last executing test programs:

50.632393234s ago: executing program 1 (id=331):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
creat(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5203)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @broadcast}, @a_msdu}}]}, 0x4c}}, 0x0)

48.527996628s ago: executing program 1 (id=333):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)

48.228824229s ago: executing program 1 (id=334):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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")
write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.current\x00', 0x275a, 0x0)

47.91745326s ago: executing program 1 (id=336):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='ext4_es_find_extent_range_enter\x00'}, 0x10)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

47.430369314s ago: executing program 1 (id=337):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x52, r0, 0xffffe000)

47.242689856s ago: executing program 1 (id=338):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xfffffeb7)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000005c0)=0x1, 0x4)
r4 = socket$alg(0x26, 0x5, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000cc0)='./file1\x00', 0x800, &(0x7f0000000040)=ANY=[], 0x1, 0x670, &(0x7f0000000640)="$eJzs3c1vHGcdB/DvbDZONi2p2yZtQJVqNRIgIhK/yAVzISCEfKhQVQ6crcRprGzSYrvIrRB1eL320D+gHHxBnJC4RyocuIC49IZ8rITEpQcwp0UzO2uv1y9dt429KZ9PNPs8zzwzz/ye3+zMvljRBvi/NX8lzQcpMn/lpbWyvbkx097cmLnbqyc5k2Q9aSZpJCn+0+l03k+uJ8X2MMVAuce7S3OvfPDR5ofdVrNequ0bh+03oN5ufWD1em/dRJJTdfkp7Brvxqcer9iO/HqSy3UJJ+50ks4uP/7L49s9fVr77X32WGIEHq6i+7q5x3hyrr7Qy/cBvVfexvFGN7wzQ243+A4CAAAAHjXDfAZ+YitbWSvOH0M4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8LmwvvP7/0W9NHr1iRS93/8fq9elro+W54+2+YOHFQcAAAAAAAAAHKPnt7KVtZzvtTtF9Tf/F6rGherxsbyRlSxmOVezloWsZjXLmUoy3jfQ2NrC6ury1BB7Tu+75/THBHqmLlufzbwBAAAAAAAA4HPm55nf+fs/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACMgiI51S1S3K/WnK1Wj6fRrBtj5Yr15G+9+qPswUkHAAAAAMfgia1sZS3ne+1OkQtJnqm+AzibN3Ivq1nKatpZzM3qe4Hup/7G5sZMe3Nj5m657B33O/86UhjViOl+97D/kS9VW7RyK0vVmqu5kdfSzs00qj1Ll+p4eqMOxHW/jKn4dm3IyG7WZTnzd+pyj7ePNNmDHPHLlPEqI6e3MzJZx1Zm48nemdn/DB3x7AweaSqN7WAvDBxpYBKfKOfn6rKcz68PyvmJGMzEdN+z75nDc5585Y+//9FkXR+dKQ3nVF12qsfW3kzM9GXi2WEycbt9787tWytXHrVM7DFZZeLidns+388PcyUTeTnLWcpPspDVLGYi36tqC/XJL/ou+QMydX1X6+WPi2SsfoZ2T9bRYnqh2vd8lvKDvJabWcyL1b/pTOUbmc1s5vrO8MXDz3B11TcOuOo7X9g3+MtfrSutJL+py9FQ5vXJvrz233PHq77+NTtZemqILB3x3tj8Ul0pj/GLuhwNg5mY6svE04dn4rfVbWWlfe/O8u2F14c73FPv1JXyOvrVSN1Sy+fLU+XJqlq7nx1l39P79k1VfRe2+xp7+i5u93Wv1PUDr9Sx+j3c3pGmq75ne31ns+seXvZd6ttvv/dbAIy8c187N9b6Z+uvrfdav2zdbr109rtnvnnmubGc/tPpbzUnT3258Vzxh7yXn+18/gcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD65lTffurPQbi8uD1Q6nc7bB3SNfCUT/3isnNs+Xb2fMzvGeL74eDISaTnRyn87nU69pjhgm9/9eWQS1akdy7Hq5+RInKa+ygnelIBjcW317uvXVt586+tLdxdeXXx18d7c7Ozc5NzsizPXbi21Fye7jycdJfAw7Lzon3QkAAAAAAAAAAAAwLCO4b8T/P3f+xy3eQJzBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5N81fSfJAiU5NXJ8v25sZMu1x69Z0tm0kaSYqfJsX7yfV0l4z3DVccdJx3l+Ze+eCjzQ93xmr2tm8ctt9w1uslE0lOdcv7n9V4N+ryUMVhUyi2Z1gm7HIvcXDS/hcAAP//GSkJtg==")
creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
unlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
sync()
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00')
bind$alg(r4, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x1e)
connect$inet(0xffffffffffffffff, 0x0, 0x0)

43.081426431s ago: executing program 3 (id=346):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x0, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bca7", @ANYBLOB], 0x40}}, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00157ed0", @ANYRES16=0x0, @ANYRESOCT], 0x1, 0x178, &(0x7f0000000240)="$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")
llistxattr(&(0x7f0000000280)='./file1\x00', 0x0, 0x10)
fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r5, 0x4c466994d56c53cd}, 0x14}}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000002a00), r4)

42.004729585s ago: executing program 3 (id=347):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='ext4_es_find_extent_range_enter\x00'}, 0x10)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

41.118661045s ago: executing program 3 (id=348):
syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/80, 0x50}, {&(0x7f00000003c0)=""/140, 0x8c}], 0x2}, 0x40002001)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder1\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x0, 0xfff8}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)

38.171178097s ago: executing program 3 (id=353):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a48500000004000000850000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='percpu_alloc_percpu\x00', r0}, 0x10)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)

37.966688321s ago: executing program 3 (id=355):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r2, 0x1, 0x70bd2c, 0x4, {0x5}}, 0x14}}, 0x0)

37.726545908s ago: executing program 3 (id=357):
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x800}}, './file2\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000500)='devlink_health_reporter_state_update\x00', r1, 0x0, 0xffffffff}, 0x18)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000001300)=""/244, 0xf4}], 0x1)
accept$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0900000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="00000000000000000002000000000000e6ffffff081f912af7efd0fa096ee61a7146941ad50f0dc6e4409bcf4a525a30a213ef8829a3b555276099bca739f0a7c9a83b1e61f53af2cb362f6e2ed5ccaa1193aa95c469c8978cd533f464c665131ea5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='cruft,block=0x0000000000000400\x00session=0x0000000000000006,check=relaxed,utf8,cruftAuid=', @ANYRES64, @ANYBLOB="2c8ef6fff25f71854bb02441c2edff2c66736dbdda08da0968bf8783e49a23113d3078303030303030303030303001003066581c000000000000bd2551db78fc65240062c543fd92499a55c4676e4ab57351fab1f21354c2000000000000a36961e03f1f9b339e1208fe76adf824d531e4f11e82cd11bccd3e4d4cd5b4502ba9708a2827923cada4e88ec20e806b355ece7f4afbdb8475f9b71f1eafd72d05729520434e51cc55317bb19441bd11c979ca9786b51118d9b1c2246f0b407eaa2083113d1bab6700000000000000", @ANYRES16, @ANYRESHEX, @ANYRESDEC], 0x0, 0x63b, &(0x7f0000000c80)="$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")
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
fchmodat(r4, &(0x7f00000000c0)='./file1\x00', 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xa8, 0x11, 0x148, 0xa8, 0x10, 0x178, 0x2a8, 0x2a8, 0x178, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x3}, {0x0, 0x8}, {0xffffffffffffffff, 0x7}}}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1, 0x3}, {0x0, [0x0, 0x6, 0x0, 0x0, 0x6], 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000780)={'syztnl2\x00', <r6=>0x0, 0x20, 0x20, 0x200, 0x2, {{0xf, 0x4, 0x1, 0x1d, 0x3c, 0x64, 0x0, 0x1, 0x816409c464f1147a, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x28}, {[@generic={0x7, 0xb, "6d767adf8f60de9cae"}, @end, @rr={0x7, 0x1b, 0xa1, [@multicast2, @broadcast, @empty, @multicast2, @multicast2, @loopback]}]}}}}})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
close(r7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r9, &(0x7f0000001a40)=ANY=[@ANYBLOB="1e0328004d8c71ef2885634a8270e7"], 0xffdd)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x20, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000010000000000000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000950000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b70800000e0000007b8af0ff00000000bfa100fbff00000007010000f8ffffffbfa400000000000007040000f0ffffffb7d10752c2418af3bb0f9a99", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000008520000003000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f00000005c0)='GPL\x00', 0x4, 0x10, &(0x7f0000000600)=""/16, 0x41000, 0x32, '\x00', r6, @sched_cls=0x2f, r1, 0x8, &(0x7f0000000840)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x4, 0xf, 0xfffe0000, 0xfffffffd}, 0x10, 0x0, r3, 0x1, &(0x7f00000008c0)=[0xffffffffffffffff, r1], &(0x7f0000000900)=[{0x5, 0x5, 0xd, 0xc}], 0x10, 0x8, @void, @value}, 0x94)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

33.247533995s ago: executing program 0 (id=363):
syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file1\x00', 0x800401, &(0x7f00000000c0)={[{@data_ordered}, {@resv_level={'resv_level', 0x3d, 0x2}}, {@heartbeat_none}, {@coherency_buffered}, {@err_cont}, {@barrier={'barrier', 0x3d, 0x1000000}}, {@coherency_full}, {@localflocks}, {@data_ordered}, {@data_ordered}]}, 0x8, 0x446c, &(0x7f0000004780)="$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")

32.246518933s ago: executing program 0 (id=364):
syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/80, 0x50}, {&(0x7f00000003c0)=""/140, 0x8c}], 0x2}, 0x40002001)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder1\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x0, 0xfff8}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)

30.212561012s ago: executing program 0 (id=365):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0x1dc82e11}, {&(0x7f0000000580)=""/156}, {&(0x7f00000000c0)=""/11}, {&(0x7f0000000640)=""/247}], 0x1, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000400000000000000"], 0x48)
pipe(0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB='%\b\x00z\x00\x00\x00\x00\x00\x00\a\x00\x00\x00'], 0x54}}, 0x0)
splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x4ffe6, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='locks_get_lock_context\x00', r5}, 0x10)
fcntl$lock(r4, 0x26, &(0x7f0000000080)={0x2, 0x2})

28.847488895s ago: executing program 0 (id=366):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a48500000004000000850000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='percpu_alloc_percpu\x00', r0}, 0x10)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)

28.650606869s ago: executing program 0 (id=367):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r2, 0x1, 0x70bd2c, 0x4, {0x5}}, 0x14}}, 0x0)

28.472914501s ago: executing program 0 (id=369):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xfffffeb7)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000005c0)=0x1, 0x4)
r4 = socket$alg(0x26, 0x5, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000cc0)='./file1\x00', 0x800, &(0x7f0000000040)=ANY=[], 0x1, 0x670, &(0x7f0000000640)="$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")
creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
unlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
sync()
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00')
bind$alg(r4, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x1e)
connect$inet(0xffffffffffffffff, 0x0, 0x0)

28.471719391s ago: executing program 4 (id=370):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket(0x400000000010, 0x3, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
unshare(0x8000000)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x5a001, 0x109)
socket$inet_tcp(0x2, 0x1, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
open(0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r1)
ioctl$TCSETA(r3, 0x5406, &(0x7f0000000000)={0x0, 0x65dd, 0x0, 0x0, 0x9, "17020000ffec00"})
write$UHID_INPUT(r4, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
write$tcp_mem(r2, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48)
write(r1, 0x0, 0x0)

26.650923145s ago: executing program 4 (id=373):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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")
write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.current\x00', 0x275a, 0x0)

26.202732726s ago: executing program 4 (id=374):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r0, 0x0, 0x0, 0x1001f0)

24.434888527s ago: executing program 4 (id=375):
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)="0b102acdc64d8e703c55a47e57f3f8ee", &(0x7f00000004c0), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r2, 0x407, 0x0)
write$FUSE_INIT(r2, &(0x7f0000000340)={0x50}, 0x50)
vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0)
fcntl$setpipe(r2, 0x407, 0x2000000)
syz_read_part_table(0x5df, &(0x7f0000000000)="$eJzs3DGIE1kYB/CXIBEFETs7gykichAh3UkEDXGQgAnBQ4s70c4t0qyVRYxgQCzMNhE5Gy0UYQ1aaCUiCCImFkIqUXavuN1l2eJY2CawLHMEZrvjYG/JHQe/Hzx4b97/zcfHMOVM4H8tHf6I4zgVQoj37vz0T/OVs+ey9dONCyGkwi8hhN/zs79OdlJJYvuuR5P1YrIuvt3TvDcf3en2Dhx+nd38nE72byVjZfjw8q6bY+qOXT/+/sh4dOhNNTwenBqc3N+8dK2fL7f7X+qvzjzNPtt+7oUp1X9Z+njwdmc26t4ozXyNWkvRanpjPTr/4FEhM9du5NdOJLkrU6rf3LqYef7kQ7mzvK/4qVqr9V58v59rVd51bo6GuW/ju1eT3MI/eLsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPj3Hbt+/P2R8ejQm2p4PDg1OLm/eelaP19u97/UX515mn12NMkVplT/Zenjwdud2ah7ozTzNWotRavpjfXo/INHhcxcu5FfO5HkrvzV4TiO27us39y6mHn+5EO5s7yv+Klaq/VefL+fa1XedW6Ohrlv47tXk9zC3l0WAgAAAAAAAAAAAAAAAAAAgL9ROXsuWz/duDCZ/xxC+GHmx7nJPE6+d08lue3/ACxOrqdDKL7d07w3H93p9g4cfp3d/Pxbkr+VjJXhw8v/QTvs0J8BAAD//9odjZ8=")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
io_setup(0x4, &(0x7f0000000100)=<r4=>0x0)
r5 = eventfd2(0x0, 0x0)
io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r5}])
dup3(r3, r5, 0x0)
shutdown(r3, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)

23.640817372s ago: executing program 4 (id=376):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/36, @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23.106422218s ago: executing program 4 (id=377):
r0 = socket(0x40000000002, 0x3, 0x2)
recvmmsg(r0, 0x0, 0x0, 0x10022, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
writev(r1, &(0x7f0000000a00), 0x0)

6.976273082s ago: executing program 2 (id=394):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1)
sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003"], 0x28}}, 0x0)

6.731966719s ago: executing program 2 (id=395):
syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)=@abs, 0x6e, 0x0}, 0x40002001)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder1\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x0, 0xfff8}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)

4.853039758s ago: executing program 2 (id=396):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1e, 0x3, &(0x7f00000005c0)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000240)={'team_slave_1\x00', &(0x7f0000000040)=@ethtool_cmd={0x44, 0x6, 0x54f8084f, 0x8, 0x1, 0x10, 0xcd, 0xb, 0x40, 0x6, 0x7, 0x5, 0x4, 0xc3, 0xdb, 0x7, [0x4, 0xff]}})
mount(0x0, 0x0, &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fc7000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000140)="660f01b1220037660fc7b70500baa100b8cb00ef66b9ba02000066b8eda78c0466ba000000000f30d9e566b9410101c00f322ef30f090fc79b950066b95e0200000f32", 0x43}], 0xaaaaaaaaaaaa80a, 0x0, 0x0, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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")
ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r5, 0x2, 0x0)
ptrace$getregset(0x4204, r5, 0x2, &(0x7f0000000740)={0x0})
r6 = open(0x0, 0x0, 0x0)
fchdir(r6)
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
r7 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
mkdir(0x0, 0x0)
mkdirat(r7, &(0x7f0000000100)='./control\x00', 0x0)
unlinkat(r7, &(0x7f0000000140)='./control\x00', 0x200)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000001c0)={'wg1\x00', <r9=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newlink={0x24, 0x10, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, 0x35917}, [@IFLA_VF_PORTS={0x4}]}, 0x24}}, 0x0)

2.18365629s ago: executing program 2 (id=397):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
socket(0x400000000010, 0x3, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
unshare(0x8000000)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x5a001, 0x109)
socket$inet_tcp(0x2, 0x1, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
open(0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r1)
ioctl$TCSETA(r3, 0x5406, &(0x7f0000000000)={0x0, 0x65dd, 0x0, 0x0, 0x9, "17020000ffec00"})
write$UHID_INPUT(r4, &(0x7f0000000040)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083860090890e0878f0f1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31310d3b5d0936cd3b78070daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5003a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd7072f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d27df2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2c1cde360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
write$tcp_mem(r2, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48)
write(r1, 0x0, 0x0)

