last executing test programs:

5m40.870162776s ago: executing program 32 (id=148):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='devpts\x00', 0x2200892, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r1, &(0x7f00000047c0)={0x2020}, 0x2020)

5m29.400442566s ago: executing program 33 (id=200):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt(r0, 0x1, 0x2, &(0x7f0000003640)=""/236, &(0x7f0000003740)=0xec)

3m37.529671363s ago: executing program 4 (id=847):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

3m35.169786722s ago: executing program 4 (id=864):
unshare(0x60400)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000003c0)={0x80})

3m35.087956609s ago: executing program 34 (id=864):
unshare(0x60400)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000003c0)={0x80})

3m1.835570014s ago: executing program 35 (id=1250):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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")
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x20000c4, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000001600)="$eJzs3d9rW1UcAPDvTZv91lYYQ0WkMMHJXLq2/pjgw3wUHQ70fYY2K6PpMpp0rHXg9uBefJEhiDgQ3/Xdx+E/4F8x0MGQUfTBl8pNb7qsTZpszdbO+/nALefk3txzv7n3e3puTkICyK2x9E8h4qWI+CaJGImIJFs3HNnKsbXtVu5fnU6XJFZXP/0raW6X1lv7aj3vYFZ5MSJ++yrieGFzu/Wl5blytVpZyOrjjflL4/Wl5RMX5suzldnKxcmpqVNvT02+9+47A4v1jbP/fP/J7Q9PfX105btf7r5wM4nTcShb1x7HNlxrr4zFWPaaFOP0hg0nBtDYbpLs9AHwWIayPC9G2geMxFCW9cD/35cRsQrkVCL/Iada44DWvf2A7oOfGfc+WLsB2hz/8Np7I7GveW90YCV56M4ovd8dHUD7aRu//nnrZrrE4N6HAOjp2vWIODk8vLn/S7L+7/Gd7GObjW3o/+DpuZ2Of97sNP4prI9/osP452CH3H0cvfO/cHcAzXSVjv/e7zj+XZ+0Gh3Kas81x3zF5PyFaiXt256PiGNR3JvWt5rPObVyZ7XbuvbxX7qk7bfGgtlx3B3e+/BzZsqN8nZibnfvesTLHce/yfr5Tzqc//T1ONtnG0cqt17ttq53/E/W6k8Rr3c8/w9mtJKt5yfHm9fDeOuq2OzvG0d+L3Zpf6fjT8//ga3jH03a52vrG3bwWu/5oh/3/Vvptu6h+KP/639P8lmzvCd77Eq50ViYiNiTfLz58ckHz23VW9un8R87unX/1+n63x8Rn/eMfM2Nwz+/0lf8O3T+Zx7p/D9aYd9cuXrnoy9+6NZ+f/3fW83SseyRfvq/fg9wO68dAAAAAAAA7DaFiDgUSaG0Xi4USqW1z3ccjgOFaq3eOH6+tnhxJprflR2NYqE10z3S9nmIiezzsK365Ib6VPYdw2+H9jfrpeladWangwcAAAAAAAAAAAAAAAAAAIBd4mCX7/+n/hja6aMDnjg/+Q351TP/B/FLT8Cu5P8/5Jf8h/yS/5Bf8h/yS/5Dfsl/yC/5D/kl/wEAAAAAAAAAAAAAAAAAAAAAAAAAAGCgzp45ky6rK/evTqf1mctLi3O1yydmKvW50vzidGm6tnCpNFurzVYrpenafK/9VWu1SxOTsXhlvFGpN8brS8vn5muLFxvnLsyXZyvnKsWnEhUAAAAAAAAAAAAAAAAAAAA8W+pLy3PlarWyoJCrwkh2/re/w+HdEI7CwAs73DEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJv/AgAA//9UqDQA")
open(&(0x7f00000000c0)='./bus\x00', 0x6687e, 0x57)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x2fd801, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x84)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000003, 0x28011, r0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))

2m27.169324873s ago: executing program 7 (id=1840):
capset(0x0, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000001"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000f203"])

2m25.447969111s ago: executing program 7 (id=1847):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x7, 0x0, &(0x7f0000000340)="c1dfb080cd21d3", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m25.066967752s ago: executing program 36 (id=1847):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x7, 0x0, &(0x7f0000000340)="c1dfb080cd21d3", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m16.389272887s ago: executing program 37 (id=1950):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x90)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
socket$packet(0x11, 0x2, 0x300)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xd)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x8080000, 0x1d000, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x8000000, 0x2000, 0x1})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000040)={0xdddd0000, 0x10000})

2m0.6295992s ago: executing program 38 (id=2105):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="0314000021200000340012800c0001006d6163766c616e002400028008000300030000000800010010000000100005800a0004007a629225a551000008000500", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)

1m59.614879601s ago: executing program 9 (id=2121):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x8, {0x5, 0x3, 0x0, 0x4000000000008, 0xfffffffd, 0x6, {0x2, 0xfffffffffffffffc, 0x1, 0x100000000004, 0x7, 0x81, 0x8, 0x9, 0x8, 0x8000, 0x28001, 0x0, 0x0, 0x5, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m58.979680183s ago: executing program 9 (id=2118):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x5, 0x2, 0x7, 0x141, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x2a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000440)=ANY=[], 0x1, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x3ffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0xdddc55ec8cecea2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
pwritev2(r1, 0x0, 0x0, 0x6, 0xde, 0x10)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000000000000040000000000000065"])

1m58.824756345s ago: executing program 9 (id=2119):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0xa4)
mkdir(&(0x7f0000000100)='./bus\x00', 0xe8)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
r1 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

1m58.540211558s ago: executing program 9 (id=2123):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="a00000001000ffff28bd700001dcdf2500000000", @ANYRES32=0x0, @ANYBLOB="01000000230800007800128009000100766c616e00000000680002800600010003000000100004804c000100020000007c0a000040000380fcfe010001000000070000000c00010004000000080000000c00010007000000280b00000c00010081000000c7b0000090fe010003000000030000000c000200010000000400000008000500", @ANYRES32], 0xa0}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000)

1m58.2674347s ago: executing program 9 (id=2132):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000046, &(0x7f00000005c0)={[{@dioread_nolock}, {@data_err_abort}, {@jqfmt_vfsold}, {@abort}, {@data_err_ignore}, {@discard}, {@debug}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@lazytime}, {@nobh}]}, 0x1, 0x560, &(0x7f0000000680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
r2 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r2, &(0x7f0000000880), 0x10)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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")
openat(0xffffffffffffff9c, 0x0, 0x82400, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000140)={@loopback={0x0, 0xffff00000000}, 0x80})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200, 0x400000]})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44810)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)=ANY=[@ANYBLOB="a00000", @ANYRES16=0x0, @ANYBLOB], 0xa0}}, 0x8000)
truncate(&(0x7f0000000040)='./file0\x00', 0x1b1c)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20)
fallocate(r5, 0x8, 0x4000, 0x4000)

1m55.478969933s ago: executing program 9 (id=2136):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m55.048439938s ago: executing program 2 (id=2140):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa4)
mkdir(0x0, 0xe8)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
r1 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

1m54.874856312s ago: executing program 2 (id=2141):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001e00000000000000000000007a02500003ffffff95"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x48}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94)

1m54.694123446s ago: executing program 2 (id=2143):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380), 0xfe, 0x57b, &(0x7f0000000680)="$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")
chdir(&(0x7f00000001c0)='./file0\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
getdents(r0, 0x0, 0x0)

1m54.381444721s ago: executing program 2 (id=2145):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000))
sendmsg$nl_route(r0, 0x0, 0x40000)

1m54.115960932s ago: executing program 2 (id=2146):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000046, &(0x7f00000005c0)={[{@dioread_nolock}, {@data_err_abort}, {@jqfmt_vfsold}, {@abort}, {@data_err_ignore}, {@discard}, {@debug}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@lazytime}, {@nobh}]}, 0x1, 0x560, &(0x7f0000000680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
r2 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r2, &(0x7f0000000880), 0x10)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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")
openat(0xffffffffffffff9c, 0x0, 0x82400, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000140)={@loopback={0x0, 0xffff00000000}, 0x80})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200, 0x400000]})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44810)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)=ANY=[@ANYBLOB="a00000", @ANYRES16=0x0, @ANYBLOB], 0xa0}}, 0x8000)
truncate(&(0x7f0000000040)='./file0\x00', 0x1b1c)
fallocate(0xffffffffffffffff, 0x8, 0x4000, 0x4000)

1m53.154802819s ago: executing program 2 (id=2151):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001e00000000000000000000007a02500003ffffff95"], &(0x7f0000000080)='GPL\x00', 0x8, 0x94, &(0x7f0000000600)=""/148, 0x40f00, 0x48}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)

1m52.168011728s ago: executing program 5 (id=2154):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7fff0000}]})
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280))
wait4(r1, 0x0, 0x8, 0x0)

1m51.669136239s ago: executing program 5 (id=2155):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18)
r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x2402)
write(r1, &(0x7f0000000400)="bce164937ee5006630baf7b3212caaea5fb0810666", 0x15)

1m51.370104933s ago: executing program 5 (id=2156):
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x90)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m50.991970732s ago: executing program 5 (id=2157):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa4)
mkdir(&(0x7f0000000100)='./bus\x00', 0xe8)
mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
r1 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

1m50.796188499s ago: executing program 5 (id=2158):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000046, &(0x7f00000005c0)={[{@dioread_nolock}, {@data_err_abort}, {@jqfmt_vfsold}, {@abort}, {@data_err_ignore}, {@discard}, {@debug}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@lazytime}, {@nobh}]}, 0x1, 0x560, &(0x7f0000000680)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0XUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++FK56b1rtiZt1mVLZz4fSDkn9ybnfHvu9+Tc3IQEMLDGsj+liJcj4psk4mBEJPm24cg3jq3tt3L/6nR2S2J19dO/kuZ+Wb14ruJx+/PKSxHx21cRx0sb260vLc9VqtV0Ia+PN+YvjdeXlk9cmK/MprPpxcmpqVNvT02+9+47PYv1jbP/fP/J7Q9PfX105btf7h66mcTpOJBva43jCVxrrYzFWP4/GYnTj+w40YPGdpKk3x1gW4byPB+JbA44GEN51gP/f19GxCowoBL5DwOqWAcU5/bRm/Pg58a9D9ZOgIr4198HGF57byT2NM+N9q0kD50ZZee7oz1oP2vj1z9v3cxu0bv3IQC2dO16RJwcHt44/yX5/Ld9J7vY59E2zH/w7NzO1j9vtlv/lB6sf6LN+md/m9zdjq3zv3S3B810lK3/3o/28edGh/LaC80130hy/kI1zea2FyPiWIzszuqbXc85tXJntdO2sbWnvlmsAbP2i7Vg3o+7w7sffsxMpVF5kphb3bse8Urb9W/yYPyTNuOfdfpsl20cSW+91mlb6/q3ffxP1+pPEa+3Hf/1K1rJ5tcnx5vHw3hxVGz0940jv3dqv9/xZ+O/b/P4R5PW67X1x2/jxz3/pp22PRR/dH/870o+a5Z35fddqTQaCxMRu5KPN94/uf7Yol7sn8V/7Ojm81+7439vRHzeZfw3Dv/8alfx92n8Zx5r/B+/cOejL37o1P7W8Wfj/1azdCy/p5v5r9sOPsn/DgAAAAAAAHaaUkQciKRUflAulcrltc93HI59pWqt3jh+vrZ4cSaa35UdjZFScaX7YMvnISbyz8MW9clH6lMRcSgivh3a26yXp2vVmX4HDwAAAAAAAAAAAAAAAAAAADvE/g7f/8/8MdTv3gFPnZ/8hsG1Zf734peegB3J6z8MLvkPg0v+w+Bq5n/S714A/eD1HwaX/IfBJf9hcMl/AAAAAAAAAAAAAAAAAAAAAAAAAAAA6KmzZ85kt9WV+1ens/rM5aXFudrlEzNpfa48vzhdnq4tXCrP1mqz1bQ8XZvf6vmqtdqliclYvDLeSOuN8frS8rn52uLFxrkL85XZ9Fw68kyiAgAAAAAAAAAAAAAAAAAAgOdLfWl5rlKtpgsKCtsqDO+Mbij0uNDvmQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1v0XAAD//zDLNIQ=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
r2 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r2, &(0x7f0000000880), 0x10)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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")
openat(0xffffffffffffff9c, 0x0, 0x82400, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000140)={@loopback={0x0, 0xffff00000000}, 0x80})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200, 0x400000]})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44810)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)=ANY=[@ANYBLOB="a00000", @ANYRES16=0x0, @ANYBLOB], 0xa0}}, 0x8000)
truncate(&(0x7f0000000040)='./file0\x00', 0x1b1c)
fallocate(0xffffffffffffffff, 0x8, 0x4000, 0x4000)

1m46.333218317s ago: executing program 5 (id=2159):
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYBLOB=',rootmode=0000000', @ANYRESDEC=0x0])
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x2, 0x801)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, r2, 0xb})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c5, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2], 0x8080000, 0x1144})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m39.583501117s ago: executing program 39 (id=2136):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m37.333857407s ago: executing program 40 (id=2151):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001e00000000000000000000007a02500003ffffff95"], &(0x7f0000000080)='GPL\x00', 0x8, 0x94, &(0x7f0000000600)=""/148, 0x40f00, 0x48}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)

1m30.579695009s ago: executing program 41 (id=2159):
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYBLOB=',rootmode=0000000', @ANYRESDEC=0x0])
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x2, 0x801)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, r2, 0xb})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c5, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2], 0x8080000, 0x1144})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m10.590084852s ago: executing program 4 (id=2171):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7fff0000}]})
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
exit(0xffff)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280))
wait4(0x0, 0x0, 0x8, 0x0)

1m9.476354901s ago: executing program 4 (id=2228):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000))
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="a00000001000ffff28bd700001dcdf2500000000", @ANYRES32=0x0, @ANYBLOB="01000000230800007800128009000100766c616e00000000680002800600010003000000100004804c000100020000007c0a000040000380fcfe010001000000070000000c00010004000000080000000c00010007000000280b00000c00010081000000c7b0000090fe010003000000030000000c000200010000000400000008000500"], 0xa0}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000)

1m9.424103004s ago: executing program 1 (id=2229):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18)
r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x2402)
write(r1, &(0x7f0000000400)="bce164937ee5006630baf7b3212caaea5fb0810666a4bdcae3f61b6aca9ea9ae16966bfcf02f5ead", 0x28)

1m9.215768201s ago: executing program 1 (id=2231):
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000300)='.\x02\x00', 0x2000800, &(0x7f0000000040)=ANY=[], 0x1, 0x2da, &(0x7f0000000340)="$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")
write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="150000"], 0x15)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x82442)

1m9.040503696s ago: executing program 4 (id=2232):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000046, &(0x7f00000005c0)={[{@dioread_nolock}, {@data_err_abort}, {@jqfmt_vfsold}, {@abort}, {@data_err_ignore}, {@discard}, {@debug}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@lazytime}, {@nobh}]}, 0x1, 0x560, &(0x7f0000000680)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000880), 0x10)
connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4")
openat(0xffffffffffffff9c, 0x0, 0x82400, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000140)={@loopback={0x0, 0xffff00000000}, 0x80})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200, 0x400000]})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44810)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20)
fallocate(r4, 0x8, 0x4000, 0x4000)

1m8.85200717s ago: executing program 1 (id=2234):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, 0x0, 0x0)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10}}, 0x50)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}})
open$dir(&(0x7f0000000000)='./file0\x00', 0x104180, 0x40)

1m8.447029723s ago: executing program 1 (id=2237):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xa}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xb}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000080}, 0x40004)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m7.86475971s ago: executing program 1 (id=2238):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sigaltstack(0x0, 0x0)

1m7.640956508s ago: executing program 4 (id=2240):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000))
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="a00000001000ffff28bd700001dcdf2500000000", @ANYRES32=0x0, @ANYBLOB="01000000230800007800128009000100766c616e00000000680002800600010003000000100004804c000100020000007c0a000040000380fcfe010001000000070000000c00010004000000080000000c00010007000000280b00000c00010081000000c7b0000090fe010003000000030000000c000200010000000400000008000500"], 0xa0}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000)

