last executing test programs:

53.559103023s ago: executing program 3 (id=896):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20004044, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x5)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66", 0x4c, 0x11, 0x0, 0x0)
recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{0x0}], 0x1, 0x0, 0x0, 0x407006}, 0x104)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x8000c2, &(0x7f0000000740), 0x0, 0x5d1, &(0x7f0000000140)="$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")

51.589352661s ago: executing program 3 (id=903):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x19, 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0xc, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]})
socket$inet_smc(0x2b, 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000001580)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x0, 0x100, 0x989, 0x0, 0x4a}, 0x9c)
r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00')
preadv(r5, &(0x7f0000000740)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1, 0x0, 0x0)
close$fd_v4l2_buffer(r5)
close_range(r2, 0xffffffffffffffff, 0x0)

49.849191454s ago: executing program 3 (id=905):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4080, 0xfd79, 0x0, 0x0}, &(0x7f0000000000)=0x40)

40.935129285s ago: executing program 3 (id=923):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20004044, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66", 0x4c, 0x11, 0x0, 0x0)
recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{0x0}], 0x1, 0x0, 0x0, 0x407006}, 0x104)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x8000c2, &(0x7f0000000740), 0x0, 0x5d1, &(0x7f0000000140)="$eJzs3U9sI1f9APDvOMk62c0229+vh4KALqWwoFWdTbZdVb20XJCgVCAVxKGHbeR4o1Wc9bJ2ShMikZw4cEWiEie4cOHEoRIHpIoD4tob3LiUA2JBC6iphJDRTMaJ7dixd5ONSfL5qFO/+ZP3fc/reeN5npkXwJl1OSI2I+JcRLwVETORZMuTfIpXd6Z0u48ebJS3H2yUk2g23/j7eJ7DRrm1fcuFiPhhZ5ikO259bX15oVqt3MvnZxsrd2fra+vP315ZWKosVe7Mz9+Yu3Htpesvzh9ZXZ9Z+dX9r9x+7du/+fWnP/xg80vfTwv1Sr4urVt7eZvN5uEDvtKq+ERM54sKEZG+c68dPvf/CWN5fc6NuiA8kvTz+H8R8Wye3jU5ujIBAI9XMWaiObM332xT6JhrNpMe2wAAJ096zj8dSaGUn/9PR6FQKmV9eJNPxflCtVZvXL1VW72zGFkf1qWYKNy6Xa1cy/oK0+8PE0k6P5ety9Zn8/Nd89cj4smI+HFxKpsvlWvVxVF96QGAM+5C1/H/X8X0+F8c5k/9QgAAJ9nwR/J91/EAACfU/uP/xEjKAQAcHz35AHD2tB3/h/rlHwA4+Sa77v3vqem3fwA4TXr2/795cS/9dOLaPwA4Zfz+DwBnyjdffz2dmtvNJHv+9eLba6vLtbefX6zUl0srq+VSuXbvbmmpNhnZM3tWemSx1T5TrdXuzr0Qq+/MNir1xmx9bf3mSm31TuNm9lzvmxXPiQaA0Xvymff/mETE5stT2RStsRwGXxAAnHB2czi7xkZdAGBkxkddAGBk2h7089dRlgMYnT4X9+7eDtzzEqGpiHi3f55TR1Au4PG58ok+/f/dDwHs7Cj8zxGMjg2MWL5b6waAM+hw/f8eEwwn2cEHfjcGwWnWbCbG8weAM2aIM3iXCMIpN+jhXnoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYL/pbEoKpXws8OkoFEqliIsRcSkmklu3q5VrEfFERPyhOFFM5+dGXWgA4JAKf0ny8b+uzDw33b32XPJxMXuNiO/99I2fvLPQaA0duLu88W62vHFvvmeA4uOvAwDQZrx7Qes4nb22nch/9GCj3JqOs4D3v5wNLjoVEeXtBxvlvfGIx/PCz2RjFJ//Z9JRmST9b9CgpUPY3IqIp7vrX9hdfykf+bQ7/ljs9JEcOn72/+mIfe9/kvXN7MXv/BpVyNbtvKZvw/9PPUw8IPV+2v682qv9K8Tl7DXf/8Y7G9PJ+NH+xvUR5O1fbDc3svZvuy1+mv83Lk5mbU2P9i8vX1+7Qzbff+F3X91J/WB//K2x5ifHI1qxt9van1Y2SZ/4zw1Zxz996jPP9nuzmj+LuBIHxd9JzTZW7s7W19Z/+bX3fr9UWarcmZ+/MXfj2kvXX5yfzfqoZ1s91fv97eWrT/Qr2/2tiPN94k8OqP/n8/Sgz8HP//3Wm589IP4XP9crfiGeOiB+ekz8woC4LQvn3+s7fHcaf7FP/cc74p/r+Lt02dXuzPp8ID/88/qQJQUAjkN9bX15oVqt3BsmUYj15YXWiWa+KjazxHc/3lk6KJ+pYWM9SmJg9CNOTET7ksl92ySbEUcQ60KfVb946Awn4ljfn1bit+P/+PrQH7bv9Fi19RBBi21LPuj8rB6uFoUDd5mxqI7lGwzMMN9ucxT/Flni8hDbHGMjBIzE3k4/6pIAAAAAAAAAAAAAAAD91L+VP/LviO80ar8ZbtR1BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4PT6bwAAAP///H62LQ==")

38.962382263s ago: executing program 3 (id=926):
r0 = inotify_init1(0x0)
r1 = dup(r0)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000bc0)=""/224, 0xe0}], 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x44, r3, 0x705, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x28, 0x2, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x44}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000fc0)={'syztnl0\x00', &(0x7f0000000f40)={'syztnl2\x00', <r4=>0x0, 0x7800, 0x8000, 0x1, 0x3, {{0x10, 0x4, 0x3, 0x3, 0x40, 0x66, 0x0, 0x7f, 0x2, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @ssrr={0x89, 0xb, 0x80, [@broadcast, @private=0xa010101]}, @ssrr={0x89, 0x1f, 0x3b, [@private=0xa010100, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0x15}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000001100)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000002540)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r3, @ANYBLOB="15dc2dbd7000fbdbdf25190000003400018014000200766c616e30000000000000000000000008000300010000001400020000000000000000000000000000000000040001802800018008000300000000000800030001000000140002006e65747063693000000000000000000040000180080003000000000008000100", @ANYRES32=r4, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002006772653000000000000000000000000008000300020000000c000180080003000000000081aac184cd44bb42f0337dd7e91cad85591007e90b863fbfd45f7d9e79baacac7ab89e72461bbf4da44f42712448c07b1214e29de0b5f3bef8e4ea8cc1934d96489f87934e4506b49cb82b14afde393c6ad440c05aaf8c0d6ec3cace76f59a2c2b5ac2f6a67aec1519b444a67419fe3a3390dde35cbb59997c8eb8fc867dde082485901064ed4096dc67b0e117f5aa1141f1fa1d07cf76aa49c892988d0eb29bacfc28447b6c3df9c1928a4104b20875a1a29dcef78799647139e81a49337eb11993633308a63a6962aa92d7"], 0xc0}, 0x1, 0x0, 0x0, 0x4c010}, 0x0)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4001, 0x0, 0x0, 0x0)
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x2, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir")
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x480)
syz_open_procfs(0x0, &(0x7f0000000000)='syscall\x00')
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0xa9f898, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5}, './file0/../file0\x00'})
mq_timedreceive(r5, &(0x7f0000000e00)=""/164, 0xa4, 0x8, &(0x7f0000000ec0)={0x0, 0x989680})
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
faccessat(r6, &(0x7f0000000000)='./file0\x00', 0x0)

37.707001695s ago: executing program 3 (id=930):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000002c0))
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[], 0xfffffdef}}, 0x0)

13.760186963s ago: executing program 1 (id=971):
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x14}}, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$inet6(0xa, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x10d, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
pselect6(0x9, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0)
write$cgroup_int(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014"], 0x80}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0xfffffffe, 0x0, 0x1}}, 0xb8}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)

13.35733259s ago: executing program 1 (id=973):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f00000005c0)={0x0, 0x0, 0xe, 0x1e, 0x15d, &(0x7f0000000100)="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"})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d008b0000000500010004"], 0x4c}}, 0x0)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$PIO_UNIMAP(r3, 0x4b66, &(0x7f0000000000)={0x0, 0x0})
ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000580)={0x2, &(0x7f0000000540)=[{0x1000, 0x1}, {0xa5, 0x3}]})
r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x8)
ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {}, {}]})
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000500), 0x311001, 0x0)
ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000640)=""/27)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x5, 0x7, 0x75, 0x6, 0xd8e1b3a8d0d53565}})
ioctl$KDMKTONE(r4, 0x4b30, 0x1d)
r5 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
getsockname$packet(r5, &(0x7f00000079c0)={0x11, 0x0, <r6=>0x0}, &(0x7f0000007a00)=0x14)
sendmmsg$inet(r5, &(0x7f0000007ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000007600)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000007e00)=[@ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @empty}}}], 0x38}}], 0x2, 0x0)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303050000000000000002000020d3"])

12.467504988s ago: executing program 2 (id=974):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4080, 0xfd79, 0x0, 0x0}, &(0x7f0000000000)=0x40)

12.250195202s ago: executing program 1 (id=975):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4080, 0xfd79, 0x0, 0x0}, &(0x7f0000000000)=0x40)

11.081663168s ago: executing program 4 (id=977):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20004044, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66", 0x4c, 0x11, 0x0, 0x0)
recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{0x0}], 0x1, 0x0, 0x0, 0x407006}, 0x104)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x8000c2, &(0x7f0000000740), 0x0, 0x5d1, &(0x7f0000000140)="$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")

9.543189139s ago: executing program 2 (id=978):
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$inet(r0, &(0x7f00000057c0)=[{{&(0x7f0000002d80)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000680)={0x2, 0x0, @multicast1}, 0x10, 0x0}}], 0x3fffffffffffe2e, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)

9.497965921s ago: executing program 4 (id=979):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001440)={{0x12, 0x1, 0x0, 0xab, 0xd1, 0xa0, 0x40, 0x77b, 0x2226, 0xca8b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3a, 0x92, 0xf8}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_route(0x10, 0x3, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xbb}}, {}, [], {{}, {0x5}}}, &(0x7f00000010c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00')
write$cgroup_int(r2, &(0x7f0000000080)=0x101, 0x12)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x6, 0x8, 0x443, r3}, 0x48)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x4c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2d, 0xe, {{{0x0, 0x3}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @val={0x25, 0x3}, @void, @void, @void, @void, @void, @void}}]]}, 0x4c}}, 0x0)
socketpair(0x6, 0x5, 0x85, &(0x7f0000000540)={<r4=>0xffffffffffffffff})
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f00000000c0))
recvfrom$packet(r3, &(0x7f0000000600)=""/160, 0xa0, 0x40001003, &(0x7f00000003c0)={0x11, 0x8, 0x0, 0x1, 0x40}, 0x14)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100))

6.367168665s ago: executing program 0 (id=947):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$netlink(0x10, 0x3, 0x15)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000040)={0x0}, 0x1)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff)
writev(r3, &(0x7f0000000480), 0x0)

6.365816615s ago: executing program 1 (id=988):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4080, 0xfd79, 0x0, 0x0}, &(0x7f0000000000)=0x40)

6.360076415s ago: executing program 2 (id=989):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000002200b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8)
capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, <r5=>0x0})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
prctl$PR_SET_PTRACER(0x59616d61, r5)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xb, &(0x7f0000000140)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x30}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xac, &(0x7f0000000300)=""/172, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x90)

6.353232776s ago: executing program 4 (id=990):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$can_j1939(0x1d, 0x2, 0x7)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
socket$inet6(0x10, 0x3, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x24}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x60000000}, 0x70)
socket$alg(0x26, 0x5, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r0], 0x3c}}, 0x0)

5.372265s ago: executing program 0 (id=980):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000280)='./file0\x00', 0x208008, &(0x7f0000000000)=ANY=[], 0x80, 0x14e, &(0x7f0000000e40)="$eJzs2r9Kw0AcB/AfWBE6OjoFKlHQ/Ne66ljcfIPQ5tLgxZREkPYFxElQOAdfQvAJfISMbroI+hKRmKMmUWxRIR2+n+W+8Gvvfr0rN50WR6HFEo1oe3R19LIaR6HSdfb6zGIuFXpEpOQhzbIbnb54mtbTjPRvPtCs9bdi7Gz64vCCBdyzm24JAAAAAAAAAAAAAAAAAAAAAADmpLZlaA9FeM4C7lmlajKeHLuce3HSUHuNUxX5houY4Lf5/jiV+tYrkbqfp0AcxHndrH7/WoaNoeDP9f01TsORkYwnWhC6vud7J7btdM0d09y1jY+5jPqM6p3sidLs3tQpk6b10nuzx3nem8nzb60F4vKsvtrn+SMg/DX0WvhH/S4s0UK0UQozbpXWzHtnUbSXi3Gw4nQe8vtP70d8IIv/u2dyJaqWmvrhAPCz9wAAAP//MKk80A==")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

5.37190997s ago: executing program 2 (id=981):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002580)=ANY=[@ANYBLOB="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"/4136], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, 0x0, &(0x7f0000000440))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYBLOB="efafac7f07e318bb91b7c71230214ede8248436676e5bf85ed642acfffd99e4e22f1a7436c4f3e7949dce863d71d145a18f7e212275821af75dd36caf4ec1e9fd4467fa5cbe14024ad97fe8e2a64b2a8fb9521658ecb6d48c4dbf7525168f636c4071de7cec0c89c0f06208ca4d75028df", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10)
syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]})
chdir(0x0)
close_range(r7, 0xffffffffffffffff, 0x0)

5.129252505s ago: executing program 4 (id=982):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002300)={{0x1}, &(0x7f0000002280), &(0x7f00000022c0)=r0}, 0x20)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), 0xffffffffffffffff)
r2 = socket$netlink(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x2010000, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c726f6469722c696f636861727365743d63703934392c73686f72746e616d653d77696e39352c74696d655f6f66667365743d3078303030303030303030303030303537652c756e695f786c6174653d302c7379735f696d6d757461626c652c756e695f786c6174653d312c6e6f6e756d7461696c3d302c636f6465706167653d313235312c73686f72746e616d653d77696e39350010000072746e616d6d3d77696e39352c0051f13ec7b08d013ced5842c442822583"], 0x5, 0x32a, &(0x7f0000000200)="$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")
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0)
getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000100)={'wg1\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x20, r1, 0x1, 0x0, 0x0, {0xd}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002340), 0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x9, 0x9, 0x7fff, 0x20, 0xffffffffffffffff, 0xcecf, '\x00', 0x0, r6, 0x4, 0x5, 0x4, 0xc}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r9}, 0x10)
kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)

4.338072537s ago: executing program 0 (id=983):
socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_CAPBSET_DROP(0x1c, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000f80)=ANY=[], 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
io_submit(0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
unshare(0x6a040000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_clone(0x20000, &(0x7f0000008a80)="16f5b994dc8953fa64bfad4ff358557384ded80be38787275326f14ebdee813c6e4c46e0715921a287841b75719fc715a91a1f036d27a1b74462ef81fe6af6ea310181088bea76bc8f54226c43f52f7e91a768849f2673c80315eeb664a9a845162da641672def7ee1e5014b8d0c986fb2988984b8de240777ff66a840896d1f3f5e185d1aac23504fee7d717d20dcaf2268ea8e325cdaabef9201694308441298e742394c8c96b56be4cea0dcba9321f49678c93399fc6064e4961317a69cde1031", 0xc2, &(0x7f0000008b80), 0x0, 0x0)
syz_clone(0x880, 0x0, 0x0, 0x0, &(0x7f0000008f80), &(0x7f0000008fc0))
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f000000b240), 0x0, 0x2000)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)