1.175855369s ago: executing program 2 (id=398):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a8475", @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000380))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

0s ago: executing program 2 (id=399):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xfffffeb7)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000005c0)=0x1, 0x4)
r4 = socket$alg(0x26, 0x5, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000cc0)='./file1\x00', 0x800, &(0x7f0000000040)=ANY=[], 0x1, 0x670, &(0x7f0000000640)="$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")
creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
unlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
sync()
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00')
accept$alg(r4, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x1e)
connect$inet(0xffffffffffffffff, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 ready
[  160.055793][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.104553][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  160.119866][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.214680][ T4647] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  160.270316][ T4647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  160.337244][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  160.352880][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  160.377528][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  160.401905][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  160.412019][ T4456] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  160.432828][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  160.482396][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  160.539833][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  160.610426][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  160.656918][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  160.666169][ T4420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.751910][ T4420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.803736][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  161.546462][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  161.554673][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  161.561439][ T4820] loop3: detected capacity change from 0 to 32768
[  161.586411][ T4647] 8021q: adding VLAN 0 to HW filter on device batadv0
[  161.642622][ T4820] =======================================================
[  161.642622][ T4820] WARNING: The mand mount option has been deprecated and
[  161.642622][ T4820]          and is ignored by this kernel. Remove the mand
[  161.642622][ T4820]          option from the mount to silence this warning.
[  161.642622][ T4820] =======================================================
[  161.878829][ T4820] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  162.076524][ T4820] OCFS2: ERROR (device loop3): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 73
[  162.185384][ T4820] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  162.276797][ T4857] loop0: detected capacity change from 0 to 1024
[  162.452690][ T4857] hfsplus: request for non-existent node 2048 in B*Tree
[  162.459958][ T4857] hfsplus: request for non-existent node 2048 in B*Tree
[  162.840299][ T4820] OCFS2: File system is now read-only.
[  162.892622][ T4820] (syz.3.213,4820,0):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30
[  162.905826][ T4820] (syz.3.213,4820,0):ocfs2_reserve_new_metadata_blocks:990 ERROR: status = -30
[  162.915055][ T4820] (syz.3.213,4820,0):ocfs2_reserve_new_metadata_blocks:1013 ERROR: status = -30
[  162.957985][ T4820] (syz.3.213,4820,0):ocfs2_mknod:348 ERROR: status = -30
[  163.014113][ T4820] (syz.3.213,4820,0):ocfs2_mknod:500 ERROR: status = -30
[  163.053256][ T4820] (syz.3.213,4820,0):ocfs2_create:674 ERROR: status = -30
[  163.146082][ T4832] loop2: detected capacity change from 0 to 32768
[  163.236334][ T4537] ocfs2: Unmounting device (7,3) on (node local)
[  163.290546][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  163.336721][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  163.370543][ T4832] XFS (loop2): Mounting V5 Filesystem
[  163.564745][ T4841] loop1: detected capacity change from 0 to 32768
[  163.597870][ T4864] device syzkaller0 entered promiscuous mode
[  163.626709][ T4832] XFS (loop2): Ending clean mount
[  163.627351][   T22] syzkaller0: tun_net_xmit 48
[  163.641359][ T4832] XFS (loop2): Quotacheck needed: Please wait.
[  163.675152][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  163.700492][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  163.722645][ T4841] XFS (loop1): Mounting V5 Filesystem
[  163.748958][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  163.758324][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  163.771165][ T4647] device veth0_vlan entered promiscuous mode
[  163.843058][ T4832] XFS (loop2): Quotacheck: Done.
[  163.922255][ T4647] device veth1_vlan entered promiscuous mode
[  163.953974][ T3638] XFS (loop2): Unmounting Filesystem
[  164.077499][ T4841] XFS (loop1): Ending clean mount
[  164.116280][ T4841] XFS (loop1): Quotacheck needed: Please wait.
[  164.243741][ T4841] XFS (loop1): Quotacheck: Done.
[  164.920143][   T26] audit: type=1800 audit(1726384156.083:5): pid=4841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.217" name=E3E76AE3E7737B078723E2CF673ADE5A5F0A1119CDE779AEB7F1AF55EFDA78FCE9F4DC8B950F9FBBEDB9E71F45 dev="loop1" ino=9294 res=0 errno=0
[  165.054073][ T4508] XFS (loop1): Unmounting Filesystem
[  165.701611][ T4896] netlink: 20 bytes leftover after parsing attributes in process `syz.1.227'.
[  165.710702][ T4896] netlink: 20 bytes leftover after parsing attributes in process `syz.1.227'.
[  165.732962][ T4896] loop1: detected capacity change from 0 to 16
[  165.746132][ T4896] erofs: (device loop1): mounted with root inode @ nid 36.
[  166.847062][ T4900] loop1: detected capacity change from 0 to 8192
[  166.932672][ T4900] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  166.947450][ T4900] FAT-fs (loop1): Filesystem has been set read-only
[  167.791142][ T4903] loop1: detected capacity change from 0 to 1024
[  167.807017][ T4903] EXT4-fs: Ignoring removed oldalloc option
[  167.914252][ T4903] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  168.122405][ T4508] EXT4-fs (loop1): unmounting filesystem.
[  168.916737][ T4909] loop1: detected capacity change from 0 to 1024
[  168.975613][ T4909] hfsplus: request for non-existent node 2048 in B*Tree
[  168.983297][ T4909] hfsplus: request for non-existent node 2048 in B*Tree
[  170.054078][ T4914] loop1: detected capacity change from 0 to 32768
[  170.267829][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  170.330376][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  170.366209][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  170.396486][ T4647] device veth0_macvtap entered promiscuous mode
[  170.466227][ T4647] device veth1_macvtap entered promiscuous mode
[  170.650607][ T4922] netlink: 20 bytes leftover after parsing attributes in process `syz.0.237'.
[  170.660144][ T4922] netlink: 20 bytes leftover after parsing attributes in process `syz.0.237'.
[  170.673932][ T4922] loop0: detected capacity change from 0 to 16
[  170.693263][ T4922] erofs: (device loop0): mounted with root inode @ nid 36.
[  170.795771][ T4828] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  171.661298][ T4927] loop3: detected capacity change from 0 to 128
[  172.190677][ T4647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.195383][ T4828] usb 3-1: Using ep0 maxpacket: 16
[  172.213078][ T4647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.234623][ T4647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.275578][ T4647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.295269][ T4647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.321907][ T4647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.334917][ T4931] loop0: detected capacity change from 0 to 8192
[  172.343334][ T4828] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  172.352519][ T4647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.381921][ T4828] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  172.389672][ T4647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.392478][ T4828] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  172.416937][ T4647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.428885][ T4828] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  172.437772][ T4647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.463854][ T4931] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  172.468240][ T4647] batman_adv: batadv0: Interface activated: batadv_slave_0
[  172.479434][ T4931] FAT-fs (loop0): Filesystem has been set read-only
[  172.494208][ T4828] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  172.508096][ T4828] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  172.720572][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  172.729371][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  172.737892][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  172.747098][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  172.760339][ T4925] device wg1 entered promiscuous mode
[  172.812868][ T4647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.865804][ T4647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.877239][ T4647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.915676][ T4828] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  172.924812][ T4647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.935160][ T4828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.944668][ T4828] usb 3-1: Product: syz
[  172.956108][ T4647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.959188][ T4828] usb 3-1: Manufacturer: syz
[  172.983260][ T4647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.008317][ T4647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.009912][ T4828] usb 3-1: SerialNumber: syz
[  173.030286][ T4934] loop3: detected capacity change from 0 to 164
[  173.036119][ T4647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.113999][ T4934] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  173.122493][ T4647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.185417][ T4647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.191335][ T4934] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  173.226132][ T4647] batman_adv: batadv0: Interface activated: batadv_slave_1
[  173.325574][ T4934] iso9660: Corrupted directory entry in block 4 of inode 1792
[  173.347392][ T4484] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.358429][ T4828] cdc_ncm 3-1:1.0: bind() failure
[  173.379676][ T4828] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  173.401415][ T4828] cdc_ncm 3-1:1.1: bind() failure
[  173.470838][ T4828] usb 3-1: USB disconnect, device number 2
[  173.519930][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  173.549099][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  173.626210][ T4647] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  173.654216][ T4647] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  173.675501][ T4647] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  173.684246][ T4647] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  173.752492][ T4484] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.919225][ T4484] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.063705][ T4484] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.206220][   T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  174.217299][   T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  174.224726][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.236797][   T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  174.246714][   T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  174.254369][   T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  174.305103][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.356120][   T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  174.446180][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  174.500707][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.744648][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.420330][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  175.652208][ T4964] loop3: detected capacity change from 0 to 128
[  176.325716][ T4969] loop0: detected capacity change from 0 to 64
[  176.416210][ T3654] Bluetooth: hci4: command tx timeout
[  176.901075][ T4977] loop3: detected capacity change from 0 to 128
[  177.780811][ T4987] loop3: detected capacity change from 0 to 512
[  177.807675][ T4978] loop0: detected capacity change from 0 to 8192
[  177.917599][ T4987] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  177.936556][ T4987] ext4 filesystem being mounted at /11/bus supports timestamps until 2038 (0x7fffffff)
[  177.948113][ T4978] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  178.014905][ T4978] FAT-fs (loop0): Filesystem has been set read-only
[  178.599210][ T3654] Bluetooth: hci4: command tx timeout
[  178.683688][ T4998] loop2: detected capacity change from 0 to 1024
[  178.698360][ T4998] EXT4-fs: Ignoring removed oldalloc option
[  178.804306][ T4998] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  178.842874][ T4953] chnl_net:caif_netlink_parms(): no params data found
[  178.882199][ T4537] EXT4-fs (loop3): unmounting filesystem.
[  179.637543][ T3638] EXT4-fs (loop2): unmounting filesystem.
[  179.852090][ T5013] loop0: detected capacity change from 0 to 164
[  179.925705][ T5013] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  179.978175][ T5013] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  180.075561][ T5013] iso9660: Corrupted directory entry in block 4 of inode 1792
[  180.096071][ T4953] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.266998][ T4953] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.543913][ T4953] device bridge_slave_0 entered promiscuous mode
[  180.714795][ T3654] Bluetooth: hci4: command tx timeout
[  180.770417][ T4953] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.824124][ T4953] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.865418][ T4953] device bridge_slave_1 entered promiscuous mode
[  180.989078][ T4953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  181.052775][ T4953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  181.181549][ T4953] team0: Port device team_slave_0 added
[  181.299013][ T5035] loop0: detected capacity change from 0 to 64
[  181.421128][ T4953] team0: Port device team_slave_1 added
[  181.549226][ T4953] batman_adv: batadv0: Adding interface: batadv_slave_0
[  181.575292][ T4953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.692100][ T4953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  181.876569][ T5041] loop0: detected capacity change from 0 to 128
[  182.621398][ T5044] loop2: detected capacity change from 0 to 128
[  182.690102][ T4953] batman_adv: batadv0: Adding interface: batadv_slave_1
[  182.705695][ T4953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.732981][ T3757] kworker/u4:8: attempt to access beyond end of device
[  182.732981][ T3757] loop2: rw=1, sector=145, nr_sectors = 32 limit=128
[  182.746677][   T48] Bluetooth: hci4: command tx timeout
[  182.748392][ T5028] loop3: detected capacity change from 0 to 32768
[  182.775040][ T3757] kworker/u4:8: attempt to access beyond end of device
[  182.775040][ T3757] loop2: rw=1, sector=177, nr_sectors = 1 limit=128
[  182.789357][ T3757] Buffer I/O error on dev loop2, logical block 177, lost async page write
[  182.840332][ T5028] JBD2: Ignoring recovery information on journal
[  182.853669][ T4953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  182.876886][ T5047] loop2: detected capacity change from 0 to 512
[  182.999222][ T4484] device hsr_slave_0 left promiscuous mode
[  183.015952][ T4484] device hsr_slave_1 left promiscuous mode
[  183.041706][ T4484] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  183.042822][ T5028] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  183.055510][ T4484] batman_adv: batadv0: Removing interface: batadv_slave_0
[  183.106007][ T4484] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  183.124381][ T4484] batman_adv: batadv0: Removing interface: batadv_slave_1
[  183.127342][ T5047] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  183.153530][ T5047] ext4 filesystem being mounted at /82/bus supports timestamps until 2038 (0x7fffffff)
[  183.207518][ T4484] device bridge_slave_1 left promiscuous mode
[  183.238249][ T4484] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.256551][ T4484] device bridge_slave_0 left promiscuous mode
[  183.272487][ T4484] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.282110][ T4537] ocfs2: Unmounting device (7,3) on (node local)
[  183.702917][ T5053] loop0: detected capacity change from 0 to 8192
[  183.776333][ T4484] device veth1_macvtap left promiscuous mode
[  183.785782][ T4484] device veth0_macvtap left promiscuous mode
[  183.792058][ T4484] device veth1_vlan left promiscuous mode
[  183.799280][ T5053] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  183.809770][ T4484] device veth0_vlan left promiscuous mode
[  183.852450][ T5053] FAT-fs (loop0): Filesystem has been set read-only
[  183.881399][ T3638] EXT4-fs (loop2): unmounting filesystem.
[  184.160247][ T5058] loop3: detected capacity change from 0 to 512
[  184.185769][ T5058] EXT4-fs: Ignoring removed mblk_io_submit option
[  184.255158][ T5058] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.265: invalid block
[  184.366803][ T5058] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.265: invalid indirect mapped block 10 (level 1)
[  184.431942][ T5058] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.265: invalid indirect mapped block 8 (level 1)
[  184.481080][ T5058] EXT4-fs (loop3): 1 truncate cleaned up
[  184.496169][ T5058] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  184.710948][ T4537] EXT4-fs error (device loop3): ext4_lookup:1856: inode #16: comm syz-executor: iget: bogus i_mode (6355)
[  184.757869][ T4537] EXT4-fs error (device loop3): ext4_lookup:1856: inode #16: comm syz-executor: iget: bogus i_mode (6355)
[  184.899036][ T4979] EXT4-fs (loop3): unmounting filesystem.
[  185.034136][ T5067] loop0: detected capacity change from 0 to 164
[  185.112347][ T5067] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  185.154556][ T5067] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  185.190842][ T5067] iso9660: Corrupted directory entry in block 4 of inode 1792