1m7.530121947s ago: executing program 1 (id=2242):
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x200c590, &(0x7f0000000d40)={[{@minixdf}, {@dioread_nolock}, {@nodiscard}, {@nouid32}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x10001}}, {@bh}]}, 0x12, 0x503, &(0x7f0000000e00)="$eJzs3d9rHFsdAPDvTLJp0ube5PoDrhe8t9hKWrS7TeOP0odaQexTQa3gY02TTQjZZEN20zahaIp/gCCiDz75oi+C+CxI/wQRCvouKopoqw8K6srO7pK43U22Jtnt3Xw+MJlzzs7M93sednbOzMluAKfW+Yi4FREjEXE5Iqaa7WlzuV2v7Da2e/H88UJ9SaJWu/uXJJJ629jjhdaxkub6XGOXmIyIr9yOuJ9EnGmLW9neWZ0vlYqbzXqhurZRqGzvXFlZm18uLhfX5+ZmYzTaD/1/qe/8ZkTc/MIfvvftH3/x5i8++fC39/506RtJluNEtk29X0eJcVDsiFyM72urd2vzJIINwEhznRtwHgAA9KZ+jf+BiPhYdv0/FSP7LroBAACA4VD73GT8K4moAQAAAEMrzebAJmm+ORdgMtI0n2/M4f1QnE1L5Ur1E0vlrfXFxnze6cilSyul4tXmXOHpyCX1+mxW3qtfa6vPRcRbEfHdqYmsnl8olxYHffMDAAAATolzbeP/v081xv8AAADAkJkedAIAAADAiTP+BwAAgOFn/A8AAABD7Ut37tSXWuv3rxcfbG+tlh9cWSxWVvNrWwv5hfLmRn65XF7OvrNv7bDjlcrljU/F+tajQrVYqRYq2zv31spb69V7K//zE9gAAABAH7313tPfJBExHhOxe2MiaxsbdFJAXyRdKx38PqJ2sukAfTRy6BbfbG/48I9OKhmgr0YHnQAwMLlBJwAM2u5hQ/+uk3d+efzJAAAAJ2PmI43n/7s3Xn7+794ADLd00AkAAH3n+T+cXrkeZgACw+3NQ14/+vP/2t6/DtRemlMMAAD0wWS2JGm++SxwMtI0n494I/tZgFyytFIqXm2OD349lTtTr89meyaRRPyz1jDobgAAAAAAAAAAAAAAAAAAAAAAAADAa61WS6IGAAAADLWI9I9J9m3+ETNTFyfb7w+MJf+YytYR8fAHd7//aL5a3Zytt/81a0+a22Xt11759sPY0e9gAAAAAO1a4/TWOB4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjtOL548XWks/4/758xEx3TH+e+PZajxyEXH2b0mM7tsviYiRY4i/+yQi3u4UP6mnFdPRyKJT/IkBxk8j4twxxIfT7Gn9/HOr0/svjfPZuvP7b7S5HFX3818arfPfSJfzzxs9xnjn2U8LXeM/iXhntPP5pxU/6RL/Qo/xv/7VnZ1ur9V+GDHT8fMnifjZXqxCdW2jUNneubKyNr9cXC6uz83Nfub6Z69/+vrVwtJKqdj82zHGdz768/8c1P+zXeJPH9L/iz32/9/PHj3/YKOY6xT/0oXOn79vd4mfNj/7Pt4s11+faZV3G+X93v3Jr949qP+LXfo/vm+7Tv2/1GP/L3/5W7/rcVMAoA8q2zur86VScfOYC/Gqe52JHjYeiRNIVeH9Wfja/eM5TtJ8K7wu/epUaN1q6mPQAZ6UAACAE7F30T/oTAAAAAAAAAAAAAAAAAAAAOD06sfXibXH3B1MVwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADvTfAAAA//9vkdPb")
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0)
acct(&(0x7f0000000040)='./bus\x00')
setreuid(0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000000)={[{@mblk_io_submit}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x7b9, &(0x7f00000007c0)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_DEST(r0, 0x0, 0x800)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_NAME_TABLE_GET(r1, 0x0, 0x40)

1m1.224047442s ago: executing program 3 (id=2262):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000b40)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}, {0x100, 0x7, 0x5, 0x4}, {0x101, 0x7e, 0x2, 0x2}, {0xc0, 0x2, 0xc9, 0xa4}, {0xc, 0x9, 0x1, 0xfff}, {0x101, 0xd, 0x4, 0xffffffff}, {0x9, 0x2, 0x5, 0xfffffffe}, {0x6, 0xfd, 0x9, 0x74}]})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1m0.856021581s ago: executing program 3 (id=2263):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa4)
mkdir(&(0x7f0000000100)='./bus\x00', 0xe8)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
r1 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

1m0.608660801s ago: executing program 3 (id=2265):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xa}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xb}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000080}, 0x40004)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m0.265772279s ago: executing program 3 (id=2266):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8082, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f00000002c0)={0x74, 0x0, 0x30})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x5b, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB='\"'])

59.663706187s ago: executing program 3 (id=2269):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000046, &(0x7f00000005c0)={[{@dioread_nolock}, {@data_err_abort}, {@jqfmt_vfsold}, {@abort}, {@data_err_ignore}, {@discard}, {@debug}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@lazytime}, {@nobh}]}, 0x1, 0x560, &(0x7f0000000680)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000880), 0x10)
connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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")
openat(0xffffffffffffff9c, 0x0, 0x82400, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000140)={@loopback={0x0, 0xffff00000000}, 0x80})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200, 0x400000]})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20)
fallocate(r4, 0x8, 0x4000, 0x4000)

53.842692294s ago: executing program 3 (id=2277):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000007c0)='sched_switch\x00', r0}, 0x18)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x400000008000f28, 0x0)
splice(r3, 0x0, r2, 0x0, 0x114, 0xe)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0)

52.234987633s ago: executing program 42 (id=2242):
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x200c590, &(0x7f0000000d40)={[{@minixdf}, {@dioread_nolock}, {@nodiscard}, {@nouid32}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x10001}}, {@bh}]}, 0x12, 0x503, &(0x7f0000000e00)="$eJzs3d9rHFsdAPDvTLJp0ube5PoDrhe8t9hKWrS7TeOP0odaQexTQa3gY02TTQjZZEN20zahaIp/gCCiDz75oi+C+CxI/wQRCvouKopoqw8K6srO7pK43U22Jtnt3Xw+MJlzzs7M93sednbOzMluAKfW+Yi4FREjEXE5Iqaa7WlzuV2v7Da2e/H88UJ9SaJWu/uXJJJ629jjhdaxkub6XGOXmIyIr9yOuJ9EnGmLW9neWZ0vlYqbzXqhurZRqGzvXFlZm18uLhfX5+ZmYzTaD/1/qe/8ZkTc/MIfvvftH3/x5i8++fC39/506RtJluNEtk29X0eJcVDsiFyM72urd2vzJIINwEhznRtwHgAA9KZ+jf+BiPhYdv0/FSP7LroBAACA4VD73GT8K4moAQAAAEMrzebAJmm+ORdgMtI0n2/M4f1QnE1L5Ur1E0vlrfXFxnze6cilSyul4tXmXOHpyCX1+mxW3qtfa6vPRcRbEfHdqYmsnl8olxYHffMDAAAATolzbeP/v081xv8AAADAkJkedAIAAADAiTP+BwAAgOFn/A8AAABD7Ut37tSXWuv3rxcfbG+tlh9cWSxWVvNrWwv5hfLmRn65XF7OvrNv7bDjlcrljU/F+tajQrVYqRYq2zv31spb69V7K//zE9gAAABAH7313tPfJBExHhOxe2MiaxsbdFJAXyRdKx38PqJ2sukAfTRy6BbfbG/48I9OKhmgr0YHnQAwMLlBJwAM2u5hQ/+uk3d+efzJAAAAJ2PmI43n/7s3Xn7+794ADLd00AkAAH3n+T+cXrkeZgACw+3NQ14/+vP/2t6/DtRemlMMAAD0wWS2JGm++SxwMtI0n494I/tZgFyytFIqXm2OD349lTtTr89meyaRRPyz1jDobgAAAAAAAAAAAAAAAAAAAAAAAADAa61WS6IGAAAADLWI9I9J9m3+ETNTFyfb7w+MJf+YytYR8fAHd7//aL5a3Zytt/81a0+a22Xt11759sPY0e9gAAAAAO1a4/TWOB4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjtOL548XWks/4/758xEx3TH+e+PZajxyEXH2b0mM7tsviYiRY4i/+yQi3u4UP6mnFdPRyKJT/IkBxk8j4twxxIfT7Gn9/HOr0/svjfPZuvP7b7S5HFX3818arfPfSJfzzxs9xnjn2U8LXeM/iXhntPP5pxU/6RL/Qo/xv/7VnZ1ur9V+GDHT8fMnifjZXqxCdW2jUNneubKyNr9cXC6uz83Nfub6Z69/+vrVwtJKqdj82zHGdz768/8c1P+zXeJPH9L/iz32/9/PHj3/YKOY6xT/0oXOn79vd4mfNj/7Pt4s11+faZV3G+X93v3Jr949qP+LXfo/vm+7Tv2/1GP/L3/5W7/rcVMAoA8q2zur86VScfOYC/Gqe52JHjYeiRNIVeH9Wfja/eM5TtJ8K7wu/epUaN1q6mPQAZ6UAACAE7F30T/oTAAAAAAAAAAAAAAAAAAAAOD06sfXibXH3B1MVwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADvTfAAAA//9vkdPb")
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0)
acct(&(0x7f0000000040)='./bus\x00')
setreuid(0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000000)={[{@mblk_io_submit}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x7b9, &(0x7f00000007c0)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_DEST(r0, 0x0, 0x800)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_NAME_TABLE_GET(r1, 0x0, 0x40)

51.030350419s ago: executing program 43 (id=2240):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000))
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="a00000001000ffff28bd700001dcdf2500000000", @ANYRES32=0x0, @ANYBLOB="01000000230800007800128009000100766c616e00000000680002800600010003000000100004804c000100020000007c0a000040000380fcfe010001000000070000000c00010004000000080000000c00010007000000280b00000c00010081000000c7b0000090fe010003000000030000000c000200010000000400000008000500"], 0xa0}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000)

36.805607519s ago: executing program 44 (id=2277):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000007c0)='sched_switch\x00', r0}, 0x18)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x400000008000f28, 0x0)
splice(r3, 0x0, r2, 0x0, 0x114, 0xe)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0)

21.039020643s ago: executing program 7 (id=2280):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf6bf531d9ec214627c11430c1", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000f00)=[{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a00)="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", 0xfffffd42}, {&(0x7f0000000840)="bd1d736b9279206e3a8562e0121873b40c1f9e0a03a0d0c231313ae00f8d7163d2", 0x21}], 0x2, 0x0, 0x0, 0x20044004}], 0x1, 0x8100)

19.722254139s ago: executing program 7 (id=2302):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4c1, &(0x7f0000000e40)="$eJzs3M1rHOUfAPDvbF763uTXX622trpaxeJL0qRVe/CgouBBQdBDPcYkrbXbRpoItgTditSjFLyLR8G/wJsXUQ8ieFXwKIWiQWjqKTKzM+1ms0k3m6SJ2c8Hkn2emWd2nu/MPLvPzLMzAXSscvovidgZEb9GRF8tO79AufYyOzM9enNmejSJubk3/kyycjdmpkeLosVyO/LMkVJE6ZMknk8Wrnfy4qWzI5XK+IU8Pzh17r3ByYuXnjpzbuT0+Onx88MnThw/NvTsM8NPr0qcaVw3Dnw4cXD/K29dfW305NW3f/g6rda+Q7X59XHc0c2FAW1rUqycbrW/5jKN8x5dZv03ul116aR7HSvCsnRFRLq7erL23xddcXvn9cXLH69r5YA1lX43bVl8dnUO2MSSaHvR2VWtCHCXFV/06flv8XeXuh4bwvUXInrz9OzM9Ojsrfi7o5RP71nD9Zcj4mT1ny/Sv1judQgAgDZkfZsnm/X/SrEve62NdezOx1D6I+J/EbEnIv4fEXsj4p6IrOy90Rv31Rae64tb3acllRvyC/s/pWtN67xK0v7fc3V9v9m6+POX/q48tyuLvyc5daYyfjTfJkeiZ0uaH1piHd++9Mtni82r7/+lf+n6i75gXoFr3Q0X6MZGpkZWayNcvxxxoLtZ/MmtkYD0CNgfEQeW99a7i8SZx786uFihO8e/hFUYZ5r7MuKx2v6vRkP8hWTp8cnBrVEZPzpYHBUL/fjzldfzZG/jvBXFvwrS/b99/vGfz7mcv/b9ndTGa3uiUhm/MLn8dVz57dNFz2naPf57kzezMeuf3qlN+2BkaurCUERv8mqWLzZ0Nn349rJFviifxn/kcPP2vydfJo3//ohID+JDEfFARDyY1/2hiHg4Ig4vEf/3Lz7y7hLxJ5HEuu7/saaff0nE1izRn9SP17eR6Dr73TdNfgJQxN/C/j8e1eyztib7/LuDViu48i0IAAAAG18pInZGUhqopcs7o1QaGKj9hn9vbC9VJiannjg18f75sdo9Av3RUyqudPXVXQ8dSqr5O9byw/m14mL+sfy68edd27L8wOhEZWydY4dOt2N++4+i/af+6Frv2gFrzv1a0Lka239Lv9wANoVWvv+dC8Dm1KT9N3ueBbAJOf+HztWs/X/UkNf/h81pYfv/vckj64DNSP8fOpf2D51L+4eO1Opd/MXzFNp+CMC8RHGzQPvvs7XlO/wXJPJIqiuOot1EecXvU+yN+lnFtLWs/La4PSVKy1i8uJrUvEy1bkp1kTIdnkhbTDuLx+7Wn4UxP9HkYTUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/Qf8GAAD//zM92fU=")
creat(&(0x7f0000000300)='./bus\x00', 0x110)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r1, 0x0, 0x0)

17.598960299s ago: executing program 7 (id=2308):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000340)={0x2, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
truncate(&(0x7f0000000080)='./file0/file3\x00', 0x40)

10.387994227s ago: executing program 7 (id=2310):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x74bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0xffe0, 0xfff1}, {0x6, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080)

9.296742295s ago: executing program 45 (id=2310):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x74bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0xffe0, 0xfff1}, {0x6, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080)

6.633912868s ago: executing program 6 (id=2319):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24000080}, 0x40004)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6.242071049s ago: executing program 8 (id=2320):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x4, 0x1, 0xdddd1000, 0x2000, &(0x7f000002f000/0x2000)=nil})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"])
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.787755226s ago: executing program 6 (id=2323):
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000002180), &(0x7f0000000040)=0x30)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
accept$alg(r3, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x10}}], 0x40, 0x200508c5}}], 0x1, 0x24008814)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="180200"/13, @ANYRESHEX=r0, @ANYBLOB="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", @ANYRESOCT=r3], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe0000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='mm_page_free_batched\x00', r4}, 0x18)

5.514052438s ago: executing program 8 (id=2324):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
exit(0xffff)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280))
wait4(r1, 0x0, 0x8, 0x0)

5.453564143s ago: executing program 6 (id=2325):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x88, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x18, &(0x7f0000000240)=[@flags={0x3, 0x1700}], 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.031720256s ago: executing program 6 (id=2326):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000340)={0x2, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
truncate(&(0x7f0000000080)='./file0/file3\x00', 0x40)

4.435850295s ago: executing program 8 (id=2329):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000540), 0x1, 0x7cc, &(0x7f00000022c0)="$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")
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000005c0)={[{@bsdgroups}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@discard}, {@grpjquota}, {@errors_remount}, {@nobarrier}]}, 0x1, 0x476, &(0x7f0000000e00)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00')
r1 = fanotify_init(0x1, 0x40000)
r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x50)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1)
fanotify_mark(r1, 0x1, 0x40001019, r2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
getdents64(r0, &(0x7f00000012c0)=""/189, 0xbd)

4.171136815s ago: executing program 0 (id=2330):
syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000c40)={[{@jqfmt_vfsv0}, {@nojournal_checksum}, {@barrier}, {@barrier}, {@test_dummy_encryption}, {@nomblk_io_submit}]}, 0xff, 0x4ab, &(0x7f0000000080)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0xa4)
getdents64(r0, 0x0, 0x0)
getdents64(r0, &(0x7f0000000540)=""/217, 0xd9)

3.774306747s ago: executing program 6 (id=2331):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24000080}, 0x40004)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.476816131s ago: executing program 0 (id=2332):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x4, 0x7f, 0x4232, 0x0, 0x81, 0x9c1, 0x8001, 0x5, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xdddd1000, 0x80300})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.423387905s ago: executing program 8 (id=2333):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0)
ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000080))
syz_open_pts(r1, 0x2000)
io_setup(0x1, &(0x7f0000002500)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001480)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000380)="a3", 0x1}])
close_range(r0, 0xffffffffffffffff, 0x0)

3.180082125s ago: executing program 0 (id=2334):
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x24040050)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0xfffffffffffffd9b, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e00010028bd7000fedbdf2500000000", @ANYRES32=r2, @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x400}, 0x20040840)

2.879999649s ago: executing program 8 (id=2335):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002740)="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", 0x2000, 0x0)

2.432439235s ago: executing program 6 (id=2336):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
exit(0xffff)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280))
wait4(r1, 0x0, 0x8, 0x0)

2.268074548s ago: executing program 0 (id=2337):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa4)
mkdir(&(0x7f0000000100)='./bus\x00', 0xe8)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00))
chdir(&(0x7f00000001c0)='./bus\x00')
r1 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

1.305071885s ago: executing program 46 (id=2336):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
exit(0xffff)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280))
wait4(r1, 0x0, 0x8, 0x0)

1.282142397s ago: executing program 8 (id=2339):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000340)={0x2, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
truncate(&(0x7f0000000080)='./file0/file3\x00', 0x40)

1.280475347s ago: executing program 0 (id=2340):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup(r4, 0x0, 0x200002, 0x0)
r5 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff)
write$binfmt_script(r5, &(0x7f0000000340)={'#! ', './file1'}, 0xb)
setns(0xffffffffffffffff, 0x20000000)

0s ago: executing program 0 (id=2341):
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0, 0x1, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000fc0)={'#! ', './file1'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000040)={0x0, 0x3}, 0x8)

kernel console output (not intermixed with test programs):

