last executing test programs:

3m24.358853069s ago: executing program 32 (id=142):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, &(0x7f0000000ac0)="5e60b02bd8bf399bdad879220fcab2f4af4601e25d337d13ac64", &(0x7f0000000b40)="ffdbfd163a888a8188818f90760bf3ae2ee164c194a8f34858")
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10)
close(0xffffffffffffffff)
arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000080))
epoll_create1(0x0)

2m57.900438244s ago: executing program 0 (id=212):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000812, &(0x7f0000001800)=ANY=[@ANYBLOB="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"/396, @ANYRESOCT, @ANYRES8=0x0, @ANYBLOB="eb4df9aa36400f1596263ee4e2ba950c3777a4ec31bc2dc78cd48b646ae82f0508a43d2064587fb0b58769e71fc7b7c8e93fa8ec644b9889e92afb0c6a178d5f85790c4047947250a43c67c7b897debc120c19d2b9c218c8a1205fae81bb140f9e9a69c60fd20d07ac3643e470a4bbe559f8b777749dd02b1336813ff11343d09bebc37a1ed9bb9ced4e3264a2ead14b4350c271", @ANYRESHEX=0x0, @ANYBLOB="0affd5ece651e2a4648f9b279d8dc44bc4bd6acc0aa01a3ab56e469d3c338a26ff996b57afbe65c4eb94f6fd4cfbda2af6c85c6e135955ca0640546a2aac7bb02432e45e6d333181ee921f9f26a8ef000000000800000000000000000000000000000000000000000000000000004de9f91aeab66cc8b2197d3c00068324c7b7bd"], 0x1, 0x305, &(0x7f0000000340)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0)
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x81d011, 0x0, 0x1, 0x0, &(0x7f0000000140))
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80d800, 0x0, 0x0, 0x0, &(0x7f0000000240))
mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b8)
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40))
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44)
mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

2m54.491707298s ago: executing program 0 (id=228):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10)
sendto$inet(r0, &(0x7f00000023c0)='\f', 0x1, 0xc085, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20)
sendto$inet(r0, &(0x7f00000019c0)="ba424e", 0x3, 0x4002, 0x0, 0x0)

2m54.253714564s ago: executing program 0 (id=221):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004044)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r3, &(0x7f0000000000)={0x2, 0x4e25, 0x0, @mcast2, 0x4}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000680), 0x0)
prlimit64(r1, 0xd, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES64], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = fsmount(0xffffffffffffffff, 0x0, 0x8b)
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7, 0x100}, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r6, 0x16, 0x0, @void}, 0x10)

2m52.241411064s ago: executing program 0 (id=222):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000380)={[{@utf8no}, {@fat=@sys_immutable}, {@shortname_lower}, {@uni_xlate}, {@uni_xlateno}, {@fat=@flush}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlateno}, {@shortname_lower}, {@shortname_winnt}, {@shortname_win95}, {@rodir}, {@utf8}, {@numtail}, {@utf8}]}, 0x0, 0x2ce, &(0x7f0000000700)="$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")
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0)

2m48.148410795s ago: executing program 0 (id=231):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10)
sendto$inet(r0, &(0x7f00000023c0)='\f', 0x1, 0xc085, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20)
sendto$inet(r0, &(0x7f00000019c0)="ba424e", 0x3, 0x4002, 0x0, 0x0)

2m47.036703583s ago: executing program 0 (id=233):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7)
r1 = fanotify_init(0x200, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3)
fanotify_mark(r1, 0x201, 0x40000036, r0, 0x0)
fanotify_mark(r1, 0x2, 0x48000001, r0, 0x0)

2m46.358163819s ago: executing program 33 (id=233):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7)
r1 = fanotify_init(0x200, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3)
fanotify_mark(r1, 0x201, 0x40000036, r0, 0x0)
fanotify_mark(r1, 0x2, 0x48000001, r0, 0x0)

2m31.693590313s ago: executing program 2 (id=265):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xba8}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

2m23.792481739s ago: executing program 2 (id=278):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x7, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x2b8, 0x2e8, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0x0, 0xffffff00, 0xffffff00], @ipv4=@multicast1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], @ipv4=@private=0xa010100, [0xff, 0xff000000, 0x0, 0xffffff00], @ipv4=@local, [0xff000000, 0x0, 0xff], 0xffffffff, 0x3, 0x3b, 0x4e21, 0x4e23, 0x4e23, 0x4e21, 0x122, 0x300}, 0x1, 0x8f}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x4, 0x2, 0x1000, 0x6, 0x40000003}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf3d8}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ab0001", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0xa388}}}}}}}, 0x0)

2m21.121526725s ago: executing program 2 (id=282):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0x1, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000380)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x0, 0x0)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x20})
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000000100)={{&(0x7f000037b000/0x3000)=nil, 0x3000}, 0x2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'veth1_to_bridge\x00', 0x8000})
ioctl$TUNSETQUEUE(r6, 0x400454d9, 0x0)
ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000280)={'netdevsim0\x00', 0xc00})

2m18.513214729s ago: executing program 2 (id=285):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m17.977613972s ago: executing program 2 (id=286):
syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@quota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@data_err_ignore}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@nombcache}, {}]}, 0x45, 0x7c4, &(0x7f0000001900)="$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")
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)
r1 = open(0x0, 0x145142, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5})
sendfile(r1, r1, 0x0, 0x800000009)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x2)
r2 = fcntl$dupfd(r0, 0x0, r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019c80)=""/102400, 0x19000)
kcmp(r3, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
getpid()
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x1)
chdir(&(0x7f0000000400)='./file0\x00')
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))

2m13.753825977s ago: executing program 2 (id=289):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x11)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f00000008c0)=ANY=[], 0x0, 0x3f, 0x0, 0x0, 0xb}, 0x28)
mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x40010, r3, 0xd6fff000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4})
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4})
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x5})
openat$zero(0xffffffffffffff9c, 0x0, 0x42200, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

2m8.283076563s ago: executing program 3 (id=294):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5}, &(0x7f0000000500), &(0x7f0000000540)=r4}, 0x20)

2m7.024655554s ago: executing program 3 (id=297):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0)
ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000005c0)={0x428, 0x3f3, 0x400, 0x70bd2b, 0x25dfdbfc, {0x5, 0x1, 0x24, [0x1, 0x5, 0xa, 0x1, 0x7ff, 0xe, 0x5, 0x80000001, 0x1, 0x2, 0x3, 0x40, 0xd64, 0x8000800, 0x7, 0x6, 0x6, 0x688, 0x6, 0x7, 0x7, 0x8, 0x3, 0x4, 0x5, 0x1, 0xa49c, 0x4006, 0x10, 0x40, 0x9, 0x1, 0x5, 0x4, 0x1ff, 0x8, 0x2, 0x7e6, 0x6c, 0x9, 0x80000000, 0x68, 0x0, 0xfffffffe, 0x7, 0xffff, 0x80000000, 0x0, 0x2, 0x7, 0x1, 0x100, 0x0, 0x401, 0xdde, 0xb, 0x0, 0x4, 0xc90, 0xfffffffa, 0x3, 0x3, 0xd3e, 0x2], [0x8, 0x90, 0x5, 0x7fff, 0x2, 0x0, 0x80000000, 0xcb1, 0xfb, 0xe6a, 0x9, 0x5, 0x3, 0x1, 0x9, 0x5, 0x1fc0000, 0x288e, 0x4, 0xfffffffc, 0xfffffff8, 0x0, 0x3, 0x1, 0x1, 0x2, 0x400, 0x8, 0x500000, 0xb, 0x71ec, 0x9, 0x8, 0xff, 0x7ff, 0xffff, 0x262e, 0x7, 0x4, 0xfffffff7, 0x5, 0x2, 0x0, 0x4, 0xf0ad, 0x800, 0x7fff, 0x7, 0x1ff, 0x8, 0x10000, 0x2, 0x2, 0x1, 0x8, 0x4, 0x6, 0x9, 0x7, 0x9, 0x8, 0x2, 0x1, 0x3], [0xf, 0xfffff801, 0x3, 0x1, 0x6, 0xff, 0x0, 0x1b, 0x3, 0x1, 0x4, 0xffffff01, 0x2, 0x6, 0x4, 0x3, 0x1, 0x8, 0x1ff, 0x4, 0x6, 0x3, 0x8001, 0x7fffffff, 0x9c7, 0x7ff, 0x9, 0x5f, 0x4, 0x9, 0x9, 0x100, 0x10001, 0x6, 0x5, 0x4, 0x3a38, 0x6, 0x3, 0x8, 0xa20, 0x6, 0x8, 0x8, 0x9, 0x2, 0x8faf, 0xffff0001, 0xffffffff, 0x253, 0x1000, 0x5, 0xff, 0x8, 0x6, 0x7, 0x91e, 0x76, 0x2, 0xffffffff, 0x1, 0xffff, 0x7, 0x4], [0x81, 0x6, 0x5, 0x2, 0x8, 0x6, 0x7, 0x0, 0xc, 0x100, 0x3, 0x3, 0x10, 0x2, 0x3ff, 0x7, 0x1, 0x5, 0x0, 0x1, 0x7, 0x0, 0xd0f7, 0xd4, 0x7fffffff, 0x1, 0xc, 0x9, 0x5, 0x0, 0x1, 0x47, 0x9, 0x8, 0x47, 0x0, 0x8, 0x9, 0x5381, 0x5, 0x1, 0x0, 0xfffffffb, 0xffff, 0x9b, 0x3, 0x10000, 0x7, 0x8, 0x0, 0x4, 0x368c, 0x2, 0xab5, 0x10001, 0x6833, 0x1, 0x9, 0xfe, 0x7, 0x2, 0x3, 0x6, 0x12b1dee7], 0x7, ['{[\x00', '\\.+\x00']}}, 0x428}, 0x1, 0x0, 0x0, 0x40014}, 0x20000000)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x16, &(0x7f0000001380)}}, 0x10)

2m0.669321531s ago: executing program 3 (id=301):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r3, r2, 0x25, 0x0, @val=@tracing={0x0, 0x8}}, 0x20)
syz_emit_ethernet(0xeba, &(0x7f0000001180)={@local, @random="e130aeaaba30", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xe84, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[@routing={0x84}], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc392c91c1f824bc301b3069a02b9c86d2ffac3ed63ddee130cbc248d6a3345d3f9553db78077072d569a6633f8bdbdb1a209a8be9b6830225994f9021b57ddd6a44e8ea40b205c6cf437f45bffaef053a5916dcc6de62ee02bdb8ce3acec8ad97fc95dab1307d254790c71f32e4678957cf0121dccabe73a03c6cacbcbdaad8801b04d9836555a982c357a06e2db7e9bf62aed8cdebbb7a71a2410b929015b61f16e54bffd038996a717b9c7cc3696d8a1205e8266bf782c3a45b0e31461d6a3ed62396088833f69248b24fbf6f81dcc08b98826c3bd2325ade54f614f2d4a153e3e3527d93978483f2bfeada6b64bc43f2a725c30e843d13e6ab34cfc38d488b3ef50cd04318fac1f89905f017644cfa2de058ad399871d1316264813c2289d0b6cfeddfbca36ce93fd4a1bfc93bb744"}}}}}, 0x0)

1m56.637051121s ago: executing program 34 (id=289):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x11)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f00000008c0)=ANY=[], 0x0, 0x3f, 0x0, 0x0, 0xb}, 0x28)
mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x40010, r3, 0xd6fff000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4})
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4})
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x5})
openat$zero(0xffffffffffffff9c, 0x0, 0x42200, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

1m56.257777431s ago: executing program 3 (id=309):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000380)={[{@utf8no}, {@fat=@sys_immutable}, {@shortname_lower}, {@uni_xlate}, {@uni_xlateno}, {@fat=@flush}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlateno}, {@shortname_lower}, {@shortname_winnt}, {@shortname_win95}, {@rodir}, {@utf8}, {@numtail}, {@utf8}]}, 0x0, 0x2ce, &(0x7f0000000700)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x40102, 0x0)
unshare(0x22020600)
gettid()
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0)
r1 = getpid()
prlimit64(r1, 0xc, &(0x7f0000000080)={0x3, 0x9}, &(0x7f00000000c0))
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$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")
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$NILFS_IOCTL_GET_SUINFO(r2, 0x80186e84, &(0x7f0000000640)={&(0x7f00000005c0), 0x0, 0x10, 0x332, 0x7})
read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020)

1m55.603725837s ago: executing program 3 (id=312):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r3, 0x1, 0x1070bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x44010)

1m53.065765709s ago: executing program 3 (id=314):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
statfs(&(0x7f00000000c0)='./bus\x00', 0x0)
prctl$PR_MCE_KILL_GET(0x22)
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x35, 0x36, 0x36, 0x66, 0x61, 0x66, 0x37, 0x62, 0x35, 0x36, 0x66, 0x53aa12a1edfc83c3, 0x37, 0x39, 0x0, 0x39]}, 0x0, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f00000007c0)={0x60, 0x7ddd, 0x1, 0xe, 0x9, 0x1, 0x6000000000000, 0x6, 0x1c, 0x9, 0x100000000000000, 0x40, 0x80, 0x4, 0x10000, 0x1, 0x40, 0xd, 0x1, 0x2, 0x400, 0xfffffffffffffff7, 0xc9ee, 0x100, 0x4, 0x3})
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000040))
socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet6_udp_int(r1, 0x11, 0xa, 0x0, 0x0)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0)

1m51.85936595s ago: executing program 35 (id=314):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
statfs(&(0x7f00000000c0)='./bus\x00', 0x0)
prctl$PR_MCE_KILL_GET(0x22)
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x35, 0x36, 0x36, 0x66, 0x61, 0x66, 0x37, 0x62, 0x35, 0x36, 0x66, 0x53aa12a1edfc83c3, 0x37, 0x39, 0x0, 0x39]}, 0x0, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f00000007c0)={0x60, 0x7ddd, 0x1, 0xe, 0x9, 0x1, 0x6000000000000, 0x6, 0x1c, 0x9, 0x100000000000000, 0x40, 0x80, 0x4, 0x10000, 0x1, 0x40, 0xd, 0x1, 0x2, 0x400, 0xfffffffffffffff7, 0xc9ee, 0x100, 0x4, 0x3})
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000040))
socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet6_udp_int(r1, 0x11, 0xa, 0x0, 0x0)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0)

1m42.634043928s ago: executing program 1 (id=332):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000812, &(0x7f0000001800)=ANY=[@ANYBLOB="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"/396, @ANYRESOCT, @ANYRES8=0x0, @ANYBLOB="eb4df9aa36400f1596263ee4e2ba950c3777a4ec31bc2dc78cd48b646ae82f0508a43d2064587fb0b58769e71fc7b7c8e93fa8ec644b9889e92afb0c6a178d5f85790c4047947250a43c67c7b897debc120c19d2b9c218c8a1205fae81bb140f9e9a69c60fd20d07ac3643e470a4bbe559f8b777749dd02b1336813ff11343d09bebc37a1ed9bb9ced4e3264a2ead14b4350c271", @ANYRESHEX=0x0, @ANYBLOB="0affd5ece651e2a4648f9b279d8dc44bc4bd6acc0aa01a3ab56e469d3c338a26ff996b57afbe65c4eb94f6fd4cfbda2af6c85c6e135955ca0640546a2aac7bb02432e45e6d333181ee921f9f26a8ef000000000800000000000000000000000000000000000000000000000000004de9f91aeab66cc8b2197d3c00068324c7b7bd"], 0x1, 0x305, &(0x7f0000000340)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)="ff", 0x1}], 0x1, 0x25412, 0x4, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x81d011, 0x0, 0x1, 0x0, &(0x7f0000000140))
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80d800, 0x0, 0x0, 0x0, &(0x7f0000000240))

1m42.1672603s ago: executing program 1 (id=333):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x10000014)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}, 0x1, 0x0, 0x0, 0x4084}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)
socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b", 0x27}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2)

