access beyond end of device
[  583.167684][ T9014] loop4: rw=34817, sector=39, nr_sectors = 30 limit=64
[  583.181901][ T9014] syz.4.913: attempt to access beyond end of device
[  583.181901][ T9014] loop4: rw=34817, sector=72, nr_sectors = 2 limit=64
[  583.321676][ T9014] syz.4.913: attempt to access beyond end of device
[  583.321676][ T9014] loop4: rw=34817, sector=76, nr_sectors = 736 limit=64
[  583.347281][ T9019] loop2: detected capacity change from 0 to 512
[  583.455037][ T9019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  583.468864][ T9019] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  583.735688][ T9019] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #2: comm syz.2.915: corrupted inode contents
[  583.876373][ T9019] EXT4-fs error (device loop2): ext4_dirty_inode:5984: inode #2: comm syz.2.915: mark_inode_dirty error
[  583.939998][ T9019] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #2: comm syz.2.915: corrupted inode contents
[  584.014144][ T9019] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.915: mark_inode_dirty error
[  584.692226][ T8171] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  584.761168][ T9040] loop0: detected capacity change from 0 to 2048
[  584.789298][ T9040] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  584.883907][ T9047] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  585.207749][ T9050] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=18)
[  585.333865][ T9055] loop4: detected capacity change from 0 to 64
[  585.500249][ T9050] Remounting filesystem read-only
[  585.526422][   T29] audit: type=1800 audit(1727575440.232:56): pid=9055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.927" name="file1" dev="loop4" ino=23 res=0 errno=0
[  585.540632][ T9055] syz.4.927: attempt to access beyond end of device
[  585.540632][ T9055] loop4: rw=34817, sector=39, nr_sectors = 30 limit=64
[  585.569548][ T9055] syz.4.927: attempt to access beyond end of device
[  585.569548][ T9055] loop4: rw=34817, sector=72, nr_sectors = 2 limit=64
[  585.604433][   T29] audit: type=1326 audit(1727575440.282:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9057 comm="syz.3.929" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f897237dff9 code=0x0
[  585.681427][ T9055] syz.4.927: attempt to access beyond end of device
[  585.681427][ T9055] loop4: rw=34817, sector=76, nr_sectors = 736 limit=64
[  585.939388][ T8145] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  586.621725][ T9076] loop3: detected capacity change from 0 to 512
[  586.803944][ T9076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  586.817687][ T9076] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  586.850325][ T9076] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.935: corrupted inode contents
[  586.942363][ T9076] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #2: comm syz.3.935: mark_inode_dirty error
[  587.043111][ T9076] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.935: corrupted inode contents
[  587.074423][ T9076] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.935: mark_inode_dirty error
[  587.411899][ T8246] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  587.597094][ T9083] loop4: detected capacity change from 0 to 2048
[  587.720210][ T1245] ieee802154 phy0 wpan0: encryption failed: -22
[  587.727075][ T1245] ieee802154 phy1 wpan1: encryption failed: -22
[  587.757240][ T9083] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  587.769973][ T9083] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  588.009122][ T9102] loop3: detected capacity change from 0 to 2048
[  588.048169][ T9102] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  588.085856][ T9105] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  588.267166][   T29] audit: type=1800 audit(1727575442.982:58): pid=9102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.941" name="bus" dev="loop3" ino=18 res=0 errno=0
[  588.508081][ T9106] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=18)
[  588.584937][ T9106] Remounting filesystem read-only
[  588.970156][ T8257] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  589.006681][ T9115] loop2: detected capacity change from 0 to 64
[  589.168204][ T8246] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  589.393401][   T29] audit: type=1800 audit(1727575444.102:59): pid=9115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.946" name="file1" dev="loop2" ino=23 res=0 errno=0
[  589.418883][ T9115] syz.2.946: attempt to access beyond end of device
[  589.418883][ T9115] loop2: rw=34817, sector=39, nr_sectors = 30 limit=64
[  589.433173][ T9115] syz.2.946: attempt to access beyond end of device
[  589.433173][ T9115] loop2: rw=34817, sector=72, nr_sectors = 2 limit=64
[  589.470066][ T9119] loop1: detected capacity change from 0 to 512
[  589.577537][ T9115] syz.2.946: attempt to access beyond end of device
[  589.577537][ T9115] loop2: rw=34817, sector=76, nr_sectors = 736 limit=64
[  589.666049][ T9119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  589.679399][ T9119] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  589.748852][ T9119] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.951: corrupted inode contents
[  589.886722][ T9119] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #2: comm syz.1.951: mark_inode_dirty error
[  589.946040][ T9119] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.951: corrupted inode contents
[  590.031201][ T9119] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.951: mark_inode_dirty error
[  590.597500][ T8286] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  591.351550][ T9150] loop2: detected capacity change from 0 to 2048
[  591.491242][ T9150] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  591.676888][ T9160] loop0: detected capacity change from 0 to 64
[  591.920845][ T9163] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  591.973002][ T8485] udevd[8485]: incorrect nilfs2 checksum on /dev/loop2
[  592.038887][ T9160] syz.0.964: attempt to access beyond end of device
[  592.038887][ T9160] loop0: rw=34817, sector=168, nr_sectors = 768 limit=64
[  592.063275][   T29] audit: type=1800 audit(1727575446.722:60): pid=9160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.964" name="file1" dev="loop0" ino=22 res=0 errno=0
[  592.146191][   T29] audit: type=1800 audit(1727575446.852:61): pid=9150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.960" name="bus" dev="loop2" ino=18 res=0 errno=0
[  592.290711][   T58] kworker/u8:3: attempt to access beyond end of device
[  592.290711][   T58] loop0: rw=1, sector=65, nr_sectors = 1 limit=64
[  592.304989][   T58] Buffer I/O error on dev loop0, logical block 65, lost async page write
[  592.313965][   T58] kworker/u8:3: attempt to access beyond end of device
[  592.313965][   T58] loop0: rw=1, sector=66, nr_sectors = 1 limit=64
[  592.330467][   T58] Buffer I/O error on dev loop0, logical block 66, lost async page write
[  592.340118][   T58] kworker/u8:3: attempt to access beyond end of device
[  592.340118][   T58] loop0: rw=1, sector=67, nr_sectors = 1 limit=64
[  592.355560][   T58] Buffer I/O error on dev loop0, logical block 67, lost async page write
[  592.364841][   T58] kworker/u8:3: attempt to access beyond end of device
[  592.364841][   T58] loop0: rw=1, sector=68, nr_sectors = 1 limit=64
[  592.378570][   T58] Buffer I/O error on dev loop0, logical block 68, lost async page write
[  592.388010][   T58] kworker/u8:3: attempt to access beyond end of device
[  592.388010][   T58] loop0: rw=1, sector=72, nr_sectors = 1 limit=64