 336.415340][T11691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  336.426924][T11691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.440735][T11691] batman_adv: batadv0: Interface activated: batadv_slave_1
[  336.463948][T11691] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  336.472998][T11691] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  336.483053][T11691] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  336.496556][T11691] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  336.690661][ T2956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.721342][ T2956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.763803][ T2956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.777364][ T2956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.861615][T11848] loop9: detected capacity change from 0 to 1024
[  336.905850][T11848] EXT4-fs: Ignoring removed nobh option
[  336.938001][T11848] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  336.992357][T11848] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102]
[  337.003970][T11850] loop5: detected capacity change from 0 to 4096
[  337.012072][T11848] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  337.029814][T11850] EXT4-fs (loop5): Test dummy encryption mode enabled
[  337.051403][T11850] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  337.211134][T11443] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.258809][T11691] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.459664][T11195] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  337.618211][  T142] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.796212][  T142] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.947919][ T5798] Bluetooth: hci2: command tx timeout
[  337.961712][T11872] loop9: detected capacity change from 0 to 1024
[  337.972272][  T142] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.976220][T11872] EXT4-fs: Ignoring removed nobh option
[  337.992434][T11872] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  338.046484][T11872] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102]
[  338.088630][T11872] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  338.186673][  T142] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.405795][T11443] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.516189][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  338.531095][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  338.539905][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  338.552263][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  338.560290][ T5792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  338.567905][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  338.608828][T11884] loop5: detected capacity change from 0 to 4096
[  338.625955][T11884] EXT4-fs (loop5): Test dummy encryption mode enabled
[  338.680969][T11887] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2112'.
[  338.696266][T11887] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2112'.
[  338.704680][T11884] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  338.766939][T11890] loop2: detected capacity change from 0 to 512
[  338.816510][T11890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  338.842894][T11890] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  338.902382][T11691] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.993637][T11050] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.135104][T11901] loop2: detected capacity change from 0 to 512
[  339.211173][T11901] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.2115: invalid block
[  339.275187][T11901] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2115: invalid indirect mapped block 10 (level 1)
[  339.300794][T11901] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2115: invalid indirect mapped block 8 (level 1)
[  339.349545][T11901] EXT4-fs (loop2): 1 truncate cleaned up
[  339.369408][T11901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  339.376269][T11882] chnl_net:caif_netlink_parms(): no params data found
[  339.396810][T11901] EXT4-fs error (device loop2): ext4_lookup:1858: inode #12: comm syz.2.2115: unexpected EA_INODE flag
[  339.489098][T11050] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.756731][T11917] loop2: detected capacity change from 0 to 1024
[  339.765444][T11917] EXT4-fs: Ignoring removed nobh option
[  339.773202][T11917] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  339.799687][T11882] bridge0: port 1(bridge_slave_0) entered blocking state
[  339.806893][T11882] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.823279][T11919] overlayfs: failed to resolve './file0': -2
[  339.835472][T11882] bridge_slave_0: entered allmulticast mode
[  339.836233][T11917] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102]
[  339.844748][T11882] bridge_slave_0: entered promiscuous mode
[  339.858774][T11917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  339.879865][T11882] bridge0: port 2(bridge_slave_1) entered blocking state
[  339.887035][T11882] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.918139][T11882] bridge_slave_1: entered allmulticast mode
[  339.926222][T11921] loop5: detected capacity change from 0 to 4096
[  339.939175][T11882] bridge_slave_1: entered promiscuous mode
[  339.949689][T11921] EXT4-fs (loop5): Test dummy encryption mode enabled
[  339.996560][T11050] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  340.012971][T11921] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  340.036958][ T5798] Bluetooth: hci2: command tx timeout
[  340.078667][T11926] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2123'.
[  340.099286][T11926] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2123'.
[  340.189176][T11882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  340.241640][T11882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  340.255277][T11691] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  340.328476][T11933] loop9: detected capacity change from 0 to 1024
[  340.348841][T11933] EXT4-fs: Ignoring removed nobh option
[  340.361359][T11933] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  340.418108][T11933] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102]
[  340.458415][T11933] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  340.500038][T11882] team0: Port device team_slave_0 added
[  340.557624][  T142] hsr_slave_0: left promiscuous mode
[  340.581179][  T142] hsr_slave_1: left promiscuous mode
[  340.593532][  T142] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  340.603341][  T142] batman_adv: batadv0: Removing interface: batadv_slave_0
[  340.612938][  T142] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  340.623790][  T142] batman_adv: batadv0: Removing interface: batadv_slave_1
[  340.631864][  T142] bridge_slave_1: left allmulticast mode
[  340.637830][  T142] bridge_slave_1: left promiscuous mode
[  340.643790][  T142] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.655106][  T142] bridge_slave_0: left allmulticast mode
[  340.666291][  T142] bridge_slave_0: left promiscuous mode
[  340.667939][ T5798] Bluetooth: hci0: command tx timeout
[  340.679250][  T142] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.794689][  T142] veth1_macvtap: left promiscuous mode
[  340.812578][  T142] veth0_macvtap: left promiscuous mode
[  340.825400][  T142] veth1_vlan: left promiscuous mode
[  340.847053][  T142] veth0_vlan: left promiscuous mode
[  340.948791][T11942] loop9: detected capacity change from 1024 to 64
[  341.996254][  T142] team0 (unregistering): Port device team_slave_1 removed
[  342.093493][  T142] team0 (unregistering): Port device team_slave_0 removed
[  342.192817][  T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  342.246997][  T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  342.751472][ T5798] Bluetooth: hci0: command tx timeout
[  342.856730][  T142] bond0 (unregistering): Released all slaves
[  342.933627][T11882] team0: Port device team_slave_1 added
[  342.957091][T11953] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2133'.
[  342.978266][T11953] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2133'.
[  342.984378][T11443] EXT4-fs warning (device loop9): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  343.015417][T11443] EXT4-fs warning (device loop9): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  343.036006][T11443] EXT4-fs warning (device loop9): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  343.062546][T11882] batman_adv: batadv0: Adding interface: batadv_slave_0
[  343.074518][T11882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  343.079987][T11443] EXT4-fs warning (device loop9): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  343.122637][T11882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  343.144519][T11443] EXT4-fs warning (device loop9): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  343.161486][T11443] EXT4-fs warning (device loop9): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  343.165867][T11882] batman_adv: batadv0: Adding interface: batadv_slave_1
[  343.178300][T11443] EXT4-fs warning (device loop9): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  343.189495][T11882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  343.222048][T11443] EXT4-fs warning (device loop9): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  343.222571][T11443] EXT4-fs warning (device loop9): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  343.223100][T11443] EXT4-fs warning (device loop9): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  343.275478][T11882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  343.425596][T11882] hsr_slave_0: entered promiscuous mode
[  343.469519][T11882] hsr_slave_1: entered promiscuous mode
[  343.499567][T11882] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  343.507343][T11882] Cannot create hsr debugfs directory
[  343.861734][T11975] loop2: detected capacity change from 0 to 1024
[  343.900470][T11975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  344.129129][T11050] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.363818][ T2956] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.530982][T11992] loop2: detected capacity change from 0 to 1024
[  344.580086][T11992] EXT4-fs: Ignoring removed nobh option
[  344.614842][T11992] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  344.681182][T11992] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102]
[  344.714168][T11992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  344.754580][ T2956] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.827819][ T5798] Bluetooth: hci0: command tx timeout
[  345.129538][ T2956] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.168197][T12006] loop2: detected capacity change from 1024 to 64
[  345.274954][T11050] EXT4-fs warning (device loop2): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  345.295730][T11050] EXT4-fs warning (device loop2): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  345.318059][T11050] EXT4-fs warning (device loop2): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  345.381827][T11050] EXT4-fs warning (device loop2): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  345.401826][T11050] EXT4-fs warning (device loop2): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  345.416358][T11050] EXT4-fs warning (device loop2): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  345.449560][T11050] EXT4-fs warning (device loop2): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  345.474106][T11934] kmmpd-loop9: attempt to access beyond end of device
[  345.474106][T11934] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64
[  345.502329][T11050] EXT4-fs warning (device loop2): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  345.536508][T11050] EXT4-fs warning (device loop2): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  345.545911][T11934] buffer_io_error: 5 callbacks suppressed
[  345.545930][T11934] Buffer I/O error on dev loop9, logical block 64, lost sync page write
[  345.572879][ T2956] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.574293][T11050] EXT4-fs warning (device loop2): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  345.638726][T11934] EXT4-fs error (device loop9): kmmpd:186: comm kmmpd-loop9: Error writing to MMP block
[  345.672198][T12021] loop5: detected capacity change from 0 to 512
[  345.779213][T12021] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  345.879296][T12021] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  345.985785][T11691] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.437734][T11882] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  346.496635][T11882] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  346.598487][T11882] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  346.707817][T11882] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  346.907879][ T5798] Bluetooth: hci0: command tx timeout
[  347.514809][T11882] 8021q: adding VLAN 0 to HW filter on device bond0
[  347.650570][T11882] 8021q: adding VLAN 0 to HW filter on device team0
[  347.704501][ T2985] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.711796][ T2985] bridge0: port 1(bridge_slave_0) entered forwarding state
[  347.757166][ T2985] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.764445][ T2985] bridge0: port 2(bridge_slave_1) entered forwarding state
[  347.845356][T12064] loop5: detected capacity change from 0 to 1024
[  347.874320][T12064] EXT4-fs: Ignoring removed nobh option
[  347.926351][T12064] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  348.019810][T12064] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102]
[  348.037414][T12064] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  348.272567][ T2956] hsr_slave_0: left promiscuous mode
[  348.288144][ T2956] hsr_slave_1: left promiscuous mode
[  348.328510][ T2956] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  348.350388][ T2956] batman_adv: batadv0: Removing interface: batadv_slave_0
[  348.360396][ T2956] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  348.387833][ T2956] batman_adv: batadv0: Removing interface: batadv_slave_1
[  348.399443][ T2956] bridge_slave_1: left allmulticast mode
[  348.405148][ T2956] bridge_slave_1: left promiscuous mode
[  348.428438][ T2956] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.438611][T12070] loop5: detected capacity change from 1024 to 64
[  348.460164][ T2956] bridge_slave_0: left allmulticast mode
[  348.465887][ T2956] bridge_slave_0: left promiscuous mode
[  348.482356][ T2956] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.578490][ T2956] veth1_macvtap: left promiscuous mode
[  348.584208][ T2956] veth0_macvtap: left promiscuous mode
[  348.597980][ T2956] veth1_vlan: left promiscuous mode
[  348.603419][ T2956] veth0_vlan: left promiscuous mode
[  349.728163][T11998] kmmpd-loop2: attempt to access beyond end of device
[  349.728163][T11998] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64
[  349.775239][T11998] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  349.800101][T11998] EXT4-fs error (device loop2): kmmpd:186: comm kmmpd-loop2: Error writing to MMP block
[  350.263487][ T2956] team0 (unregistering): Port device team_slave_1 removed
[  350.399949][ T2956] team0 (unregistering): Port device team_slave_0 removed
[  350.511938][T11934] kmmpd-loop9: attempt to access beyond end of device
[  350.511938][T11934] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64
[  350.526076][ T2956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  350.543618][T11934] Buffer I/O error on dev loop9, logical block 64, lost sync page write
[  350.680632][ T2956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  351.840782][ T2956] bond0 (unregistering): Released all slaves
[  352.130634][T11691] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  352.189790][T11691] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  352.228523][T11691] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  352.274040][T11691] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  352.318370][T11691] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  352.378239][T11691] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  352.428912][T11691] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  352.508968][T11691] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  352.608862][T11691] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  352.663603][T11691] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  352.878980][ T2956] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.995268][T11882] 8021q: adding VLAN 0 to HW filter on device batadv0
[  353.068166][T12067] kmmpd-loop5: attempt to access beyond end of device
[  353.068166][T12067] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64
[  353.100557][T12067] Buffer I/O error on dev loop5, logical block 64, lost sync page write
[  353.131821][T12067] EXT4-fs error (device loop5): kmmpd:186: comm kmmpd-loop5: Error writing to MMP block
[  353.205919][ T2956] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.232258][T11691] EXT4-fs error (device loop5): ext4_check_bdev_write_error:225: comm syz-executor: Error while async write back metadata
[  353.386052][ T2956] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.531901][ T2956] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.701162][T11882] veth0_vlan: entered promiscuous mode
[  353.755041][T11882] veth1_vlan: entered promiscuous mode
[  353.929073][T11882] veth0_macvtap: entered promiscuous mode
[  353.990147][T11882] veth1_macvtap: entered promiscuous mode
[  354.230563][T11882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  354.247628][T11882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.257556][T11882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  354.288833][T11882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.307877][T11882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  354.328072][T11882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.364481][T11882] batman_adv: batadv0: Interface activated: batadv_slave_0
[  354.469499][T11882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  354.498224][T11882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.526258][T11882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  354.548458][T11882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.567927][T11882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  354.588194][T11882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.619422][T11882] batman_adv: batadv0: Interface activated: batadv_slave_1
[  354.741429][T11882] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  354.750786][T11998] kmmpd-loop2: attempt to access beyond end of device
[  354.750786][T11998] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64
[  354.787651][T11998] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  354.796113][T11882] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  354.827822][T11882] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  354.836605][T11882] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  355.408351][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.427811][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.554693][T11934] kmmpd-loop9: attempt to access beyond end of device
[  355.554693][T11934] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64
[  355.598123][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.606853][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.615425][T11934] Buffer I/O error on dev loop9, logical block 64, lost sync page write
[  356.222671][ T2956] hsr_slave_0: left promiscuous mode
[  356.279493][ T2956] hsr_slave_1: left promiscuous mode
[  356.297934][ T2956] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  356.305471][ T2956] batman_adv: batadv0: Removing interface: batadv_slave_0
[  356.345749][ T2956] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  356.377771][ T2956] batman_adv: batadv0: Removing interface: batadv_slave_1
[  356.398584][ T2956] bridge_slave_1: left allmulticast mode
[  356.404305][ T2956] bridge_slave_1: left promiscuous mode
[  356.437926][ T2956] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.470711][ T2956] bridge_slave_0: left allmulticast mode
[  356.497781][ T2956] bridge_slave_0: left promiscuous mode
[  356.503630][ T2956] bridge0: port 1(bridge_slave_0) entered disabled state
[  356.639079][ T2956] veth1_macvtap: left promiscuous mode
[  356.644707][ T2956] veth0_macvtap: left promiscuous mode
[  356.678276][ T2956] veth1_vlan: left promiscuous mode
[  356.683689][ T2956] veth0_vlan: left promiscuous mode
[  358.108313][T12067] kmmpd-loop5: attempt to access beyond end of device
[  358.108313][T12067] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64
[  358.147634][T12067] Buffer I/O error on dev loop5, logical block 64, lost sync page write
[  358.763658][ T2956] team0 (unregistering): Port device team_slave_1 removed
[  358.953100][ T2956] team0 (unregistering): Port device team_slave_0 removed
[  359.129436][ T2956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  359.409086][ T2956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  359.488854][T12159] loop0: detected capacity change from 0 to 512
[  359.548581][T12159] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  359.608114][T12159] EXT4-fs (loop0): orphan cleanup on readonly fs
[  359.619624][T12159] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.2169: iget: bad i_size value: 360287970189639680