1m40.639479077s ago: executing program 1 (id=336):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004044)
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x210c00, &(0x7f0000001480)=ANY=[], 0x0, 0x1b3, &(0x7f00000009c0)="$eJzKKC4sZmdgYFjNwcDAIMAABowMPAwXGBgZWBgYGNQZIWIMTBBqPZT/AkrPhErbQPnNUHohlK64pb1uzSm/Myc9dbWWyTIzt8pDNUDF5FJ7jNwkF/NIMDOEph5ZVFxZlZ2Yk5Na1MDMUHGLhaECpPQ6wzWVZglOhz/yHA4w52TNaCzhnCSlKcbGlqlw9swH+XVsGkcYHq1g3ljnmddYV5g6Ne8UQ1JVVlXWvIkTN85s7GxsXDmxLirNbxVjS4rLpqZORhRvMbSvepjEAWUrvU5lvmS8sEjq1IqqmTAL7/CUrZDQ0HCSuCJh0WDCcKTOtsGVoeJWckoDQ5rCf8YkNTaxti1n5oQw87O5LVBoST7BFHqUY+lMCcYDQlUnGRs03zokus3Y9tSB7QzP4eM8awr6BOuPSzA4LRT8LwMy5kBDQ5nGWqaltgu+FGn8lfBabeyUweBuz7QMFqAsDSByJZQnC9KTkJC8gl1HU9PIkCGhYZNEQpJbgaEyw9Y9nKsFGhiQok2FgYFhOyMsbiHgGowxCkbBKBgFo2AUjIJRMApGwSgYBaNgRABAAAAA//+q0YKH")
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3)
clock_gettime(0x1, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x46}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x48)
getdents(r0, &(0x7f0000000dc0)=""/4106, 0x100a)

1m38.234615007s ago: executing program 1 (id=339):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
uname(0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x3010018, &(0x7f0000000040), 0x5, 0x4d0, &(0x7f00000013c0)="$eJzs3V9oVuUfAPDveffH/eb8bb9fUeLVSjBD3JyvSwQDvRKkhDQoqIuGezen71TchLaL6A+UUYHeeJMEdVEQXqyr6ibCi6gIuvAmKLwoiBxMyyK8CBbn/bOme7c5pzu6Ph84nOc55z3n+b7v43ne83w97A3gX6s9InZERF1EbIqI1sr2XGWJF8tL+rpCfuxAuiQxObnvchJJROzOjx2oniuprFdWTtAUEee+iGiun9nu0MjooZ5isXCsUu8cHjzaOTQyunFgsKe/0F84nO/ams/nu7flu2/Ze/3tr4OnPrm66/XTl3795qfzH59NYke0VPZNfx+3Snu0T30m09UnEY/e6sYy1pR1ACzY2cdPvZV1DADA0kvv8f8fEQ+W7v9boy7KN+sHx5+90hpX+mY7ru3Pdy4uZZwAAADAzZuM1tiermtqmHUPAAAAcPfIRURLJLmOyrMALZHLdXSUn+G9N5pzxSNDwxv6jhw/3BulZ2XboiHXN1AsVJ8VbouGJK13lcr/1DdfV89HxP8i4kTrf0r1jv1Hir1ZJz8AAABgmWuJuPDMK5/ev3KW+X/qh9asowQAAAAWI53/r7rQXPpTXX+Y5wMAAMCylM7/r7x66asw/wcAAIBlqzr/n/odLoXbWKj+ANqdEo+CwnyFjAcoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqGFyMolJAAAAYFnLOv8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDdZXd+7EB1Wao2x3ctVUvMZmJnRLSV+79QWcp76qOptG6Khoho/j2J+mnHJRFRt8i2O9ZFtMeG706+8MtH6RKVf4eLPC13ibEfs46A261+jn2NW5YwEO44a57IOgKy9O2JrCMgS+cnso6ALO3dl3UEZGnPI1lHQJbevpx1BHy+MyI21cr/5WJ1aV3OAl2f/6mbZ253I74+E9EeHT9P3zYz/5MbX2QzzGFiZ8T2iCjMyP/lqi9pq6vUVpVShQ1J30CxsCki/hsR66NhRVrvmqON3avP1cz0vHlf2v/H91Tzf+mStl/NBVbiGK9fce1xvT3DPYt935RNvBSxpr5W/ydT+d9klvzvihtrIj1ssNaOq1+m/f/GZ3P3P7fT5LsRD9W8/pOp16SlzuHBo51DI6MbBwZ7+gv9hcP5rq35fL57W767szQedFZHhZk+fPn9mt/0D+wvjf8j+j876fXfPHf/l8b/oZHRQz3FYuHY0MLbeG3d6Zrf4R+cTvu/8dzNjP+NyZOlABsr257vGR4+1hXRmDw2c/vmhce8XFU/j+rnlfb/+rW1v/+r93/l8T83Y/y/p7LOlf8LcVYPv3ex5vbvT6b9n3/K9Z+dtP9757n+k2uu/4UXnlu7d32ttp+O0v3fmfmv/y2lYKoncf83vxvtoKzjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6f4OAAD//1/T7bc=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00)
creat(&(0x7f00000004c0)='./bus\x00', 0x20)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1e5002, 0x98)
sendfile(r2, r1, 0x0, 0x40001)

1m34.345903333s ago: executing program 6 (id=347):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(0x0, 0x1ff)
mkdir(0x0, 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='config/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000001780)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)
ioctl$XFS_IOC_AG_GEOMETRY(0xffffffffffffffff, 0xc080583d, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

1m34.061724391s ago: executing program 1 (id=348):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4)
setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0, 0x9d9}, 0x8)

1m33.931863644s ago: executing program 6 (id=349):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r3, 0x1, 0x1070bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x44010)

1m33.344366198s ago: executing program 6 (id=350):
r0 = socket$nl_route(0x10, 0x3, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000c00)={0x2020}, 0x2020)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0x0, 0x3, 0x5004)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3)
socket$inet(0x2, 0x4000000000000001, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2400c051)
r5 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x2, 0x20002f7})
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0x4, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000016c0)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x1, 0x0, 0x7}, [@RTA_IIF={0x8}, @RTA_SRC={0x8, 0x2, @private=0xa010500}, @RTA_IP_PROTO={0x5, 0x1b, 0x1}]}, 0x34}}, 0xea5bc50b659dd7aa)

1m33.153805273s ago: executing program 1 (id=351):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000001c0)=0x10, 0x4)
syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c4dd00", 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xffffffff}}}}}}, 0x0)
recvmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20, 0x0)

1m29.997419761s ago: executing program 36 (id=351):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000001c0)=0x10, 0x4)
syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c4dd00", 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xffffffff}}}}}}, 0x0)
recvmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20, 0x0)

1m29.992479991s ago: executing program 6 (id=354):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000380)={[{@utf8no}, {@fat=@sys_immutable}, {@shortname_lower}, {@uni_xlate}, {@uni_xlateno}, {@fat=@flush}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlateno}, {@shortname_lower}, {@shortname_winnt}, {@shortname_win95}, {@rodir}, {@utf8}, {@numtail}, {@utf8}]}, 0x0, 0x2ce, &(0x7f0000000700)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x40102, 0x0)
unshare(0x22020600)
gettid()
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0)
r1 = getpid()
prlimit64(r1, 0xc, &(0x7f0000000080)={0x3, 0x9}, &(0x7f00000000c0))
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$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")
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
lgetxattr(0x0, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020)

1m25.796760955s ago: executing program 6 (id=357):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x2372, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback, 0x3e07b7b9}, 0x1c, 0x0}}], 0x1, 0x0)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000100)={'filter\x00', 0x0, [0x9, 0x4, 0xffffffff, 0xe7, 0xd]}, &(0x7f0000000180)=0x54)
recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/35, 0x23}, 0x7}], 0x40000cb, 0x12141, 0x0)

1m24.489447897s ago: executing program 6 (id=361):
shmat(0x0, &(0x7f0000df6000/0x1000)=nil, 0x4000)
r0 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000df6000/0x1000)=nil)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/242)

1m23.9967564s ago: executing program 37 (id=361):
shmat(0x0, &(0x7f0000df6000/0x1000)=nil, 0x4000)
r0 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000df6000/0x1000)=nil)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/242)

12.496433111s ago: executing program 5 (id=490):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10)
listen(r0, 0x5)
r1 = fsopen(&(0x7f0000000300)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='source\x00', &(0x7f0000000380)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000003c0)='addr\x00', &(0x7f0000000400)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000440)='port\x00', &(0x7f0000000480)='2049\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000004c0)='vers\x00', &(0x7f0000000500)='3\x00', 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = accept4(r0, 0x0, 0x0, 0x0)
read(r2, &(0x7f0000000200), 0x4)
read(r2, &(0x7f0000000104), 0x4)
write(r2, &(0x7f0000000100)="80000020000000000000000100"/32, 0x20)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)

11.273841611s ago: executing program 5 (id=492):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x10000014)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}, 0x1, 0x0, 0x0, 0x4084}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)
socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b", 0x27}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2)

10.824804382s ago: executing program 5 (id=493):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='1\x00', 0x1)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r3, &(0x7f00000000c0)=@in={0x2, 0x270f, @empty}, 0x10)
listen(r3, 0x5)
write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="000008004500005c0000000040847c1c7f0000017f00000104d2270f0000000065d78a870100003c000030390001a000000a000a000000018002000c010203040506070880040008000100008008000680020000"], 0x60)

10.713176085s ago: executing program 4 (id=494):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = epoll_create1(0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x8})
shutdown(r5, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)={0x2000200b})

9.493727095s ago: executing program 4 (id=496):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000), 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000000805040100000000000000020000000800010073797a300000000006000200080005000300110014000400080001001e000000080002001e000000"], 0x38}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000000805040100000000000000020000000800010073797a300000000006000200080005000300110014000400080001001e000000080002001e000000"], 0x38}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000000), 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x54, 0x41, 0x107, 0x0, 0x0, {0x4}, [@generic="24000200080006000800000006000d00080005000400110009000a0008000000300003002c000100080000001800060073797a30000000000800010001000000"]}, 0x54}}, 0x0)

8.963376198s ago: executing program 7 (id=497):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1})
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={@null, 0x0, 'syzkaller0\x00'})
bind$x25(r2, &(0x7f0000000400), 0x12)
connect$x25(r2, &(0x7f0000000500), 0x12)
write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0101010101"], 0x5)
sendto$x25(r2, &(0x7f0000000700)="1234567890", 0x5, 0x4, 0x0, 0x0)

8.631392366s ago: executing program 8 (id=498):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0)

8.185903117s ago: executing program 5 (id=499):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000240)=0x8, 0x4)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000800)={{0xffffffffffffffff, &(0x7f0000000100)='/dev/cpu/#/msr\x00', 0x8000, &(0x7f0000000380)={@_ha_fsid={[0x8, 0x6]}, {0x0, 0x800, 0x7, 0x3}}, 0x7fff, &(0x7f00000003c0), &(0x7f0000000400)=0x400}, 0x1, &(0x7f0000000780)=[{0x1, 0x3, 0x0, 0x0, 0x0, 0x78}]})

7.915954334s ago: executing program 8 (id=500):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1001})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', 0x1})
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x1020304}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f9, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000120)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f8, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000120)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x1020304, @rand_addr=0x1020305}}}})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'sit0\x00', 0x1})
write$tun(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="4500003c00000000400472b2010203050102030445000028000000004001b2ca01020305010203040800f71100000000"], 0x3c)

6.926691188s ago: executing program 5 (id=501):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='1\n', 0x2)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0)
write(r2, &(0x7f0000000100)='1\n', 0x2)
close(r2)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e21, @loopback}, 0x10)
listen(r3, 0x5)
syz_emit_ethernet(0x42, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x40, 0x84, 0x0, @loopback, @loopback}, "4e224e210000000000000000010000141234567800008000000a000a12345678"}}}}, 0x0)

6.583664857s ago: executing program 7 (id=502):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/rxrpc/idle_conn_expiry\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='1\n\x00', 0x2)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
connect$rxrpc(r1, &(0x7f0000000240)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
close(r1)
nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0)

6.374399412s ago: executing program 8 (id=503):
r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:/export_path_with_very_long_name_to_increase_xdr_payload_length\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='mountaddr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='mountproto\x00', &(0x7f0000000280)='udp\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)

6.0566166s ago: executing program 7 (id=504):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='udp 2049\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='2\x00', 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r2, &(0x7f0000000200)="000000010000000000000002000186a30000000300000000deadbeef00"/40, 0x24, 0x0, &(0x7f0000000240)={0x2, 0x801, @loopback}, 0x10)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)

5.717839328s ago: executing program 4 (id=505):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000120)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
bind(r2, &(0x7f0000000200)=@in={0x2, 0x115c, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
connect(r3, &(0x7f0000000300)=@in={0x2, 0x115c, @loopback}, 0x10)
r4 = accept4(r2, 0x0, 0x0, 0x0)
shutdown(r4, 0x2)

5.399320196s ago: executing program 4 (id=506):
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000300)='127.0.0.1:/\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,port=20000,proto=tcp,vers=4.1,noresvport\x00'])
close(r0)

5.25366615s ago: executing program 8 (id=507):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
read(r0, &(0x7f0000000800)=""/1000, 0x3e8)
read(r0, &(0x7f0000000c00)=""/1000, 0x3e8)

4.893807459s ago: executing program 8 (id=508):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./nfsd\x00', &(0x7f0000000540)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f00000005c0)='-3 +4\n\x00', 0x6)
close(r0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000680)='udp 2049\n\x00', 0x9)

4.729929843s ago: executing program 4 (id=509):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-3 +4.0\n', 0x8)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='2\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85) (async)
close(r3)
r4 = socket$inet(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10)
write(r4, &(0x7f0000000600)="80000070123456780000000000000002000186a300000004000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74)
read(r4, &(0x7f0000000800)=""/100, 0x100)
close(r4)

4.06761314s ago: executing program 7 (id=510):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x185d811, 0x0, 0x40, 0x0, &(0x7f0000000140))
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
rmdir(&(0x7f0000000500)='./file0\x00')

4.05928517s ago: executing program 8 (id=511):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='nfsd\x00', &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/write_ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2049\n\x00', 0x5)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='1\n\x00', 0x2)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f0000000340)='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='port=2049,proto=tcp,clientaddr=127.0.0.1\x00'])

3.323137258s ago: executing program 5 (id=512):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000812, &(0x7f0000001800)=ANY=[@ANYBLOB="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"/396, @ANYRESOCT, @ANYRES8=0x0, @ANYBLOB="eb4df9aa36400f1596263ee4e2ba950c3777a4ec31bc2dc78cd48b646ae82f0508a43d2064587fb0b58769e71fc7b7c8e93fa8ec644b9889e92afb0c6a178d5f85790c4047947250a43c67c7b897debc120c19d2b9c218c8a1205fae81bb140f9e9a69c60fd20d07ac3643e470a4bbe559f8b777749dd02b1336813ff11343d09bebc37a1ed9bb9ced4e3264a2ead14b4350c271", @ANYRESHEX=0x0, @ANYBLOB="0affd5ece651e2a4648f9b279d8dc44bc4bd6acc0aa01a3ab56e469d3c338a26ff996b57afbe65c4eb94f6fd4cfbda2af6c85c6e135955ca0640546a2aac7bb02432e45e6d333181ee921f9f26a8ef000000000800000000000000000000000000000000000000000000000000004de9f91aeab66cc8b2197d3c00068324c7b7bd"], 0x1, 0x305, &(0x7f0000000340)="$eJzs3U1rE1scx/HfmaRNepvbmz5cLtxltaAb0boRNxHJWxDEhWjbCMVQUSuoG1NxJaJ7974FX4QbxTegKxfiC2g3jpwzD8kkk5k0JB2D3w+Ik8n85/zPPP5PoBwB+GNdbX55d/Gb/WekkkrSy8uSJ6kqlSX9q/+qj/b2d/fbrZ2sHZVchI58GQWRZmCb7b2W+/8gudrGuYhQ3X4qq9a7DtPh+/6Vr33rvnsFJYPCuLs/hSdVwrvTfV898cyyHYwZ15lwHrPGHOpQj7VUdB4AgGLZ9/9BUPjb93wtrN89T9oIX/u/5ft/XIdFJzB1fua3Pe9/N8ryjT2//7ivuuM9N4Sz33vRKHGUluf6Ps8rKCQTBaZJH1V2h3wuF2/hzm67dW77XnvH03M1Qj0Ba3ELIXuF5mS7njI2zTBC301qRRmk5c3ZPmwOyX91zBYzDAzfEifEfDCfzE1T11vtxPVf2Tc2W5dwve9MBfmfH97eoouyWyl8bDQaDc/tKLLsGvk/eaZyellNH5EoOrDLSv5AUM/L00Wt9EUFvbuQGlCJo1ZTozajT0PaWktE2d7EV/PwLKfNvDbXzbp+6L2aPfW/Z/Pb0PA7M/GLjtkIbjR3xIP+zKc3V3b7rA+8OTq6UUuuiY9iZVjqR9nPNIwgOoevtKVLWnr45OndUrvdemAXbqcs3K/Fa+ZeSKnbFLygTndNRb4zsHH0DEyEL4Qrp5TY2Ynu0D4/cje2d9mJHPneKyG6YSfWhLziL62sa6P5se9CmtiCX5nwDn/6Y0T9fcIPJRSle9KLzgQFsXWXCcZ/rpIP631Xr9lq4VpleJ0eFWRpJZur3sM9+rbGjkdA1UT8ilv6K1lG54wNFsM6JmUc19FoY65TZ6TTo7dYD/OcDf6znA1MU591i9//AQAAAAAAAAAAAAAAAAAAZs3x/65g4dhRRfcRAAAAAAAAAAAAAAAAAAAAAIBZF8//q2j+X402/2//VCzh/L9V5cz/uzWYw8D8v2/2ZDoS8/8C0/UrAAD///8sd7M=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80d800, 0x0, 0x0, 0x0, &(0x7f0000000240))
mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b8)
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40))
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44)
syz_mount_image$vfat(&(0x7f0000000800), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

