last executing test programs:

3m4.79898223s ago: executing program 32 (id=20):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0xe4)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0xa, 0x3, 0x2, 0x2, 0x0, 0x70bd25, 0x25dfdbfe}, 0x10}}, 0x0)

2m33.851856844s ago: executing program 33 (id=119):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x20341, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040))
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0xfffffffa, 0x407, 0x8, 0x8010041, 0x80, "0baa301fa951e8a4603c811200", 0x81ed, 0xfffffff5})
writev(r0, &(0x7f0000000640)=[{&(0x7f0000000140)="d0", 0x1}], 0x1)
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x812)
r2 = dup(r1)
read$FUSE(r2, &(0x7f0000001b80)={0x2020}, 0x2020)

1m59.274922447s ago: executing program 34 (id=394):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.empty_time\x00', 0x26e1, 0x0)
close(0x3)
r1 = socket$inet_tcp(0x2, 0x1, 0x6)
setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8)
sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0)
connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)

1m45.674347458s ago: executing program 2 (id=480):
r0 = fanotify_init(0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r2, &(0x7f00000006c0)={&(0x7f0000000700)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m45.413158355s ago: executing program 2 (id=485):
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000240)='proc\x00', 0x1fd)
mount(0x0, &(0x7f00000002c0)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000340)='./proc/fs/nfsd\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0xe9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000740)='./proc\x00', 0x0, 0x4000, 0x0)

1m45.206476017s ago: executing program 2 (id=487):
sched_setscheduler(0x0, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys_sec\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./sys_sec\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0)
read(r0, &(0x7f0000000280)=""/9, 0xfffffd87)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x9, 0x15, 0x8, 0x40, 0x42, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980), &(0x7f00000009c0), 0x1000, r1}, 0x38)

1m44.294108062s ago: executing program 2 (id=496):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x841e, &(0x7f0000000c00)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000c40)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000015c0)='./sys\x00', 0x1ff)
syz_mount_image$vfat(&(0x7f0000001b40), &(0x7f0000001b80)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000001bc0))
mount$overlay(0x0, &(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40), 0x4008, &(0x7f0000001c80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000001cc0)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001d00)='./sys\x00', 0x188100, 0x85)
lseek(r0, 0x80000000, 0x0)

1m43.434904542s ago: executing program 2 (id=500):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r0, 0x5452, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mkdir(&(0x7f0000000340)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000004c0)='./config\x00', &(0x7f0000000500)='configfs\x00', 0x0, 0x0)
symlink(&(0x7f0000000540)='./config/usb_gadget/g1\x00', &(0x7f0000000580)='./config/usb_gadget/g1/os_desc/c.1\x00')

1m42.079664804s ago: executing program 2 (id=505):
r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x14, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x18, &(0x7f00000005c0)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000006c0)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

1m41.957316696s ago: executing program 35 (id=505):
r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x14, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x18, &(0x7f00000005c0)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000006c0)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

1m39.896615852s ago: executing program 5 (id=520):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b0001000000000904"], 0x0)
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0)
close(0x3)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0)

1m37.915642188s ago: executing program 5 (id=531):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000180)=""/68, 0x0, 0x60000})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000380)=0x1)
ioctl$XFS_IOC_GETVERSION(r0, 0x4008af13, &(0x7f00000003c0))

1m37.505914301s ago: executing program 5 (id=533):
unshare(0x22020600)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000340)="7d7a68e2", 0x4}], 0x1, 0x0, 0x0, 0x4004844}], 0x1, 0x48840)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000002c0))

1m37.266232126s ago: executing program 5 (id=536):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000002b00)={[{@fat=@showexec}, {@shortname_mixed}, {@utf8no}, {@utf8no}, {@uni_xlate}, {@utf8}, {@utf8}, {@utf8}, {@shortname_winnt}, {@fat=@sys_immutable}, {@fat=@flush}, {@shortname_winnt}, {@numtail}]}, 0x0, 0x2b2, &(0x7f0000002f40)="$eJzs3MFr024YwPFn7bZ2HVt7GD/4CeKDXvQStvoXFNlALChzFfUgZC7V0tiUpFYq4nbz6t8xPHpSUP+BXbx5Fy9DELzsIEbWJlvXRVenM936/cDIu/fJk7zhTcaTwN7Nm88fVMueUTYbkkirJETWZEskt90KjATbRLs9Lt3W5MLk1w+nr9+6faVQLM4vqi4Uli7mVXX6zJtHT16cfdeYvPFy+nVKNnJ3Nr/kP278t/H/5vel8OiOiKnLjtMwl21LVype1VC9ZlumZ2ml5lluQ011w3jZdur1lpq1lalM3bU8T81aS6tWSxuONtyWmvfMSk0Nw9CpjAyb5G9nlNYXF83CkQwGcZiI6nTdgpmMDJbW/8WgAADAYImr/r9f8bTiac3Zru9/Uf8npDt+QP0vMtT1/2HVfx6KrCdxvGzX/5ng+d2L+h8AAAAAAAAAAAAAAAAAAAAAgONgy/ezvu9nw234kxKRtIiEv8c9ThwN5n+4df3jXlrEftYsNUudbSdeKEtFbLFkdkzkW/t+CHTaC5eL87PalpO39mqQv9osJSUV5ody0flznXztzl+VMcl0nz8vWZmJzs9H5DdL43L+nJ8KzmyJIVl5f1ccsWWlfV/v5j+dU710tdiTP9HeDwAAAACAk8DQHfve39txQ8NlQ3rinc7d7wOSPeD7QM/79aicGo3vugEAAAAAGCbeuFRN27Zcr/X4pDfCxWz/ygFF4r6cdL87j4pI0PNqUOain0ZCRHpDY/t6ohvJP5vlzyJ7n4uZ2Kf70A0/uXOvfnrYeQL6SY/zrxIAAACAoxAW/SNxDwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCHW7ypi4f6HWYSs63TJeK4SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAw/AgAA//9crBNs")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020)

1m36.362225441s ago: executing program 5 (id=540):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
r3 = socket(0x11, 0x2, 0x0)
bind$packet(r3, &(0x7f0000000500)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @multicast}, 0x14)
writev(r0, &(0x7f0000000a00)=[{&(0x7f0000000780)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff060000fe010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)

1m35.637252087s ago: executing program 5 (id=547):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10)
sendto(r0, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0)

1m35.464325314s ago: executing program 36 (id=547):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10)
sendto(r0, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0)

1m26.121883731s ago: executing program 7 (id=588):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xa, 0x4, 0x4, 0x7, 0x0, 0x1, 0xe92}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x16, 0x11, &(0x7f0000000cc0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000e40)='\x00'/14, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m25.08101469s ago: executing program 7 (id=591):
syz_mount_image$reiserfs(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x8488, &(0x7f0000000380), 0xfd, 0x10fd, &(0x7f00000003c0)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=")
r0 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file1\x00', 0x42041, 0x12c)
write$P9_RREADLINK(r0, &(0x7f00000015c0)={0x10, 0x17, 0x1, {0x7, './file1'}}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001500)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r1, 0x6000809)
pwrite64(r0, &(0x7f0000001540)='\"', 0x1, 0xe7c)
close(r0)

1m24.488401932s ago: executing program 7 (id=594):
mkdir(&(0x7f0000000140)='./file0\x00', 0x97)
mkdir(&(0x7f0000000180)='./file1\x00', 0x13b)
mkdir(&(0x7f00000001c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000300)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
fstat(r0, &(0x7f0000000440))

1m23.996697903s ago: executing program 7 (id=598):
socket$inet6(0xa, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000080)={[{@inlinecrypt}, {@debug}, {@usrquota}, {@lazytime}]}, 0x1, 0x50f, &(0x7f0000000fc0)="$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")
creat(&(0x7f00000000c0)='./file1\x00', 0x31)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e20, 0x0, 0x4e24, 0x80, 0x2, 0xa0, 0xa0, 0x29}, {0x104, 0x5, 0x3, 0x9, 0x0, 0x2000002, 0x9, 0x4}, {0x401, 0x5, 0x6, 0x2}, 0x0, 0xfffffffe, 0x2, 0x0, 0x2, 0x3}, {{@in6=@remote, 0x4d4, 0x32}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3505, 0x0, 0x1, 0x9, 0x8, 0x0, 0x6}}, 0xe8)
r0 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x8210, 0x2, 0x0, 0x42}, &(0x7f00000000c0), &(0x7f0000011000), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20)

1m23.273404199s ago: executing program 7 (id=601):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
io_setup(0xd, &(0x7f0000000040)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x8001, r1, 0x0}])
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

1m22.555685143s ago: executing program 7 (id=604):
syz_mount_image$hfs(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="71756965742c636f6465706167653d63703836302c696f636861727365743d63703836312c00808fead042bd35dc78f7f06333a5e7165b8271e41aee85e59cbb6c2df3d4e4c16b06c73f2e3b348a7fba46e286378a15ee516bac8d4813c9c3d9cee1ddb95d1bbcf504e065b3749a1cbd841e685a558598cf0db10b55885946e678d0a71877037a090000000700848879ef1604cadc1faca3aa22a576750d559c4e124d4cb7293e7393b77286a03d342382e84d6d3c29ab95cc923fbe25e134d1c421320a3bffaa17fcd6b5178e322cc47133b3811e3d3bc34998dc7ed029834ad591d9d55141063d8de2d50a4fa0e73ff2913a9fe8e954a4e4ca99ce24dba4e0812c2ccf8ab5737e57193c5f47fd63b16c8b34f256dbac0e5ebd009078df2cb1ca1051ad091adbfee5126d8a59fa5438734bc3e8cc7b7edc10716a0ace21dc04bd9c3248b598267822670a02be81f017e946a7e3359ce433ae42aae07518c3850cff4cf415bdb29ab165216a12899868d6857b732eafbab59fba36fca0b5cab2e717cd6ffef31a24add5f56b30c27b9e616892b60f4cde07eb9cb090ca25e5b8c6858a27e7e4d5cac6ed29218fcd35804fe2a5cb1ca503991051eb9c04a88bf02e8e240ee4c8b0ae80396aff9f8a913e8dc6b15e15b0a7c82953a87ef02b1e7abea95a7ae79eca2a536a59abfa3cccc1a6664d20344fedc524f3867f1dd8ba04bcd90aa43e024891f779210ec076e0b13ebf2bef2ac1a30f7a396a508b00000000000000", @ANYRESOCT=0x0, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRES16=0x0, @ANYRES8], 0x1, 0x32a, &(0x7f0000000600)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x42, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$FUSE_WRITE(r0, &(0x7f0000000980)={0x18}, 0xfffffdef)

1m22.050869167s ago: executing program 37 (id=604):
syz_mount_image$hfs(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="71756965742c636f6465706167653d63703836302c696f636861727365743d63703836312c00808fead042bd35dc78f7f06333a5e7165b8271e41aee85e59cbb6c2df3d4e4c16b06c73f2e3b348a7fba46e286378a15ee516bac8d4813c9c3d9cee1ddb95d1bbcf504e065b3749a1cbd841e685a558598cf0db10b55885946e678d0a71877037a090000000700848879ef1604cadc1faca3aa22a576750d559c4e124d4cb7293e7393b77286a03d342382e84d6d3c29ab95cc923fbe25e134d1c421320a3bffaa17fcd6b5178e322cc47133b3811e3d3bc34998dc7ed029834ad591d9d55141063d8de2d50a4fa0e73ff2913a9fe8e954a4e4ca99ce24dba4e0812c2ccf8ab5737e57193c5f47fd63b16c8b34f256dbac0e5ebd009078df2cb1ca1051ad091adbfee5126d8a59fa5438734bc3e8cc7b7edc10716a0ace21dc04bd9c3248b598267822670a02be81f017e946a7e3359ce433ae42aae07518c3850cff4cf415bdb29ab165216a12899868d6857b732eafbab59fba36fca0b5cab2e717cd6ffef31a24add5f56b30c27b9e616892b60f4cde07eb9cb090ca25e5b8c6858a27e7e4d5cac6ed29218fcd35804fe2a5cb1ca503991051eb9c04a88bf02e8e240ee4c8b0ae80396aff9f8a913e8dc6b15e15b0a7c82953a87ef02b1e7abea95a7ae79eca2a536a59abfa3cccc1a6664d20344fedc524f3867f1dd8ba04bcd90aa43e024891f779210ec076e0b13ebf2bef2ac1a30f7a396a508b00000000000000", @ANYRESOCT=0x0, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRES16=0x0, @ANYRES8], 0x1, 0x32a, &(0x7f0000000600)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x42, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$FUSE_WRITE(r0, &(0x7f0000000980)={0x18}, 0xfffffdef)

1m16.686787417s ago: executing program 9 (id=631):
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={0x0, 0x0, 0x18}, 0x18)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x70, 0x1, 0x0, 0xfffffffe, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x2}}}]}, 0x24}}, 0x8ff248670b87d03c)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x18, 0x72, 0x7e3bfe4fa73db39f}, 0x18}}, 0x4)

1m16.389639018s ago: executing program 9 (id=634):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
unshare(0x22020600)
setns(0xc9, 0x40000000)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs$namespace(r2, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, r1, 0x221, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r2}]}, 0x24}}, 0x90)

1m15.801727349s ago: executing program 6 (id=637):
prlimit64(0x0, 0xe, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='./dev/sda1\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='ext4\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x149000, 0x19a)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000300)={0x8, 0xffffffffffffffff, 0x7fff, 0x7ffb, 0xb, 0x81})

1m15.482581943s ago: executing program 6 (id=638):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140))
syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121500, 0x0)
fchown(r0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x80000000008, 0x4)

1m13.462340624s ago: executing program 9 (id=641):
setns(0xc9, 0x0)
io_uring_setup(0x7490, &(0x7f0000000300)={0x0, 0xf76b, 0x40, 0xfffffffd, 0x7})
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503e3ffb309180008000a00", @ANYRES32, @ANYBLOB="240012800c0001006d6163766c616e00140002800800070008000000060002000100000008000500", @ANYRES16=r0], 0x54}, 0x1, 0x0, 0x0, 0x24004845}, 0x8000002)

1m13.346472226s ago: executing program 6 (id=642):
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001540)=@mangle={'mangle\x00', 0x64, 0x6, 0x518, 0x1c0, 0x0, 0x360, 0x290, 0x360, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8000, 0x3}}}, {{@ipv6={@mcast1, @local, [0xffffffff], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@private0={0xfc, 0x0, '\x00', 0x7f}, 0xb, 0x10, 0x7}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, [0x0, 0xff, 0xff, 0xffffff00], [], 'ip6erspan0\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0)
recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0)

1m12.710393353s ago: executing program 6 (id=644):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=cp437,fmask=00000000000000000000315,errors=remount-ro,umask=00000000000000000000177,errors=remount-ro,umask=00000000000000000001775,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d63703933362c666d61736b3d30303030303030303030303030303030303030303030312c005e78aae2dff810901336831a8ac30acbcd22a575ef96"], 0x5, 0x1516, &(0x7f0000000640)="$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")
r0 = creat(&(0x7f0000001b80)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f0000001bc0)=<r1=>0x0)
mount(&(0x7f0000001c00)=@loop={'/dev/loop', 0x0}, &(0x7f0000001c40)='./bus\x00', 0x0, 0x5000, 0x0)
r2 = open(&(0x7f0000001c80)='./bus\x00', 0x101000, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x8e18, 0x2, 0x0, 0x0, 0xa, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
io_submit(r1, 0x3b, &(0x7f0000001dc0)=[&(0x7f0000001e00)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000001e40), 0x100000, 0x16}])

1m12.591994435s ago: executing program 9 (id=645):
syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./sys\x00', 0x210000, &(0x7f0000000840)={[{@dax_never}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@lazytime}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000000900)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000e80)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00), 0x8, &(0x7f0000000f40)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$fuse(&(0x7f0000000f80), &(0x7f0000000fc0)='./file0\x00', 0x2008820, &(0x7f0000001000)=ANY=[], 0x1, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001040)='pids.current\x00', 0x26e1, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000001080)='./file1\x00', 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

1m11.914531546s ago: executing program 6 (id=647):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4)
write(r0, &(0x7f0000000480)='0', 0x1)
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x2200002, &(0x7f0000000580)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0x1, 0x572, &(0x7f0000000640)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=")
setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000c80)='./file1\x00', 0x4827e, 0x1bb)

1m11.694585809s ago: executing program 9 (id=648):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x200000000)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)

1m11.133816097s ago: executing program 6 (id=650):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x8b}, 0x15, 0x3, 'fo\x00', 0x1, 0x400000, 0x4}, 0x2c)
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x36}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@rand_addr=0x64010100, 0x4e23, 0x2000, 0x244, 0x12d5c, 0x12d5c}}, 0x44)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

