last executing test programs:

2m42.71278768s ago: executing program 3 (id=43):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x49}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000700)={0x3, &(0x7f0000000000)=[{0x50}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
sched_setscheduler(0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
syz_emit_ethernet(0x2e, &(0x7f00000003c0)={@dev, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@test_dummy_encryption_v1}, {@resgid}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x1880c20, 0x0, 0x0, 0x0, &(0x7f0000000000))
chdir(&(0x7f0000000140)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000b00)={0x1, 0x3, 0x4d, 0x0, 0x2})

2m41.440937898s ago: executing program 0 (id=46):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
syz_mount_image$reiserfs(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x1000098, &(0x7f00000002c0), 0xfe, 0x10f4, &(0x7f00000022c0)="$eJzs2LGK1FAUBuD/JqNgNXK3DwtaKMjiMr7AFgrTWFjbDVZ2TqXM4/g4spX9sg+wxYK9ksToCoIsGxwYvg9Ccn9ycnLLcwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC9RXI/yVGT1ClrkpSk687Xl0m6KX/4pW1S8ubdevvyw+rVdnwtfdak9FXDup4+qnVVV/W0vjg6e1y3Hz+9b2+0LOlycb3bPHh9NetW+t7trF8EAACAw/D9zpZ77g8AAAD8y2wHCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzqNNDk6QkXXe+vkzS7fe3AAAAgDsqafJ2+bd8PAb47Vm+LsuQT74Ni+f5PNY/vX33e7cvAQAAgANVbszjT7L4NZf32XEWOTkZ1z9vuTpL2mEy/9PF9W4zXMe7TfmfGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH6wA8cCAAAAAML8rdPo2AAAAAAAAAAAAAAAgKkCAAD//4CP0SQ=")
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0x6c5621a684f1998c}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x15, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xfffffffffffffdac}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x2000000, 0x0, 0x3e, 0x0, 0x0)
getsockname$packet(r2, 0x0, 0x0)