2.572057366s ago: executing program 4 (id=513):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040), 0x0)
nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
bind(r1, &(0x7f0000000300)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xaa}}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xaa}}, 0x10)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000080), 0x0)
close(r2)
close(r1)
close(r0)

2.452885649s ago: executing program 7 (id=514):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='dummy0\x00', 0x7)
bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x10}, 0x10)
listen(r0, 0x5)
syz_emit_ethernet(0x11, &(0x7f0000000100)={@local, @remote, @void, {@generic={0x3, "10106f"}}}, 0x0)
nanosleep(&(0x7f0000000200)={0x0, 0x989680}, 0x0)
syz_emit_ethernet(0x12, &(0x7f0000000300)={@local, @remote, @void, {@generic={0x4, "10100101"}}}, 0x0)
nanosleep(&(0x7f0000000200)={0x0, 0x989680}, 0x0)

2.130799797s ago: executing program 7 (id=515):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={&(0x7f0000000000), 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0)

1.807509756s ago: executing program 9 (id=352):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0x1, 0x0, &(0x7f0000000000))
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000005c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x210810, 0x0, 0x60, 0x0, &(0x7f0000000100))
mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)

1.582368411s ago: executing program 9 (id=516):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000120)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
bind(r2, &(0x7f0000000200)=@in={0x2, 0x115c, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
connect(r3, &(0x7f0000000300)=@in={0x2, 0x115c, @loopback}, 0x10)
r4 = accept4(r2, 0x0, 0x0, 0x0)
shutdown(r4, 0x2)

1.283815708s ago: executing program 9 (id=517):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = epoll_create1(0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x8})
shutdown(r5, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)={0x2000200b})

0s ago: executing program 9 (id=518):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000380)={[{@utf8no}, {@fat=@sys_immutable}, {@shortname_lower}, {@uni_xlate}, {@uni_xlateno}, {@fat=@flush}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlateno}, {@shortname_lower}, {@shortname_winnt}, {@shortname_win95}, {@rodir}, {@utf8}, {@numtail}, {@utf8}]}, 0x0, 0x2ce, &(0x7f0000000700)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x40102, 0x0)
unshare(0x22020600)
gettid()
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0)
getpid()
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$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")
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$NILFS_IOCTL_GET_SUINFO(r1, 0x80186e84, &(0x7f0000000640)={&(0x7f00000005c0), 0x0, 0x10, 0x332, 0x7})
lgetxattr(0x0, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020)

kernel console output (not intermixed with test programs):