4.033283267s ago: executing program 4 (id=984):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
socket(0x0, 0x0, 0x0)
ioprio_get$uid(0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000640)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@umask={'umask', 0x3d, 0x5}}, {@utf8}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@discard}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@errors_remount}, {@errors_continue}, {@errors_continue}]}, 0x1, 0x1524, &(0x7f0000002280)="$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")
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000)

4.008786458s ago: executing program 2 (id=985):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$netlink(0x10, 0x3, 0x15)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000040)={0x0}, 0x1)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff)
writev(r3, &(0x7f0000000480)=[{&(0x7f00000000c0)}], 0x1)

2.968876326s ago: executing program 4 (id=986):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4080, 0xfd79, 0x0, 0x0}, &(0x7f0000000000)=0x40)

2.345252387s ago: executing program 0 (id=987):
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000011c0)='veno\x00', 0x5)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@local}, {@in=@loopback, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x1, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7, 0x0, 0x0, @in=@loopback}}]}, 0x154}}, 0x0)
syz_mount_image$udf(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x10044, &(0x7f00000002c0)={[{@gid}, {@shortad}, {@utf8}, {@undelete}, {@gid_ignore}]}, 0xfe, 0xbf6, &(0x7f0000000480)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
execveat(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
unlinkat(r1, &(0x7f00000001c0)='./file0\x00', 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @private, @loopback}, &(0x7f0000000280)=0xc)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000012c0)={0x6, 0x3, &(0x7f0000001080)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x5}, @ldst={0x0, 0x0, 0x6, 0x1, 0x2, 0x0, 0x1}], &(0x7f00000010c0)='syzkaller\x00', 0x9, 0x4c, &(0x7f0000001100)=""/76, 0x41100, 0xbe5963eec1f9bf26, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001180)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x10, 0x909, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001240)=[r1, r1], &(0x7f0000001280)=[{0x5, 0x5}, {0x4, 0x1, 0x6, 0x4}]}, 0x90)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r3 = socket$inet6(0xa, 0x6, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000600))

2.258385042s ago: executing program 2 (id=991):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, <r1=>0xffffffffffffffff}, 0x0, 0x0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x10)
ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(0xffffffffffffffff, 0x40184150, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rcu_utilization\x00'}, 0xfffffffffffffefc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x62040200)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000180)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe)
setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x3b)

1.908218815s ago: executing program 0 (id=992):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$netlink(0x10, 0x3, 0x15)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000040)={0x0}, 0x1)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff)
writev(r3, &(0x7f0000000480), 0x0)

1.757332135s ago: executing program 1 (id=993):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$unix(0x1, 0x2, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)

220.811085ms ago: executing program 0 (id=994):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000040), &(0x7f0000000100), 0x2, 0x2)
dup(r0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f00000003c0)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10)
connect$vsock_stream(r5, &(0x7f0000000100), 0x10)
connect$vsock_stream(r5, &(0x7f0000002240)={0x28, 0x0, 0x0, @hyper}, 0x10)

0s ago: executing program 1 (id=995):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5)
r1 = getpid()
sched_setaffinity(0x0, 0xfffffffffffffd74, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@generic={0x0}, 0x18)
syz_open_dev$usbfs(0x0, 0x205, 0x8401)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0)

kernel console output (not intermixed with test programs):