1m10.852204677s ago: executing program 38 (id=650):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x8b}, 0x15, 0x3, 'fo\x00', 0x1, 0x400000, 0x4}, 0x2c)
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x36}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@rand_addr=0x64010100, 0x4e23, 0x2000, 0x244, 0x12d5c, 0x12d5c}}, 0x44)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

1m7.689324567s ago: executing program 9 (id=659):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000900), &(0x7f0000000940)='./file1\x00', 0x1800c10, &(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYRESOCT, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="d9cd3bba99656213c9bdb6ad25829865e2b093446735a7c79832913d0e551fd4a79514d8cb4c2db49bb6488f55766f25ab190595c0f81e7c5928ef3a518e86e4c4412871c86c04d4e87e2e07100992c35fb1d429ccbdd39a3abbaf652ba590a4a25b078ca6f4236447e05f21205f42a1a0d8d478861b9cd4019d49f2023ca04c14e773cf774fd38e9a7f1b6e18d9288ffd23d922719f8d9a49287cfdb56a527f5cad89e3e257a6b22243139d97cd9b41642eff023b3ba3bed69af42c0fa9d8700dbd4ffdf61bf86d164ff52542aa807e9b2990741e774dec46a68182c39bcb52a98bbb", @ANYRES64, @ANYRES8=0x0, @ANYRES32, @ANYRES16], 0x1, 0x304, &(0x7f0000000b40)="$eJzs3M9PE2kYwPGnPyhtCZTDZje7yYZ3dy/rZQLVs9IYSIxNJEiNPxKTAabadGxJp8HUGJGTV+PNf8AD4ciNRPkHuHjTixdvXEw8yME4ptMZSssUpLSUH99PQubhfd5nOm9byDMNL1u3Xz7KZy0tq5clGFUSEBHZFhmWoHgC7jHoxBHZ7blcGPj64e+bd+5eT6XTE9NKTaZmLiaVUkMjbx8/jbnT1vtlc/j+1pfk583fN//c+jHzMGepnKUKxbLS1WzxU1mfNQ01n7PymlJTpqFbhsoVLKNUyxdr+axZXFioKL0wPxhfKBmWpfRCReWNiioXVblUUaEHeq6gNE1Tg3HBQTIr09N6qs3iuQ5fDLqkVErpIRGJ7clkVnpyQQAAoKea+/+gqE72/6v/bpQHbq0Nuf3/esSv/7/0sXauhv4/KiK+/b/3+L79v364/n9vR3RK2XZbZUfq/3EyjET2DAXqYTVZSulx9+fXsXxvddQJ6P8BAAAAAAAAAAAAAAAAAAAAADgNtm07Ydt2wjt6X/0iEnU2ltS+9ykNiciVHlwyOugIrz/OgPrGvfCQiPliMbOYqR3dCRsiYjqvf0K+O+8HVzX2dh6pqmF5Zy659UuLmZCTSWUlJ6YYMiaJPmmut+3Ja+mJMVXTWN8n8d31SUnIb/71Sd/6iPz/3656TRLyfk6KYsq8u2HOq382ptTVG+mm+pgzDwAAAACAs0BTO3zv3zWtVb5Wv3N/Pdr0+UCofn896nt/Hpa/wr1dOwAAAAAA54VVeZLXTdMo7QSDItI4EpPmOZ0Mwl06s7fCX63y/paheyvdJ/AevCEVdQc7/rQEDvG0tAiC0k7VSHU1qin1z7LP2vcLvI+NWs2RqXF35HXLOd0J/nj15lvnTnh5LXrAStsPQvu/AfqO57cPAAAAgONUb/q9kfHeXhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOfQcfx3tF6vEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgpfgYAAP//2a0C7Q==")
r1 = open(&(0x7f0000000e80)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r1, &(0x7f0000000ec0)={0xa0, 0xffffffffffffffda, 0x0, {{0x6, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x5, {0x200006, 0x9, 0x40, 0x8000005, 0x4000000000000006, 0xd616, 0x7ff, 0x40, 0xfff, 0xa000, 0x8, 0x0, 0xee00, 0x6d, 0x5}}, {0x0, 0xa}}}, 0xa0)
sendfile(r1, r1, &(0x7f0000000f80)=0x6, 0x8112)

1m7.359807702s ago: executing program 39 (id=659):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000900), &(0x7f0000000940)='./file1\x00', 0x1800c10, &(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYRESOCT, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="d9cd3bba99656213c9bdb6ad25829865e2b093446735a7c79832913d0e551fd4a79514d8cb4c2db49bb6488f55766f25ab190595c0f81e7c5928ef3a518e86e4c4412871c86c04d4e87e2e07100992c35fb1d429ccbdd39a3abbaf652ba590a4a25b078ca6f4236447e05f21205f42a1a0d8d478861b9cd4019d49f2023ca04c14e773cf774fd38e9a7f1b6e18d9288ffd23d922719f8d9a49287cfdb56a527f5cad89e3e257a6b22243139d97cd9b41642eff023b3ba3bed69af42c0fa9d8700dbd4ffdf61bf86d164ff52542aa807e9b2990741e774dec46a68182c39bcb52a98bbb", @ANYRES64, @ANYRES8=0x0, @ANYRES32, @ANYRES16], 0x1, 0x304, &(0x7f0000000b40)="$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")
r1 = open(&(0x7f0000000e80)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r1, &(0x7f0000000ec0)={0xa0, 0xffffffffffffffda, 0x0, {{0x6, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x5, {0x200006, 0x9, 0x40, 0x8000005, 0x4000000000000006, 0xd616, 0x7ff, 0x40, 0xfff, 0xa000, 0x8, 0x0, 0xee00, 0x6d, 0x5}}, {0x0, 0xa}}}, 0xa0)
sendfile(r1, r1, &(0x7f0000000f80)=0x6, 0x8112)

12.290287926s ago: executing program 8 (id=957):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000003e80)={0x8, 0x10001}, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000004140)={&(0x7f0000004180)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @multicast2}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x0, 0x3ff}}}, 0x118)

7.301333007s ago: executing program 3 (id=974):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000000)={'stack ', 'source'}, 0xc)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r1 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000e80)=[{&(0x7f0000000700)=""/232, 0xe8}], 0x1)
tkill(r1, 0xb)

4.958176672s ago: executing program 8 (id=976):
r0 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, <r1=>0x0}, &(0x7f0000000480)=0x5)
setreuid(r1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x2, 0x2)
setpriority(0x2, 0xff, 0x0)

4.954995803s ago: executing program 3 (id=986):
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$9p_fd(0x0, 0x0, 0x0, 0x108c088, 0x0)
r0 = inotify_init1(0x800)
inotify_add_watch(r0, &(0x7f0000005780)='./file0\x00', 0x9600006f)
setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), &(0x7f0000000100)=ANY=[], 0xd, 0x1)

4.738331975s ago: executing program 3 (id=981):
r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
read(r0, &(0x7f0000000280)=""/149, 0x95)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000640)='./file0\x00', 0x2200c12, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'cp862'}}, {@map_acorn}, {@map_normal}, {@map_off}, {@utf8}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@session={'session', 0x3d, 0x51}}, {@overriderock}, {}, {@cruft}]}, 0x1, 0xa3c, &(0x7f0000000700)="$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")
faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0)
ioctl$TCSETAW(r1, 0x5407, &(0x7f00000000c0)={0x6, 0x9, 0x2, 0x1fe, 0x11})

4.183362073s ago: executing program 3 (id=989):
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=']', 0x1}], 0x1}, 0x20004040)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000001500)='GPL\x00'}, 0x48)
r2 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000001540)={&(0x7f0000001580)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000015c0)={r2, r1})
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000001600)={r2})

3.852686738s ago: executing program 3 (id=993):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x408, &(0x7f00000000c0)=ANY=[], 0x1, 0x5505, &(0x7f0000005b40)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c9)
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x1a42028, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000010640)='./file1\x00', 0x183042, 0x108)
pwrite64(r0, &(0x7f0000010680)="c5", 0x1, 0xe7c)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.advise\x00')

3.146025602s ago: executing program 1 (id=999):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000440)=0x4000200, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c)
r1 = socket$inet6(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x10000008, @mcast2, 0x9}, 0x1c)
sendto$inet6(r1, &(0x7f00000001c0)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)

2.919526456s ago: executing program 1 (id=1001):
r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000006c0)={0x0, &(0x7f0000000700)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x48})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0)
write(r4, &(0x7f0000000880)='\a', 0x1)

2.513309088s ago: executing program 0 (id=1003):
r0 = fsopen(&(0x7f0000000300)='bpf\x00', 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000340)={0x100}, 0x30, 0x0)
landlock_restrict_self(r1, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r0, 0x1, 0xa)
fchdir(r2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)

2.336735136s ago: executing program 0 (id=1014):
r0 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0)
ftruncate(r0, 0x51a9497)
io_setup(0x8, &(0x7f00000000c0)=<r1=>0x0)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r2, &(0x7f0000000140)={0x2020}, 0x2020)
io_submit(r1, 0x1, &(0x7f0000002180)=[&(0x7f00000021c0)={0x0, 0x0, 0x0, 0x5, 0xfffd, r2, 0x0}])

2.007407451s ago: executing program 8 (id=1005):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x1)
fchdir(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r2, &(0x7f00000002c0)=""/29, 0x1d)
getdents64(r2, 0xfffffffffffffffe, 0x29)

2.007295371s ago: executing program 0 (id=1006):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01012dbd7000fcdbdf25180000000c00018008000100", @ANYRES32=r3, @ANYBLOB], 0x2b}, 0x1, 0x0, 0x0, 0x40841}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000480)={<r4=>0xffffffffffffffff}, 0x2, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000004c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r4}}, 0x20)

1.838583048s ago: executing program 0 (id=1008):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r1, 0x3, 0x6}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={r1, 0x1, 0x6}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)

1.787731994s ago: executing program 8 (id=1009):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000053260e130000000000000000000000fbfffffffff5ffff00000000001b00000000000000000000000000000000000200000000000000b912"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0xaf, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)