y
[  151.957790][ T5199] loop1: detected capacity change from 0 to 512
[  152.018822][ T5195] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x8d2f696c, utbl_chksum : 0xe619d30d)
[  152.051967][ T5199] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  152.077024][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  152.089638][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  152.146860][ T4925] device veth0_vlan entered promiscuous mode
[  152.165638][ T5197] bio_check_eod: 41 callbacks suppressed
[  152.165655][ T5197] syz.2.216: attempt to access beyond end of device
[  152.165655][ T5197] loop2: rw=2049, sector=459, nr_sectors = 3 limit=64
[  152.187353][ T5199] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.214: iget: bad i_size value: 38620345925642
[  152.210706][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  152.229829][ T5199] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.214: couldn't read orphan inode 15 (err -117)
[  152.243220][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  152.270401][ T5199] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  152.290778][ T4925] device veth1_vlan entered promiscuous mode
[  152.378484][   T26] audit: type=1800 audit(1785149913.422:12): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.214" name="file1" dev="loop1" ino=18 res=0 errno=0
[  152.444593][ T4925] device veth0_macvtap entered promiscuous mode
[  152.485503][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  152.513302][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  152.561016][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  152.589772][ T4429] kworker/u4:8: attempt to access beyond end of device
[  152.589772][ T4429] loop2: rw=1, sector=161, nr_sectors = 1 limit=64
[  152.615602][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  152.637753][ T4429] buffer_io_error: 37 callbacks suppressed
[  152.637772][ T4429] Buffer I/O error on dev loop2, logical block 161, lost async page write
[  152.661199][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  152.710403][ T4286] EXT4-fs (loop1): unmounting filesystem.
[  152.739854][ T4429] kworker/u4:8: attempt to access beyond end of device
[  152.739854][ T4429] loop2: rw=1, sector=162, nr_sectors = 1 limit=64
[  152.798250][ T4429] Buffer I/O error on dev loop2, logical block 162, lost async page write
[  152.817918][ T4429] kworker/u4:8: attempt to access beyond end of device
[  152.817918][ T4429] loop2: rw=1, sector=163, nr_sectors = 1 limit=64
[  152.858673][ T4925] device veth1_macvtap entered promiscuous mode
[  152.865516][ T4429] Buffer I/O error on dev loop2, logical block 163, lost async page write
[  152.935375][ T4429] kworker/u4:8: attempt to access beyond end of device
[  152.935375][ T4429] loop2: rw=1, sector=167, nr_sectors = 1 limit=64
[  152.979677][ T4925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  153.018897][ T4429] Buffer I/O error on dev loop2, logical block 167, lost async page write
[  153.027769][ T4429] kworker/u4:8: attempt to access beyond end of device
[  153.027769][ T4429] loop2: rw=1, sector=169, nr_sectors = 1 limit=64
[  153.041216][ T4429] Buffer I/O error on dev loop2, logical block 169, lost async page write
[  153.050294][ T4429] kworker/u4:8: attempt to access beyond end of device
[  153.050294][ T4429] loop2: rw=1, sector=171, nr_sectors = 1 limit=64
[  153.067420][ T4429] Buffer I/O error on dev loop2, logical block 171, lost async page write
[  153.076388][ T4429] kworker/u4:8: attempt to access beyond end of device
[  153.076388][ T4429] loop2: rw=1, sector=172, nr_sectors = 1 limit=64
[  153.089836][ T4429] Buffer I/O error on dev loop2, logical block 172, lost async page write
[  153.100916][ T4925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.101359][ T4429] kworker/u4:8: attempt to access beyond end of device
[  153.101359][ T4429] loop2: rw=1, sector=173, nr_sectors = 1 limit=64
[  153.157649][ T4429] Buffer I/O error on dev loop2, logical block 173, lost async page write
[  153.167794][ T4429] kworker/u4:8: attempt to access beyond end of device
[  153.167794][ T4429] loop2: rw=1, sector=174, nr_sectors = 1 limit=64
[  153.188132][ T4429] Buffer I/O error on dev loop2, logical block 174, lost async page write
[  153.197190][ T4429] Buffer I/O error on dev loop2, logical block 175, lost async page write
[  153.320407][ T4925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  153.652492][ T4925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.722318][ T4925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  153.796396][ T5210] loop2: detected capacity change from 0 to 256
[  153.796893][ T4925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.868284][ T4925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  153.880464][ T4925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.897244][ T4925] batman_adv: batadv0: Interface activated: batadv_slave_0
[  153.932977][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  153.950776][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  153.961157][ T5210] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  153.973669][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  153.998628][ T5212] loop0: detected capacity change from 0 to 64
[  154.021136][ T4925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  154.164978][ T4925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.224509][ T4925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  154.277059][ T4925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.322523][ T4925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  154.362424][ T4925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.392373][ T4925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  154.411828][ T4925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.480981][ T4925] batman_adv: batadv0: Interface activated: batadv_slave_1
[  154.537626][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  154.550408][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  154.579109][ T4925] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  154.653229][ T4925] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  154.662022][ T4925] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  154.729317][ T4925] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.846685][ T5035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.859422][ T5035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.917701][ T5035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.928048][ T5035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.977697][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  157.023176][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  158.871879][ T5247] syz.1.224 uses obsolete (PF_INET,SOCK_PACKET)
[  159.257818][ T5253] loop5: detected capacity change from 0 to 64
[  159.903980][ T5260] loop1: detected capacity change from 0 to 256
[  159.911280][ T5260] exfat: Deprecated parameter 'utf8'
[  160.022503][ T5260] exfat: Deprecated parameter 'namecase'
[  160.087012][ T5260] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8d2f696c, utbl_chksum : 0xe619d30d)
[  160.210670][ T5263] loop5: detected capacity change from 0 to 64
[  160.375667][ T5265] loop0: detected capacity change from 0 to 128
[  160.430350][ T5263] bio_check_eod: 24 callbacks suppressed
[  160.430370][ T5263] syz.5.230: attempt to access beyond end of device
[  160.430370][ T5263] loop5: rw=2049, sector=159, nr_sectors = 1 limit=64
[  160.491995][ T5265] FAT-fs (loop0): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1)
[  160.727161][ T5263] buffer_io_error: 21 callbacks suppressed
[  160.727180][ T5263] Buffer I/O error on dev loop5, logical block 159, lost async page write
[  160.872632][ T5263] syz.5.230: attempt to access beyond end of device
[  160.872632][ T5263] loop5: rw=2049, sector=160, nr_sectors = 1 limit=64
[  160.904575][ T5263] Buffer I/O error on dev loop5, logical block 160, lost async page write
[  161.094295][ T5263] syz.5.230: attempt to access beyond end of device
[  161.094295][ T5263] loop5: rw=2049, sector=161, nr_sectors = 1 limit=64
[  161.185365][ T5263] Buffer I/O error on dev loop5, logical block 161, lost async page write
[  161.332746][ T5263] syz.5.230: attempt to access beyond end of device
[  161.332746][ T5263] loop5: rw=2049, sector=162, nr_sectors = 1 limit=64
[  161.397607][ T5263] Buffer I/O error on dev loop5, logical block 162, lost async page write
[  161.437038][ T5263] syz.5.230: attempt to access beyond end of device
[  161.437038][ T5263] loop5: rw=2049, sector=163, nr_sectors = 1 limit=64
[  161.454627][ T5263] Buffer I/O error on dev loop5, logical block 163, lost async page write
[  161.463338][ T5263] syz.5.230: attempt to access beyond end of device
[  161.463338][ T5263] loop5: rw=2049, sector=167, nr_sectors = 1 limit=64
[  161.476835][ T5263] Buffer I/O error on dev loop5, logical block 167, lost async page write
[  161.530409][ T5263] syz.5.230: attempt to access beyond end of device
[  161.530409][ T5263] loop5: rw=2049, sector=169, nr_sectors = 1 limit=64
[  161.564581][ T5263] Buffer I/O error on dev loop5, logical block 169, lost async page write
[  161.612472][ T5263] syz.5.230: attempt to access beyond end of device
[  161.612472][ T5263] loop5: rw=2049, sector=171, nr_sectors = 1 limit=64
[  161.657180][ T5263] Buffer I/O error on dev loop5, logical block 171, lost async page write
[  161.769284][ T5263] syz.5.230: attempt to access beyond end of device
[  161.769284][ T5263] loop5: rw=2049, sector=172, nr_sectors = 1 limit=64
[  161.866785][ T5263] Buffer I/O error on dev loop5, logical block 172, lost async page write
[  161.882612][ T5263] syz.5.230: attempt to access beyond end of device
[  161.882612][ T5263] loop5: rw=2049, sector=173, nr_sectors = 1 limit=64
[  161.941602][ T5276] loop2: detected capacity change from 0 to 64
[  161.971279][ T5263] Buffer I/O error on dev loop5, logical block 173, lost async page write
[  162.174385][ T4327] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.394081][ T4327] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.570373][ T4327] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.049224][ T4327] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.033080][    T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  165.187017][ T4278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  165.211982][ T4278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  165.232344][    T7] usb 2-1: Using ep0 maxpacket: 8
[  165.237704][ T4278] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  165.247791][    T7] usb 2-1: config 218 has too many interfaces: 244, using maximum allowed: 32
[  165.257737][ T4278] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  165.265491][ T4278] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  165.273522][    T7] usb 2-1: config 218 has 1 interface, different from the descriptor's value: 244
[  165.283098][ T4278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  165.290454][    T7] usb 2-1: config 218 has no interface number 0
[  165.297307][    T7] usb 2-1: config 218 interface 95 altsetting 64 has an invalid endpoint with address 0xFF, skipping
[  165.310029][    T7] usb 2-1: config 218 interface 95 altsetting 64 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  165.322280][    T7] usb 2-1: config 218 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0
[  165.340685][    T7] usb 2-1: config 218 interface 95 has no altsetting 0
[  165.354264][    T7] usb 2-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d
[  165.363529][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.372310][    T7] usb 2-1: Product: syz
[  165.376862][    T7] usb 2-1: Manufacturer: syz
[  165.386944][    T7] usb 2-1: SerialNumber: syz
[  165.614141][    T7] usbtouchscreen: probe of 2-1:218.95 failed with error -90
[  165.667204][    T7] usb 2-1: USB disconnect, device number 3
[  166.028974][ T5326] loop3: detected capacity change from 0 to 64
[  167.187160][ T5336] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  167.332590][ T4278] Bluetooth: hci0: command 0x0409 tx timeout
[  167.643219][ T5338] loop1: detected capacity change from 0 to 2048
[  169.429032][ T4278] Bluetooth: hci0: command 0x041b tx timeout
[  169.487909][ T5338] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[  169.652094][ T5319] chnl_net:caif_netlink_parms(): no params data found
[  171.492429][ T4280] Bluetooth: hci0: command 0x040f tx timeout
[  172.734689][ T4327] device hsr_slave_0 left promiscuous mode
[  172.783828][ T4327] device hsr_slave_1 left promiscuous mode
[  173.368466][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  173.382406][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_0
[  173.434432][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  173.441971][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_1
[  173.480551][ T4327] device bridge_slave_1 left promiscuous mode
[  173.504084][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.514963][ T4327] device bridge_slave_0 left promiscuous mode
[  173.523716][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.564949][ T5383] loop3: detected capacity change from 0 to 64
[  173.573179][ T4280] Bluetooth: hci0: command 0x0419 tx timeout
[  173.750066][ T4327] device veth1_macvtap left promiscuous mode
[  173.767494][ T4327] device veth0_macvtap left promiscuous mode
[  173.782789][ T4327] device veth1_vlan left promiscuous mode
[  173.796270][ T4327] device veth0_vlan left promiscuous mode
[  173.847765][ T5386] capability: warning: `syz.2.260' uses deprecated v2 capabilities in a way that may be insecure
[  174.369622][ T5391] loop2: detected capacity change from 0 to 16
[  174.441078][ T5391] erofs: (device loop2): mounted with root inode @ nid 36.
[  178.502078][ T5408] loop3: detected capacity change from 0 to 64
[  178.724634][ T5408] bio_check_eod: 24 callbacks suppressed
[  178.724653][ T5408] syz.3.267: attempt to access beyond end of device
[  178.724653][ T5408] loop3: rw=2049, sector=159, nr_sectors = 1 limit=64
[  178.815335][ T5408] buffer_io_error: 21 callbacks suppressed
[  178.815349][ T5408] Buffer I/O error on dev loop3, logical block 159, lost async page write
[  178.891945][ T5408] syz.3.267: attempt to access beyond end of device
[  178.891945][ T5408] loop3: rw=2049, sector=160, nr_sectors = 1 limit=64
[  178.949778][ T5408] Buffer I/O error on dev loop3, logical block 160, lost async page write
[  178.993964][ T5408] syz.3.267: attempt to access beyond end of device
[  178.993964][ T5408] loop3: rw=2049, sector=161, nr_sectors = 1 limit=64
[  179.086462][ T5408] Buffer I/O error on dev loop3, logical block 161, lost async page write
[  179.232630][ T4327] team0 (unregistering): Port device team_slave_1 removed
[  179.242672][ T5408] syz.3.267: attempt to access beyond end of device
[  179.242672][ T5408] loop3: rw=2049, sector=162, nr_sectors = 1 limit=64
[  179.360235][ T5408] Buffer I/O error on dev loop3, logical block 162, lost async page write
[  179.411426][ T4327] team0 (unregistering): Port device team_slave_0 removed
[  179.424993][ T5414] Zero length message leads to an empty skb
[  179.490462][ T5408] syz.3.267: attempt to access beyond end of device
[  179.490462][ T5408] loop3: rw=2049, sector=163, nr_sectors = 1 limit=64
[  179.586899][ T4327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  179.635855][ T5408] Buffer I/O error on dev loop3, logical block 163, lost async page write
[  179.763195][ T4327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  179.785955][ T5408] syz.3.267: attempt to access beyond end of device
[  179.785955][ T5408] loop3: rw=2049, sector=167, nr_sectors = 1 limit=64
[  179.862479][ T5408] Buffer I/O error on dev loop3, logical block 167, lost async page write
[  179.903973][ T5408] syz.3.267: attempt to access beyond end of device
[  179.903973][ T5408] loop3: rw=2049, sector=169, nr_sectors = 1 limit=64
[  179.921492][ T5408] Buffer I/O error on dev loop3, logical block 169, lost async page write
[  179.941922][ T5408] syz.3.267: attempt to access beyond end of device
[  179.941922][ T5408] loop3: rw=2049, sector=171, nr_sectors = 1 limit=64
[  179.992492][ T5408] Buffer I/O error on dev loop3, logical block 171, lost async page write
[  180.032499][ T5408] syz.3.267: attempt to access beyond end of device
[  180.032499][ T5408] loop3: rw=2049, sector=172, nr_sectors = 1 limit=64
[  180.106951][ T5408] Buffer I/O error on dev loop3, logical block 172, lost async page write
[  180.131449][ T5408] syz.3.267: attempt to access beyond end of device
[  180.131449][ T5408] loop3: rw=2049, sector=173, nr_sectors = 1 limit=64
[  181.600408][ T5408] Buffer I/O error on dev loop3, logical block 173, lost async page write
[  182.302386][ T4320] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  182.592746][ T4320] usb 4-1: unable to get BOS descriptor or descriptor too short
[  182.632466][ T4320] usb 4-1: not running at top speed; connect to a high speed hub
[  182.703019][ T4320] usb 4-1: config 4 has no interfaces?
[  182.774406][ T4320] usb 4-1: string descriptor 0 read error: -22
[  182.780927][ T4320] usb 4-1: New USB device found, idVendor=0856, idProduct=ac22, bcdDevice=8d.52
[  182.822418][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.430377][ T4327] bond0 (unregistering): Released all slaves
[  184.462641][ T4320] usb 4-1: USB disconnect, device number 3
[  184.931476][ T5319] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.043248][ T5319] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.062417][ T5319] device bridge_slave_0 entered promiscuous mode
[  185.133282][ T5319] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.140610][ T5319] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.173648][ T5319] device bridge_slave_1 entered promiscuous mode
[  185.332189][ T5319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  185.365330][ T5319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.447962][ T5319] team0: Port device team_slave_0 added
[  187.532173][ T5319] team0: Port device team_slave_1 added
[  187.673773][ T5319] batman_adv: batadv0: Adding interface: batadv_slave_0
[  187.733125][ T5319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.862818][ T5319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  187.933757][ T5319] batman_adv: batadv0: Adding interface: batadv_slave_1
[  187.940787][ T5319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.063348][ T5319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.262644][ T5319] device hsr_slave_0 entered promiscuous mode
[  190.358157][ T5319] device hsr_slave_1 entered promiscuous mode
[  190.393154][ T5319] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  190.400805][ T5319] Cannot create hsr debugfs directory
[  190.488891][ T5467] loop1: detected capacity change from 0 to 1024
[  190.574462][ T5467] EXT4-fs: Ignoring removed oldalloc option
[  190.580463][ T5467] EXT4-fs: Ignoring removed oldalloc option
[  190.637202][ T5467] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  190.787101][ T5467] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  191.089691][ T4286] EXT4-fs (loop1): unmounting filesystem.
[  191.175007][ T5319] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  191.269420][ T5319] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  192.736697][ T5319] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  192.765827][ T5319] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  192.780867][ T5478] loop2: detected capacity change from 0 to 2048
[  193.007623][ T5478] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  195.623102][ T5489] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.286: bg 0: block 234: padding at end of block bitmap is not set
[  195.663524][ T5319] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.671772][ T5489] EXT4-fs (loop2): Remounting filesystem read-only
[  195.732776][ T4274] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 34: comm syz-executor: path (unknown): bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[  195.809423][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  197.393644][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  197.443858][ T5319] 8021q: adding VLAN 0 to HW filter on device team0
[  197.451462][ T4274] EXT4-fs (loop2): Remounting filesystem read-only
[  197.497126][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  197.522903][ T4274] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[  197.523097][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  197.600378][ T4498] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.607689][ T4498] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.668014][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  197.714022][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  197.738585][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  197.747668][ T4274] EXT4-fs (loop2): Remounting filesystem read-only
[  197.760520][ T4274] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 34: comm syz-executor: path (unknown): bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[  197.787290][ T4498] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.794516][ T4498] bridge0: port 2(bridge_slave_1) entered forwarding state
[  197.810291][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  197.863533][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  197.923067][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  197.959749][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  197.972163][ T4274] EXT4-fs (loop2): Remounting filesystem read-only
[  197.993288][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  198.001988][ T4274] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[  198.029525][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  198.039470][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  198.063157][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  198.104284][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  198.122740][ T4274] EXT4-fs (loop2): Remounting filesystem read-only
[  198.129865][ T4274] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 34: comm syz-executor: path (unknown): bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[  198.171056][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  198.197988][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  198.230166][ T5319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  198.293414][ T4274] EXT4-fs (loop2): Remounting filesystem read-only
[  198.300425][ T4274] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[  198.512011][ T4274] EXT4-fs (loop2): Remounting filesystem read-only
[  198.569842][ T4274] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 34: comm syz-executor: path (unknown): bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[  198.681254][ T4274] EXT4-fs (loop2): Remounting filesystem read-only
[  198.735624][ T4274] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[  198.783982][ T4274] EXT4-fs (loop2): Remounting filesystem read-only
[  198.797423][ T4274] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 34: comm syz-executor: path (unknown): bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[  198.874529][ T4274] EXT4-fs (loop2): Remounting filesystem read-only