nly
[  393.835979][ T7836] exFAT-fs (loop1): error, failed to bmap (inode : 0000000060bc0d97 iblock : 9, err : -5)
[  393.839231][ T7836] exFAT-fs (loop1): error, invalid access to FAT (entry 0x00000020)
[  393.849300][ T7836] exFAT-fs (loop1): error, invalid access to FAT (entry 0x00000020)
[  394.234928][ T4404] bond0 (unregistering): Released all slaves
[  395.028412][ T7625] F2FS-fs (loop2): f2fs_pin_file_control: Enable GC = ino a after 801 GC trials
[  395.044447][ T7625] syz.2.748: attempt to access beyond end of device
[  395.044447][ T7625] loop2: rw=524288, sector=86016, nr_sectors = 8 limit=40427
[  395.049915][ T7625] syz.2.748: attempt to access beyond end of device
[  395.049915][ T7625] loop2: rw=524288, sector=86024, nr_sectors = 8 limit=40427
[  395.053868][ T7625] syz.2.748: attempt to access beyond end of device
[  395.053868][ T7625] loop2: rw=524288, sector=86032, nr_sectors = 8 limit=40427
[  395.058692][ T7625] syz.2.748: attempt to access beyond end of device
[  395.058692][ T7625] loop2: rw=524288, sector=86040, nr_sectors = 8 limit=40427
[  395.062574][ T7625] syz.2.748: attempt to access beyond end of device
[  395.062574][ T7625] loop2: rw=524288, sector=86048, nr_sectors = 8 limit=40427
[  395.066338][ T7625] syz.2.748: attempt to access beyond end of device
[  395.066338][ T7625] loop2: rw=524288, sector=86056, nr_sectors = 8 limit=40427
[  395.070422][ T7625] syz.2.748: attempt to access beyond end of device
[  395.070422][ T7625] loop2: rw=524288, sector=86064, nr_sectors = 8 limit=40427
[  395.074351][ T7625] syz.2.748: attempt to access beyond end of device
[  395.074351][ T7625] loop2: rw=524288, sector=86072, nr_sectors = 8 limit=40427
[  395.077958][ T7625] syz.2.748: attempt to access beyond end of device
[  395.077958][ T7625] loop2: rw=524288, sector=86080, nr_sectors = 8 limit=40427
[  395.081771][ T7625] syz.2.748: attempt to access beyond end of device
[  395.081771][ T7625] loop2: rw=524288, sector=86088, nr_sectors = 8 limit=40427
[  395.698322][ T4318] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  395.705030][ T4318] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  395.708007][ T4318] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  395.712742][ T4318] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  395.715042][ T4318] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  395.717625][ T4318] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  395.871215][ T4318] Bluetooth: hci1: command tx timeout
[  397.175239][ T4404] team0 (unregistering): Port device team_slave_1 removed
[  397.404344][ T4404] team0 (unregistering): Port device team_slave_0 removed
[  397.703220][ T4404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  397.791301][ T4318] Bluetooth: hci7: command tx timeout
[  397.951687][ T4318] Bluetooth: hci1: command tx timeout
[  398.024649][ T4404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  399.877990][ T4308] Bluetooth: hci7: command tx timeout
[  400.031472][ T4318] Bluetooth: hci1: command tx timeout
[  400.058138][ T7625] bio_check_eod: 171900 callbacks suppressed
[  400.058156][ T7625] syz.2.748: attempt to access beyond end of device
[  400.058156][ T7625] loop2: rw=524288, sector=89360, nr_sectors = 8 limit=40427
[  400.063817][ T7625] syz.2.748: attempt to access beyond end of device
[  400.063817][ T7625] loop2: rw=524288, sector=89368, nr_sectors = 8 limit=40427
[  400.067445][ T7625] syz.2.748: attempt to access beyond end of device
[  400.067445][ T7625] loop2: rw=524288, sector=89376, nr_sectors = 8 limit=40427
[  400.070986][ T7625] syz.2.748: attempt to access beyond end of device
[  400.070986][ T7625] loop2: rw=524288, sector=89384, nr_sectors = 8 limit=40427
[  400.081237][ T7625] syz.2.748: attempt to access beyond end of device
[  400.081237][ T7625] loop2: rw=524288, sector=89392, nr_sectors = 8 limit=40427
[  400.084822][ T7625] syz.2.748: attempt to access beyond end of device
[  400.084822][ T7625] loop2: rw=524288, sector=89400, nr_sectors = 8 limit=40427
[  400.088502][ T7625] syz.2.748: attempt to access beyond end of device
[  400.088502][ T7625] loop2: rw=524288, sector=89408, nr_sectors = 8 limit=40427
[  400.092340][ T7625] syz.2.748: attempt to access beyond end of device
[  400.092340][ T7625] loop2: rw=524288, sector=89416, nr_sectors = 8 limit=40427
[  400.096048][ T7625] syz.2.748: attempt to access beyond end of device
[  400.096048][ T7625] loop2: rw=524288, sector=89424, nr_sectors = 8 limit=40427
[  400.099858][ T7625] syz.2.748: attempt to access beyond end of device
[  400.099858][ T7625] loop2: rw=524288, sector=89432, nr_sectors = 8 limit=40427
[  401.104592][ T4404] bond0 (unregistering): Released all slaves
[  401.394872][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  401.473184][ T7780] EXT4-fs (loop0): unmounting filesystem.
[  401.659867][ T7712] chnl_net:caif_netlink_parms(): no params data found
[  401.817899][ T7822] chnl_net:caif_netlink_parms(): no params data found
[  401.951296][ T4308] Bluetooth: hci7: command tx timeout
[  402.079299][ T7712] bridge0: port 1(bridge_slave_0) entered blocking state
[  402.081557][ T7712] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.093560][ T7712] device bridge_slave_0 entered promiscuous mode
[  402.102163][ T7822] bridge0: port 1(bridge_slave_0) entered blocking state
[  402.104882][ T7822] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.112014][ T7822] device bridge_slave_0 entered promiscuous mode
[  402.119591][ T7712] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.122054][ T7712] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.124804][ T7712] device bridge_slave_1 entered promiscuous mode
[  402.136128][ T7822] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.138206][ T7822] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.141015][ T7822] device bridge_slave_1 entered promiscuous mode
[  402.165153][ T7839] chnl_net:caif_netlink_parms(): no params data found
[  402.205058][ T7712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  402.209403][ T7712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  402.238891][ T7822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  402.263955][ T7822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  402.295399][ T7712] team0: Port device team_slave_0 added
[  402.298811][ T7712] team0: Port device team_slave_1 added
[  402.367595][ T7822] team0: Port device team_slave_0 added
[  402.369827][ T7712] batman_adv: batadv0: Adding interface: batadv_slave_0
[  402.373723][ T7712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  402.380586][ T7712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  402.391922][ T7839] bridge0: port 1(bridge_slave_0) entered blocking state
[  402.393921][ T7839] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.396919][ T7839] device bridge_slave_0 entered promiscuous mode
[  402.417842][ T7822] team0: Port device team_slave_1 added
[  402.436336][ T7712] batman_adv: batadv0: Adding interface: batadv_slave_1
[  402.438399][ T7712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  402.451314][ T7712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  402.492236][ T7839] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.494263][ T7839] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.497029][ T7839] device bridge_slave_1 entered promiscuous mode
[  402.512285][ T7822] batman_adv: batadv0: Adding interface: batadv_slave_0
[  402.514351][ T7822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  402.531272][ T7822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  402.555554][ T7822] batman_adv: batadv0: Adding interface: batadv_slave_1
[  402.557469][ T7822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  402.570749][ T7822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  402.601849][ T7839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  402.653027][ T7712] device hsr_slave_0 entered promiscuous mode
[  402.702352][ T7712] device hsr_slave_1 entered promiscuous mode
[  402.741284][ T7712] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  402.743373][ T7712] Cannot create hsr debugfs directory
[  402.748757][ T7839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  402.815986][ T7839] team0: Port device team_slave_0 added
[  402.873118][ T7822] device hsr_slave_0 entered promiscuous mode
[  402.942426][ T7822] device hsr_slave_1 entered promiscuous mode
[  402.981597][ T7822] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  402.983758][ T7822] Cannot create hsr debugfs directory
[  402.987243][ T7839] team0: Port device team_slave_1 added
[  403.047675][ T7839] batman_adv: batadv0: Adding interface: batadv_slave_0
[  403.049568][ T7839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  403.072745][ T7839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  403.093045][ T7839] batman_adv: batadv0: Adding interface: batadv_slave_1
[  403.094963][ T7839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  403.103785][ T7839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  403.218138][ T7712] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.476947][ T7712] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.571851][ T7839] device hsr_slave_0 entered promiscuous mode
[  403.629621][ T7839] device hsr_slave_1 entered promiscuous mode
[  403.681185][ T7839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  403.683392][ T7839] Cannot create hsr debugfs directory
[  403.785356][ T7712] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.963148][ T7712] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.031274][ T4308] Bluetooth: hci7: command tx timeout
[  404.245351][ T7712] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  404.283259][ T7712] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  404.322956][ T7712] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  404.485626][ T7822] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.500664][ T7712] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  404.603816][ T7822] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.694168][ T7712] 8021q: adding VLAN 0 to HW filter on device bond0
[  404.756236][ T7822] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.760490][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  404.764033][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  404.769026][ T7712] 8021q: adding VLAN 0 to HW filter on device team0
[  404.785229][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  404.787963][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  404.802001][ T4431] bridge0: port 1(bridge_slave_0) entered blocking state
[  404.803951][ T4431] bridge0: port 1(bridge_slave_0) entered forwarding state
[  404.916790][ T7822] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.941321][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  404.943773][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  404.946411][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  404.948911][ T4431] bridge0: port 2(bridge_slave_1) entered blocking state
[  404.950725][ T4431] bridge0: port 2(bridge_slave_1) entered forwarding state
[  404.955238][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  404.958010][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  404.960827][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  404.966960][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  404.969837][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  404.974561][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  404.977321][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  404.979803][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  404.997429][ T7712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  405.000753][ T7712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  405.004164][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  405.006737][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  405.009809][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  405.061320][ T7625] bio_check_eod: 141069 callbacks suppressed
[  405.061336][ T7625] syz.2.748: attempt to access beyond end of device
[  405.061336][ T7625] loop2: rw=524288, sector=89464, nr_sectors = 8 limit=40427
[  405.066817][ T7625] syz.2.748: attempt to access beyond end of device
[  405.066817][ T7625] loop2: rw=524288, sector=89472, nr_sectors = 8 limit=40427
[  405.070681][ T7625] syz.2.748: attempt to access beyond end of device
[  405.070681][ T7625] loop2: rw=524288, sector=89480, nr_sectors = 8 limit=40427
[  405.074900][ T7625] syz.2.748: attempt to access beyond end of device
[  405.074900][ T7625] loop2: rw=524288, sector=89488, nr_sectors = 8 limit=40427
[  405.078701][ T7625] syz.2.748: attempt to access beyond end of device
[  405.078701][ T7625] loop2: rw=524288, sector=89496, nr_sectors = 8 limit=40427
[  405.090644][ T7625] syz.2.748: attempt to access beyond end of device
[  405.090644][ T7625] loop2: rw=524288, sector=89504, nr_sectors = 8 limit=40427
[  405.096100][ T7625] syz.2.748: attempt to access beyond end of device
[  405.096100][ T7625] loop2: rw=524288, sector=89512, nr_sectors = 8 limit=40427
[  405.100060][ T7625] syz.2.748: attempt to access beyond end of device
[  405.100060][ T7625] loop2: rw=524288, sector=89520, nr_sectors = 8 limit=40427
[  405.104621][ T7625] syz.2.748: attempt to access beyond end of device
[  405.104621][ T7625] loop2: rw=524288, sector=89528, nr_sectors = 8 limit=40427
[  405.108457][ T7625] syz.2.748: attempt to access beyond end of device
[  405.108457][ T7625] loop2: rw=524288, sector=89536, nr_sectors = 8 limit=40427
[  405.599058][ T7839] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.667510][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  405.669634][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  405.683235][ T7712] 8021q: adding VLAN 0 to HW filter on device batadv0
[  405.709257][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  405.716422][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  405.775691][ T7839] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.073237][ T7839] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.204493][ T6752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  406.207365][ T6752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  406.210339][ T6752] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  406.221895][ T6752] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  406.224757][ T7712] device veth0_vlan entered promiscuous mode
[  406.232172][ T7712] device veth1_vlan entered promiscuous mode
[  406.284005][ T7839] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.437229][ T7712] device veth0_macvtap entered promiscuous mode
[  406.452290][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  406.454899][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  406.457602][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  406.460352][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  406.475890][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  406.479405][ T7712] device veth1_macvtap entered promiscuous mode
[  406.642510][ T7712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  406.645329][ T7712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  406.648038][ T7712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  406.650768][ T7712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  406.661817][ T7712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  406.664580][ T7712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  406.667298][ T7712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  406.670199][ T7712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  406.680708][ T7712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  406.683645][ T7712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  406.687809][ T7712] batman_adv: batadv0: Interface activated: batadv_slave_0
[  406.692291][ T6752] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  406.694806][ T6752] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  406.697433][ T6752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  406.836909][ T7712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  406.839684][ T7712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  406.851914][ T7712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  406.854601][ T7712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  406.857145][ T7712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  406.859982][ T7712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  406.871318][ T7712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  406.874192][ T7712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  406.876773][ T7712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  406.880915][ T7712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  406.894840][ T7712] batman_adv: batadv0: Interface activated: batadv_slave_1
[  407.014527][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  407.017347][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  407.022295][ T7712] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  407.024574][ T7712] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  407.026992][ T7712] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  407.029313][ T7712] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  407.251909][ T7839] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  407.434430][ T7839] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  407.473447][ T7839] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  407.654365][ T7839] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  407.870121][   T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  407.889426][   T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  407.924693][ T6752] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  408.250029][ T7822] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  408.314370][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  408.316781][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  408.322506][ T7839] 8021q: adding VLAN 0 to HW filter on device bond0
[  408.374207][ T7822] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  408.433292][ T7822] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  408.487360][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  408.498002][ T7839] 8021q: adding VLAN 0 to HW filter on device team0
[  408.564991][ T7865] loop4: detected capacity change from 0 to 256
[  408.626818][ T7865] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  408.670196][ T7865] exFAT-fs (loop4): hint_cluster is invalid (33)
[  408.672906][ T7865] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000020)
[  408.675197][ T7865] exFAT-fs (loop4): Filesystem has been set read-only
[  408.676973][ T7865] exFAT-fs (loop4): error, failed to bmap (inode : 000000009eccc417 iblock : 9, err : -5)
[  408.679825][ T7865] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000020)
[  408.683786][ T7865] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000020)
[  409.466086][ T7822] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  409.536531][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  409.539178][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  409.602241][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  409.605162][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  409.607833][ T1621] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.609928][ T1621] bridge0: port 1(bridge_slave_0) entered forwarding state
[  409.614834][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  409.621951][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  409.635081][ T1621] bridge0: port 2(bridge_slave_1) entered blocking state
[  409.637081][ T1621] bridge0: port 2(bridge_slave_1) entered forwarding state