[  592.401548][   T58] Buffer I/O error on dev loop0, logical block 72, lost async page write
[  592.410380][   T58] kworker/u8:3: attempt to access beyond end of device
[  592.410380][   T58] loop0: rw=1, sector=73, nr_sectors = 1 limit=64
[  592.426973][   T58] Buffer I/O error on dev loop0, logical block 73, lost async page write
[  592.436649][   T58] Buffer I/O error on dev loop0, logical block 76, lost async page write
[  592.445520][   T58] Buffer I/O error on dev loop0, logical block 77, lost async page write
[  592.467538][ T9150] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=18)
[  592.537316][ T9150] Remounting filesystem read-only
[  593.113047][ T9177] loop0: detected capacity change from 0 to 512
[  593.266000][ T9177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  593.279213][ T9177] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  593.478565][ T9177] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #2: comm syz.0.967: corrupted inode contents
[  593.503185][ T9177] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #2: comm syz.0.967: mark_inode_dirty error
[  593.574062][ T8171] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  593.595411][ T9177] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #2: comm syz.0.967: corrupted inode contents
[  593.733132][ T9177] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.967: mark_inode_dirty error
[  594.167785][ T8145] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  594.185511][ T9201] loop2: detected capacity change from 0 to 128
[  594.291741][ T9206] loop3: detected capacity change from 0 to 64
[  594.324520][ T9201] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  594.354496][ T9201] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  595.052014][   T29] audit: type=1800 audit(1727575449.732:62): pid=9218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.977" name="file1" dev="loop3" ino=22 res=0 errno=0
[  595.126400][ T9206] bio_check_eod: 3 callbacks suppressed
[  595.126479][ T9206] syz.3.977: attempt to access beyond end of device
[  595.126479][ T9206] loop3: rw=34817, sector=168, nr_sectors = 768 limit=64
[  595.452920][   T58] kworker/u8:3: attempt to access beyond end of device
[  595.452920][   T58] loop3: rw=1, sector=65, nr_sectors = 1 limit=64
[  595.468635][   T58] Buffer I/O error on dev loop3, logical block 65, lost async page write
[  595.483447][   T58] kworker/u8:3: attempt to access beyond end of device
[  595.483447][   T58] loop3: rw=1, sector=66, nr_sectors = 1 limit=64
[  595.504540][   T58] Buffer I/O error on dev loop3, logical block 66, lost async page write
[  595.515432][   T58] kworker/u8:3: attempt to access beyond end of device
[  595.515432][   T58] loop3: rw=1, sector=67, nr_sectors = 1 limit=64
[  595.529170][   T58] kworker/u8:3: attempt to access beyond end of device
[  595.529170][   T58] loop3: rw=1, sector=68, nr_sectors = 1 limit=64
[  595.542729][   T58] kworker/u8:3: attempt to access beyond end of device
[  595.542729][   T58] loop3: rw=1, sector=72, nr_sectors = 1 limit=64
[  595.557657][   T58] kworker/u8:3: attempt to access beyond end of device
[  595.557657][   T58] loop3: rw=1, sector=73, nr_sectors = 1 limit=64
[  595.572384][   T58] kworker/u8:3: attempt to access beyond end of device
[  595.572384][   T58] loop3: rw=1, sector=76, nr_sectors = 1 limit=64
[  595.586262][   T58] kworker/u8:3: attempt to access beyond end of device
[  595.586262][   T58] loop3: rw=1, sector=77, nr_sectors = 1 limit=64
[  595.606744][   T58] kworker/u8:3: attempt to access beyond end of device
[  595.606744][   T58] loop3: rw=1, sector=78, nr_sectors = 87 limit=64
[  595.693202][ T9220] loop0: detected capacity change from 0 to 2048
[  595.776161][ T9220] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  595.789127][ T9220] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  595.833412][ T9224] loop1: detected capacity change from 0 to 2048
[  595.866863][ T9224] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  595.908286][ T9229] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  595.944126][ T8171] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  595.961351][ T9220] fs-verity: sha512 using implementation "sha512-generic"
[  596.163839][   T29] audit: type=1800 audit(1727575450.862:63): pid=9224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.984" name="bus" dev="loop1" ino=18 res=0 errno=0
[  596.263007][   T29] audit: type=1800 audit(1727575450.942:64): pid=9232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.984" name="bus" dev="loop1" ino=18 res=0 errno=0
[  596.335303][ T8145] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  597.252193][ T9247] loop3: detected capacity change from 0 to 2048
[  597.453780][ T9247]  loop3: p3 < > p4 < >
[  597.458226][ T9247] loop3: partition table partially beyond EOD, truncated
[  597.466667][ T9247] loop3: p3 start 4284289 is beyond EOD, truncated
[  597.493755][ T5246] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  597.693285][ T5246] usb 1-1: Using ep0 maxpacket: 8
[  597.714969][ T5246] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  597.726271][ T5246] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  597.739978][ T5246] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  597.751610][ T5246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  597.864056][ T5246] usbtmc 1-1:16.0: bulk endpoints not found
[  598.209641][ T9259] loop2: detected capacity change from 0 to 64
[  598.664351][   T29] audit: type=1800 audit(1727575453.372:65): pid=9264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.995" name="file1" dev="loop2" ino=22 res=0 errno=0
[  599.084056][   T13] buffer_io_error: 6 callbacks suppressed
[  599.084131][   T13] Buffer I/O error on dev loop2, logical block 65, lost async page write
[  599.099012][   T13] Buffer I/O error on dev loop2, logical block 66, lost async page write
[  599.107854][   T13] Buffer I/O error on dev loop2, logical block 67, lost async page write
[  599.116661][   T13] Buffer I/O error on dev loop2, logical block 68, lost async page write
[  599.125449][   T13] Buffer I/O error on dev loop2, logical block 72, lost async page write
[  599.134250][   T13] Buffer I/O error on dev loop2, logical block 73, lost async page write
[  599.143123][   T13] Buffer I/O error on dev loop2, logical block 76, lost async page write
[  599.151816][   T13] Buffer I/O error on dev loop2, logical block 77, lost async page write
[  599.255103][ T9266] loop3: detected capacity change from 0 to 2048
[  599.373522][ T9266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  599.388890][ T9266] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  599.401925][ T9249] loop0: detected capacity change from 0 to 4096
[  599.476735][ T9274] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  599.538392][ T5246] usb 1-1: USB disconnect, device number 18
[  599.783455][ T8246] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  599.915602][ T9279] loop4: detected capacity change from 0 to 2048
[  600.015962][ T9279] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  600.158657][ T9283] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  600.224304][   T29] audit: type=1800 audit(1727575454.942:66): pid=9279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1003" name="bus" dev="loop4" ino=18 res=0 errno=0
[  600.311902][   T29] audit: type=1800 audit(1727575455.002:67): pid=9287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1003" name="bus" dev="loop4" ino=18 res=0 errno=0
[  600.324380][ T9285] 9pnet_fd: Insufficient options for proto=fd
[  600.370086][ T9288] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1005'.