[  198.939947][ T4274] EXT4-fs (loop2): Remounting filesystem read-only
[  198.967345][ T4274] EXT4-fs (loop2): Remounting filesystem read-only
[  199.019689][ T4274] EXT4-fs (loop2): Remounting filesystem read-only
[  199.081636][ T4274] EXT4-fs (loop2): Remounting filesystem read-only
[  199.216468][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  199.227577][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  199.308074][ T5319] 8021q: adding VLAN 0 to HW filter on device batadv0
[  199.819238][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  199.825688][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  203.532533][ T4475] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  203.722364][ T4475] usb 2-1: Using ep0 maxpacket: 16
[  203.729566][ T4475] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  203.782390][ T4475] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  203.852602][ T4475] usb 2-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00
[  203.892456][ T4475] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.924166][ T4475] usb 2-1: config 0 descriptor??
[  203.943397][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  203.969552][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  204.062710][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  204.078401][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  204.133536][ T5319] device veth0_vlan entered promiscuous mode
[  204.157825][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  204.171967][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  204.210512][ T5319] device veth1_vlan entered promiscuous mode
[  204.338306][ T5319] device veth0_macvtap entered promiscuous mode
[  204.354814][ T4475] apple 0003:05AC:027C.0002: ignoring exceeding usage max
[  204.383843][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  204.393873][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  204.423976][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  204.453357][ T4475] apple 0003:05AC:027C.0002: hidraw0: USB HID v0.81 Device [HID 05ac:027c] on usb-dummy_hcd.1-1/input0
[  204.497947][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  204.544541][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  204.560831][ T4475] usb 2-1: USB disconnect, device number 4
[  204.602039][ T5319] device veth1_macvtap entered promiscuous mode
[  204.688289][ T5319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  204.734035][ T5319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.802268][ T5319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  204.861744][ T5319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.902480][ T5319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  204.968578][ T5319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.021373][ T5319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.120841][ T5555] fido_id[5555]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  205.140759][ T5319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.194010][ T5319] batman_adv: batadv0: Interface activated: batadv_slave_0
[  205.204216][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  205.251616][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  205.341526][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  205.381879][ T5319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  208.326310][ T4280] Bluetooth: hci2: command 0x0406 tx timeout
[  208.332428][ T4280] Bluetooth: hci4: command 0x0406 tx timeout
[  208.339122][ T4278] Bluetooth: hci1: command 0x0406 tx timeout
[  208.366736][ T5319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.377067][ T5319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  208.388794][ T5319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.399083][ T5319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  208.409911][ T5319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.420559][ T5319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  208.431745][ T5319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.557517][ T5319] batman_adv: batadv0: Interface activated: batadv_slave_1
[  208.607643][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  208.652934][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  208.686622][ T5319] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  208.742770][ T5319] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  208.751572][ T5319] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  208.862672][ T5319] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  209.162440][ T5035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  209.192097][ T5035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.246472][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  209.371382][ T5035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  209.390097][ T5035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.441064][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  211.597650][ T5461] EXT4-fs: 189 callbacks suppressed
[  211.597665][ T5461] EXT4-fs (loop2): unmounting filesystem.
[  212.438909][ T4496] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.771745][ T4496] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.796634][ T5601] loop5: detected capacity change from 0 to 64
[  212.898832][ T5603] loop3: detected capacity change from 0 to 128
[  212.979815][ T5603] FAT-fs (loop3): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1)
[  213.090974][ T5601] bio_check_eod: 5 callbacks suppressed
[  213.091001][ T5601] syz.5.308: attempt to access beyond end of device
[  213.091001][ T5601] loop5: rw=2049, sector=459, nr_sectors = 3 limit=64
[  213.113951][ T4496] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.933420][ T5608] loop1: detected capacity change from 0 to 512
[  214.814067][ T4496] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.843503][ T4429] kworker/u4:8: attempt to access beyond end of device
[  214.843503][ T4429] loop5: rw=1, sector=161, nr_sectors = 1 limit=64
[  214.952340][ T4429] buffer_io_error: 5 callbacks suppressed
[  214.952358][ T4429] Buffer I/O error on dev loop5, logical block 161, lost async page write
[  214.992584][ T5608] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  215.000549][ T5608] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  215.008999][ T5608] System zones: 0-1, 15-15, 18-18, 34-34
[  215.015515][ T5608] EXT4-fs (loop1): orphan cleanup on readonly fs
[  215.021915][ T5608] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0
[  215.031317][ T5608] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  215.045879][ T5608] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  215.070588][ T5608] EXT4-fs (loop1): 1 truncate cleaned up
[  215.076424][ T5608] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  215.347240][ T4286] EXT4-fs (loop1): unmounting filesystem.
[  215.365357][ T4429] kworker/u4:8: attempt to access beyond end of device
[  215.365357][ T4429] loop5: rw=1, sector=162, nr_sectors = 1 limit=64
[  215.381544][ T4429] Buffer I/O error on dev loop5, logical block 162, lost async page write
[  215.408087][ T4429] kworker/u4:8: attempt to access beyond end of device
[  215.408087][ T4429] loop5: rw=1, sector=163, nr_sectors = 1 limit=64
[  215.457536][ T4429] Buffer I/O error on dev loop5, logical block 163, lost async page write
[  215.530896][ T4429] kworker/u4:8: attempt to access beyond end of device
[  215.530896][ T4429] loop5: rw=1, sector=167, nr_sectors = 1 limit=64
[  215.606642][ T4279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  215.617056][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  215.630403][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  215.639472][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  215.648396][ T4279] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  215.656522][ T4279] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  215.703132][ T4429] Buffer I/O error on dev loop5, logical block 167, lost async page write
[  215.711783][ T4429] kworker/u4:8: attempt to access beyond end of device
[  215.711783][ T4429] loop5: rw=1, sector=169, nr_sectors = 1 limit=64
[  215.798888][ T4429] Buffer I/O error on dev loop5, logical block 169, lost async page write
[  215.829192][ T4429] kworker/u4:8: attempt to access beyond end of device
[  215.829192][ T4429] loop5: rw=1, sector=171, nr_sectors = 1 limit=64
[  215.929626][ T4429] Buffer I/O error on dev loop5, logical block 171, lost async page write
[  215.978300][ T4429] kworker/u4:8: attempt to access beyond end of device
[  215.978300][ T4429] loop5: rw=1, sector=172, nr_sectors = 1 limit=64
[  216.012788][ T4429] Buffer I/O error on dev loop5, logical block 172, lost async page write
[  216.087113][ T4429] kworker/u4:8: attempt to access beyond end of device
[  216.087113][ T4429] loop5: rw=1, sector=173, nr_sectors = 1 limit=64
[  216.114301][ T4429] Buffer I/O error on dev loop5, logical block 173, lost async page write
[  216.146946][ T4429] kworker/u4:8: attempt to access beyond end of device
[  216.146946][ T4429] loop5: rw=1, sector=174, nr_sectors = 1 limit=64
[  216.193410][ T4429] Buffer I/O error on dev loop5, logical block 174, lost async page write
[  216.212658][ T4429] Buffer I/O error on dev loop5, logical block 175, lost async page write
[  216.614323][ T5627] loop5: detected capacity change from 0 to 64
[  216.891628][ T5619] chnl_net:caif_netlink_parms(): no params data found
[  218.671025][ T4279] Bluetooth: hci1: command 0x0409 tx timeout
[  219.012928][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.020115][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.054063][ T5619] device bridge_slave_0 entered promiscuous mode
[  219.143446][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.150613][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.205634][ T5619] device bridge_slave_1 entered promiscuous mode
[  219.674286][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  219.817730][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  219.830085][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  219.838622][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  219.851298][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  219.859285][ T4280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  219.866734][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  220.034190][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  220.186170][ T4496] device hsr_slave_0 left promiscuous mode
[  220.203767][ T4496] device hsr_slave_1 left promiscuous mode
[  220.211802][ T4496] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  220.232454][ T4496] batman_adv: batadv0: Removing interface: batadv_slave_0
[  220.250587][ T4496] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  220.262528][ T4496] batman_adv: batadv0: Removing interface: batadv_slave_1
[  220.283414][ T4496] device bridge_slave_1 left promiscuous mode
[  220.290815][ T4496] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.309183][ T4496] device bridge_slave_0 left promiscuous mode
[  220.319442][ T4496] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.338860][ T5661] loop1: detected capacity change from 0 to 64
[  220.416738][ T5661] bio_check_eod: 24 callbacks suppressed
[  220.416798][ T5661] syz.1.321: attempt to access beyond end of device
[  220.416798][ T5661] loop1: rw=2049, sector=335, nr_sectors = 3 limit=64
[  220.478026][ T4496] device veth1_macvtap left promiscuous mode
[  220.516216][ T4496] device veth0_macvtap left promiscuous mode
[  220.576173][ T4496] device veth1_vlan left promiscuous mode
[  220.627686][ T4496] device veth0_vlan left promiscuous mode
[  220.692329][ T4280] Bluetooth: hci1: command 0x041b tx timeout
[  221.312170][ T4854] kworker/u4:13: attempt to access beyond end of device
[  221.312170][ T4854] loop1: rw=1, sector=161, nr_sectors = 1 limit=64
[  221.386933][ T4854] buffer_io_error: 21 callbacks suppressed
[  221.386952][ T4854] Buffer I/O error on dev loop1, logical block 161, lost async page write
[  221.401868][ T4854] kworker/u4:13: attempt to access beyond end of device
[  221.401868][ T4854] loop1: rw=1, sector=162, nr_sectors = 1 limit=64
[  221.422474][ T4854] Buffer I/O error on dev loop1, logical block 162, lost async page write
[  221.431344][ T4854] kworker/u4:13: attempt to access beyond end of device
[  221.431344][ T4854] loop1: rw=1, sector=163, nr_sectors = 1 limit=64
[  221.444926][ T4854] Buffer I/O error on dev loop1, logical block 163, lost async page write
[  221.453630][ T4854] kworker/u4:13: attempt to access beyond end of device
[  221.453630][ T4854] loop1: rw=1, sector=167, nr_sectors = 1 limit=64
[  221.467820][ T4854] Buffer I/O error on dev loop1, logical block 167, lost async page write
[  221.477796][ T4854] kworker/u4:13: attempt to access beyond end of device
[  221.477796][ T4854] loop1: rw=1, sector=169, nr_sectors = 1 limit=64
[  221.498493][ T4854] Buffer I/O error on dev loop1, logical block 169, lost async page write
[  221.521196][ T4854] kworker/u4:13: attempt to access beyond end of device
[  221.521196][ T4854] loop1: rw=1, sector=171, nr_sectors = 1 limit=64
[  221.542581][ T4854] Buffer I/O error on dev loop1, logical block 171, lost async page write
[  221.551387][ T4854] kworker/u4:13: attempt to access beyond end of device
[  221.551387][ T4854] loop1: rw=1, sector=172, nr_sectors = 1 limit=64
[  221.581835][ T4854] Buffer I/O error on dev loop1, logical block 172, lost async page write
[  221.601344][ T4854] kworker/u4:13: attempt to access beyond end of device
[  221.601344][ T4854] loop1: rw=1, sector=173, nr_sectors = 1 limit=64
[  221.621567][ T4854] Buffer I/O error on dev loop1, logical block 173, lost async page write
[  221.630589][ T4854] kworker/u4:13: attempt to access beyond end of device
[  221.630589][ T4854] loop1: rw=1, sector=174, nr_sectors = 1 limit=64
[  221.651579][ T4854] Buffer I/O error on dev loop1, logical block 174, lost async page write
[  221.664642][ T4854] Buffer I/O error on dev loop1, logical block 175, lost async page write
[  223.279745][ T4279] Bluetooth: hci1: command 0x040f tx timeout
[  223.286075][ T4280] Bluetooth: hci2: command 0x0409 tx timeout
[  223.297233][ T5676] Config c/1 of g1 needs at least one function.
[  223.304823][ T5676] udc dummy_udc.0: failed to start g1: -22
[  223.310673][ T5676] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  223.320401][ T5676] UDC core: g1: couldn't find an available UDC or it's busy
[  223.840996][ T4496] team0 (unregistering): Port device team_slave_1 removed
[  223.891614][ T4496] team0 (unregistering): Port device team_slave_0 removed
[  223.940733][ T4496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  223.991667][ T4496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  224.511453][ T4496] bond0 (unregistering): Released all slaves
[  226.174322][ T4279] Bluetooth: hci2: command 0x041b tx timeout
[  226.180423][ T4279] Bluetooth: hci1: command 0x0419 tx timeout
[  226.314703][ T5619] team0: Port device team_slave_0 added
[  226.333329][ T5619] team0: Port device team_slave_1 added
[  226.449980][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0
[  226.502335][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.554452][ T5691] loop6: detected capacity change from 0 to 512
[  226.563594][ T5693] loop1: detected capacity change from 0 to 64
[  226.612738][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  226.625418][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1
[  226.632550][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.658900][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  226.688043][ T5691] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.331: bg 0: block 5: invalid block bitmap
[  226.738609][ T5693] bio_check_eod: 8 callbacks suppressed
[  226.738630][ T5693] syz.1.332: attempt to access beyond end of device
[  226.738630][ T5693] loop1: rw=2049, sector=335, nr_sectors = 3 limit=64
[  226.764767][ T5691] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  226.794942][ T5691] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.331: invalid indirect mapped block 3 (level 2)
[  226.813653][ T5619] device hsr_slave_0 entered promiscuous mode
[  226.856876][ T5691] EXT4-fs (loop6): 1 orphan inode deleted
[  226.862806][ T5691] EXT4-fs (loop6): 1 truncate cleaned up
[  226.868504][ T5691] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  226.883144][ T5619] device hsr_slave_1 entered promiscuous mode
[  226.890913][ T5619] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  226.891881][ T5035] kworker/u4:14: attempt to access beyond end of device
[  226.891881][ T5035] loop1: rw=1, sector=161, nr_sectors = 1 limit=64
[  226.914580][ T5619] Cannot create hsr debugfs directory
[  226.945579][ T5691] fscrypt (loop6, inode 15): Error -61 getting encryption context
[  226.993327][ T5035] buffer_io_error: 6 callbacks suppressed
[  226.993344][ T5035] Buffer I/O error on dev loop1, logical block 161, lost async page write
[  227.060116][ T5035] kworker/u4:14: attempt to access beyond end of device
[  227.060116][ T5035] loop1: rw=1, sector=162, nr_sectors = 1 limit=64
[  227.073659][ T5035] Buffer I/O error on dev loop1, logical block 162, lost async page write
[  227.082545][ T5035] kworker/u4:14: attempt to access beyond end of device
[  227.082545][ T5035] loop1: rw=1, sector=163, nr_sectors = 1 limit=64
[  227.096637][ T5035] Buffer I/O error on dev loop1, logical block 163, lost async page write
[  227.106577][ T5035] kworker/u4:14: attempt to access beyond end of device
[  227.106577][ T5035] loop1: rw=1, sector=167, nr_sectors = 1 limit=64
[  227.121093][ T5319] EXT4-fs (loop6): unmounting filesystem.
[  227.136545][ T5035] Buffer I/O error on dev loop1, logical block 167, lost async page write
[  227.145314][ T5035] kworker/u4:14: attempt to access beyond end of device
[  227.145314][ T5035] loop1: rw=1, sector=169, nr_sectors = 1 limit=64
[  227.158723][ T5035] Buffer I/O error on dev loop1, logical block 169, lost async page write
[  227.168211][ T5035] kworker/u4:14: attempt to access beyond end of device
[  227.168211][ T5035] loop1: rw=1, sector=171, nr_sectors = 1 limit=64
[  227.182927][ T5035] Buffer I/O error on dev loop1, logical block 171, lost async page write
[  227.193168][ T5035] kworker/u4:14: attempt to access beyond end of device
[  227.193168][ T5035] loop1: rw=1, sector=172, nr_sectors = 1 limit=64
[  227.213522][ T5035] Buffer I/O error on dev loop1, logical block 172, lost async page write
[  227.222149][ T5035] kworker/u4:14: attempt to access beyond end of device
[  227.222149][ T5035] loop1: rw=1, sector=173, nr_sectors = 1 limit=64
[  227.304041][ T5035] Buffer I/O error on dev loop1, logical block 173, lost async page write
[  227.342428][ T5035] kworker/u4:14: attempt to access beyond end of device
[  227.342428][ T5035] loop1: rw=1, sector=174, nr_sectors = 1 limit=64
[  227.382359][ T5035] Buffer I/O error on dev loop1, logical block 174, lost async page write
[  227.391013][ T5035] Buffer I/O error on dev loop1, logical block 175, lost async page write
[  227.557450][ T5651] chnl_net:caif_netlink_parms(): no params data found
[  228.245239][ T4279] Bluetooth: hci2: command 0x040f tx timeout
[  228.303816][ T4496] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.630460][ T5716] binder: 5710:5716 ioctl c0306201 0 returned -14
[  229.084116][ T5721] loop1: detected capacity change from 0 to 8
[  229.110156][ T4496] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.185207][ T5619] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  229.234526][ T5619] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  229.285548][ T5721] SQUASHFS error: zlib decompression failed, data probably corrupt
[  229.301212][ T5651] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.309103][ T5721] SQUASHFS error: Failed to read block 0x9b: -5
[  229.321565][ T5651] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.331217][ T5721] SQUASHFS error: Unable to read metadata cache entry [99]
[  229.341026][ T5651] device bridge_slave_0 entered promiscuous mode
[  229.371382][ T5721] SQUASHFS error: Unable to read inode 0x127
[  229.436173][ T4496] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.760360][ T4279] Bluetooth: hci2: command 0x0419 tx timeout
[  230.820353][ T5619] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  230.841892][ T5651] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.850305][ T5651] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.859130][ T5651] device bridge_slave_1 entered promiscuous mode
[  230.886055][ T5619] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  230.973275][ T4496] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.084198][ T5651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  231.129242][ T5651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  231.297651][ T5651] team0: Port device team_slave_0 added
[  231.347825][ T5651] team0: Port device team_slave_1 added
[  231.456623][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0
[  231.512876][ T5651] batman_adv: batadv0: Adding interface: batadv_slave_0
[  231.519918][ T5651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.582315][ T5651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  231.614874][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  231.643632][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  231.668283][ T5619] 8021q: adding VLAN 0 to HW filter on device team0
[  231.716691][ T5651] batman_adv: batadv0: Adding interface: batadv_slave_1
[  231.726532][ T5651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.798059][ T5651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  231.846274][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  231.903254][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  231.924072][ T5744] loop6: detected capacity change from 0 to 64
[  231.952457][ T5717] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.959639][ T5717] bridge0: port 1(bridge_slave_0) entered forwarding state
[  232.133991][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  232.319521][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  232.338760][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  232.390849][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.398140][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  232.406764][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  232.418211][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  232.460694][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  232.536245][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  234.196416][ T5651] device hsr_slave_0 entered promiscuous mode
[  234.228509][ T5651] device hsr_slave_1 entered promiscuous mode
[  234.254203][ T5651] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  234.280389][ T5651] Cannot create hsr debugfs directory
[  234.286484][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  234.302565][ T5754] loop6: detected capacity change from 0 to 64
[  234.304561][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  234.348833][ T5756] loop1: detected capacity change from 0 to 512