1.562888277s ago: executing program 1 (id=1011):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="c74424000f000000c74424026a9e0000c7442406000000000f018414c1c1490fc7610dc442499e2bb9800000c00f3235004000000f30c7442402176c0000c7442406000000000fee1424240f682b430f785508b805000000b90e15900b0f01c1430f00d5c7442400654d0000c7442402f9ca00000f011424", 0x78}], 0x1, 0x5f, &(0x7f0000000140)=[@cr4={0x1, 0x9e2}], 0x1)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x1c, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.525882421s ago: executing program 8 (id=1012):
socket$inet6(0xa, 0x800000000000002, 0x0)
io_uring_setup(0x1369, &(0x7f0000001c40)={0x0, 0x1f8a, 0x0, 0x3, 0x28c})
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001dc0))
syz_mount_image$exfat(&(0x7f00000002c0), &(0x7f0000000340)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000380)={[{@gid}, {@fmask={'fmask', 0x3d, 0x8001}}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@utf8}, {@namecase}, {@namecase}, {@time_offset={'time_offset', 0x3d, 0x7}}, {@umask={'umask', 0x3d, 0x1}}, {@utf8}, {}]}, 0x1, 0x1533, &(0x7f0000000440)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k0uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJEmTJCG5Jev/mZi/OnX+55xfnfz+Z57v5/N+Zj2z3mftZ88z73733vPyTZehNRrVrNqAiOAPwYtfEgAgFgAGAsA1ABAAQNm4snEZ89klJvyxjbA/10PJV7oCdiVx/7M27n/Wxv3P2rj/WRv3P2vj/mdt3P+sjfvPWFa2eXr+a/mRdR98/z8r4/f//yLpJcd+sbbk9V0BYv7VFO7////wD+Ry//9rBf/Kk7j/WRv3P6uKvdIFsP8F+PWfFWT7hzPc/6yN+89YVvbLe8GxcOXvR//VD4j8J/8G4ntd/Clf+f38h/vPGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4z9Bc74yxQAZI6vdF2MMcYYY4wxxhj78/hsV7oCxhhjjDHGGGOM/echCJCgIIAYyAaxkB1ygACIyZy/FuLgOsgN10MeyAv5ID/EQwEoCBoMWCAIoRAUhijcAEXgRigKxaA4lAAHJaEU3ASl4WYoA7dAWbgVysFtUB4qQEWoBLdDZbgDqsCdUBXugmpQHWpATbgbasE9UBvuhTpwH9SF+6EePAD14UFoAA9BQ3gYGsEj0BgehSbQFJpBc2jxP8p/AXrAi9ATekEC9IY+8BL0hX7QHwbAQHgZBsErMBhehUQYAkPhNRgGr8NweANGwEgYBW/CaHgLxsBYGAfjIQkmwER4GybBOzAZpsBUmAbJMB1mwLswE2bBbHgP5sD7MBfmwXxYACnwASyERZAKH8Ji+AjSYAkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFbbAddsBO+Bh2wSewG/bAXvgU9sFn/2b+6b/L74qAgAIFKlQYgzEYi7GYA3NgTsyJuTAXRjCCcRiHuTE35sE8mA/zYTzGY0EsiAYNEhIWwkIYxSgWwSJYFIticSyODh2WwlJYGm/GMlgGy2JZLIflsDxWwApYCSthZayMVbAKVsWqWA2rYQ2sgXfj3dgba2NtrIN1sC7Wzbw9hQ2wATbEhtgIG2FjbIxNsAk2w2bYAltgS2yJrbAVtsE22BbbYjtsh+2xPXbADtgRO2In7ISdsTN2wS7YFbtht/QXsgG+iC9iL6wmemMf7IN9MTFbfxyAA/BlHISv4Cv4KibiEByKr+Fr+DoOx1M44sJIHIWjsLJ4C8fgWCQxHpMwCSfiRJyEk3AyTsEpOA2TcTrOwBk4E2fhLHwP5+D7+D7Ow3m4AFMwBRfiIkzFVFyMpzENl+BSXIbLcQUux1W4GlfhWlyHa3EDbsBNuAm34BbchttwB+7Aj1EB4Ce4B/dgIu7Dfbgf9+MBPIAH8SCmYzoewkN4GA/jETyCR/EoHsPjeAKP40k8iafwNJ7BM3gOz+F5fC7+q4YfF1uTCCKDEkrEiBgRK2JFDpFD5BQ5RS6RS0RERMSJOJFb5BZ5RB6RT+QT8SJeFBQFhRFGkAgzjhQiKqKiiCgiioqiorgoLpxwopQoJUqL0qKMKCPKiltFOXGbKC8qiNaukqgkKos2roq4U1QVVUU1UV3UEDVFTVFL1BK1RW1RR9QRdUVdUU88IOqL3tgfHxIZnWkkhmBjMRSbiKZCXjpCtRTDsZVoLdqIJ8RIHIHtREvXXjwtOogx2FH8TYzFZ0VnMR67iOdFV9FNdBcviB6ilespeonJ2Fv0EdOwr+gn+osBYiZWF+/hnOw1xKsiUQwRQ8VrYgG+LoaLN8QIMVKMEm+K0eItMUaMFePEeJEkJoiJ4m0xSbwjJospYqqYJpLFdDFDvCtmillitnhPzBHvi7linpgvFogU8YFYKBaJVPGhWCw+EmliiVgqlonlYoVYKVaJ1WKNWCvWifVig9goNonNYovYKraJ7WKH2Ck+FrvEJ2K32CP2ik/FPvGZ2C8+FwfEF+Kg+FKki6/EIfG1OCy+EUfEt+Ko+E4cE8fFCfG9OCl+EKfEaXFGnBXnxI/ivPhJXBBegEQppJRKBjJGZpOxMrvMIa+SOWWQefyXcfI6mVteL/PIvDKfzC/jZQFZUGpppJUkQ1lIFpZReYMsIm+URWUxWVyWkE6WlKXkTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiF7dRTVaXNWRNebdMgHtkbXmvrCPvk3Xl/bKefEDWlw/KBvIh2VA+LBvJR2Rj+ahsIpvKZrK5bCEfky3l47KVbC3byCdkW/mkbCefku3l07KD9Jd+RZ6VneVzsot8XnaV3WR3+ZO8IL3sKXtJ6A2yj3xJ9pX9ZH85QA6UL8tB8hU5WL4qE+UQOVS+JofJ1+Vw+YYcIUfKUfJNOVq+JcfIsXKcHC+T5AQ5Ub4tJ8l35GQ5RU6V02SynC77X1pptpT/NP/t38kf/PPWN8nNcovcKrfJ7XKH3Ck/lrvkLrlb7pZ75V65T+6T++V+eUAekAflQZku0+UheUgeloflEXlEHpVH5TF5XJ6V38uT8gd5Sp6Wp+VZeU6ek+cv/QxAoRJKKqUCFaOyqViVXeVQV6mc6mqVS12jIupaFaeuU7nV9SqPyqvyqfwqXhVQBZVWRllFKlSFVGEVVTfgpV8YVVyVUE6VVKXUTf9OviqiblRFVbFf5WfWl/AP6muhWqiWqqVqpVqpNqqNaqvaqnaqnWqv2qsOqoPqqDqqTqqT6qw6qy6qi+qquqruqrvqoXqonqqnSlAJqo96SfVV/VR/NUANVC+LjH0YrAarRJWohqqhapgapoar4WqEGqFGqVFqtBqtxqgxapwap5JUkpqoJqpJapKarCarqWqqSlbJaoaaoWaqmWq2mq3mqDlqrpqr5qv5KkWlqIVqoUpVqWqxWqzS1BK1RC1Ty9QKtUKtUqvUGrVGrVPr1Aa1QaWpzWqz2qq2qu1qu9qpdqpdapfarXarvWqv2qf2qf1qvzqgDqiD6qBKV+nqkDqkDqvD6og6oo6qo+qYOqZOqBPqpDqpTqlT6ow6o86pc+q8Oq8uqAsZp32BCESgAhXEBDFBbBAb5AhyBDmDnEGuIFcQCSJBXBAX5A6uD/IEeYN8Qf4gPigQFAx0YAIbiEtNjwY3BEWCG4OiQbGgeFAicEHJoFRwU1A6uDkoE9wSlA1uDcoFtwXlgwpBxaBScHtQObgjqBLcGVQN7gqqBdWDGkHN4O6gVnBPUDu4N6gT3BfUDe4P6gUPBPWDB4MGwUNBw+DhoFHwSNA4eDRoEjQNmgXNgxZ/6vren8r7uOupe+kE3Vv30S/pvrqf7q8H6IH6ZT1Iv6IH61d1oh6ih+rX9DD9uh6u39Aj9Eg9Sr+pR+u39Bg9Vo/T43WSnqAn6rf1JP2Onqyn6Kl6mk7W0/UM/a6eqWfp2fo9PUe/r+fqeXq+XqBT9Ad6oV6kU/WHerH+SKfpJXqpXqaX6xV6pV6lV+s1eq1ep9frDXqj3qQ36y16q96mt+sdeqf+WO/Sn+jdeo/eqz/V+/Rner/+XB/QX+iD+kudrr/Sh/TX+rD+Rh/R3+qj+jt9TB/XZfT3+qT+QZ/Sp/UZfVaf0z/q8/onfUH7jJP7jLd3o4wyMSbGxJpYk8PkMDlNTpPL5DIREzFxJs7kNrlNHpPH5DP5TLyJNwVNQZOBDJlCppCJmqgpYoqYoqaoKW6KG2ecKWVKmdKmtCljypiypqwpZ8qZ8qa8qWgqmtvN7eYOc4e509xp7jJ3meqmuqlpappappapbWqbOqaOqWvqmnqmnqlv6psGpoFpaBqaRqaRaWwamyamiWlmmpkWpoVpaVqaVqaVaWPamLamrWln2pn2pr3pYDqYjqaj6WQ6mc6ms+liupiupqvpbrqbHqaH6Wl6mgSTYPqYPqav6Wv6m/5moBloBplBZrAZbBJNohlqhpphZpgZboabEWakGZVxomreMmPMWDPOjDdJJslMNBPNJDPJTDaTzVQz1SSbZDPDzDAzzUwz28w2c8wcM9fMNfPNfJNiUsxCs9CkmlSz2Cw2aSbNLDVLzXKz3Kw0K81qs9qsNWvNelhvNpqNZrPZbLaarWa72W52mp1ml9lldpvdZq/Za/aZfWa/2W8OmAPmoDlo0k26OWQOmcPmsDlijpij5qg5Zo6ZE+aEOWlOmlPmlDljzphzJu+l90tvYm12m8NeZXPaq20ue439+zifzW/jbQFb0Gqbx+b9VWystUVtMVvclrDOlrSl7E2/icvbCrairWRvt5XtHbbKb+Ja9h5b295r69j7bE1796/iuvZ+W88+YusjAtimtqFtbhvZR2xj+6htYpvaZra5bWuftO3sU7a9fdp2sM/8Jl5oF9nVdo1da9fZ3XaPPWPP2sP2G3vO/mh72l52oH3ZDrKv2MH2VZtoh/wmHmXftKPtW3aMHWvH2fG/iafaaTbZTrcz7Lt2pp31mzjFfmDn2FQ7186z8+2Cn+OMmlLth3ax/cim2QCW2mV2uV1hV9pV/7fWZXaD3Wg32V32E7vVbrPb7Q67M/NE2O6xe+2ndp/9zB6yX9sD9gt70B6x6farn+OM/Ttiv7VH7Xf2mD1uT9jv7Un7g8rMztj37+1P9oL1FggJSJKigGIoG8VSdspBV1FOuppy0TUUoWspjq6j3HQ95aG8lI/yUzwVoIKkyZAlopAKUWGK0g2UWV5xKkGOSlIpuolK081Uhm6hsnQrlaPbqDxVoIpUiW6nynQHVaE7qSrdRdWoOtWgmnQ31aJ7qDbdS3XoPqpL91M9eoDq04PUgB6ihvQwNaJHqDE9Sk2oKTWj5tSCHqOW9Di1otbUhp6gtvQktaOnqD09TR3oGepIf6NO9Cx1pueoCz1PXakbdacXqAe9SD2pFyVQb+pDL1Ff6kf9aQANpJdpEL1Cg+lVSqQhNJReo2H0Og2nN2gEjaRR9CaNprdoDI2lcTSekmgCTaS3aRK9Q5NpCk2laZRM02kGvUszaRbNpvdoDr1Pc2kezacFlEIf0EJaRKn0IS2mjyiNltBSWkbLaQWtpFW0mtbQWlpH62kDbaRNtJm20FbaRttpB+2kj2kXfUK7aQ/tpU9pH31G++lzOkBf0EH6ktLpKzpEX9Nh+oaO0Le+F31Hx+g4naDv6ST9QKfoNJ2hs3SOfqTz9BNdIE8QYihCGaowCGPCbGFsmD3MEV4V5gyvDnOF14SR8NowLrwuzB1eH+YJ84b5wvxhfFggLBjq0IQ2pDAMC4WFw2h4Q1gkvDEsGhYLi4clQheWDEuFN4Wlw5vDMuEtYdnw1rBceFtYPqwQPnJfpfD2sHJ4R1glvDOsGt4VVgurhzXCmuHdYa3wnrB2eG9YJ7wvLBPeH9YLHwjrhw+GDcKHwobhw2Gj8JGwcfho2CRsGjYLm4ctwsfCluHjYauwddgmvCpsGz4ZtgufCtuHT4cdwmd+nr9/Ueb8E7+ZTwh7h33Cl8KXQu/vlfOjC6Ip0Q+iC6OLoqnRD6OLox9F06JLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Le18wGDp1w0ikXuBiXzcW67C6Hu8rldFe7XO4aF3HXujh3ncvtrnd5XF6Xz+V38a6AK+i0M846cqEr5Aq7qLvBFXE3uqKumCvuSjjnSrpSrrlr4Vq4lu5x18q1dm3cE+4J96R70j3lnnJPuw7uGdfR/c11cs+6zu4595x73nV13Vx394Lr4SbkuviaTHB9XB/X1/V1/V1/N9ANdIPcIDfYDXaJLtENdUPdMDfMDXfD3Qg3wo1yo9xoN9qNcWPcODfOJbkkN9FNdJPcJDfZTXZT3VSX7JLdDDfDzXQzXeVZF7cy18118918l+JS3EKXcc6Y6ha7xS7Npbmlbqlb7pa7lW6lW+1Wu7VurVvv1ruNbqPb7Da7rW6r2+62u51up9vldrnd/pqLi7p9br/b7w64A+6g+9Klu6/cIfe1O+y+cUfct+6o+84dc8fdCfe9O+l+cKfcaXfGnXXn3I/uvPvJXXDeJUUmRCZG3o5MirwTmRyZEpkamRZJjkyPzIi8G5kZmRWZHXkvMifyfmRuZF5kfmRBJCXyQWRhZFEkNfJhZHHko0haZElkaWRZZHlkRcT7AltDX8gX9lF/gy/ib/RFfTFf3Jfwzpf0pfxNvvTFutO8v9WX87f58r6Cr+gf9U18U9/MN/ct/GO+pX/ct/KtfRv/hG/rn/Tt/FO+vX/ad/DP+I7+b76Tf9Z39s/5Lv5539V38939C76Hf9H39L18gu/t+/iXfF/fz/f3A/xA/7If5F/xg/2rPtEP8UP9a36Yf90P92/4EX6kHxXzph+deYkM432Sn+An+rf9JP+On+yn+Kl+mk/20/0M/66f6Wf52f49P8e/7+f6eX6+X+BT/Ad+oV/kU/2HfrH/yKf5JZk3jf1Kv8qv9mv8Wr/Or/cb/Ea/yW/2W/xWv81v9zv8Tv+x3+U/8bv9Hr/Xf+r3+c/8fv+5P+C/8Af9lz7df+UP+a/9Yf+NP+K/9Uf9d/6YP+5P+O/9Sf+DP+VP+zP+rD/nf/Tn/U/+Av+bNcYYY4yxf8mEy0Px65mLt/N7/06O+MWT+wDA1dvyp/9yPuOMcn2ei+N+Ij424+vTvbo8lPmoVi0hIeHSc9MkBIXnAWT+JSjDzx89uBQvgTbwJLSH1lD6d+vvJ7qdo3+yfvRWgBy/yMkoKDO+vP7nAJjwO+s/9sSoheXCM3H/j/XnARQtfDknO1yOl0Cbn++vtIYy/6D+vC3/Sf3Zv0gCaPWLnJxwOb5cfyl4HJ6B9r96JmOMMcYYY4wxdlE/UbFT5vVn5ic+f+/6PF5dzskGl+N/dn3OGGOMMcYYY4yxK+/Zbt2feqx9+9ad/v1Blf9R1r88aAz/qZV58LsD7wEyv6MA4A8uCJAxkH/lXmz5S7aVeOml8/dTy8/6AP53tPLPGFzhAxNjjDHGGGPsT3f5pP/X31dXqiDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYywL+iv+O7ErvY+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYlfZ/AgAA//+1tfsI")
creat(&(0x7f0000001980)='./file0\x00', 0xdafbe5d6891b6e4)
setxattr$trusted_overlay_upper(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180), &(0x7f00000001c0)={0x0, 0xfb, 0x4b, 0x0, 0x0, "b3f5eda40df0703acefc50635578bba1", "819cdba84ab5fb6d306821e8b909a189ef514e9eb13aef925ac7ba3d3c196cd48bbee7ec12339963e63cdac150a4882c769e2d9a01c5"}, 0x4b, 0x2)

1.352662279s ago: executing program 0 (id=1013):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000ac0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000c80)=@generic={0x0, r3}, 0x18)
close(0x3)

1.314928683s ago: executing program 4 (id=1015):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=""/19, 0x13}, 0xe}], 0x1, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x3000, 0x2, 0x11, r1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

1.134398372s ago: executing program 1 (id=1016):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000080)=0x29)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000040), 0xffffffffffffff4e}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01')

1.088116097s ago: executing program 0 (id=1017):
syz_mount_image$ocfs2(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x8c0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f00000010c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000005540)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000380), 0x4)
r1 = open(&(0x7f000000ecc0)='./bus\x00', 0x14927e, 0x0)
fallocate(r1, 0x0, 0x0, 0x1000f4)
r2 = open(&(0x7f000000ed00)='./bus\x00', 0x185102, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0xc0189436, &(0x7f000000ed40)={0x0, 0x4, 0x8000, 0x4, 0x4})

1.015864524s ago: executing program 3 (id=1018):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioperm(0x46, 0x3, 0x1)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="63726561746f723d91b212f72c6e6c733d63703433372c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dabe89a7a2c6e6f626172726965722c00e749ee745e13f49b1e10072dcea1fd4ab6d517083bae1cf7be18ac381ae3b1da2a704e"], 0x1, 0x5d9, &(0x7f0000001740)="$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")
fsync(r0)

969.638229ms ago: executing program 1 (id=1019):
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
socket(0x11, 0x3, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bridge_slave_0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0xfffffffc, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0)

939.274272ms ago: executing program 4 (id=1020):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000}, 0xfeda)
r2 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000540)=@req3={0x80000000, 0x0, 0x2}, 0x1c)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x30, r3, 0x1, 0x0, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x9, 0x0, 0x1}}}}, 0x30}}, 0x0)

853.684691ms ago: executing program 8 (id=1021):
sendmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="e00100000000000000000000aa06000032548343f47d9738c9654a818cfbf090a2814af003c9fb6fec13787cf0a0c011dd0bf2182916b01789"], 0x1e0}}], 0x1, 0x4000004)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000000040)={0x1, 0xffffffffffffffff, 0x80000}, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

534.076295ms ago: executing program 4 (id=1022):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2, 0x0, 0x9, 0x1009, 0x8000000000000000, 0xc595, 0x4, 0x1, 0xffffffffffffffff, 0x3, 0xb3, 0x8d], 0x1ff8, 0x2110d3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

298.577109ms ago: executing program 4 (id=1023):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@local}, 0x1})

224.219897ms ago: executing program 4 (id=1024):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x80000000000002, &(0x7f0000000000)="cd6fa1d1839978de85e2809882a3713be979d5a5a19255ba8ba7d502002c1aa15f841a770a585c63dde13ba26d9d25ac268ea5ffde5fa73f6d5c55a15e6e2c1067e392a93b95bae460b21f50c300c95b181533923eee41cf97e991196ff47da54dbbe69021b39181a0302186b10b68534993820f0cc22dde380727e5df927221db07061547219e17e7")
ptrace(0x21, r0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x9ffc)