[  359.668258][T12159] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.2169: couldn't read orphan inode 15 (err -117)
[  359.704716][T12159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  359.777119][T12159] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #2: block 3: comm syz.0.2169: lblock 0 mapped to illegal pblock 3 (length 1)
[  359.827734][T11998] kmmpd-loop2: attempt to access beyond end of device
[  359.827734][T11998] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64
[  359.858267][T12161] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #2: block 3: comm syz.0.2169: lblock 0 mapped to illegal pblock 3 (length 1)
[  359.868093][T11998] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  359.930625][T12159] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #2: block 3: comm syz.0.2169: lblock 0 mapped to illegal pblock 3 (length 1)
[  359.994878][T12161] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #2: block 3: comm syz.0.2169: lblock 0 mapped to illegal pblock 3 (length 1)
[  360.062924][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  360.073842][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  360.109174][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  360.117197][T12159] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #2: block 3: comm syz.0.2169: lblock 0 mapped to illegal pblock 3 (length 1)
[  360.140643][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  360.150225][ T5792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  360.157801][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  360.597659][T11934] kmmpd-loop9: attempt to access beyond end of device
[  360.597659][T11934] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64
[  360.667677][T11934] Buffer I/O error on dev loop9, logical block 64, lost sync page write
[  362.202829][ T5792] Bluetooth: hci1: command tx timeout
[  362.210159][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  362.261613][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  362.272205][ T2956] bond0 (unregistering): Released all slaves
[  362.286694][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  362.310082][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  362.333083][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  362.364542][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  363.158428][T12067] kmmpd-loop5: attempt to access beyond end of device
[  363.158428][T12067] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64
[  363.217843][T12067] Buffer I/O error on dev loop5, logical block 64, lost sync page write
[  363.762649][T12174] chnl_net:caif_netlink_parms(): no params data found
[  363.952201][ T2956] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.026727][T12162] chnl_net:caif_netlink_parms(): no params data found
[  364.212507][ T2956] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.268875][ T5798] Bluetooth: hci1: command tx timeout
[  364.427787][ T5798] Bluetooth: hci2: command tx timeout
[  364.630596][ T2956] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.790550][T12174] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.819055][T12174] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.826400][T12174] bridge_slave_0: entered allmulticast mode
[  364.859251][T12174] bridge_slave_0: entered promiscuous mode
[  364.917867][T11998] kmmpd-loop2: attempt to access beyond end of device
[  364.917867][T11998] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64
[  364.962715][T11998] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  365.040200][ T2956] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.099588][T12174] bridge0: port 2(bridge_slave_1) entered blocking state
[  365.106893][T12174] bridge0: port 2(bridge_slave_1) entered disabled state
[  365.121886][T12174] bridge_slave_1: entered allmulticast mode
[  365.149309][T12174] bridge_slave_1: entered promiscuous mode
[  365.369275][T12174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  365.600369][T12174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  365.633000][T11934] kmmpd-loop9: attempt to access beyond end of device
[  365.633000][T11934] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64
[  365.667671][T11934] Buffer I/O error on dev loop9, logical block 64, lost sync page write
[  365.806510][T12174] team0: Port device team_slave_0 added
[  365.859859][T12162] bridge0: port 1(bridge_slave_0) entered blocking state
[  365.867118][T12162] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.907916][T12162] bridge_slave_0: entered allmulticast mode
[  365.915500][T12162] bridge_slave_0: entered promiscuous mode
[  365.963879][T12174] team0: Port device team_slave_1 added
[  366.120194][T12162] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.147881][T12162] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.198350][T12162] bridge_slave_1: entered allmulticast mode
[  366.205838][T12162] bridge_slave_1: entered promiscuous mode
[  366.290715][T12174] batman_adv: batadv0: Adding interface: batadv_slave_0
[  366.308336][T12174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  366.355823][ T5798] Bluetooth: hci1: command tx timeout
[  366.456883][T12174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  366.508207][ T5798] Bluetooth: hci2: command tx timeout
[  366.520267][T12174] batman_adv: batadv0: Adding interface: batadv_slave_1
[  366.527359][T12174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  366.556006][T12174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  366.672613][T12162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  366.870705][T12162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  366.943844][T12174] hsr_slave_0: entered promiscuous mode
[  366.970285][T12174] hsr_slave_1: entered promiscuous mode
[  367.119930][T12162] team0: Port device team_slave_0 added
[  367.450396][T12162] team0: Port device team_slave_1 added
[  367.888574][T12162] batman_adv: batadv0: Adding interface: batadv_slave_0
[  367.925145][T12162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  368.043435][T12162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  368.080167][T12162] batman_adv: batadv0: Adding interface: batadv_slave_1
[  368.087350][T12162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  368.198528][T12067] kmmpd-loop5: attempt to access beyond end of device
[  368.198528][T12067] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64
[  368.217624][T12162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  368.264042][T12067] Buffer I/O error on dev loop5, logical block 64, lost sync page write
[  368.427988][ T5798] Bluetooth: hci1: command tx timeout
[  368.594428][ T5798] Bluetooth: hci2: command tx timeout
[  368.891012][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  368.908412][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  368.927938][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  368.949485][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  368.988157][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  368.997788][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  369.107278][T12162] hsr_slave_0: entered promiscuous mode
[  369.168048][T12162] hsr_slave_1: entered promiscuous mode
[  369.188588][T12162] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  369.196218][T12162] Cannot create hsr debugfs directory
[  369.947779][T11998] kmmpd-loop2: attempt to access beyond end of device
[  369.947779][T11998] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64
[  370.007714][T11998] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  370.674542][T11934] kmmpd-loop9: attempt to access beyond end of device
[  370.674542][T11934] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64
[  370.675782][ T5798] Bluetooth: hci2: command tx timeout
[  370.694853][T11934] Buffer I/O error on dev loop9, logical block 64, lost sync page write
[  371.067793][ T5798] Bluetooth: hci3: command tx timeout
[  371.262033][ T2956] hsr_slave_0: left promiscuous mode
[  371.268701][ T2956] hsr_slave_1: left promiscuous mode
[  371.281787][ T2956] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  371.308098][ T2956] batman_adv: batadv0: Removing interface: batadv_slave_0
[  371.328947][ T2956] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  371.336411][ T2956] batman_adv: batadv0: Removing interface: batadv_slave_1
[  371.378748][ T2956] bridge_slave_1: left allmulticast mode
[  371.384467][ T2956] bridge_slave_1: left promiscuous mode
[  371.427894][ T2956] bridge0: port 2(bridge_slave_1) entered disabled state
[  371.463603][ T2956] bridge_slave_0: left allmulticast mode
[  371.487845][ T2956] bridge_slave_0: left promiscuous mode
[  371.508744][ T2956] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.636751][ T2956] veth1_macvtap: left promiscuous mode
[  371.657881][ T2956] veth0_macvtap: left promiscuous mode
[  371.667828][ T2956] veth1_vlan: left promiscuous mode
[  371.673314][ T2956] veth0_vlan: left promiscuous mode
[  373.147833][ T5798] Bluetooth: hci3: command tx timeout
[  373.227808][T12067] kmmpd-loop5: attempt to access beyond end of device
[  373.227808][T12067] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64
[  373.257725][T12067] Buffer I/O error on dev loop5, logical block 64, lost sync page write
[  373.702609][ T2956] team0 (unregistering): Port device team_slave_1 removed
[  373.842074][ T2956] team0 (unregistering): Port device team_slave_0 removed
[  374.009176][ T2956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  374.150613][ T2956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  375.005057][T11998] kmmpd-loop2: attempt to access beyond end of device
[  375.005057][T11998] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64
[  375.037729][T11998] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  375.233390][ T5798] Bluetooth: hci3: command tx timeout
[  375.707871][T11934] kmmpd-loop9: attempt to access beyond end of device
[  375.707871][T11934] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64
[  375.741375][ T2956] bond0 (unregistering): Released all slaves
[  375.757666][T11934] Buffer I/O error on dev loop9, logical block 64, lost sync page write
[  376.492781][T12174] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  376.541904][T12174] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  376.602403][T12272] chnl_net:caif_netlink_parms(): no params data found
[  377.008079][T12174] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  377.071809][T12174] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  377.308699][ T5798] Bluetooth: hci3: command tx timeout
[  378.199099][T12272] bridge0: port 1(bridge_slave_0) entered blocking state
[  378.206285][T12272] bridge0: port 1(bridge_slave_0) entered disabled state
[  378.258036][T12272] bridge_slave_0: entered allmulticast mode
[  378.265494][T12272] bridge_slave_0: entered promiscuous mode
[  378.297678][T12067] kmmpd-loop5: attempt to access beyond end of device
[  378.297678][T12067] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64
[  378.301003][T12272] bridge0: port 2(bridge_slave_1) entered blocking state
[  378.353839][T12067] Buffer I/O error on dev loop5, logical block 64, lost sync page write
[  378.367757][T12272] bridge0: port 2(bridge_slave_1) entered disabled state
[  378.375059][T12272] bridge_slave_1: entered allmulticast mode
[  378.440228][T12272] bridge_slave_1: entered promiscuous mode
[  378.706360][T12272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  378.748617][T12272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  378.838198][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  378.844594][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  379.033378][T12272] team0: Port device team_slave_0 added
[  379.064025][T12272] team0: Port device team_slave_1 added
[  379.324859][T12162] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  379.371546][T12162] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  379.420067][T12272] batman_adv: batadv0: Adding interface: batadv_slave_0
[  379.427249][T12272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  379.577827][T12272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  379.620110][T12272] batman_adv: batadv0: Adding interface: batadv_slave_1
[  379.620647][T12378] overlayfs: conflicting options: nfs_export=on,index=off
[  379.627101][T12272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  379.776502][T12272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  379.858848][T12162] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  379.942187][T12174] 8021q: adding VLAN 0 to HW filter on device bond0
[  379.979017][T12162] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  380.038085][T11998] kmmpd-loop2: attempt to access beyond end of device
[  380.038085][T11998] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64
[  380.102284][T11998] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  380.202076][T12272] hsr_slave_0: entered promiscuous mode
[  380.224146][T12272] hsr_slave_1: entered promiscuous mode
[  380.245569][T12272] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  380.265929][T12272] Cannot create hsr debugfs directory
[  380.312222][T12174] 8021q: adding VLAN 0 to HW filter on device team0
[  380.476917][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.484173][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  380.635709][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.642959][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  380.757808][T11934] kmmpd-loop9: attempt to access beyond end of device
[  380.757808][T11934] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64
[  380.814126][T11934] Buffer I/O error on dev loop9, logical block 64, lost sync page write
[  381.561209][T12162] 8021q: adding VLAN 0 to HW filter on device bond0
[  381.755402][T12162] 8021q: adding VLAN 0 to HW filter on device team0
[  381.837092][ T2956] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.844443][ T2956] bridge0: port 1(bridge_slave_0) entered forwarding state
[  381.932289][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.939565][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[  382.300588][T12174] 8021q: adding VLAN 0 to HW filter on device batadv0
[  382.313828][T12422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2213'.
[  382.470417][T12272] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  382.521304][T12272] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  382.599339][T12272] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  382.659885][T12272] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  383.175013][T12272] 8021q: adding VLAN 0 to HW filter on device bond0
[  383.219910][T12162] 8021q: adding VLAN 0 to HW filter on device batadv0
[  383.302229][T12272] 8021q: adding VLAN 0 to HW filter on device team0
[  383.309612][T12067] kmmpd-loop5: attempt to access beyond end of device
[  383.309612][T12067] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64
[  383.309648][T12067] Buffer I/O error on dev loop5, logical block 64, lost sync page write
[  383.506196][ T2985] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.513460][ T2985] bridge0: port 1(bridge_slave_0) entered forwarding state
[  383.594822][ T2985] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.602074][ T2985] bridge0: port 2(bridge_slave_1) entered forwarding state
[  383.786024][T12162] veth0_vlan: entered promiscuous mode
[  383.934476][T12162] veth1_vlan: entered promiscuous mode
[  384.110938][T12174] veth0_vlan: entered promiscuous mode
[  384.262471][T12174] veth1_vlan: entered promiscuous mode
[  384.304895][T12162] veth0_macvtap: entered promiscuous mode
[  384.398636][T12162] veth1_macvtap: entered promiscuous mode
[  384.526934][T12162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  384.578396][T12162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  384.617929][T12162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  384.667643][T12162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  384.704679][T12162] batman_adv: batadv0: Interface activated: batadv_slave_0
[  384.783301][T12174] veth0_macvtap: entered promiscuous mode
[  384.820714][T12162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  384.847724][T12162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  384.885569][T12162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  384.930575][T12162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  384.976247][T12162] batman_adv: batadv0: Interface activated: batadv_slave_1
[  385.020493][T12174] veth1_macvtap: entered promiscuous mode
[  385.068647][T11998] kmmpd-loop2: attempt to access beyond end of device
[  385.068647][T11998] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64
[  385.118589][T11998] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  385.134280][T12162] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  385.177852][T12162] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  385.186635][T12162] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  385.247894][T12162] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  385.341570][T12272] 8021q: adding VLAN 0 to HW filter on device batadv0
[  385.366630][T12174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  385.401617][T12174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.433645][T12174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  385.463829][T12174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.493590][T12174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  385.517626][T12174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.550128][T12174] batman_adv: batadv0: Interface activated: batadv_slave_0
[  385.646308][T12174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  385.687874][T12174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.717727][T12174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  385.757707][T12174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.784911][T12174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  385.788428][T11934] kmmpd-loop9: attempt to access beyond end of device
[  385.788428][T11934] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64
[  385.841290][T12174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.877697][T11934] Buffer I/O error on dev loop9, logical block 64, lost sync page write
[  385.896507][T12174] batman_adv: batadv0: Interface activated: batadv_slave_1
[  385.980307][T12174] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  386.047649][T12174] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  386.093476][T12174] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  386.112940][T12174] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  386.355001][ T2985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.393610][ T2985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.602516][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.657682][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.675528][T12272] veth0_vlan: entered promiscuous mode
[  386.787216][T12272] veth1_vlan: entered promiscuous mode
[  386.956587][ T2956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.999036][ T2956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.145600][T12272] veth0_macvtap: entered promiscuous mode
[  387.259326][ T2956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.270702][T12272] veth1_macvtap: entered promiscuous mode
[  387.322586][ T2956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.420418][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  387.478268][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.526968][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  387.573167][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.595361][T12505] loop1: detected capacity change from 0 to 4096
[  387.607833][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  387.655685][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.703526][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  387.757206][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.768803][T12505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  387.790052][T12272] batman_adv: batadv0: Interface activated: batadv_slave_0
[  387.901665][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  387.986697][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.032345][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.087618][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.137645][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.177927][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.227643][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.272337][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.319894][T12272] batman_adv: batadv0: Interface activated: batadv_slave_1
[  388.355346][T12067] kmmpd-loop5: attempt to access beyond end of device
[  388.355346][T12067] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64
[  388.356972][T12272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  388.380664][T12162] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  388.417875][T12272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  388.422437][T12067] Buffer I/O error on dev loop5, logical block 64, lost sync page write
[  388.477349][T12272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  388.518389][T12272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  388.877848][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  388.937961][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  389.143860][ T2920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  389.172902][ T2920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  389.186999][T12529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2228'.