[  185.881161][ T4484] team0 (unregistering): Port device team_slave_1 removed
[  185.990715][ T4484] team0 (unregistering): Port device team_slave_0 removed
[  186.088353][ T4484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  186.146615][ T5075] loop2: detected capacity change from 0 to 64
[  186.153927][ T4484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  187.164312][ T5081] loop2: detected capacity change from 0 to 128
[  187.266106][   T35] kworker/u4:2: attempt to access beyond end of device
[  187.266106][   T35] loop2: rw=1, sector=145, nr_sectors = 32 limit=128
[  187.300191][   T35] kworker/u4:2: attempt to access beyond end of device
[  187.300191][   T35] loop2: rw=1, sector=177, nr_sectors = 1 limit=128
[  187.324783][   T35] Buffer I/O error on dev loop2, logical block 177, lost async page write
[  187.446392][ T4484] bond0 (unregistering): Released all slaves
[  187.569509][ T5085] loop2: detected capacity change from 0 to 512
[  187.602564][   T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  187.633482][   T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  187.645646][   T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  187.654417][   T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  187.662634][   T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  187.670416][   T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  187.702185][ T4953] device hsr_slave_0 entered promiscuous mode
[  187.724063][ T4953] device hsr_slave_1 entered promiscuous mode
[  187.735901][ T5085] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  187.745129][ T5085] ext4 filesystem being mounted at /88/bus supports timestamps until 2038 (0x7fffffff)
[  187.763928][ T4953] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  187.792931][ T4515] F2FS-fs (loop4): f2fs_pin_file_control: Enable GC = ino a after 801 GC trials
[  187.802195][ T4953] Cannot create hsr debugfs directory
[  187.813610][ T4515] syz.4.174: attempt to access beyond end of device
[  187.813610][ T4515] loop4: rw=524288, sector=49152, nr_sectors = 8 limit=40427
[  187.842939][ T4515] syz.4.174: attempt to access beyond end of device
[  187.842939][ T4515] loop4: rw=524288, sector=49160, nr_sectors = 8 limit=40427
[  188.403826][ T4515] syz.4.174: attempt to access beyond end of device
[  188.403826][ T4515] loop4: rw=524288, sector=49168, nr_sectors = 8 limit=40427
[  188.439502][ T4515] syz.4.174: attempt to access beyond end of device
[  188.439502][ T4515] loop4: rw=524288, sector=49176, nr_sectors = 8 limit=40427
[  188.467275][ T4515] syz.4.174: attempt to access beyond end of device
[  188.467275][ T4515] loop4: rw=524288, sector=49184, nr_sectors = 8 limit=40427
[  188.483937][ T4515] syz.4.174: attempt to access beyond end of device
[  188.483937][ T4515] loop4: rw=524288, sector=49192, nr_sectors = 8 limit=40427
[  188.498935][ T4515] syz.4.174: attempt to access beyond end of device
[  188.498935][ T4515] loop4: rw=524288, sector=49200, nr_sectors = 8 limit=40427
[  188.515449][ T4515] syz.4.174: attempt to access beyond end of device
[  188.515449][ T4515] loop4: rw=524288, sector=49208, nr_sectors = 8 limit=40427
[  188.517581][ T3638] EXT4-fs (loop2): unmounting filesystem.
[  188.529966][ T4515] syz.4.174: attempt to access beyond end of device
[  188.529966][ T4515] loop4: rw=524288, sector=49216, nr_sectors = 8 limit=40427
[  188.558372][ T4515] syz.4.174: attempt to access beyond end of device
[  188.558372][ T4515] loop4: rw=524288, sector=49224, nr_sectors = 8 limit=40427
[  189.617932][ T3653] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  189.635394][ T3653] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  189.643449][ T3653] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  189.663709][ T3653] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  189.676688][ T3653] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  189.684886][ T3653] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  189.696277][ T3653] Bluetooth: hci3: command tx timeout
[  189.718964][ T5109] netlink: 20 bytes leftover after parsing attributes in process `syz.2.279'.
[  191.136696][ T3654] Bluetooth: hci1: command 0x0406 tx timeout
[  191.775829][ T3654] Bluetooth: hci6: command tx timeout
[  191.781785][ T3654] Bluetooth: hci3: command tx timeout
[  192.818946][ T4515] bio_check_eod: 52112 callbacks suppressed
[  192.818968][ T4515] syz.4.174: attempt to access beyond end of device
[  192.818968][ T4515] loop4: rw=524288, sector=49152, nr_sectors = 8 limit=40427
[  192.917530][ T4515] syz.4.174: attempt to access beyond end of device
[  192.917530][ T4515] loop4: rw=524288, sector=49160, nr_sectors = 8 limit=40427
[  193.030642][ T4515] syz.4.174: attempt to access beyond end of device
[  193.030642][ T4515] loop4: rw=524288, sector=49168, nr_sectors = 8 limit=40427
[  193.109820][ T4515] syz.4.174: attempt to access beyond end of device
[  193.109820][ T4515] loop4: rw=524288, sector=49176, nr_sectors = 8 limit=40427
[  193.123956][ T4515] syz.4.174: attempt to access beyond end of device
[  193.123956][ T4515] loop4: rw=524288, sector=49184, nr_sectors = 8 limit=40427
[  193.138299][ T4515] syz.4.174: attempt to access beyond end of device
[  193.138299][ T4515] loop4: rw=524288, sector=49192, nr_sectors = 8 limit=40427
[  193.173746][ T4515] syz.4.174: attempt to access beyond end of device
[  193.173746][ T4515] loop4: rw=524288, sector=49200, nr_sectors = 8 limit=40427
[  193.220837][ T4515] syz.4.174: attempt to access beyond end of device
[  193.220837][ T4515] loop4: rw=524288, sector=49208, nr_sectors = 8 limit=40427
[  193.271565][ T4515] syz.4.174: attempt to access beyond end of device
[  193.271565][ T4515] loop4: rw=524288, sector=49216, nr_sectors = 8 limit=40427
[  193.302061][ T4515] syz.4.174: attempt to access beyond end of device
[  193.302061][ T4515] loop4: rw=524288, sector=49224, nr_sectors = 8 limit=40427
[  193.536380][ T5086] chnl_net:caif_netlink_parms(): no params data found
[  193.669022][ T5105] chnl_net:caif_netlink_parms(): no params data found
[  193.855489][ T3654] Bluetooth: hci3: command tx timeout
[  193.863167][   T48] Bluetooth: hci6: command tx timeout
[  193.933113][ T5138] loop0: detected capacity change from 0 to 128
[  194.152897][ T4484] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.177718][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  194.184086][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  194.414010][ T4484] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.520387][ T5086] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.529645][ T5086] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.555566][ T5086] device bridge_slave_0 entered promiscuous mode
[  194.587320][ T5086] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.594465][ T5086] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.626576][ T5086] device bridge_slave_1 entered promiscuous mode
[  194.730304][ T5086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  194.849529][ T4484] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.906620][ T5086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  194.935617][ T5105] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.942723][ T5105] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.964757][ T5105] device bridge_slave_0 entered promiscuous mode
[  195.122182][ T4484] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.305062][ T5105] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.312501][ T5105] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.343701][ T5105] device bridge_slave_1 entered promiscuous mode
[  195.581728][ T5086] team0: Port device team_slave_0 added
[  195.729813][ T4953] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  195.935383][   T48] Bluetooth: hci6: command tx timeout
[  195.942492][ T3654] Bluetooth: hci3: command tx timeout
[  196.016216][ T4953] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  196.067730][ T4953] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  196.108569][ T4953] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  196.194301][ T5151] loop0: detected capacity change from 0 to 40427
[  196.205796][ T5086] team0: Port device team_slave_1 added
[  196.245989][ T5105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  196.305133][ T5151] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  196.445532][ T5086] batman_adv: batadv0: Adding interface: batadv_slave_0
[  196.465652][ T5151] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  196.476543][ T5086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.525142][ T5151] F2FS-fs (loop0): invalid crc value
[  196.540664][ T5086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  196.554807][ T5086] batman_adv: batadv0: Adding interface: batadv_slave_1
[  196.562164][ T5086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.588365][ T5086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  196.616851][ T5105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  196.628515][ T5151] F2FS-fs (loop0): Found nat_bits in checkpoint
[  196.803101][ T5151] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  196.814753][ T5105] team0: Port device team_slave_0 added
[  196.821368][ T5151] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  196.842982][ T5105] team0: Port device team_slave_1 added
[  196.954822][   T26] audit: type=1800 audit(1726384188.113:6): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.284" name="bus" dev="loop0" ino=10 res=0 errno=0
[  197.241176][ T5105] batman_adv: batadv0: Adding interface: batadv_slave_0
[  197.255402][ T5105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.353226][ T5105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  197.374080][ T5169] loop2: detected capacity change from 0 to 164
[  197.399061][ T5169] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  197.471075][ T5169] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  197.483842][ T5086] device hsr_slave_0 entered promiscuous mode
[  197.512804][ T5169] iso9660: Corrupted directory entry in block 4 of inode 1792
[  197.522015][ T5086] device hsr_slave_1 entered promiscuous mode
[  197.555543][ T5086] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  197.573383][ T5086] Cannot create hsr debugfs directory
[  197.594186][ T5105] batman_adv: batadv0: Adding interface: batadv_slave_1
[  197.605296][ T5105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.705290][ T5105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  197.825652][ T4515] bio_check_eod: 27935 callbacks suppressed
[  197.825669][ T4515] syz.4.174: attempt to access beyond end of device
[  197.825669][ T4515] loop4: rw=524288, sector=51936, nr_sectors = 8 limit=40427
[  197.879314][ T5183] netlink: 20 bytes leftover after parsing attributes in process `syz.0.287'.
[  197.889403][ T4515] syz.4.174: attempt to access beyond end of device
[  197.889403][ T4515] loop4: rw=524288, sector=51944, nr_sectors = 8 limit=40427
[  197.911926][ T4515] syz.4.174: attempt to access beyond end of device
[  197.911926][ T4515] loop4: rw=524288, sector=51952, nr_sectors = 8 limit=40427
[  197.953959][ T4515] syz.4.174: attempt to access beyond end of device
[  197.953959][ T4515] loop4: rw=524288, sector=51960, nr_sectors = 8 limit=40427
[  197.992074][ T4515] syz.4.174: attempt to access beyond end of device
[  197.992074][ T4515] loop4: rw=524288, sector=51968, nr_sectors = 8 limit=40427
[  198.015719][ T3654] Bluetooth: hci6: command tx timeout
[  198.016170][ T4515] syz.4.174: attempt to access beyond end of device
[  198.016170][ T4515] loop4: rw=524288, sector=51976, nr_sectors = 8 limit=40427
[  198.060233][ T4515] syz.4.174: attempt to access beyond end of device
[  198.060233][ T4515] loop4: rw=524288, sector=51984, nr_sectors = 8 limit=40427
[  198.119670][ T5105] device hsr_slave_0 entered promiscuous mode
[  198.124453][ T4515] syz.4.174: attempt to access beyond end of device
[  198.124453][ T4515] loop4: rw=524288, sector=51992, nr_sectors = 8 limit=40427
[  198.140464][ T5105] device hsr_slave_1 entered promiscuous mode
[  198.156300][ T5105] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  198.170269][ T5105] Cannot create hsr debugfs directory
[  198.179274][ T4515] syz.4.174: attempt to access beyond end of device
[  198.179274][ T4515] loop4: rw=524288, sector=52000, nr_sectors = 8 limit=40427
[  198.250490][ T4515] syz.4.174: attempt to access beyond end of device
[  198.250490][ T4515] loop4: rw=524288, sector=52008, nr_sectors = 8 limit=40427
[  198.449966][ T4953] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.108753][ T5200] loop0: detected capacity change from 0 to 128
[  199.818889][   T26] audit: type=1804 audit(1726384190.983:7): pid=5210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.292" name="/newroot/35/file0" dev="fuse" ino=1 res=1 errno=0
[  201.242581][ T5217] loop0: detected capacity change from 0 to 512
[  201.300886][ T5217] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  201.325443][ T5217] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038 (0x7fffffff)
[  202.277821][ T4456] EXT4-fs (loop0): unmounting filesystem.
[  202.839944][ T4515] bio_check_eod: 35965 callbacks suppressed
[  202.839968][ T4515] syz.4.174: attempt to access beyond end of device
[  202.839968][ T4515] loop4: rw=0, sector=49472, nr_sectors = 8 limit=40427
[  202.860073][ T4515] syz.4.174: attempt to access beyond end of device
[  202.860073][ T4515] loop4: rw=0, sector=49480, nr_sectors = 8 limit=40427
[  202.876278][ T4515] syz.4.174: attempt to access beyond end of device
[  202.876278][ T4515] loop4: rw=0, sector=49488, nr_sectors = 8 limit=40427
[  202.889907][ T4515] syz.4.174: attempt to access beyond end of device
[  202.889907][ T4515] loop4: rw=0, sector=49496, nr_sectors = 8 limit=40427
[  202.903862][ T4515] syz.4.174: attempt to access beyond end of device
[  202.903862][ T4515] loop4: rw=0, sector=49504, nr_sectors = 8 limit=40427
[  202.917602][ T4515] syz.4.174: attempt to access beyond end of device
[  202.917602][ T4515] loop4: rw=0, sector=49512, nr_sectors = 8 limit=40427
[  202.931140][ T4515] syz.4.174: attempt to access beyond end of device
[  202.931140][ T4515] loop4: rw=0, sector=49520, nr_sectors = 8 limit=40427
[  202.945007][ T4515] syz.4.174: attempt to access beyond end of device
[  202.945007][ T4515] loop4: rw=0, sector=49528, nr_sectors = 8 limit=40427
[  202.968438][ T4515] syz.4.174: attempt to access beyond end of device
[  202.968438][ T4515] loop4: rw=0, sector=49536, nr_sectors = 8 limit=40427
[  202.983385][ T4515] syz.4.174: attempt to access beyond end of device
[  202.983385][ T4515] loop4: rw=0, sector=49544, nr_sectors = 8 limit=40427
[  203.454430][ T5227] loop0: detected capacity change from 0 to 1024
[  203.765372][ T4420] hfsplus: b-tree write err: -5, ino 4
[  205.516435][ T5232] loop0: detected capacity change from 0 to 32768
[  205.584763][ T5232] JBD2: Ignoring recovery information on journal
[  205.668485][ T5232] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  205.897606][ T4456] ocfs2: Unmounting device (7,0) on (node local)
[  205.926797][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  205.946031][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  206.028789][ T4953] 8021q: adding VLAN 0 to HW filter on device team0
[  206.119775][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  206.136227][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  206.165926][ T3758] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.173122][ T3758] bridge0: port 1(bridge_slave_0) entered forwarding state
[  206.380585][ T5243] loop0: detected capacity change from 0 to 128
[  207.037153][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  207.171223][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  207.216370][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  207.263942][ T3758] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.271240][ T3758] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.313480][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  207.342332][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  207.352497][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  207.363370][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  207.387088][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  207.456911][ T5253] serio: Serial port ptm0
[  207.519111][ T5258] loop2: detected capacity change from 0 to 164
[  207.560709][ T5258] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  207.594706][ T5086] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.607008][ T5258] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  207.645868][ T5258] iso9660: Corrupted directory entry in block 4 of inode 1792
[  207.669138][ T5258] Cannot find del_set index 0 as target
[  207.751665][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  207.777020][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  207.847748][ T4515] bio_check_eod: 38744 callbacks suppressed
[  207.847768][ T4515] syz.4.174: attempt to access beyond end of device
[  207.847768][ T4515] loop4: rw=524288, sector=52888, nr_sectors = 8 limit=40427
[  207.905885][ T4515] syz.4.174: attempt to access beyond end of device
[  207.905885][ T4515] loop4: rw=524288, sector=52896, nr_sectors = 8 limit=40427
[  207.926615][ T4515] syz.4.174: attempt to access beyond end of device
[  207.926615][ T4515] loop4: rw=524288, sector=52904, nr_sectors = 8 limit=40427
[  207.957060][ T4515] syz.4.174: attempt to access beyond end of device
[  207.957060][ T4515] loop4: rw=524288, sector=52912, nr_sectors = 8 limit=40427
[  207.982437][ T4515] syz.4.174: attempt to access beyond end of device
[  207.982437][ T4515] loop4: rw=524288, sector=52920, nr_sectors = 8 limit=40427
[  208.019400][ T4515] syz.4.174: attempt to access beyond end of device
[  208.019400][ T4515] loop4: rw=524288, sector=52928, nr_sectors = 8 limit=40427
[  208.050378][ T4515] syz.4.174: attempt to access beyond end of device
[  208.050378][ T4515] loop4: rw=524288, sector=52936, nr_sectors = 8 limit=40427
[  208.080388][ T4515] syz.4.174: attempt to access beyond end of device
[  208.080388][ T4515] loop4: rw=524288, sector=52944, nr_sectors = 8 limit=40427
[  208.128873][ T4515] syz.4.174: attempt to access beyond end of device
[  208.128873][ T4515] loop4: rw=524288, sector=52952, nr_sectors = 8 limit=40427
[  208.147765][ T5086] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.158423][ T4515] syz.4.174: attempt to access beyond end of device
[  208.158423][ T4515] loop4: rw=524288, sector=52960, nr_sectors = 8 limit=40427