[  234.384763][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  234.420263][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  234.443132][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  234.477660][ T5756] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  234.477768][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  234.575565][ T5756] EXT4-fs error (device loop1): ext4_validate_block_bitmap:420: comm syz.1.339: bg 0: bad block bitmap checksum
[  234.651499][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  234.816790][ T5619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  234.970448][ T4286] EXT4-fs error (device loop1): ext4_lookup:1858: inode #13: comm syz-executor: iget: checksum invalid
[  235.041031][ T4286] EXT4-fs error (device loop1): ext4_lookup:1858: inode #13: comm syz-executor: iget: checksum invalid
[  235.710738][ T4286] EXT4-fs (loop1): unmounting filesystem.
[  236.779510][ T5776] binder: 5773:5776 ioctl c0306201 0 returned -14
[  237.732161][ T5651] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  238.923960][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  238.931560][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  238.973438][ T5651] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  238.985126][ T5651] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  239.249194][ T5651] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  239.278936][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0
[  239.805836][ T5651] 8021q: adding VLAN 0 to HW filter on device bond0
[  239.857948][ T4496] device hsr_slave_0 left promiscuous mode
[  239.932520][ T4496] device hsr_slave_1 left promiscuous mode
[  239.947053][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  239.958212][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  239.966612][ T4279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  239.976248][ T4279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  239.984395][ T4279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  240.002729][ T4496] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  240.010223][ T4496] batman_adv: batadv0: Removing interface: batadv_slave_0
[  240.017821][ T4279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  240.083082][ T4496] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  240.090633][ T4496] batman_adv: batadv0: Removing interface: batadv_slave_1
[  240.138361][ T4496] device bridge_slave_1 left promiscuous mode
[  240.155505][ T4496] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.229422][ T4496] device bridge_slave_0 left promiscuous mode
[  240.242492][ T4496] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.370200][ T4496] device veth1_macvtap left promiscuous mode
[  240.381726][ T4496] device veth0_macvtap left promiscuous mode
[  240.722074][ T5798] loop5: detected capacity change from 0 to 512
[  241.737005][ T4496] device veth1_vlan left promiscuous mode
[  241.758010][ T4496] device veth0_vlan left promiscuous mode
[  241.773241][ T5798] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #3: comm syz.5.355: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  241.792348][ T5798] EXT4-fs error (device loop5): ext4_quota_enable:7052: comm syz.5.355: Bad quota inode: 3, type: 0
[  241.803698][ T5798] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  241.820011][ T5798] EXT4-fs (loop5): mount failed
[  242.053056][ T4279] Bluetooth: hci4: command 0x0409 tx timeout
[  242.811063][ T5804] loop6: detected capacity change from 0 to 128
[  242.935676][ T5804] FAT-fs (loop6): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1)
[  243.145138][ T5806] loop5: detected capacity change from 0 to 64
[  243.676016][ T4496] team0 (unregistering): Port device team_slave_1 removed
[  243.720944][ T4496] team0 (unregistering): Port device team_slave_0 removed
[  243.766879][ T4496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  243.814669][ T4496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  244.132565][ T4280] Bluetooth: hci4: command 0x041b tx timeout
[  244.161896][ T4496] bond0 (unregistering): Released all slaves
[  244.422564][ T5651] 8021q: adding VLAN 0 to HW filter on device team0
[  244.440697][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  244.453138][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  244.493321][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  244.522717][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  244.569629][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.577030][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  244.619947][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  244.644982][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  244.673509][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  244.682252][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.689423][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  244.726385][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  244.743203][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  244.766691][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  244.805740][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  244.831490][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  244.863544][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  244.893131][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  244.932981][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  244.951978][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  244.970193][ T5651] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  245.001122][ T5651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  245.043444][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  245.056819][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  245.128862][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  245.148203][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  245.229364][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  245.247369][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  245.273802][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  245.297211][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  245.368149][ T5619] device veth0_vlan entered promiscuous mode
[  245.465314][ T5619] device veth1_vlan entered promiscuous mode
[  245.649138][ T5619] device veth0_macvtap entered promiscuous mode
[  245.662309][ T4279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  245.674605][ T4279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  245.683761][ T4279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  245.695320][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  245.703723][ T4278] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  245.713742][ T4278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  245.852647][ T4496] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.875317][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  245.886361][ T5836] loop5: detected capacity change from 0 to 4096
[  245.909516][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  245.918910][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  245.971004][ T4496] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.994994][ T5619] device veth1_macvtap entered promiscuous mode
[  246.014921][ T5793] chnl_net:caif_netlink_parms(): no params data found
[  246.049641][ T5836] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  246.063851][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  246.083081][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  246.090677][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  246.177039][ T4496] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.210347][ T5651] 8021q: adding VLAN 0 to HW filter on device batadv0
[  246.217832][ T4280] Bluetooth: hci4: command 0x040f tx timeout
[  246.256706][ T5836] EXT4-fs (loop5): unmounting filesystem.
[  246.278793][ T4496] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.353395][ T5619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  246.392269][ T5619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.402181][ T5619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  246.451521][ T5619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.482430][ T5619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  246.509418][ T5619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.539034][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0
[  246.623039][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  246.642666][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  246.674497][ T5619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  246.692424][ T5619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.722344][ T5619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  246.772314][ T5619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.800642][ T5619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  246.817901][ T5619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.829753][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1
[  246.881222][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  246.922862][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  246.935969][ T5619] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  246.955854][ T5619] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  246.988899][ T5619] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  246.998261][ T5619] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  247.381060][ T4496] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.420473][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.443120][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.460838][ T5793] device bridge_slave_0 entered promiscuous mode
[  247.524863][ T4496] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.599385][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.619462][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.641844][ T5793] device bridge_slave_1 entered promiscuous mode
[  247.665979][ T4429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.679518][ T4429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  249.222959][ T4280] Bluetooth: hci0: command 0x0409 tx timeout
[  249.225320][ T4278] Bluetooth: hci3: command 0x0406 tx timeout
[  249.230571][ T4280] Bluetooth: hci4: command 0x0419 tx timeout
[  249.304595][ T4496] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.328536][ T4334] smpboot: CPU 1 is now offline
[  249.450270][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  249.636059][ T4496] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.692832][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  249.720870][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  249.761080][ T5830] chnl_net:caif_netlink_parms(): no params data found
[  249.819010][ T5651] device veth0_vlan entered promiscuous mode
[  249.872886][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  249.880863][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  249.905604][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  249.913889][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  249.937605][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  249.968812][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  250.010703][ T5651] device veth1_vlan entered promiscuous mode
[  250.098028][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  250.130872][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  250.163287][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  250.204219][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  250.310450][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  250.355939][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  250.403195][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  250.441050][ T5651] device veth0_macvtap entered promiscuous mode
[  250.535490][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  250.597853][ T5651] device veth1_macvtap entered promiscuous mode
[  250.696930][ T5793] team0: Port device team_slave_0 added
[  250.719176][ T5651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  250.776578][ T5651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  250.801975][ T5651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  250.865800][ T5651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  250.907268][ T5651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  251.922249][ T4280] Bluetooth: hci0: command 0x041b tx timeout
[  251.955097][ T5896] Config c/1 of g1 needs at least one function.
[  251.961469][ T5896] udc dummy_udc.0: failed to start g1: -22
[  251.967376][ T5896] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  251.976120][ T5896] UDC core: g1: couldn't find an available UDC or it's busy
[  252.001092][ T5651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.031580][ T5651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  252.052316][ T5651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.073642][ T5651] batman_adv: batadv0: Interface activated: batadv_slave_0
[  252.126466][ T5793] team0: Port device team_slave_1 added
[  252.157647][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  252.185077][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  252.207616][ T5651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  252.231719][ T5651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.249170][ T5651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  252.272462][ T5651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.307233][ T5651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  252.319092][ T5651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.339490][ T5651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  252.370581][ T5651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.388520][ T5651] batman_adv: batadv0: Interface activated: batadv_slave_1
[  252.447840][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  252.468167][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  252.489593][ T5651] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.610178][ T5651] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  252.644978][ T5651] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  252.674617][ T5651] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  252.816245][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.844553][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.896316][ T5830] device bridge_slave_0 entered promiscuous mode
[  252.939962][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0
[  252.956145][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.007348][ T5901] snd_dummy snd_dummy.0: control 9:9:195:ÿÿ :53367 is already present
[  253.112452][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  253.163949][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[  253.171097][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[  253.278913][ T5830] device bridge_slave_1 entered promiscuous mode
[  253.384504][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1
[  253.391525][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.558701][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  254.062237][ T4280] Bluetooth: hci0: command 0x040f tx timeout
[  254.104826][ T5917] loop5: detected capacity change from 0 to 64
[  254.200312][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  254.318796][ T5917] bio_check_eod: 8 callbacks suppressed
[  254.318810][ T5917] syz.5.374: attempt to access beyond end of device
[  254.318810][ T5917] loop5: rw=2049, sector=159, nr_sectors = 1 limit=64
[  254.453832][ T5921] loop7: detected capacity change from 0 to 1024
[  254.528899][ T5917] buffer_io_error: 6 callbacks suppressed
[  254.528914][ T5917] Buffer I/O error on dev loop5, logical block 159, lost async page write
[  254.567553][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  254.638781][ T5793] device hsr_slave_0 entered promiscuous mode
[  254.688332][ T5917] syz.5.374: attempt to access beyond end of device
[  254.688332][ T5917] loop5: rw=2049, sector=160, nr_sectors = 1 limit=64
[  254.708930][ T5793] device hsr_slave_1 entered promiscuous mode
[  254.825209][ T5917] Buffer I/O error on dev loop5, logical block 160, lost async page write
[  254.891264][ T5917] syz.5.374: attempt to access beyond end of device
[  254.891264][ T5917] loop5: rw=2049, sector=161, nr_sectors = 1 limit=64
[  255.015478][ T5917] Buffer I/O error on dev loop5, logical block 161, lost async page write
[  255.124388][ T5917] syz.5.374: attempt to access beyond end of device
[  255.124388][ T5917] loop5: rw=2049, sector=162, nr_sectors = 1 limit=64
[  255.397771][ T5929] loop7: detected capacity change from 0 to 40427
[  255.419428][ T5929] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  255.427452][ T5929] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  255.437782][ T5929] F2FS-fs (loop7): invalid crc value
[  255.456612][ T5917] Buffer I/O error on dev loop5, logical block 162, lost async page write
[  255.495874][ T5929] F2FS-fs (loop7): Found nat_bits in checkpoint
[  255.536851][ T5929] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  255.544094][ T5929] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  255.715562][ T5337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.994216][ T4280] Bluetooth: hci0: command 0x0419 tx timeout
[  257.014052][ T5917] syz.5.374: attempt to access beyond end of device
[  257.014052][ T5917] loop5: rw=2049, sector=163, nr_sectors = 1 limit=64
[  257.064872][ T5337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  257.103477][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  257.133292][ T5917] Buffer I/O error on dev loop5, logical block 163, lost async page write
[  257.146511][ T5830] team0: Port device team_slave_0 added
[  257.187786][ T5917] syz.5.374: attempt to access beyond end of device
[  257.187786][ T5917] loop5: rw=2049, sector=167, nr_sectors = 1 limit=64
[  257.266528][ T5917] Buffer I/O error on dev loop5, logical block 167, lost async page write
[  257.310060][ T5917] syz.5.374: attempt to access beyond end of device
[  257.310060][ T5917] loop5: rw=2049, sector=169, nr_sectors = 1 limit=64
[  257.357167][ T5830] team0: Port device team_slave_1 added
[  257.440509][ T5917] Buffer I/O error on dev loop5, logical block 169, lost async page write
[  257.509914][ T5917] syz.5.374: attempt to access beyond end of device
[  257.509914][ T5917] loop5: rw=2049, sector=171, nr_sectors = 1 limit=64
[  257.611161][ T5917] Buffer I/O error on dev loop5, logical block 171, lost async page write
[  257.663224][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  257.701828][ T5917] syz.5.374: attempt to access beyond end of device
[  257.701828][ T5917] loop5: rw=2049, sector=172, nr_sectors = 1 limit=64
[  257.729340][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  257.768983][ T5917] Buffer I/O error on dev loop5, logical block 172, lost async page write
[  257.782565][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[  257.797642][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  257.833228][ T5917] syz.5.374: attempt to access beyond end of device
[  257.833228][ T5917] loop5: rw=2049, sector=173, nr_sectors = 1 limit=64
[  257.852165][ T5917] Buffer I/O error on dev loop5, logical block 173, lost async page write
[  257.861530][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  257.882161][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  257.984314][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[  258.009574][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  258.110053][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  258.740524][ T5830] device hsr_slave_0 entered promiscuous mode
[  258.758890][ T5830] device hsr_slave_1 entered promiscuous mode
[  258.778568][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  258.799957][ T5830] Cannot create hsr debugfs directory
[  260.611576][ T5953] Config c/1 of g1 needs at least one function.
[  260.617987][ T5953] udc dummy_udc.0: failed to start g1: -22
[  260.623867][ T5953] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  260.631662][ T5953] UDC core: g1: couldn't find an available UDC or it's busy
[  260.663881][ T5950] loop7: detected capacity change from 0 to 2048
[  260.733184][ T5950] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  261.071362][ T4496] device hsr_slave_0 left promiscuous mode
[  262.182592][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  262.188930][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  262.923298][ T5961] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.388: bg 0: block 234: padding at end of block bitmap is not set
[  262.939711][ T5961] EXT4-fs (loop7): Remounting filesystem read-only
[  263.082492][ T4496] device hsr_slave_1 left promiscuous mode
[  263.160606][ T4496] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  263.202375][ T4496] batman_adv: batadv0: Removing interface: batadv_slave_0
[  263.306307][ T4496] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  263.340962][ T4496] batman_adv: batadv0: Removing interface: batadv_slave_1
[  263.417858][ T4496] device bridge_slave_1 left promiscuous mode
[  263.442081][ T4496] bridge0: port 2(bridge_slave_1) entered disabled state
[  263.513939][ T4496] device bridge_slave_0 left promiscuous mode
[  263.520186][ T4496] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.672500][ T4496] device hsr_slave_0 left promiscuous mode
[  264.747034][ T4496] device hsr_slave_1 left promiscuous mode
[  264.815557][ T4496] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  264.852408][ T4496] batman_adv: batadv0: Removing interface: batadv_slave_0
[  264.907543][ T4496] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  264.942447][ T4496] batman_adv: batadv0: Removing interface: batadv_slave_1
[  264.993534][ T4496] device bridge_slave_1 left promiscuous mode
[  264.999792][ T4496] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.152765][ T4496] device bridge_slave_0 left promiscuous mode
[  265.159025][ T4496] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.468524][ T4496] device veth1_macvtap left promiscuous mode
[  265.496617][ T4496] device veth0_macvtap left promiscuous mode
[  265.525160][ T4496] device veth1_vlan left promiscuous mode
[  265.531012][ T4496] device veth0_vlan left promiscuous mode
[  265.663544][ T4496] device veth1_macvtap left promiscuous mode
[  265.669650][ T4496] device veth0_macvtap left promiscuous mode
[  265.712665][ T4496] device veth1_vlan left promiscuous mode
[  265.718546][ T4496] device veth0_vlan left promiscuous mode
[  265.878223][ T5975] loop8: detected capacity change from 0 to 2048
[  265.947457][ T5975] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  266.003740][ T5975] UDF-fs: error (device loop8): udf_read_inode: (ino 1376) failed !bh
[  266.012098][ T5975] UDF-fs: error (device loop8): udf_fill_super: Error in udf_iget, block=64, partition=0
[  267.081417][ T5975] loop8: detected capacity change from 0 to 8
[  267.088179][ T5975] squashfs: Unknown parameter 'pcr'
[  268.309293][ T5978] loop5: detected capacity change from 0 to 64
[  268.436643][ T5978] bio_check_eod: 5 callbacks suppressed
[  268.436659][ T5978] syz.5.386: attempt to access beyond end of device
[  268.436659][ T5978] loop5: rw=2049, sector=159, nr_sectors = 1 limit=64
[  268.582939][ T5978] buffer_io_error: 5 callbacks suppressed
[  268.582954][ T5978] Buffer I/O error on dev loop5, logical block 159, lost async page write