[  389.248604][T12529] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2228'.
[  389.356696][T12534] loop1: detected capacity change from 0 to 512
[  389.392128][T12534] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  389.678091][T12539] loop4: detected capacity change from 0 to 1024
[  389.685617][T12539] EXT4-fs: Ignoring removed nobh option
[  389.747225][T12539] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  389.860587][T12539] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102]
[  389.930247][T12539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  390.160222][T11998] kmmpd-loop2: attempt to access beyond end of device
[  390.160222][T11998] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64
[  390.235467][T11998] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  390.547935][T12539] loop4: detected capacity change from 1024 to 64
[  390.793756][   T28] audit: type=1326 audit(1755424056.261:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12567 comm="syz.1.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf0d8ebe9 code=0x7ffc0000
[  390.818660][T12174] EXT4-fs warning (device loop4): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  390.877702][T11934] kmmpd-loop9: attempt to access beyond end of device
[  390.877702][T11934] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64
[  390.897694][   T28] audit: type=1326 audit(1755424056.261:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12567 comm="syz.1.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf0d8ebe9 code=0x7ffc0000
[  390.929573][T12174] EXT4-fs warning (device loop4): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  390.965696][T11934] Buffer I/O error on dev loop9, logical block 64, lost sync page write
[  391.014123][T12174] EXT4-fs warning (device loop4): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  391.037667][   T28] audit: type=1326 audit(1755424056.271:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12567 comm="syz.1.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffaf0d8ebe9 code=0x7ffc0000
[  391.079023][T12174] EXT4-fs warning (device loop4): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  391.137753][   T28] audit: type=1326 audit(1755424056.271:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12567 comm="syz.1.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf0d8ebe9 code=0x7ffc0000
[  391.212418][T12174] EXT4-fs warning (device loop4): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  391.246628][   T28] audit: type=1326 audit(1755424056.271:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12567 comm="syz.1.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf0d8ebe9 code=0x7ffc0000
[  391.278798][T12174] EXT4-fs warning (device loop4): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  391.297841][T12580] loop1: detected capacity change from 0 to 512
[  391.310982][T12580] EXT4-fs: Ignoring removed bh option
[  391.327431][   T28] audit: type=1326 audit(1755424056.271:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12567 comm="syz.1.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7ffaf0d8ebe9 code=0x7ffc0000
[  391.358259][T12174] EXT4-fs warning (device loop4): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  391.423017][   T28] audit: type=1326 audit(1755424056.271:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12567 comm="syz.1.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf0d8ebe9 code=0x7ffc0000
[  391.440279][T12174] EXT4-fs warning (device loop4): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  391.548657][T12174] EXT4-fs warning (device loop4): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  391.566818][T12578] loop3: detected capacity change from 0 to 2048
[  391.615653][T12174] EXT4-fs warning (device loop4): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  391.671708][T12578]  loop3: p1 < > p4
[  391.677067][T12578] loop3: p4 size 8388608 extends beyond EOD, truncated
[  391.861334][T12580] EXT4-fs (loop1): failed to open journal device unknown-block(0,1) -6
[  392.027034][T12594] xt_hashlimit: max too large, truncated to 1048576
[  392.132233][T12580] loop1: detected capacity change from 0 to 2048
[  392.178727][T12580] EXT4-fs: Ignoring removed mblk_io_submit option
[  392.197995][T12580] EXT4-fs: Ignoring removed bh option
[  392.276439][T12580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  392.706746][ T2920] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.011679][ T2920] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.269316][ T2920] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.390324][T12067] kmmpd-loop5: attempt to access beyond end of device
[  393.390324][T12067] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64
[  393.463489][T12067] Buffer I/O error on dev loop5, logical block 64, lost sync page write
[  393.497035][ T2920] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.010168][T12622] loop0: detected capacity change from 512 to 64
[  394.860932][T12640] md: md2 stopped.
[  394.924725][T12546] kmmpd-loop4: attempt to access beyond end of device
[  394.924725][T12546] loop4: rw=14337, sector=128, nr_sectors = 2 limit=64
[  394.986167][T12546] Buffer I/O error on dev loop4, logical block 64, lost sync page write
[  395.034711][T12546] EXT4-fs error (device loop4): kmmpd:186: comm kmmpd-loop4: Error writing to MMP block
[  395.247709][T11998] kmmpd-loop2: attempt to access beyond end of device
[  395.247709][T11998] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64
[  395.328763][T11998] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  395.948609][T11934] kmmpd-loop9: attempt to access beyond end of device
[  395.948609][T11934] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64
[  395.997251][T11934] Buffer I/O error on dev loop9, logical block 64, lost sync page write
[  396.915859][T11877] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  397.407796][   T28] audit: type=1326 audit(1755424062.881:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12682 comm="syz.3.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1cb8ebe9 code=0x7ffc0000
[  397.547944][   T28] audit: type=1326 audit(1755424062.911:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12682 comm="syz.3.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1cb8ebe9 code=0x7ffc0000
[  397.637744][   T28] audit: type=1326 audit(1755424062.931:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12682 comm="syz.3.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba1cb8ebe9 code=0x7ffc0000
[  397.754127][ T2920] hsr_slave_0: left promiscuous mode
[  397.787827][   T28] audit: type=1326 audit(1755424062.931:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12682 comm="syz.3.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1cb8ebe9 code=0x7ffc0000
[  397.847762][ T2920] hsr_slave_1: left promiscuous mode
[  397.875466][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  397.885728][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_0
[  397.915281][   T28] audit: type=1326 audit(1755424062.931:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12682 comm="syz.3.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1cb8ebe9 code=0x7ffc0000
[  397.958734][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  397.966236][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_1
[  398.022152][   T28] audit: type=1326 audit(1755424062.931:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12682 comm="syz.3.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba1cb8ebe9 code=0x7ffc0000
[  398.051044][ T2920] bridge_slave_1: left allmulticast mode
[  398.056753][ T2920] bridge_slave_1: left promiscuous mode
[  398.127906][ T2920] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.149501][   T28] audit: type=1326 audit(1755424062.931:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12682 comm="syz.3.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1cb8ebe9 code=0x7ffc0000
[  398.195043][ T2920] bridge_slave_0: left allmulticast mode
[  398.227793][ T2920] bridge_slave_0: left promiscuous mode
[  398.233665][ T2920] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.427904][T12067] kmmpd-loop5: attempt to access beyond end of device
[  398.427904][T12067] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64
[  398.452341][ T2920] veth1_macvtap: left promiscuous mode
[  398.458100][ T2920] veth0_macvtap: left promiscuous mode
[  398.473997][ T2920] veth1_vlan: left promiscuous mode
[  398.489843][T12067] Buffer I/O error on dev loop5, logical block 64, lost sync page write
[  398.518518][ T2920] veth0_vlan: left promiscuous mode
[  399.013105][T12702] loop3: detected capacity change from 0 to 1024
[  399.055236][T12702] EXT4-fs: Ignoring removed nobh option
[  399.103948][T12702] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  399.192504][T12702] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102]
[  399.203804][T12702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  399.728137][T12709] loop3: detected capacity change from 1024 to 64
[  399.949459][T12546] kmmpd-loop4: attempt to access beyond end of device
[  399.949459][T12546] loop4: rw=14337, sector=128, nr_sectors = 2 limit=64
[  400.017902][T12546] Buffer I/O error on dev loop4, logical block 64, lost sync page write
[  400.267669][T11998] kmmpd-loop2: attempt to access beyond end of device
[  400.267669][T11998] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64
[  400.337714][T11998] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  400.997691][T11934] kmmpd-loop9: attempt to access beyond end of device
[  400.997691][T11934] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64
[  401.049899][T11934] Buffer I/O error on dev loop9, logical block 64, lost sync page write
[  401.536037][ T2920] team0 (unregistering): Port device team_slave_1 removed
[  401.794434][ T2920] team0 (unregistering): Port device team_slave_0 removed
[  402.016620][ T2920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  402.189004][ T2920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  403.478689][T12067] kmmpd-loop5: attempt to access beyond end of device
[  403.478689][T12067] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64
[  403.537710][T12067] Buffer I/O error on dev loop5, logical block 64, lost sync page write
[  404.187931][T12705] kmmpd-loop3: attempt to access beyond end of device
[  404.187931][T12705] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64
[  404.227630][T12705] Buffer I/O error on dev loop3, logical block 64, lost sync page write
[  404.266676][T12705] EXT4-fs error (device loop3): kmmpd:186: comm kmmpd-loop3: Error writing to MMP block
[  404.320465][ T2920] bond0 (unregistering): Released all slaves
[  404.656518][T12272] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  404.709149][T12272] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  404.756245][T12272] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  404.808176][T12272] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  404.875253][T12272] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  404.924435][T12272] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  404.998889][T12272] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  405.028690][T12546] kmmpd-loop4: attempt to access beyond end of device
[  405.028690][T12546] loop4: rw=14337, sector=128, nr_sectors = 2 limit=64
[  405.069485][T12272] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  405.123807][T12546] Buffer I/O error on dev loop4, logical block 64, lost sync page write
[  405.153052][T12272] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  405.219989][T12272] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  405.307771][T11998] kmmpd-loop2: attempt to access beyond end of device
[  405.307771][T11998] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64
[  405.388317][T11998] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  405.813903][T12272] EXT4-fs error (device loop3): ext4_check_bdev_write_error:225: comm syz-executor: Error while async write back metadata
[  405.981718][   T34] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.038481][T11934] kmmpd-loop9: attempt to access beyond end of device
[  406.038481][T11934] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64
[  406.098096][T11934] Buffer I/O error on dev loop9, logical block 64, lost sync page write
[  406.279799][   T34] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.626127][   T34] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.890273][   T34] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.703135][T12757] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  407.728930][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  407.739368][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  407.747297][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  407.899453][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  407.922444][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  407.931830][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  408.517657][T12067] kmmpd-loop5: attempt to access beyond end of device
[  408.517657][T12067] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64
[  408.607709][T12067] Buffer I/O error on dev loop5, logical block 64, lost sync page write
[  409.227848][T12705] kmmpd-loop3: attempt to access beyond end of device
[  409.227848][T12705] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64
[  409.287652][T12705] Buffer I/O error on dev loop3, logical block 64, lost sync page write
[  409.358955][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  409.371308][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  409.403507][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  409.437995][ T5798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  409.447852][ T5798] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  409.463613][ T5798] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  410.028297][ T5798] Bluetooth: hci2: command tx timeout
[  410.108160][T12546] kmmpd-loop4: attempt to access beyond end of device
[  410.108160][T12546] loop4: rw=14337, sector=128, nr_sectors = 2 limit=64
[  410.147640][T12546] Buffer I/O error on dev loop4, logical block 64, lost sync page write
[  410.357734][T11998] kmmpd-loop2: attempt to access beyond end of device
[  410.357734][T11998] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64
[  410.407671][T11998] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  410.481362][T12756] chnl_net:caif_netlink_parms(): no params data found
[  410.940195][T12791] overlayfs: failed to clone upperpath
[  411.085492][T11934] kmmpd-loop9: attempt to access beyond end of device
[  411.085492][T11934] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64
[  411.127251][   T34] hsr_slave_0: left promiscuous mode
[  411.227635][T11934] Buffer I/O error on dev loop9, logical block 64, lost sync page write
[  411.247721][   T34] hsr_slave_1: left promiscuous mode
[  411.297739][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  411.305218][   T34] batman_adv: batadv0: Removing interface: batadv_slave_0
[  411.398511][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  411.406000][   T34] batman_adv: batadv0: Removing interface: batadv_slave_1
[  411.518539][   T34] bridge_slave_1: left allmulticast mode
[  411.524275][   T34] bridge_slave_1: left promiscuous mode
[  411.557893][ T5798] Bluetooth: hci3: command tx timeout
[  411.583412][   T34] bridge0: port 2(bridge_slave_1) entered disabled state
[  411.690182][   T34] bridge_slave_0: left allmulticast mode
[  411.695906][   T34] bridge_slave_0: left promiscuous mode
[  411.740678][   T34] bridge0: port 1(bridge_slave_0) entered disabled state
[  411.895223][   T34] veth1_macvtap: left promiscuous mode
[  411.908059][   T34] veth0_macvtap: left promiscuous mode
[  411.924097][   T34] veth1_vlan: left promiscuous mode
[  411.952106][   T34] veth0_vlan: left promiscuous mode
[  412.111369][ T5798] Bluetooth: hci2: command tx timeout
[  413.557946][T12067] kmmpd-loop5: attempt to access beyond end of device
[  413.557946][T12067] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64
[  413.607790][T12067] Buffer I/O error on dev loop5, logical block 64, lost sync page write
[  413.639294][ T5798] Bluetooth: hci3: command tx timeout
[  414.188137][ T5798] Bluetooth: hci2: command tx timeout
[  414.277833][T12705] kmmpd-loop3: attempt to access beyond end of device
[  414.277833][T12705] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64
[  414.341187][T12705] Buffer I/O error on dev loop3, logical block 64, lost sync page write
[  415.100323][   T34] team0 (unregistering): Port device team_slave_1 removed
[  415.187676][T12546] kmmpd-loop4: attempt to access beyond end of device
[  415.187676][T12546] loop4: rw=14337, sector=128, nr_sectors = 2 limit=64
[  415.249834][T12546] Buffer I/O error on dev loop4, logical block 64, lost sync page write
[  415.341350][   T34] team0 (unregistering): Port device team_slave_0 removed
[  415.388703][T11998] kmmpd-loop2: attempt to access beyond end of device
[  415.388703][T11998] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64
[  415.453111][T11998] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  415.569126][   T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  415.749261][ T5798] Bluetooth: hci3: command tx timeout
[  415.898333][   T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  416.131934][T11934] kmmpd-loop9: attempt to access beyond end of device
[  416.131934][T11934] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64
[  416.206853][T11934] Buffer I/O error on dev loop9, logical block 64, lost sync page write
[  416.268186][ T5798] Bluetooth: hci2: command tx timeout
[  417.795890][ T5798] Bluetooth: hci3: command tx timeout
[  418.565660][   T34] bond0 (unregistering): Released all slaves
[  418.587761][T12067] kmmpd-loop5: attempt to access beyond end of device
[  418.587761][T12067] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64
[  418.648221][T12067] Buffer I/O error on dev loop5, logical block 64, lost sync page write
[  419.105454][T12756] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.139395][T12756] bridge0: port 1(bridge_slave_0) entered disabled state
[  419.146688][T12756] bridge_slave_0: entered allmulticast mode
[  419.199061][T12756] bridge_slave_0: entered promiscuous mode
[  419.234491][T12824] overlayfs: failed to clone upperpath
[  419.255930][T12756] bridge0: port 2(bridge_slave_1) entered blocking state
[  419.277836][T12756] bridge0: port 2(bridge_slave_1) entered disabled state
[  419.285164][T12756] bridge_slave_1: entered allmulticast mode
[  419.307675][T12705] kmmpd-loop3: attempt to access beyond end of device
[  419.307675][T12705] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64
[  419.357971][T12756] bridge_slave_1: entered promiscuous mode
[  419.364819][T12705] Buffer I/O error on dev loop3, logical block 64, lost sync page write
[  419.834572][T12756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  419.896253][T12756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  420.180303][T12756] team0: Port device team_slave_0 added
[  420.213546][T12774] chnl_net:caif_netlink_parms(): no params data found
[  420.277640][T12546] kmmpd-loop4: attempt to access beyond end of device
[  420.277640][T12546] loop4: rw=14337, sector=128, nr_sectors = 2 limit=64
[  420.292303][T12756] team0: Port device team_slave_1 added
[  420.347708][T12546] Buffer I/O error on dev loop4, logical block 64, lost sync page write
[  420.438914][T11998] kmmpd-loop2: attempt to access beyond end of device
[  420.438914][T11998] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64
[  420.487818][T11998] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  420.710052][T12756] batman_adv: batadv0: Adding interface: batadv_slave_0
[  420.717240][T12756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  420.877860][T12756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  421.008968][T12756] batman_adv: batadv0: Adding interface: batadv_slave_1
[  421.015976][T12756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  421.147849][T11934] kmmpd-loop9: attempt to access beyond end of device
[  421.147849][T11934] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64
[  421.187917][T12756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  421.204426][T11934] Buffer I/O error on dev loop9, logical block 64, lost sync page write
[  421.655835][T12756] hsr_slave_0: entered promiscuous mode
[  421.758328][T12756] hsr_slave_1: entered promiscuous mode
[  422.081201][T12774] bridge0: port 1(bridge_slave_0) entered blocking state
[  422.122285][T12774] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.187840][T12774] bridge_slave_0: entered allmulticast mode
[  422.195341][T12774] bridge_slave_0: entered promiscuous mode
[  422.284811][T12774] bridge0: port 2(bridge_slave_1) entered blocking state
[  422.317869][T12774] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.325180][T12774] bridge_slave_1: entered allmulticast mode
[  422.407758][T12774] bridge_slave_1: entered promiscuous mode
[  422.772203][T12774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  422.851157][T12774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  422.955348][ T5792] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  422.966519][ T5792] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  422.978707][ T5792] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  422.997972][ T5792] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  423.008535][ T5792] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  423.017843][ T5792] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  423.335380][T12774] team0: Port device team_slave_0 added