46.013365ms ago: executing program 4 (id=1025):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x888, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x858, 0x2, [@TCA_FLOW_POLICE={0x854, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x7, 0x2, 0x3, 0x2, {0x9, 0x1, 0x1, 0x7, 0x7cb, 0xa20}, {0x5, 0x0, 0xd, 0x6, 0x0, 0x8001}, 0x9ed7, 0x4, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0xa8a, 0x3, 0x1f7839b8, 0x7ff, 0x5, 0x8, 0x10000, 0x7, 0x3, 0x10000, 0x67f, 0x5, 0xd374, 0x5, 0x3, 0x7, 0x3, 0x7e, 0xd, 0x4, 0x0, 0xf, 0x3, 0x7, 0x2, 0x5, 0x6, 0x2, 0x2, 0xf, 0x92, 0x0, 0x5, 0x7, 0x7, 0x80000000, 0xe5ca, 0x9, 0x5, 0xffffffff, 0x6, 0x9, 0x4ed391dc, 0xfffffffb, 0xfffffff2, 0x5, 0x1, 0x8, 0x1, 0x81, 0x3, 0x3ff, 0x5, 0x9, 0x3, 0x4, 0x80000001, 0x7, 0x7, 0x2, 0x7, 0x5, 0x80000001, 0x8, 0x3, 0x2, 0x401, 0x4, 0xc, 0x80, 0xffffffff, 0x4, 0x3, 0x4, 0x8000, 0x1, 0x25, 0x20000000, 0x200, 0x6, 0x6, 0x7, 0x1, 0x5, 0xf, 0xa14320ff, 0xdd9e, 0xd7, 0x0, 0x1, 0x0, 0x0, 0x3, 0xfffffff9, 0x5, 0x9, 0xfffffff7, 0x8c, 0x1, 0x7, 0x34fc, 0x4, 0x9a6d, 0x80, 0x80000000, 0x5, 0x6, 0x400, 0x1, 0x6, 0x4, 0x81, 0x1, 0x438, 0x6, 0x9, 0xbd71, 0x5, 0x5, 0x8, 0xf, 0x7fff, 0xffffffff, 0x1, 0x2, 0x4, 0x1000, 0x9, 0x7fffffff, 0xc0, 0x0, 0xffff731a, 0x1ff, 0x1, 0x81, 0x1, 0x3, 0x0, 0x80000000, 0x6, 0x6f260000, 0x2, 0x0, 0x3, 0xfffffffc, 0x1, 0x100, 0x12, 0x4, 0xc5, 0x0, 0x8, 0x5, 0xffffffff, 0x6, 0xa, 0x13d649f5, 0x261d, 0x0, 0x10001, 0x7, 0x100, 0xfffffffd, 0xb, 0xc6ef, 0x7f, 0x91, 0x20, 0x3e7c0b71, 0x5, 0x6, 0x0, 0x5, 0xf3, 0xffffff2f, 0x3, 0x200000, 0x7, 0xff, 0x1, 0x81, 0x5, 0x8, 0x140, 0x4, 0xd27c, 0x6f1b, 0x6, 0x0, 0x3, 0x5, 0x2, 0x3, 0x0, 0x9, 0x80, 0x8, 0x8, 0x5, 0x10000, 0x13, 0x5fe2, 0x9, 0x5, 0x5, 0x6c4, 0x5, 0x5, 0x1000, 0x2, 0x4, 0x947d, 0x66eb, 0xfffff75a, 0x0, 0x800, 0x77, 0x3, 0x49c, 0x8, 0x5f, 0x5, 0xffffffff, 0x4, 0x79, 0x7a9d, 0x7, 0x2, 0x1, 0x8, 0x9b, 0x334e, 0x7, 0x1, 0x8, 0x4dd5e514, 0x8, 0xa, 0xfffffff5, 0x6, 0x9, 0x1, 0x3, 0xffffffc0, 0x6, 0x5, 0xffffff00, 0x2, 0x4, 0x8, 0xf5, 0x0, 0x0, 0x2, 0x6, 0x7ff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf5, 0x7, 0x5, 0x5, 0x1, 0x2, 0x7fff, 0x3, 0xe, 0xd998, 0x8, 0x2, 0x7f, 0x1, 0x8, 0x6, 0x10, 0x8695, 0x8012, 0x0, 0x2, 0x2, 0x4, 0x3, 0x0, 0x7, 0x10, 0x7, 0x3, 0x7, 0x9e, 0x2, 0x8, 0x1, 0x9, 0x7, 0x629d, 0x0, 0x2, 0x5b, 0xa42, 0x4, 0x0, 0x1, 0x6, 0x7, 0x400000, 0x4, 0x6, 0x4, 0x80000000, 0x10, 0x4, 0x9, 0xa, 0x0, 0x9, 0x6000000, 0x2, 0x5, 0x101, 0x4, 0xdf, 0x6, 0x81, 0x0, 0x4, 0x2, 0x5, 0xf, 0x7ff, 0x7fffffff, 0xffffffff, 0x4, 0x5, 0x1ff, 0x10, 0xfffffffa, 0x8, 0x62ae, 0x3, 0x1, 0x9, 0x8000, 0x100, 0xcbe, 0x0, 0x2, 0x8, 0x8000, 0x0, 0x4, 0x93b, 0x5896, 0xfffffffd, 0xea, 0xa, 0x9, 0x200, 0x5, 0x3, 0x0, 0x5, 0x0, 0x71628f33, 0x8, 0x6, 0xd, 0xd, 0x1, 0xff, 0x8001, 0xa, 0x9, 0x2, 0x27e5, 0x4, 0x8, 0x3, 0x4, 0xd08000, 0x9, 0x6, 0x569a, 0x0, 0x4, 0x4, 0x3ff, 0x6, 0x5, 0xd, 0x0, 0x6, 0x3dc9195, 0x0, 0x8001, 0x7fff, 0x7fffffff, 0x7, 0x6ea, 0x5, 0xfba4, 0x9, 0x6, 0x8, 0x683, 0x5, 0x3be4, 0xfff, 0x7, 0xd519, 0x0, 0x10, 0x200, 0x3, 0xfff, 0x6, 0x2, 0xfffffff7, 0x6, 0x400, 0xf877, 0x2, 0x38, 0xdb8, 0xbe4, 0xfffffff6, 0x80000001, 0x8001, 0xa, 0x7, 0x3, 0x9, 0xffff979f, 0x5, 0x8, 0x1, 0x58e, 0x63, 0x3, 0x80, 0x0, 0x32, 0x1ee6, 0x0, 0x0, 0x0, 0x0, 0xd, 0x6, 0xe2f, 0x65, 0x1, 0x1, 0xfffffffe, 0x200, 0xfff, 0xf, 0xfb3, 0x10001, 0x7fffffff, 0x2, 0x8, 0xf, 0xfff, 0x9, 0x2, 0x9, 0x401, 0x7, 0x10001, 0x1e2, 0x1, 0x80, 0x95d, 0x4, 0xd7e4, 0x4, 0x80000001, 0x0, 0x36, 0x2, 0x7ff, 0x2, 0x6, 0xff, 0x5, 0xe, 0x5, 0xf3, 0x100, 0x36, 0x2, 0xfff, 0x2, 0x8, 0x3, 0x238, 0x2a3, 0x20b, 0x8, 0x76, 0x6, 0x8, 0x6, 0xbc34, 0x8, 0xfff, 0x7ff, 0x98, 0x7, 0x101, 0x0, 0x4, 0x2, 0x75]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]}]}}]}, 0x888}}, 0x0)

0s ago: executing program 1 (id=1026):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x44}}, 0x20}}, 0x0)
lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x68, 0x10, 0x401, 0x400000, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3bda4}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}, @IFLA_BRPORT_PROTECT={0x5}, @IFLA_BRPORT_STATE={0x5, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)

kernel console output (not intermixed with test programs):