[  409.639503][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  409.646955][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  410.001968][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  410.004723][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  410.009527][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  410.020769][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  410.025876][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  410.047089][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  410.054158][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  410.062658][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  410.068676][ T7839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  410.072655][ T7625] bio_check_eod: 127389 callbacks suppressed
[  410.072669][ T7625] syz.2.748: attempt to access beyond end of device
[  410.072669][ T7625] loop2: rw=0, sector=87080, nr_sectors = 8 limit=40427
[  410.078436][ T7625] syz.2.748: attempt to access beyond end of device
[  410.078436][ T7625] loop2: rw=0, sector=87088, nr_sectors = 8 limit=40427
[  410.078704][ T7839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  410.082487][ T7625] syz.2.748: attempt to access beyond end of device
[  410.082487][ T7625] loop2: rw=0, sector=87096, nr_sectors = 8 limit=40427
[  410.088006][ T7625] syz.2.748: attempt to access beyond end of device
[  410.088006][ T7625] loop2: rw=0, sector=87104, nr_sectors = 8 limit=40427
[  410.097366][ T7625] syz.2.748: attempt to access beyond end of device
[  410.097366][ T7625] loop2: rw=0, sector=87112, nr_sectors = 8 limit=40427
[  410.101050][ T7625] syz.2.748: attempt to access beyond end of device
[  410.101050][ T7625] loop2: rw=0, sector=87120, nr_sectors = 8 limit=40427
[  410.104858][ T7625] syz.2.748: attempt to access beyond end of device
[  410.104858][ T7625] loop2: rw=0, sector=87128, nr_sectors = 8 limit=40427
[  410.108496][ T7625] syz.2.748: attempt to access beyond end of device
[  410.108496][ T7625] loop2: rw=0, sector=87136, nr_sectors = 8 limit=40427
[  410.112738][ T7625] syz.2.748: attempt to access beyond end of device
[  410.112738][ T7625] loop2: rw=0, sector=87144, nr_sectors = 8 limit=40427
[  410.117173][ T7625] syz.2.748: attempt to access beyond end of device
[  410.117173][ T7625] loop2: rw=0, sector=87152, nr_sectors = 8 limit=40427
[  410.124015][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  410.126866][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  410.550980][ T7822] 8021q: adding VLAN 0 to HW filter on device bond0
[  410.569059][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  410.571890][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  410.584627][ T7822] 8021q: adding VLAN 0 to HW filter on device team0
[  410.611497][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  410.614274][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  410.617045][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  410.618897][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  410.623982][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  410.670696][ T4404] device hsr_slave_0 left promiscuous mode
[  410.691726][ T4404] device hsr_slave_1 left promiscuous mode
[  410.771318][ T4404] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  410.773335][ T4404] batman_adv: batadv0: Removing interface: batadv_slave_0
[  410.775905][ T4404] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  410.777926][ T4404] batman_adv: batadv0: Removing interface: batadv_slave_1
[  410.789152][ T4404] device bridge_slave_1 left promiscuous mode
[  410.790828][ T4404] bridge0: port 2(bridge_slave_1) entered disabled state
[  410.842445][ T4404] device bridge_slave_0 left promiscuous mode
[  410.844261][ T4404] bridge0: port 1(bridge_slave_0) entered disabled state
[  410.895574][ T4404] device hsr_slave_0 left promiscuous mode
[  410.933219][ T4404] device hsr_slave_1 left promiscuous mode
[  411.011376][ T4404] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  411.013562][ T4404] batman_adv: batadv0: Removing interface: batadv_slave_0
[  411.016862][ T4404] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  411.018998][ T4404] batman_adv: batadv0: Removing interface: batadv_slave_1
[  411.030205][ T4404] device bridge_slave_1 left promiscuous mode
[  411.032964][ T4404] bridge0: port 2(bridge_slave_1) entered disabled state
[  411.083538][ T4404] device bridge_slave_0 left promiscuous mode
[  411.085311][ T4404] bridge0: port 1(bridge_slave_0) entered disabled state
[  411.289275][ T4404] device veth1_macvtap left promiscuous mode
[  411.290988][ T4404] device veth0_macvtap left promiscuous mode
[  411.293907][ T4404] device veth1_vlan left promiscuous mode
[  411.295496][ T4404] device veth0_vlan left promiscuous mode
[  411.381516][ T4404] device veth1_macvtap left promiscuous mode
[  411.383586][ T4404] device veth0_macvtap left promiscuous mode
[  411.385352][ T4404] device veth1_vlan left promiscuous mode
[  411.387129][ T4404] device veth0_vlan left promiscuous mode
[  414.182028][ T4404] team0 (unregistering): Port device team_slave_1 removed
[  414.424197][ T4404] team0 (unregistering): Port device team_slave_0 removed
[  414.693819][ T4404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  414.921995][ T4404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  415.081155][ T7625] bio_check_eod: 169291 callbacks suppressed
[  415.081173][ T7625] syz.2.748: attempt to access beyond end of device
[  415.081173][ T7625] loop2: rw=524288, sector=87992, nr_sectors = 8 limit=40427
[  415.086837][ T7625] syz.2.748: attempt to access beyond end of device
[  415.086837][ T7625] loop2: rw=524288, sector=88000, nr_sectors = 8 limit=40427
[  415.090750][ T7625] syz.2.748: attempt to access beyond end of device
[  415.090750][ T7625] loop2: rw=524288, sector=88008, nr_sectors = 8 limit=40427
[  415.094915][ T7625] syz.2.748: attempt to access beyond end of device
[  415.094915][ T7625] loop2: rw=524288, sector=88016, nr_sectors = 8 limit=40427
[  415.098661][ T7625] syz.2.748: attempt to access beyond end of device
[  415.098661][ T7625] loop2: rw=524288, sector=88024, nr_sectors = 8 limit=40427
[  415.102566][ T7625] syz.2.748: attempt to access beyond end of device
[  415.102566][ T7625] loop2: rw=524288, sector=88032, nr_sectors = 8 limit=40427
[  415.106326][ T7625] syz.2.748: attempt to access beyond end of device
[  415.106326][ T7625] loop2: rw=524288, sector=88040, nr_sectors = 8 limit=40427
[  415.110037][ T7625] syz.2.748: attempt to access beyond end of device
[  415.110037][ T7625] loop2: rw=524288, sector=88048, nr_sectors = 8 limit=40427
[  415.114033][ T7625] syz.2.748: attempt to access beyond end of device
[  415.114033][ T7625] loop2: rw=524288, sector=88056, nr_sectors = 8 limit=40427
[  415.117762][ T7625] syz.2.748: attempt to access beyond end of device
[  415.117762][ T7625] loop2: rw=524288, sector=88064, nr_sectors = 8 limit=40427
[  417.916635][ T4404] bond0 (unregistering): Released all slaves
[  420.091151][ T7625] bio_check_eod: 174909 callbacks suppressed
[  420.091168][ T7625] syz.2.748: attempt to access beyond end of device
[  420.091168][ T7625] loop2: rw=0, sector=89592, nr_sectors = 8 limit=40427
[  420.096419][ T7625] syz.2.748: attempt to access beyond end of device
[  420.096419][ T7625] loop2: rw=0, sector=89600, nr_sectors = 8 limit=40427
[  420.099894][ T7625] syz.2.748: attempt to access beyond end of device
[  420.099894][ T7625] loop2: rw=0, sector=89608, nr_sectors = 8 limit=40427
[  420.104662][ T7625] syz.2.748: attempt to access beyond end of device
[  420.104662][ T7625] loop2: rw=0, sector=89616, nr_sectors = 8 limit=40427
[  420.108151][ T7625] syz.2.748: attempt to access beyond end of device
[  420.108151][ T7625] loop2: rw=0, sector=89624, nr_sectors = 8 limit=40427
[  420.112063][ T7625] syz.2.748: attempt to access beyond end of device
[  420.112063][ T7625] loop2: rw=0, sector=89632, nr_sectors = 8 limit=40427
[  420.115564][ T7625] syz.2.748: attempt to access beyond end of device
[  420.115564][ T7625] loop2: rw=0, sector=89640, nr_sectors = 8 limit=40427
[  420.118869][ T7625] syz.2.748: attempt to access beyond end of device
[  420.118869][ T7625] loop2: rw=0, sector=89648, nr_sectors = 8 limit=40427
[  420.122456][ T7625] syz.2.748: attempt to access beyond end of device
[  420.122456][ T7625] loop2: rw=0, sector=89656, nr_sectors = 8 limit=40427
[  420.126046][ T7625] syz.2.748: attempt to access beyond end of device
[  420.126046][ T7625] loop2: rw=0, sector=89664, nr_sectors = 8 limit=40427
[  420.705859][ T4404] team0 (unregistering): Port device team_slave_1 removed
[  420.944482][ T4404] team0 (unregistering): Port device team_slave_0 removed
[  421.153116][ T4404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  421.612827][ T4404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  424.928003][ T4404] bond0 (unregistering): Released all slaves
[  425.101126][ T7625] bio_check_eod: 176221 callbacks suppressed
[  425.101143][ T7625] syz.2.748: attempt to access beyond end of device
[  425.101143][ T7625] loop2: rw=524288, sector=86936, nr_sectors = 8 limit=40427
[  425.107002][ T7625] syz.2.748: attempt to access beyond end of device
[  425.107002][ T7625] loop2: rw=524288, sector=86944, nr_sectors = 8 limit=40427
[  425.110658][ T7625] syz.2.748: attempt to access beyond end of device
[  425.110658][ T7625] loop2: rw=524288, sector=86952, nr_sectors = 8 limit=40427
[  425.115345][ T7625] syz.2.748: attempt to access beyond end of device
[  425.115345][ T7625] loop2: rw=524288, sector=86960, nr_sectors = 8 limit=40427
[  425.119004][ T7625] syz.2.748: attempt to access beyond end of device
[  425.119004][ T7625] loop2: rw=524288, sector=86968, nr_sectors = 8 limit=40427
[  425.122843][ T7625] syz.2.748: attempt to access beyond end of device
[  425.122843][ T7625] loop2: rw=524288, sector=86976, nr_sectors = 8 limit=40427
[  425.126435][ T7625] syz.2.748: attempt to access beyond end of device
[  425.126435][ T7625] loop2: rw=524288, sector=86984, nr_sectors = 8 limit=40427
[  425.130082][ T7625] syz.2.748: attempt to access beyond end of device
[  425.130082][ T7625] loop2: rw=524288, sector=86992, nr_sectors = 8 limit=40427
[  425.134159][ T7625] syz.2.748: attempt to access beyond end of device
[  425.134159][ T7625] loop2: rw=524288, sector=87000, nr_sectors = 8 limit=40427
[  425.137975][ T7625] syz.2.748: attempt to access beyond end of device
[  425.137975][ T7625] loop2: rw=524288, sector=87008, nr_sectors = 8 limit=40427
[  425.340222][ T7839] 8021q: adding VLAN 0 to HW filter on device batadv0
[  425.351483][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  425.354617][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  425.357214][ T4431] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.359234][ T4431] bridge0: port 2(bridge_slave_1) entered forwarding state
[  425.370857][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  425.374240][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  425.377304][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  425.379455][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  425.420984][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  425.424655][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  425.427466][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  425.430301][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  425.441761][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  425.453405][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  425.466725][ T7822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  425.470438][ T7822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  425.477215][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  425.479938][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  425.482925][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  425.518421][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  425.525541][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  425.548322][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  425.551052][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  425.559516][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  425.566548][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  425.569679][ T7839] device veth0_vlan entered promiscuous mode
[  425.584303][ T7839] device veth1_vlan entered promiscuous mode
[  425.597667][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  425.600479][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  425.605182][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  425.610795][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  425.626609][ T7839] device veth0_macvtap entered promiscuous mode
[  425.630833][ T7839] device veth1_macvtap entered promiscuous mode
[  425.650970][ T7839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  425.655067][ T7839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.657524][ T7839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  425.660178][ T7839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.671228][ T7839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  425.674120][ T7839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.676792][ T7839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  425.679441][ T7839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.693757][ T7839] batman_adv: batadv0: Interface activated: batadv_slave_0
[  425.696535][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  425.699177][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  425.728358][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  425.738895][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  425.745375][ T7839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  425.748233][ T7839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.750886][ T7839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  425.754504][ T7839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.756989][ T7839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  425.759655][ T7839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.763237][ T7839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  425.766119][ T7839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.770168][ T7839] batman_adv: batadv0: Interface activated: batadv_slave_1
[  425.775527][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  425.778390][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  425.786266][ T7839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  425.788623][ T7839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  425.790999][ T7839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  425.795260][ T7839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  425.799541][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  425.802639][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  425.813381][ T7822] 8021q: adding VLAN 0 to HW filter on device batadv0
[  425.885225][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  425.890799][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  425.929315][ T7822] device veth0_vlan entered promiscuous mode
[  425.934893][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  425.937766][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  425.950875][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  425.953929][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  425.967214][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  425.969651][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  425.979851][ T7822] device veth1_vlan entered promiscuous mode
[  425.992367][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  426.004554][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  426.007343][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  426.013717][ T1621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  426.016162][ T1621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  426.040554][ T7822] device veth0_macvtap entered promiscuous mode
[  426.044105][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  426.049559][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  426.055202][ T7822] device veth1_macvtap entered promiscuous mode
[  426.058816][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  426.064259][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  426.076540][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  426.089496][ T7822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  426.092862][ T7822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.095540][ T7822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  426.098272][ T7822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.101008][ T7822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  426.117224][ T7822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.119967][ T7822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  426.123244][ T7822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.125927][ T7822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  426.129256][ T7822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.171745][ T7822] batman_adv: batadv0: Interface activated: batadv_slave_0
[  426.177034][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  426.180488][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  426.192420][ T7822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  426.195376][ T7822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.197987][ T7822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  426.200754][ T7822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.233888][ T7882] loop4: detected capacity change from 0 to 512
[  426.235729][ T7822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  426.239325][ T7822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.243843][ T7822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  426.246698][ T7822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.249387][ T7822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  426.318019][ T7887] loop1: detected capacity change from 0 to 256
[  426.341229][ T7822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.345129][ T7822] batman_adv: batadv0: Interface activated: batadv_slave_1
[  426.369478][ T7822] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  426.382477][ T7822] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  426.384823][ T7822] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  426.387137][ T7822] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  426.442163][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  426.445056][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  427.460252][ T7897] loop3: detected capacity change from 0 to 256
[  428.175379][ T7762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  428.178330][ T7762] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  428.196626][ T7762] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  428.225356][ T1621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  428.227771][ T1621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  428.249765][  T132] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  428.428617][ T7905] loop4: detected capacity change from 0 to 8192
[  429.102633][ T7905] Dev loop4: unable to read RDB block 8
[  429.104350][ T7905]  loop4: unable to read partition table
[  429.106145][ T7905] loop_reread_partitions: partition scan of loop4 () failed (rc=-5)
[  429.681570][ T3912] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  429.684321][ T3912] Buffer I/O error on dev loop4, logical block 0, async page read
[  429.688798][ T3912] ldm_validate_partition_table(): Disk read failed.
[  429.704765][ T3912] Dev loop4: unable to read RDB block 0
[  429.711451][ T3912]  loop4: unable to read partition table
[  429.723992][ T3912] loop4: partition table beyond EOD, truncated
[  429.810061][ T7921] loop4: detected capacity change from 0 to 512