[  208.181892][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  208.236114][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  208.265491][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  208.287335][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  208.324637][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  208.524829][ T5086] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.996287][ T5086] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.655382][ T3687] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  210.919339][ T3687] usb 1-1: Using ep0 maxpacket: 16
[  211.046188][ T3687] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.066958][ T3687] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  211.083989][ T3687] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  211.095649][ T3687] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  211.105851][ T3687] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  211.115919][ T3687] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  211.293804][ T3687] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  211.315330][ T3687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.323370][ T3687] usb 1-1: Product: syz
[  211.339159][ T3687] usb 1-1: Manufacturer: syz
[  211.343804][ T3687] usb 1-1: SerialNumber: syz
[  211.635460][ T3687] cdc_ncm 1-1:1.0: bind() failure
[  211.656056][ T3687] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  211.674074][ T3687] cdc_ncm 1-1:1.1: bind() failure
[  211.699233][ T3687] usb 1-1: USB disconnect, device number 2
[  211.855419][   T48] Bluetooth: hci2: command 0x0406 tx timeout
[  212.855715][ T4515] bio_check_eod: 45595 callbacks suppressed
[  212.855801][ T4515] syz.4.174: attempt to access beyond end of device
[  212.855801][ T4515] loop4: rw=524288, sector=49808, nr_sectors = 8 limit=40427
[  212.998402][ T4515] syz.4.174: attempt to access beyond end of device
[  212.998402][ T4515] loop4: rw=524288, sector=49816, nr_sectors = 8 limit=40427
[  213.109999][ T4515] syz.4.174: attempt to access beyond end of device
[  213.109999][ T4515] loop4: rw=524288, sector=49824, nr_sectors = 8 limit=40427
[  213.208509][ T4515] syz.4.174: attempt to access beyond end of device
[  213.208509][ T4515] loop4: rw=524288, sector=49832, nr_sectors = 8 limit=40427
[  213.311927][ T4515] syz.4.174: attempt to access beyond end of device
[  213.311927][ T4515] loop4: rw=524288, sector=49840, nr_sectors = 8 limit=40427
[  213.354332][ T4515] syz.4.174: attempt to access beyond end of device
[  213.354332][ T4515] loop4: rw=524288, sector=49848, nr_sectors = 8 limit=40427
[  213.380320][ T4515] syz.4.174: attempt to access beyond end of device
[  213.380320][ T4515] loop4: rw=524288, sector=49856, nr_sectors = 8 limit=40427
[  213.395021][ T4515] syz.4.174: attempt to access beyond end of device
[  213.395021][ T4515] loop4: rw=524288, sector=49864, nr_sectors = 8 limit=40427
[  213.412126][ T4515] syz.4.174: attempt to access beyond end of device
[  213.412126][ T4515] loop4: rw=524288, sector=49872, nr_sectors = 8 limit=40427
[  213.426535][ T4515] syz.4.174: attempt to access beyond end of device
[  213.426535][ T4515] loop4: rw=524288, sector=49880, nr_sectors = 8 limit=40427
[  213.503178][ T5307] loop0: detected capacity change from 0 to 128
[  214.813944][ T5314] loop0: detected capacity change from 0 to 32768
[  214.915150][ T5314] XFS (loop0): Mounting V5 Filesystem
[  215.026735][ T5314] XFS (loop0): Ending clean mount
[  215.066632][ T5314] XFS (loop0): Quotacheck needed: Please wait.
[  215.144610][ T5314] XFS (loop0): Quotacheck: Done.
[  215.207591][ T4484] device hsr_slave_0 left promiscuous mode
[  215.216339][ T4484] device hsr_slave_1 left promiscuous mode
[  215.231971][ T4484] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  215.248916][ T4484] batman_adv: batadv0: Removing interface: batadv_slave_0
[  215.248966][ T5314] XFS (loop0): User initiated shutdown received.
[  215.287068][ T4484] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  215.294542][ T4484] batman_adv: batadv0: Removing interface: batadv_slave_1
[  215.325681][ T5314] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x10c/0x150 (fs/xfs/xfs_fsops.c:481).  Shutting down filesystem.
[  215.340606][ T4484] device bridge_slave_1 left promiscuous mode
[  215.356299][ T5314] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  215.360128][ T4484] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.396071][ T4484] device bridge_slave_0 left promiscuous mode
[  215.402460][ T4484] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.545978][ T4484] device veth1_macvtap left promiscuous mode
[  215.552066][ T4484] device veth0_macvtap left promiscuous mode
[  215.571775][ T4484] device veth1_vlan left promiscuous mode
[  215.578790][ T4456] XFS (loop0): Unmounting Filesystem
[  215.579509][ T4484] device veth0_vlan left promiscuous mode
[  215.752730][ T5327] loop2: detected capacity change from 0 to 1024
[  215.885752][ T5327] hfsplus: request for non-existent node 2048 in B*Tree
[  215.892853][ T5327] hfsplus: request for non-existent node 2048 in B*Tree
[  216.896702][ T5331] loop0: detected capacity change from 0 to 1024
[  216.923146][ T5331] hfsplus: request for non-existent node 2048 in B*Tree
[  216.930665][ T5331] hfsplus: request for non-existent node 2048 in B*Tree
[  217.187141][ T4484] team0 (unregistering): Port device team_slave_1 removed
[  217.264365][ T4484] team0 (unregistering): Port device team_slave_0 removed
[  217.323677][ T4484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  217.398177][ T4484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  217.873859][ T4515] bio_check_eod: 46329 callbacks suppressed
[  217.873881][ T4515] syz.4.174: attempt to access beyond end of device
[  217.873881][ T4515] loop4: rw=524288, sector=52584, nr_sectors = 8 limit=40427
[  217.894307][ T4515] syz.4.174: attempt to access beyond end of device
[  217.894307][ T4515] loop4: rw=524288, sector=52592, nr_sectors = 8 limit=40427
[  217.908771][ T4515] syz.4.174: attempt to access beyond end of device
[  217.908771][ T4515] loop4: rw=524288, sector=52600, nr_sectors = 8 limit=40427
[  217.923008][ T4515] syz.4.174: attempt to access beyond end of device
[  217.923008][ T4515] loop4: rw=524288, sector=52608, nr_sectors = 8 limit=40427
[  217.937500][ T4515] syz.4.174: attempt to access beyond end of device
[  217.937500][ T4515] loop4: rw=524288, sector=52616, nr_sectors = 8 limit=40427
[  217.951544][ T3687] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  217.952459][ T4515] syz.4.174: attempt to access beyond end of device
[  217.952459][ T4515] loop4: rw=524288, sector=52624, nr_sectors = 8 limit=40427
[  217.983092][ T4515] syz.4.174: attempt to access beyond end of device
[  217.983092][ T4515] loop4: rw=524288, sector=52632, nr_sectors = 8 limit=40427
[  217.998567][ T4515] syz.4.174: attempt to access beyond end of device
[  217.998567][ T4515] loop4: rw=524288, sector=52640, nr_sectors = 8 limit=40427
[  218.012690][ T4515] syz.4.174: attempt to access beyond end of device
[  218.012690][ T4515] loop4: rw=524288, sector=52648, nr_sectors = 8 limit=40427
[  218.029449][ T4515] syz.4.174: attempt to access beyond end of device
[  218.029449][ T4515] loop4: rw=524288, sector=52656, nr_sectors = 8 limit=40427
[  218.225510][ T3687] usb 1-1: Using ep0 maxpacket: 16
[  218.355513][ T3687] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  218.375460][ T3687] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  218.394417][ T3687] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  218.404430][ T3687] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  218.423583][ T3687] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  218.433394][ T3687] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  218.584813][ T4484] bond0 (unregistering): Released all slaves
[  218.595668][ T3687] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  218.604751][ T3687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.625301][ T3687] usb 1-1: Product: syz
[  218.631080][ T3687] usb 1-1: Manufacturer: syz
[  218.635930][ T3687] usb 1-1: SerialNumber: syz
[  218.935438][ T3687] cdc_ncm 1-1:1.0: bind() failure
[  218.943755][ T3687] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  218.966963][ T3687] cdc_ncm 1-1:1.1: bind() failure
[  218.968490][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  218.987485][ T3687] usb 1-1: USB disconnect, device number 3
[  219.015540][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  219.048299][ T4953] 8021q: adding VLAN 0 to HW filter on device batadv0
[  219.080128][ T5086] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  219.156198][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  219.165037][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  219.187657][ T5086] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  219.235008][ T5086] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  219.273226][ T5086] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  219.287932][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  219.316437][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  219.370660][ T4953] device veth0_vlan entered promiscuous mode
[  219.404238][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  219.442862][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  219.599972][ T4953] device veth1_vlan entered promiscuous mode
[  219.739235][ T4953] device veth0_macvtap entered promiscuous mode
[  219.768418][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  219.797623][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  219.814699][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  219.843116][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  219.870660][ T5347] loop0: detected capacity change from 0 to 8192
[  219.890503][ T4953] device veth1_macvtap entered promiscuous mode
[  219.934291][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  219.983485][ T5347] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  220.022372][ T5347] FAT-fs (loop0): Filesystem has been set read-only
[  220.052547][ T5086] 8021q: adding VLAN 0 to HW filter on device bond0
[  220.084598][ T5086] 8021q: adding VLAN 0 to HW filter on device team0
[  220.115876][ T4953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  220.137192][ T4953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.153040][ T4953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  220.191942][ T4953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.222499][ T4953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  220.249638][ T4953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.268312][ T4953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  220.289168][ T4953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.318341][ T4953] batman_adv: batadv0: Interface activated: batadv_slave_0
[  220.352146][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  220.368445][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  220.378789][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  220.389568][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  220.398891][ T3754] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.406057][ T3754] bridge0: port 1(bridge_slave_0) entered forwarding state
[  220.466149][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  220.492089][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  220.516144][ T3754] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.523417][ T3754] bridge0: port 2(bridge_slave_1) entered forwarding state
[  220.545811][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  220.554838][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  220.577355][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  220.596426][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  220.628116][ T4953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  220.660226][ T4953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.694362][ T4953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  220.705043][ T4953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.722937][ T4953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  220.751889][ T4953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.867685][ T4953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  220.894646][ T4953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.931424][ T4953] batman_adv: batadv0: Interface activated: batadv_slave_1
[  220.971158][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  220.981680][ T3690] hfsplus: delayed sync fs err -2
[  220.991294][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  221.001426][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  221.016638][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  221.033097][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  221.504306][ T5086] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  221.638815][ T5086] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  221.808560][ T4953] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  221.837803][ T4953] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  221.873011][ T4953] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  221.882532][ T4953] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  221.905979][ T5360] loop0: detected capacity change from 0 to 128
[  221.947152][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  221.965057][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  222.036647][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  222.055622][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  222.066428][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  222.079334][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  222.105510][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  222.116920][ T5105] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  222.157809][ T5105] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  222.189718][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  222.214177][ T5105] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  222.249208][ T5105] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  223.176408][ T4515] bio_check_eod: 38399 callbacks suppressed
[  223.176429][ T4515] syz.4.174: attempt to access beyond end of device
[  223.176429][ T4515] loop4: rw=524288, sector=49152, nr_sectors = 8 limit=40427
[  223.256039][ T4515] syz.4.174: attempt to access beyond end of device
[  223.256039][ T4515] loop4: rw=524288, sector=49160, nr_sectors = 8 limit=40427
[  223.273957][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  223.286476][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  223.307816][ T5086] 8021q: adding VLAN 0 to HW filter on device batadv0
[  223.336331][ T4515] syz.4.174: attempt to access beyond end of device
[  223.336331][ T4515] loop4: rw=524288, sector=49168, nr_sectors = 8 limit=40427
[  223.353062][ T3757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.369069][ T3757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.417648][ T4515] syz.4.174: attempt to access beyond end of device
[  223.417648][ T4515] loop4: rw=524288, sector=49176, nr_sectors = 8 limit=40427
[  223.441110][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  223.467339][ T4515] syz.4.174: attempt to access beyond end of device
[  223.467339][ T4515] loop4: rw=524288, sector=49184, nr_sectors = 8 limit=40427
[  223.522208][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.525632][ T4515] syz.4.174: attempt to access beyond end of device
[  223.525632][ T4515] loop4: rw=524288, sector=49192, nr_sectors = 8 limit=40427
[  223.790742][ T4515] syz.4.174: attempt to access beyond end of device
[  223.790742][ T4515] loop4: rw=524288, sector=49200, nr_sectors = 8 limit=40427
[  224.911243][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  224.929299][ T4515] syz.4.174: attempt to access beyond end of device
[  224.929299][ T4515] loop4: rw=524288, sector=49208, nr_sectors = 8 limit=40427
[  224.973520][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  225.025347][ T4515] syz.4.174: attempt to access beyond end of device
[  225.025347][ T4515] loop4: rw=524288, sector=49216, nr_sectors = 8 limit=40427
[  225.068123][ T4515] syz.4.174: attempt to access beyond end of device
[  225.068123][ T4515] loop4: rw=524288, sector=49224, nr_sectors = 8 limit=40427
[  225.092316][ T5105] 8021q: adding VLAN 0 to HW filter on device bond0
[  225.203178][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  225.238436][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  225.300082][ T5105] 8021q: adding VLAN 0 to HW filter on device team0
[  225.363620][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  225.397511][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  225.419119][ T3761] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.426386][ T3761] bridge0: port 1(bridge_slave_0) entered forwarding state
[  225.555453][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  225.596146][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  225.613893][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  225.658891][ T3761] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.666070][ T3761] bridge0: port 2(bridge_slave_1) entered forwarding state
[  225.729267][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  225.797089][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  225.847985][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  225.894605][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  225.967027][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  226.001566][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  226.050068][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  226.092175][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  226.130180][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  226.205979][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  226.243284][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  226.280501][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  226.329567][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  226.367822][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  226.393013][   T48] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  226.403189][   T48] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  226.411939][   T48] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  226.421535][   T48] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  226.432453][   T48] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  226.442067][   T48] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  226.511965][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  226.547681][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  226.563991][ T5386] loop0: detected capacity change from 0 to 32768