[  601.545779][ T9305] loop0: detected capacity change from 0 to 64
[  601.762026][ T9307] loop4: detected capacity change from 0 to 128
[  601.838893][ T9301] loop3: detected capacity change from 0 to 2048
[  602.094964][ T3010] bio_check_eod: 10 callbacks suppressed
[  602.095040][ T3010] kworker/u8:9: attempt to access beyond end of device
[  602.095040][ T3010] loop0: rw=1, sector=65, nr_sectors = 1 limit=64
[  602.114819][ T3010] Buffer I/O error on dev loop0, logical block 65, lost async page write
[  602.123658][ T3010] kworker/u8:9: attempt to access beyond end of device
[  602.123658][ T3010] loop0: rw=1, sector=66, nr_sectors = 1 limit=64
[  602.137211][ T3010] Buffer I/O error on dev loop0, logical block 66, lost async page write
[  602.146119][ T3010] kworker/u8:9: attempt to access beyond end of device
[  602.146119][ T3010] loop0: rw=1, sector=67, nr_sectors = 1 limit=64
[  602.168387][ T3010] kworker/u8:9: attempt to access beyond end of device
[  602.168387][ T3010] loop0: rw=1, sector=68, nr_sectors = 1 limit=64
[  602.182064][ T3010] kworker/u8:9: attempt to access beyond end of device
[  602.182064][ T3010] loop0: rw=1, sector=72, nr_sectors = 1 limit=64
[  602.195730][ T3010] kworker/u8:9: attempt to access beyond end of device
[  602.195730][ T3010] loop0: rw=1, sector=73, nr_sectors = 1 limit=64
[  602.209288][ T3010] kworker/u8:9: attempt to access beyond end of device
[  602.209288][ T3010] loop0: rw=1, sector=76, nr_sectors = 1 limit=64
[  602.219802][ T9301]  loop3: p3 < > p4 < >
[  602.222823][ T3010] kworker/u8:9: attempt to access beyond end of device
[  602.222823][ T3010] loop0: rw=1, sector=77, nr_sectors = 1 limit=64
[  602.227381][ T9301] loop3: partition table partially beyond EOD, truncated
[  602.241083][ T3010] kworker/u8:9: attempt to access beyond end of device
[  602.241083][ T3010] loop0: rw=1, sector=78, nr_sectors = 87 limit=64
[  602.248544][ T9301] loop3: p3 start 4284289 is beyond EOD, truncated
[  602.576063][ T9307] loop4: detected capacity change from 128 to 0
[  602.619342][ T9318] syz.4.1012: attempt to access beyond end of device
[  602.619342][ T9318] loop4: rw=1, sector=32, nr_sectors = 1 limit=0
[  602.633642][ T9318] FAT-fs (loop4): FAT read failed (blocknr 32)
[  602.653291][ T1864] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  602.716255][ T9318] FAT-fs (loop4): unable to read inode block for updating (i_pos 548)
[  602.769326][ T9318] FAT-fs (loop4): unable to read inode block for updating (i_pos 548)
[  602.823049][ T1864] usb 2-1: Using ep0 maxpacket: 8
[  602.867979][ T9322] 9pnet_fd: Insufficient options for proto=fd
[  602.877000][ T1864] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  602.887906][ T1864] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  602.901385][ T1864] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  602.910882][ T1864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  603.071214][ T8257] FAT-fs (loop4): Directory bread(block 33) failed
[  603.078563][ T8257] FAT-fs (loop4): Directory bread(block 34) failed
[  603.085549][ T8257] FAT-fs (loop4): Directory bread(block 35) failed
[  603.092342][ T8257] FAT-fs (loop4): Directory bread(block 36) failed
[  603.099744][ T8257] FAT-fs (loop4): Directory bread(block 37) failed
[  603.106678][ T8257] FAT-fs (loop4): Directory bread(block 38) failed
[  603.113561][ T8257] FAT-fs (loop4): Directory bread(block 39) failed
[  603.120345][ T8257] FAT-fs (loop4): Directory bread(block 40) failed
[  603.131935][ T1864] usbtmc 2-1:16.0: bulk endpoints not found
[  603.546171][ T9329] loop0: detected capacity change from 0 to 2048
[  603.559308][ T9329] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  603.626429][   T58] FAT-fs (loop4): unable to read inode block for updating (i_pos 548)
[  603.635702][ T1864] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  603.647381][   T58] FAT-fs (loop4): bread failed in fat_clusters_flush
[  603.687130][ T9331] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  603.706939][ T8257] FAT-fs (loop4): unable to read boot sector to mark fs as dirty
[  603.821570][ T1864] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  603.833162][ T1864] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8
[  603.843403][ T1864] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64
[  603.881520][   T29] audit: type=1800 audit(1727575458.572:68): pid=9329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1022" name="bus" dev="loop0" ino=18 res=0 errno=0
[  603.907487][   T29] audit: type=1800 audit(1727575458.582:69): pid=9329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1022" name="bus" dev="loop0" ino=18 res=0 errno=0
[  604.023844][ T1864] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  604.033437][ T1864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  604.041714][ T1864] usb 3-1: Product: syz
[  604.046788][ T1864] usb 3-1: Manufacturer: syz
[  604.051642][ T1864] usb 3-1: SerialNumber: syz
[  604.118912][ T3010] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  604.340449][ T3010] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  604.464675][ T9326] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  604.499490][ T9326] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  604.608097][ T3010] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  604.817760][ T3010] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  604.923696][ T9328] loop1: detected capacity change from 0 to 4096
[  605.283774][ T9339] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  605.384421][ T9326] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  605.392264][ T9326] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  605.584253][ T3010] bridge_slave_1: left allmulticast mode
[  605.590179][ T3010] bridge_slave_1: left promiscuous mode
[  605.596882][ T3010] bridge0: port 2(bridge_slave_1) entered disabled state
[  605.683935][ T1864] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42
[  605.690660][ T1864] cdc_ncm 3-1:1.0: dwNtbInMaxSize=7 is too small. Using 2048
[  605.698842][ T1864] cdc_ncm 3-1:1.0: setting rx_max = 2048
[  605.850871][ T3010] bridge_slave_0: left allmulticast mode
[  605.857075][ T3010] bridge_slave_0: left promiscuous mode