[  423.380700][T12774] team0: Port device team_slave_1 added
[  423.656724][T12067] kmmpd-loop5: attempt to access beyond end of device
[  423.656724][T12067] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64
[  423.738274][T12067] Buffer I/O error on dev loop5, logical block 64, lost sync page write
[  423.770180][T12774] batman_adv: batadv0: Adding interface: batadv_slave_0
[  423.777194][T12774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  423.908924][T12774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  423.979612][T12774] batman_adv: batadv0: Adding interface: batadv_slave_1
[  423.986630][T12774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  424.147792][T12774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  424.347906][T12705] kmmpd-loop3: attempt to access beyond end of device
[  424.347906][T12705] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64
[  424.437651][T12705] Buffer I/O error on dev loop3, logical block 64, lost sync page write
[  424.483349][T12878] overlayfs: failed to clone upperpath
[  424.832232][T12774] hsr_slave_0: entered promiscuous mode
[  424.873376][T12774] hsr_slave_1: entered promiscuous mode
[  424.888618][T12774] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  424.896237][T12774] Cannot create hsr debugfs directory
[  425.068253][ T5792] Bluetooth: hci4: command tx timeout
[  425.361188][T12546] kmmpd-loop4: attempt to access beyond end of device
[  425.361188][T12546] loop4: rw=14337, sector=128, nr_sectors = 2 limit=64
[  425.417663][T12546] Buffer I/O error on dev loop4, logical block 64, lost sync page write
[  425.487712][T11998] kmmpd-loop2: attempt to access beyond end of device
[  425.487712][T11998] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64
[  425.538025][T11998] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  426.197927][T11934] kmmpd-loop9: attempt to access beyond end of device
[  426.197927][T11934] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64
[  426.261298][T11934] Buffer I/O error on dev loop9, logical block 64, lost sync page write
[  426.279695][T12756] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  426.334203][T12756] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  426.443733][T12756] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  426.481830][T12756] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  426.544917][T12861] chnl_net:caif_netlink_parms(): no params data found
[  427.150245][ T5792] Bluetooth: hci4: command tx timeout
[  427.397404][T12861] bridge0: port 1(bridge_slave_0) entered blocking state
[  427.439291][T12861] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.446600][T12861] bridge_slave_0: entered allmulticast mode
[  427.524791][T12861] bridge_slave_0: entered promiscuous mode
[  427.544937][T12861] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.595767][T12861] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.628220][T12861] bridge_slave_1: entered allmulticast mode
[  427.674252][T12861] bridge_slave_1: entered promiscuous mode
[  427.895422][T12756] 8021q: adding VLAN 0 to HW filter on device bond0
[  427.943066][T12861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  427.991791][T12861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  428.306870][T12861] team0: Port device team_slave_0 added
[  428.395651][T12756] 8021q: adding VLAN 0 to HW filter on device team0
[  428.452224][T12861] team0: Port device team_slave_1 added
[  428.678122][T12067] kmmpd-loop5: attempt to access beyond end of device
[  428.678122][T12067] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64
[  428.728736][T12861] batman_adv: batadv0: Adding interface: batadv_slave_0
[  428.737868][T12067] Buffer I/O error on dev loop5, logical block 64, lost sync page write
[  428.758327][T12861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  428.863211][T12861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  428.927619][ T2903] bridge0: port 1(bridge_slave_0) entered blocking state
[  428.934828][ T2903] bridge0: port 1(bridge_slave_0) entered forwarding state
[  428.989791][ T2903] bridge0: port 2(bridge_slave_1) entered blocking state
[  428.996999][ T2903] bridge0: port 2(bridge_slave_1) entered forwarding state
[  429.086562][T12774] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  429.141344][T12861] batman_adv: batadv0: Adding interface: batadv_slave_1
[  429.174575][T12861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  429.238070][ T5792] Bluetooth: hci4: command tx timeout
[  429.278022][T12861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  429.388256][T12705] kmmpd-loop3: attempt to access beyond end of device
[  429.388256][T12705] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64
[  429.408771][T12774] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  429.468390][T12705] Buffer I/O error on dev loop3, logical block 64, lost sync page write
[  429.572223][T12774] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  429.631598][T12774] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  429.733394][T12861] hsr_slave_0: entered promiscuous mode
[  429.793018][T12861] hsr_slave_1: entered promiscuous mode
[  429.831651][T12861] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  429.860698][T12861] Cannot create hsr debugfs directory
[  430.483251][T12546] kmmpd-loop4: attempt to access beyond end of device
[  430.483251][T12546] loop4: rw=14337, sector=128, nr_sectors = 2 limit=64
[  430.508438][T11998] kmmpd-loop2: attempt to access beyond end of device
[  430.508438][T11998] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64
[  430.559979][T12546] Buffer I/O error on dev loop4, logical block 64, lost sync page write
[  430.588491][T11998] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  431.044130][T12774] 8021q: adding VLAN 0 to HW filter on device bond0
[  431.228829][T11934] kmmpd-loop9: attempt to access beyond end of device
[  431.228829][T11934] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64
[  431.304410][T11934] Buffer I/O error on dev loop9, logical block 64, lost sync page write
[  431.313582][ T5792] Bluetooth: hci4: command tx timeout
[  431.384529][T12774] 8021q: adding VLAN 0 to HW filter on device team0
[  431.433510][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.440829][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[  431.626059][ T2920] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.633308][ T2920] bridge0: port 2(bridge_slave_1) entered forwarding state
[  431.785003][T12756] 8021q: adding VLAN 0 to HW filter on device batadv0
[  431.927330][T12774] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  431.971925][T12774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  432.316115][T12861] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  432.418348][T12861] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  432.471416][T12861] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  432.559644][T12861] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  433.195504][T12774] 8021q: adding VLAN 0 to HW filter on device batadv0
[  433.335291][T12861] 8021q: adding VLAN 0 to HW filter on device bond0
[  433.502486][T12861] 8021q: adding VLAN 0 to HW filter on device team0
[  433.625260][ T2985] bridge0: port 1(bridge_slave_0) entered blocking state
[  433.632499][ T2985] bridge0: port 1(bridge_slave_0) entered forwarding state
[  433.718871][ T2985] bridge0: port 2(bridge_slave_1) entered blocking state
[  433.726074][ T2985] bridge0: port 2(bridge_slave_1) entered forwarding state
[  433.727813][T12067] kmmpd-loop5: attempt to access beyond end of device
[  433.727813][T12067] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64
[  433.798013][T12756] veth0_vlan: entered promiscuous mode
[  433.842296][T12067] Buffer I/O error on dev loop5, logical block 64, lost sync page write
[  433.860621][T12756] veth1_vlan: entered promiscuous mode
[  434.190623][T12756] veth0_macvtap: entered promiscuous mode
[  434.308722][T12756] veth1_macvtap: entered promiscuous mode
[  434.396850][T12756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  434.464246][T12705] kmmpd-loop3: attempt to access beyond end of device
[  434.464246][T12705] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64
[  434.468222][T12756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  434.527848][T12705] Buffer I/O error on dev loop3, logical block 64, lost sync page write
[  434.567755][T12756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  434.617650][T12756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  434.627533][T12756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  434.699388][T12756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  434.749921][T12756] batman_adv: batadv0: Interface activated: batadv_slave_0
[  434.811931][T12756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  434.877695][T12756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  434.925491][T12756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  434.963010][T12756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  435.017782][T12756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  435.067998][T12756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  435.109916][T12756] batman_adv: batadv0: Interface activated: batadv_slave_1
[  435.245949][T12756] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  435.297686][T12756] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  435.306457][T12756] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  435.397970][T12756] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  435.558071][T12546] kmmpd-loop4: attempt to access beyond end of device
[  435.558071][T12546] loop4: rw=14337, sector=128, nr_sectors = 2 limit=64
[  435.585062][T11998] kmmpd-loop2: attempt to access beyond end of device
[  435.585062][T11998] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64
[  435.667693][T12546] Buffer I/O error on dev loop4, logical block 64, lost sync page write
[  435.667962][T11998] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  436.100843][T12774] veth0_vlan: entered promiscuous mode
[  436.287999][T11934] kmmpd-loop9: attempt to access beyond end of device
[  436.287999][T11934] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64
[  436.377625][T11934] Buffer I/O error on dev loop9, logical block 64, lost sync page write
[  436.414920][T12774] veth1_vlan: entered promiscuous mode
[  436.484240][T12861] 8021q: adding VLAN 0 to HW filter on device batadv0
[  436.649517][ T2903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  436.657398][ T2903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  437.038080][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  437.045967][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  437.573131][T12774] veth0_macvtap: entered promiscuous mode
[  437.839710][T12774] veth1_macvtap: entered promiscuous mode
[  438.573861][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  438.633543][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  438.675345][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  438.738039][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  438.758175][T12067] kmmpd-loop5: attempt to access beyond end of device
[  438.758175][T12067] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64
[  438.777679][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  438.818012][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  438.828864][T12067] Buffer I/O error on dev loop5, logical block 64, lost sync page write
[  438.877771][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  438.928107][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  438.941147][T13028] overlayfs: missing 'lowerdir'
[  438.990413][T12774] batman_adv: batadv0: Interface activated: batadv_slave_0
[  439.001690][T13032] loop7: detected capacity change from 0 to 512
[  439.082136][T13032] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.2302: casefold flag without casefold feature
[  439.134272][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  439.168133][T13032] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.2302: couldn't read orphan inode 15 (err -117)
[  439.217795][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.230388][T13032] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  439.267847][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  439.327792][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.373029][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  439.416875][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.458960][T12774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  439.506381][T12705] kmmpd-loop3: attempt to access beyond end of device
[  439.506381][T12705] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64
[  439.530449][T12774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.568244][T12705] Buffer I/O error on dev loop3, logical block 64, lost sync page write
[  439.600264][T12774] batman_adv: batadv0: Interface activated: batadv_slave_1
[  439.689653][T13032] loop7: detected capacity change from 512 to 0
[  439.698034][    C0] blk_print_req_error: 5 callbacks suppressed
[  439.698050][    C0] I/O error, dev loop7, sector 72 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2
[  439.714371][T13037] EXT4-fs warning (device loop7): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz.7.2302: error -5 reading directory block
[  439.818433][T13037] syz.7.2302: attempt to access beyond end of device
[  439.818433][T13037] loop7: rw=524288, sector=12, nr_sectors = 2 limit=0
[  439.867345][T12774] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  439.878763][T13037] syz.7.2302: attempt to access beyond end of device
[  439.878763][T13037] loop7: rw=524288, sector=14, nr_sectors = 2 limit=0
[  439.911307][T12774] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  439.947874][T12774] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  439.957811][T13037] syz.7.2302: attempt to access beyond end of device
[  439.957811][T13037] loop7: rw=524288, sector=16, nr_sectors = 2 limit=0
[  440.007494][T12774] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  440.057719][T13037] syz.7.2302: attempt to access beyond end of device
[  440.057719][T13037] loop7: rw=524288, sector=18, nr_sectors = 2 limit=0
[  440.071650][T12861] veth0_vlan: entered promiscuous mode
[  440.117900][T13037] syz.7.2302: attempt to access beyond end of device
[  440.117900][T13037] loop7: rw=524288, sector=20, nr_sectors = 2 limit=0
[  440.167953][T12861] veth1_vlan: entered promiscuous mode
[  440.175614][T13037] syz.7.2302: attempt to access beyond end of device
[  440.175614][T13037] loop7: rw=524288, sector=22, nr_sectors = 2 limit=0
[  440.248060][T13037] syz.7.2302: attempt to access beyond end of device
[  440.248060][T13037] loop7: rw=524288, sector=24, nr_sectors = 2 limit=0
[  440.281981][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  440.299355][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  440.327826][T13037] EXT4-fs error (device loop7): ext4_get_inode_loc:4621: inode #2: block 5: comm syz.7.2302: unable to read itable block
[  440.378625][ T2956] hsr_slave_0: left promiscuous mode
[  440.397944][T13037] Buffer I/O error on dev loop7, logical block 1, lost sync page write
[  440.406272][T13037] EXT4-fs (loop7): I/O error while writing superblock
[  440.452556][ T2956] hsr_slave_1: left promiscuous mode
[  440.477671][T13037] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5902: IO failure
[  440.486485][T13037] Buffer I/O error on dev loop7, logical block 1, lost sync page write
[  440.501622][ T2956] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  440.537882][ T2956] batman_adv: batadv0: Removing interface: batadv_slave_0
[  440.558786][ T2956] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  440.566250][ T2956] batman_adv: batadv0: Removing interface: batadv_slave_1
[  440.597843][T12546] Buffer I/O error on dev loop4, logical block 64, lost sync page write
[  440.598379][T11998] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  440.627673][T13037] EXT4-fs (loop7): I/O error while writing superblock
[  440.634539][T13037] EXT4-fs error (device loop7): ext4_dirty_inode:6106: inode #2: comm syz.7.2302: mark_inode_dirty error
[  440.666156][ T2956] bridge_slave_1: left allmulticast mode
[  440.687991][ T2956] bridge_slave_1: left promiscuous mode
[  440.688093][T13037] Buffer I/O error on dev loop7, logical block 1, lost sync page write
[  440.724290][ T2956] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.731673][T13037] EXT4-fs (loop7): I/O error while writing superblock
[  440.771464][ T2956] bridge_slave_0: left allmulticast mode
[  440.777180][ T2956] bridge_slave_0: left promiscuous mode
[  440.837816][ T2956] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.877772][T12756] EXT4-fs warning (device loop7): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block
[  440.986375][ T2956] veth1_macvtap: left promiscuous mode
[  441.017214][T12985] EXT4-fs error (device loop7): __ext4_get_inode_loc_noinmem:4606: inode #2: block 5: comm kworker/u4:12: unable to read itable block
[  441.017969][ T2956] veth0_macvtap: left promiscuous mode
[  441.070052][T12985] Buffer I/O error on dev loop7, logical block 1, lost sync page write
[  441.088006][ T2956] veth1_vlan: left promiscuous mode
[  441.093450][ T2956] veth0_vlan: left promiscuous mode
[  441.109856][T12985] EXT4-fs (loop7): I/O error while writing superblock
[  441.147285][T12756] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.208329][T12756] Buffer I/O error on dev loop7, logical block 1, lost sync page write
[  441.217501][T12756] EXT4-fs (loop7): I/O error while writing superblock
[  441.340182][T11934] bio_check_eod: 19 callbacks suppressed
[  441.340201][T11934] kmmpd-loop9: attempt to access beyond end of device
[  441.340201][T11934] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64
[  441.457605][T11934] Buffer I/O error on dev loop9, logical block 64, lost sync page write
[  441.883744][ T2956] bond1 (unregistering): Released all slaves
[  443.817653][T12067] kmmpd-loop5: attempt to access beyond end of device
[  443.817653][T12067] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64
[  443.897805][T12067] Buffer I/O error on dev loop5, logical block 64, lost sync page write
[  443.998361][ T2956] team0 (unregistering): Port device team_slave_1 removed
[  444.212133][ T2956] team0 (unregistering): Port device team_slave_0 removed
[  444.398827][ T2956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  444.543122][T12705] kmmpd-loop3: attempt to access beyond end of device
[  444.543122][T12705] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64
[  444.599402][T12705] Buffer I/O error on dev loop3, logical block 64, lost sync page write
[  444.677086][ T2956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  445.627768][T11998] kmmpd-loop2: attempt to access beyond end of device
[  445.627768][T11998] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64
[  445.628156][T12546] kmmpd-loop4: attempt to access beyond end of device
[  445.628156][T12546] loop4: rw=14337, sector=128, nr_sectors = 2 limit=64
[  445.677826][T11998] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  445.764093][T12546] Buffer I/O error on dev loop4, logical block 64, lost sync page write
[  446.377664][T11934] kmmpd-loop9: attempt to access beyond end of device
[  446.377664][T11934] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64
[  446.427768][T11934] Buffer I/O error on dev loop9, logical block 64, lost sync page write
[  447.440330][ T2956] bond0 (unregistering): Released all slaves
[  448.212627][T13055] overlayfs: missing 'lowerdir'
[  448.253923][T12861] veth0_macvtap: entered promiscuous mode
[  448.264986][T12861] veth1_macvtap: entered promiscuous mode
[  448.294782][T12861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  448.306441][T12861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  448.348709][T12861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  448.387478][T12861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  448.447974][T12861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  448.497680][T12861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  448.547663][T12861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  448.597912][T12861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  448.678912][T12861] batman_adv: batadv0: Interface activated: batadv_slave_0
[  448.741757][ T2985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  448.797707][ T2985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  448.863213][T12067] kmmpd-loop5: attempt to access beyond end of device
[  448.863213][T12067] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64
[  448.938826][T12861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  448.967665][T12067] Buffer I/O error on dev loop5, logical block 64, lost sync page write
[  449.007717][T12861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.057701][T12861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  449.117594][T12861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.127473][T12861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  449.213551][T12861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.287789][T12861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  449.371093][T12861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.419580][T12861] batman_adv: batadv0: Interface activated: batadv_slave_1