p2): 1 truncate cleaned up
[  158.326231][ T6478] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback.
[  158.363520][ T6488] loop6: detected capacity change from 0 to 512
[  158.435047][ T6488] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  158.509849][ T6488] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,barrier=0x0000000000000009,,errors=continue. Quota mode: writeback.
[  158.545359][ T6488] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  158.815299][ T4192] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /86/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  158.893522][ T4192] EXT4-fs error (device loop2): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  158.940161][   T21] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  158.987290][ T4192] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /86/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  159.011701][ T4192] EXT4-fs error (device loop2): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  159.080667][ T4192] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /86/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  159.112936][ T4192] EXT4-fs error (device loop2): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  159.167457][ T4192] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /86/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  159.192909][ T4192] EXT4-fs error (device loop2): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  159.215517][ T4192] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /86/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  159.244200][ T4192] EXT4-fs error (device loop2): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  159.484957][   T21] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  159.502570][   T21] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  159.513532][   T21] usb 8-1: Product: syz
[  159.517797][   T21] usb 8-1: SerialNumber: syz
[  159.541806][   T21] usb 8-1: config 0 descriptor??
[  159.654001][ T6499] loop6: detected capacity change from 0 to 32768
[  159.777287][ T6499] XFS (loop6): Mounting V5 Filesystem
[  159.800484][   T21] hso 8-1:0.0: Failed to find INT IN ep
[  159.839044][ T6499] XFS (loop6): Ending clean mount
[  159.867599][   T26] audit: type=1800 audit(1793872114.647:53): pid=6499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.501" name="bus" dev="loop6" ino=4425 res=0 errno=0
[  159.937064][ T5014] XFS (loop6): Unmounting Filesystem
[  159.974784][   T21] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  160.014831][ T5537] usb 8-1: USB disconnect, device number 2
[  160.391237][   T21] usb 6-1: unable to get BOS descriptor or descriptor too short
[  160.399901][ T6517] device bridge1 entered promiscuous mode
[  160.460767][   T21] usb 6-1: not running at top speed; connect to a high speed hub
[  160.540683][   T21] usb 6-1: config 4 has an invalid interface number: 106 but max is 0
[  160.549987][   T21] usb 6-1: config 4 has no interface number 0
[  160.603251][   T21] usb 6-1: config 4 interface 106 has no altsetting 0
[  160.623399][ T6518] rxe_eth0 speed is unknown, defaulting to 1000
[  160.691200][ T6526] loop7: detected capacity change from 0 to 512
[  160.805325][ T6526] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  160.865733][ T6526] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.890490][   T21] usb 6-1: string descriptor 0 read error: -22
[  160.896848][   T21] usb 6-1: New USB device found, idVendor=0408, idProduct=4033, bcdDevice=96.91
[  160.911062][   T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.973385][   T21] usb 6-1: Found UVC 0.00 device <unnamed> (0408:4033)
[  160.990155][   T21] usb 6-1: No valid video chain found.
[  161.254093][ T4832] usb 6-1: USB disconnect, device number 5
[  161.573903][ T6518] chnl_net:caif_netlink_parms(): no params data found
[  161.580380][    C0] net_ratelimit: 73 callbacks suppressed
[  161.856576][ T6518] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.867676][ T6518] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.876584][ T6518] device bridge_slave_0 entered promiscuous mode
[  161.887214][ T6518] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.894651][ T6518] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.903554][ T6518] device bridge_slave_1 entered promiscuous mode
[  161.982832][ T6518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  162.024523][ T6518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  162.197512][ T6518] team0: Port device team_slave_0 added
[  162.236648][ T6518] team0: Port device team_slave_1 added
[  162.416959][ T6518] batman_adv: batadv0: Adding interface: batadv_slave_0
[  162.429565][ T6518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.470416][ T6518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  162.498412][ T6518] batman_adv: batadv0: Adding interface: batadv_slave_1
[  162.514536][ T6518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.549290][ T4261] Bluetooth: hci1: command 0x0409 tx timeout
[  162.556029][ T6518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  162.630233][ T4832] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  162.677995][ T6518] device hsr_slave_0 entered promiscuous mode
[  162.704622][ T6518] device hsr_slave_1 entered promiscuous mode
[  162.719040][ T6518] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  162.729648][ T6518] Cannot create hsr debugfs directory
[  162.839497][ T6567] loop6: detected capacity change from 0 to 128
[  162.894564][ T6567] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  163.000572][ T4832] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  163.062876][ T6567] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 1)
[  163.101047][ T6567] FAT-fs (loop6): Filesystem has been set read-only
[  163.174178][ T5014] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  163.185974][ T4832] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[  163.202493][ T4832] usb 6-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  163.220551][ T4832] usb 6-1: Product: syz
[  163.231162][ T4832] usb 6-1: Manufacturer: syz
[  163.250509][ T4832] usb 6-1: SerialNumber: syz
[  163.271428][ T4832] usb 6-1: config 0 descriptor??
[  163.317096][ T4832] keyspan 6-1:0.0: Keyspan 4 port adapter converter detected
[  163.355766][ T4832] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 81
[  163.403958][ T6575] loop7: detected capacity change from 0 to 1164
[  163.597824][ T6574] loop6: detected capacity change from 0 to 32768
[  163.608054][ T4832] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 88
[  163.617181][ T4832] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 1
[  163.627084][ T4832] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  163.636710][ T4832] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 2
[  163.647551][ T4832] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  163.656070][ T6574] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.525 (6574)
[  163.681884][ T4832] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 4
[  163.706495][ T4832] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  163.733204][ T6575] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet.
[  163.781100][ T4832] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 6
[  163.813711][ T4832] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  163.853687][ T4832] usb 6-1: USB disconnect, device number 6
[  163.918436][ T6574] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  163.927263][ T6574] BTRFS info (device loop6): setting nodatacow, compression disabled
[  163.935459][ T6574] BTRFS info (device loop6): turning on flush-on-commit
[  163.942593][ T6574] BTRFS info (device loop6): force clearing of disk cache
[  163.949744][ T6574] BTRFS info (device loop6): turning on sync discard
[  163.956505][ T6574] BTRFS info (device loop6): turning off barriers
[  163.963042][ T6574] BTRFS info (device loop6): use no compression
[  163.969327][ T6574] BTRFS info (device loop6): disabling free space tree
[  163.976421][ T6574] BTRFS info (device loop6): enabling ssd optimizations
[  163.983465][ T6574] BTRFS info (device loop6): using spread ssd allocation scheme
[  163.991208][ T6574] BTRFS info (device loop6): has skinny extents
[  164.012951][ T4832] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  164.036726][ T4832] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  164.097852][ T4832] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  164.113291][ T4832] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  164.128513][ T6586] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  164.139513][ T4832] keyspan 6-1:0.0: device disconnected
[  164.152159][ T6586] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  164.352864][ T6518] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  164.485132][ T6574] BTRFS info (device loop6): clearing free space tree
[  164.492755][ T6574] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  164.503035][ T6574] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  164.582152][ T6518] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  164.610460][ T4261] Bluetooth: hci1: command 0x041b tx timeout
[  164.720782][ T6518] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  164.780896][ T6518] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  164.965769][ T6614] netlink: 16 bytes leftover after parsing attributes in process `syz.7.534'.
[  165.044002][ T6618] loop5: detected capacity change from 0 to 128
[  165.312477][ T6518] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.448280][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  165.466749][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  165.516880][ T6518] 8021q: adding VLAN 0 to HW filter on device team0
[  165.565602][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  165.581746][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  165.596018][ T5516] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.603931][ T5516] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.685657][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  165.732884][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  165.763933][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  165.787008][ T5516] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.794231][ T5516] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.867524][ T4364] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  165.926955][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  165.936662][ T4364] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  166.019645][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  166.044913][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  166.127270][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  166.170676][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  166.275447][ T6635] device syzkaller1 entered promiscuous mode
[  166.303732][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  166.321269][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  166.338633][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  166.354284][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  166.374210][ T6518] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  166.390389][ T6518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  166.461973][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  166.479481][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  166.701035][ T1327] Bluetooth: hci1: command 0x040f tx timeout
[  166.850133][    C1] net_ratelimit: 61 callbacks suppressed
[  166.951633][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  166.969101][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  167.005242][ T6518] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.178178][ T6668] rxe_eth0 speed is unknown, defaulting to 1000
[  167.332581][ T5537] Bluetooth: hci5: command 0x1003 tx timeout
[  167.338794][ T4193] Bluetooth: hci5: sending frame failed (-49)
[  167.678145][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  167.702357][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  167.797588][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  167.832246][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  167.847915][ T6518] device veth0_vlan entered promiscuous mode
[  167.880800][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  167.893122][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  167.933851][ T6518] device veth1_vlan entered promiscuous mode
[  168.087850][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  168.132654][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  168.149807][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  168.186196][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  168.207760][ T6518] device veth0_macvtap entered promiscuous mode
[  168.237246][ T6668] chnl_net:caif_netlink_parms(): no params data found
[  168.261649][ T6518] device veth1_macvtap entered promiscuous mode
[  168.339665][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  168.361108][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.380418][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  168.404176][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.417717][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  168.436830][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.448582][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  168.467712][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.490290][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  168.506931][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.532243][ T6518] batman_adv: batadv0: Interface activated: batadv_slave_0
[  168.573033][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  168.591469][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  168.606718][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  168.631266][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  168.653729][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.665283][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.691505][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.724131][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.734149][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.749400][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.769913][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.782305][ T5537] Bluetooth: hci1: command 0x0419 tx timeout
[  168.798779][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.817578][ T6518] batman_adv: batadv0: Interface activated: batadv_slave_1
[  168.875033][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  168.891827][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  168.943698][ T6518] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.963573][ T6518] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.972914][ T6518] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.982049][ T6518] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  169.171060][ T1108] Bluetooth: hci0: command 0x0409 tx timeout
[  169.184314][ T6668] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.202590][ T6668] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.221668][ T6668] device bridge_slave_0 entered promiscuous mode
[  169.254601][ T6668] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.264347][ T6668] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.275408][ T6668] device bridge_slave_1 entered promiscuous mode
[  169.410224][ T1108] Bluetooth: hci5: command 0x1001 tx timeout
[  169.416401][ T4193] Bluetooth: hci5: sending frame failed (-49)
[  169.430886][ T4285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.438745][ T4285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.459528][ T6668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  169.489793][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  169.516432][ T6668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  169.595098][ T5516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.606794][ T5516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.644636][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  169.685374][ T6668] team0: Port device team_slave_0 added
[  169.724018][ T6668] team0: Port device team_slave_1 added
[  169.804641][ T6668] batman_adv: batadv0: Adding interface: batadv_slave_0
[  169.828717][ T6668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.887562][ T6668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  169.922083][ T6668] batman_adv: batadv0: Adding interface: batadv_slave_1
[  169.929093][ T6668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.990893][ T6668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  170.093215][ T6668] device hsr_slave_0 entered promiscuous mode
[  170.102224][ T6668] device hsr_slave_1 entered promiscuous mode
[  170.109769][ T6668] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  170.119327][ T6668] Cannot create hsr debugfs directory
[  170.290598][ T1111] usb 9-1: new full-speed USB device number 2 using dummy_hcd
[  170.360301][ T6715] loop6: detected capacity change from 0 to 256
[  170.407349][ T6715] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb9756464, utbl_chksum : 0xe619d30d)
[  170.617856][ T6717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.564'.
[  170.640194][ T6717] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  170.640272][ T6717] batman_adv: batadv0: Removing interface: batadv_slave_0
[  170.666739][ T6717] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  170.678846][ T6717] batman_adv: batadv0: Removing interface: batadv_slave_1
[  170.760591][ T1111] usb 9-1: unable to get BOS descriptor or descriptor too short
[  170.805436][ T1111] usb 9-1: not running at top speed; connect to a high speed hub
[  170.890439][ T1111] usb 9-1: config 4 has an invalid interface number: 106 but max is 0
[  170.902685][ T1111] usb 9-1: config 4 has no interface number 0
[  170.926765][ T1111] usb 9-1: config 4 interface 106 has no altsetting 0
[  170.964788][ T6668] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  170.996744][ T6668] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  171.049518][ T6668] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  171.089984][ T6668] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  171.200528][ T1111] usb 9-1: string descriptor 0 read error: -22
[  171.206867][ T1111] usb 9-1: New USB device found, idVendor=0408, idProduct=4033, bcdDevice=96.91
[  171.219511][ T6727] loop1: detected capacity change from 0 to 128
[  171.243153][ T1111] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.251059][ T4196] Bluetooth: hci0: command 0x041b tx timeout
[  171.315391][ T6727] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  171.343778][ T1111] usb 9-1: Found UVC 0.00 device <unnamed> (0408:4033)
[  171.352130][ T6727] ext4 filesystem being mounted at /163/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  171.383622][ T1111] usb 9-1: No valid video chain found.
[  171.465537][ T6668] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.490164][ T4196] Bluetooth: hci5: command 0x1009 tx timeout
[  171.516026][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  171.525229][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  171.538610][ T6668] 8021q: adding VLAN 0 to HW filter on device team0
[  171.555177][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  171.565471][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  171.577215][  T145] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.584406][  T145] bridge0: port 1(bridge_slave_0) entered forwarding state
[  171.656838][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  171.686235][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  171.717851][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  171.749037][  T145] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.756187][  T145] bridge0: port 2(bridge_slave_1) entered forwarding state
[  171.765123][ T1327] usb 9-1: USB disconnect, device number 2
[  171.813558][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  171.843637][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  171.895696][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  171.900273][    C0] net_ratelimit: 108 callbacks suppressed
[  171.917380][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  171.948285][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  171.988892][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  172.033796][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  172.061549][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  172.091919][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  172.111200][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  172.121238][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  172.153707][ T6668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  172.591077][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  172.621593][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  172.632522][ T6743] loop8: detected capacity change from 0 to 32768
[  172.662357][ T6668] 8021q: adding VLAN 0 to HW filter on device batadv0
[  172.704108][ T6743] ocfs2: Slot 0 on device (7,8) was already allocated to this node!
[  172.724497][ T6743] JBD2: Ignoring recovery information on journal
[  172.791204][ T6743] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  172.881381][ T6743] OCFS2: ERROR (device loop8): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bitmap size 2331 but physical max of 448
[  172.902062][ T6743] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  172.912746][ T6743] OCFS2: File system is now read-only.
[  172.918415][ T6743] (syz.8.569,6743,0):ocfs2_search_chain:1783 ERROR: status = -30
[  172.926288][ T6743] (syz.8.569,6743,0):ocfs2_search_chain:1893 ERROR: status = -30
[  172.934350][ T6743] (syz.8.569,6743,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30
[  172.942984][ T6743] (syz.8.569,6743,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30
[  172.951417][ T6743] (syz.8.569,6743,0):__ocfs2_claim_clusters:2387 ERROR: status = -30
[  172.959539][ T6743] (syz.8.569,6743,0):__ocfs2_claim_clusters:2395 ERROR: status = -30
[  172.969779][ T6743] (syz.8.569,6743,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30
[  172.979059][ T6743] (syz.8.569,6743,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30
[  172.987820][ T6743] (syz.8.569,6743,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30
[  172.996903][ T6743] (syz.8.569,6743,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30
[  173.007173][ T6743] (syz.8.569,6743,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30
[  173.016289][ T6743] (syz.8.569,6743,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30
[  173.026039][ T6743] (syz.8.569,6743,0):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30
[  173.035218][ T6743] (syz.8.569,6743,0):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30
[  173.044377][ T6743] (syz.8.569,6743,0):ocfs2_lock_allocators:2704 ERROR: status = -30
[  173.044462][ T6743] (syz.8.569,6743,0):ocfs2_extend_allocation:591 ERROR: status = -30
[  173.044491][ T6743] (syz.8.569,6743,0):ocfs2_extend_no_holes:1033 ERROR: status = -30
[  173.061390][ T6743] (syz.8.569,6743,0):ocfs2_expand_nonsparse_inode:1626 ERROR: status = -30
[  173.061422][ T6743] (syz.8.569,6743,0):ocfs2_write_begin_nolock:1693 ERROR: status = -30
[  173.061464][ T6743] (syz.8.569,6743,0):ocfs2_write_begin:1910 ERROR: status = -30
[  173.326954][ T6518] ocfs2: Unmounting device (7,8) on (node local)
[  173.334307][ T5537] Bluetooth: hci0: command 0x040f tx timeout
[  173.393162][ T6757] loop6: detected capacity change from 0 to 128
[  173.581236][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  173.630657][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  173.775315][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  173.810789][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  173.850005][ T6668] device veth0_vlan entered promiscuous mode
[  173.858924][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  173.917803][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  173.961605][ T6668] device veth1_vlan entered promiscuous mode
[  174.008791][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  174.022219][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  174.032159][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  174.046441][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  174.068416][ T6668] device veth0_macvtap entered promiscuous mode
[  174.118859][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  174.136203][ T6668] device veth1_macvtap entered promiscuous mode
[  174.203735][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.203754][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.203768][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.203784][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.203800][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.203815][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.203830][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.203870][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.203884][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.203899][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.205409][ T6668] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.210556][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  174.211354][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  174.222789][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.222808][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.222824][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.222841][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.222855][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.222870][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.222884][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.222900][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.224289][ T6668] batman_adv: batadv0: Interface activated: batadv_slave_1