[  605.866014][ T3010] bridge0: port 1(bridge_slave_0) entered disabled state
[  605.880770][ T1864] cdc_ncm 3-1:1.0: setting tx_max = 184
[  606.000620][ T5246] usb 2-1: USB disconnect, device number 13
[  606.129420][ T9348] loop3: detected capacity change from 0 to 2048
[  606.227499][ T9348]  loop3: p3 < > p4 < >
[  606.231949][ T9348] loop3: partition table partially beyond EOD, truncated
[  606.241353][ T9348] loop3: p3 start 4284289 is beyond EOD, truncated
[  606.314741][ T5194] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  606.350496][ T5194] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  606.360433][ T5194] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  606.521795][ T5194] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  606.657344][ T5194] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  606.676442][ T5194] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  606.696036][ T3010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  606.814678][ T3010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  606.845060][ T3010] bond0 (unregistering): Released all slaves
[  606.927655][ T1864] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  607.023393][ T5245] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  607.119314][ T1864] usb 3-1: USB disconnect, device number 15
[  607.126834][ T1864] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP)
[  607.243673][ T9358] 9pnet_fd: Insufficient options for proto=fd
[  607.258784][ T5245] usb 2-1: Using ep0 maxpacket: 32
[  607.290142][ T5245] usb 2-1: unable to get BOS descriptor or descriptor too short
[  607.340234][ T5245] usb 2-1: config 2 has an invalid interface number: 204 but max is 1
[  607.349005][ T5245] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  607.360028][ T5245] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 2
[  607.374220][ T5245] usb 2-1: config 2 has no interface number 0
[  607.380597][ T5245] usb 2-1: config 2 interface 204 altsetting 15 endpoint 0x2 has invalid wMaxPacketSize 0
[  607.393032][ T5245] usb 2-1: config 2 interface 204 altsetting 15 bulk endpoint 0x2 has invalid maxpacket 0
[  607.403457][ T5245] usb 2-1: config 2 interface 204 has no altsetting 0
[  607.730251][ T5245] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=d1.f9
[  607.739979][ T5245] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  607.748531][ T5245] usb 2-1: Product: syz
[  607.753104][ T5245] usb 2-1: Manufacturer: syz
[  607.757947][ T5245] usb 2-1: SerialNumber: syz
[  607.921198][ T8437] udevd[8437]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  608.371200][ T5245] ir_toy 2-1:2.204: required endpoints not found
[  608.473609][ T5245] usb 2-1: USB disconnect, device number 14
[  608.793133][ T3010] hsr_slave_0: left promiscuous mode
[  608.827388][ T5194] Bluetooth: hci1: command tx timeout
[  608.835721][ T3010] hsr_slave_1: left promiscuous mode
[  608.919062][ T3010] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  608.927105][ T3010] batman_adv: batadv0: Removing interface: batadv_slave_0
[  609.005574][ T3010] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  609.018348][ T3010] batman_adv: batadv0: Removing interface: batadv_slave_1
[  609.196686][ T3010] veth1_macvtap: left promiscuous mode
[  609.202581][ T3010] veth0_macvtap: left promiscuous mode
[  609.208784][ T3010] veth1_vlan: left promiscuous mode
[  609.218974][ T3010] veth0_vlan: left promiscuous mode
[  609.228234][ T9374] loop0: detected capacity change from 0 to 2048
[  609.477984][ T9374] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  609.783130][ T5251] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  609.802355][ T9388] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  609.977136][ T5251] usb 2-1: Using ep0 maxpacket: 8
[  610.053118][ T5251] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  610.063889][ T5251] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  610.077565][ T5251] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  610.087231][ T5251] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  610.463935][ T5251] usbtmc 2-1:16.0: bulk endpoints not found
[  610.669451][ T3010] team0 (unregistering): Port device team_slave_1 removed
[  610.706312][ T3010] team0 (unregistering): Port device team_slave_0 removed
[  610.905573][ T5194] Bluetooth: hci1: command tx timeout
[  611.065704][ T9349] chnl_net:caif_netlink_parms(): no params data found
[  611.189489][ T9381] loop3: detected capacity change from 0 to 4096
[  611.432022][ T9404] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  612.825105][ T5245] usb 2-1: USB disconnect, device number 15
[  612.866174][ T9349] bridge0: port 1(bridge_slave_0) entered blocking state
[  612.875128][ T9349] bridge0: port 1(bridge_slave_0) entered disabled state
[  612.883431][ T9349] bridge_slave_0: entered allmulticast mode
[  612.892468][ T9349] bridge_slave_0: entered promiscuous mode
[  612.985449][ T5194] Bluetooth: hci1: command tx timeout
[  613.215529][ T9349] bridge0: port 2(bridge_slave_1) entered blocking state
[  613.223414][ T9349] bridge0: port 2(bridge_slave_1) entered disabled state
[  613.231223][ T9349] bridge_slave_1: entered allmulticast mode
[  613.240725][ T9349] bridge_slave_1: entered promiscuous mode
[  613.303321][ T1864] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  613.372660][ T9429] loop1: detected capacity change from 0 to 764
[  613.472584][ T9419] loop3: detected capacity change from 0 to 2048
[  613.517708][ T1864] usb 4-1: Using ep0 maxpacket: 16
[  613.545993][ T1864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 8288, setting to 64
[  613.589453][ T9419]  loop3: p3 < > p4 < >
[  613.594489][ T9419] loop3: partition table partially beyond EOD, truncated
[  613.603007][ T9419] loop3: p3 start 4284289 is beyond EOD, truncated
[  613.639621][ T1864] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  613.649237][ T1864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  613.658170][ T1864] usb 4-1: Product: syz
[  613.662676][ T1864] usb 4-1: Manufacturer: syz
[  613.667638][ T1864] usb 4-1: SerialNumber: syz
[  613.790995][ T9349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  613.816481][ T1864] usb 4-1: config 0 descriptor??