2m40.899343566s ago: executing program 3 (id=48):
syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@partition={'partition', 0x3d, 0x6}}, {@gid_forget}, {@session={'session', 0x3d, 0xfe8}}, {@noadinicb}, {@anchor}, {@uid_forget}]}, 0xfe, 0xc24, &(0x7f0000001480)="$eJzs3UFsHNd9B+D/Gy5Fym4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmFoSJNXIRtrQvfTQQ4Ci6CEnAq1RIEUDoymCHtnWBZKLD0VOPREtbARFD2wRIKeAxcy+lZY0ZcmmSFH299nUbznz3ux7b5YzkqA3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiN976cKpZ9ODbgUAcJAuTX311Gn3fwD4RLnsz/8AAAAAAAAAAAAAAHDYpSjisUixeGkzzVTfdw1fbHdu3Jwen9i92tFU1Ryoypdfw8+ePnP2S8+NnevlB9e/356IV6YuX6i/uHB9cam1vNyaq0932rMLc617PsJe6+80Wg1A/fqrN+auXl2un37mzLbdN0feG3r0+Mj5sadOPtkrOz0+MTHVV6Y2+JHf/X3uNMPjSBRxMlI8/b2fpGZEFLH3sbjLZ2e/Ha06MVp1Ynp8ourIfLvZWSl3TvYGooio91Vq9MboAM7FnjQiVsvmlw0eLbs3tdhcal6Zb9Unm0sr7ZX2QmcydVtb9qceRZxLEWsRsTH0/sMNRhG1SPGdY5vpSkQM9Mbhi9XE4Du3o9jHPt6Dsp31wYi14iE4Z4fYUBTxcqT46dtFzJZjlr/iCxEvl/mDiDfLfCEilR+MsxHv7vI54uFUiyL+vDz/5zfTXHU96F1XLn6t/pXO1YW+sr3rykN/fzhIh/zaNBxFNKsr/mb66L/ZAQAAAAAAAAAAAAAAAOB+OxpFPBEpXvr3P6rmFUc1L/3Y+bHfH/nF/jnjj9/lOGXZZyJitbi3OblH8hTiyTSZ0gOeS/xJNhxF/HGe//fGg24MAAAAAAAAAAAAAAAAAADAJ9yPI8Xz75xIa9G/pni7c61+uXllvrsqbG/t396a6VtbW1v11M1GzpmcqznXcq7n3MgZRa6fs5FzJudqzrWc6zk3csZArp+zkXMm52rOtZzrOTdyRi3Xz9nIOZNzNedazvWcGznjkKzdCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwcVJEET+PFN/+xmaKFBGNiJno5vpQrwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CANpSK+Hynqf9C4ta0WEan6v+tE+cvZaBwp89PRGCvzhWhcyNmsstZ44wG0n70ZTEX8KFIMDb9164Tn8z/Y/e7WxyDe/Obt736l1s2B3s6R94YePX7s/NjErz1+p9dptwaMXmx3btysT49PTEz1ba7ld/9037aR/L7F/ek6EbH82uuvNufnW0ufmBdFHIpmPKgXte6LWhyS9hzUi3y9il12FYfhp6BxWAaq9+IBX5g4EOX9/91I8dvv/Efvht+7//9C97tbd/j42Z/cvv8/v/NA+3T/f6xv2/P5dyODtYjhleuLg8cjhpdfe/1k+3rzWutaq3P21Kkvj419+cypwSMRw1fb862+V3seKgAAAAAAAAAAAAAAAICDlYr43UjR/NFmqkfEzWq+1sj5sadOPjkQA9V8q23ztl6Zunyh/uLC9cWl1vJya64+3WnPLsy17vXthqvpXtPjE/vSmbs6us/tPzr84sLia0vta3+4suv+R4YvXFleWWrO7r47jkYR0ejfMlo1eHp8omr0fLvZqapO7jqZ7sMbTEX8Z6SYPVs/0tuW5//tnOG/bf7/6s4D7dP8v0/1bSvfM6UifhYpfusvHo/PV+18JN43Zrnc30SK0XOfy+XiSFmu14bucwW6MwPLsv8bKf7h59vL9uZDPna77LP3Oq4Pi/L8H4sU3/+z78av523bn/+w+/l/ZOeB9un8f6Zv2yPbnlew566Tz//JSPHCY2/Fb+RtH/T8jyK2tra+FXEiF771fI59Ov+f7ds2Et33/c37130AAAAAAAAAAICH1mAq4m8jxZMTtfRc3nYv//5vbueB9unff/1y37a5A1qvaM+DCgAAAACHxGAq4seR4trKW7fmUG+f/903//N3bq+9Pp527K3+nu+XqucG3M+//+s3kt93Zu/dBgAAAAAAAAAAAAAAAAAAgEMlpSKey+upz9xlPfX1SPHSfz+dy6XjZbneOvAj1a/DlxY6Jy/Mzy/MNleaV+Zb9anF5myrrPuZSLH515/LdYtqffXP57rdNd6Ht3prsS9Fiom/65XtrsXeW5u8ux54dy32suynIsV//f32sr11rD97u+zpsuxfRYqv/9PuZY/fLnumLPvdSPHDr9d7ZR8py/aej9p9JulwLeZbz8wuzL/vUagAAAAAAAAAAAAAAAAAAADwYQ2mIv40UvzP9bVYrab9v3FrV85ab8Ob3+xb73+Hm9U6/yPV+v93ev1R1v8fuS+9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh0uKIl6PFIuXNtP6UPl91/DFdufGzenxid2rHU1VzYGqfPk1/OzpM2e/9NzYuV5+cP377Yl4ZeryhfqLC9cXl1rLy625+nSnPbsw17rnI+y1/u2h6xqtBqB+/dUbc1evLtdPP3Nm2+6bI+8NPXp85PzYUyef7JWdHp+YmOorUxv8EO/+oRp325Eo4i8jxdPf+0n656GIIvY+Fnf57Oy3o1UnRqtOTI9PVB2Zbzc7K+XOyd5AFBH1vkqN3hgdwLnYk0bEatn8ssGjZfemFptLzSvzrfpkc2mlvdJe6EymbmvL/tSjiHMpYi0iNob6D3QkZxGvRorvHNtM/zIUMdAbhy9emvrqqdN3bkexr728i29V7awPRqwVD8E5O8SGooh/jBQ/fftE/OtQRC26X/GFiJfL/EHEm2W+EJHKD8bZiHeHHnSruV9qUcT/lef//GZ6eyii+pGprisXv1b/SufqQl/Z3nVl5/1hKyIeqvvDQTrk16bhKOKH1RV/M/2bn2sAAAAAAAAAAAAAAACAQ6SIX40Uz79zIlXzg2/NKW53rtUvN6/Md6f19eb+9eZMb21tbdVTNxs5Z3Ku5lzLuZ5zI2cUuX7ORs6ZnKs513Ku59zIGQO5fs5GzpmcqznXcq7n3MgZtVw/ZyPnTM7VnGs513Nu5IxDMncPAAAAAAAAAAAAAAAAAAD4eCmq/1J8+xubaWuou770THRz3XqgH3v/HwAA//9wn/vk")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffc)
sendfile(r0, r0, 0x0, 0x800000009)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
ftruncate(r2, 0x2007ffb)
sendfile(r1, r2, 0x0, 0x1000000201005)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x2968, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x20, 0x5, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x7, 0x1, 0x1, {0x22, 0x9f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x80, 0xb5}}}}}]}}]}}, 0x0)
truncate(&(0x7f00000013c0)='./file1\x00', 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x8000)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5406, 0x0, 0x0)