[  174.224420][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  174.225128][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  174.228952][ T6668] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.228989][ T6668] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.229023][ T6668] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.229056][ T6668] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.606945][ T6771] loop1: detected capacity change from 0 to 8192
[  174.706894][ T6778] loop8: detected capacity change from 0 to 128
[  174.718135][ T6771] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  174.730045][ T6771] REISERFS (device loop1): using ordered data mode
[  174.736835][ T6771] reiserfs: using flush barriers
[  174.744149][ T6771] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  174.762385][ T6771] REISERFS (device loop1): checking transaction log (loop1)
[  174.777753][ T6771] REISERFS (device loop1): Using r5 hash to sort names
[  174.788660][ T3069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.815624][ T3069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.833800][ T6771] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  174.911644][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  174.939400][ T6778] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  174.969471][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.994164][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.050212][ T6778] hpfs: filesystem error: improperly stopped
[  175.056933][ T6778] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  175.084072][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  175.091461][ T6778] hpfs: You really don't want any checks? You are crazy...
[  175.091532][ T6778] hpfs: Code page index out of array
[  175.091543][ T6778] hpfs: code page support is disabled
[  175.092328][ T6778] hpfs: hpfs_map_4sectors(): unaligned read
[  175.191877][ T6778] hpfs: hpfs_map_4sectors(): unaligned read
[  175.199117][ T6778] hpfs: filesystem error: unable to find root dir
[  175.206650][ T6784] netlink: 'syz.6.579': attribute type 2 has an invalid length.
[  175.410464][ T4832] Bluetooth: hci0: command 0x0419 tx timeout
[  175.857311][ T6794] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.145631][ T6794] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.371365][ T6794] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.606148][ T6794] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.946450][ T6813] loop8: detected capacity change from 0 to 2048
[  177.022264][ T6813] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  177.244765][ T6815] loop7: detected capacity change from 0 to 8192
[  177.330114][    C1] net_ratelimit: 127 callbacks suppressed
[  177.374336][ T6815] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal
[  177.418688][ T6815] REISERFS (device loop7): using ordered data mode
[  177.425550][ T6815] reiserfs: using flush barriers
[  177.433073][ T6815] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  177.450509][ T6815] REISERFS (device loop7): checking transaction log (loop7)
[  177.518734][ T6815] REISERFS (device loop7): Using r5 hash to sort names
[  177.601491][ T6815] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage.
[  177.885038][ T6819] loop8: detected capacity change from 0 to 32768
[  178.030149][ T6819] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  178.441363][ T6837] loop7: detected capacity change from 0 to 512
[  178.454265][ T6837] EXT4-fs (loop7): inline encryption not supported
[  178.662356][ T6837] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec018, mo2=0002]
[  178.680332][ T6837] System zones: 0-2, 18-18, 34-35
[  178.718515][ T6837] EXT4-fs (loop7): mounted filesystem without journal. Opts: inlinecrypt,debug,usrquota,lazytime,,errors=continue. Quota mode: writeback.
[  178.741106][ T6837] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  178.915820][ T6053] EXT4-fs error (device loop7): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[  178.933911][    C0] vkms_vblank_simulate: vblank timer overrun
[  179.118014][ T6053] EXT4-fs error (device loop7): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[  179.491931][ T6835] loop9: detected capacity change from 0 to 32768
[  179.621428][ T6835] XFS (loop9): Mounting V5 Filesystem
[  180.363501][ T6835] XFS (loop9): Ending clean mount
[  180.699453][ T6668] XFS (loop9): Unmounting Filesystem
[  180.893518][ T6860] rxe_eth0 speed is unknown, defaulting to 1000
[  181.903227][ T6873] loop6: detected capacity change from 0 to 512
[  182.117190][ T6860] chnl_net:caif_netlink_parms(): no params data found
[  182.380112][    C0] net_ratelimit: 96 callbacks suppressed
[  182.552711][ T6860] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.560020][ T6860] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.568588][ T6860] device bridge_slave_0 entered promiscuous mode
[  182.577962][ T6860] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.585211][ T6860] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.594231][ T6860] device bridge_slave_1 entered promiscuous mode
[  182.653909][ T6518] ocfs2: Unmounting device (7,8) on (node local)
[  182.745758][ T6860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  182.763301][ T6888] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.615'.
[  182.790028][ T6860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  182.867232][ T1108] Bluetooth: hci4: command 0x0409 tx timeout
[  183.036690][ T6860] team0: Port device team_slave_0 added
[  183.076580][ T6860] team0: Port device team_slave_1 added
[  183.148238][ T6892] loop6: detected capacity change from 0 to 128
[  183.272879][ T6892] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  183.287857][ T6892] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  183.307377][ T6860] batman_adv: batadv0: Adding interface: batadv_slave_0
[  183.334631][ T6860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.462771][ T6860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  183.538582][ T6860] batman_adv: batadv0: Adding interface: batadv_slave_1
[  183.558027][ T6860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.714062][ T6860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  183.898584][ T6919] loop9: detected capacity change from 0 to 512
[  183.944742][ T6919] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  183.957109][ T4196] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  184.045886][ T6860] device hsr_slave_0 entered promiscuous mode
[  184.055895][ T6919] EXT4-fs (loop9): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,barrier=0x0000000000000009,,errors=continue. Quota mode: writeback.
[  184.095410][ T6860] device hsr_slave_1 entered promiscuous mode
[  184.102702][ T6919] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.121140][ T6860] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  184.148391][ T6860] Cannot create hsr debugfs directory
[  184.211017][ T4196] usb 9-1: Using ep0 maxpacket: 16
[  184.330527][ T4196] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  184.368905][ T4196] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  184.400301][ T4196] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  184.430254][ T4196] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  184.449673][ T4196] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.503645][ T4196] usb 9-1: config 0 descriptor??
[  184.659255][ T6935] loop9: detected capacity change from 0 to 512
[  184.930788][ T6632] Bluetooth: hci4: command 0x041b tx timeout
[  184.983186][ T4196] microsoft 0003:045E:07DA.0003: unknown main item tag 0x2
[  185.021704][ T4196] microsoft 0003:045E:07DA.0003: unknown main item tag 0x7
[  185.049420][ T4196] microsoft 0003:045E:07DA.0003: report is too long
[  185.079824][ T4196] microsoft 0003:045E:07DA.0003: item 0 4 0 9 parsing failed
[  185.105557][ T4196] microsoft 0003:045E:07DA.0003: parse failed
[  185.120351][ T4196] microsoft: probe of 0003:045E:07DA.0003 failed with error -22
[  185.221656][ T6632] usb 9-1: USB disconnect, device number 3
[  186.454825][ T6966] EXT4-fs warning (device sda1): verify_group_input:168: Reserved blocks too high (129)
[  186.666813][ T6959] loop1: detected capacity change from 0 to 32768
[  186.786269][ T6959] XFS (loop1): Mounting V5 Filesystem
[  186.877457][ T6959] XFS (loop1): Ending clean mount
[  186.889975][ T6959] XFS (loop1): Quotacheck needed: Please wait.
[  186.959577][ T6959] XFS (loop1): Quotacheck: Done.
[  187.010967][ T6632] Bluetooth: hci4: command 0x040f tx timeout
[  187.812264][    C1] net_ratelimit: 92 callbacks suppressed
[  188.536468][ T4199] XFS (loop1): Unmounting Filesystem
[  188.635864][ T6978] loop8: detected capacity change from 0 to 512
[  188.722806][ T6978] EXT4-fs (loop8): Ignoring removed mblk_io_submit option
[  188.842787][ T6978] EXT4-fs error (device loop8): ext4_iget_extra_inode:4573: inode #15: comm syz.8.640: corrupted in-inode xattr
[  188.876007][ T6978] EXT4-fs (loop8): Remounting filesystem read-only
[  188.890252][ T6978] EXT4-fs error (device loop8): ext4_orphan_get:1415: comm syz.8.640: couldn't read orphan inode 15 (err -117)
[  188.905334][ T6978] EXT4-fs (loop8): Remounting filesystem read-only
[  188.912888][ T6978] EXT4-fs (loop8): mounted filesystem without journal. Opts: journal_dev=0x0000000000000006,inode_readahead_blks=0x0000000008000000,errors=remount-ro,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,. Quota mode: none.
[  188.998341][ T6978] EXT4-fs error (device loop8): ext4_append:79: inode #2: comm syz.8.640: Logical block already allocated
[  189.069554][ T6978] EXT4-fs (loop8): Remounting filesystem read-only
[  189.093648][ T4196] Bluetooth: hci4: command 0x0419 tx timeout
[  189.199724][ T6982] device macvlan0 entered promiscuous mode
[  189.214026][ T6982] device eth0 entered promiscuous mode
[  189.311400][ T6982] device eth0 left promiscuous mode
[  189.511551][ T7002] loop6: detected capacity change from 0 to 256
[  189.530979][ T7004] loop1: detected capacity change from 0 to 512
[  189.581500][ T1327] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  189.605870][ T7004] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  189.637411][ T7002] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d)
[  189.673469][ T7004] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  189.690692][ T7004] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  189.752776][ T7007] loop9: detected capacity change from 0 to 1024
[  189.773246][ T6860] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  189.789396][ T7004] EXT4-fs (loop1): 1 truncate cleaned up
[  189.812127][ T7004] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,nomblk_io_submit,,errors=continue. Quota mode: none.
[  189.853243][ T6860] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  189.897432][ T7002] loop_set_status: loop6 () has still dirty pages (nrpages=2)
[  189.898146][ T6860] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  189.928309][ T1327] usb 9-1: Using ep0 maxpacket: 16
[  189.961397][ T6860] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  189.991716][ T7007] EXT4-fs (loop9): mounted filesystem without journal. Opts: dax=never,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,lazytime,init_itable,. Quota mode: none.
[  190.060588][ T1327] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  190.126888][ T1327] usb 9-1: config 0 interface 0 has no altsetting 0
[  190.253703][ T7018] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  190.356681][ T6860] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.370801][ T1327] usb 9-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  190.390300][ T1327] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.418873][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  190.441433][ T1327] usb 9-1: Product: syz
[  190.445659][ T1327] usb 9-1: Manufacturer: syz
[  190.464858][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  190.479599][ T1327] usb 9-1: SerialNumber: syz
[  190.536565][ T1327] usb 9-1: config 0 descriptor??
[  190.644573][ T7021] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  190.660624][ T7021] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  190.670689][ T6668] EXT4-fs error (device loop9): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /16/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  190.696941][ T6860] 8021q: adding VLAN 0 to HW filter on device team0
[  190.729934][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  190.751371][ T6668] EXT4-fs (loop9): Remounting filesystem read-only
[  190.759115][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  190.781404][ T5516] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.788537][ T5516] bridge0: port 1(bridge_slave_0) entered forwarding state
[  190.793863][ T6668] EXT4-fs error (device loop9): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /16/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  190.844345][ T1327] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input9
[  190.924339][ T6668] EXT4-fs (loop9): Remounting filesystem read-only
[  190.955380][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  190.959373][ T6668] EXT4-fs error (device loop9): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  190.992723][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  191.041146][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  191.049871][ T5516] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.057009][ T5516] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.105748][ T6668] EXT4-fs (loop9): Remounting filesystem read-only
[  191.141017][ T6668] EXT4-fs warning (device loop9): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  191.155294][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  191.170778][ T4259] Bluetooth: hci3: command 0x0406 tx timeout
[  191.195800][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  191.203074][ T6668] EXT4-fs error (device loop9): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /16/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  191.226946][ T1327] rc_core: IR keymap rc-imon-pad not found
[  191.241762][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  191.251379][ T1327] Registered IR keymap rc-empty
[  191.256479][ T1327] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  191.280307][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  191.308863][ T1327] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  191.331151][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  191.343743][ T6668] EXT4-fs (loop9): Remounting filesystem read-only
[  191.361481][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  191.378813][ T6668] EXT4-fs error (device loop9): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /16/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  191.401679][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  191.431183][ T1327] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[  191.459908][ T6860] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  191.483038][ T1327] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input10
[  191.512341][ T6668] EXT4-fs (loop9): Remounting filesystem read-only
[  191.523861][ T6860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  191.543173][ T1327] imon 9-1:0.0: iMON device (15c2:0041, intf0) on usb<9:4> initialized
[  191.571029][ T6668] EXT4-fs error (device loop9): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  191.595021][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  191.621535][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  191.658275][ T6668] EXT4-fs (loop9): Remounting filesystem read-only
[  191.672038][ T6668] EXT4-fs warning (device loop9): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  191.699281][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  191.725168][ T6668] EXT4-fs error (device loop9): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /16/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  191.769773][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  191.808530][ T4261] usb 9-1: USB disconnect, device number 4
[  191.814842][    C0] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  191.825448][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  191.863293][ T6668] EXT4-fs (loop9): Remounting filesystem read-only
[  191.869953][ T6668] EXT4-fs error (device loop9): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /16/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  191.923672][ T6668] EXT4-fs (loop9): Remounting filesystem read-only
[  191.930752][ T6668] EXT4-fs error (device loop9): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  191.987935][ T6668] EXT4-fs (loop9): Remounting filesystem read-only
[  192.000462][ T6668] EXT4-fs warning (device loop9): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  192.052647][ T6668] EXT4-fs error (device loop9): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /16/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  192.100910][ T6668] EXT4-fs (loop9): Remounting filesystem read-only
[  192.127118][ T6668] EXT4-fs warning (device loop9): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  192.221519][ T6668] EXT4-fs warning (device loop9): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  192.249510][ T7044] rxe_eth0 speed is unknown, defaulting to 1000
[  192.268854][ T6668] EXT4-fs warning (device loop9): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  192.353032][ T6668] EXT4-fs warning (device loop9): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  192.411772][ T6668] EXT4-fs warning (device loop9): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  192.456178][ T6668] EXT4-fs warning (device loop9): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  192.497638][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  192.520618][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  192.597476][ T7059] loop1: detected capacity change from 0 to 1024
[  192.602398][ T6860] 8021q: adding VLAN 0 to HW filter on device batadv0
[  192.685715][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  192.698827][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  192.733885][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  192.759014][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  192.780929][ T7059] EXT4-fs (loop1): Ignoring removed bh option
[  192.812648][ T6860] device veth0_vlan entered promiscuous mode
[  192.823176][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  192.841458][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  192.850236][    C1] net_ratelimit: 94 callbacks suppressed
[  192.869454][ T7059] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,jqfmt=vfsv1,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none.
[  192.960944][ T7059] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  193.017515][ T7059] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: block 3: comm syz.1.661: lblock 3 mapped to illegal pblock 3 (length 3)
[  193.044005][ T6860] device veth1_vlan entered promiscuous mode
[  193.131064][ T7059] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  193.178944][ T7059] EXT4-fs (loop1): This should not happen!! Data will be lost
[  193.178944][ T7059] 
[  193.307730][ T7071] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: block 3: comm syz.1.661: lblock 3 mapped to illegal pblock 3 (length 1)
[  193.328699][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  193.346228][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  193.366304][ T7058] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: block 3: comm syz.1.661: lblock 3 mapped to illegal pblock 3 (length 1)
[  193.386702][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  193.422553][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  193.435071][ T7071] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: block 3: comm syz.1.661: lblock 3 mapped to illegal pblock 3 (length 1)
[  193.473010][ T7075] input: syz0 as /devices/virtual/input/input11
[  193.532873][ T7058] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: block 3: comm syz.1.661: lblock 3 mapped to illegal pblock 3 (length 1)
[  193.596536][ T6860] device veth0_macvtap entered promiscuous mode
[  193.653631][ T7071] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: block 3: comm syz.1.661: lblock 3 mapped to illegal pblock 3 (length 1)
[  193.736190][ T7059] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: block 3: comm syz.1.661: lblock 3 mapped to illegal pblock 3 (length 1)
[  193.798036][ T7059] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: block 3: comm syz.1.661: lblock 3 mapped to illegal pblock 3 (length 1)
[  193.813442][ T7059] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: block 3: comm syz.1.661: lblock 3 mapped to illegal pblock 3 (length 1)
[  193.828001][ T7059] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: block 3: comm syz.1.661: lblock 3 mapped to illegal pblock 3 (length 1)
[  193.862190][ T6860] device veth1_macvtap entered promiscuous mode
[  193.870242][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  193.879637][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  193.956815][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.010882][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.032775][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.067663][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.078321][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.132912][ T1108] Bluetooth: hci2: command 0x0409 tx timeout
[  194.153247][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.169624][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.180244][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.198903][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.233615][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  194.240547][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  194.272292][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.315458][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.344865][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.379979][ T6860] batman_adv: batadv0: Interface activated: batadv_slave_0
[  194.465578][ T7044] chnl_net:caif_netlink_parms(): no params data found
[  194.550228][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  194.576448][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  194.633176][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  194.685741][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.736486][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  194.773251][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.793486][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  194.818426][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.861224][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  194.910093][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.930787][ T6860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  194.969245][ T6860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.005494][ T6860] batman_adv: batadv0: Interface activated: batadv_slave_1
[  195.094288][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  195.120369][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  195.153498][ T6860] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.194678][ T6860] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.232971][ T6860] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.275948][ T6860] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.758954][  T147] block nbd1: Receive control failed (result -32)
[  195.777780][ T7125] block nbd1: shutting down sockets
[  195.888532][ T7120] rxe_eth0 speed is unknown, defaulting to 1000
[  195.900738][ T4467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.908605][ T4467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.959793][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  196.063459][ T7135] loop1: detected capacity change from 0 to 2048
[  196.125310][ T4285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.170335][ T7135] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  196.180446][ T7044] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.185453][ T4285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.193083][ T7044] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.210226][ T4832] Bluetooth: hci2: command 0x041b tx timeout
[  196.251953][ T7044] device bridge_slave_0 entered promiscuous mode
[  196.309448][ T7044] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.329670][ T7044] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.379991][ T7044] device bridge_slave_1 entered promiscuous mode
[  196.393723][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  196.612814][ T7044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  196.633084][ T7151] EXT4-fs warning (device sda1): verify_group_input:168: Reserved blocks too high (129)
[  196.708873][ T7044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  196.814346][ T7158] gadgetfs: bound to dummy_udc driver
[  196.884893][   T26] audit: type=1800 audit(1793872151.667:54): pid=7160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.670" name="ep1in-bulk" dev="gadgetfs" ino=45106 res=0 errno=0
[  196.921015][ T7044] team0: Port device team_slave_0 added
[  196.955732][ T7044] team0: Port device team_slave_1 added
[  197.121266][ T7044] batman_adv: batadv0: Adding interface: batadv_slave_0
[  197.128271][ T7044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.159019][ T7044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  197.206883][ T7044] batman_adv: batadv0: Adding interface: batadv_slave_1
[  197.214765][ T7044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.241043][ T7044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  197.340712][ T7175] loop2: detected capacity change from 0 to 7
[  197.372182][ T4929] Dev loop2: unable to read RDB block 7