[  429.834903][ T7922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.793'.
[  429.994044][ T7921] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.803: inline data xattr refers to an external xattr inode
[  430.000690][ T7921] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.803: couldn't read orphan inode 12 (err -117)
[  430.255631][ T7625] bio_check_eod: 30675 callbacks suppressed
[  430.255747][ T7625] syz.2.748: attempt to access beyond end of device
[  430.255747][ T7625] loop2: rw=524288, sector=89008, nr_sectors = 8 limit=40427
[  430.305808][ T7921] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  430.791340][ T7625] syz.2.748: attempt to access beyond end of device
[  430.791340][ T7625] loop2: rw=524288, sector=89016, nr_sectors = 8 limit=40427
[  430.795140][ T7625] syz.2.748: attempt to access beyond end of device
[  430.795140][ T7625] loop2: rw=524288, sector=89024, nr_sectors = 8 limit=40427
[  430.798826][ T7625] syz.2.748: attempt to access beyond end of device
[  430.798826][ T7625] loop2: rw=524288, sector=89032, nr_sectors = 8 limit=40427
[  430.921507][ T7625] syz.2.748: attempt to access beyond end of device
[  430.921507][ T7625] loop2: rw=524288, sector=89040, nr_sectors = 8 limit=40427
[  430.951383][ T7625] syz.2.748: attempt to access beyond end of device
[  430.951383][ T7625] loop2: rw=524288, sector=89048, nr_sectors = 8 limit=40427
[  430.970083][ T7912] loop1: detected capacity change from 0 to 40427
[  431.031802][ T7625] syz.2.748: attempt to access beyond end of device
[  431.031802][ T7625] loop2: rw=524288, sector=89056, nr_sectors = 8 limit=40427
[  431.035682][ T7625] syz.2.748: attempt to access beyond end of device
[  431.035682][ T7625] loop2: rw=524288, sector=89064, nr_sectors = 8 limit=40427
[  431.039572][ T7625] syz.2.748: attempt to access beyond end of device
[  431.039572][ T7625] loop2: rw=524288, sector=89072, nr_sectors = 8 limit=40427
[  431.050248][ T7625] syz.2.748: attempt to access beyond end of device
[  431.050248][ T7625] loop2: rw=524288, sector=89080, nr_sectors = 8 limit=40427
[  431.152005][ T7936] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.803: Directory hole found for htree leaf block 0
[  431.487787][ T7912] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  431.489910][ T7912] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  432.201455][ T7270] EXT4-fs (loop4): unmounting filesystem.
[  432.819840][ T7912] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-4)
[  432.907250][ T7949] loop3: detected capacity change from 0 to 256
[  432.960804][ T7949] FAT-fs (loop3): Unrecognized mount option "sys_immutïúsi" or missing value
[  433.136264][ T7955] loop0: detected capacity change from 0 to 256
[  433.284088][ T2063] ieee802154 phy0 wpan0: encryption failed: -22
[  433.292216][ T2063] ieee802154 phy1 wpan1: encryption failed: -22
[  433.914425][ T7959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  433.971240][ T7959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  433.988962][ T7956] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  433.992548][ T7956] XFS (loop4): SB validate failed with error -5.
[  435.371891][ T7625] bio_check_eod: 3076 callbacks suppressed
[  435.371909][ T7625] syz.2.748: attempt to access beyond end of device
[  435.371909][ T7625] loop2: rw=0, sector=87880, nr_sectors = 8 limit=40427
[  435.377313][ T7625] syz.2.748: attempt to access beyond end of device
[  435.377313][ T7625] loop2: rw=0, sector=87888, nr_sectors = 8 limit=40427
[  435.380979][ T7625] syz.2.748: attempt to access beyond end of device
[  435.380979][ T7625] loop2: rw=0, sector=87896, nr_sectors = 8 limit=40427
[  436.173833][ T7625] syz.2.748: attempt to access beyond end of device
[  436.173833][ T7625] loop2: rw=0, sector=87904, nr_sectors = 8 limit=40427
[  436.177957][ T7625] syz.2.748: attempt to access beyond end of device
[  436.177957][ T7625] loop2: rw=0, sector=87912, nr_sectors = 8 limit=40427
[  436.190774][ T7625] syz.2.748: attempt to access beyond end of device
[  436.190774][ T7625] loop2: rw=0, sector=87920, nr_sectors = 8 limit=40427
[  436.196343][ T7625] syz.2.748: attempt to access beyond end of device
[  436.196343][ T7625] loop2: rw=0, sector=87928, nr_sectors = 8 limit=40427
[  436.200424][ T7625] syz.2.748: attempt to access beyond end of device
[  436.200424][ T7625] loop2: rw=0, sector=87936, nr_sectors = 8 limit=40427
[  436.204803][ T7625] syz.2.748: attempt to access beyond end of device
[  436.204803][ T7625] loop2: rw=0, sector=87944, nr_sectors = 8 limit=40427
[  436.208425][ T7625] syz.2.748: attempt to access beyond end of device
[  436.208425][ T7625] loop2: rw=0, sector=87952, nr_sectors = 8 limit=40427
[  436.292095][ T7989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.823'.
[  436.293004][ T7987] loop0: detected capacity change from 0 to 2048
[  436.362294][ T7987] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  436.690883][ T7994] loop4: detected capacity change from 0 to 2048
[  436.921978][ T7994] NILFS (loop4): invalid segment: Sequence number mismatch
[  436.924448][ T7994] NILFS (loop4): trying rollback from an earlier position
[  437.498581][ T7994] NILFS (loop4): recovery complete
[  437.532519][ T8000] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  439.679308][ T8014] loop3: detected capacity change from 0 to 512
[  439.687576][ T8014] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  439.690390][ T8014] EXT2-fs (loop3): error: couldn't mount RDWR because of unsupported optional features (1000000)
[  440.391437][ T7625] bio_check_eod: 4539 callbacks suppressed
[  440.391453][ T7625] syz.2.748: attempt to access beyond end of device
[  440.391453][ T7625] loop2: rw=0, sector=87392, nr_sectors = 8 limit=40427
[  440.403851][ T7625] syz.2.748: attempt to access beyond end of device
[  440.403851][ T7625] loop2: rw=0, sector=87400, nr_sectors = 8 limit=40427
[  440.431348][ T4319] Bluetooth: hci5: command 0x0406 tx timeout
[  440.433100][ T4319] Bluetooth: hci6: command 0x0406 tx timeout
[  440.436925][ T7625] syz.2.748: attempt to access beyond end of device
[  440.436925][ T7625] loop2: rw=0, sector=87408, nr_sectors = 8 limit=40427
[  440.473981][ T8024] loop4: detected capacity change from 0 to 128
[  440.496630][ T7625] syz.2.748: attempt to access beyond end of device
[  440.496630][ T7625] loop2: rw=0, sector=87416, nr_sectors = 8 limit=40427
[  440.500581][ T7625] syz.2.748: attempt to access beyond end of device
[  440.500581][ T7625] loop2: rw=0, sector=87424, nr_sectors = 8 limit=40427
[  440.504806][ T7625] syz.2.748: attempt to access beyond end of device
[  440.504806][ T7625] loop2: rw=0, sector=87432, nr_sectors = 8 limit=40427
[  440.508558][ T7625] syz.2.748: attempt to access beyond end of device
[  440.508558][ T7625] loop2: rw=0, sector=87440, nr_sectors = 8 limit=40427
[  440.512642][ T7625] syz.2.748: attempt to access beyond end of device
[  440.512642][ T7625] loop2: rw=0, sector=87448, nr_sectors = 8 limit=40427
[  440.516285][ T7625] syz.2.748: attempt to access beyond end of device
[  440.516285][ T7625] loop2: rw=0, sector=87456, nr_sectors = 8 limit=40427
[  440.519974][ T7625] syz.2.748: attempt to access beyond end of device
[  440.519974][ T7625] loop2: rw=0, sector=87464, nr_sectors = 8 limit=40427
[  440.681712][ T8024] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  441.659768][ T8024] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  442.281852][ T7270] EXT4-fs (loop4): unmounting filesystem.
[  443.540072][ T8049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  443.681608][ T8049] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  443.826918][ T8047] device vlan2 entered promiscuous mode
[  443.837633][ T8047] device team_slave_0 entered promiscuous mode
[  443.838372][ T8056] loop3: detected capacity change from 0 to 4096
[  443.839790][ T8047] device team_slave_1 entered promiscuous mode
[  443.854063][ T8062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  443.900023][ T8047] device team0 entered promiscuous mode
[  443.921565][ T8062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  443.934078][ T7895] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  443.981799][ T8047] bond0: (slave vlan2): Enslaving as an active interface with an up link
[  445.114211][ T8072] syz.3.843 (8072): attempted to duplicate a private mapping with mremap.  This is not supported.
[  445.441002][ T7625] bio_check_eod: 4646 callbacks suppressed
[  445.441022][ T7625] syz.2.748: attempt to access beyond end of device
[  445.441022][ T7625] loop2: rw=0, sector=87760, nr_sectors = 8 limit=40427
[  445.448827][ T7625] syz.2.748: attempt to access beyond end of device
[  445.448827][ T7625] loop2: rw=0, sector=87768, nr_sectors = 8 limit=40427
[  445.459125][ T7625] syz.2.748: attempt to access beyond end of device
[  445.459125][ T7625] loop2: rw=0, sector=87776, nr_sectors = 8 limit=40427
[  445.472224][ T7625] syz.2.748: attempt to access beyond end of device
[  445.472224][ T7625] loop2: rw=0, sector=87784, nr_sectors = 8 limit=40427
[  445.476008][ T7625] syz.2.748: attempt to access beyond end of device
[  445.476008][ T7625] loop2: rw=0, sector=87792, nr_sectors = 8 limit=40427
[  446.004562][ T8085] loop0: detected capacity change from 0 to 512
[  446.018791][ T8085] EXT2-fs (loop0): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  446.021623][ T8085] EXT2-fs (loop0): error: couldn't mount RDWR because of unsupported optional features (1000000)
[  446.061450][ T7625] syz.2.748: attempt to access beyond end of device
[  446.061450][ T7625] loop2: rw=0, sector=87800, nr_sectors = 8 limit=40427
[  446.065272][ T7625] syz.2.748: attempt to access beyond end of device
[  446.065272][ T7625] loop2: rw=0, sector=87808, nr_sectors = 8 limit=40427
[  446.095931][ T7625] syz.2.748: attempt to access beyond end of device
[  446.095931][ T7625] loop2: rw=0, sector=87816, nr_sectors = 8 limit=40427
[  446.147983][ T7625] syz.2.748: attempt to access beyond end of device
[  446.147983][ T7625] loop2: rw=0, sector=87824, nr_sectors = 8 limit=40427
[  446.176289][ T7625] syz.2.748: attempt to access beyond end of device
[  446.176289][ T7625] loop2: rw=0, sector=87832, nr_sectors = 8 limit=40427
[  446.934639][ T4318] Bluetooth: hci1: command tx timeout
[  447.061625][ T8091] loop3: detected capacity change from 0 to 256
[  447.063960][ T8091] FAT-fs (loop3): Unrecognized mount option "sys_immutïúsi" or missing value
[  447.929930][ T7895] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  447.977022][ T8104] loop4: detected capacity change from 0 to 2048
[  448.007370][ T8107] loop0: detected capacity change from 0 to 1024
[  448.009715][ T8107] hfsplus: unable to parse mount options
[  448.123056][ T8107] loop0: detected capacity change from 0 to 256
[  448.126140][ T8104] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  448.155917][ T8109] loop3: detected capacity change from 0 to 4096
[  448.158159][ T8109] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  448.232642][ T8109] ntfs: (device loop3): parse_options(): Invalid gid option argument: ÿÿÿÿ
[  448.350112][ T7895] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  448.364574][   T27] audit: type=1326 audit(448.320:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8105 comm="syz.2.854" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff82745e68 code=0x0
[  449.051408][ T7270] EXT4-fs (loop4): unmounting filesystem.
[  449.223414][ T8125] loop4: detected capacity change from 0 to 1024
[  449.323018][ T4431] hfsplus: b-tree write err: -5, ino 4
[  449.415299][ T8131] xt_NFQUEUE: number of total queues is 0
[  449.714831][ T8134] loop0: detected capacity change from 0 to 512
[  449.811296][ T8134] EXT2-fs (loop0): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  449.814159][ T8134] EXT2-fs (loop0): error: couldn't mount RDWR because of unsupported optional features (1000000)
[  451.018492][ T8144] loop0: detected capacity change from 0 to 8192
[  451.473088][ T7625] bio_check_eod: 15198 callbacks suppressed
[  451.473107][ T7625] syz.2.748: attempt to access beyond end of device
[  451.473107][ T7625] loop2: rw=524288, sector=87720, nr_sectors = 8 limit=40427
[  451.509216][ T7625] syz.2.748: attempt to access beyond end of device
[  451.509216][ T7625] loop2: rw=524288, sector=87728, nr_sectors = 8 limit=40427
[  451.535443][ T7625] syz.2.748: attempt to access beyond end of device
[  451.535443][ T7625] loop2: rw=524288, sector=87736, nr_sectors = 8 limit=40427
[  451.598918][ T8148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  451.613967][ T7625] syz.2.748: attempt to access beyond end of device
[  451.613967][ T7625] loop2: rw=524288, sector=87744, nr_sectors = 8 limit=40427
[  451.679131][ T7625] syz.2.748: attempt to access beyond end of device
[  451.679131][ T7625] loop2: rw=524288, sector=87752, nr_sectors = 8 limit=40427
[  451.724864][ T7625] syz.2.748: attempt to access beyond end of device
[  451.724864][ T7625] loop2: rw=524288, sector=87760, nr_sectors = 8 limit=40427
[  451.757911][ T7625] syz.2.748: attempt to access beyond end of device
[  451.757911][ T7625] loop2: rw=524288, sector=87768, nr_sectors = 8 limit=40427
[  451.810899][ T7625] syz.2.748: attempt to access beyond end of device
[  451.810899][ T7625] loop2: rw=524288, sector=87776, nr_sectors = 8 limit=40427
[  451.815331][ T7625] syz.2.748: attempt to access beyond end of device
[  451.815331][ T7625] loop2: rw=524288, sector=87784, nr_sectors = 8 limit=40427
[  451.815759][ T8144] Dev loop0: unable to read RDB block 8
[  451.819026][ T7625] syz.2.748: attempt to access beyond end of device
[  451.819026][ T7625] loop2: rw=524288, sector=87792, nr_sectors = 8 limit=40427
[  451.820577][ T8144]  loop0: unable to read partition table
[  451.825954][ T8144] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
[  451.853068][ T8148] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  452.017876][ T3912] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  452.020740][ T3912] Buffer I/O error on dev loop0, logical block 0, async page read
[  452.023562][ T3912] ldm_validate_partition_table(): Disk read failed.
[  452.029870][ T3912] Dev loop0: unable to read RDB block 0
[  452.042576][ T3912]  loop0: unable to read partition table
[  452.054233][ T3912] loop0: partition table beyond EOD, truncated
[  455.239285][ T8172] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  455.434445][ T8172] vhci_hcd: invalid port number 38
[  455.434741][ T8172] vhci_hcd: invalid port number 38
[  456.481162][ T7625] bio_check_eod: 8439 callbacks suppressed
[  456.481181][ T7625] syz.2.748: attempt to access beyond end of device
[  456.481181][ T7625] loop2: rw=524288, sector=88928, nr_sectors = 8 limit=40427
[  456.486393][ T7625] syz.2.748: attempt to access beyond end of device
[  456.486393][ T7625] loop2: rw=524288, sector=88936, nr_sectors = 8 limit=40427
[  456.490305][ T7625] syz.2.748: attempt to access beyond end of device
[  456.490305][ T7625] loop2: rw=524288, sector=88944, nr_sectors = 8 limit=40427
[  456.502050][ T7625] syz.2.748: attempt to access beyond end of device
[  456.502050][ T7625] loop2: rw=524288, sector=88952, nr_sectors = 8 limit=40427
[  456.520207][ T7625] syz.2.748: attempt to access beyond end of device
[  456.520207][ T7625] loop2: rw=524288, sector=88960, nr_sectors = 8 limit=40427
[  456.582838][ T7625] syz.2.748: attempt to access beyond end of device
[  456.582838][ T7625] loop2: rw=524288, sector=88968, nr_sectors = 8 limit=40427
[  456.586824][ T7625] syz.2.748: attempt to access beyond end of device
[  456.586824][ T7625] loop2: rw=524288, sector=88976, nr_sectors = 8 limit=40427
[  456.594936][ T7625] syz.2.748: attempt to access beyond end of device
[  456.594936][ T7625] loop2: rw=524288, sector=88984, nr_sectors = 8 limit=40427
[  456.598746][ T7625] syz.2.748: attempt to access beyond end of device
[  456.598746][ T7625] loop2: rw=524288, sector=88992, nr_sectors = 8 limit=40427
[  456.604759][ T7625] syz.2.748: attempt to access beyond end of device
[  456.604759][ T7625] loop2: rw=524288, sector=89000, nr_sectors = 8 limit=40427
[  456.799476][ T8197] loop3: detected capacity change from 0 to 512
[  457.546355][ T8197] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  457.549065][ T8197] EXT2-fs (loop3): error: couldn't mount RDWR because of unsupported optional features (1000000)
[  457.882417][ T8204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  457.962617][ T8204] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  458.059726][ T4318] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  458.064613][ T4308] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  458.067656][ T4318] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  458.070467][ T4318] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  458.074345][ T4308] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  458.076621][ T4318] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  458.093665][ T8204] loop3: detected capacity change from 0 to 2048
[  458.190505][   T27] audit: type=1326 audit(458.140:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.2.879" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff82745e68 code=0x0
[  458.201926][ T8204] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  459.031403][ T8204] fs-verity: sha512 using implementation "sha512-arm64"
[  459.052395][ T8204] fs-verity (loop3, inode 13): fs-verity keyring is empty, rejecting signed file!
[  459.297210][ T8227] loop0: detected capacity change from 0 to 1024
[  459.331079][ T8227] hfsplus: failed to load root directory
[  460.112966][ T4318] Bluetooth: hci0: command tx timeout
[  460.474751][ T8207] chnl_net:caif_netlink_parms(): no params data found
[  460.492298][ T7839] EXT4-fs (loop3): unmounting filesystem.
[  460.615315][ T8237] loop4: detected capacity change from 0 to 512
[  460.693978][ T8237] EXT2-fs (loop4): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  460.696811][ T8237] EXT2-fs (loop4): error: couldn't mount RDWR because of unsupported optional features (1000000)
[  461.016730][ T4404] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.330514][ T8242] loop3: detected capacity change from 0 to 2048
[  461.334797][ T8242] NILFS (loop3): invalid segment: Sequence number mismatch
[  461.336778][ T8242] NILFS (loop3): trying rollback from an earlier position
[  461.343372][ T8242] NILFS (loop3): recovery complete
[  461.348298][ T8245] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  461.396310][ T8241] loop4: detected capacity change from 0 to 1024
[  461.448750][ T8241] EXT4-fs (loop4): inodes count not valid: 67 vs 32
[  461.517451][ T7625] bio_check_eod: 18860 callbacks suppressed
[  461.517469][ T7625] syz.2.748: attempt to access beyond end of device
[  461.517469][ T7625] loop2: rw=0, sector=88680, nr_sectors = 8 limit=40427
[  461.535983][ T7625] syz.2.748: attempt to access beyond end of device
[  461.535983][ T7625] loop2: rw=0, sector=88688, nr_sectors = 8 limit=40427
[  461.552483][ T7625] syz.2.748: attempt to access beyond end of device
[  461.552483][ T7625] loop2: rw=0, sector=88696, nr_sectors = 8 limit=40427
[  461.567379][ T7625] syz.2.748: attempt to access beyond end of device
[  461.567379][ T7625] loop2: rw=0, sector=88704, nr_sectors = 8 limit=40427
[  461.572595][ T7625] syz.2.748: attempt to access beyond end of device
[  461.572595][ T7625] loop2: rw=0, sector=88712, nr_sectors = 8 limit=40427
[  461.576255][ T7625] syz.2.748: attempt to access beyond end of device
[  461.576255][ T7625] loop2: rw=0, sector=88720, nr_sectors = 8 limit=40427
[  461.579936][ T7625] syz.2.748: attempt to access beyond end of device
[  461.579936][ T7625] loop2: rw=0, sector=88728, nr_sectors = 8 limit=40427
[  461.583764][ T7625] syz.2.748: attempt to access beyond end of device
[  461.583764][ T7625] loop2: rw=0, sector=88736, nr_sectors = 8 limit=40427