[  226.604580][ T5086] device veth0_vlan entered promiscuous mode
[  226.642714][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  226.676653][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  226.808570][ T5086] device veth1_vlan entered promiscuous mode
[  226.820556][ T5386] XFS (loop0): Mounting V5 Filesystem
[  227.064789][ T5386] XFS (loop0): Ending clean mount
[  227.069254][ T5086] device veth0_macvtap entered promiscuous mode
[  227.082004][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  227.097133][ T5386] XFS (loop0): Quotacheck needed: Please wait.
[  227.101678][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  227.143003][ T5086] device veth1_macvtap entered promiscuous mode
[  227.167284][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  227.177476][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  227.208982][ T5386] XFS (loop0): Quotacheck: Done.
[  227.214962][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  227.287714][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.327935][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  227.355257][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.372410][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  227.395921][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.417116][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  227.440064][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.463887][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  227.495279][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.517392][ T5086] batman_adv: batadv0: Interface activated: batadv_slave_0
[  227.526005][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  227.546807][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  227.583548][ T5386] XFS (loop0): User initiated shutdown received.
[  227.593767][ T5401] chnl_net:caif_netlink_parms(): no params data found
[  227.605444][ T5386] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x10c/0x150 (fs/xfs/xfs_fsops.c:481).  Shutting down filesystem.
[  227.632384][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  227.651772][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.672870][ T5386] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  227.693094][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  227.735349][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.745660][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  227.775060][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.794334][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  227.814184][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.824269][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  227.843285][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.853855][ T4456] XFS (loop0): Unmounting Filesystem
[  227.855151][ T5086] batman_adv: batadv0: Interface activated: batadv_slave_1
[  227.869513][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  227.888297][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  227.897314][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  227.912761][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  227.930662][ T5105] 8021q: adding VLAN 0 to HW filter on device batadv0
[  227.951223][ T5086] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  227.968087][ T5421] loop1: detected capacity change from 0 to 128
[  227.974451][ T5086] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  227.996826][ T5086] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  228.010231][ T5086] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  228.195927][ T4515] bio_check_eod: 18993 callbacks suppressed
[  228.195944][ T4515] syz.4.174: attempt to access beyond end of device
[  228.195944][ T4515] loop4: rw=0, sector=49904, nr_sectors = 8 limit=40427
[  228.216089][ T4515] syz.4.174: attempt to access beyond end of device
[  228.216089][ T4515] loop4: rw=0, sector=49912, nr_sectors = 8 limit=40427
[  228.231429][ T4515] syz.4.174: attempt to access beyond end of device
[  228.231429][ T4515] loop4: rw=0, sector=49920, nr_sectors = 8 limit=40427
[  228.245628][ T4515] syz.4.174: attempt to access beyond end of device
[  228.245628][ T4515] loop4: rw=0, sector=49928, nr_sectors = 8 limit=40427
[  228.274883][ T4515] syz.4.174: attempt to access beyond end of device
[  228.274883][ T4515] loop4: rw=0, sector=49936, nr_sectors = 8 limit=40427
[  228.289020][ T4515] syz.4.174: attempt to access beyond end of device
[  228.289020][ T4515] loop4: rw=0, sector=49944, nr_sectors = 8 limit=40427
[  228.305913][ T5401] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.313339][ T5401] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.339182][ T4515] syz.4.174: attempt to access beyond end of device
[  228.339182][ T4515] loop4: rw=0, sector=49952, nr_sectors = 8 limit=40427
[  228.355033][ T5401] device bridge_slave_0 entered promiscuous mode
[  228.372070][ T4515] syz.4.174: attempt to access beyond end of device
[  228.372070][ T4515] loop4: rw=0, sector=49960, nr_sectors = 8 limit=40427
[  228.401522][ T4515] syz.4.174: attempt to access beyond end of device
[  228.401522][ T4515] loop4: rw=0, sector=49968, nr_sectors = 8 limit=40427
[  228.427716][ T4515] syz.4.174: attempt to access beyond end of device
[  228.427716][ T4515] loop4: rw=0, sector=49976, nr_sectors = 8 limit=40427
[  228.445746][ T5401] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.452864][ T5401] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.467581][ T5427] netlink: 20 bytes leftover after parsing attributes in process `syz.1.327'.
[  228.471026][ T5401] device bridge_slave_1 entered promiscuous mode
[  228.495759][   T48] Bluetooth: hci7: command tx timeout
[  228.505734][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  228.514599][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  228.679023][ T5105] device veth0_vlan entered promiscuous mode
[  228.747315][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  228.758201][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  228.777491][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  228.797996][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  228.826964][ T5401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  228.866140][ T4484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.877486][ T5401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  228.879612][ T4484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.981988][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  229.044196][ T5105] device veth1_vlan entered promiscuous mode
[  229.130488][ T5401] team0: Port device team_slave_0 added
[  229.208986][ T5435] Bluetooth: MGMT ver 1.22
[  229.344759][ T5401] team0: Port device team_slave_1 added
[  229.837152][ T5401] batman_adv: batadv0: Adding interface: batadv_slave_0
[  229.844142][ T5401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  229.915688][ T5401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  229.942915][ T5401] batman_adv: batadv0: Adding interface: batadv_slave_1
[  229.951324][ T5401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  229.962393][ T3758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  229.985521][ T5401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  230.595444][   T48] Bluetooth: hci7: command tx timeout
[  231.617000][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  231.670094][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  231.727734][ T5105] device veth0_macvtap entered promiscuous mode
[  231.751262][ T3758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.810449][ T5105] device veth1_macvtap entered promiscuous mode
[  231.827341][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  231.846132][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  231.876559][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  231.889234][ T5401] device hsr_slave_0 entered promiscuous mode
[  231.907779][ T5401] device hsr_slave_1 entered promiscuous mode
[  231.914576][ T5401] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  231.931746][ T5401] Cannot create hsr debugfs directory
[  231.946740][ T4609] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  231.961831][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.001532][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.032574][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.064432][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.093456][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.127428][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.145277][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.184900][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.214359][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.225439][ T4609] usb 1-1: Using ep0 maxpacket: 16
[  232.253596][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.275422][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.305304][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.327694][ T5105] batman_adv: batadv0: Interface activated: batadv_slave_0
[  232.355470][ T4609] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  232.382672][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  232.390723][ T4609] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  232.407602][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  232.434665][ T4609] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  232.437195][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.475303][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.484822][ T4609] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  232.485143][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.524080][ T4609] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  232.525310][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.561247][ T4609] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  232.564021][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.615301][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.644079][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.684993][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.715243][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.735764][   T48] Bluetooth: hci7: command tx timeout
[  232.755415][ T4609] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  232.764531][ T4609] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.774043][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.804302][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.844187][ T4609] usb 1-1: Product: syz
[  232.849667][ T4609] usb 1-1: Manufacturer: syz
[  232.854304][ T4609] usb 1-1: SerialNumber: syz
[  232.865212][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.904035][ T5105] batman_adv: batadv0: Interface activated: batadv_slave_1
[  232.929647][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  232.949929][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  233.006437][ T5105] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  233.025239][ T5105] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  233.034123][ T5105] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  233.053928][ T5105] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  233.175627][ T4609] cdc_ncm 1-1:1.0: bind() failure
[  233.193318][ T4609] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  233.210745][ T4609] cdc_ncm 1-1:1.1: bind() failure
[  233.217369][ T4515] bio_check_eod: 16788 callbacks suppressed
[  233.217387][ T4515] syz.4.174: attempt to access beyond end of device
[  233.217387][ T4515] loop4: rw=524288, sector=49384, nr_sectors = 8 limit=40427
[  233.242007][ T4609] usb 1-1: USB disconnect, device number 4
[  233.295500][ T4515] syz.4.174: attempt to access beyond end of device
[  233.295500][ T4515] loop4: rw=524288, sector=49392, nr_sectors = 8 limit=40427
[  233.366588][ T4515] syz.4.174: attempt to access beyond end of device
[  233.366588][ T4515] loop4: rw=524288, sector=49400, nr_sectors = 8 limit=40427
[  233.425669][ T4515] syz.4.174: attempt to access beyond end of device
[  233.425669][ T4515] loop4: rw=524288, sector=49408, nr_sectors = 8 limit=40427
[  233.453982][ T5401] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.499183][ T4515] syz.4.174: attempt to access beyond end of device
[  233.499183][ T4515] loop4: rw=524288, sector=49416, nr_sectors = 8 limit=40427
[  233.533343][ T3761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.554459][ T3761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  233.564554][ T4515] syz.4.174: attempt to access beyond end of device
[  233.564554][ T4515] loop4: rw=524288, sector=49424, nr_sectors = 8 limit=40427
[  233.634228][ T4515] syz.4.174: attempt to access beyond end of device
[  233.634228][ T4515] loop4: rw=524288, sector=49432, nr_sectors = 8 limit=40427
[  233.665680][ T4515] syz.4.174: attempt to access beyond end of device
[  233.665680][ T4515] loop4: rw=524288, sector=49440, nr_sectors = 8 limit=40427
[  233.683630][ T5401] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.782447][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  233.786104][ T4515] syz.4.174: attempt to access beyond end of device
[  233.786104][ T4515] loop4: rw=524288, sector=49448, nr_sectors = 8 limit=40427
[  233.813817][ T3758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.825826][ T3758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  233.849871][ T4515] syz.4.174: attempt to access beyond end of device
[  233.849871][ T4515] loop4: rw=524288, sector=49456, nr_sectors = 8 limit=40427
[  233.949677][ T5401] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.987037][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  234.197838][ T5401] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.209232][ T5459] loop1: detected capacity change from 0 to 64
[  234.636967][ T5401] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  234.686989][ T5401] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  234.706423][ T5401] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  234.730377][ T5401] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  234.815871][   T48] Bluetooth: hci7: command tx timeout
[  234.994259][ T5401] 8021q: adding VLAN 0 to HW filter on device bond0
[  235.035348][ T5453] loop0: detected capacity change from 0 to 32768
[  235.070385][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  235.120561][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  235.182019][ T5401] 8021q: adding VLAN 0 to HW filter on device team0
[  235.217318][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  235.232021][ T5453] XFS (loop0): Mounting V5 Filesystem
[  235.267340][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  235.307532][ T5026] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.314698][ T5026] bridge0: port 1(bridge_slave_0) entered forwarding state
[  235.367415][ T5457] loop3: detected capacity change from 0 to 32768
[  235.434512][ T4720] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (4720)
[  235.456822][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  235.464863][ T5453] XFS (loop0): Ending clean mount
[  235.595229][ T5479] loop1: detected capacity change from 0 to 1024
[  235.715855][ T5453] XFS (loop0): Quotacheck needed: Please wait.
[  235.731777][ T5479] hfsplus: request for non-existent node 2048 in B*Tree
[  235.738964][ T5479] hfsplus: request for non-existent node 2048 in B*Tree
[  236.146246][ T5457] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  236.161601][ T5481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  236.198320][ T5457] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  236.199579][ T5481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  236.218179][ T5457] BTRFS info (device loop3): using free space tree
[  236.241384][ T5481] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.243637][ T5453] XFS (loop0): Quotacheck: Done.
[  236.248558][ T5481] bridge0: port 2(bridge_slave_1) entered forwarding state
[  236.257315][ T5481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  236.280444][ T5481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  236.301100][ T5481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  236.371280][ T5481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  236.418373][ T5481] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  236.464870][ T5453] XFS (loop0): User initiated shutdown received.
[  236.485048][ T5453] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x10c/0x150 (fs/xfs/xfs_fsops.c:481).  Shutting down filesystem.
[  236.527409][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  236.545326][ T5457] BTRFS info (device loop3): enabling ssd optimizations
[  236.566820][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  236.578638][ T5453] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  236.593331][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  236.642850][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  236.651305][ T4456] XFS (loop0): Unmounting Filesystem
[  236.704892][ T5481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  236.724056][ T5481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  236.761043][ T5401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  236.860010][ T5105] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  238.229344][ T4515] bio_check_eod: 9575 callbacks suppressed
[  238.229364][ T4515] syz.4.174: attempt to access beyond end of device
[  238.229364][ T4515] loop4: rw=524288, sector=52480, nr_sectors = 8 limit=40427
[  238.285160][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  238.293334][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  238.331131][ T5401] 8021q: adding VLAN 0 to HW filter on device batadv0
[  238.365422][ T4515] syz.4.174: attempt to access beyond end of device
[  238.365422][ T4515] loop4: rw=524288, sector=52488, nr_sectors = 8 limit=40427
[  238.463879][ T4515] syz.4.174: attempt to access beyond end of device
[  238.463879][ T4515] loop4: rw=524288, sector=52496, nr_sectors = 8 limit=40427
[  238.551265][ T5519] loop3: detected capacity change from 0 to 128
[  238.569662][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  238.684891][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  238.806445][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  238.941637][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  239.050788][ T4515] syz.4.174: attempt to access beyond end of device