[  613.823864][ T9349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  614.150763][ T9349] team0: Port device team_slave_0 added
[  614.241935][ T9349] team0: Port device team_slave_1 added
[  614.618597][ T9349] batman_adv: batadv0: Adding interface: batadv_slave_0
[  614.627037][ T9349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  614.656276][ T9349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  614.804399][ T9440] loop2: detected capacity change from 0 to 4096
[  614.853107][ T9349] batman_adv: batadv0: Adding interface: batadv_slave_1
[  614.860432][ T9349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  614.886909][ T9349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  615.028142][ T9447] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  615.076968][ T9437] loop0: detected capacity change from 0 to 2048
[  615.110921][ T5194] Bluetooth: hci1: command tx timeout
[  615.142074][ T9437] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  615.304563][ T9349] hsr_slave_0: entered promiscuous mode
[  615.323259][ T9452] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  615.403019][ T9444] loop1: detected capacity change from 0 to 1024
[  615.424914][ T9349] hsr_slave_1: entered promiscuous mode
[  615.456876][ T9444] EXT4-fs: Ignoring removed oldalloc option
[  615.479629][ T1864] usb 4-1: USB disconnect, device number 28
[  615.483831][ T9349] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  615.493895][ T9349] Cannot create hsr debugfs directory
[  615.543619][   T29] audit: type=1800 audit(1727575470.252:70): pid=9437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1050" name="bus" dev="loop0" ino=18 res=0 errno=0
[  615.583062][ T9444] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  615.746966][ T9444] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  616.376161][ T1864] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  616.649923][ T1864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  616.661594][ T1864] usb 2-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00
[  616.671229][ T1864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  616.857784][ T1864] usb 2-1: config 0 descriptor??
[  617.105127][ T5245] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  617.269772][ T5245] usb 1-1: Using ep0 maxpacket: 8
[  617.321707][ T5245] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  617.333341][ T5245] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  617.347742][ T5245] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  617.357898][ T5245] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  617.571969][ T9349] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  617.581531][ T5245] usbtmc 1-1:16.0: bulk endpoints not found
[  617.632675][ T9349] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  617.761784][ T9349] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  617.840089][ T9349] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  618.535786][ T1864] usbhid 2-1:0.0: can't add hid device: -71
[  618.542420][ T1864] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  618.605438][ T1864] usb 2-1: USB disconnect, device number 16
[  618.788828][ T9349] 8021q: adding VLAN 0 to HW filter on device bond0
[  618.877529][ T9349] 8021q: adding VLAN 0 to HW filter on device team0
[  618.952459][ T3351] bridge0: port 1(bridge_slave_0) entered blocking state
[  618.960321][ T3351] bridge0: port 1(bridge_slave_0) entered forwarding state
[  618.975990][ T3351] bridge0: port 2(bridge_slave_1) entered blocking state
[  618.983751][ T3351] bridge0: port 2(bridge_slave_1) entered forwarding state
[  619.072142][ T9470] loop0: detected capacity change from 0 to 4096
[  619.089452][ T8286] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  619.149781][ T9349] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  619.160608][ T9349] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  619.419930][ T9492] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  619.583272][ T8308] usb 1-1: USB disconnect, device number 19
[  620.277130][ T9497] binder: 9495:9497 ioctl 4018620d 0 returned -22
[  620.903934][ T9497] loop2: detected capacity change from 0 to 512
[  621.004667][ T9497] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  621.014413][ T9497] EXT4-fs (loop2): blocks per group (64) and clusters per group (32768) inconsistent
[  621.312303][ T9497] loop2: detected capacity change from 0 to 512
[  621.374304][ T9349] 8021q: adding VLAN 0 to HW filter on device batadv0
[  621.570899][ T9497] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #15: comm syz.2.1063: casefold flag without casefold feature
[  621.574169][ T9512] loop0: detected capacity change from 0 to 2048
[  621.674408][ T9497] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.1063: couldn't read orphan inode 15 (err -117)
[  621.729410][ T9512]  loop0: p3 < > p4 < >
[  621.734028][ T9512] loop0: partition table partially beyond EOD, truncated
[  621.742221][ T9512] loop0: p3 start 4284289 is beyond EOD, truncated
[  621.838757][ T9497] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  622.033728][ T8308] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  622.269939][ T8308] usb 1-1: Using ep0 maxpacket: 16
[  622.287033][ T8308] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 8288, setting to 64
[  622.399981][ T8308] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  622.410651][ T8308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  622.419292][ T8308] usb 1-1: Product: syz
[  622.428102][ T8308] usb 1-1: Manufacturer: syz
[  622.434300][ T8308] usb 1-1: SerialNumber: syz
[  622.452137][ T8308] usb 1-1: config 0 descriptor??
[  622.622207][ T8171] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  623.853647][ T9349] veth0_vlan: entered promiscuous mode
[  623.883263][ T5246] usb 1-1: USB disconnect, device number 20
[  624.113368][ T9349] veth1_vlan: entered promiscuous mode
[  624.238253][ T9549] loop2: detected capacity change from 0 to 16
[  624.305611][ T9549] erofs: (device loop2): mounted with root inode @ nid 36.