[  268.686326][ T5978] syz.5.386: attempt to access beyond end of device
[  268.686326][ T5978] loop5: rw=2049, sector=160, nr_sectors = 1 limit=64
[  268.717684][ T5619] EXT4-fs (loop7): unmounting filesystem.
[  268.924394][ T5980] loop8: detected capacity change from 0 to 40427
[  268.937629][ T5980] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[  268.945659][ T5980] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  268.960450][ T5980] F2FS-fs (loop8): invalid crc value
[  269.006146][ T5978] Buffer I/O error on dev loop5, logical block 160, lost async page write
[  269.017334][ T5980] F2FS-fs (loop8): Found nat_bits in checkpoint
[  269.080349][ T5980] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  269.087684][ T5980] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  269.243736][ T5978] syz.5.386: attempt to access beyond end of device
[  269.243736][ T5978] loop5: rw=2049, sector=161, nr_sectors = 1 limit=64
[  270.602120][ T5978] Buffer I/O error on dev loop5, logical block 161, lost async page write
[  270.656192][ T5978] syz.5.386: attempt to access beyond end of device
[  270.656192][ T5978] loop5: rw=2049, sector=162, nr_sectors = 1 limit=64
[  270.728217][ T5978] Buffer I/O error on dev loop5, logical block 162, lost async page write
[  270.755622][ T5978] syz.5.386: attempt to access beyond end of device
[  270.755622][ T5978] loop5: rw=2049, sector=163, nr_sectors = 1 limit=64
[  270.806172][ T5978] Buffer I/O error on dev loop5, logical block 163, lost async page write
[  270.840264][ T5978] syz.5.386: attempt to access beyond end of device
[  270.840264][ T5978] loop5: rw=2049, sector=167, nr_sectors = 1 limit=64
[  270.885281][ T5978] Buffer I/O error on dev loop5, logical block 167, lost async page write
[  270.918896][ T5978] syz.5.386: attempt to access beyond end of device
[  270.918896][ T5978] loop5: rw=2049, sector=169, nr_sectors = 1 limit=64
[  270.966491][ T5978] Buffer I/O error on dev loop5, logical block 169, lost async page write
[  270.991320][ T5978] syz.5.386: attempt to access beyond end of device
[  270.991320][ T5978] loop5: rw=2049, sector=171, nr_sectors = 1 limit=64
[  271.067724][ T5978] Buffer I/O error on dev loop5, logical block 171, lost async page write
[  271.109205][ T5978] syz.5.386: attempt to access beyond end of device
[  271.109205][ T5978] loop5: rw=2049, sector=172, nr_sectors = 1 limit=64
[  271.168175][ T5978] Buffer I/O error on dev loop5, logical block 172, lost async page write
[  271.190347][ T5978] syz.5.386: attempt to access beyond end of device
[  271.190347][ T5978] loop5: rw=2049, sector=173, nr_sectors = 1 limit=64
[  271.235474][ T5978] Buffer I/O error on dev loop5, logical block 173, lost async page write
[  271.255978][ T4496] team0 (unregistering): Port device team_slave_1 removed
[  271.377853][ T4496] team0 (unregistering): Port device team_slave_0 removed
[  271.478766][ T4496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  271.821498][ T5993] loop5: detected capacity change from 0 to 64
[  271.845190][ T4496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  274.259332][ T4496] bond0 (unregistering): Released all slaves
[  276.590228][ T4496] team0 (unregistering): Port device team_slave_1 removed
[  276.704742][ T4496] team0 (unregistering): Port device team_slave_0 removed
[  276.816349][ T4496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  276.916400][ T4496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  278.697323][ T4496] bond0 (unregistering): Released all slaves
[  278.970095][ T5793] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  279.051817][ T5793] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  279.162785][ T5793] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  279.229094][ T5793] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  279.639536][ T6027] loop8: detected capacity change from 0 to 512
[  279.691464][ T6027] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  279.823020][ T6027] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  279.990109][ T6027] EXT4-fs (loop8): 1 truncate cleaned up
[  280.069690][ T6027] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  281.410645][ T5651] EXT4-fs (loop8): unmounting filesystem.
[  281.872695][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0
[  282.423411][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  282.634385][ T6049] loop8: detected capacity change from 0 to 40427
[  282.670399][ T6049] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[  282.678282][ T6049] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  282.693491][ T6049] F2FS-fs (loop8): invalid crc value
[  282.710125][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  282.727505][ T6049] F2FS-fs (loop8): Found nat_bits in checkpoint
[  282.781431][ T6049] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  282.788587][ T6049] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  282.938509][ T6054] loop5: detected capacity change from 0 to 64
[  284.486116][ T6054] bio_check_eod: 5 callbacks suppressed
[  284.486131][ T6054] syz.5.399: attempt to access beyond end of device
[  284.486131][ T6054] loop5: rw=2049, sector=159, nr_sectors = 1 limit=64
[  284.644865][ T5793] 8021q: adding VLAN 0 to HW filter on device team0
[  284.703916][ T6054] buffer_io_error: 5 callbacks suppressed
[  284.703929][ T6054] Buffer I/O error on dev loop5, logical block 159, lost async page write
[  284.745868][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  284.793046][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  284.863645][   T76] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.870824][   T76] bridge0: port 1(bridge_slave_0) entered forwarding state
[  284.905561][ T6054] syz.5.399: attempt to access beyond end of device
[  284.905561][ T6054] loop5: rw=2049, sector=160, nr_sectors = 1 limit=64
[  284.994057][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  285.021498][ T6054] Buffer I/O error on dev loop5, logical block 160, lost async page write
[  285.046734][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  285.098149][ T6054] syz.5.399: attempt to access beyond end of device
[  285.098149][ T6054] loop5: rw=2049, sector=161, nr_sectors = 1 limit=64
[  285.114254][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  285.164382][   T76] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.171573][   T76] bridge0: port 2(bridge_slave_1) entered forwarding state
[  285.223934][ T6054] Buffer I/O error on dev loop5, logical block 161, lost async page write
[  285.281842][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  285.324492][ T6054] syz.5.399: attempt to access beyond end of device
[  285.324492][ T6054] loop5: rw=2049, sector=162, nr_sectors = 1 limit=64
[  285.453113][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  285.582342][ T6054] Buffer I/O error on dev loop5, logical block 162, lost async page write
[  285.590983][ T6054] syz.5.399: attempt to access beyond end of device
[  285.590983][ T6054] loop5: rw=2049, sector=163, nr_sectors = 1 limit=64
[  285.675242][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  285.732869][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  285.792839][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  285.832310][ T6054] Buffer I/O error on dev loop5, logical block 163, lost async page write
[  285.840901][ T6054] syz.5.399: attempt to access beyond end of device
[  285.840901][ T6054] loop5: rw=2049, sector=167, nr_sectors = 1 limit=64
[  285.883149][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  285.936212][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  285.997525][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  286.045272][ T6054] Buffer I/O error on dev loop5, logical block 167, lost async page write
[  286.066702][ T5793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  286.124342][ T6054] syz.5.399: attempt to access beyond end of device
[  286.124342][ T6054] loop5: rw=2049, sector=169, nr_sectors = 1 limit=64
[  286.151833][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  286.190998][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  286.245610][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  286.302704][ T6054] Buffer I/O error on dev loop5, logical block 169, lost async page write
[  286.325842][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  286.368320][ T6054] syz.5.399: attempt to access beyond end of device
[  286.368320][ T6054] loop5: rw=2049, sector=171, nr_sectors = 1 limit=64
[  286.438584][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  286.533454][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  286.579519][ T6054] Buffer I/O error on dev loop5, logical block 171, lost async page write
[  286.612064][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  286.699739][ T6054] syz.5.399: attempt to access beyond end of device
[  286.699739][ T6054] loop5: rw=2049, sector=172, nr_sectors = 1 limit=64
[  286.736718][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  286.840641][ T6074] loop7: detected capacity change from 0 to 736
[  286.896036][ T6054] Buffer I/O error on dev loop5, logical block 172, lost async page write
[  287.029016][ T6054] syz.5.399: attempt to access beyond end of device
[  287.029016][ T6054] loop5: rw=2049, sector=173, nr_sectors = 1 limit=64
[  287.213294][ T6054] Buffer I/O error on dev loop5, logical block 173, lost async page write
[  287.298715][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[  287.444274][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  287.452110][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  287.530184][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[  287.565314][ T6079] netlink: 'syz.7.413': attribute type 12 has an invalid length.
[  287.627796][ T6079] netlink: 'syz.7.413': attribute type 29 has an invalid length.
[  287.674270][ T6079] netlink: 148 bytes leftover after parsing attributes in process `syz.7.413'.
[  287.726931][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  287.757917][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  287.799528][   T76] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.806726][   T76] bridge0: port 1(bridge_slave_0) entered forwarding state
[  287.910445][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  287.944583][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  287.975813][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  288.027186][   T76] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.034380][   T76] bridge0: port 2(bridge_slave_1) entered forwarding state
[  288.113348][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  288.185281][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0
[  288.234658][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  288.267935][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  288.316280][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  288.387158][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  288.447281][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  288.518494][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  288.570406][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  288.626231][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  288.696255][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  288.750062][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  288.819269][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  288.859583][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  288.902115][ T5830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  288.977923][ T6097] loop5: detected capacity change from 0 to 512
[  289.072146][ T6097] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  289.410067][ T6097] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  291.920667][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[  292.024779][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  292.072931][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  292.162792][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  292.170363][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  292.289793][ T5793] device veth0_vlan entered promiscuous mode
[  292.506188][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  292.789184][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  292.859439][ T5793] device veth1_vlan entered promiscuous mode
[  292.909223][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  292.944270][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  293.009166][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  293.067465][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  293.250171][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  293.314468][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  293.371008][ T5793] device veth0_macvtap entered promiscuous mode
[  293.424950][ T5793] device veth1_macvtap entered promiscuous mode
[  293.571826][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.661336][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.725549][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.786627][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.873109][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.976381][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.046452][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0
[  294.091550][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  294.176523][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  294.236544][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  294.314694][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  294.334737][ T6165] 9pnet_fd: Insufficient options for proto=fd
[  294.406702][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  294.470534][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.571578][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  294.672258][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.732245][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  294.960919][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.276615][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1
[  295.337574][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  295.381493][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  295.435479][ T5793] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  295.478911][ T5793] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  295.528326][ T5793] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  295.697975][ T5793] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  295.823224][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  295.873274][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  296.088344][ T5830] device veth0_vlan entered promiscuous mode
[  296.143279][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  296.182562][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  296.262078][ T5830] device veth1_vlan entered promiscuous mode
[  296.317353][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  296.376421][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  296.460907][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  296.561391][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  296.600942][ T5830] device veth0_macvtap entered promiscuous mode
[  296.694729][ T5337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  296.752592][ T5337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  296.772020][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  296.811520][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  296.879693][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  296.933931][ T5830] device veth1_macvtap entered promiscuous mode
[  296.969395][ T4334] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  296.986034][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  297.144922][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  297.223386][ T4334] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  297.252722][ T5337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.296949][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  297.316379][ T5337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.355895][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.407421][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  297.470598][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.537015][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  297.556059][    T7] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  297.620487][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.667293][ T6207] ceph: No mds server is up or the cluster is laggy
[  297.702064][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  297.744192][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.824449][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[  297.897800][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  297.927039][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  298.006535][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  298.068125][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  298.143009][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  298.195096][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  298.420786][ T6232] loop8: detected capacity change from 0 to 40427
[  298.450163][ T6232] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[  298.458394][ T6232] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  298.470896][ T6232] F2FS-fs (loop8): invalid crc value
[  298.487233][ T6232] F2FS-fs (loop8): Found nat_bits in checkpoint
[  298.526121][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  298.526582][ T6232] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  298.543946][ T6232] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  298.702080][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  300.067329][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.123547][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  300.183712][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.272090][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[  300.332149][ T6226] tipc: Started in network mode
[  300.351977][ T6226] tipc: Node identity 1001001, cluster identity 4711
[  300.399654][ T6226] tipc: Node number set to 16781313
[  300.461209][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  300.506333][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  300.580015][ T5830] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  300.646798][ T5830] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  300.716514][ T5830] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  300.778201][ T5830] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  300.856859][ T6228] tipc: New replicast peer: 127.0.0.1
[  300.882040][ T6228] tipc: Enabled bearer <udp:syz0>, priority 10
[  301.481621][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  301.491224][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  301.500086][ T4279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  301.512319][ T4279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  301.519681][ T4279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  301.527168][ T4279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  301.940998][   T11] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.093524][ T4496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  302.101390][ T4496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  302.300052][   T11] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.350373][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  302.461037][   T11] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.577436][ T4496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  302.617472][ T4496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  302.631596][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.8.459'.
[  302.654729][   T11] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.689304][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.8.459'.
[  302.761501][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  303.311450][ T6274] loop8: detected capacity change from 0 to 64
[  303.402408][ T6256] NFSD: attempt to initialize umh client tracking in a container ignored.
[  303.463926][ T6256] NFSD: attempt to initialize legacy client tracking in a container ignored.
[  303.484312][ T6274] bio_check_eod: 5 callbacks suppressed
[  303.484327][ T6274] syz.8.462: attempt to access beyond end of device
[  303.484327][ T6274] loop8: rw=2049, sector=159, nr_sectors = 1 limit=64
[  303.550298][ T6246] chnl_net:caif_netlink_parms(): no params data found
[  303.574221][ T4279] Bluetooth: hci4: command 0x0409 tx timeout
[  303.587247][ T6256] NFSD: Unable to initialize client recovery tracking! (-22)
[  303.637886][ T6256] NFSD: starting 90-second grace period (net f00003cc)
[  303.679588][ T6274] buffer_io_error: 5 callbacks suppressed
[  303.679601][ T6274] Buffer I/O error on dev loop8, logical block 159, lost async page write
[  303.842937][ T6274] syz.8.462: attempt to access beyond end of device
[  303.842937][ T6274] loop8: rw=2049, sector=160, nr_sectors = 1 limit=64
[  303.926531][ T6274] Buffer I/O error on dev loop8, logical block 160, lost async page write
[  304.003095][ T6274] syz.8.462: attempt to access beyond end of device
[  304.003095][ T6274] loop8: rw=2049, sector=161, nr_sectors = 1 limit=64
[  304.111816][ T6274] Buffer I/O error on dev loop8, logical block 161, lost async page write
[  304.193710][ T6274] syz.8.462: attempt to access beyond end of device
[  304.193710][ T6274] loop8: rw=2049, sector=162, nr_sectors = 1 limit=64
[  304.309111][ T6274] Buffer I/O error on dev loop8, logical block 162, lost async page write
[  304.370515][ T6274] syz.8.462: attempt to access beyond end of device
[  304.370515][ T6274] loop8: rw=2049, sector=163, nr_sectors = 1 limit=64
[  304.451059][ T6246] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.463256][ T6274] Buffer I/O error on dev loop8, logical block 163, lost async page write
[  304.500060][ T6246] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.517623][ T6274] syz.8.462: attempt to access beyond end of device
[  304.517623][ T6274] loop8: rw=2049, sector=167, nr_sectors = 1 limit=64
[  304.578995][ T6246] device bridge_slave_0 entered promiscuous mode
[  304.630160][ T6274] Buffer I/O error on dev loop8, logical block 167, lost async page write
[  304.694591][ T6274] syz.8.462: attempt to access beyond end of device
[  304.694591][ T6274] loop8: rw=2049, sector=169, nr_sectors = 1 limit=64
[  304.737048][ T6246] bridge0: port 2(bridge_slave_1) entered blocking state
[  304.768970][ T6246] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.832402][ T6274] Buffer I/O error on dev loop8, logical block 169, lost async page write
[  304.841078][ T6274] syz.8.462: attempt to access beyond end of device
[  304.841078][ T6274] loop8: rw=2049, sector=171, nr_sectors = 1 limit=64
[  304.859751][ T6246] device bridge_slave_1 entered promiscuous mode
[  305.037029][ T6274] Buffer I/O error on dev loop8, logical block 171, lost async page write
[  305.129207][ T6274] syz.8.462: attempt to access beyond end of device
[  305.129207][ T6274] loop8: rw=2049, sector=172, nr_sectors = 1 limit=64