[  239.050788][ T4515] loop4: rw=524288, sector=52504, nr_sectors = 8 limit=40427
[  239.095079][ T5519] device wg1 entered promiscuous mode
[  239.113379][ T5401] device veth0_vlan entered promiscuous mode
[  239.257851][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  239.277762][ T2527] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  239.316412][ T4515] syz.4.174: attempt to access beyond end of device
[  239.316412][ T4515] loop4: rw=524288, sector=52512, nr_sectors = 8 limit=40427
[  239.324185][ T5401] device veth1_vlan entered promiscuous mode
[  239.368529][ T4515] syz.4.174: attempt to access beyond end of device
[  239.368529][ T4515] loop4: rw=524288, sector=52520, nr_sectors = 8 limit=40427
[  239.424592][ T5524] loop0: detected capacity change from 0 to 512
[  239.431988][ T4515] syz.4.174: attempt to access beyond end of device
[  239.431988][ T4515] loop4: rw=524288, sector=52528, nr_sectors = 8 limit=40427
[  239.452650][ T5401] device veth0_macvtap entered promiscuous mode
[  239.469406][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  239.506236][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  239.517409][ T5524] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  239.525940][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  239.537367][ T5524] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038 (0x7fffffff)
[  239.592116][ T5531] loop3: detected capacity change from 0 to 16
[  239.669805][ T5531] erofs: (device loop3): mounted with root inode @ nid 36.
[  239.719109][ T4515] syz.4.174: attempt to access beyond end of device
[  239.719109][ T4515] loop4: rw=524288, sector=52536, nr_sectors = 8 limit=40427
[  239.905860][ T5401] device veth1_macvtap entered promiscuous mode
[  240.246529][ T4515] syz.4.174: attempt to access beyond end of device
[  240.246529][ T4515] loop4: rw=524288, sector=52544, nr_sectors = 8 limit=40427
[  240.325631][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  240.377546][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.415649][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.443403][ T4515] syz.4.174: attempt to access beyond end of device
[  240.443403][ T4515] loop4: rw=524288, sector=52552, nr_sectors = 8 limit=40427
[  240.454975][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.503008][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.535336][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.570205][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.604319][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.638906][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.665363][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.695287][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.715423][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.738642][ T3690] hfsplus: delayed sync fs err -5
[  240.755261][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.785275][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.805245][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.839221][ T5401] batman_adv: batadv0: Interface activated: batadv_slave_0
[  240.867292][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.897489][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.917706][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.934154][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.953384][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.965514][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.976359][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.987039][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.998429][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  241.008984][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.018919][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  241.035594][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.051273][ T5401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  241.069688][ T5401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.087595][ T5401] batman_adv: batadv0: Interface activated: batadv_slave_1
[  241.106958][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  241.116612][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  241.155707][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  241.187093][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  241.227210][ T5401] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  241.255277][ T5401] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  241.264028][ T5401] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  241.305284][ T5401] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  241.468492][ T5481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.514307][ T5481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.567205][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  241.591483][ T3754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.610152][ T3754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.634121][ T5481] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  242.519132][ T4456] EXT4-fs (loop0): unmounting filesystem.
[  243.243304][ T4515] bio_check_eod: 11838 callbacks suppressed
[  243.243328][ T4515] syz.4.174: attempt to access beyond end of device
[  243.243328][ T4515] loop4: rw=524288, sector=49152, nr_sectors = 8 limit=40427
[  243.326794][ T4515] syz.4.174: attempt to access beyond end of device
[  243.326794][ T4515] loop4: rw=524288, sector=49160, nr_sectors = 8 limit=40427
[  243.376727][ T4515] syz.4.174: attempt to access beyond end of device
[  243.376727][ T4515] loop4: rw=524288, sector=49168, nr_sectors = 8 limit=40427
[  244.241022][ T4515] syz.4.174: attempt to access beyond end of device
[  244.241022][ T4515] loop4: rw=524288, sector=49176, nr_sectors = 8 limit=40427
[  244.322288][ T5551] loop0: detected capacity change from 0 to 32768
[  244.375758][ T4515] syz.4.174: attempt to access beyond end of device
[  244.375758][ T4515] loop4: rw=524288, sector=49184, nr_sectors = 8 limit=40427
[  244.397876][ T4515] syz.4.174: attempt to access beyond end of device
[  244.397876][ T4515] loop4: rw=524288, sector=49192, nr_sectors = 8 limit=40427
[  244.425375][ T4515] syz.4.174: attempt to access beyond end of device
[  244.425375][ T4515] loop4: rw=524288, sector=49200, nr_sectors = 8 limit=40427
[  244.447242][ T5551] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  244.488707][ T4515] syz.4.174: attempt to access beyond end of device
[  244.488707][ T4515] loop4: rw=524288, sector=49208, nr_sectors = 8 limit=40427
[  244.490809][ T5551] OCFS2: ERROR (device loop0): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 73
[  244.591921][ T5551] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  244.603280][ T4515] syz.4.174: attempt to access beyond end of device
[  244.603280][ T4515] loop4: rw=524288, sector=49216, nr_sectors = 8 limit=40427
[  244.612519][ T5551] OCFS2: File system is now read-only.
[  244.624895][ T5551] (syz.0.351,5551,1):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30
[  244.633884][ T5551] (syz.0.351,5551,1):ocfs2_reserve_new_metadata_blocks:990 ERROR: status = -30
[  244.675354][ T5551] (syz.0.351,5551,0):ocfs2_reserve_new_metadata_blocks:1013 ERROR: status = -30
[  244.687552][ T4515] syz.4.174: attempt to access beyond end of device
[  244.687552][ T4515] loop4: rw=524288, sector=49224, nr_sectors = 8 limit=40427
[  244.704361][ T5551] (syz.0.351,5551,0):ocfs2_mknod:348 ERROR: status = -30
[  244.741415][ T5551] (syz.0.351,5551,0):ocfs2_mknod:500 ERROR: status = -30
[  244.765391][ T5551] (syz.0.351,5551,0):ocfs2_create:674 ERROR: status = -30
[  244.773332][ T5568] serio: Serial port ptm0
[  244.828370][ T5570] loop3: detected capacity change from 0 to 164
[  244.847308][ T4456] ocfs2: Unmounting device (7,0) on (node local)
[  244.877831][ T5570] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  244.921206][ T5570] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  244.970032][ T5570] iso9660: Corrupted directory entry in block 4 of inode 1792
[  244.987754][ T5570] Cannot find del_set index 0 as target
[  246.386574][ T5585] netlink: 20 bytes leftover after parsing attributes in process `syz.4.360'.
[  246.445485][ T5585] nbd: must specify a device to reconfigure
[  246.445552][ T5587] loop0: detected capacity change from 0 to 512
[  246.601931][ T5587] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  246.629840][ T5587] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038 (0x7fffffff)
[  246.670220][ T3654] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  246.690472][ T3654] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  246.701615][ T3654] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  246.720454][ T3654] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  246.729316][ T3654] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  246.736815][ T3654] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  248.250706][ T4515] bio_check_eod: 13956 callbacks suppressed
[  248.250740][ T4515] syz.4.174: attempt to access beyond end of device
[  248.250740][ T4515] loop4: rw=0, sector=50504, nr_sectors = 8 limit=40427
[  248.283932][ T4515] syz.4.174: attempt to access beyond end of device
[  248.283932][ T4515] loop4: rw=0, sector=50512, nr_sectors = 8 limit=40427
[  248.305335][ T4515] syz.4.174: attempt to access beyond end of device
[  248.305335][ T4515] loop4: rw=0, sector=50520, nr_sectors = 8 limit=40427
[  248.331861][ T4515] syz.4.174: attempt to access beyond end of device
[  248.331861][ T4515] loop4: rw=0, sector=50528, nr_sectors = 8 limit=40427
[  248.357969][ T4515] syz.4.174: attempt to access beyond end of device
[  248.357969][ T4515] loop4: rw=0, sector=50536, nr_sectors = 8 limit=40427
[  248.380629][ T4515] syz.4.174: attempt to access beyond end of device
[  248.380629][ T4515] loop4: rw=0, sector=50544, nr_sectors = 8 limit=40427
[  248.403766][ T4515] syz.4.174: attempt to access beyond end of device
[  248.403766][ T4515] loop4: rw=0, sector=50552, nr_sectors = 8 limit=40427
[  248.427114][ T4515] syz.4.174: attempt to access beyond end of device
[  248.427114][ T4515] loop4: rw=0, sector=50560, nr_sectors = 8 limit=40427
[  248.460542][ T4515] syz.4.174: attempt to access beyond end of device
[  248.460542][ T4515] loop4: rw=0, sector=50568, nr_sectors = 8 limit=40427
[  248.482880][ T4515] syz.4.174: attempt to access beyond end of device
[  248.482880][ T4515] loop4: rw=0, sector=50576, nr_sectors = 8 limit=40427
[  248.824765][ T3654] Bluetooth: hci8: command tx timeout
[  249.161611][ T4456] EXT4-fs (loop0): unmounting filesystem.
[  249.870259][ T5602] loop0: detected capacity change from 0 to 32768
[  249.920378][ T5602] JBD2: Ignoring recovery information on journal
[  250.012543][ T5602] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  250.161570][ T4456] ocfs2: Unmounting device (7,0) on (node local)
[  250.909086][   T48] Bluetooth: hci8: command tx timeout
[  252.580847][   T48] Bluetooth: hci0: command 0x0406 tx timeout
[  253.053963][ T3654] Bluetooth: hci8: command tx timeout
[  253.385318][ T4515] bio_check_eod: 41802 callbacks suppressed
[  253.385339][ T4515] syz.4.174: attempt to access beyond end of device
[  253.385339][ T4515] loop4: rw=0, sector=49784, nr_sectors = 8 limit=40427
[  253.427747][ T4515] syz.4.174: attempt to access beyond end of device
[  253.427747][ T4515] loop4: rw=0, sector=49792, nr_sectors = 8 limit=40427
[  253.441663][ T4515] syz.4.174: attempt to access beyond end of device
[  253.441663][ T4515] loop4: rw=0, sector=49800, nr_sectors = 8 limit=40427
[  253.455310][ T4515] syz.4.174: attempt to access beyond end of device
[  253.455310][ T4515] loop4: rw=0, sector=49808, nr_sectors = 8 limit=40427
[  253.490243][ T4515] syz.4.174: attempt to access beyond end of device
[  253.490243][ T4515] loop4: rw=0, sector=49816, nr_sectors = 8 limit=40427
[  253.534891][ T4515] syz.4.174: attempt to access beyond end of device
[  253.534891][ T4515] loop4: rw=0, sector=49824, nr_sectors = 8 limit=40427
[  253.549356][ T4515] syz.4.174: attempt to access beyond end of device
[  253.549356][ T4515] loop4: rw=0, sector=49832, nr_sectors = 8 limit=40427
[  253.572904][ T4515] syz.4.174: attempt to access beyond end of device
[  253.572904][ T4515] loop4: rw=0, sector=49840, nr_sectors = 8 limit=40427
[  253.599030][ T4515] syz.4.174: attempt to access beyond end of device
[  253.599030][ T4515] loop4: rw=0, sector=49848, nr_sectors = 8 limit=40427
[  253.622093][ T4515] syz.4.174: attempt to access beyond end of device
[  253.622093][ T4515] loop4: rw=0, sector=49856, nr_sectors = 8 limit=40427
[  254.466713][ T5625] loop0: detected capacity change from 0 to 1024
[  254.573341][ T5625] hfsplus: request for non-existent node 2048 in B*Tree
[  254.580524][ T5625] hfsplus: request for non-existent node 2048 in B*Tree
[  255.136490][   T48] Bluetooth: hci8: command tx timeout
[  255.619751][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  255.628386][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  256.190858][ T3654] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  256.201323][ T3654] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  256.209917][ T3654] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  256.229701][ T3654] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  256.237602][ T3654] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  256.244991][ T3654] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  258.343955][ T3654] Bluetooth: hci9: command tx timeout
[  258.395990][ T4515] bio_check_eod: 26813 callbacks suppressed
[  258.396013][ T4515] syz.4.174: attempt to access beyond end of device
[  258.396013][ T4515] loop4: rw=0, sector=51792, nr_sectors = 8 limit=40427
[  258.425135][ T4515] syz.4.174: attempt to access beyond end of device
[  258.425135][ T4515] loop4: rw=0, sector=51800, nr_sectors = 8 limit=40427
[  258.439112][ T4515] syz.4.174: attempt to access beyond end of device
[  258.439112][ T4515] loop4: rw=0, sector=51808, nr_sectors = 8 limit=40427
[  258.452725][ T4515] syz.4.174: attempt to access beyond end of device
[  258.452725][ T4515] loop4: rw=0, sector=51816, nr_sectors = 8 limit=40427
[  258.466447][ T4515] syz.4.174: attempt to access beyond end of device
[  258.466447][ T4515] loop4: rw=0, sector=51824, nr_sectors = 8 limit=40427
[  258.481360][ T4515] syz.4.174: attempt to access beyond end of device
[  258.481360][ T4515] loop4: rw=0, sector=51832, nr_sectors = 8 limit=40427
[  258.497103][ T4515] syz.4.174: attempt to access beyond end of device
[  258.497103][ T4515] loop4: rw=0, sector=51840, nr_sectors = 8 limit=40427
[  258.511681][ T4515] syz.4.174: attempt to access beyond end of device
[  258.511681][ T4515] loop4: rw=0, sector=51848, nr_sectors = 8 limit=40427
[  258.525399][ T4515] syz.4.174: attempt to access beyond end of device
[  258.525399][ T4515] loop4: rw=0, sector=51856, nr_sectors = 8 limit=40427
[  258.539384][ T4515] syz.4.174: attempt to access beyond end of device
[  258.539384][ T4515] loop4: rw=0, sector=51864, nr_sectors = 8 limit=40427
[  259.636405][   T22] hfsplus: delayed sync fs err -5
[  260.415394][ T3654] Bluetooth: hci9: command tx timeout
[  262.525282][ T3654] Bluetooth: hci9: command tx timeout
[  263.423813][ T4515] bio_check_eod: 32926 callbacks suppressed
[  263.423835][ T4515] syz.4.174: attempt to access beyond end of device
[  263.423835][ T4515] loop4: rw=524288, sector=49560, nr_sectors = 8 limit=40427
[  263.468852][ T4515] syz.4.174: attempt to access beyond end of device
[  263.468852][ T4515] loop4: rw=524288, sector=49568, nr_sectors = 8 limit=40427
[  263.501257][ T4515] syz.4.174: attempt to access beyond end of device
[  263.501257][ T4515] loop4: rw=524288, sector=49576, nr_sectors = 8 limit=40427
[  263.531276][ T4515] syz.4.174: attempt to access beyond end of device
[  263.531276][ T4515] loop4: rw=524288, sector=49584, nr_sectors = 8 limit=40427
[  263.548912][ T4515] syz.4.174: attempt to access beyond end of device
[  263.548912][ T4515] loop4: rw=524288, sector=49592, nr_sectors = 8 limit=40427
[  263.563560][ T4515] syz.4.174: attempt to access beyond end of device
[  263.563560][ T4515] loop4: rw=524288, sector=49600, nr_sectors = 8 limit=40427
[  263.585647][ T4515] syz.4.174: attempt to access beyond end of device
[  263.585647][ T4515] loop4: rw=524288, sector=49608, nr_sectors = 8 limit=40427
[  263.605453][ T4515] syz.4.174: attempt to access beyond end of device
[  263.605453][ T4515] loop4: rw=524288, sector=49616, nr_sectors = 8 limit=40427
[  263.630294][ T4515] syz.4.174: attempt to access beyond end of device
[  263.630294][ T4515] loop4: rw=524288, sector=49624, nr_sectors = 8 limit=40427
[  263.649191][ T4515] syz.4.174: attempt to access beyond end of device
[  263.649191][ T4515] loop4: rw=524288, sector=49632, nr_sectors = 8 limit=40427
[  264.576764][ T3654] Bluetooth: hci9: command tx timeout
[  264.896298][ T3654] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  264.915599][ T3654] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  264.928964][ T3654] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  264.937234][ T3654] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  264.944846][ T3654] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  264.952400][ T3654] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  266.984389][ T3654] Bluetooth: hci6: command tx timeout
[  267.935333][   T48] Bluetooth: hci5: command 0x0406 tx timeout
[  268.425337][ T4515] bio_check_eod: 41425 callbacks suppressed
[  268.425368][ T4515] syz.4.174: attempt to access beyond end of device
[  268.425368][ T4515] loop4: rw=0, sector=49912, nr_sectors = 8 limit=40427
[  268.466769][ T4515] syz.4.174: attempt to access beyond end of device
[  268.466769][ T4515] loop4: rw=0, sector=49920, nr_sectors = 8 limit=40427
[  268.491666][ T4515] syz.4.174: attempt to access beyond end of device
[  268.491666][ T4515] loop4: rw=0, sector=49928, nr_sectors = 8 limit=40427
[  268.515390][ T4515] syz.4.174: attempt to access beyond end of device
[  268.515390][ T4515] loop4: rw=0, sector=49936, nr_sectors = 8 limit=40427
[  268.553371][ T4515] syz.4.174: attempt to access beyond end of device
[  268.553371][ T4515] loop4: rw=0, sector=49944, nr_sectors = 8 limit=40427
[  268.577673][ T4515] syz.4.174: attempt to access beyond end of device
[  268.577673][ T4515] loop4: rw=0, sector=49952, nr_sectors = 8 limit=40427
[  268.620047][ T4515] syz.4.174: attempt to access beyond end of device
[  268.620047][ T4515] loop4: rw=0, sector=49960, nr_sectors = 8 limit=40427