[  624.456674][ T9349] veth0_macvtap: entered promiscuous mode
[  624.517894][   T51] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000]
[  624.563670][ T9349] veth1_macvtap: entered promiscuous mode
[  624.688854][ T9549] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  624.700452][ T9549] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 89
[  624.783694][ T9349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  624.794987][ T9349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  624.805637][ T9349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  624.816440][ T9349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  624.827438][ T9349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  624.838761][ T9349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  624.849031][ T9349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  624.860016][ T9349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  624.874988][ T9349] batman_adv: batadv0: Interface activated: batadv_slave_0
[  625.176052][ T9349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  625.191892][ T9349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  625.203574][ T9349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  625.215004][ T9349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  625.226244][ T9349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  625.237438][ T9349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  625.247648][ T9349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  625.258454][ T9349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  625.273199][ T9349] batman_adv: batadv0: Interface activated: batadv_slave_1
[  625.516794][ T9349] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  625.526023][ T9349] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  625.535334][ T9349] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  625.544556][ T9349] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  625.609742][ T9566] loop3: detected capacity change from 0 to 64
[  625.706684][ T5200] Bluetooth: hci0: command 0x0406 tx timeout
[  625.713340][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  625.927893][ T9569] binder: 9567:9569 ioctl 4018620d 0 returned -22
[  625.963456][   T29] audit: type=1800 audit(1727575480.662:71): pid=9566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1078" name="file1" dev="loop3" ino=23 res=0 errno=0
[  626.235171][ T3010] bio_check_eod: 23 callbacks suppressed
[  626.235255][ T3010] kworker/u8:9: attempt to access beyond end of device
[  626.235255][ T3010] loop3: rw=1, sector=65, nr_sectors = 1 limit=64
[  626.255527][ T3010] buffer_io_error: 7 callbacks suppressed
[  626.255596][ T3010] Buffer I/O error on dev loop3, logical block 65, lost async page write
[  626.263260][ T9564] loop1: detected capacity change from 0 to 2048
[  626.270277][ T3010] kworker/u8:9: attempt to access beyond end of device
[  626.270277][ T3010] loop3: rw=1, sector=66, nr_sectors = 1 limit=64
[  626.289920][ T3010] Buffer I/O error on dev loop3, logical block 66, lost async page write
[  626.298734][ T3010] kworker/u8:9: attempt to access beyond end of device
[  626.298734][ T3010] loop3: rw=1, sector=67, nr_sectors = 1 limit=64
[  626.312262][ T3010] Buffer I/O error on dev loop3, logical block 67, lost async page write
[  626.324078][ T3010] kworker/u8:9: attempt to access beyond end of device
[  626.324078][ T3010] loop3: rw=1, sector=68, nr_sectors = 1 limit=64
[  626.338667][ T3010] Buffer I/O error on dev loop3, logical block 68, lost async page write
[  626.347536][ T3010] kworker/u8:9: attempt to access beyond end of device
[  626.347536][ T3010] loop3: rw=1, sector=72, nr_sectors = 1 limit=64
[  626.361087][ T3010] Buffer I/O error on dev loop3, logical block 72, lost async page write
[  626.369894][ T3010] kworker/u8:9: attempt to access beyond end of device
[  626.369894][ T3010] loop3: rw=1, sector=73, nr_sectors = 1 limit=64
[  626.383435][ T3010] Buffer I/O error on dev loop3, logical block 73, lost async page write
[  626.392132][ T3010] kworker/u8:9: attempt to access beyond end of device
[  626.392132][ T3010] loop3: rw=1, sector=76, nr_sectors = 1 limit=64
[  626.407277][ T3010] Buffer I/O error on dev loop3, logical block 76, lost async page write
[  626.418990][ T3010] kworker/u8:9: attempt to access beyond end of device
[  626.418990][ T3010] loop3: rw=1, sector=77, nr_sectors = 1 limit=64
[  626.433953][ T3010] Buffer I/O error on dev loop3, logical block 77, lost async page write
[  626.443283][ T3010] kworker/u8:9: attempt to access beyond end of device
[  626.443283][ T3010] loop3: rw=1, sector=78, nr_sectors = 87 limit=64
[  626.660556][ T9564] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  626.675518][ T9564] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  626.844574][ T9561] loop0: detected capacity change from 0 to 4096
[  627.199237][ T9587] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  627.246229][ T9572] loop2: detected capacity change from 0 to 512
[  627.256982][ T8286] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  627.463150][ T9572] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  627.472580][ T9572] EXT4-fs (loop2): blocks per group (64) and clusters per group (32768) inconsistent
[  627.917165][ T9569] loop2: detected capacity change from 0 to 512
[  628.063602][ T9569] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #15: comm syz.2.1077: casefold flag without casefold feature
[  628.084447][ T9569] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.1077: couldn't read orphan inode 15 (err -117)
[  628.134967][ T9569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  629.231363][ T9608] loop1: detected capacity change from 0 to 2048
[  629.303828][ T8308] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  629.406309][ T9608]  loop1: p3 < > p4 < >
[  629.410747][ T9608] loop1: partition table partially beyond EOD, truncated
[  629.419310][ T9608] loop1: p3 start 4284289 is beyond EOD, truncated
[  629.523731][ T8308] usb 2-1: Using ep0 maxpacket: 16
[  629.584375][ T8308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 8288, setting to 64
[  629.665032][ T4623]  loop1: p3 < > p4 < >
[  629.669844][ T4623] loop1: partition table partially beyond EOD, truncated
[  629.682085][ T4623] loop1: p3 start 4284289 is beyond EOD, truncated
[  629.733253][ T8308] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  629.742691][ T8308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  629.751286][ T8308] usb 2-1: Product: syz
[  629.756079][ T8308] usb 2-1: Manufacturer: syz
[  629.760996][ T8308] usb 2-1: SerialNumber: syz
[  629.856029][ T8308] usb 2-1: config 0 descriptor??
[  631.159620][ T8308] usb 2-1: USB disconnect, device number 17
[  632.225783][ T9646] loop0: detected capacity change from 0 to 2048
[  632.372561][ T9653] loop1: detected capacity change from 0 to 4096
[  632.406983][ T9646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  632.419927][ T9646] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  632.714552][ T3351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  632.722529][ T3351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  632.942660][ T9663] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  632.996630][ T3864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  633.005736][ T3864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  633.418361][ T8145] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  633.708860][ T9670] loop4: detected capacity change from 0 to 128
[  633.785358][ T9670] hpfs: bad mount options.
[  634.016444][ T9672] loop3: detected capacity change from 0 to 512
[  634.030223][ T9672] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  634.053309][ T9672] EXT4-fs (loop3): 1 truncate cleaned up
[  634.061614][ T9672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  634.594602][ T8246] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  635.546383][ T9692] loop4: detected capacity change from 0 to 512
[  635.673883][ T9692] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  635.746932][ T9686] loop1: detected capacity change from 0 to 2048
[  635.756782][ T9692] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[  635.766342][ T9692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  635.786936][ T1864] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  635.811337][ T9686]  loop1: p3 < > p4 < >
[  635.815993][ T9686] loop1: partition table partially beyond EOD, truncated
[  635.824423][ T9686] loop1: p3 start 4284289 is beyond EOD, truncated
[  635.908964][ T5200] Bluetooth: hci3: command 0x0406 tx timeout
[  636.047325][ T1864] usb 2-1: Using ep0 maxpacket: 16
[  636.149229][ T9698] loop3: detected capacity change from 0 to 4096
[  636.196082][ T4623]  loop1: p3 < > p4 < >
[  636.200724][ T4623] loop1: partition table partially beyond EOD, truncated
[  636.209792][ T4623] loop1: p3 start 4284289 is beyond EOD, truncated
[  636.263861][ T1864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 8288, setting to 64
[  636.300252][ T1864] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  636.310060][ T1864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  636.318491][ T1864] usb 2-1: Product: syz
[  636.322953][ T1864] usb 2-1: Manufacturer: syz
[  636.327784][ T1864] usb 2-1: SerialNumber: syz
[  636.485686][ T1864] usb 2-1: config 0 descriptor??