[  461.587444][ T7625] syz.2.748: attempt to access beyond end of device
[  461.587444][ T7625] loop2: rw=0, sector=88744, nr_sectors = 8 limit=40427
[  461.591269][ T7625] syz.2.748: attempt to access beyond end of device
[  461.591269][ T7625] loop2: rw=0, sector=88752, nr_sectors = 8 limit=40427
[  461.603089][ T4404] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.271243][ T4318] Bluetooth: hci0: command tx timeout
[  462.574447][   T27] audit: type=1326 audit(462.530:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.4.890" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a145e68 code=0x0
[  462.599437][ T4404] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.629186][ T8207] bridge0: port 1(bridge_slave_0) entered blocking state
[  462.631533][ T8207] bridge0: port 1(bridge_slave_0) entered disabled state
[  462.634879][ T8207] device bridge_slave_0 entered promiscuous mode
[  462.638532][ T8207] bridge0: port 2(bridge_slave_1) entered blocking state
[  462.640414][ T8207] bridge0: port 2(bridge_slave_1) entered disabled state
[  462.643564][ T8207] device bridge_slave_1 entered promiscuous mode
[  462.659488][ T8253] binder_alloc: binder_alloc_mmap_handler: 8252 20ffb000-20ffd000 already mapped failed -16
[  462.667458][ T8207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  462.733161][ T4404] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.760795][ T8207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  462.863406][ T8207] team0: Port device team_slave_0 added
[  462.886809][ T8207] team0: Port device team_slave_1 added
[  462.969048][ T8207] batman_adv: batadv0: Adding interface: batadv_slave_0
[  462.977577][ T8207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  463.221846][ T8207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  463.740935][ T8207] batman_adv: batadv0: Adding interface: batadv_slave_1
[  463.779683][ T8207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  463.818652][ T8207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  464.033016][ T8277] loop4: detected capacity change from 0 to 64
[  464.351653][ T7716] Bluetooth: hci0: command tx timeout
[  464.793379][ T8207] device hsr_slave_0 entered promiscuous mode
[  464.838148][ T8207] device hsr_slave_1 entered promiscuous mode
[  465.526532][ T8287] loop3: detected capacity change from 0 to 512
[  465.683215][ T8287] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  465.685892][ T8287] EXT2-fs (loop3): error: couldn't mount RDWR because of unsupported optional features (1000000)
[  465.818724][ T8293] loop0: detected capacity change from 0 to 128
[  466.633328][ T7716] Bluetooth: hci0: command tx timeout
[  466.645446][ T7879] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  466.650528][ T8301] device ip6gretap1 entered promiscuous mode
[  466.681883][ T8293] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  466.700514][ T7625] bio_check_eod: 12834 callbacks suppressed
[  466.700529][ T7625] syz.2.748: attempt to access beyond end of device
[  466.700529][ T7625] loop2: rw=0, sector=88168, nr_sectors = 8 limit=40427
[  466.746849][ T7625] syz.2.748: attempt to access beyond end of device
[  466.746849][ T7625] loop2: rw=0, sector=88176, nr_sectors = 8 limit=40427
[  466.774781][ T8293] syz.0.897 (pid 8293) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  466.780679][ T8293] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce"
[  466.811524][ T7625] syz.2.748: attempt to access beyond end of device
[  466.811524][ T7625] loop2: rw=0, sector=88184, nr_sectors = 8 limit=40427
[  466.815326][ T7625] syz.2.748: attempt to access beyond end of device
[  466.815326][ T7625] loop2: rw=0, sector=88192, nr_sectors = 8 limit=40427
[  466.819078][ T7625] syz.2.748: attempt to access beyond end of device
[  466.819078][ T7625] loop2: rw=0, sector=88200, nr_sectors = 8 limit=40427
[  466.841210][ T7625] syz.2.748: attempt to access beyond end of device
[  466.841210][ T7625] loop2: rw=0, sector=88208, nr_sectors = 8 limit=40427
[  466.845100][ T7625] syz.2.748: attempt to access beyond end of device
[  466.845100][ T7625] loop2: rw=0, sector=88216, nr_sectors = 8 limit=40427
[  466.848777][ T7625] syz.2.748: attempt to access beyond end of device
[  466.848777][ T7625] loop2: rw=0, sector=88224, nr_sectors = 8 limit=40427
[  466.862057][ T8293] fscrypt: key with descriptor e8dab99234bb312e is too short (got 33 bytes, need 64+ bytes)
[  466.875450][ T7625] syz.2.748: attempt to access beyond end of device
[  466.875450][ T7625] loop2: rw=0, sector=88232, nr_sectors = 8 limit=40427
[  466.879173][ T7625] syz.2.748: attempt to access beyond end of device
[  466.879173][ T7625] loop2: rw=0, sector=88240, nr_sectors = 8 limit=40427
[  467.710750][   T27] audit: type=1326 audit(467.660:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.3.903" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a745e68 code=0x0
[  467.787537][ T8319] capability: warning: `syz.4.902' uses 32-bit capabilities (legacy support in use)
[  467.849628][ T8319] Bluetooth: (null): Too short H5 packet
[  468.694562][ T7822] EXT4-fs (loop0): unmounting filesystem.
[  468.809693][ T8336] loop4: detected capacity change from 0 to 1024
[  469.059630][ T8336] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  470.292759][ T4292] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  470.621944][ T4292] usb 1-1: Using ep0 maxpacket: 32
[  470.982967][ T4292] usb 1-1: New USB device found, idVendor=054c, idProduct=0025, bcdDevice= 1.00
[  470.985750][ T4292] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.988235][ T4292] usb 1-1: Product: syz
[  470.989332][ T4292] usb 1-1: Manufacturer: syz
[  470.992782][ T4292] usb 1-1: SerialNumber: syz
[  471.025423][ T4292] usb 1-1: config 0 descriptor??
[  471.038504][ T7270] EXT4-fs (loop4): unmounting filesystem.
[  471.138704][ T8365] loop4: detected capacity change from 0 to 8
[  471.762064][ T4292] usb 1-1: bad CDC descriptors
[  471.769052][ T7625] bio_check_eod: 9664 callbacks suppressed
[  471.769069][ T7625] syz.2.748: attempt to access beyond end of device
[  471.769069][ T7625] loop2: rw=524288, sector=88112, nr_sectors = 8 limit=40427
[  471.810402][ T7625] syz.2.748: attempt to access beyond end of device
[  471.810402][ T7625] loop2: rw=524288, sector=88120, nr_sectors = 8 limit=40427
[  471.851960][ T7625] syz.2.748: attempt to access beyond end of device
[  471.851960][ T7625] loop2: rw=524288, sector=88128, nr_sectors = 8 limit=40427
[  471.894747][ T7625] syz.2.748: attempt to access beyond end of device
[  471.894747][ T7625] loop2: rw=524288, sector=88136, nr_sectors = 8 limit=40427
[  472.067511][ T7625] syz.2.748: attempt to access beyond end of device
[  472.067511][ T7625] loop2: rw=524288, sector=88144, nr_sectors = 8 limit=40427
[  472.145494][ T7625] syz.2.748: attempt to access beyond end of device
[  472.145494][ T7625] loop2: rw=524288, sector=88152, nr_sectors = 8 limit=40427
[  472.194918][ T7625] syz.2.748: attempt to access beyond end of device
[  472.194918][ T7625] loop2: rw=524288, sector=88160, nr_sectors = 8 limit=40427
[  472.287885][ T7625] syz.2.748: attempt to access beyond end of device
[  472.287885][ T7625] loop2: rw=524288, sector=88168, nr_sectors = 8 limit=40427
[  472.341691][ T7625] syz.2.748: attempt to access beyond end of device
[  472.341691][ T7625] loop2: rw=524288, sector=88176, nr_sectors = 8 limit=40427
[  472.345669][ T7625] syz.2.748: attempt to access beyond end of device
[  472.345669][ T7625] loop2: rw=524288, sector=88184, nr_sectors = 8 limit=40427
[  472.479090][ T4292] usb 1-1: bad CDC descriptors
[  472.480867][ T4292] usb-storage 1-1:0.0: USB Mass Storage device detected
[  472.807445][ T4292] usb-storage 1-1:0.0: Quirks match for vid 054c pid 0025: 1
[  473.511471][ T4292] usb 1-1: USB disconnect, device number 2
[  473.535512][   T27] audit: type=1326 audit(473.490:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8387 comm="syz.0.914" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff91945e68 code=0x0
[  474.616249][ T8207] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  475.542564][ T8207] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  475.546342][ T7716] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  476.386175][ T8207] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  476.939819][ T7625] bio_check_eod: 4808 callbacks suppressed
[  476.940392][ T7625] syz.2.748: attempt to access beyond end of device
[  476.940392][ T7625] loop2: rw=0, sector=86088, nr_sectors = 8 limit=40427
[  477.203107][ T7625] syz.2.748: attempt to access beyond end of device
[  477.203107][ T7625] loop2: rw=0, sector=86096, nr_sectors = 8 limit=40427
[  477.206974][ T7625] syz.2.748: attempt to access beyond end of device
[  477.206974][ T7625] loop2: rw=0, sector=86104, nr_sectors = 8 limit=40427
[  477.210814][ T7625] syz.2.748: attempt to access beyond end of device
[  477.210814][ T7625] loop2: rw=0, sector=86112, nr_sectors = 8 limit=40427
[  477.214924][ T7625] syz.2.748: attempt to access beyond end of device
[  477.214924][ T7625] loop2: rw=0, sector=86120, nr_sectors = 8 limit=40427
[  477.218694][ T7625] syz.2.748: attempt to access beyond end of device
[  477.218694][ T7625] loop2: rw=0, sector=86128, nr_sectors = 8 limit=40427
[  477.222469][ T7625] syz.2.748: attempt to access beyond end of device
[  477.222469][ T7625] loop2: rw=0, sector=86136, nr_sectors = 8 limit=40427
[  477.226661][ T7625] syz.2.748: attempt to access beyond end of device
[  477.226661][ T7625] loop2: rw=0, sector=86144, nr_sectors = 8 limit=40427
[  477.230513][ T7625] syz.2.748: attempt to access beyond end of device
[  477.230513][ T7625] loop2: rw=0, sector=86152, nr_sectors = 8 limit=40427
[  477.241702][ T7625] syz.2.748: attempt to access beyond end of device
[  477.241702][ T7625] loop2: rw=0, sector=86160, nr_sectors = 8 limit=40427
[  477.337547][ T8422] loop4: detected capacity change from 0 to 512
[  477.404917][ T8422] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.921: bad orphan inode 15
[  477.408688][ T8422] ext4_test_bit(bit=14, block=5) = 0
[  477.410191][ T8422] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  477.988514][ T8439] loop3: detected capacity change from 0 to 512
[  479.000697][ T8439] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  479.003581][ T8439] EXT2-fs (loop3): error: couldn't mount RDWR because of unsupported optional features (1000000)
[  479.293512][ T7895] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  479.347233][ T8207] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  479.382844][ T7270] EXT4-fs (loop4): unmounting filesystem.
[  479.539361][ T8453] netlink: 'syz.4.925': attribute type 1 has an invalid length.
[  479.598493][ T8459] loop3: detected capacity change from 0 to 2048
[  479.610685][ T8462] kAFS: No cell specified
[  479.630668][ T8459] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  479.699359][ T8466] loop0: detected capacity change from 0 to 1024
[  479.779731][ T8207] 8021q: adding VLAN 0 to HW filter on device bond0
[  479.800207][ T8466] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  479.889969][ T4404] device hsr_slave_0 left promiscuous mode
[  480.051780][ T4404] device hsr_slave_1 left promiscuous mode
[  480.322114][ T4404] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  480.325634][ T4404] batman_adv: batadv0: Removing interface: batadv_slave_0
[  480.410813][ T4404] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  480.488870][ T4404] batman_adv: batadv0: Removing interface: batadv_slave_1
[  480.736087][ T4404] device bridge_slave_1 left promiscuous mode
[  480.737884][ T4404] bridge0: port 2(bridge_slave_1) entered disabled state
[  480.804897][ T4404] device bridge_slave_0 left promiscuous mode
[  480.806834][ T4404] bridge0: port 1(bridge_slave_0) entered disabled state
[  480.835747][ T7839] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh
[  480.838919][ T7839] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh
[  480.885275][ T8484] loop4: detected capacity change from 0 to 164
[  480.944927][ T8484] trusted_key: encrypted_key: keylen parameter is missing
[  481.001585][ T4404] device veth1_macvtap left promiscuous mode
[  481.003320][ T4404] device veth0_macvtap left promiscuous mode
[  481.005108][ T4404] device veth1_vlan left promiscuous mode
[  481.006993][ T4404] device veth0_vlan left promiscuous mode
[  481.948380][ T7625] bio_check_eod: 25591 callbacks suppressed
[  481.948424][ T7625] syz.2.748: attempt to access beyond end of device
[  481.948424][ T7625] loop2: rw=524288, sector=88056, nr_sectors = 8 limit=40427
[  481.958131][ T7625] syz.2.748: attempt to access beyond end of device
[  481.958131][ T7625] loop2: rw=524288, sector=88064, nr_sectors = 8 limit=40427
[  481.979406][ T7625] syz.2.748: attempt to access beyond end of device
[  481.979406][ T7625] loop2: rw=524288, sector=88072, nr_sectors = 8 limit=40427
[  481.993939][ T7625] syz.2.748: attempt to access beyond end of device
[  481.993939][ T7625] loop2: rw=524288, sector=88080, nr_sectors = 8 limit=40427
[  481.997624][ T7625] syz.2.748: attempt to access beyond end of device
[  481.997624][ T7625] loop2: rw=524288, sector=88088, nr_sectors = 8 limit=40427
[  482.014196][ T7625] syz.2.748: attempt to access beyond end of device
[  482.014196][ T7625] loop2: rw=524288, sector=88096, nr_sectors = 8 limit=40427
[  482.017908][ T7625] syz.2.748: attempt to access beyond end of device
[  482.017908][ T7625] loop2: rw=524288, sector=88104, nr_sectors = 8 limit=40427
[  482.057488][ T7625] syz.2.748: attempt to access beyond end of device
[  482.057488][ T7625] loop2: rw=524288, sector=88112, nr_sectors = 8 limit=40427
[  482.064005][ T7625] syz.2.748: attempt to access beyond end of device
[  482.064005][ T7625] loop2: rw=524288, sector=88120, nr_sectors = 8 limit=40427
[  482.067894][ T7625] syz.2.748: attempt to access beyond end of device
[  482.067894][ T7625] loop2: rw=524288, sector=88128, nr_sectors = 8 limit=40427
[  482.360742][ T8507] hub 6-0:1.0: USB hub found
[  482.364463][ T8507] hub 6-0:1.0: 8 ports detected
[  484.789613][ T8521] loop4: detected capacity change from 0 to 512
[  484.814701][ T8521] EXT2-fs (loop4): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  484.817291][ T8521] EXT2-fs (loop4): error: couldn't mount RDWR because of unsupported optional features (1000000)
[  484.856282][ T7895] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  485.406027][ T8528] loop4: detected capacity change from 0 to 24
[  486.983659][ T7625] bio_check_eod: 35366 callbacks suppressed
[  486.983783][ T7625] syz.2.748: attempt to access beyond end of device
[  486.983783][ T7625] loop2: rw=0, sector=87088, nr_sectors = 8 limit=40427
[  487.197032][ T7625] syz.2.748: attempt to access beyond end of device
[  487.197032][ T7625] loop2: rw=0, sector=87096, nr_sectors = 8 limit=40427
[  487.205297][ T7625] syz.2.748: attempt to access beyond end of device
[  487.205297][ T7625] loop2: rw=0, sector=87104, nr_sectors = 8 limit=40427
[  487.209026][ T7625] syz.2.748: attempt to access beyond end of device
[  487.209026][ T7625] loop2: rw=0, sector=87112, nr_sectors = 8 limit=40427
[  487.213308][ T7625] syz.2.748: attempt to access beyond end of device
[  487.213308][ T7625] loop2: rw=0, sector=87120, nr_sectors = 8 limit=40427
[  487.217296][ T7625] syz.2.748: attempt to access beyond end of device
[  487.217296][ T7625] loop2: rw=0, sector=87128, nr_sectors = 8 limit=40427
[  487.220594][ T7625] syz.2.748: attempt to access beyond end of device
[  487.220594][ T7625] loop2: rw=0, sector=87136, nr_sectors = 8 limit=40427
[  487.225266][ T7625] syz.2.748: attempt to access beyond end of device
[  487.225266][ T7625] loop2: rw=0, sector=87144, nr_sectors = 8 limit=40427
[  487.228877][ T7625] syz.2.748: attempt to access beyond end of device
[  487.228877][ T7625] loop2: rw=0, sector=87152, nr_sectors = 8 limit=40427
[  487.243432][ T7625] syz.2.748: attempt to access beyond end of device
[  487.243432][ T7625] loop2: rw=0, sector=87160, nr_sectors = 8 limit=40427
[  487.336576][ T4404] team0 (unregistering): Port device team_slave_1 removed
[  488.130694][ T8539] loop4: detected capacity change from 0 to 512
[  488.136372][ T8539] EXT2-fs (loop4): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  488.139033][ T8539] EXT2-fs (loop4): error: couldn't mount RDWR because of unsupported optional features (1000000)
[  488.142763][ T4404] team0 (unregistering): Port device team_slave_0 removed
[  488.172795][ T7895] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  488.384116][ T4404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  488.996302][ T4404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  490.589125][ T8558] fuse: Bad value for 'user_id'
[  490.625333][ T7716] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  490.629889][ T7716] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  490.634332][ T7716] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  490.637162][ T7716] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  490.648363][ T7716] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  490.650578][ T7716] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  491.778438][ T4318] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  491.793095][ T4318] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  491.796040][ T4318] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  491.800648][ T4318] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  491.805304][ T4318] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  491.807599][ T4318] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  491.991184][ T7625] bio_check_eod: 73922 callbacks suppressed
[  491.991200][ T7625] syz.2.748: attempt to access beyond end of device
[  491.991200][ T7625] loop2: rw=0, sector=88464, nr_sectors = 8 limit=40427
[  491.996664][ T7625] syz.2.748: attempt to access beyond end of device
[  491.996664][ T7625] loop2: rw=0, sector=88472, nr_sectors = 8 limit=40427
[  492.000202][ T7625] syz.2.748: attempt to access beyond end of device
[  492.000202][ T7625] loop2: rw=0, sector=88480, nr_sectors = 8 limit=40427
[  492.003927][ T7625] syz.2.748: attempt to access beyond end of device
[  492.003927][ T7625] loop2: rw=0, sector=88488, nr_sectors = 8 limit=40427
[  492.007505][ T7625] syz.2.748: attempt to access beyond end of device
[  492.007505][ T7625] loop2: rw=0, sector=88496, nr_sectors = 8 limit=40427
[  492.011292][ T7625] syz.2.748: attempt to access beyond end of device
[  492.011292][ T7625] loop2: rw=0, sector=88504, nr_sectors = 8 limit=40427
[  492.015059][ T7625] syz.2.748: attempt to access beyond end of device
[  492.015059][ T7625] loop2: rw=0, sector=88512, nr_sectors = 8 limit=40427
[  492.019005][ T7625] syz.2.748: attempt to access beyond end of device
[  492.019005][ T7625] loop2: rw=0, sector=88520, nr_sectors = 8 limit=40427
[  492.023758][ T7625] syz.2.748: attempt to access beyond end of device
[  492.023758][ T7625] loop2: rw=0, sector=88528, nr_sectors = 8 limit=40427
[  492.027333][ T7625] syz.2.748: attempt to access beyond end of device
[  492.027333][ T7625] loop2: rw=0, sector=88536, nr_sectors = 8 limit=40427
[  492.671450][ T7716] Bluetooth: hci2: command tx timeout
[  493.143811][ T4404] bond0 (unregistering): Released all slaves
[  493.553400][ T8207] 8021q: adding VLAN 0 to HW filter on device team0
[  493.562622][ T7762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  493.565444][ T7762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  493.610508][ T8466] EXT4-fs (loop0): unmounting filesystem.
[  493.745447][ T6752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  493.748930][ T6752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  493.761776][ T6752] bridge0: port 1(bridge_slave_0) entered blocking state
[  493.763732][ T6752] bridge0: port 1(bridge_slave_0) entered forwarding state