[  197.390358][ T4929]  loop2: unable to read partition table
[  197.397464][ T4929] loop2: partition table beyond EOD, truncated
[  197.427368][ T7175] Dev loop2: unable to read RDB block 7
[  197.441364][ T7175]  loop2: unable to read partition table
[  197.447718][ T7044] device hsr_slave_0 entered promiscuous mode
[  197.454286][ T7175] loop2: partition table beyond EOD, truncated
[  197.474869][ T7044] device hsr_slave_1 entered promiscuous mode
[  197.494296][ T7175] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  197.525800][ T7044] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  197.533927][ T3561] Dev loop2: unable to read RDB block 7
[  197.539570][ T3561]  loop2: unable to read partition table
[  197.545976][ T7044] Cannot create hsr debugfs directory
[  197.560717][ T3561] loop2: partition table beyond EOD, truncated
[  197.577263][ T7120] chnl_net:caif_netlink_parms(): no params data found
[  197.650419][ T6632] Bluetooth: hci0: command 0x0409 tx timeout
[  197.757113][ T7187] loop1: detected capacity change from 0 to 256
[  197.917402][ T7187] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  197.958352][ T7187] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  197.991559][ T7192] net_ratelimit: 140 callbacks suppressed
[  197.991577][ T7192] ip_tables: iptables: counters copy to user failed while replacing table
[  198.018887][ T7187] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b889, utbl_chksum : 0xe619d30d)
[  198.137170][ T7198] loop0: detected capacity change from 0 to 128
[  198.289455][ T7198] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  198.303270][ T5340] Bluetooth: hci2: command 0x040f tx timeout
[  198.343611][ T7198] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  198.436005][ T7210] loop8: detected capacity change from 0 to 512
[  198.564024][ T7210] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  198.597900][ T7120] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.724943][ T7120] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.772122][ T7120] device bridge_slave_0 entered promiscuous mode
[  198.812017][ T7120] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.851094][ T7120] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.890865][ T7120] device bridge_slave_1 entered promiscuous mode
[  199.223008][ T7234] CIFS: Attempting to mount \\127.0.0.1\share
[  199.245558][ T7234] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  199.405316][ T7120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  199.458903][ T7120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  199.612714][ T7242] loop1: detected capacity change from 0 to 2048
[  199.731787][    T7] Bluetooth: hci0: command 0x041b tx timeout
[  199.793820][ T7245] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  199.884497][ T7120] team0: Port device team_slave_0 added
[  199.907450][ T7224] loop0: detected capacity change from 0 to 32768
[  199.945176][ T7120] team0: Port device team_slave_1 added
[  199.980003][ T7224] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.688 (7224)
[  200.028029][ T7224] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  200.041099][ T7224] BTRFS info (device loop0): use zlib compression, level 3
[  200.047201][ T7234] CIFS: VFS: Error connecting to socket. Aborting operation.
[  200.048570][ T7224] BTRFS info (device loop0): using free space tree
[  200.071704][ T7234] CIFS: VFS: cifs_mount failed w/return code = -4
[  200.140541][ T7224] BTRFS info (device loop0): has skinny extents
[  200.186154][ T7242] NILFS error (device loop1): nilfs_readdir: zero-length directory entry
[  200.215046][ T7242] Remounting filesystem read-only
[  200.370516][    T7] Bluetooth: hci2: command 0x0419 tx timeout
[  200.437658][ T7120] batman_adv: batadv0: Adding interface: batadv_slave_0
[  200.444959][ T7120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.490239][ T7120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  200.508785][ T7224] BTRFS info (device loop0): enabling ssd optimizations
[  200.552598][ T7120] batman_adv: batadv0: Adding interface: batadv_slave_1
[  200.569946][ T7120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.653691][ T7120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  201.072030][ T4929] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop0 scanned by udevd (4929)
[  201.768998][ T7282] loop1: detected capacity change from 0 to 32768
[  201.810566][ T4261] Bluetooth: hci0: command 0x040f tx timeout
[  201.836375][ T7282] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  201.866473][ T7282] BTRFS info (device loop1): using free space tree
[  201.913623][ T7282] BTRFS info (device loop1): has skinny extents
[  201.942987][ T7120] device hsr_slave_0 entered promiscuous mode
[  202.091544][ T7120] device hsr_slave_1 entered promiscuous mode
[  202.100982][ T7120] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  202.108588][ T7120] Cannot create hsr debugfs directory
[  202.289709][ T7282] BTRFS info (device loop1): enabling ssd optimizations
[  202.759015][ T7044] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  202.940170][ T1111] Bluetooth: hci1: command 0x0406 tx timeout
[  203.046598][ T7311] loop0: detected capacity change from 0 to 32768
[  203.246303][    C0] net_ratelimit: 119 callbacks suppressed
[  203.254480][ T7311] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  203.357197][ T7044] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  203.431443][ T7044] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  203.890281][ T1111] Bluetooth: hci0: command 0x0419 tx timeout
[  203.977229][ T7044] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  204.355338][ T7120] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.662335][ T7120] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.893226][ T7120] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.994362][ T7044] 8021q: adding VLAN 0 to HW filter on device bond0
[  205.155897][ T7120] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.222601][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  205.264597][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  205.297940][ T7044] 8021q: adding VLAN 0 to HW filter on device team0
[  205.350716][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  205.382661][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  205.432401][ T3069] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.439531][ T3069] bridge0: port 1(bridge_slave_0) entered forwarding state
[  205.455403][ T7360] loop1: detected capacity change from 0 to 32768
[  205.515931][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  205.638872][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  205.675679][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  205.729435][ T3069] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.736575][ T3069] bridge0: port 2(bridge_slave_1) entered forwarding state
[  205.826365][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  205.853617][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  205.924839][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  205.939883][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  206.052080][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  206.082926][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  206.134878][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  206.177960][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  206.239222][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  206.311749][ T7120] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  206.372556][ T7385] loop8: detected capacity change from 0 to 1024
[  206.401283][ T7044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  206.435421][ T7385] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  206.452052][ T7044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  206.479595][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  206.504843][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  206.535822][ T7120] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  206.624088][ T7120] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  206.662168][ T7385] EXT4-fs (loop8): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback.
[  206.736768][ T7120] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  207.097333][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  207.115666][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  207.178358][ T7120] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.248345][ T7044] 8021q: adding VLAN 0 to HW filter on device batadv0
[  207.325010][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  207.347156][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  207.394214][ T7120] 8021q: adding VLAN 0 to HW filter on device team0
[  207.461470][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  207.502962][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  207.541267][  T145] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.548428][  T145] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.587037][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  207.619355][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  207.669288][  T145] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.676551][  T145] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.759243][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  207.801263][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  207.852216][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  207.887232][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  207.941060][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  208.000952][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  208.051931][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  208.096132][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  208.120672][ T7417] loop8: detected capacity change from 0 to 1024
[  208.144955][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  208.161102][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  208.184011][ T7417] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  208.234771][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  208.245133][ T7417] EXT4-fs (loop8): can't mount with journal_async_commit, fs mounted w/o journal
[  208.261075][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  208.291589][ T1135] net_ratelimit: 111 callbacks suppressed
[  208.312749][ T7120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  208.492116][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  208.509770][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  208.524993][ T7425] loop8: detected capacity change from 0 to 1024
[  208.586163][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  208.617464][ T7425] EXT4-fs (loop8): Ignoring removed bh option
[  208.626424][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  208.648977][ T6860] ocfs2: Unmounting device (7,0) on (node local)
[  208.672003][ T7044] device veth0_vlan entered promiscuous mode
[  208.699713][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  208.713897][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  208.794247][ T7425] EXT4-fs (loop8): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,jqfmt=vfsv1,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none.
[  208.815069][ T7425] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  208.847724][ T7044] device veth1_vlan entered promiscuous mode
[  208.878941][ T7425] EXT4-fs error (device loop8): ext4_map_blocks:741: inode #15: block 3: comm syz.8.714: lblock 3 mapped to illegal pblock 3 (length 3)
[  208.907067][ T7425] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  208.923308][ T7425] EXT4-fs (loop8): This should not happen!! Data will be lost
[  208.923308][ T7425] 
[  208.949628][ T7436] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.714: lblock 3 mapped to illegal pblock 3 (length 1)
[  208.967409][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  209.011758][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  209.029360][ T7424] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.714: lblock 3 mapped to illegal pblock 3 (length 1)
[  209.052276][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  209.085938][ T7120] 8021q: adding VLAN 0 to HW filter on device batadv0
[  209.101120][ T7424] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.714: lblock 3 mapped to illegal pblock 3 (length 1)
[  209.141567][ T7425] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.714: lblock 3 mapped to illegal pblock 3 (length 1)
[  209.161919][ T7044] device veth0_macvtap entered promiscuous mode
[  209.182544][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  209.192312][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  209.230304][ T7436] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.714: lblock 3 mapped to illegal pblock 3 (length 1)
[  209.251518][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  209.289395][ T7425] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.714: lblock 3 mapped to illegal pblock 3 (length 1)
[  209.335155][ T7044] device veth1_macvtap entered promiscuous mode
[  209.400488][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  209.409677][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  209.433876][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  209.516898][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  209.520731][ T7425] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.714: lblock 3 mapped to illegal pblock 3 (length 1)
[  209.539247][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  209.563132][ T7120] device veth0_vlan entered promiscuous mode
[  209.612608][ T7436] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.714: lblock 3 mapped to illegal pblock 3 (length 1)
[  209.650192][ T7393] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  209.722511][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  209.741074][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  209.764863][ T7120] device veth1_vlan entered promiscuous mode
[  209.794170][ T7044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.820696][ T7044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.896260][ T7044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.930883][ T7044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.956423][ T7044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.980605][ T7044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.010361][ T7044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.030378][ T7044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.050127][ T7044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.080120][ T7044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.117330][ T7044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.150360][ T7044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.190249][ T7044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.211059][ T7044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.254492][ T7044] batman_adv: batadv0: Interface activated: batadv_slave_0
[  210.285880][ T7044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.336075][ T7044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.360144][ T7044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.389527][ T7044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.409820][ T7044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.433955][ T7044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.460152][ T7044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.501576][ T7044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.540183][ T7044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.571622][ T7044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.587240][ T7044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.638840][ T7044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.671473][ T7044] batman_adv: batadv0: Interface activated: batadv_slave_1
[  210.689819][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  210.710332][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  210.730690][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  210.761848][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  210.796086][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  210.841243][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  210.892034][ T7044] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  210.922565][ T7044] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  210.951946][ T7044] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  210.973129][ T7044] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.015468][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  211.041408][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  211.084988][ T7120] device veth0_macvtap entered promiscuous mode
[  211.159564][ T7120] device veth1_macvtap entered promiscuous mode
[  211.346238][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.385700][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.450836][ T7482] syz.0.720 sent an empty control message without MSG_MORE.
[  211.488140][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.534685][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.568391][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.590133][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.619245][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.661313][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.681524][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.702329][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.770119][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.810328][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.840193][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.840216][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.840238][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.840254][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.856562][ T7120] batman_adv: batadv0: Interface activated: batadv_slave_0
[  211.880532][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  211.881396][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  211.882052][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  211.882692][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  211.895634][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.895653][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.895670][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.895686][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.895700][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.895716][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.895730][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.895746][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.895761][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.895777][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.895791][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.895807][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.895821][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.895837][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.900257][ T7120] batman_adv: batadv0: Interface activated: batadv_slave_1
[  211.911318][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  211.912241][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  211.954412][ T7120] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  211.954445][ T7120] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  211.954475][ T7120] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  211.954504][ T7120] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.959412][ T3069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.959431][ T3069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.006735][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  212.156943][ T4467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.156960][ T4467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.157711][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  212.296977][  T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.296995][  T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.297770][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  212.760182][ T5299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.815728][ T5299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.856091][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  213.267311][ T7526] loop1: detected capacity change from 0 to 8192
[  213.301777][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.8.733'.
[  213.314413][ T7501] loop0: detected capacity change from 0 to 32768
[  213.346105][ T7526]  loop1: p1 < > p2 < > p3 p4 < >
[  213.362633][ T7538] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  213.371816][ T7526] loop1: partition table partially beyond EOD, truncated
[  213.390504][ T7538] batman_adv: batadv0: Removing interface: batadv_slave_0
[  213.403180][ T7526] loop1: p1 start 67108864 is beyond EOD, truncated
[  213.410913][    C1] net_ratelimit: 194 callbacks suppressed
[  213.430896][ T7526] loop1: p3 start 100859904 is beyond EOD, truncated
[  213.459728][ T7538] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  213.484619][ T7538] batman_adv: batadv0: Removing interface: batadv_slave_1
[  213.504030][ T7501] XFS (loop0): Mounting V5 Filesystem
[  213.512611][ T7540] input: syz0 as /devices/virtual/input/input12
[  213.824031][ T7501] XFS (loop0): Ending clean mount
[  213.894023][ T7501] XFS (loop0): Quotacheck needed: Please wait.
[  213.920023][ T7558] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  213.973840][ T4926] udevd[4926]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  213.975311][ T4929] udevd[4929]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  214.194541][ T7501] XFS (loop0): Quotacheck: Done.
[  214.542009][ T6860] XFS (loop0): Unmounting Filesystem
[  214.647699][ T7582] loop1: detected capacity change from 0 to 2048
[  214.874058][ T7582] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  215.038017][ T7593] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  215.456741][ T7607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.748'.
[  215.542414][ T7607] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  215.559774][ T7607] batman_adv: batadv0: Removing interface: batadv_slave_0
[  215.594918][ T7607] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  215.626764][ T7610] loop8: detected capacity change from 0 to 512
[  215.650605][ T7607] batman_adv: batadv0: Removing interface: batadv_slave_1
[  215.680758][ T7610] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option
[  215.782832][ T7610] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2
[  215.805398][ T7610] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2
[  215.888272][ T7610] EXT4-fs error (device loop8): ext4_orphan_get:1436: comm syz.8.750: bad orphan inode 15
[  215.913290][ T7610] EXT4-fs (loop8): Remounting filesystem read-only
[  215.929800][ T7610] ext4_test_bit(bit=14, block=4) = 1
[  215.937307][ T7610] is_bad_inode(inode)=0
[  215.944070][ T7610] NEXT_ORPHAN(inode)=0
[  215.992274][ T7610] max_ino=32
[  215.995540][ T7610] i_nlink=1
[  216.031927][ T7610] EXT4-fs (loop8): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,journal_ioprio=0x0000000000000004,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback.
[  216.578267][ T7605] loop1: detected capacity change from 0 to 32768
[  216.880337][ T7605] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1
[  216.880337][ T7605] 
[  216.947833][ T7605] ERROR: (device loop1): remounting filesystem as read-only
[  216.976711][ T7605] non-latin1 character 0x3ff found in JFS file name
[  217.028133][ T7605] mount with iocharset=utf8 to access
[  217.609873][ T7637] loop3: detected capacity change from 0 to 32768
[  217.754632][ T7637] XFS (loop3): Mounting V5 Filesystem
[  217.985306][ T7637] XFS (loop3): Ending clean mount
[  218.086577][ T7654] loop4: detected capacity change from 0 to 32768
[  218.104987][ T7637] XFS (loop3): Quotacheck needed: Please wait.
[  218.133710][ T7654] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.760 (7654)
[  218.207479][ T7654] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  218.250343][ T7654] BTRFS info (device loop4): using free space tree
[  218.256911][ T7654] BTRFS info (device loop4): has skinny extents
[  218.381962][ T7637] XFS (loop3): Quotacheck: Done.
[  218.540857][    C0] net_ratelimit: 180 callbacks suppressed
[  218.687877][ T7120] XFS (loop3): Unmounting Filesystem
[  218.693604][ T7654] BTRFS info (device loop4): enabling ssd optimizations
[  219.841533][ T4929] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop4 scanned by udevd (4929)
[  220.428701][ T7762] loop1: detected capacity change from 0 to 512
[  220.580568][ T7762] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  220.704815][ T7768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.777'.
[  220.751912][ T7762] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,barrier=0x0000000000000009,,errors=continue. Quota mode: writeback.
[  220.769292][ T7768] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  220.812896][ T7762] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  220.830431][ T7768] batman_adv: batadv0: Removing interface: batadv_slave_0
[  220.874260][ T7768] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  220.924529][ T7768] batman_adv: batadv0: Removing interface: batadv_slave_1
[  221.560685][ T7799] FAULT_INJECTION: forcing a failure.
[  221.560685][ T7799] name failslab, interval 1, probability 0, space 0, times 0
[  221.629488][ T7799] CPU: 0 PID: 7799 Comm: syz.0.784 Not tainted syzkaller #0
[  221.636957][ T7799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  221.647083][ T7799] Call Trace:
[  221.650397][ T7799]  <TASK>
[  221.653385][ T7799]  dump_stack_lvl+0x188/0x250
[  221.658139][ T7799]  ? show_regs_print_info+0x20/0x20