[  636.492347][ T5200] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  636.505263][ T5200] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  636.537007][ T9704] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  636.562302][ T5200] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  636.622223][ T9349] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  636.645450][ T5200] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  636.677078][ T5200] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  636.690827][ T5200] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  637.807816][ T5251] usb 2-1: USB disconnect, device number 18
[  638.450423][ T9701] chnl_net:caif_netlink_parms(): no params data found
[  638.748038][ T5200] Bluetooth: hci5: command tx timeout
[  639.467424][ T5200] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  639.476310][ T5200] Bluetooth: hci1: Injecting HCI hardware error event
[  639.485455][ T5200] Bluetooth: hci1: hardware error 0x00
[  639.970165][ T9701] bridge0: port 1(bridge_slave_0) entered blocking state
[  639.979448][ T9701] bridge0: port 1(bridge_slave_0) entered disabled state
[  639.988203][ T9701] bridge_slave_0: entered allmulticast mode
[  639.997926][ T9701] bridge_slave_0: entered promiscuous mode
[  640.143539][ T9701] bridge0: port 2(bridge_slave_1) entered blocking state
[  640.153198][ T9701] bridge0: port 2(bridge_slave_1) entered disabled state
[  640.161373][ T9701] bridge_slave_1: entered allmulticast mode
[  640.170880][ T9701] bridge_slave_1: entered promiscuous mode
[  640.635383][ T9701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  640.697141][ T9701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  640.863569][ T5194] Bluetooth: hci5: command tx timeout
[  640.902491][ T9743] loop3: detected capacity change from 0 to 4096
[  641.124185][ T9747] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  641.320289][ T9701] team0: Port device team_slave_0 added
[  641.376484][ T9701] team0: Port device team_slave_1 added
[  641.396041][ T9752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1122'.
[  641.450180][ T9752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1122'.
[  641.634610][ T5200] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  642.061026][ T9701] batman_adv: batadv0: Adding interface: batadv_slave_0
[  642.068413][ T9701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  642.100127][ T9701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  642.166293][ T9701] batman_adv: batadv0: Adding interface: batadv_slave_1
[  642.173638][ T9701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  642.203799][ T9701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  642.740211][ T9701] hsr_slave_0: entered promiscuous mode
[  642.830198][ T9701] hsr_slave_1: entered promiscuous mode
[  642.908037][ T5200] Bluetooth: hci5: command tx timeout
[  642.913185][ T9701] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  642.921419][ T9701] Cannot create hsr debugfs directory
[  643.001708][ T9761] program syz.3.1128 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  644.274559][ T9701] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  644.401405][ T9701] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  644.500520][ T9781] 9pnet_fd: Insufficient options for proto=fd
[  644.600677][ T9701] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  644.827107][ T9701] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  644.983288][ T5194] Bluetooth: hci5: command tx timeout
[  645.307338][ T9701] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  645.386065][ T9701] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  645.434731][ T9701] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  645.495043][ T9701] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  645.530917][   T29] audit: type=1326 audit(1727575500.232:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.4.1136" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc93b7dff9 code=0x0
[  645.971950][ T9568] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  646.103807][ T5194] Bluetooth: hci4: command 0x0406 tx timeout
[  646.411270][ T9778] loop0: detected capacity change from 0 to 4096
[  646.542313][ T9701] 8021q: adding VLAN 0 to HW filter on device bond0
[  646.656063][ T9701] 8021q: adding VLAN 0 to HW filter on device team0
[  646.721232][ T3864] bridge0: port 1(bridge_slave_0) entered blocking state
[  646.729050][ T3864] bridge0: port 1(bridge_slave_0) entered forwarding state
[  646.747475][ T3864] bridge0: port 2(bridge_slave_1) entered blocking state
[  646.755278][ T3864] bridge0: port 2(bridge_slave_1) entered forwarding state
[  647.084780][ T9778] NILFS (loop0): error -4 creating segctord thread
[  647.368278][   T58] bridge_slave_1: left allmulticast mode
[  647.375440][   T58] bridge_slave_1: left promiscuous mode
[  647.382052][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[  647.601834][   T58] bridge_slave_0: left allmulticast mode
[  647.608019][   T58] bridge_slave_0: left promiscuous mode
[  647.621539][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[  648.452383][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  648.506077][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  648.647449][   T58] bond0 (unregistering): Released all slaves
[  648.776513][ T9803] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1143'.