[  493.766146][ T6752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  493.789957][  T132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  493.804997][  T132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  493.812765][  T132] bridge0: port 2(bridge_slave_1) entered blocking state
[  493.814920][  T132] bridge0: port 2(bridge_slave_1) entered forwarding state
[  493.871257][ T7716] Bluetooth: hci6: command tx timeout
[  493.895148][ T8567] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  493.897205][ T8567] vhci_hcd: invalid port number 38
[  493.898664][ T8567] vhci_hcd: invalid port number 38
[  493.932809][ T6752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  493.955580][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  493.998627][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  494.004478][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  494.007335][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  494.010081][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  494.021854][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  494.128871][ T8207] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  494.133420][ T8207] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  494.143618][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  494.146411][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  494.149484][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  494.155756][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  494.218916][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  494.247509][ T8559] chnl_net:caif_netlink_parms(): no params data found
[  494.354263][ T8559] bridge0: port 1(bridge_slave_0) entered blocking state
[  494.359909][ T8559] bridge0: port 1(bridge_slave_0) entered disabled state
[  494.363665][ T8559] device bridge_slave_0 entered promiscuous mode
[  494.366741][ T8563] chnl_net:caif_netlink_parms(): no params data found
[  494.380455][ T8559] bridge0: port 2(bridge_slave_1) entered blocking state
[  494.382995][ T8559] bridge0: port 2(bridge_slave_1) entered disabled state
[  494.388445][ T8559] device bridge_slave_1 entered promiscuous mode
[  494.491861][ T8559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  494.498296][ T8563] bridge0: port 1(bridge_slave_0) entered blocking state
[  494.500529][ T8563] bridge0: port 1(bridge_slave_0) entered disabled state
[  494.507297][ T8563] device bridge_slave_0 entered promiscuous mode
[  494.519709][ T8559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  494.569093][ T8559] team0: Port device team_slave_0 added
[  494.582697][ T8563] bridge0: port 2(bridge_slave_1) entered blocking state
[  494.584804][ T8563] bridge0: port 2(bridge_slave_1) entered disabled state
[  494.592872][ T2063] ieee802154 phy0 wpan0: encryption failed: -22
[  494.594512][ T2063] ieee802154 phy1 wpan1: encryption failed: -22
[  494.619465][ T8563] device bridge_slave_1 entered promiscuous mode
[  494.630654][ T8207] 8021q: adding VLAN 0 to HW filter on device batadv0
[  494.664319][ T6752] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  494.666643][ T6752] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  494.669669][ T8559] team0: Port device team_slave_1 added
[  494.709299][ T8559] batman_adv: batadv0: Adding interface: batadv_slave_0
[  494.711461][ T8559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  494.718559][ T8559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  494.732721][ T8559] batman_adv: batadv0: Adding interface: batadv_slave_1
[  494.734557][ T8559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  494.750315][ T8559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  494.753828][ T7716] Bluetooth: hci2: command tx timeout
[  494.860408][ T6752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  494.865813][ T6752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  494.879676][ T8563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  494.928520][ T8563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  494.983770][ T6752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  494.987256][ T6752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  494.992790][ T6752] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  494.996724][ T6752] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  495.029345][ T8589] loop4: detected capacity change from 0 to 512
[  495.063152][ T8559] device hsr_slave_0 entered promiscuous mode
[  495.067840][ T8589] EXT4-fs (loop4): orphan cleanup on readonly fs
[  495.081551][ T8559] device hsr_slave_1 entered promiscuous mode
[  495.107022][ T8589] EXT4-fs (loop4): 1 orphan inode deleted
[  495.128761][ T8559] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  495.131049][ T8559] Cannot create hsr debugfs directory
[  495.171320][ T8589] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  495.180714][ T8563] team0: Port device team_slave_0 added
[  495.195971][ T8207] device veth0_vlan entered promiscuous mode
[  495.226191][ T8563] team0: Port device team_slave_1 added
[  495.229514][ T8207] device veth1_vlan entered promiscuous mode
[  495.271338][ T7270] EXT4-fs (loop4): unmounting filesystem.
[  495.349555][ T8563] batman_adv: batadv0: Adding interface: batadv_slave_0
[  495.352297][ T8563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  495.359549][ T8563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  495.388006][ T8596] loop4: detected capacity change from 0 to 256
[  495.419585][ T8596] FAT-fs (loop4): Directory bread(block 1285) failed
[  495.433088][ T8563] batman_adv: batadv0: Adding interface: batadv_slave_1
[  495.434972][ T8563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  495.442521][ T8563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  495.493497][ T8596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  495.531520][ T8596] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  495.552318][ T8207] device veth0_macvtap entered promiscuous mode
[  495.558086][  T132] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  495.560846][  T132] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  495.603775][  T132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  495.606637][  T132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  495.609605][  T132] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  495.971471][ T4318] Bluetooth: hci6: command tx timeout
[  496.287688][ T8563] device hsr_slave_0 entered promiscuous mode
[  496.443338][ T8563] device hsr_slave_1 entered promiscuous mode
[  496.481933][ T8563] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  496.484186][ T8563] Cannot create hsr debugfs directory
[  496.487794][ T8207] device veth1_macvtap entered promiscuous mode
[  496.494064][ T7762] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  496.832799][ T4318] Bluetooth: hci2: command tx timeout
[  497.061865][ T8559] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.397530][ T7625] bio_check_eod: 90501 callbacks suppressed
[  497.397547][ T7625] syz.2.748: attempt to access beyond end of device
[  497.397547][ T7625] loop2: rw=524288, sector=86016, nr_sectors = 8 limit=40427
[  497.428326][ T7625] syz.2.748: attempt to access beyond end of device
[  497.428326][ T7625] loop2: rw=524288, sector=86024, nr_sectors = 8 limit=40427
[  497.493816][ T7625] syz.2.748: attempt to access beyond end of device
[  497.493816][ T7625] loop2: rw=524288, sector=86032, nr_sectors = 8 limit=40427
[  497.497877][ T7625] syz.2.748: attempt to access beyond end of device
[  497.497877][ T7625] loop2: rw=524288, sector=86040, nr_sectors = 8 limit=40427
[  497.502554][ T7625] syz.2.748: attempt to access beyond end of device
[  497.502554][ T7625] loop2: rw=524288, sector=86048, nr_sectors = 8 limit=40427
[  497.506696][ T7625] syz.2.748: attempt to access beyond end of device
[  497.506696][ T7625] loop2: rw=524288, sector=86056, nr_sectors = 8 limit=40427
[  497.510542][ T7625] syz.2.748: attempt to access beyond end of device
[  497.510542][ T7625] loop2: rw=524288, sector=86064, nr_sectors = 8 limit=40427
[  497.514705][ T7625] syz.2.748: attempt to access beyond end of device
[  497.514705][ T7625] loop2: rw=524288, sector=86072, nr_sectors = 8 limit=40427
[  497.518441][ T7625] syz.2.748: attempt to access beyond end of device
[  497.518441][ T7625] loop2: rw=524288, sector=86080, nr_sectors = 8 limit=40427
[  497.529289][ T7625] syz.2.748: attempt to access beyond end of device
[  497.529289][ T7625] loop2: rw=524288, sector=86088, nr_sectors = 8 limit=40427
[  497.543747][ T8559] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.568784][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  497.572625][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  497.575264][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  497.578203][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  497.580932][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  497.607324][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  497.610160][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  497.626669][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  497.629331][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  497.641268][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  497.645724][ T8207] batman_adv: batadv0: Interface activated: batadv_slave_0
[  497.650586][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  497.663686][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  497.774958][ T8559] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.780708][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  497.784290][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  497.787056][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  497.789876][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  497.804332][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  497.807071][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  497.831179][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  497.834149][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  497.836926][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  497.839770][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  497.852684][ T8207] batman_adv: batadv0: Interface activated: batadv_slave_1
[  497.855239][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  497.858148][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  497.901644][ T8207] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  497.904045][ T8207] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  497.906382][ T8207] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  497.908815][ T8207] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  497.949039][ T8608] loop4: detected capacity change from 0 to 32768
[  497.970564][ T8608] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.957 (8608)
[  498.014480][ T8608] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  498.016823][ T8559] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.017395][ T8608] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm
[  498.023708][ T8608] BTRFS info (device loop4): allowing degraded mounts
[  498.025599][ T8608] BTRFS info (device loop4): force zlib compression, level 3
[  498.031317][ T4318] Bluetooth: hci6: command tx timeout
[  498.031990][ T8608] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  498.053102][ T8608] BTRFS info (device loop4): use lzo compression, level 0
[  498.055323][ T8608] BTRFS info (device loop4): turning on flush-on-commit
[  498.057354][ T8608] BTRFS info (device loop4): enabling auto defrag
[  498.059115][ T8608] BTRFS info (device loop4): using free space tree
[  498.170128][  T132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  498.188923][  T132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  498.210968][ T7762] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  498.262277][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  498.264704][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  498.274008][ T7762] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  498.374114][ T8608] BTRFS info (device loop4): enabling ssd optimizations
[  498.712761][ T8632] loop1: detected capacity change from 0 to 512
[  498.723562][ T8632] EXT2-fs (loop1): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  498.726383][ T8632] EXT2-fs (loop1): error: couldn't mount RDWR because of unsupported optional features (1000000)
[  498.911703][ T7716] Bluetooth: hci2: command tx timeout
[  500.215028][ T4318] Bluetooth: hci6: command tx timeout
[  501.240431][ T4292] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  501.275616][ T7270] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  501.656385][ T4404] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  501.803798][ T4404] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  501.832184][ T8559] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  501.874902][ T8559] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  501.913083][ T8559] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  502.067432][ T4404] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.076786][ T8559] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  502.213635][ T4404] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.359568][ T8559] 8021q: adding VLAN 0 to HW filter on device bond0
[  502.400074][ T8643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  502.403993][ T8643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  502.410369][ T7625] bio_check_eod: 29462 callbacks suppressed
[  502.410384][ T7625] syz.2.748: attempt to access beyond end of device
[  502.410384][ T7625] loop2: rw=0, sector=89448, nr_sectors = 8 limit=40427
[  502.428801][ T8559] 8021q: adding VLAN 0 to HW filter on device team0
[  502.444342][ T7625] syz.2.748: attempt to access beyond end of device
[  502.444342][ T7625] loop2: rw=0, sector=89456, nr_sectors = 8 limit=40427
[  502.468799][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  502.472546][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  502.475306][ T4562] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.477373][ T4562] bridge0: port 1(bridge_slave_0) entered forwarding state
[  502.485973][ T7625] syz.2.748: attempt to access beyond end of device
[  502.485973][ T7625] loop2: rw=0, sector=89464, nr_sectors = 8 limit=40427
[  502.532242][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  502.554438][ T7625] syz.2.748: attempt to access beyond end of device
[  502.554438][ T7625] loop2: rw=0, sector=89472, nr_sectors = 8 limit=40427
[  502.559988][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  502.568148][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  502.576831][ T4562] bridge0: port 2(bridge_slave_1) entered blocking state
[  502.578878][ T4562] bridge0: port 2(bridge_slave_1) entered forwarding state
[  502.584474][ T7625] syz.2.748: attempt to access beyond end of device
[  502.584474][ T7625] loop2: rw=0, sector=89480, nr_sectors = 8 limit=40427
[  502.592038][ T7716] Bluetooth: hci4: command 0x0406 tx timeout
[  502.599500][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  502.608779][ T7625] syz.2.748: attempt to access beyond end of device
[  502.608779][ T7625] loop2: rw=0, sector=89488, nr_sectors = 8 limit=40427
[  502.616070][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  502.695718][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  502.716039][ T7625] syz.2.748: attempt to access beyond end of device
[  502.716039][ T7625] loop2: rw=0, sector=89496, nr_sectors = 8 limit=40427
[  502.719728][ T7625] syz.2.748: attempt to access beyond end of device
[  502.719728][ T7625] loop2: rw=0, sector=89504, nr_sectors = 8 limit=40427
[  502.724253][ T7625] syz.2.748: attempt to access beyond end of device
[  502.724253][ T7625] loop2: rw=0, sector=89512, nr_sectors = 8 limit=40427
[  502.727965][ T7625] syz.2.748: attempt to access beyond end of device
[  502.727965][ T7625] loop2: rw=0, sector=89520, nr_sectors = 8 limit=40427
[  502.731624][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  502.735100][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  502.756272][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  502.776149][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  502.792296][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  502.863280][ T8671] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  502.914984][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  502.957078][ T8559] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  502.960857][ T8559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  502.985110][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  502.993125][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  504.052311][ T8690] loop1: detected capacity change from 0 to 24
[  504.700352][ T8692] loop4: detected capacity change from 0 to 256
[  506.196718][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.973'.
[  506.199429][ T8708] (unnamed net_device) (uninitialized): option lacp_active: invalid value (139)
[  506.254420][ T8559] 8021q: adding VLAN 0 to HW filter on device batadv0
[  506.461628][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  506.463905][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  507.412675][ T7625] bio_check_eod: 14221 callbacks suppressed
[  507.412690][ T7625] syz.2.748: attempt to access beyond end of device
[  507.412690][ T7625] loop2: rw=524288, sector=88968, nr_sectors = 8 limit=40427
[  507.418317][ T7625] syz.2.748: attempt to access beyond end of device
[  507.418317][ T7625] loop2: rw=524288, sector=88976, nr_sectors = 8 limit=40427
[  507.423023][ T7625] syz.2.748: attempt to access beyond end of device
[  507.423023][ T7625] loop2: rw=524288, sector=88984, nr_sectors = 8 limit=40427
[  507.426830][ T7625] syz.2.748: attempt to access beyond end of device
[  507.426830][ T7625] loop2: rw=524288, sector=88992, nr_sectors = 8 limit=40427
[  507.441289][ T7625] syz.2.748: attempt to access beyond end of device
[  507.441289][ T7625] loop2: rw=524288, sector=89000, nr_sectors = 8 limit=40427
[  507.445156][ T7625] syz.2.748: attempt to access beyond end of device
[  507.445156][ T7625] loop2: rw=524288, sector=89008, nr_sectors = 8 limit=40427
[  507.448908][ T7625] syz.2.748: attempt to access beyond end of device
[  507.448908][ T7625] loop2: rw=524288, sector=89016, nr_sectors = 8 limit=40427
[  507.465744][ T7625] syz.2.748: attempt to access beyond end of device
[  507.465744][ T7625] loop2: rw=524288, sector=89024, nr_sectors = 8 limit=40427
[  507.469777][ T7625] syz.2.748: attempt to access beyond end of device
[  507.469777][ T7625] loop2: rw=524288, sector=89032, nr_sectors = 8 limit=40427
[  507.478558][ T7625] syz.2.748: attempt to access beyond end of device
[  507.478558][ T7625] loop2: rw=524288, sector=89040, nr_sectors = 8 limit=40427
[  507.875451][ T8746] loop4: detected capacity change from 0 to 512
[  508.720710][ T8746] EXT2-fs (loop4): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  508.723564][ T8746] EXT2-fs (loop4): error: couldn't mount RDWR because of unsupported optional features (1000000)
[  508.793837][ T7895] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  508.877334][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  508.895202][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  508.967231][ T8559] device veth0_vlan entered promiscuous mode
[  508.974456][ T8559] device veth1_vlan entered promiscuous mode
[  508.977885][ T8643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  508.980707][ T8643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  509.001407][ T8643] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  509.024151][ T8750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  509.174074][ T8750] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  509.976376][ T8643] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  509.979059][ T8643] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  509.983416][ T8643] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  510.135299][ T8559] device veth0_macvtap entered promiscuous mode