2m39.18871581s ago: executing program 0 (id=50):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
write$P9_RSTATu(r4, &(0x7f00000007c0)={0x227, 0x2, 0x0, {{0x500, 0xe6, 0x4, 0xc000, {0x10}, 0xa810000, 0x0, 0x0, 0x4, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x41, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1d\xd5\x15z\xdc\x81\x9d{d\x97\x19\xdf\xf6\xe2m\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x227)

2m37.944543737s ago: executing program 0 (id=54):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52d, &(0x7f0000000640)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019ef00000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r3, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg2\x00'}}]}]}, 0x24}}, 0x40050)
sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r3, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x88}, 0x4040)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98)
pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200))

2m37.509588994s ago: executing program 0 (id=59):
syz_io_uring_setup(0x7b5b, 0x0, 0x0, 0x0)
syz_mount_image$cramfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x200004c, &(0x7f0000000280)=ANY=[@ANYBLOB="009c74fbdedb35410b4b39523e95fc76118b5f893831d2a69603aed32d7ed8d926063b9f40074d75df684430d7b4338a30dcd937fa4f95c2d6f0fccafe7535ed73b6a95946bbc501924a4d5d5f3b49768815e3e9061703b05b3aacbfd021e97dd21c57cd0eb981eae095faf8e832ca2776a7ee234498d7fb60323bac6950556d9752fbaa76afb0d0cc6508b9d4b242b8d3e12e082ae92c9d962e84670bd313cc143d2398b5ebd6d0524acee51dc3d3c7695c6c7364e7670401815dff78247ef207267e0914eb626ac1a7d230fb2f0ba975a612d008a813f852e8dbb91540c5a5168cda7464b5be0865f3b3e31356b42f8fc15cbf1dc096415b5b865f97bcb190f310fe569f4321b2cc0c16b7bb75fac29e5e396dc2027a26ab4ae01e6ac82331cdb9ac83d921031bf6645f6079a120c00ea3cd3a30db0f66b2c9cd2d50c3a3fde16d903d7f56e8d992c26c86097ed081b62d7374d414a7b0b4b6684ae0a1609559809d74a28a9806d483c83edf33a0986af834d37a47797885800f37a233f702ac474be501d3cd9c4a974a4fc7bb87c2e6f9086f3dad1059a306c6f1c47422ce440372068e895a140f8e43f6f46c575666559844fba4f294a9bd626c643f"], 0x0, 0x143, &(0x7f0000001580)="$eJzs0LFLAmEYx/Hf25VGZRoZ2JAFDR2JeZ7YFqGRIGQHRbugFwSakYu0NbT5J0hUQtPhEI0NZi2GB2L/RMtBUNBovPdeWFBD+/PZ3u/zvo94m2umDB8gQdgoFY+O9XJZzy/saJnU7s3t3STvbgCjP+br9v1mAniRgOYwYJ0CeQAPHmD/oKCv5EoFfrYSgAwgOS66AnF3jDe/aFGnyYtAa0Y09ZcWc5qLv/UO9vUvgSXepgb73gFUaqGG8bTdaafDy9dzEs7SoflphvPqtx7Uq2pqtj4RkLCnP14hyfi750g73I00jJ7ZyWxpGc2MqepqTIkqSrzH/3m8b38UjonfYc7RhUDQjbcT5wjDnlv3zAOgdfGhFb1uP4DXQx/QxV8TVqnlsoGRetbvG4Ik42s9IYQQQgghhBDyb58BAAD//8kVZzA=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x8)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000004c0), 0x3200008, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000300)={[{@delalloc}, {@i_version}, {@oldalloc}, {@grpid}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@bsdgroups}, {@noquota}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x560, &(0x7f0000000bc0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020)