[  305.289576][ T6274] Buffer I/O error on dev loop8, logical block 172, lost async page write
[  305.366465][ T6246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  305.391353][ T6274] syz.8.462: attempt to access beyond end of device
[  305.391353][ T6274] loop8: rw=2049, sector=173, nr_sectors = 1 limit=64
[  305.501128][ T6274] Buffer I/O error on dev loop8, logical block 173, lost async page write
[  305.551750][ T6246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  305.564040][ T6298] sctp: failed to load transform for md5: -2
[  305.652389][ T4279] Bluetooth: hci4: command 0x041b tx timeout
[  305.925056][ T6319] loop4: detected capacity change from 0 to 256
[  306.221750][ T6321] loop5: detected capacity change from 0 to 40427
[  306.247771][ T6321] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  306.255806][ T6321] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  306.270954][ T6321] F2FS-fs (loop5): invalid crc value
[  306.321318][ T6321] F2FS-fs (loop5): Found nat_bits in checkpoint
[  306.392065][ T6321] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  306.399785][ T6321] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  306.584532][ T6246] team0: Port device team_slave_0 added
[  307.878462][ T4279] Bluetooth: hci4: command 0x040f tx timeout
[  308.053639][ T6246] team0: Port device team_slave_1 added
[  308.646075][ T6319] bio_check_eod: 5 callbacks suppressed
[  308.646089][ T6319] syz.4.469: attempt to access beyond end of device
[  308.646089][ T6319] loop4: rw=0, sector=272, nr_sectors = 4 limit=256
[  308.755097][   T47] kworker/u4:3: attempt to access beyond end of device
[  308.755097][   T47] loop4: rw=1, sector=256, nr_sectors = 288 limit=256
[  308.972901][   T47] kworker/u4:3: attempt to access beyond end of device
[  308.972901][   T47] loop4: rw=1, sector=608, nr_sectors = 416 limit=256
[  309.397616][   T47] kworker/u4:3: attempt to access beyond end of device
[  309.397616][   T47] loop4: rw=1, sector=1056, nr_sectors = 26128 limit=256
[  309.462643][ T6246] batman_adv: batadv0: Adding interface: batadv_slave_0
[  309.516374][ T6246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  309.732617][   T47] kworker/u4:3: attempt to access beyond end of device
[  309.732617][   T47] loop4: rw=1, sector=27184, nr_sectors = 5648 limit=256
[  309.765524][ T6246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  309.893353][ T4279] Bluetooth: hci4: command 0x0419 tx timeout
[  310.175979][ T6246] batman_adv: batadv0: Adding interface: batadv_slave_1
[  310.217232][ T6246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  310.396542][ T6246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  310.432510][ T6337] NFSD: attempt to initialize umh client tracking in a container ignored.
[  310.485319][ T6337] NFSD: attempt to initialize legacy client tracking in a container ignored.
[  310.562471][ T6337] NFSD: Unable to initialize client recovery tracking! (-22)
[  310.569910][ T6337] NFSD: starting 90-second grace period (net f000080f)
[  310.649134][   T11] device hsr_slave_0 left promiscuous mode
[  310.708449][ T6345] loop7: detected capacity change from 0 to 32768
[  310.792535][   T11] device hsr_slave_1 left promiscuous mode
[  310.856943][ T6345] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  310.894332][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  310.901888][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  310.992858][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  311.077769][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  311.181147][ T6359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.473'.
[  311.234969][   T11] device bridge_slave_1 left promiscuous mode
[  311.241227][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.319578][ T5619] ocfs2: Unmounting device (7,7) on (node local)
[  311.391754][   T11] device bridge_slave_0 left promiscuous mode
[  311.428304][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.501071][  T127] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  311.550539][   T11] device veth1_macvtap left promiscuous mode
[  311.575238][   T11] device veth0_macvtap left promiscuous mode
[  311.589554][   T11] device veth1_vlan left promiscuous mode
[  311.608835][   T11] device veth0_vlan left promiscuous mode
[  311.788688][  T127] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER)
[  312.280465][ T6363] ceph: No mds server is up or the cluster is laggy
[  312.339304][  T127] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  312.660692][ T6379] loop8: detected capacity change from 0 to 64
[  312.744518][ T6379] syz.8.480: attempt to access beyond end of device
[  312.744518][ T6379] loop8: rw=2049, sector=159, nr_sectors = 1 limit=64
[  312.788282][ T6379] buffer_io_error: 5 callbacks suppressed
[  312.788297][ T6379] Buffer I/O error on dev loop8, logical block 159, lost async page write
[  312.817795][ T6379] syz.8.480: attempt to access beyond end of device
[  312.817795][ T6379] loop8: rw=2049, sector=160, nr_sectors = 1 limit=64
[  312.850548][ T6379] Buffer I/O error on dev loop8, logical block 160, lost async page write
[  312.875202][ T6379] syz.8.480: attempt to access beyond end of device
[  312.875202][ T6379] loop8: rw=2049, sector=161, nr_sectors = 1 limit=64
[  312.917865][ T6379] Buffer I/O error on dev loop8, logical block 161, lost async page write
[  312.935334][ T6379] syz.8.480: attempt to access beyond end of device
[  312.935334][ T6379] loop8: rw=2049, sector=162, nr_sectors = 1 limit=64
[  312.959309][   T11] team0 (unregistering): Port device team_slave_1 removed
[  312.969449][ T6379] Buffer I/O error on dev loop8, logical block 162, lost async page write
[  312.996158][ T6379] syz.8.480: attempt to access beyond end of device
[  312.996158][ T6379] loop8: rw=2049, sector=163, nr_sectors = 1 limit=64
[  313.038515][ T6379] Buffer I/O error on dev loop8, logical block 163, lost async page write
[  313.067812][ T6379] Buffer I/O error on dev loop8, logical block 167, lost async page write
[  313.078483][   T11] team0 (unregistering): Port device team_slave_0 removed
[  313.090342][ T6379] Buffer I/O error on dev loop8, logical block 169, lost async page write
[  313.126843][ T6379] Buffer I/O error on dev loop8, logical block 171, lost async page write
[  313.148637][ T6379] Buffer I/O error on dev loop8, logical block 172, lost async page write
[  313.177155][ T6379] Buffer I/O error on dev loop8, logical block 173, lost async page write
[  313.208884][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  313.380887][ T4320] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  313.396424][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  313.664275][ T4320] libceph: mon0 (2)127.0.0.1:6789 socket closed (con state V2_BANNER_PREFIX)
[  313.890267][   T11] bond0 (unregistering): Released all slaves
[  314.203491][ T6381] ceph: No mds server is up or the cluster is laggy
[  314.242946][ T4353] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  314.250297][ T6357] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  314.343570][ T6246] device hsr_slave_0 entered promiscuous mode
[  314.458558][ T6246] device hsr_slave_1 entered promiscuous mode
[  314.894006][ T6394] svc: failed to register nfsdv3 RPC service (errno 111).
[  315.002673][ T6394] svc: failed to register nfsaclv3 RPC service (errno 111).
[  315.263205][ T6397] svc: failed to register nfsdv3 RPC service (errno 111).
[  315.315486][ T6397] svc: failed to register nfsaclv3 RPC service (errno 111).
[  317.010547][ T6246] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  317.053742][ T6246] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  317.106982][ T6246] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  317.133788][ T6246] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  317.400591][ T6246] 8021q: adding VLAN 0 to HW filter on device bond0
[  317.461134][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  317.489898][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  317.534811][ T6246] 8021q: adding VLAN 0 to HW filter on device team0
[  317.585376][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  317.620871][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  317.661803][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.669001][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  317.762734][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  317.798671][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  317.812558][ T6402] NFSD: attempt to initialize umh client tracking in a container ignored.
[  317.855483][ T6402] NFSD: attempt to initialize legacy client tracking in a container ignored.
[  317.870422][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  317.952382][ T6402] NFSD: Unable to initialize client recovery tracking! (-22)
[  317.959814][ T6402] NFSD: starting 90-second grace period (net f00003cc)
[  317.973275][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.980396][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  318.051085][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  318.100051][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  318.160464][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  318.277660][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  318.399091][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  318.448148][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  319.555216][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  319.624118][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  319.700154][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  319.782044][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  319.853735][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  319.936243][ T6442] sctp: failed to load transform for md5: -4
[  319.984926][ T6246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  322.581285][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  322.609028][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  322.676853][ T6246] 8021q: adding VLAN 0 to HW filter on device batadv0
[  322.695100][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  322.701455][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  324.395902][ T6494] NFSD: attempt to initialize umh client tracking in a container ignored.
[  324.440658][ T6494] NFSD: attempt to initialize legacy client tracking in a container ignored.
[  324.487208][ T6494] NFSD: Unable to initialize client recovery tracking! (-22)
[  324.499287][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  324.525141][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  324.540455][ T6494] NFSD: starting 90-second grace period (net f00003cc)
[  324.608826][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  324.664242][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  324.720876][ T6246] device veth0_vlan entered promiscuous mode
[  324.761007][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  324.853129][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  324.899394][ T6246] device veth1_vlan entered promiscuous mode
[  325.011042][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  325.033747][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  325.060309][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  325.091311][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  325.127297][ T6246] device veth0_macvtap entered promiscuous mode
[  325.157781][ T6246] device veth1_macvtap entered promiscuous mode
[  325.231274][ T6246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.285853][ T6246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.312252][ T6246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.378895][ T6246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.420027][ T6246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.463816][ T6246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.499889][ T6246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.531991][ T6246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.566930][ T6246] batman_adv: batadv0: Interface activated: batadv_slave_0
[  325.599765][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  325.626954][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  325.661032][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  325.715465][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  325.756911][ T6246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.787510][ T6246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.809712][ T6540] loop5: detected capacity change from 0 to 64
[  325.823669][ T6246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.876049][ T6246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.931829][ T6246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.949064][ T6540] bio_check_eod: 10 callbacks suppressed
[  325.949079][ T6540] syz.5.512: attempt to access beyond end of device
[  325.949079][ T6540] loop5: rw=2049, sector=159, nr_sectors = 1 limit=64
[  325.988900][ T6246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  326.002397][ T6522] NFSD: attempt to initialize umh client tracking in a container ignored.
[  326.022424][ T6522] NFSD: attempt to initialize legacy client tracking in a container ignored.
[  326.031259][ T6522] NFSD: Unable to initialize client recovery tracking! (-22)
[  326.055697][ T6246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  326.075177][ T6246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  326.086159][ T6540] buffer_io_error: 5 callbacks suppressed
[  326.086170][ T6540] Buffer I/O error on dev loop5, logical block 159, lost async page write
[  326.107261][ T6522] NFSD: starting 90-second grace period (net f00003f9)
[  326.134465][ T6246] batman_adv: batadv0: Interface activated: batadv_slave_1
[  326.145053][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  326.198487][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  326.256314][ T6540] syz.5.512: attempt to access beyond end of device
[  326.256314][ T6540] loop5: rw=2049, sector=160, nr_sectors = 1 limit=64
[  326.330175][ T6246] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  326.382386][ T6246] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  326.415523][ T6540] Buffer I/O error on dev loop5, logical block 160, lost async page write
[  326.450358][ T6246] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  326.493991][ T6540] syz.5.512: attempt to access beyond end of device
[  326.493991][ T6540] loop5: rw=2049, sector=161, nr_sectors = 1 limit=64
[  326.511187][ T6246] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  326.617997][ T6540] Buffer I/O error on dev loop5, logical block 161, lost async page write
[  326.729194][ T6540] syz.5.512: attempt to access beyond end of device
[  326.729194][ T6540] loop5: rw=2049, sector=162, nr_sectors = 1 limit=64
[  326.790238][   T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.825680][   T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.838168][ T6540] Buffer I/O error on dev loop5, logical block 162, lost async page write
[  326.906533][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  326.924150][ T6540] syz.5.512: attempt to access beyond end of device
[  326.924150][ T6540] loop5: rw=2049, sector=163, nr_sectors = 1 limit=64
[  326.956548][ T4429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  327.000306][ T4429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  327.045504][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  327.056676][ T6540] Buffer I/O error on dev loop5, logical block 163, lost async page write
[  327.066706][ T6556] lo speed is unknown, defaulting to 1000
[  327.121220][ T6556] lo speed is unknown, defaulting to 1000
[  327.128461][ T6540] syz.5.512: attempt to access beyond end of device
[  327.128461][ T6540] loop5: rw=2049, sector=167, nr_sectors = 1 limit=64
[  327.170833][ T6556] lo speed is unknown, defaulting to 1000
[  327.250073][ T6540] Buffer I/O error on dev loop5, logical block 167, lost async page write
[  327.321133][ T6540] syz.5.512: attempt to access beyond end of device
[  327.321133][ T6540] loop5: rw=2049, sector=169, nr_sectors = 1 limit=64
[  327.426188][ T6540] Buffer I/O error on dev loop5, logical block 169, lost async page write
[  327.507024][ T6540] syz.5.512: attempt to access beyond end of device
[  327.507024][ T6540] loop5: rw=2049, sector=171, nr_sectors = 1 limit=64
[  327.609937][ T6540] Buffer I/O error on dev loop5, logical block 171, lost async page write
[  327.630922][ T5879] lo speed is unknown, defaulting to 1000
[  327.647126][ T6556] infiniband syz0: set active
[  327.678375][ T6556] infiniband syz0: added lo
[  327.686499][ T6540] syz.5.512: attempt to access beyond end of device
[  327.686499][ T6540] loop5: rw=2049, sector=172, nr_sectors = 1 limit=64
[  327.742372][ T6549] NFSD: attempt to initialize umh client tracking in a container ignored.
[  327.796374][ T6549] NFSD: attempt to initialize legacy client tracking in a container ignored.
[  327.827127][ T6540] Buffer I/O error on dev loop5, logical block 172, lost async page write
[  327.847493][ T6549] NFSD: Unable to initialize client recovery tracking! (-22)
[  327.904361][ T6549] NFSD: starting 90-second grace period (net f000080f)
[  328.877135][ T6540] syz.5.512: attempt to access beyond end of device
[  328.877135][ T6540] loop5: rw=2049, sector=173, nr_sectors = 1 limit=64
[  329.037906][ T6549] ------------[ cut here ]------------
[  329.043484][ T6549] kernel BUG at net/sunrpc/svc.c:578!
[  329.081045][ T6556] RDS/IB: syz0: added
[  329.086139][ T6549] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  329.092263][ T6549] CPU: 0 PID: 6549 Comm: syz.8.511 Not tainted syzkaller #0
[  329.099584][ T6549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  329.109663][ T6549] RIP: 0010:svc_destroy+0x184/0x190
[  329.114906][ T6549] Code: 5f 5d e9 2f be 64 f8 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 24 ff ff ff 4c 89 ff e8 36 46 7d f8 e9 17 ff ff ff e8 7c 19 2c f8 <0f> 0b e8 75 19 2c f8 0f 0b 0f 1f 00 55 41 57 41 56 41 55 41 54 53
[  329.134554][ T6549] RSP: 0018:ffffc90003b1fae8 EFLAGS: 00010287
[  329.140638][ T6549] RAX: ffffffff89561a74 RBX: ffff888078a79850 RCX: 0000000000080000
[  329.148624][ T6549] RDX: ffffc9000cd09000 RSI: 0000000000014621 RDI: 0000000000014622
[  329.156610][ T6549] RBP: 0000000000000001 R08: ffffffff90b0f3d7 R09: 1ffffffff2161e7a
[  329.164600][ T6549] R10: dffffc0000000000 R11: fffffbfff2161e7b R12: dffffc0000000000
[  329.172619][ T6549] R13: ffff88807d7b8000 R14: ffff888078a79868 R15: ffff888078a79800
[  329.180614][ T6549] FS:  00007f0d582746c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  329.189556][ T6549] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  329.196153][ T6549] CR2: 00007fe1228c6440 CR3: 0000000056eee000 CR4: 00000000003506f0
[  329.204146][ T6549] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  329.212126][ T6549] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  329.220118][ T6549] Call Trace:
[  329.223407][ T6549]  <TASK>
[  329.226348][ T6549]  nfsd_svc+0x75e/0xab0
[  329.230543][ T6549]  write_threads+0x2ea/0x350
[  329.235283][ T6549]  ? write_unlock_fs+0x1f0/0x1f0
[  329.240242][ T6549]  ? __might_fault+0xc2/0x120
[  329.244956][ T6549]  ? _copy_from_user+0x10b/0x170
[  329.249909][ T6549]  ? simple_transaction_get+0x119/0x140
[  329.255512][ T6549]  nfsctl_transaction_write+0x105/0x150
[  329.261111][ T6549]  ? nfsctl_transaction_read+0x1b0/0x1b0
[  329.266776][ T6549]  vfs_write+0x2dc/0x9a0
[  329.271088][ T6549]  ? file_end_write+0x250/0x250
[  329.275975][ T6549]  ? __fget_files+0x28/0x460
[  329.280592][ T6549]  ? __fget_files+0x3fc/0x460
[  329.285305][ T6549]  ? __fdget_pos+0x2ae/0x360
[  329.289921][ T6549]  ? ksys_write+0x70/0x260
[  329.294375][ T6549]  ksys_write+0x14d/0x260
[  329.298735][ T6549]  ? __ia32_sys_read+0x80/0x80
[  329.303612][ T6549]  ? lockdep_hardirqs_on+0x94/0x140
[  329.308833][ T6549]  do_syscall_64+0x4c/0xa0
[  329.313265][ T6549]  ? clear_bhb_loop+0x60/0xb0
[  329.317977][ T6549]  ? clear_bhb_loop+0x60/0xb0
[  329.322667][ T6549]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  329.328574][ T6549] RIP: 0033:0x7f0d5739de99
[  329.333036][ T6549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  329.352653][ T6549] RSP: 002b:00007f0d58274028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  329.361121][ T6549] RAX: ffffffffffffffda RBX: 00007f0d57625fa0 RCX: 00007f0d5739de99
[  329.369116][ T6549] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000003
[  329.377111][ T6549] RBP: 00007f0d57433eaf R08: 0000000000000000 R09: 0000000000000000
[  329.385107][ T6549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  329.393099][ T6549] R13: 00007f0d57626038 R14: 00007f0d57625fa0 R15: 00007fffe2e79da8
[  329.401097][ T6549]  </TASK>
[  329.404134][ T6549] Modules linked in:
[  329.419106][ T6540] Buffer I/O error on dev loop5, logical block 173, lost async page write
[  329.431255][ T6556] smc: adding ib device syz0 with port count 1
[  329.449611][ T6556] smc:    ib device syz0 port 1 has pnetid 
[  329.473731][ T4334] lo speed is unknown, defaulting to 1000
[  329.489949][ T6556] lo speed is unknown, defaulting to 1000
[  329.740337][ T6556] lo speed is unknown, defaulting to 1000
[  329.971205][ T6556] lo speed is unknown, defaulting to 1000
[  330.209968][ T6556] lo speed is unknown, defaulting to 1000
[  330.226508][ T6583] loop9: detected capacity change from 0 to 128
[  330.260073][ T6583] FAT-fs (loop9): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1)
[  330.541446][ T6556] lo speed is unknown, defaulting to 1000
[  330.635764][ T6549] ---[ end trace 0000000000000000 ]---
[  330.655991][ T6549] RIP: 0010:svc_destroy+0x184/0x190
[  330.674473][ T6549] Code: 5f 5d e9 2f be 64 f8 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 24 ff ff ff 4c 89 ff e8 36 46 7d f8 e9 17 ff ff ff e8 7c 19 2c f8 <0f> 0b e8 75 19 2c f8 0f 0b 0f 1f 00 55 41 57 41 56 41 55 41 54 53
[  330.707897][ T5175] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.785895][ T5175] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.805202][ T6549] RSP: 0018:ffffc90003b1fae8 EFLAGS: 00010287
[  330.842138][ T6549] RAX: ffffffff89561a74 RBX: ffff888078a79850 RCX: 0000000000080000
[  330.875902][ T6549] RDX: ffffc9000cd09000 RSI: 0000000000014621 RDI: 0000000000014622
[  330.888713][ T5175] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.918035][ T6549] RBP: 0000000000000001 R08: ffffffff90b0f3d7 R09: 1ffffffff2161e7a
[  330.949563][ T6549] R10: dffffc0000000000 R11: fffffbfff2161e7b R12: dffffc0000000000
[  330.965522][ T5175] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.002240][ T6549] R13: ffff88807d7b8000 R14: ffff888078a79868 R15: ffff888078a79800
[  331.050695][ T6549] FS:  00007f0d582746c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  331.119533][ T6549] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  331.164258][ T6549] CR2: 0000563e67cf3000 CR3: 0000000056eee000 CR4: 00000000003506f0
[  331.207360][ T6549] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  331.251303][ T6549] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  331.302425][ T6549] Kernel panic - not syncing: Fatal exception
[  331.308622][ T6549] Kernel Offset: disabled
[  331.312957][ T6549] Rebooting in 86400 seconds..