[  449.547784][T12705] kmmpd-loop3: attempt to access beyond end of device
[  449.547784][T12705] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64
[  449.568328][T12861] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  449.577088][T12861] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  449.628052][T12705] Buffer I/O error on dev loop3, logical block 64, lost sync page write
[  449.653256][T12861] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  449.707410][T12861] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  449.800451][T12985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  449.842041][T12985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  450.369709][T13005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  450.427657][T13005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  450.547788][ T2920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  450.555707][ T2920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  450.679275][T12546] kmmpd-loop4: attempt to access beyond end of device
[  450.679275][T12546] loop4: rw=14337, sector=128, nr_sectors = 2 limit=64
[  450.728154][T11998] kmmpd-loop2: attempt to access beyond end of device
[  450.728154][T11998] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64
[  450.758768][T12546] Buffer I/O error on dev loop4, logical block 64, lost sync page write
[  450.817843][T11998] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  450.969568][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  450.981662][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  450.998090][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  451.013658][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  451.054255][ T5798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  451.064609][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  451.112948][T13084] loop6: detected capacity change from 0 to 2048
[  451.275073][T13084] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  451.399703][T11934] kmmpd-loop9: attempt to access beyond end of device
[  451.399703][T11934] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64
[  451.491428][T11934] Buffer I/O error on dev loop9, logical block 64, lost sync page write
[  451.864933][T12774] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  451.906592][ T2956] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.081406][T13104] overlayfs: missing 'lowerdir'
[  452.445381][ T2956] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.921788][ T2956] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.147960][ T5798] Bluetooth: hci2: command tx timeout
[  453.388719][ T2956] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.650772][T13140] loop6: detected capacity change from 0 to 1024
[  453.709105][T13140] EXT4-fs: Ignoring removed nobh option
[  453.717676][T13140] EXT4-fs: Ignoring removed bh option
[  453.774483][T13140] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  453.835921][T13081] chnl_net:caif_netlink_parms(): no params data found
[  453.900533][T12067] kmmpd-loop5: attempt to access beyond end of device
[  453.900533][T12067] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64
[  453.945087][T13140] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  454.007775][T12067] Buffer I/O error on dev loop5, logical block 64, lost sync page write
[  454.052388][T13146] overlayfs: missing 'lowerdir'
[  454.265287][T13140] EXT4-fs (loop6): shut down requested (2)
[  454.341051][T13154] overlayfs: failed to get metacopy (-5)
[  454.417895][T13149] loop8: detected capacity change from 0 to 2048
[  454.588883][T13149] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  454.660884][T12705] kmmpd-loop3: attempt to access beyond end of device
[  454.660884][T12705] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64
[  454.777703][T12705] Buffer I/O error on dev loop3, logical block 64, lost sync page write
[  455.179199][T12861] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  455.232802][ T5798] Bluetooth: hci2: command tx timeout
[  455.357747][T13081] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.364960][T13081] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.437814][T13081] bridge_slave_0: entered allmulticast mode
[  455.462496][T13081] bridge_slave_0: entered promiscuous mode
[  455.708051][T12546] kmmpd-loop4: attempt to access beyond end of device
[  455.708051][T12546] loop4: rw=14337, sector=128, nr_sectors = 2 limit=64
[  455.772618][T12546] Buffer I/O error on dev loop4, logical block 64, lost sync page write
[  455.789442][T11998] kmmpd-loop2: attempt to access beyond end of device
[  455.789442][T11998] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64
[  455.864008][T11998] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  455.916648][T12774] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  456.065992][T13081] bridge0: port 2(bridge_slave_1) entered blocking state
[  456.137781][T13081] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.174773][T13081] bridge_slave_1: entered allmulticast mode
[  456.219245][T13081] bridge_slave_1: entered promiscuous mode
[  456.398924][T13181] overlayfs: missing 'lowerdir'
[  456.436199][T11934] kmmpd-loop9: attempt to access beyond end of device
[  456.436199][T11934] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64
[  456.517659][T11934] Buffer I/O error on dev loop9, logical block 64, lost sync page write
[  457.321914][ T5798] Bluetooth: hci2: command tx timeout
[  457.436421][T13193] loop8: detected capacity change from 0 to 1024
[  457.541146][T13081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  457.588985][T13193] EXT4-fs: Ignoring removed nobh option
[  457.657597][T13193] EXT4-fs: Ignoring removed bh option
[  457.661871][T13081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  457.689290][T13193] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  458.290565][T13193] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  458.579641][T13193] EXT4-fs (loop8): shut down requested (2)
[  458.628627][T13193] overlayfs: failed to get metacopy (-5)
[  458.918007][T12067] kmmpd-loop5: attempt to access beyond end of device
[  458.918007][T12067] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64
[  459.009701][T12067] Buffer I/O error on dev loop5, logical block 64, lost sync page write
[  459.131307][T13081] team0: Port device team_slave_0 added
[  459.170502][T13081] team0: Port device team_slave_1 added
[  459.408958][ T5798] Bluetooth: hci2: command tx timeout
[  459.528509][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  459.547378][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  459.571734][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  459.597037][T12861] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  459.657899][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  459.688133][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  459.697995][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  459.759521][T13081] batman_adv: batadv0: Adding interface: batadv_slave_0
[  459.766639][T13081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  459.820046][T12705] kmmpd-loop3: attempt to access beyond end of device
[  459.820046][T12705] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64
[  459.914172][T12705] Buffer I/O error on dev loop3, logical block 64, lost sync page write
[  459.944123][T13081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  460.103984][T13081] batman_adv: batadv0: Adding interface: batadv_slave_1
[  460.138427][T13081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  460.257741][T13081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  460.762757][T13081] hsr_slave_0: entered promiscuous mode
[  460.777820][T12546] kmmpd-loop4: attempt to access beyond end of device
[  460.777820][T12546] loop4: rw=14337, sector=128, nr_sectors = 2 limit=64
[  460.837624][T11998] kmmpd-loop2: attempt to access beyond end of device
[  460.837624][T11998] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64
[  460.851832][T13081] hsr_slave_1: entered promiscuous mode
[  460.857708][T12546] Buffer I/O error on dev loop4, logical block 64, lost sync page write
[  460.877811][T11998] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  460.914256][T13081] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  460.934410][T13081] Cannot create hsr debugfs directory
[  461.492416][T11934] kmmpd-loop9: attempt to access beyond end of device
[  461.492416][T11934] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64
[  461.560022][T11934] Buffer I/O error on dev loop9, logical block 64, lost sync page write
[  461.792231][ T5792] Bluetooth: hci3: command tx timeout
[  462.134529][ T2956] hsr_slave_0: left promiscuous mode
[  462.219284][ T2956] hsr_slave_1: left promiscuous mode
[  462.225669][ T2956] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  462.281091][ T2956] batman_adv: batadv0: Removing interface: batadv_slave_0
[  462.290225][ T2956] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  462.336116][ T2956] batman_adv: batadv0: Removing interface: batadv_slave_1
[  462.378573][ T2956] bridge_slave_1: left allmulticast mode
[  462.384297][ T2956] bridge_slave_1: left promiscuous mode
[  462.418033][ T2956] bridge0: port 2(bridge_slave_1) entered disabled state
[  462.488857][ T2956] bridge_slave_0: left allmulticast mode
[  462.494579][ T2956] bridge_slave_0: left promiscuous mode
[  462.547802][ T2956] bridge0: port 1(bridge_slave_0) entered disabled state
[  462.748747][ T2956] veth1_macvtap: left promiscuous mode
[  462.754373][ T2956] veth0_macvtap: left promiscuous mode
[  462.789174][ T2956] veth1_vlan: left promiscuous mode
[  462.794589][ T2956] veth0_vlan: left promiscuous mode
[  462.827848][ T5792] Bluetooth: hci0: command 0x0406 tx timeout
[  463.868384][ T5798] Bluetooth: hci3: command tx timeout
[  463.948487][T12067] kmmpd-loop5: attempt to access beyond end of device
[  463.948487][T12067] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64
[  463.967583][T12067] Buffer I/O error on dev loop5, logical block 64, lost sync page write
[  464.849245][T12705] kmmpd-loop3: attempt to access beyond end of device
[  464.849245][T12705] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64
[  464.907967][T12705] Buffer I/O error on dev loop3, logical block 64, lost sync page write
[  465.789236][ T2956] team0 (unregistering): Port device team_slave_1 removed
[  465.827728][T12546] kmmpd-loop4: attempt to access beyond end of device
[  465.827728][T12546] loop4: rw=14337, sector=128, nr_sectors = 2 limit=64
[  465.897623][T11998] kmmpd-loop2: attempt to access beyond end of device
[  465.897623][T11998] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64
[  465.897640][T12546] Buffer I/O error on dev loop4, logical block 64, lost sync page write
[  465.947843][ T5798] Bluetooth: hci3: command tx timeout
[  465.987597][T11998] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  466.059416][ T2956] team0 (unregistering): Port device team_slave_0 removed
[  466.268940][ T2956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  466.514883][T11934] kmmpd-loop9: attempt to access beyond end of device
[  466.514883][T11934] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64
[  466.577645][T11934] Buffer I/O error on dev loop9, logical block 64, lost sync page write
[  466.578011][ T2956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  468.029541][ T5798] Bluetooth: hci3: command tx timeout
[  468.987956][T12067] kmmpd-loop5: attempt to access beyond end of device
[  468.987956][T12067] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64
[  469.038018][T12067] Buffer I/O error on dev loop5, logical block 64, lost sync page write
[  469.437038][ T2956] bond0 (unregistering): Released all slaves
[  469.895712][T12705] kmmpd-loop3: attempt to access beyond end of device
[  469.895712][T12705] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64
[  470.007621][T12705] Buffer I/O error on dev loop3, logical block 64, lost sync page write
[  470.324478][T13206] chnl_net:caif_netlink_parms(): no params data found
[  470.837845][T12546] kmmpd-loop4: attempt to access beyond end of device
[  470.837845][T12546] loop4: rw=14337, sector=128, nr_sectors = 2 limit=64
[  470.902591][T12546] Buffer I/O error on dev loop4, logical block 64, lost sync page write
[  470.957639][T11998] kmmpd-loop2: attempt to access beyond end of device
[  470.957639][T11998] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64
[  471.037944][T11998] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  471.218506][T13206] bridge0: port 1(bridge_slave_0) entered blocking state
[  471.225713][T13206] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.267901][T13206] bridge_slave_0: entered allmulticast mode
[  471.275551][T13206] bridge_slave_0: entered promiscuous mode
[  471.340930][T13206] bridge0: port 2(bridge_slave_1) entered blocking state
[  471.377733][T13206] bridge0: port 2(bridge_slave_1) entered disabled state
[  471.385137][T13206] bridge_slave_1: entered allmulticast mode
[  471.431056][T13206] bridge_slave_1: entered promiscuous mode
[  471.597184][T11934] kmmpd-loop9: attempt to access beyond end of device
[  471.597184][T11934] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64
[  471.632037][T13206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  471.697622][T11934] Buffer I/O error on dev loop9, logical block 64, lost sync page write
[  471.923452][ T2956] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.180467][ T2956] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.276178][T13206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  472.649479][ T2956] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.838874][T13206] team0: Port device team_slave_0 added
[  472.878250][T13206] team0: Port device team_slave_1 added
[  472.950922][ T2956] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.226837][T13081] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  473.278238][T13206] batman_adv: batadv0: Adding interface: batadv_slave_0
[  473.285240][T13206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  473.407116][T13206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  473.450138][T13206] batman_adv: batadv0: Adding interface: batadv_slave_1
[  473.457150][T13206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  473.607758][T13206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  473.663802][T13081] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  473.766641][T13081] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  473.810730][T13081] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  474.029157][T12067] kmmpd-loop5: attempt to access beyond end of device
[  474.029157][T12067] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64
[  474.075758][T12067] Buffer I/O error on dev loop5, logical block 64, lost sync page write
[  474.166398][ T2956] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  474.543228][ T2956] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  474.668166][T13206] hsr_slave_0: entered promiscuous mode
[  474.708148][T13206] hsr_slave_1: entered promiscuous mode
[  474.891102][ T2956] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  474.930957][T12705] kmmpd-loop3: attempt to access beyond end of device
[  474.930957][T12705] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64
[  474.978081][T12705] Buffer I/O error on dev loop3, logical block 64, lost sync page write
[  475.196949][ T2956] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.867684][T12546] kmmpd-loop4: attempt to access beyond end of device
[  475.867684][T12546] loop4: rw=14337, sector=128, nr_sectors = 2 limit=64
[  475.917623][T12546] Buffer I/O error on dev loop4, logical block 64, lost sync page write
[  476.034576][T11998] kmmpd-loop2: attempt to access beyond end of device
[  476.034576][T11998] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64
[  476.077775][T11998] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  476.244351][T13081] 8021q: adding VLAN 0 to HW filter on device bond0
[  476.686059][T11934] kmmpd-loop9: attempt to access beyond end of device
[  476.686059][T11934] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64
[  476.737874][T11934] Buffer I/O error on dev loop9, logical block 64, lost sync page write
[  477.287316][T13081] 8021q: adding VLAN 0 to HW filter on device team0
[  477.583105][T12985] bridge0: port 1(bridge_slave_0) entered blocking state
[  477.590330][T12985] bridge0: port 1(bridge_slave_0) entered forwarding state
[  477.649707][T12985] bridge0: port 2(bridge_slave_1) entered blocking state
[  477.656925][T12985] bridge0: port 2(bridge_slave_1) entered forwarding state
[  478.849429][T13206] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  478.900079][T13206] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  479.068477][T12067] kmmpd-loop5: attempt to access beyond end of device
[  479.068477][T12067] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64
[  479.147820][T12067] Buffer I/O error on dev loop5, logical block 64, lost sync page write
[  479.220076][T13081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  479.300973][T13206] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  479.504499][T13206] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  479.998341][T12705] kmmpd-loop3: attempt to access beyond end of device
[  479.998341][T12705] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64
[  480.045904][T12705] Buffer I/O error on dev loop3, logical block 64, lost sync page write
[  480.791761][ T2956] hsr_slave_0: left promiscuous mode
[  480.858358][ T2956] hsr_slave_1: left promiscuous mode
[  480.889316][ T2956] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  480.896809][ T2956] batman_adv: batadv0: Removing interface: batadv_slave_0
[  480.907945][T12546] kmmpd-loop4: attempt to access beyond end of device
[  480.907945][T12546] loop4: rw=14337, sector=128, nr_sectors = 2 limit=64
[  480.957662][T12546] Buffer I/O error on dev loop4, logical block 64, lost sync page write
[  480.969579][ T2956] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  480.977048][ T2956] batman_adv: batadv0: Removing interface: batadv_slave_1
[  481.038010][ T2956] bridge_slave_1: left allmulticast mode
[  481.044234][ T2956] bridge_slave_1: left promiscuous mode
[  481.107705][T11998] kmmpd-loop2: attempt to access beyond end of device
[  481.107705][T11998] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64
[  481.107899][ T2956] bridge0: port 2(bridge_slave_1) entered disabled state
[  481.189894][ T2956] bridge_slave_0: left allmulticast mode
[  481.195612][ T2956] bridge_slave_0: left promiscuous mode
[  481.197681][T11998] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  481.247333][ T2956] bridge0: port 1(bridge_slave_0) entered disabled state
[  481.375867][ T2956] hsr_slave_0: left promiscuous mode
[  481.388942][ T2956] hsr_slave_1: left promiscuous mode
[  481.428085][ T2956] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  481.435580][ T2956] batman_adv: batadv0: Removing interface: batadv_slave_0
[  481.488716][ T2956] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  481.496258][ T2956] batman_adv: batadv0: Removing interface: batadv_slave_1
[  481.549213][ T2956] bridge_slave_1: left allmulticast mode
[  481.555418][ T2956] bridge_slave_1: left promiscuous mode
[  481.607935][ T2956] bridge0: port 2(bridge_slave_1) entered disabled state
[  481.659564][ T2956] bridge_slave_0: left allmulticast mode
[  481.665288][ T2956] bridge_slave_0: left promiscuous mode
[  481.697814][ T2956] bridge0: port 1(bridge_slave_0) entered disabled state
[  481.707884][T11934] kmmpd-loop9: attempt to access beyond end of device
[  481.707884][T11934] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64
[  481.757962][T11934] Buffer I/O error on dev loop9, logical block 64, lost sync page write
[  482.010812][ T2956] veth1_macvtap: left promiscuous mode
[  482.016465][ T2956] veth0_macvtap: left promiscuous mode
[  482.055161][ T2956] veth1_vlan: left promiscuous mode
[  482.078031][ T2956] veth0_vlan: left promiscuous mode
[  482.103641][ T2956] veth1_macvtap: left promiscuous mode
[  482.128671][ T2956] veth0_macvtap: left promiscuous mode
[  482.134411][ T2956] veth1_vlan: left promiscuous mode
[  482.175811][ T2956] veth0_vlan: left promiscuous mode
[  483.317768][ T5792] Bluetooth: hci1: command 0x0406 tx timeout
[  484.117924][T12067] kmmpd-loop5: attempt to access beyond end of device
[  484.117924][T12067] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64
[  484.187600][T12067] Buffer I/O error on dev loop5, logical block 64, lost sync page write
[  485.069364][T12705] kmmpd-loop3: attempt to access beyond end of device
[  485.069364][T12705] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64
[  485.117631][T12705] Buffer I/O error on dev loop3, logical block 64, lost sync page write
[  485.519346][ T2956] team0 (unregistering): Port device team_slave_1 removed
[  485.759708][ T2956] team0 (unregistering): Port device team_slave_0 removed
[  485.947888][T12546] kmmpd-loop4: attempt to access beyond end of device
[  485.947888][T12546] loop4: rw=14337, sector=128, nr_sectors = 2 limit=64
[  486.007799][T12546] Buffer I/O error on dev loop4, logical block 64, lost sync page write
[  486.016667][ T2956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  486.187691][T11998] kmmpd-loop2: attempt to access beyond end of device