[  268.634792][ T4515] syz.4.174: attempt to access beyond end of device
[  268.634792][ T4515] loop4: rw=0, sector=49968, nr_sectors = 8 limit=40427
[  268.649729][ T4515] syz.4.174: attempt to access beyond end of device
[  268.649729][ T4515] loop4: rw=0, sector=49976, nr_sectors = 8 limit=40427
[  268.667914][ T4515] syz.4.174: attempt to access beyond end of device
[  268.667914][ T4515] loop4: rw=0, sector=49984, nr_sectors = 8 limit=40427
[  269.066554][ T3654] Bluetooth: hci6: command tx timeout
[  270.169815][ T5481] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.322903][ T3654] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  270.336016][ T3654] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  270.346030][ T3654] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  270.368024][ T3654] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  270.378753][ T3654] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  270.386277][ T3654] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  270.610009][ T5481] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.136526][   T48] Bluetooth: hci6: command tx timeout
[  271.183105][ T5481] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.292847][ T5639] chnl_net:caif_netlink_parms(): no params data found
[  271.493700][ T5481] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.573184][ T5591] chnl_net:caif_netlink_parms(): no params data found
[  271.725335][ T5681] chnl_net:caif_netlink_parms(): no params data found
[  271.972954][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.982776][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.994950][ T5639] device bridge_slave_0 entered promiscuous mode
[  272.091143][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.125272][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.145328][ T5639] device bridge_slave_1 entered promiscuous mode
[  272.303336][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.316854][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.343881][ T5591] device bridge_slave_0 entered promiscuous mode
[  272.383583][ T5681] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.402594][ T5681] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.415442][   T48] Bluetooth: hci10: command tx timeout
[  272.424457][ T5681] device bridge_slave_0 entered promiscuous mode
[  272.482434][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.509373][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.550857][ T5591] device bridge_slave_1 entered promiscuous mode
[  272.579087][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  272.599981][ T5681] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.624275][ T5681] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.644645][ T5681] device bridge_slave_1 entered promiscuous mode
[  272.918047][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  273.134809][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  273.173529][ T5741] Cannot find set identified by id 0 to match
[  273.206600][ T5639] team0: Port device team_slave_0 added
[  273.215775][   T48] Bluetooth: hci6: command tx timeout
[  273.399922][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  273.428387][ T5639] team0: Port device team_slave_1 added
[  273.447467][ T4515] bio_check_eod: 26899 callbacks suppressed
[  273.447485][ T4515] syz.4.174: attempt to access beyond end of device
[  273.447485][ T4515] loop4: rw=0, sector=52608, nr_sectors = 8 limit=40427
[  273.484430][ T4515] syz.4.174: attempt to access beyond end of device
[  273.484430][ T4515] loop4: rw=0, sector=52616, nr_sectors = 8 limit=40427
[  273.524752][ T4515] syz.4.174: attempt to access beyond end of device
[  273.524752][ T4515] loop4: rw=0, sector=52624, nr_sectors = 8 limit=40427
[  273.544674][ T5681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  273.574608][ T4515] syz.4.174: attempt to access beyond end of device
[  273.574608][ T4515] loop4: rw=0, sector=52632, nr_sectors = 8 limit=40427
[  273.623173][ T4515] syz.4.174: attempt to access beyond end of device
[  273.623173][ T4515] loop4: rw=0, sector=52640, nr_sectors = 8 limit=40427
[  273.655290][ T4515] syz.4.174: attempt to access beyond end of device
[  273.655290][ T4515] loop4: rw=0, sector=52648, nr_sectors = 8 limit=40427
[  273.685415][ T4515] syz.4.174: attempt to access beyond end of device
[  273.685415][ T4515] loop4: rw=0, sector=52656, nr_sectors = 8 limit=40427
[  273.718364][ T5681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  273.728503][ T4515] syz.4.174: attempt to access beyond end of device
[  273.728503][ T4515] loop4: rw=0, sector=52664, nr_sectors = 8 limit=40427
[  273.780738][ T5705] chnl_net:caif_netlink_parms(): no params data found
[  273.795434][ T4515] syz.4.174: attempt to access beyond end of device
[  273.795434][ T4515] loop4: rw=0, sector=52672, nr_sectors = 8 limit=40427
[  273.817547][ T4515] syz.4.174: attempt to access beyond end of device
[  273.817547][ T4515] loop4: rw=0, sector=52680, nr_sectors = 8 limit=40427
[  273.943160][ T5591] team0: Port device team_slave_0 added
[  273.961328][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0
[  273.970144][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.026047][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  274.058922][ T5681] team0: Port device team_slave_0 added
[  274.083729][ T5591] team0: Port device team_slave_1 added
[  274.149765][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1
[  274.165202][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.222946][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  274.256967][ T5681] team0: Port device team_slave_1 added
[  274.495971][   T48] Bluetooth: hci10: command tx timeout
[  274.507542][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0
[  274.514523][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.613380][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  274.851682][ T5681] batman_adv: batadv0: Adding interface: batadv_slave_0
[  274.860866][ T5681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.889717][ T5681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  274.927570][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1
[  274.934651][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.996590][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  275.036372][ T5705] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.043506][ T5705] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.068933][ T5705] device bridge_slave_0 entered promiscuous mode
[  275.087520][ T5681] batman_adv: batadv0: Adding interface: batadv_slave_1
[  275.094515][ T5681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.145290][ T5681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  275.240263][ T5639] device hsr_slave_0 entered promiscuous mode
[  275.272812][ T5639] device hsr_slave_1 entered promiscuous mode
[  275.292526][ T5639] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  275.305518][ T5639] Cannot create hsr debugfs directory
[  275.311273][ T5705] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.319040][ T5705] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.355492][ T5705] device bridge_slave_1 entered promiscuous mode
[  275.544683][ T5763] netlink: 20 bytes leftover after parsing attributes in process `syz.2.394'.
[  275.585416][ T5763] nbd: must specify a device to reconfigure
[  275.749447][ T5591] device hsr_slave_0 entered promiscuous mode
[  275.783341][ T5591] device hsr_slave_1 entered promiscuous mode
[  275.816355][ T5591] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  275.823987][ T5591] Cannot create hsr debugfs directory
[  275.920049][ T5681] device hsr_slave_0 entered promiscuous mode
[  275.956283][ T5681] device hsr_slave_1 entered promiscuous mode
[  275.975351][ T5681] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  275.982990][ T5681] Cannot create hsr debugfs directory
[  276.012323][ T5705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  276.283643][ T5705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  276.444273][ T5705] team0: Port device team_slave_0 added
[  276.454600][ T5481] device hsr_slave_0 left promiscuous mode
[  276.462086][ T5481] device hsr_slave_1 left promiscuous mode
[  276.475474][ T5481] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  276.482995][ T5481] batman_adv: batadv0: Removing interface: batadv_slave_0
[  276.491331][ T5481] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  276.511447][ T5481] batman_adv: batadv0: Removing interface: batadv_slave_1
[  276.529511][ T5481] device bridge_slave_1 left promiscuous mode
[  276.555400][ T5481] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.567050][ T5481] device bridge_slave_0 left promiscuous mode
[  276.573298][ T5481] bridge0: port 1(bridge_slave_0) entered disabled state
[  276.581096][   T48] Bluetooth: hci10: command tx timeout
[  276.630513][ T5481] device veth1_macvtap left promiscuous mode
[  276.637376][ T5481] device veth0_macvtap left promiscuous mode
[  276.643500][ T5481] device veth1_vlan left promiscuous mode
[  276.649742][ T5481] device veth0_vlan left promiscuous mode
[  278.496092][ T4515] bio_check_eod: 40029 callbacks suppressed
[  278.496116][ T4515] syz.4.174: attempt to access beyond end of device
[  278.496116][ T4515] loop4: rw=524288, sector=49968, nr_sectors = 8 limit=40427
[  278.528531][ T4515] syz.4.174: attempt to access beyond end of device
[  278.528531][ T4515] loop4: rw=524288, sector=49976, nr_sectors = 8 limit=40427
[  278.544495][ T4515] syz.4.174: attempt to access beyond end of device
[  278.544495][ T4515] loop4: rw=524288, sector=49984, nr_sectors = 8 limit=40427
[  278.568675][ T4515] syz.4.174: attempt to access beyond end of device
[  278.568675][ T4515] loop4: rw=524288, sector=49992, nr_sectors = 8 limit=40427
[  278.591269][ T4515] syz.4.174: attempt to access beyond end of device
[  278.591269][ T4515] loop4: rw=524288, sector=50000, nr_sectors = 8 limit=40427
[  278.605899][ T4515] syz.4.174: attempt to access beyond end of device
[  278.605899][ T4515] loop4: rw=524288, sector=50008, nr_sectors = 8 limit=40427
[  278.620361][ T4515] syz.4.174: attempt to access beyond end of device
[  278.620361][ T4515] loop4: rw=524288, sector=50016, nr_sectors = 8 limit=40427
[  278.634406][ T4515] syz.4.174: attempt to access beyond end of device
[  278.634406][ T4515] loop4: rw=524288, sector=50024, nr_sectors = 8 limit=40427
[  278.651169][ T4515] syz.4.174: attempt to access beyond end of device
[  278.651169][ T4515] loop4: rw=524288, sector=50032, nr_sectors = 8 limit=40427
[  278.669044][   T48] Bluetooth: hci10: command tx timeout
[  278.678734][ T4515] syz.4.174: attempt to access beyond end of device
[  278.678734][ T4515] loop4: rw=524288, sector=50040, nr_sectors = 8 limit=40427
[  278.697457][ T5481] team0 (unregistering): Port device team_slave_1 removed
[  278.806810][ T5481] team0 (unregistering): Port device team_slave_0 removed
[  278.916965][ T5481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  279.027145][ T5481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  279.966311][ T5481] bond0 (unregistering): Released all slaves
[  280.112061][ T5705] team0: Port device team_slave_1 added
[  280.141984][ T5781] device wg1 entered promiscuous mode
[  280.226059][ T5705] batman_adv: batadv0: Adding interface: batadv_slave_0
[  280.233337][ T5705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.278780][ T5705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  280.483352][ T5705] batman_adv: batadv0: Adding interface: batadv_slave_1
[  280.517051][ T5705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.750532][ T5705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  281.283698][ T5705] device hsr_slave_0 entered promiscuous mode
[  281.306692][ T5705] device hsr_slave_1 entered promiscuous mode
[  281.324784][ T5705] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  281.353127][ T5705] Cannot create hsr debugfs directory
[  282.182970][ T5481] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.270119][ T5639] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  282.299977][ T5639] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  282.318876][ T5639] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  282.382178][ T5481] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.410159][ T5639] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  282.530122][ T5591] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.788252][ T5481] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.515968][ T4515] bio_check_eod: 44606 callbacks suppressed
[  283.515989][ T4515] syz.4.174: attempt to access beyond end of device
[  283.515989][ T4515] loop4: rw=0, sector=51240, nr_sectors = 8 limit=40427
[  283.536428][ T4515] syz.4.174: attempt to access beyond end of device
[  283.536428][ T4515] loop4: rw=0, sector=51248, nr_sectors = 8 limit=40427
[  283.546802][ T5591] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.561164][ T4515] syz.4.174: attempt to access beyond end of device
[  283.561164][ T4515] loop4: rw=0, sector=51256, nr_sectors = 8 limit=40427
[  283.589419][ T4515] syz.4.174: attempt to access beyond end of device
[  283.589419][ T4515] loop4: rw=0, sector=51264, nr_sectors = 8 limit=40427
[  283.614636][ T4515] syz.4.174: attempt to access beyond end of device
[  283.614636][ T4515] loop4: rw=0, sector=51272, nr_sectors = 8 limit=40427
[  283.630736][ T5481] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.636917][ T4515] syz.4.174: attempt to access beyond end of device
[  283.636917][ T4515] loop4: rw=0, sector=51280, nr_sectors = 8 limit=40427
[  283.669732][ T4515] syz.4.174: attempt to access beyond end of device
[  283.669732][ T4515] loop4: rw=0, sector=51288, nr_sectors = 8 limit=40427
[  283.684060][ T4515] syz.4.174: attempt to access beyond end of device
[  283.684060][ T4515] loop4: rw=0, sector=51296, nr_sectors = 8 limit=40427
[  283.698551][ T4515] syz.4.174: attempt to access beyond end of device
[  283.698551][ T4515] loop4: rw=0, sector=51304, nr_sectors = 8 limit=40427
[  283.712548][ T4515] syz.4.174: attempt to access beyond end of device
[  283.712548][ T4515] loop4: rw=0, sector=51312, nr_sectors = 8 limit=40427
[  283.758820][ T5591] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.858328][ T5591] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.931351][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0
[  284.002206][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  284.016056][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  284.052730][ T5639] 8021q: adding VLAN 0 to HW filter on device team0
[  284.186143][ T5681] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.218204][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  284.236376][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  284.255534][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.262639][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  284.291151][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  284.460320][ T5681] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.496894][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  284.517066][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  284.548251][ T4484] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.555405][ T4484] bridge0: port 2(bridge_slave_1) entered forwarding state
[  284.688039][ T5681] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.775578][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  284.787327][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  284.922624][ T5681] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.990203][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  285.015071][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  285.048212][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  285.077136][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  285.096498][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  285.116375][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  285.126545][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  285.193652][ T5639] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  285.209064][ T5639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  285.223170][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  285.245683][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  288.542776][ T4515] bio_check_eod: 55681 callbacks suppressed
[  288.542798][ T4515] syz.4.174: attempt to access beyond end of device
[  288.542798][ T4515] loop4: rw=524288, sector=51176, nr_sectors = 8 limit=40427
[  288.579712][ T4515] syz.4.174: attempt to access beyond end of device
[  288.579712][ T4515] loop4: rw=524288, sector=51184, nr_sectors = 8 limit=40427
[  288.610412][ T4515] syz.4.174: attempt to access beyond end of device
[  288.610412][ T4515] loop4: rw=524288, sector=51192, nr_sectors = 8 limit=40427
[  288.632709][ T4515] syz.4.174: attempt to access beyond end of device
[  288.632709][ T4515] loop4: rw=524288, sector=51200, nr_sectors = 8 limit=40427
[  288.665494][ T4515] syz.4.174: attempt to access beyond end of device
[  288.665494][ T4515] loop4: rw=524288, sector=51208, nr_sectors = 8 limit=40427
[  288.694867][ T4515] syz.4.174: attempt to access beyond end of device
[  288.694867][ T4515] loop4: rw=524288, sector=51216, nr_sectors = 8 limit=40427
[  288.722513][ T4515] syz.4.174: attempt to access beyond end of device
[  288.722513][ T4515] loop4: rw=524288, sector=51224, nr_sectors = 8 limit=40427
[  288.745431][ T4515] syz.4.174: attempt to access beyond end of device
[  288.745431][ T4515] loop4: rw=524288, sector=51232, nr_sectors = 8 limit=40427
[  288.760660][ T4515] syz.4.174: attempt to access beyond end of device
[  288.760660][ T4515] loop4: rw=524288, sector=51240, nr_sectors = 8 limit=40427
[  288.775421][ T4515] syz.4.174: attempt to access beyond end of device
[  288.775421][ T4515] loop4: rw=524288, sector=51248, nr_sectors = 8 limit=40427
[  290.176065][   T27] INFO: task syz.4.174:4544 blocked for more than 143 seconds.
[  290.183682][   T27]       Not tainted 6.1.110-syzkaller #0
[  290.202301][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  290.226585][   T27] task:syz.4.174       state:D stack:27184 pid:4544  ppid:3904   flags:0x00004004
[  290.245999][   T27] Call Trace:
[  290.249325][   T27]  <TASK>
[  290.252281][   T27]  __schedule+0x143f/0x4570
[  290.265251][   T27]  ? release_firmware_map_entry+0x186/0x186
[  290.271254][   T27]  ? print_irqtrace_events+0x210/0x210
[  290.325224][   T27]  ? _raw_spin_lock_irq+0xdb/0x110