[  221.663386][ T7799]  ? load_image+0x410/0x410
[  221.667939][ T7799]  ? __might_sleep+0xf0/0xf0
[  221.672606][ T7799]  ? __lock_acquire+0x7d40/0x7d40
[  221.677680][ T7799]  should_fail+0x383/0x4b0
[  221.682146][ T7799]  should_failslab+0x5/0x20
[  221.686690][ T7799]  slab_pre_alloc_hook+0x51/0xc0
[  221.691759][ T7799]  ? proc_invalidate_siblings_dcache+0x650/0x650
[  221.698305][ T7799]  ? proc_alloc_inode+0x19/0xa0
[  221.703205][ T7799]  kmem_cache_alloc+0x3d/0x280
[  221.708016][ T7799]  ? proc_invalidate_siblings_dcache+0x650/0x650
[  221.714422][ T7799]  proc_alloc_inode+0x19/0xa0
[  221.719146][ T7799]  ? proc_invalidate_siblings_dcache+0x650/0x650
[  221.725517][ T7799]  new_inode_pseudo+0x5f/0x210
[  221.730336][ T7799]  new_inode+0x25/0x1d0
[  221.734539][ T7799]  proc_pid_make_inode+0x20/0x1a0
[  221.739620][ T7799]  proc_pident_instantiate+0x69/0x2a0
[  221.745060][ T7799]  proc_fill_cache+0x1e8/0x460
[  221.749875][ T7799]  ? proc_pident_readdir+0x490/0x490
[  221.755201][ T7799]  ? pid_revalidate+0x1a0/0x1a0
[  221.760097][ T7799]  ? proc_pident_readdir+0x278/0x490
[  221.765448][ T7799]  proc_pident_readdir+0x399/0x490
[  221.770618][ T7799]  iterate_dir+0x213/0x550
[  221.775080][ T7799]  ? rcu_lock_release+0x20/0x20
[  221.779997][ T7799]  __se_sys_getdents64+0xf2/0x270
[  221.785067][ T7799]  ? __x64_sys_getdents64+0x80/0x80
[  221.790313][ T7799]  ? filldir+0x700/0x700
[  221.794600][ T7799]  ? lockdep_hardirqs_on+0x94/0x140
[  221.799852][ T7799]  do_syscall_64+0x4c/0xa0
[  221.804305][ T7799]  ? clear_bhb_loop+0x30/0x80
[  221.809030][ T7799]  ? clear_bhb_loop+0x30/0x80
[  221.813854][ T7799]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  221.813898][ T7799] RIP: 0033:0x7f412f32ab19
[  221.824264][ T7799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  221.843929][ T7799] RSP: 002b:00007f412d581028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  221.843966][ T7799] RAX: ffffffffffffffda RBX: 00007f412f5b0fa0 RCX: 00007f412f32ab19
[  221.843986][ T7799] RDX: 0000000000001000 RSI: 0000200000003900 RDI: 0000000000000004
[  221.844004][ T7799] RBP: 00007f412f3c2b70 R08: 0000000000000000 R09: 0000000000000000
[  221.844020][ T7799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  221.844039][ T7799] R13: 00007f412f5b1038 R14: 00007f412f5b0fa0 R15: 00007ffd2005cd18
[  221.860609][ T7799]  </TASK>
[  222.477525][ T7787] loop8: detected capacity change from 0 to 32768
[  222.525626][ T7793] loop3: detected capacity change from 0 to 32768
[  222.651562][ T7823] loop0: detected capacity change from 0 to 2048
[  222.762709][ T7787] XFS (loop8): Mounting V5 Filesystem
[  222.775952][ T7823] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  222.947503][ T7847] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  223.065028][ T7787] XFS (loop8): Ending clean mount
[  223.117980][ T7787] XFS (loop8): Quotacheck needed: Please wait.
[  223.426812][ T7787] XFS (loop8): Quotacheck: Done.
[  223.550482][ T6518] XFS (loop8): Unmounting Filesystem
[  223.656838][ T7862] netlink: 24 bytes leftover after parsing attributes in process `syz.0.800'.
[  223.666726][    C0] net_ratelimit: 138 callbacks suppressed
[  223.725953][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.797'.
[  223.782217][ T7866] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  223.833337][ T7866] batman_adv: batadv0: Removing interface: batadv_slave_0
[  223.881218][ T7866] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  223.930802][ T7874] loop0: detected capacity change from 0 to 1024
[  223.949763][ T7866] batman_adv: batadv0: Removing interface: batadv_slave_1
[  224.046593][ T7874] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  224.318946][ T7874] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback.
[  225.080470][ T7879] loop1: detected capacity change from 0 to 32768
[  225.227699][ T7879] (syz.1.814,7879,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  225.299709][ T7879] (syz.1.814,7879,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  225.458999][ T7879] JBD2: Ignoring recovery information on journal
[  225.612376][ T7879] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  225.854708][ T4199] ocfs2: Unmounting device (7,1) on (node local)
[  225.939326][ T7906] loop4: detected capacity change from 0 to 32768
[  225.984013][ T7935] loop2: detected capacity change from 0 to 7
[  226.060463][ T4259] psmouse serio2: Failed to reset mouse on : -5
[  226.079598][ T7906] XFS (loop4): Mounting V5 Filesystem
[  226.110319][ T7935] Dev loop2: unable to read RDB block 7
[  226.117052][ T7935]  loop2: AHDI p1 p2 p3
[  226.129063][ T7935] loop2: partition table partially beyond EOD, truncated
[  226.144344][ T7935] loop2: p1 start 1601398130 is beyond EOD, truncated
[  226.180442][ T7935] loop2: p2 start 1702059890 is beyond EOD, truncated
[  226.441028][ T7906] XFS (loop4): Ending clean mount
[  226.453719][ T7906] XFS (loop4): Quotacheck needed: Please wait.
[  226.580670][ T7906] XFS (loop4): Quotacheck: Done.
[  226.773631][ T7044] XFS (loop4): Unmounting Filesystem
[  226.823204][ T7751] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  227.100684][ T7751] usb 9-1: Using ep0 maxpacket: 8
[  227.416509][ T7751] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  227.434539][ T7751] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.477287][ T7751] usb 9-1: Product: syz
[  227.505477][ T7751] usb 9-1: Manufacturer: syz
[  227.536522][ T7751] usb 9-1: SerialNumber: syz
[  227.573680][ T7751] usb 9-1: config 0 descriptor??
[  227.858627][ T7751] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  228.562577][ T7751] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -71
[  228.578939][ T7997] loop0: detected capacity change from 0 to 512
[  228.619500][ T7751] usb 9-1: USB disconnect, device number 5
[  228.696729][ T7997] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  228.768305][ T7997] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,barrier=0x0000000000000009,,errors=continue. Quota mode: writeback.
[  228.770242][    C1] net_ratelimit: 156 callbacks suppressed
[  228.800299][ T7997] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  228.922967][ T7998] zswap: compressor _ not available
[  229.510275][ T1108] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  229.760131][ T1108] usb 9-1: Using ep0 maxpacket: 8
[  229.840603][ T4259] misc userio: Buffer overflowed, userio client isn't keeping up
[  229.880335][ T1108] usb 9-1: config 0 has no interfaces?
[  230.040416][ T1108] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  230.059800][ T1108] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.087755][ T1108] usb 9-1: Product: syz
[  230.107350][ T1108] usb 9-1: Manufacturer: syz
[  230.119167][ T1108] usb 9-1: SerialNumber: syz
[  230.135273][ T1108] usb 9-1: config 0 descriptor??
[  230.491834][ T8053] loop0: detected capacity change from 0 to 32768
[  230.894121][ T4259] input: PS/2 Generic Mouse as /devices/serio2/input/input13
[  231.180313][ T4259] psmouse serio2: Failed to enable mouse on 
[  231.597404][ T8112] loop3: detected capacity change from 0 to 512
[  231.973023][ T8122] smpboot: CPU 1 is now offline
[  232.199173][ T7751] usb 9-1: USB disconnect, device number 6
[  232.417774][ T8127] x86: Booting SMP configuration:
[  232.522803][ T8127] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  232.573348][    T0] kvm-clock: cpu 1, msr ff3c041, secondary cpu clock
[  232.604932][   T18] kvm-guest: stealtime: cpu 1, msr b8f27440
[  232.645153][ T8139] loop1: detected capacity change from 0 to 512
[  232.698899][ T8139] EXT4-fs (loop1): Ignoring removed bh option
[  232.750251][ T8139] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[  232.848126][ T8139] EXT4-fs (loop1): mounted filesystem without journal. Opts: noquota,abort,bh,delalloc,jqfmt=vfsold,noquota,,errors=continue. Quota mode: writeback.
[  232.864310][ T7751] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  232.936680][ T8139] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  233.022119][ T8162] loop3: detected capacity change from 0 to 512
[  233.127275][ T8162] EXT4-fs (loop3): Ignoring removed orlov option
[  233.139030][ T8162] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  233.204290][ T8162] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.850: corrupted in-inode xattr
[  233.254392][ T7751] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.278148][ T7751] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  233.299714][ T8162] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.850: couldn't read orphan inode 15 (err -117)
[  233.336732][ T7751] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  233.374017][ T7751] usb 5-1: config 0 interface 0 has no altsetting 0
[  233.398575][ T7751] usb 5-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00
[  233.407906][ T8162] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,user_xattr,nogrpid,init_itable=0x0000000000400fff,,errors=continue. Quota mode: none.
[  233.465671][ T7751] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.536224][    C0] vkms_vblank_simulate: vblank timer overrun
[  233.558684][ T7751] usb 5-1: config 0 descriptor??
[  233.611638][ T8162] EXT4-fs (loop3): shut down requested (1)
[  233.890126][    C0] net_ratelimit: 138 callbacks suppressed
[  233.998594][   T26] audit: type=1326 audit(1793872188.777:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.1.862" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd2c8eeb19 code=0x0
[  234.022161][    C0] vkms_vblank_simulate: vblank timer overrun
[  234.069180][ T7751] hid-rmi 0003:1532:011D.0004: hidraw0: USB HID v0.00 Device [HID 1532:011d] on usb-dummy_hcd.4-1/input0
[  234.194228][ T8212] loop0: detected capacity change from 0 to 512
[  234.246700][ T8212] EXT4-fs (loop0): Ignoring removed nobh option
[  234.303851][ T8212] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[  234.318049][ T7751] usb 5-1: USB disconnect, device number 4
[  234.416170][ T8212] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.864: attempt to clear invalid blocks 1 len 1
[  234.447938][ T8212] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  234.533189][ T8212] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.864: invalid indirect mapped block 1819239214 (level 0)
[  234.577758][ T8222] loop8: detected capacity change from 0 to 512
[  234.591191][ T8212] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.864: invalid indirect mapped block 1819239214 (level 1)
[  234.669636][ T8222] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  234.713891][ T8212] EXT4-fs (loop0): 1 truncate cleaned up
[  234.746448][ T8222] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  234.786897][ T8212] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback.
[  235.020414][ T8212] EXT4-fs (loop0): shut down requested (2)
[  235.409011][ T8252] loop8: detected capacity change from 0 to 512
[  236.468114][ T8236] loop1: detected capacity change from 0 to 32768
[  236.716853][ T8308] loop8: detected capacity change from 0 to 512
[  236.744473][ T8236] XFS (loop1): Mounting V5 Filesystem
[  236.886047][ T8308] EXT4-fs (loop8): Ignoring removed mblk_io_submit option
[  236.960933][ T8308] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  236.990350][ T8236] XFS (loop1): Ending clean mount
[  237.017222][ T8308] EXT4-fs (loop8): ea_inode feature is not supported for Hurd
[  237.269593][ T8308] loop8: detected capacity change from 0 to 1024
[  237.357275][ T8308] EXT4-fs (loop8): Mount option "dioread_nolock" incompatible with ext3
[  237.457475][ T4199] XFS (loop1): Unmounting Filesystem
[  238.714582][ T8371] 9pnet: p9_errstr2errno: server reported unknown error ��n$Ž[
[  238.714582][ T8371] Q&|xù6ÿÿÿÿÿÿÿ
[  238.930164][    C0] net_ratelimit: 151 callbacks suppressed
[  239.582939][ T8406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.888'.
[  240.413948][ T8390] loop8: detected capacity change from 0 to 32768
[  240.521677][ T8390] JBD2: Ignoring recovery information on journal
[  240.744016][ T8390] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  240.765584][ T8450] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  241.004184][ T6518] ocfs2: Unmounting device (7,8) on (node local)
[  241.394194][ T8465] loop0: detected capacity change from 0 to 512
[  241.598608][ T8465] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,barrier=0x000000000000000d,minixdf,stripe=0x0000000000000b74,resuid=0x0000000000000000,dioread_lock,grpjquota=,i_version,,errors=continue. Quota mode: writeback.
[  241.730930][ T8465] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  241.852681][   T26] audit: type=1800 audit(1793872196.637:56): pid=8465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.901" name="file1" dev="loop0" ino=15 res=0 errno=0
[  242.190388][ T7752] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  242.368668][ T8471] loop8: detected capacity change from 0 to 32768
[  242.406839][ T8471] (syz.8.902,8471,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  242.450233][ T8471] (syz.8.902,8471,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  242.539283][ T8471] JBD2: Ignoring recovery information on journal
[  242.567606][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88804fcf8800: rx timeout, send abort
[  242.580791][ T7752] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.609752][ T7752] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  242.670182][ T7752] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  242.700520][ T8471] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  242.715275][ T7752] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  242.742878][ T7752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.785512][ T7752] usb 4-1: config 0 descriptor??
[  242.832913][ T8498] loop0: detected capacity change from 0 to 16
[  242.890592][ T6518] ocfs2: Unmounting device (7,8) on (node local)
[  242.936592][ T8498] erofs: (device loop0): mounted with root inode @ nid 36.
[  243.069814][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88805e031800: rx timeout, send abort
[  243.078669][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88804fcf8800: abort rx timeout. Force session deactivation
[  243.323578][ T7752] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  243.396219][ T7752] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  243.453386][ T8507] smpboot: CPU 1 is now offline
[  243.477389][ T8509] fuse: Bad value for 'fd'
[  243.578260][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88805e031800: abort rx timeout. Force session deactivation
[  243.594199][ T7752] usb 4-1: USB disconnect, device number 7
[  243.702840][ T8517] loop0: detected capacity change from 0 to 1024
[  243.716795][ T8510] x86: Booting SMP configuration:
[  243.741821][ T8510] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  243.817734][    T0] kvm-clock: cpu 1, msr ff3c041, secondary cpu clock
[  243.830512][   T18] kvm-guest: stealtime: cpu 1, msr b8f27440
[  243.896689][ T8516] fido_id[8516]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  243.940191][    C0] net_ratelimit: 150 callbacks suppressed
[  244.004022][   T26] audit: type=1800 audit(1793872198.787:57): pid=8517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.918" name="file1" dev="loop0" ino=20 res=0 errno=0
[  244.088439][ T8521] loop1: detected capacity change from 0 to 512
[  244.244133][ T8521] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  244.316320][ T8521] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  244.388201][ T8537] capability: warning: `syz.4.926' uses deprecated v2 capabilities in a way that may be insecure
[  245.218432][ T8562] loop8: detected capacity change from 0 to 1024
[  245.456987][ T8562] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  245.510552][ T8562] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  245.579799][ T8533] loop3: detected capacity change from 0 to 32768
[  245.676409][ T8562] EXT4-fs error (device loop8): ext4_map_blocks:741: inode #15: block 3: comm syz.8.932: lblock 3 mapped to illegal pblock 3 (length 3)
[  245.853855][ T8533] XFS (loop3): Mounting V5 Filesystem
[  245.870871][ T8562] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  245.994208][ T8533] XFS (loop3): Ending clean mount
[  246.033650][ T8562] EXT4-fs (loop8): This should not happen!! Data will be lost
[  246.033650][ T8562] 
[  246.210384][ T8528] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  246.234241][ T8594] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: block 3: comm syz.8.932: lblock 3 mapped to illegal pblock 3 (length 1)
[  246.427829][ T8600] EXT4-fs error (device loop8): ext4_ext_remove_space:2944: inode #15: comm syz.8.932: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  246.448937][ T7120] XFS (loop3): Unmounting Filesystem
[  246.600208][ T8600] EXT4-fs error (device loop8) in ext4_setattr:5645: Corrupt filesystem
[  247.701658][ T8612] xt_socket: unknown flags 0x4c
[  247.952454][ T8620] FAULT_INJECTION: forcing a failure.
[  247.952454][ T8620] name failslab, interval 1, probability 0, space 0, times 0
[  248.028040][ T8620] CPU: 0 PID: 8620 Comm: syz.1.940 Not tainted syzkaller #0
[  248.035378][ T8620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  248.045589][ T8620] Call Trace:
[  248.048882][ T8620]  <TASK>
[  248.051822][ T8620]  dump_stack_lvl+0x188/0x250
[  248.056522][ T8620]  ? collect_syscall+0x6a0/0x6a0
[  248.061493][ T8620]  ? show_regs_print_info+0x20/0x20
[  248.066707][ T8620]  ? load_image+0x410/0x410
[  248.071236][ T8620]  ? sctp_hash_transport+0x191/0x16d0
[  248.076789][ T8620]  should_fail+0x383/0x4b0
[  248.081267][ T8620]  should_failslab+0x5/0x20
[  248.085813][ T8620]  slab_pre_alloc_hook+0x51/0xc0
[  248.090809][ T8620]  __kmalloc+0x6b/0x340
[  248.095002][ T8620]  ? sctp_tsnmap_init+0x98/0x1f0
[  248.099959][ T8620]  sctp_tsnmap_init+0x98/0x1f0
[  248.104754][ T8620]  sctp_process_init+0x26a2/0x2dd0
[  248.109959][ T8620]  ? sctp_process_inv_paramlength+0xd0/0xd0
[  248.115900][ T8620]  ? sctp_copy_one_addr+0x47d/0x660
[  248.121154][ T8620]  ? sctp_bind_addr_copy+0x37c/0x3c0
[  248.126494][ T8620]  sctp_sf_do_unexpected_init+0x90b/0x10d0
[  248.132360][ T8620]  ? sctp_sf_do_5_2_1_siminit+0x40/0x40
[  248.137945][ T8620]  ? mark_lock+0x94/0x320
[  248.142290][ T8620]  ? verify_lock_unused+0x140/0x140
[  248.147515][ T8620]  sctp_do_sm+0x245/0x5690
[  248.151953][ T8620]  ? load_image+0x410/0x410
[  248.156471][ T8620]  ? mark_lock+0x94/0x320
[  248.160816][ T8620]  ? sctp_generate_t3_rtx_event+0x340/0x340
[  248.166750][ T8620]  ? mark_lock+0x94/0x320
[  248.171183][ T8620]  ? skb_pull+0x8f/0x130
[  248.175478][ T8620]  ? sctp_inq_pop+0x1059/0x10e0
[  248.180384][ T8620]  sctp_assoc_bh_rcv+0x3ee/0x630
[  248.185382][ T8620]  sctp_backlog_rcv+0x157/0x3b0
[  248.190277][ T8620]  __release_sock+0x1e6/0x460
[  248.195000][ T8620]  release_sock+0x5b/0x1b0
[  248.199438][ T8620]  sctp_sendmsg+0x1bdd/0x2940
[  248.204150][ T8620]  ? sctp_getsockopt+0x8a0/0x8a0
[  248.209103][ T8620]  ? aa_af_perm+0x340/0x340
[  248.213948][ T8620]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  248.220387][ T8620]  ? aa_sock_msg_perm+0x94/0x150
[  248.225376][ T8620]  ? sock_rps_record_flow+0x17/0x3b0
[  248.230720][ T8620]  ? inet_sendmsg+0x7a/0x2a0
[  248.230747][ T8620]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  248.230779][ T8620]  __sys_sendto+0x46d/0x620
[  248.230814][ T8620]  ? __ia32_sys_getpeername+0x80/0x80
[  248.230865][ T8620]  ? lock_chain_count+0x20/0x20
[  248.241413][ T8620]  __x64_sys_sendto+0xda/0xf0
[  248.241448][ T8620]  do_syscall_64+0x4c/0xa0
[  248.241471][ T8620]  ? clear_bhb_loop+0x30/0x80
[  248.251364][ T8620]  ? clear_bhb_loop+0x30/0x80
[  248.251394][ T8620]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  248.251419][ T8620] RIP: 0033:0x7fbd2c8eeb19
[  248.260993][ T8620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  248.261014][ T8620] RSP: 002b:00007fbd2ab45028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  248.261040][ T8620] RAX: ffffffffffffffda RBX: 00007fbd2cb74fa0 RCX: 00007fbd2c8eeb19
[  248.270158][ T8620] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003
[  248.270175][ T8620] RBP: 00007fbd2c986b70 R08: 00002000000001c0 R09: 000000000000001c
[  248.270190][ T8620] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000000
[  248.270205][ T8620] R13: 00007fbd2cb75038 R14: 00007fbd2cb74fa0 R15: 00007ffd4df29658
[  248.270250][ T8620]  </TASK>
[  248.724312][ T8634] loop8: detected capacity change from 0 to 128
[  248.936593][ T8639] overlayfs: failed to clone lowerpath
[  248.981818][ T8613] loop3: detected capacity change from 0 to 32768
[  248.992564][ T8640] overlayfs: failed to clone lowerpath
[  249.010118][    C0] net_ratelimit: 140 callbacks suppressed
[  249.501950][ T8652] loop3: detected capacity change from 0 to 4096
[  249.614257][ T8652] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  249.986992][ T8663] smc: removing ib device rxe0
[  250.048025][ T8660] loop1: detected capacity change from 0 to 4096
[  250.063017][ T1135] ntfs3: loop3: ino=1b, Internal error
[  250.075420][ T1135] ntfs3: loop3: ntfs3_write_inode r=1b failed, -22.
[  250.243576][ T8660] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  250.272732][ T8666] loop3: detected capacity change from 0 to 128
[  250.355810][ T8660] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  250.502420][ T8660] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  250.544808][ T8660] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  250.666385][ T8660] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  250.719472][ T8660] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  250.820706][ T8660] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  250.871039][ T8660] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  250.969214][ T8660] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  251.016269][ T8660] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  251.125118][ T8660] ntfs: volume version 3.1.
[  252.195632][ T8684] loop0: detected capacity change from 0 to 32768
[  254.050116][    C0] net_ratelimit: 140 callbacks suppressed
[  255.247919][ T7751] libceph: connect (1)[c::]:6789 error -101
[  255.258205][ T8699] ceph: No mds server is up or the cluster is laggy
[  255.291384][ T7751] libceph: mon0 (1)[c::]:6789 connect error
[  255.339933][ T8707] loop1: detected capacity change from 0 to 512
[  255.381571][ T8707] EXT4-fs (loop1): inline encryption not supported
[  255.483023][ T8707] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec018, mo2=0002]
[  255.518891][ T8707] System zones: 0-2, 18-18, 34-35
[  255.597351][ T8707] EXT4-fs (loop1): mounted filesystem without journal. Opts: inlinecrypt,debug,usrquota,lazytime,,errors=continue. Quota mode: writeback.
[  255.639433][ T5341] libceph: connect (1)[c::]:6789 error -101
[  255.652598][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  255.658965][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  255.700498][ T5341] libceph: mon0 (1)[c::]:6789 connect error
[  255.710363][ T8707] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  257.746648][ T8725] loop3: detected capacity change from 0 to 1764
[  258.388572][ T8745] device ip6gretap0 entered promiscuous mode
[  258.433389][ T8749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.991'.
[  259.090105][    C0] net_ratelimit: 147 callbacks suppressed
[  259.460744][ T8775] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  259.468332][ T8775] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  259.624124][ T8780] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  259.630693][ T8780] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  259.929314][ T8753] loop3: detected capacity change from 0 to 40427
[  260.108002][ T8753] F2FS-fs (loop3): invalid crc value
[  260.142710][ T8753] F2FS-fs (loop3): Found nat_bits in checkpoint
[  260.428590][ T8797] device ip6gretap0 entered promiscuous mode
[  260.440387][ T8753] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  260.477295][ T8797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1008'.
[  260.511214][ T8801] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1009'.
[  260.689597][ T8753] attempt to access beyond end of device
[  260.689597][ T8753] loop3: rw=2049, want=45104, limit=40427
[  260.794227][ T8809] loop8: detected capacity change from 0 to 256
[  260.877291][ T8809] exfat: Deprecated parameter 'utf8'
[  260.902873][ T8809] exfat: Deprecated parameter 'namecase'
[  260.959434][ T8809] exfat: Deprecated parameter 'namecase'
[  260.985802][ T8809] exfat: Deprecated parameter 'utf8'
[  261.051461][ T8809] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  261.187876][ T7120] attempt to access beyond end of device
[  261.187876][ T7120] loop3: rw=524288, want=45072, limit=40427
[  261.283492][ T7120] attempt to access beyond end of device
[  261.283492][ T7120] loop3: rw=0, want=45072, limit=40427
[  261.317332][ T8824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1019'.
[  261.375806][ T8824] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.515605][ T8829] xt_hashlimit: size too large, truncated to 1048576
[  261.542880][  T145] attempt to access beyond end of device
[  261.542880][  T145] loop3: rw=2049, want=40992, limit=40427
[  261.588601][ T8824] device bridge_slave_0 left promiscuous mode
[  261.622464][ T8824] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.250199][    T9] unregister_netdevice: waiting for lo to become free. Usage count = 2
[  262.266374][ T8821] loop0: detected capacity change from 0 to 32768
[  262.310452][ T8844] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.327643][ T8844] device bridge0 left promiscuous mode
[  262.469246][ T8821] JBD2: Ignoring recovery information on journal
[  262.724332][ T8821] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  262.911312][ T6860] ocfs2: Unmounting device (7,0) on (node local)
[  264.130287][    C0] net_ratelimit: 134 callbacks suppressed
[  269.170126][    C0] net_ratelimit: 142 callbacks suppressed