[  486.187691][T11998] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64
[  486.233586][T11998] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  486.298952][ T2956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  486.824122][T11934] kmmpd-loop9: attempt to access beyond end of device
[  486.824122][T11934] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64
[  486.868410][T11934] Buffer I/O error on dev loop9, logical block 64, lost sync page write
[  489.178619][T12067] kmmpd-loop5: attempt to access beyond end of device
[  489.178619][T12067] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64
[  489.235056][T12067] Buffer I/O error on dev loop5, logical block 64, lost sync page write
[  489.250389][ T2956] bond0 (unregistering): Released all slaves
[  490.138194][T12705] kmmpd-loop3: attempt to access beyond end of device
[  490.138194][T12705] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64
[  490.197939][T12705] Buffer I/O error on dev loop3, logical block 64, lost sync page write
[  490.828007][   T29] INFO: task syz-executor:11050 blocked for more than 143 seconds.
[  490.835992][   T29]       Not tainted 6.6.102-syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  490.887573][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  490.896328][   T29] task:syz-executor    state:D stack:21736 pid:11050 ppid:1      flags:0x00004002
[  490.997840][T12546] kmmpd-loop4: attempt to access beyond end of device
[  490.997840][T12546] loop4: rw=14337, sector=128, nr_sectors = 2 limit=64
[  491.027606][   T29] Call Trace:
[  491.030965][   T29]  <TASK>
[  491.033953][   T29]  __schedule+0x14d2/0x44d0
[  491.087133][T12546] Buffer I/O error on dev loop4, logical block 64, lost sync page write
[  491.087690][   T29]  ? lock_chain_count+0x20/0x20
[  491.157662][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[  491.163753][   T29]  ? asan.module_dtor+0x20/0x20
[  491.226107][   T29]  ? _raw_spin_unlock+0x40/0x40
[  491.231461][T11998] kmmpd-loop2: attempt to access beyond end of device
[  491.231461][T11998] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64
[  491.257635][   T29]  ? prepare_to_wait_event+0x3db/0x470
[  491.263183][   T29]  ? prepare_to_wait_event+0x434/0x470
[  491.287581][T11998] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  491.317587][   T29]  schedule+0xbd/0x170
[  491.321760][   T29]  wb_wait_for_completion+0x166/0x290
[  491.327179][   T29]  ? __bpf_trace_writeback_inode_template+0x100/0x100
[  491.377730][   T29]  ? wake_bit_function+0x200/0x200
[  491.382938][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  491.418726][   T29]  sync_inodes_sb+0x1bc/0x9e0
[  491.423510][   T29]  ? filemap_flush+0xc5/0x120
[  491.468563][   T29]  ? filemap_fdatawrite_range+0x120/0x120
[  491.474413][   T29]  ? try_to_writeback_inodes_sb+0xc0/0xc0
[  491.515036][   T29]  ? ext4_put_super+0xa40/0xa40
[  491.535340][   T29]  ? get_nr_dirty_inodes+0x1d4/0x220
[  491.568058][   T29]  sync_filesystem+0x171/0x220
[  491.572939][   T29]  generic_shutdown_super+0x6f/0x2b0
[  491.595262][   T29]  kill_block_super+0x44/0x90
[  491.624546][   T29]  ext4_kill_sb+0x68/0xa0
[  491.647299][   T29]  deactivate_locked_super+0x97/0x100
[  491.666474][   T29]  cleanup_mnt+0x429/0x4c0
[  491.687612][   T29]  task_work_run+0x1ce/0x250
[  491.692725][   T29]  ? task_work_cancel+0x240/0x240
[  491.737774][   T29]  ? do_exit+0x906/0x23c0
[  491.742198][   T29]  ? kmem_cache_free+0xf8/0x280
[  491.747099][   T29]  do_exit+0x90b/0x23c0
[  491.797676][   T29]  ? put_task_struct+0xc0/0xc0
[  491.802557][   T29]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  491.836372][   T29]  ? lock_chain_count+0x20/0x20
[  491.857587][   T29]  ? _raw_spin_lock_irq+0xaf/0xe0
[  491.862711][   T29]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  491.897792][T11934] kmmpd-loop9: attempt to access beyond end of device
[  491.897792][T11934] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64
[  491.927700][   T29]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  491.933775][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  491.967806][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  491.973113][   T29]  do_group_exit+0x21b/0x2d0
[  491.978118][T11934] Buffer I/O error on dev loop9, logical block 64, lost sync page write
[  492.007589][   T29]  __x64_sys_exit_group+0x3f/0x40
[  492.012736][   T29]  do_syscall_64+0x55/0xb0
[  492.017196][   T29]  ? clear_bhb_loop+0x40/0x90
[  492.057665][   T29]  ? clear_bhb_loop+0x40/0x90
[  492.062439][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  492.087248][   T29] RIP: 0033:0x7ff88b78ebe9
[  492.117622][   T29] RSP: 002b:00007ffdb9ab2ff8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  492.126127][   T29] RAX: ffffffffffffffda RBX: 00007ff88b811c89 RCX: 00007ff88b78ebe9
[  492.187754][   T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  492.195820][   T29] RBP: 0000000000000027 R08: 00007ffdb9ab0d96 R09: 00007ffdb9ab42b0
[  492.257581][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdb9ab42b0
[  492.265642][   T29] R13: 00007ff88b811c05 R14: 000055557e6634a8 R15: 00007ffdb9ab6470
[  492.337624][   T29]  </TASK>
[  492.347818][   T29] INFO: task syz-executor:11443 blocked for more than 144 seconds.
[  492.355810][   T29]       Not tainted 6.6.102-syzkaller #0
[  492.424873][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  492.458076][   T29] task:syz-executor    state:D stack:20840 pid:11443 ppid:1      flags:0x00004002
[  492.467396][   T29] Call Trace:
[  492.511289][   T29]  <TASK>
[  492.514327][   T29]  __schedule+0x14d2/0x44d0
[  492.543539][   T29]  ? lock_chain_count+0x20/0x20
[  492.563503][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[  492.586862][   T29]  ? asan.module_dtor+0x20/0x20
[  492.606648][   T29]  ? _raw_spin_unlock+0x40/0x40
[  492.617781][   T29]  ? prepare_to_wait_event+0x3db/0x470
[  492.623348][   T29]  ? prepare_to_wait_event+0x434/0x470
[  492.654420][   T29]  schedule+0xbd/0x170
[  492.668230][   T29]  wb_wait_for_completion+0x166/0x290
[  492.673692][   T29]  ? __bpf_trace_writeback_inode_template+0x100/0x100
[  492.703569][   T29]  ? wake_bit_function+0x200/0x200
[  492.727598][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  492.732934][   T29]  sync_inodes_sb+0x1bc/0x9e0
[  492.767577][   T29]  ? filemap_flush+0xc5/0x120
[  492.772539][   T29]  ? filemap_fdatawrite_range+0x120/0x120
[  492.797927][   T29]  ? try_to_writeback_inodes_sb+0xc0/0xc0
[  492.803748][   T29]  ? ext4_put_super+0xa40/0xa40
[  492.855164][   T29]  ? get_nr_dirty_inodes+0x1d4/0x220
[  492.867903][   T29]  sync_filesystem+0x171/0x220
[  492.872769][   T29]  generic_shutdown_super+0x6f/0x2b0
[  492.897875][   T29]  kill_block_super+0x44/0x90
[  492.902641][   T29]  ext4_kill_sb+0x68/0xa0
[  492.907019][   T29]  deactivate_locked_super+0x97/0x100
[  492.947620][   T29]  cleanup_mnt+0x429/0x4c0
[  492.952147][   T29]  task_work_run+0x1ce/0x250
[  492.956791][   T29]  ? task_work_cancel+0x240/0x240
[  492.997721][   T29]  ? do_exit+0x906/0x23c0
[  493.002162][   T29]  ? kmem_cache_free+0xf8/0x280
[  493.007072][   T29]  do_exit+0x90b/0x23c0
[  493.047907][   T29]  ? put_task_struct+0xc0/0xc0
[  493.052774][   T29]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  493.097781][   T29]  ? lock_chain_count+0x20/0x20
[  493.102750][   T29]  ? _raw_spin_lock_irq+0xaf/0xe0
[  493.137582][   T29]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  493.143083][   T29]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  493.197764][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  493.203074][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  493.218167][   T29]  do_group_exit+0x21b/0x2d0
[  493.222849][   T29]  __x64_sys_exit_group+0x3f/0x40
[  493.255374][   T29]  do_syscall_64+0x55/0xb0
[  493.259984][   T29]  ? clear_bhb_loop+0x40/0x90
[  493.264719][   T29]  ? clear_bhb_loop+0x40/0x90
[  493.287939][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  493.293940][   T29] RIP: 0033:0x7efffdb8ebe9
[  493.327251][   T29] RSP: 002b:00007fff309959b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  493.357114][   T29] RAX: ffffffffffffffda RBX: 00007efffdc11c89 RCX: 00007efffdb8ebe9
[  493.397650][   T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  493.405721][   T29] RBP: 0000000000000027 R08: 00007fff30993756 R09: 00007fff30996c70
[  493.467711][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff30996c70
[  493.475788][   T29] R13: 00007efffdc11c05 R14: 0000555592c5f4a8 R15: 00007fff30998e30
[  493.517672][   T29]  </TASK>
[  493.527966][   T29] 
[  493.527966][   T29] Showing all locks held in the system:
[  493.573770][   T29] 3 locks held by kworker/u4:0/11:
[  493.580087][   T29] 3 locks held by kworker/u4:1/12:
[  493.585254][   T29] 3 locks held by kworker/1:1/27:
[  493.617569][   T29]  #0: ffff888017870938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0
[  493.657780][   T29]  #1: ffffc90000a2fd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0
[  493.687739][   T29]  #2: ffffffff8dfbba48 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20
[  493.717952][   T29] 1 lock held by khungtaskd/29:
[  493.722882][   T29]  #0: ffffffff8cd2fbe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[  493.775488][   T29] 3 locks held by kworker/u4:3/48:
[  493.788372][   T29] 3 locks held by kworker/u4:5/142:
[  493.793631][   T29] 2 locks held by kworker/0:2/786:
[  493.837883][   T29]  #0: ffff8880b8e3c458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  493.867836][   T29]  #1: ffff8880b8e289c0 (psi_seq){-.-.}-{0:0}, at: __schedule+0x20ee/0x44d0
[  493.876678][   T29] 2 locks held by kworker/1:2/966:
[  493.907591][   T29]  #0: ffff888017872538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0
[  493.937599][   T29]  #1: ffffc9000437fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0
[  493.987915][   T29] 2 locks held by kworker/u4:6/2903:
[  493.993293][   T29] 4 locks held by kworker/u4:8/2943:
[  494.027596][   T29] 5 locks held by kworker/u4:9/2956:
[  494.032979][   T29]  #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0
[  494.107877][   T29]  #1: ffffc9000be27d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0
[  494.157801][   T29]  #2: ffffffff8dfaec50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90
[  494.167354][   T29]  #3: ffffffff8dfbba48 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa60
[  494.197676][T12067] kmmpd-loop5: attempt to access beyond end of device
[  494.197676][T12067] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64
[  494.237841][T12067] Buffer I/O error on dev loop5, logical block 64, lost sync page write
[  494.247596][   T29]  #4: ffffffff8cd35bb8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x830
[  494.297577][   T29] 3 locks held by kworker/u4:10/2985:
[  494.303031][   T29]  #0: ffff88814be40138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0
[  494.367599][   T29]  #1: ffffc9000bdd7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0
[  494.407731][   T29]  #2: ffffffff8dfbba48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x14e0
[  494.417278][   T29] 1 lock held by dhcpcd/5453:
[  494.467582][   T29]  #0: ffffffff8dfbba48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x76f/0xf10
[  494.477218][   T29] 2 locks held by getty/5549:
[  494.507772][   T29]  #0: ffff88802db8f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  494.537844][   T29]  #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380
[  494.577592][   T29] 2 locks held by syz-executor/11050:
[  494.583058][   T29]  #0: ffff888078dba0e0 (&type->s_umount_key#31){++++}-{3:3}, at: deactivate_super+0xa4/0xe0
[  494.647592][   T29]  #1: ffff8881472e67d0 (&bdi->wb_switch_rwsem){+.+.}-{3:3}, at: sync_inodes_sb+0x1a0/0x9e0
[  494.697577][   T29] 2 locks held by syz-executor/11443:
[  494.703036][   T29]  #0: ffff88805a93e0e0 (&type->s_umount_key#31){++++}-{3:3}, at: deactivate_super+0xa4/0xe0
[  494.747701][   T29]  #1: ffff8880218087d0 (&bdi->wb_switch_rwsem){+.+.}-{3:3}, at: sync_inodes_sb+0x1a0/0x9e0
[  494.787587][   T29] 2 locks held by syz-executor/11691:
[  494.793138][   T29]  #0: ffff88802b49c0e0 (&type->s_umount_key#31){++++}-{3:3}, at: deactivate_super+0xa4/0xe0
[  494.865341][   T29]  #1: ffff8880217887d0 (&bdi->wb_switch_rwsem){+.+.}-{3:3}, at: sync_inodes_sb+0x1a0/0x9e0
[  494.896835][   T29] 5 locks held by syz-executor/11882:
[  494.915038][   T29]  #0: ffff88807ed80e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x212/0x510
[  494.955632][   T29]  #1: ffff88807ed800b8 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x4c9/0xfb0
[  494.987942][   T29]  #2: ffffffff8e129188 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa1/0x220
[  495.023666][   T29]  #3: ffff88807e617b38 (&conn->lock#2){+.+.}-{3:3}, at: l2cap_conn_del+0x70/0x660
[  495.037771][   T29]  #4: ffffffff8cd35bb8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x448/0x830
[  495.065619][   T29] 2 locks held by syz-executor/12174:
[  495.087592][   T29]  #0: ffff888062a3a0e0 (&type->s_umount_key#31){++++}-{3:3}, at: deactivate_super+0xa4/0xe0
[  495.116617][   T29]  #1: ffff8881472ea7d0 (&bdi->wb_switch_rwsem){+.+.}-{3:3}, at: sync_inodes_sb+0x1a0/0x9e0
[  495.144969][   T29] 2 locks held by syz-executor/12272:
[  495.164352][T12705] kmmpd-loop3: attempt to access beyond end of device
[  495.164352][T12705] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64
[  495.178624][   T29]  #0: ffff88807d0fa0e0 (&type->s_umount_key#31){++++}-{3:3}, at: deactivate_super+0xa4/0xe0
[  495.218036][   T29]  #1: ffff88802176c7d0 (&bdi->wb_switch_rwsem){+.+.}-{3:3}, at: sync_inodes_sb+0x1a0/0x9e0
[  495.237353][T12705] Buffer I/O error on dev loop3, logical block 64, lost sync page write
[  495.246213][   T29] 1 lock held by syz.1.2242/12579:
[  495.264427][   T29]  #0: ffff88805a93e0e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_lock+0x167/0x360
[  495.304377][   T29] 3 locks held by kworker/u4:4/12680:
[  495.312388][   T29] 3 locks held by kworker/u4:11/12821:
[  495.334534][   T29]  #0: ffff888017871538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0
[  495.366643][   T29]  #1: ffffc9000b9d7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0
[  495.396559][   T29]  #2: ffffffff8dfbba48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[  495.434515][   T29] 1 lock held by syz-executor/13081:
[  495.457649][   T29]  #0: ffffffff8dfbba48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x76f/0xf10
[  495.467192][   T29] 1 lock held by syz-executor/13206:
[  495.507593][   T29]  #0: ffffffff8dfbba48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x76f/0xf10
[  495.517186][   T29] 
[  495.563882][   T29] =============================================
[  495.563882][   T29] 
[  495.597761][   T29] NMI backtrace for cpu 0
[  495.602193][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.6.102-syzkaller #0
[  495.610125][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  495.620215][   T29] Call Trace:
[  495.623529][   T29]  <TASK>
[  495.626494][   T29]  dump_stack_lvl+0x16c/0x230
[  495.631229][   T29]  ? show_regs_print_info+0x20/0x20
[  495.636484][   T29]  ? load_image+0x3b0/0x3b0
[  495.641050][   T29]  nmi_cpu_backtrace+0x39b/0x3d0
[  495.646046][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[  495.652297][   T29]  ? _printk+0xd0/0x110
[  495.656485][   T29]  ? load_image+0x3b0/0x3b0
[  495.661018][   T29]  ? load_image+0x3b0/0x3b0
[  495.665552][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  495.671651][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[  495.677665][   T29]  watchdog+0xf41/0xf80
[  495.681855][   T29]  ? watchdog+0x1e1/0xf80
[  495.686392][   T29]  kthread+0x2fa/0x390
[  495.690495][   T29]  ? hungtask_pm_notify+0x90/0x90
[  495.695556][   T29]  ? kthread_blkcg+0xd0/0xd0
[  495.700165][   T29]  ret_from_fork+0x48/0x80
[  495.704603][   T29]  ? kthread_blkcg+0xd0/0xd0
[  495.709214][   T29]  ret_from_fork_asm+0x11/0x20
[  495.714015][   T29]  </TASK>
[  495.717975][   T29] Sending NMI from CPU 0 to CPUs 1:
[  495.723264][    C1] NMI backtrace for cpu 1
[  495.723280][    C1] CPU: 1 PID: 142 Comm: kworker/u4:5 Not tainted 6.6.102-syzkaller #0
[  495.723297][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  495.723308][    C1] Workqueue: writeback wb_workfn (flush-7:5)
[  495.723338][    C1] RIP: 0010:kasan_check_range+0x1be/0x290
[  495.723360][    C1] Code: 01 f3 49 8d 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 12 41 80 3b 00 0f 85 a6 00 00 00 49 ff c3 49 ff cc 75 ee 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 45 84 ff 75 61 41 f7 c7 00 ff 00 00
[  495.723375][    C1] RSP: 0018:ffffc90002d96bf0 EFLAGS: 00000256
[  495.723388][    C1] RAX: 0000000000000101 RBX: 0000000000000000 RCX: ffffffff8231913f
[  495.723399][    C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8880532fc488
[  495.723410][    C1] RBP: 1ffff1100a65f891 R08: ffff8880532fc48f R09: 1ffff1100a65f891
[  495.723422][    C1] R10: dffffc0000000000 R11: ffffed100a65f892 R12: 0000000000000001
[  495.723434][    C1] R13: ffff8880532fc488 R14: ffffed100a65f892 R15: 1ffff1100a65f891
[  495.723446][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  495.723460][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  495.723472][    C1] CR2: 00005560a9d21138 CR3: 000000000cb30000 CR4: 00000000003506e0
[  495.723487][    C1] Call Trace:
[  495.723493][    C1]  <TASK>
[  495.723501][    C1]  mpage_process_page_bufs+0x2df/0x8f0
[  495.723540][    C1]  mpage_prepare_extent_to_map+0xde9/0x1c80
[  495.723578][    C1]  ? trace_ext4_writepages+0x1c0/0x1c0
[  495.723614][    C1]  ? ext4_journal_check_start+0x178/0x250
[  495.723640][    C1]  ? __ext4_journal_start_sb+0x259/0x570
[  495.723666][    C1]  ext4_do_writepages+0x108a/0x38d0
[  495.723700][    C1]  ? verify_lock_unused+0x140/0x140
[  495.723731][    C1]  ? ext4_normal_submit_inode_data_buffers+0x1b0/0x1b0
[  495.723764][    C1]  ? rcu_read_lock_any_held+0xb4/0x120
[  495.723792][    C1]  ext4_writepages+0x1a8/0x2f0
[  495.723818][    C1]  ? ext4_read_folio+0x2f0/0x2f0
[  495.723849][    C1]  ? do_writepages+0x395/0x600
[  495.723876][    C1]  ? ext4_read_folio+0x2f0/0x2f0
[  495.723899][    C1]  do_writepages+0x3a2/0x600
[  495.723931][    C1]  ? folio_clear_dirty_for_io+0xc30/0xc30
[  495.723957][    C1]  ? writeback_sb_inodes+0x47f/0xef0
[  495.723981][    C1]  ? __lock_acquire+0x7c80/0x7c80
[  495.723998][    C1]  ? do_raw_spin_lock+0x121/0x2c0
[  495.724023][    C1]  __writeback_single_inode+0x153/0xee0
[  495.724052][    C1]  writeback_sb_inodes+0x77c/0xef0
[  495.724075][    C1]  ? move_expired_inodes+0x319/0x720
[  495.724111][    C1]  ? queue_io+0x560/0x560
[  495.724142][    C1]  ? rcu_is_watching+0x15/0xb0
[  495.724169][    C1]  wb_writeback+0x450/0xba0
[  495.724196][    C1]  ? queue_io+0x331/0x560
[  495.724221][    C1]  ? percpu_ref_tryget+0x250/0x250
[  495.724247][    C1]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  495.724274][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  495.724305][    C1]  wb_workfn+0x3ff/0xe20
[  495.724336][    C1]  ? inode_wait_for_writeback+0x200/0x200
[  495.724370][    C1]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  495.724391][    C1]  ? read_lock_is_recursive+0x20/0x20
[  495.724413][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  495.724438][    C1]  ? process_scheduled_works+0x957/0x15b0
[  495.724459][    C1]  ? process_scheduled_works+0x957/0x15b0
[  495.724479][    C1]  process_scheduled_works+0xa45/0x15b0
[  495.724521][    C1]  ? assign_work+0x400/0x400
[  495.724544][    C1]  ? assign_work+0x39e/0x400
[  495.724566][    C1]  worker_thread+0xa55/0xfc0
[  495.724587][    C1]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  495.724612][    C1]  ? _raw_spin_unlock+0x40/0x40
[  495.724635][    C1]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[  495.724672][    C1]  kthread+0x2fa/0x390
[  495.724686][    C1]  ? pr_cont_work+0x560/0x560
[  495.724705][    C1]  ? kthread_blkcg+0xd0/0xd0
[  495.724721][    C1]  ret_from_fork+0x48/0x80
[  495.724739][    C1]  ? kthread_blkcg+0xd0/0xd0
[  495.724755][    C1]  ret_from_fork_asm+0x11/0x20
[  495.724787][    C1]  </TASK>
[  496.046531][T12546] kmmpd-loop4: attempt to access beyond end of device
[  496.046531][T12546] loop4: rw=14337, sector=128, nr_sectors = 2 limit=64
[  496.269592][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[  496.276602][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.6.102-syzkaller #0
[  496.284536][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  496.294643][   T29] Call Trace:
[  496.297953][   T29]  <TASK>
[  496.300922][   T29]  dump_stack_lvl+0x16c/0x230
[  496.305644][   T29]  ? show_regs_print_info+0x20/0x20
[  496.310878][   T29]  ? load_image+0x3b0/0x3b0
[  496.315452][   T29]  panic+0x2c0/0x710
[  496.319395][   T29]  ? schedule_preempt_disabled+0x20/0x20
[  496.325074][   T29]  ? bpf_jit_dump+0xd0/0xd0
[  496.329627][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[  496.335217][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[  496.341415][   T29]  watchdog+0xf80/0xf80
[  496.345618][   T29]  ? watchdog+0x1e1/0xf80
[  496.349997][   T29]  kthread+0x2fa/0x390
[  496.354099][   T29]  ? hungtask_pm_notify+0x90/0x90
[  496.359161][   T29]  ? kthread_blkcg+0xd0/0xd0
[  496.363779][   T29]  ret_from_fork+0x48/0x80
[  496.368240][   T29]  ? kthread_blkcg+0xd0/0xd0
[  496.372862][   T29]  ret_from_fork_asm+0x11/0x20
[  496.377683][   T29]  </TASK>
[  496.381043][   T29] Kernel Offset: disabled
[  496.385392][   T29] Rebooting in 86400 seconds..