[  290.330505][   T27]  ? do_raw_spin_unlock+0x137/0x8a0
[  290.367447][   T27]  schedule+0xbf/0x180
[  290.371609][   T27]  rwsem_down_write_slowpath+0xea1/0x14b0
[  290.415573][   T27]  ? rwsem_down_write_slowpath+0x9e3/0x14b0
[  290.436109][   T27]  ? down_write_killable_nested+0x90/0x90
[  290.441987][   T27]  ? read_lock_is_recursive+0x10/0x10
[  290.455266][   T27]  ? rwsem_write_trylock+0x166/0x210
[  290.460618][   T27]  ? clear_nonspinnable+0x60/0x60
[  290.475309][   T27]  ? generic_file_open+0x94/0xd0
[  290.480315][   T27]  f2fs_file_open+0xd8/0x370
[  290.484927][   T27]  ? fsnotify_perm+0x439/0x590
[  290.505226][   T27]  ? f2fs_file_mmap+0x220/0x220
[  290.510133][   T27]  do_dentry_open+0x7f9/0x10f0
[  290.514949][   T27]  path_openat+0x2644/0x2e60
[  290.535258][   T27]  ? mark_lock+0x9a/0x340
[  290.539679][   T27]  ? do_filp_open+0x480/0x480
[  290.544408][   T27]  do_filp_open+0x230/0x480
[  290.565242][   T27]  ? vfs_tmpfile+0x4a0/0x4a0
[  290.569917][   T27]  ? _raw_spin_unlock+0x24/0x40
[  290.574796][   T27]  ? alloc_fd+0x5a0/0x640
[  290.595259][   T27]  do_sys_openat2+0x13b/0x4f0
[  290.600005][   T27]  ? do_sys_open+0x220/0x220
[  290.604637][   T27]  __x64_sys_openat+0x243/0x290
[  290.625213][   T27]  ? __ia32_sys_open+0x270/0x270
[  290.630926][   T27]  ? syscall_enter_from_user_mode+0x2e/0x230
[  290.656124][   T27]  ? lockdep_hardirqs_on+0x94/0x130
[  290.661389][   T27]  ? syscall_enter_from_user_mode+0x2e/0x230
[  290.675217][   T27]  do_syscall_64+0x3b/0xb0
[  290.679699][   T27]  ? clear_bhb_loop+0x45/0xa0
[  290.684412][   T27]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  290.705234][   T27] RIP: 0033:0x7fc78937def9
[  290.709711][   T27] RSP: 002b:00007fc7891ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  290.735409][   T27] RAX: ffffffffffffffda RBX: 00007fc789536058 RCX: 00007fc78937def9
[  290.743510][   T27] RDX: 0000000000020242 RSI: 0000000020000380 RDI: ffffffffffffff9c
[  290.766060][   T27] RBP: 00007fc7893f0b76 R08: 0000000000000000 R09: 0000000000000000
[  290.774086][   T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  290.805246][   T27] R13: 0000000000000001 R14: 00007fc789536058 R15: 00007ffe98c6a3b8
[  290.813294][   T27]  </TASK>
[  290.825258][   T27] INFO: task syz.4.174:4545 blocked for more than 144 seconds.
[  290.845238][   T27]       Not tainted 6.1.110-syzkaller #0
[  290.850913][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  290.876058][   T27] task:syz.4.174       state:D stack:26040 pid:4545  ppid:3904   flags:0x00004004
[  290.895197][   T27] Call Trace:
[  290.898542][   T27]  <TASK>
[  290.901498][   T27]  __schedule+0x143f/0x4570
[  290.906178][   T27]  ? release_firmware_map_entry+0x186/0x186
[  290.912114][   T27]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  290.937016][   T27]  ? preempt_schedule+0xd9/0xe0
[  290.941944][   T27]  ? release_firmware_map_entry+0x186/0x186
[  290.955205][   T27]  ? preempt_schedule_thunk+0x16/0x18
[  290.960692][   T27]  schedule+0xbf/0x180
[  290.964802][   T27]  rwsem_down_write_slowpath+0xea1/0x14b0
[  290.986202][   T27]  ? rwsem_down_write_slowpath+0x9e3/0x14b0
[  290.992275][   T27]  ? down_write_killable_nested+0x90/0x90
[  291.005250][   T27]  ? read_lock_is_recursive+0x10/0x10
[  291.010769][   T27]  ? rwsem_write_trylock+0x166/0x210
[  291.035195][   T27]  ? clear_nonspinnable+0x60/0x60
[  291.041542][   T27]  f2fs_issue_checkpoint+0x2d2/0x4d0
[  291.055249][   T27]  ? f2fs_destroy_checkpoint_caches+0x20/0x20
[  291.061543][   T27]  ? d_instantiate_new+0x7b/0x110
[  291.075218][   T27]  ? f2fs_create+0x7a7/0xa10
[  291.079856][   T27]  ? __lock_acquire+0x1f80/0x1f80
[  291.085003][   T27]  ? __lock_acquire+0x1f80/0x1f80
[  291.105279][   T27]  ? f2fs_sync_fs+0x201/0x410
[  291.110028][   T27]  f2fs_create+0x862/0xa10
[  291.114483][   T27]  ? f2fs_lookup+0xae0/0xae0
[  291.135356][   T27]  path_openat+0x12f1/0x2e60
[  291.141770][   T27]  ? do_filp_open+0x480/0x480
[  291.155273][   T27]  do_filp_open+0x230/0x480
[  291.159887][   T27]  ? vfs_tmpfile+0x4a0/0x4a0
[  291.164622][   T27]  ? _raw_spin_unlock+0x24/0x40
[  291.185366][   T27]  ? alloc_fd+0x5a0/0x640
[  291.189795][   T27]  do_sys_openat2+0x13b/0x4f0
[  291.194521][   T27]  ? do_sys_open+0x220/0x220
[  291.225441][   T27]  __x64_sys_openat+0x243/0x290
[  291.230422][   T27]  ? __ia32_sys_open+0x270/0x270
[  291.245264][   T27]  ? syscall_enter_from_user_mode+0x2e/0x230
[  291.251322][   T27]  ? lockdep_hardirqs_on+0x94/0x130
[  291.265292][   T27]  ? syscall_enter_from_user_mode+0x2e/0x230
[  291.271341][   T27]  do_syscall_64+0x3b/0xb0
[  291.285210][   T27]  ? clear_bhb_loop+0x45/0xa0
[  291.289957][   T27]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  291.315325][   T27] RIP: 0033:0x7fc78937def9
[  291.319804][   T27] RSP: 002b:00007fc7891de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  291.346115][   T27] RAX: ffffffffffffffda RBX: 00007fc789536130 RCX: 00007fc78937def9
[  291.354164][   T27] RDX: 000000000000275a RSI: 0000000020000240 RDI: ffffffffffffff9c
[  291.375260][   T27] RBP: 00007fc7893f0b76 R08: 0000000000000000 R09: 0000000000000000
[  291.383290][   T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  291.405252][   T27] R13: 0000000000000001 R14: 00007fc789536130 R15: 00007ffe98c6a3b8
[  291.413318][   T27]  </TASK>
[  291.436123][   T27] 
[  291.436123][   T27] Showing all locks held in the system:
[  291.443912][   T27] 1 lock held by rcu_tasks_kthre/12:
[  291.461030][   T27]  #0: ffffffff8d32b1d0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[  291.475239][   T27] 1 lock held by rcu_tasks_trace/13:
[  291.480563][   T27]  #0: ffffffff8d32b9d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[  291.515245][   T27] 3 locks held by kworker/0:1/14:
[  291.520408][   T27]  #0: ffff88814b2d8d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  291.546138][   T27]  #1: ffffc90000137d20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  291.575247][   T27]  #2: ffffffff8e4f96e8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0
[  291.584754][   T27] 1 lock held by khungtaskd/27:
[  291.605196][   T27]  #0: ffffffff8d32b000 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  291.625347][   T27] 1 lock held by dhcpcd/3306:
[  291.630254][   T27]  #0: ffffffff8e4f96e8 (rtnl_mutex){+.+.}-{3:3}, at: __netlink_dump_start+0x12e/0x6c0
[  291.656082][   T27] 2 locks held by getty/3403:
[  291.660902][   T27]  #0: ffff88814b583098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  291.685252][   T27]  #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0
[  291.705271][   T27] 3 locks held by kworker/u4:9/3758:
[  291.710609][   T27]  #0: ffff888017c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  291.745259][   T27]  #1: ffffc900048e7d20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  291.766072][   T27]  #2: ffffffff8e4f96e8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50
[  291.775133][   T27] 4 locks held by kworker/u4:10/3760:
[  291.790767][   T27]  #0: ffff88801c66d138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  291.815256][   T27]  #1: ffffc90003dffd20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  291.845191][   T27]  #2: ffff888019eea0e0 (&type->s_umount_key#89){++++}-{3:3}, at: trylock_super+0x1b/0xf0
[  291.865268][   T27]  #3: ffff88805686d140 (&sbi->gc_lock){+.+.}-{3:3}, at: f2fs_balance_fs+0x4fb/0x6c0
[  291.874853][   T27] 3 locks held by kworker/1:8/3784:
[  291.895241][   T27]  #0: ffff88814b2d8d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  291.915271][   T27]  #1: ffffc900047efd20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  291.945190][   T27]  #2: ffffffff8e4f96e8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0
[  291.954786][   T27] 3 locks held by kworker/u4:14/4484:
[  291.962953][   T27] 6 locks held by syz.4.174/4515:
[  291.975299][   T27] 2 locks held by syz.4.174/4544:
[  291.980360][   T27]  #0: ffff888019eea460 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80
[  292.005235][   T27]  #1: ffff888053c18150 (&sb->s_type->i_mutex_key#28){+.+.}-{3:3}, at: f2fs_file_open+0xd8/0x370
[  292.025214][   T27] 3 locks held by syz.4.174/4545:
[  292.030300][   T27]  #0: ffff888019eea460 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80
[  292.055210][   T27]  #1: ffff888072349310 (&type->i_mutex_dir_key#9){+.+.}-{3:3}, at: path_openat+0x7b6/0x2e60
[  292.085312][   T27]  #2: ffff88805686d140 (&sbi->gc_lock){+.+.}-{3:3}, at: f2fs_issue_checkpoint+0x2d2/0x4d0
[  292.104895][   T27] 2 locks held by kworker/0:11/4607:
[  292.125200][   T27]  #0: ffff888017c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  292.136715][   T27]  #1: ffffc9000354fd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  292.166365][   T27] 2 locks held by syz.4.187/5005:
[  292.171444][   T27]  #0: ffff888019eea0e0 (&type->s_umount_key#89){++++}-{3:3}, at: iterate_supers+0xac/0x1e0
[  292.195296][   T27]  #1: ffff8881437547d0 (&bdi->wb_switch_rwsem){+.+.}-{3:3}, at: sync_inodes_sb+0x270/0xb10
[  292.215236][   T27] 2 locks held by syz.2.313/5327:
[  292.220396][   T27]  #0: ffff888019eea0e0 (&type->s_umount_key#89){++++}-{3:3}, at: iterate_supers+0xac/0x1e0
[  292.245226][   T27]  #1: ffff8881437547d0 (&bdi->wb_switch_rwsem){+.+.}-{3:3}, at: sync_inodes_sb+0x270/0xb10
[  292.265211][   T27] 2 locks held by syz.1.338/5479:
[  292.275518][   T27]  #0: ffff888019eea0e0 (&type->s_umount_key#89){++++}-{3:3}, at: iterate_supers+0xac/0x1e0
[  292.295219][   T27]  #1: ffff8881437547d0 (&bdi->wb_switch_rwsem){+.+.}-{3:3}, at: sync_inodes_sb+0x270/0xb10
[  292.316030][   T27] 5 locks held by kworker/u4:19/5481:
[  292.321457][   T27]  #0: ffff888017e1e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  292.355205][   T27]  #1: ffffc90004f37d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  292.375272][   T27]  #2: ffffffff8e4ed390 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60
[  292.384779][   T27]  #3: ffffffff8e4f96e8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_delete_nets+0xc9/0x330
[  292.415575][   T27]  #4: ffffffff8d3305f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930
[  292.435219][   T27] 4 locks held by syz-executor/5591:
[  292.440689][   T27]  #0: ffff88807e37a460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x269/0xbc0
[  292.465294][   T27]  #1: ffff88805a5f1c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0
[  292.505214][   T27]  #2: ffff888026474918 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0
[  292.525279][   T27]  #3: ffffffff8de22aa8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1ad/0x800
[  292.545216][   T27] 2 locks held by syz.0.369/5625:
[  292.550277][   T27]  #0: ffff888019eea0e0 (&type->s_umount_key#89){++++}-{3:3}, at: iterate_supers+0xac/0x1e0
[  292.575639][   T27]  #1: ffff8881437547d0 (&bdi->wb_switch_rwsem){+.+.}-{3:3}, at: sync_inodes_sb+0x270/0xb10
[  292.605193][   T27] 1 lock held by syz-executor/5639:
[  292.610556][   T27]  #0: ffffffff8e4f96e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0
[  292.625264][   T27] 7 locks held by syz-executor/5681:
[  292.630620][   T27] 5 locks held by syz-executor/5705:
[  292.646065][   T27]  #0: ffff88807e37a460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x269/0xbc0
[  292.655030][   T27]  #1: ffff888057ed4088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0
[  292.685194][   T27]  #2: ffff888026474a00 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0
[  292.705470][   T27]  #3: ffffffff8de22aa8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xf8/0x480
[  292.725206][   T27]  #4: ffff88807bc6c0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xb6/0x880
[  292.756040][   T27] 2 locks held by syz.2.399/5811:
[  292.761118][   T27]  #0: ffff888019eea0e0 (&type->s_umount_key#89){++++}-{3:3}, at: iterate_supers+0xac/0x1e0
[  292.785252][   T27]  #1: ffff8881437547d0 (&bdi->wb_switch_rwsem){+.+.}-{3:3}, at: sync_inodes_sb+0x270/0xb10
[  292.815384][   T27] 2 locks held by dhcpcd/5842:
[  292.820495][   T27]  #0: ffff888057424410 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x98/0x230
[  292.845202][   T27]  #1: ffffffff8d3305f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930
[  292.865972][   T27] 
[  292.868363][   T27] =============================================
[  292.868363][   T27] 
[  292.881084][   T27] NMI backtrace for cpu 0
[  292.885454][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.110-syzkaller #0
[  292.893378][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  292.903454][   T27] Call Trace:
[  292.906752][   T27]  <TASK>
[  292.909785][   T27]  dump_stack_lvl+0x1e3/0x2cb
[  292.914516][   T27]  ? nf_tcp_handle_invalid+0x642/0x642
[  292.920013][   T27]  ? panic+0x764/0x764
[  292.924136][   T27]  ? vprintk_emit+0x622/0x740
[  292.928851][   T27]  ? printk_sprint+0x490/0x490
[  292.933656][   T27]  ? nmi_cpu_backtrace+0x252/0x560
[  292.938782][   T27]  nmi_cpu_backtrace+0x4e1/0x560
[  292.943731][   T27]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  292.949886][   T27]  ? _printk+0xd1/0x111
[  292.954041][   T27]  ? panic+0x764/0x764
[  292.958127][   T27]  ? __wake_up_klogd+0xcc/0x100
[  292.962984][   T27]  ? panic+0x764/0x764
[  292.967058][   T27]  ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0
[  292.973129][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  292.979310][   T27]  nmi_trigger_cpumask_backtrace+0x1ae/0x3f0
[  292.985312][   T27]  watchdog+0xf88/0xfd0
[  292.989503][   T27]  ? watchdog+0x1f8/0xfd0
[  292.993869][   T27]  kthread+0x28d/0x320
[  292.997958][   T27]  ? hungtask_pm_notify+0x50/0x50
[  293.003009][   T27]  ? kthread_blkcg+0xd0/0xd0
[  293.007613][   T27]  ret_from_fork+0x1f/0x30
[  293.012055][   T27]  </TASK>
[  293.015966][   T27] Sending NMI from CPU 0 to CPUs 1:
[  293.021221][    C1] NMI backtrace for cpu 1
[  293.021232][    C1] CPU: 1 PID: 2527 Comm: kworker/u4:5 Not tainted 6.1.110-syzkaller #0
[  293.021250][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  293.021261][    C1] Workqueue: bat_events batadv_nc_worker
[  293.021290][    C1] RIP: 0010:lock_release+0x17a/0xa20
[  293.021317][    C1] Code: eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 ef 86 77 00 4c 89 6c 24 48 48 c7 84 24 b0 00 00 00 00 00 00 00 9c 8f 84 24 b0 00 00 00 <42> 80 3c 3b 00 74 08 4c 89 f7 e8 47 86 77 00 4c 8b ac 24 b0 00 00
[  293.021344][    C1] RSP: 0018:ffffc9000a5c7ac0 EFLAGS: 00000246
[  293.021357][    C1] RAX: 0000000000000000 RBX: 1ffff920014b8f6e RCX: ffffffff816aaa17
[  293.021370][    C1] RDX: 0000000000000000 RSI: ffffffff8b5d6da0 RDI: ffffffff8b5d6d60
[  293.021382][    C1] RBP: ffffc9000a5c7be8 R08: dffffc0000000000 R09: fffffbfff1d33c96
[  293.021395][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920014b8f64
[  293.021407][    C1] R13: ffffffff8a778d07 R14: ffffc9000a5c7b70 R15: dffffc0000000000
[  293.021420][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  293.021435][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  293.021447][    C1] CR2: 000055e0f25c86d8 CR3: 000000000d08e000 CR4: 00000000003506e0
[  293.021462][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  293.021472][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  293.021483][    C1] Call Trace:
[  293.021488][    C1]  <NMI>
[  293.021494][    C1]  ? nmi_cpu_backtrace+0x3de/0x560
[  293.021511][    C1]  ? read_lock_is_recursive+0x10/0x10
[  293.021549][    C1]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  293.021565][    C1]  ? nmi_handle+0x25/0x440
[  293.021598][    C1]  ? nmi_cpu_backtrace_handler+0x8/0x10
[  293.021624][    C1]  ? nmi_handle+0x12e/0x440
[  293.021649][    C1]  ? nmi_handle+0x25/0x440
[  293.021674][    C1]  ? lock_release+0x17a/0xa20
[  293.021696][    C1]  ? default_do_nmi+0x62/0x150
[  293.021714][    C1]  ? exc_nmi+0xa8/0x100
[  293.021730][    C1]  ? end_repeat_nmi+0x16/0x31
[  293.021754][    C1]  ? batadv_nc_worker+0xc7/0x610
[  293.021779][    C1]  ? lock_release+0xc7/0xa20
[  293.021802][    C1]  ? lock_release+0x17a/0xa20
[  293.021826][    C1]  ? lock_release+0x17a/0xa20
[  293.021850][    C1]  ? lock_release+0x17a/0xa20
[  293.021874][    C1]  </NMI>
[  293.021878][    C1]  <TASK>
[  293.021886][    C1]  ? batadv_nc_worker+0xc7/0x610
[  293.021910][    C1]  ? __lock_acquire+0x1f80/0x1f80
[  293.021936][    C1]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  293.021963][    C1]  ? batadv_nc_worker+0xc7/0x610
[  293.021987][    C1]  batadv_nc_worker+0x28c/0x610
[  293.022010][    C1]  ? batadv_nc_worker+0xc7/0x610
[  293.022034][    C1]  ? process_one_work+0x7a9/0x11d0
[  293.022053][    C1]  process_one_work+0x8a9/0x11d0
[  293.022080][    C1]  ? worker_detach_from_pool+0x260/0x260
[  293.022102][    C1]  ? _raw_spin_lock_irqsave+0x120/0x120
[  293.022122][    C1]  ? kthread_data+0x4e/0xc0
[  293.022148][    C1]  ? wq_worker_running+0x97/0x190
[  293.022165][    C1]  worker_thread+0xa47/0x1200
[  293.022184][    C1]  ? _raw_spin_unlock+0x40/0x40
[  293.022224][    C1]  ? release_firmware_map_entry+0x186/0x186
[  293.022253][    C1]  ? _raw_spin_unlock+0x40/0x40
[  293.022279][    C1]  kthread+0x28d/0x320
[  293.022292][    C1]  ? worker_clr_flags+0x190/0x190
[  293.022311][    C1]  ? kthread_blkcg+0xd0/0xd0
[  293.022326][    C1]  ret_from_fork+0x1f/0x30
[  293.022356][    C1]  </TASK>
[  293.335201][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  293.335227][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.110-syzkaller #0
[  293.335252][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  293.335265][   T27] Call Trace:
[  293.335273][   T27]  <TASK>
[  293.335283][   T27]  dump_stack_lvl+0x1e3/0x2cb
[  293.335338][   T27]  ? nf_tcp_handle_invalid+0x642/0x642
[  293.335372][   T27]  ? panic+0x764/0x764
[  293.335397][   T27]  ? llist_add_batch+0x160/0x1d0
[  293.335433][   T27]  ? vscnprintf+0x59/0x80
[  293.335463][   T27]  panic+0x318/0x764
[  293.335488][   T27]  ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0
[  293.335513][   T27]  ? memcpy_page_flushcache+0xfc/0xfc
[  293.335543][   T27]  ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0
[  293.335565][   T27]  ? nmi_trigger_cpumask_backtrace+0x338/0x3f0
[  293.335590][   T27]  ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0
[  293.335615][   T27]  watchdog+0xfc7/0xfd0
[  293.335652][   T27]  ? watchdog+0x1f8/0xfd0
[  293.335684][   T27]  kthread+0x28d/0x320
[  293.335704][   T27]  ? hungtask_pm_notify+0x50/0x50
[  293.335731][   T27]  ? kthread_blkcg+0xd0/0xd0
[  293.335753][   T27]  ret_from_fork+0x1f/0x30
[  293.335797][   T27]  </TASK>
[  293.336074][   T27] Kernel Offset: disabled
[  293.479582][   T27] Rebooting in 86400 seconds..