[  649.175565][ T1245] ieee802154 phy0 wpan0: encryption failed: -22
[  649.182253][ T1245] ieee802154 phy1 wpan1: encryption failed: -22
[  649.550294][   T58] hsr_slave_0: left promiscuous mode
[  649.615305][   T58] hsr_slave_1: left promiscuous mode
[  649.656700][ T9814] loop0: detected capacity change from 0 to 128
[  649.704178][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  649.711961][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[  649.743370][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  649.751128][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[  649.834116][   T58] veth1_macvtap: left promiscuous mode
[  649.839911][   T58] veth0_macvtap: left promiscuous mode
[  649.846295][   T58] veth1_vlan: left promiscuous mode
[  649.851883][   T58] veth0_vlan: left promiscuous mode
[  650.695006][ T9814] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  650.840955][ T9814] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  651.100647][ T3474] =====================================================
[  651.108481][ T3474] BUG: KMSAN: uninit-value in netfs_clear_buffer+0x216/0x4e0
[  651.116453][ T3474]  netfs_clear_buffer+0x216/0x4e0
[  651.121710][ T3474]  netfs_free_request+0x51f/0x890
[  651.127183][ T3474]  netfs_put_request+0x161/0x360
[  651.132334][ T3474]  netfs_write_collection_worker+0x7337/0x7c20
[  651.138788][ T3474]  process_scheduled_works+0xae0/0x1c40
[  651.144719][ T3474]  worker_thread+0xea7/0x14f0
[  651.149607][ T3474]  kthread+0x3e2/0x540
[  651.154090][ T3474]  ret_from_fork+0x6d/0x90
[  651.158689][ T3474]  ret_from_fork_asm+0x1a/0x30
[  651.163762][ T3474] 
[  651.166175][ T3474] Uninit was created at:
[  651.170663][ T3474]  __kmalloc_cache_noprof+0x4f0/0xb00
[  651.176427][ T3474]  netfs_buffer_make_space+0x243/0x750
[  651.182108][ T3474]  netfs_buffer_append_folio+0xd4/0x3d0
[  651.188019][ T3474]  netfs_write_folio+0x1120/0x3050
[  651.193427][ T3474]  netfs_writepages+0xe60/0x1670
[  651.201213][ T3474]  do_writepages+0x427/0xc30
[  651.206891][ T3474]  filemap_fdatawrite_wbc+0x1d8/0x270
[  651.212460][ T3474]  file_write_and_wait_range+0x1b5/0x5d0
[  651.218399][ T3474]  v9fs_file_fsync+0x93/0x1d0
[  651.223541][ T3474]  vfs_fsync_range+0x1f9/0x260
[  651.228497][ T3474]  netfs_file_write_iter+0x6ca/0x7b0
[  651.234221][ T3474]  v9fs_file_write_iter+0x107/0x140
[  651.239637][ T3474]  vfs_write+0xb28/0x1540
[  651.244301][ T3474]  ksys_write+0x24f/0x4c0
[  651.248812][ T3474]  __x64_sys_write+0x93/0xe0
[  651.253707][ T3474]  x64_sys_call+0x306a/0x3ba0
[  651.258580][ T3474]  do_syscall_64+0xcd/0x1e0
[  651.263424][ T3474]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  651.269576][ T3474] 
[  651.272023][ T3474] CPU: 1 UID: 0 PID: 3474 Comm: kworker/u8:19 Tainted: G        W          6.11.0-syzkaller-11993-g3efc57369a0c #0
[  651.284538][ T3474] Tainted: [W]=WARN
[  651.288476][ T3474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  651.301475][ T3474] Workqueue: events_unbound netfs_write_collection_worker
[  651.309718][ T3474] =====================================================
[  651.316894][ T3474] Disabling lock debugging due to kernel taint
[  651.323347][ T3474] Kernel panic - not syncing: kmsan.panic set ...
[  651.329903][ T3474] CPU: 1 UID: 0 PID: 3474 Comm: kworker/u8:19 Tainted: G    B   W          6.11.0-syzkaller-11993-g3efc57369a0c #0
[  651.342207][ T3474] Tainted: [B]=BAD_PAGE, [W]=WARN
[  651.347352][ T3474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  651.357582][ T3474] Workqueue: events_unbound netfs_write_collection_worker
[  651.364915][ T3474] Call Trace:
[  651.368296][ T3474]  <TASK>
[  651.371326][ T3474]  dump_stack_lvl+0x216/0x2d0
[  651.376191][ T3474]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  651.382190][ T3474]  dump_stack+0x1e/0x30
[  651.386564][ T3474]  panic+0x4e2/0xcf0
[  651.390641][ T3474]  ? kmsan_get_metadata+0xf1/0x1c0
[  651.395933][ T3474]  kmsan_report+0x2c7/0x2d0
[  651.400668][ T3474]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  651.406664][ T3474]  ? __msan_warning+0x95/0x120
[  651.411631][ T3474]  ? netfs_clear_buffer+0x216/0x4e0
[  651.417038][ T3474]  ? netfs_free_request+0x51f/0x890
[  651.422461][ T3474]  ? netfs_put_request+0x161/0x360
[  651.427771][ T3474]  ? netfs_write_collection_worker+0x7337/0x7c20
[  651.434289][ T3474]  ? process_scheduled_works+0xae0/0x1c40
[  651.440223][ T3474]  ? worker_thread+0xea7/0x14f0
[  651.445270][ T3474]  ? kthread+0x3e2/0x540
[  651.449730][ T3474]  ? ret_from_fork+0x6d/0x90
[  651.454497][ T3474]  ? ret_from_fork_asm+0x1a/0x30
[  651.459736][ T3474]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  651.465720][ T3474]  ? try_to_wake_up+0xaee/0x1bb0
[  651.470857][ T3474]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  651.476829][ T3474]  ? kmsan_get_metadata+0x13e/0x1c0
[  651.482179][ T3474]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  651.488150][ T3474]  ? kmsan_get_metadata+0x13e/0x1c0
[  651.493496][ T3474]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  651.499461][ T3474]  ? kmsan_get_metadata+0x13e/0x1c0
[  651.504814][ T3474]  ? kmsan_get_metadata+0x13e/0x1c0
[  651.510171][ T3474]  ? kmsan_get_metadata+0x13e/0x1c0
[  651.515548][ T3474]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  651.521520][ T3474]  __msan_warning+0x95/0x120
[  651.526297][ T3474]  netfs_clear_buffer+0x216/0x4e0
[  651.531547][ T3474]  netfs_free_request+0x51f/0x890
[  651.536772][ T3474]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  651.543319][ T3474]  netfs_put_request+0x161/0x360
[  651.548480][ T3474]  netfs_write_collection_worker+0x7337/0x7c20
[  651.554811][ T3474]  ? kmsan_get_metadata+0x13e/0x1c0
[  651.560209][ T3474]  ? __pfx_netfs_write_collection_worker+0x10/0x10
[  651.567057][ T3474]  process_scheduled_works+0xae0/0x1c40
[  651.572832][ T3474]  worker_thread+0xea7/0x14f0
[  651.577727][ T3474]  kthread+0x3e2/0x540
[  651.581985][ T3474]  ? __pfx_worker_thread+0x10/0x10
[  651.587283][ T3474]  ? __pfx_kthread+0x10/0x10
[  651.592065][ T3474]  ret_from_fork+0x6d/0x90
[  651.596638][ T3474]  ? __pfx_kthread+0x10/0x10
[  651.601423][ T3474]  ret_from_fork_asm+0x1a/0x30
[  651.606394][ T3474]  </TASK>
[  651.609773][ T3474] Kernel Offset: disabled
[  651.614162][ T3474] Rebooting in 86400 seconds..