[  510.139720][ T8559] device veth1_macvtap entered promiscuous mode
[  510.160344][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  510.163464][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  510.166174][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  510.330730][ T8559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  510.334122][ T8559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.337001][ T8559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  510.339897][ T8559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.343499][ T8559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  510.346272][ T8559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.349054][ T8559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  510.361384][ T8559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.364122][ T8559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  510.366902][ T8559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.369586][ T8559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  510.389137][ T8559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.398794][ T8559] batman_adv: batadv0: Interface activated: batadv_slave_0
[  510.434003][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  510.436821][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  510.439589][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  510.586552][ T8559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  510.589573][ T8559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.602050][ T8559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  510.604914][ T8559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.607527][ T8559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  510.621237][ T8559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.623922][ T8559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  510.626574][ T8559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.629172][ T8559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  510.641185][ T8559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.643817][ T8559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  510.646632][ T8559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.661333][ T8559] batman_adv: batadv0: Interface activated: batadv_slave_1
[  510.669456][ T7762] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  510.674487][ T7762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  510.815043][ T8559] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  510.817520][ T8559] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  510.819993][ T8559] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  510.831312][ T8559] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  511.003645][ T8563] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  511.064826][ T8563] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  511.103171][ T8563] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  511.555494][ T8563] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  511.687294][  T132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  511.689790][  T132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  511.697630][  T132] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  512.040647][ T7762] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  512.051922][ T7762] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  512.062388][  T132] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  512.120482][ T8563] 8021q: adding VLAN 0 to HW filter on device bond0
[  512.429755][ T7625] bio_check_eod: 56982 callbacks suppressed
[  512.429774][ T7625] syz.2.748: attempt to access beyond end of device
[  512.429774][ T7625] loop2: rw=524288, sector=87592, nr_sectors = 8 limit=40427
[  512.475562][ T7625] syz.2.748: attempt to access beyond end of device
[  512.475562][ T7625] loop2: rw=524288, sector=87600, nr_sectors = 8 limit=40427
[  512.754221][ T7625] syz.2.748: attempt to access beyond end of device
[  512.754221][ T7625] loop2: rw=524288, sector=87608, nr_sectors = 8 limit=40427
[  512.958356][ T7625] syz.2.748: attempt to access beyond end of device
[  512.958356][ T7625] loop2: rw=524288, sector=87616, nr_sectors = 8 limit=40427
[  513.050923][ T7625] syz.2.748: attempt to access beyond end of device
[  513.050923][ T7625] loop2: rw=524288, sector=87624, nr_sectors = 8 limit=40427
[  513.068363][ T7625] syz.2.748: attempt to access beyond end of device
[  513.068363][ T7625] loop2: rw=524288, sector=87632, nr_sectors = 8 limit=40427
[  513.090970][ T7625] syz.2.748: attempt to access beyond end of device
[  513.090970][ T7625] loop2: rw=524288, sector=87640, nr_sectors = 8 limit=40427
[  513.104542][ T7625] syz.2.748: attempt to access beyond end of device
[  513.104542][ T7625] loop2: rw=524288, sector=87648, nr_sectors = 8 limit=40427
[  513.115434][ T7625] syz.2.748: attempt to access beyond end of device
[  513.115434][ T7625] loop2: rw=524288, sector=87656, nr_sectors = 8 limit=40427
[  513.119716][ T7625] syz.2.748: attempt to access beyond end of device
[  513.119716][ T7625] loop2: rw=524288, sector=87664, nr_sectors = 8 limit=40427
[  513.341716][ T6752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  513.344178][ T6752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  513.347111][ T6752] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2
[  513.354225][ T8563] 8021q: adding VLAN 0 to HW filter on device team0
[  513.450086][ T8813] loop0: detected capacity change from 0 to 24
[  514.142060][ T7762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  514.151395][ T7762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  514.154927][ T7762] bridge0: port 1(bridge_slave_0) entered blocking state
[  514.156873][ T7762] bridge0: port 1(bridge_slave_0) entered forwarding state
[  514.174426][ T8816] loop4: detected capacity change from 0 to 256
[  514.185625][ T8816] FAT-fs (loop4): Directory bread(block 64) failed
[  514.187495][ T8816] FAT-fs (loop4): Directory bread(block 65) failed
[  514.189218][ T8816] FAT-fs (loop4): Directory bread(block 66) failed
[  514.191049][ T8816] FAT-fs (loop4): Directory bread(block 67) failed
[  514.194972][ T8816] FAT-fs (loop4): Directory bread(block 68) failed
[  514.196711][ T8816] FAT-fs (loop4): Directory bread(block 69) failed
[  514.198548][ T8816] FAT-fs (loop4): Directory bread(block 70) failed
[  514.200215][ T8816] FAT-fs (loop4): Directory bread(block 71) failed
[  514.202114][ T8816] FAT-fs (loop4): Directory bread(block 72) failed
[  514.202672][ T7762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  514.203813][ T8816] FAT-fs (loop4): Directory bread(block 73) failed
[  514.223337][ T7762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  514.229898][ T7762] bridge0: port 2(bridge_slave_1) entered blocking state
[  514.231940][ T7762] bridge0: port 2(bridge_slave_1) entered forwarding state
[  514.242949][ T7762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  514.246541][ T7762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  514.292124][   T27] audit: type=1326 audit(514.250:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.2.981" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff82745e68 code=0x0
[  514.357890][ T7762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  514.360890][ T7762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  514.374725][ T7762] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  514.388032][ T7762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  514.398266][ T7762] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  514.411686][ T7762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  514.418400][ T7762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  514.424854][ T7762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  514.433318][ T7762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  514.444452][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  514.947058][ T8832] loop4: detected capacity change from 0 to 256
[  514.953033][ T8832] exfat: Deprecated parameter 'utf8'
[  515.088404][ T8832] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  516.211749][ T7762] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  516.334240][ T8842] loop0: detected capacity change from 0 to 2048
[  516.344860][ T8842] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  516.353308][ T8842] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  516.541679][ T4404] device hsr_slave_0 left promiscuous mode
[  516.627058][ T4404] device hsr_slave_1 left promiscuous mode
[  516.721415][ T4404] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  516.723716][ T4404] batman_adv: batadv0: Removing interface: batadv_slave_0
[  516.727024][ T4404] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  516.730813][ T4404] batman_adv: batadv0: Removing interface: batadv_slave_1
[  516.741394][ T4404] device bridge_slave_1 left promiscuous mode
[  516.746578][ T4404] bridge0: port 2(bridge_slave_1) entered disabled state
[  518.048375][ T4404] device bridge_slave_0 left promiscuous mode
[  518.056882][ T4404] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.109865][ T7625] bio_check_eod: 17872 callbacks suppressed
[  518.110736][ T7625] syz.2.748: attempt to access beyond end of device
[  518.110736][ T7625] loop2: rw=0, sector=86816, nr_sectors = 8 limit=40427
[  518.119588][ T7625] syz.2.748: attempt to access beyond end of device
[  518.119588][ T7625] loop2: rw=0, sector=86824, nr_sectors = 8 limit=40427
[  518.220966][ T7625] syz.2.748: attempt to access beyond end of device
[  518.220966][ T7625] loop2: rw=0, sector=86832, nr_sectors = 8 limit=40427
[  518.431483][ T7625] syz.2.748: attempt to access beyond end of device
[  518.431483][ T7625] loop2: rw=0, sector=86840, nr_sectors = 8 limit=40427
[  518.493288][ T7625] syz.2.748: attempt to access beyond end of device
[  518.493288][ T7625] loop2: rw=0, sector=86848, nr_sectors = 8 limit=40427
[  518.511804][ T4404] device hsr_slave_0 left promiscuous mode
[  518.519030][ T7625] syz.2.748: attempt to access beyond end of device
[  518.519030][ T7625] loop2: rw=0, sector=86856, nr_sectors = 8 limit=40427
[  518.581392][ T7625] syz.2.748: attempt to access beyond end of device
[  518.581392][ T7625] loop2: rw=0, sector=86864, nr_sectors = 8 limit=40427
[  518.592477][ T4404] device hsr_slave_1 left promiscuous mode
[  518.601485][ T7625] syz.2.748: attempt to access beyond end of device
[  518.601485][ T7625] loop2: rw=0, sector=86872, nr_sectors = 8 limit=40427
[  518.616985][ T7625] syz.2.748: attempt to access beyond end of device
[  518.616985][ T7625] loop2: rw=0, sector=86880, nr_sectors = 8 limit=40427
[  518.620705][ T7625] syz.2.748: attempt to access beyond end of device
[  518.620705][ T7625] loop2: rw=0, sector=86888, nr_sectors = 8 limit=40427
[  518.741337][ T4404] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  518.743650][ T4404] batman_adv: batadv0: Removing interface: batadv_slave_0
[  518.746524][ T4404] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  518.753146][ T4404] batman_adv: batadv0: Removing interface: batadv_slave_1
[  518.764757][ T4404] device bridge_slave_1 left promiscuous mode
[  518.771824][ T4404] bridge0: port 2(bridge_slave_1) entered disabled state
[  518.823064][ T4404] device bridge_slave_0 left promiscuous mode
[  518.824978][ T4404] bridge0: port 1(bridge_slave_0) entered disabled state
[  519.131409][ T4404] device veth1_macvtap left promiscuous mode
[  519.133222][ T4404] device veth0_macvtap left promiscuous mode
[  519.135023][ T4404] device veth1_vlan left promiscuous mode
[  519.136694][ T4404] device veth0_vlan left promiscuous mode
[  519.312947][ T4404] device veth1_macvtap left promiscuous mode
[  519.315117][ T4404] device veth0_macvtap left promiscuous mode
[  519.319855][ T4404] device veth1_vlan left promiscuous mode
[  519.327944][ T4404] device veth0_vlan left promiscuous mode
[  522.497158][ T4404] team0 (unregistering): Port device team_slave_1 removed
[  522.694534][ T4404] team0 (unregistering): Port device team_slave_0 removed
[  522.912164][ T4404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  523.111519][ T7625] bio_check_eod: 120479 callbacks suppressed
[  523.111537][ T7625] syz.2.748: attempt to access beyond end of device
[  523.111537][ T7625] loop2: rw=524288, sector=88160, nr_sectors = 8 limit=40427
[  523.116634][ T7625] syz.2.748: attempt to access beyond end of device
[  523.116634][ T7625] loop2: rw=524288, sector=88168, nr_sectors = 8 limit=40427
[  523.120076][ T7625] syz.2.748: attempt to access beyond end of device
[  523.120076][ T7625] loop2: rw=524288, sector=88176, nr_sectors = 8 limit=40427
[  523.124785][ T7625] syz.2.748: attempt to access beyond end of device
[  523.124785][ T7625] loop2: rw=524288, sector=88184, nr_sectors = 8 limit=40427
[  523.128297][ T7625] syz.2.748: attempt to access beyond end of device
[  523.128297][ T7625] loop2: rw=524288, sector=88192, nr_sectors = 8 limit=40427
[  523.132923][ T7625] syz.2.748: attempt to access beyond end of device
[  523.132923][ T7625] loop2: rw=524288, sector=88200, nr_sectors = 8 limit=40427
[  523.136459][ T7625] syz.2.748: attempt to access beyond end of device
[  523.136459][ T7625] loop2: rw=524288, sector=88208, nr_sectors = 8 limit=40427
[  523.139886][ T7625] syz.2.748: attempt to access beyond end of device
[  523.139886][ T7625] loop2: rw=524288, sector=88216, nr_sectors = 8 limit=40427
[  523.144215][ T7625] syz.2.748: attempt to access beyond end of device
[  523.144215][ T7625] loop2: rw=524288, sector=88224, nr_sectors = 8 limit=40427
[  523.147702][ T7625] syz.2.748: attempt to access beyond end of device
[  523.147702][ T7625] loop2: rw=524288, sector=88232, nr_sectors = 8 limit=40427
[  523.172700][ T4404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  525.951564][   T28] INFO: task kworker/u4:12:4530 blocked for more than 143 seconds.
[  525.953713][   T28]       Not tainted 6.1.106-syzkaller #0
[  525.955829][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  525.958219][   T28] task:kworker/u4:12   state:D stack:0     pid:4530  ppid:2      flags:0x00000008
[  525.964071][   T28] Workqueue: writeback wb_workfn (flush-7:2)
[  525.969585][   T28] Call trace:
[  525.970546][   T28]  __switch_to+0x320/0x754
[  525.982415][   T28]  __schedule+0xef4/0x1d44
[  525.984890][   T28]  schedule+0xc4/0x170
[  525.987136][   T28]  rwsem_down_write_slowpath+0xc80/0x156c
[  525.989778][   T28]  down_write+0x84/0x88
[  525.992102][   T28]  f2fs_balance_fs+0x40c/0x60c
[  525.995734][   T28]  f2fs_write_inode+0x42c/0x4a0
[  525.998364][   T28]  __writeback_single_inode+0x614/0x1770
[  526.001211][   T28]  writeback_sb_inodes+0x978/0x1718
[  526.004866][   T28]  __writeback_inodes_wb+0x110/0x39c
[  526.007471][   T28]  wb_writeback+0x428/0x1130
[  526.009961][   T28]  wb_workfn+0xc98/0x1034
[  526.012390][   T28]  process_one_work+0x7ac/0x1404
[  526.016018][   T28]  worker_thread+0x8e4/0xfec
[  526.018183][   T28]  kthread+0x250/0x2d8
[  526.019424][   T28]  ret_from_fork+0x10/0x20
[  526.020761][   T28] 
[  526.020761][   T28] Showing all locks held in the system:
[  526.027410][   T28] 1 lock held by rcu_tasks_kthre/12:
[  526.028971][   T28]  #0: ffff800015b950b0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4
[  526.036250][   T28] 1 lock held by rcu_tasks_trace/13:
[  526.037816][   T28]  #0: ffff800015b958b0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4
[  526.040966][   T28] 3 locks held by kworker/0:1/14:
[  526.058232][   T28]  #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x664/0x1404
[  526.064641][   T28]  #1: ffff80001afa7c20 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404
[  526.072568][   T28]  #2: ffff800017fe4888 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c
[  526.077454][   T28] 1 lock held by khungtaskd/28:
[  526.078865][   T28]  #0: ffff800015b94ee0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44
[  526.085959][   T28] 2 locks held by getty/4055:
[  526.088148][   T28]  #0: ffff0000d64e4098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c
[  526.090803][   T28]  #1: ffff80001be902f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x414/0x1214
[  526.096741][   T28] 3 locks held by kworker/1:5/4350:
[  526.098352][   T28]  #0: ffff0000d5a7a138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x664/0x1404
[  526.106531][   T28]  #1: ffff80001f2b7c20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404
[  526.110061][   T28]  #2: ffff800017fe4888 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c
[  526.115672][   T28] 3 locks held by kworker/0:4/4351:
[  526.117253][   T28]  #0: ffff0000d5a7a138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x664/0x1404
[  526.120327][   T28]  #1: ffff80001f2c7c20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404
[  526.128643][   T28]  #2: ffff800017fe4888 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c
[  526.131001][   T28] 4 locks held by kworker/u4:8/4404:
[  526.135893][   T28]  #0: ffff0000c0845138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x664/0x1404
[  526.138842][   T28]  #1: ffff80001e247c20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404
[  526.146790][   T28]  #2: ffff800017fd8a50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf4/0x994
[  526.149561][   T28]  #3: ffff800017fe4888 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c
[  526.155321][   T28] 3 locks held by kworker/u4:11/4487:
[  526.156891][   T28]  #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x664/0x1404
[  526.160162][   T28]  #1: ffff80001e2d7c20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404
[  526.169077][   T28]  #2: ffff800017fe4888 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c
[  526.176698][   T28] 4 locks held by kworker/u4:12/4530:
[  526.178324][   T28]  #0: ffff0000c2e55938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x664/0x1404
[  526.186949][   T28]  #1: ffff80001e307c20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404
[  526.190458][   T28]  #2: ffff0000e5c900e0 (&type->s_umount_key#89){++++}-{3:3}, at: trylock_super+0x28/0xf8
[  526.196469][   T28]  #3: ffff0000de891140 (&sbi->gc_lock){+.+.}-{3:3}, at: f2fs_balance_fs+0x40c/0x60c
[  526.199286][   T28] 6 locks held by syz.2.748/7625:
[  526.200794][   T28] 1 lock held by syz-executor/8563:
[  526.207443][   T28]  #0: ffff800017fe4888 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94
[  526.210152][   T28] 2 locks held by syz.2.991/8843:
[  526.214841][   T28]  #0: ffff800017fd8a50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2d0/0x58c
[  526.217616][   T28]  #1: ffff800017fe4888 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c
[  526.220743][   T28] 
[  526.226776][   T28] =============================================
[  526.226776][   T28] 
[  526.229348][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[  526.231218][   T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.106-syzkaller #0
[  526.233459][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  526.236208][   T28] Call trace:
[  526.237133][   T28]  dump_backtrace+0x1c8/0x1f4
[  526.238554][   T28]  show_stack+0x2c/0x3c
[  526.239764][   T28]  dump_stack_lvl+0x108/0x170
[  526.241121][   T28]  dump_stack+0x1c/0x58
[  526.242295][   T28]  panic+0x300/0x804
[  526.243383][   T28]  hung_task_panic+0x0/0x2c
[  526.244713][   T28]  kthread+0x250/0x2d8
[  526.245935][   T28]  ret_from_fork+0x10/0x20
[  526.247282][   T28] SMP: stopping secondary CPUs
[  526.248604][   T28] Kernel Offset: disabled
[  526.249930][   T28] CPU features: 0x080000,02070084,26017203
[  526.251548][   T28] Memory Limit: none
[  526.923673][   T28] Rebooting in 86400 seconds..