2m37.265304377s ago: executing program 3 (id=61):
socket$unix(0x1, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c)
syz_emit_ethernet(0x82, &(0x7f0000000640)={@random='\x00\a\x00', @multicast, @val={@val={0x88a8, 0x1, 0x1, 0x2}, {0x8100, 0x2, 0x0, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "2f23aa", 0x44, 0x2f, 0x0, @empty, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x1, 0x1, 0xe, 0x0, 0x0, 0x1, 0x0, 0x5}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x1, {{0x8, 0x2, 0x3, 0x3, 0x1, 0x1, 0x6, 0x3}, 0x2, {0x7, 0x6, 0x1, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}, 0x0)

2m36.928737801s ago: executing program 0 (id=63):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_procs(r5, 0x0, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6)

2m36.855817562s ago: executing program 3 (id=64):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setresuid(0xee01, 0x0, 0x0)
sendmmsg$unix(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x845, &(0x7f00000005c0)={[{@shortname_winnt}, {@shortname_winnt}, {@shortname_lower}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@discard}, {@fat=@check_strict}, {@shortname_mixed}, {@shortname_winnt}, {@rodir}, {@shortname_win95}, {@fat=@sys_immutable}, {@utf8}]}, 0x0, 0x274, &(0x7f0000000780)="$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")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x300, 0x0, 0x103ff})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff000000000000210085000000360000009500070000000000b83f3584230b8f5ec8921327291cf4880dd3a91af830f8a476ba1b51d4eb67103b000000000000000000000000000000640f9922d207e93470686f20ad"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)

2m36.619334286s ago: executing program 3 (id=68):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="05005b"], 0x24}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x44, r10, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x3}, @device_b, @device_a, @initial, {0x7, 0xf95}, @value=@ver_80211n={0x0, 0x59cf, 0x0, 0x1, 0x0, 0x3, 0x1}}, 0x1, 0x5, 0x25c, @void}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

2m35.272443505s ago: executing program 0 (id=73):
r0 = socket(0x10, 0x0, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18030000000000000000000000000000850000002e00000085"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="c03cba2d1f1f78de2c3ba843600c", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$SIOCSIFHWADDR(r2, 0x401c5820, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xf, 0x33, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf184, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @exit, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x63}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @jmp={0x5, 0x1, 0x0, 0x4, 0x6, 0xffffffffffffffd8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x10002}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xf6fb38b3e904fedc}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0xd0, 0x0, 0x168, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@loopback, @loopback, 0xff, 0xff, 'netdevsim0\x00', '\x00', {0xff}, {0xff}, 0xb8, 0x0, 0x40}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="928091451ec5", 0xfc00, 0xe, [0xa, 0x27, 0x1b, 0x3d, 0x1e, 0xb, 0x2b, 0x0, 0x30, 0x1a, 0x23, 0x6, 0x31, 0x33, 0x23, 0x18], 0x2, 0x4, 0x9}}}, {{@ip={@local, @local, 0xff, 0xffffff00, 'netpci0\x00', 'wg1\x00', {}, {}, 0xff, 0x1, 0xa}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x8, 0x5}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2b}, @loopback, 0xff000000, 0xff000000, 'wg1\x00', 'ipvlan1\x00', {0xff}, {}, 0x0, 0x6, 0x4b}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xdc}}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}, 0xff000000, 0xffffffff, 'ipvlan1\x00', 'veth0_macvtap\x00', {0x33f1ed9a02318a7b}, {}, 0x6c, 0x0, 0x41}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x3, 0xc, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x9b, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428)

2m35.218563826s ago: executing program 32 (id=73):
r0 = socket(0x10, 0x0, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18030000000000000000000000000000850000002e00000085"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="c03cba2d1f1f78de2c3ba843600c", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$SIOCSIFHWADDR(r2, 0x401c5820, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xf, 0x33, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf184, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @exit, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x63}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @jmp={0x5, 0x1, 0x0, 0x4, 0x6, 0xffffffffffffffd8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x10002}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xf6fb38b3e904fedc}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0xd0, 0x0, 0x168, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@loopback, @loopback, 0xff, 0xff, 'netdevsim0\x00', '\x00', {0xff}, {0xff}, 0xb8, 0x0, 0x40}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="928091451ec5", 0xfc00, 0xe, [0xa, 0x27, 0x1b, 0x3d, 0x1e, 0xb, 0x2b, 0x0, 0x30, 0x1a, 0x23, 0x6, 0x31, 0x33, 0x23, 0x18], 0x2, 0x4, 0x9}}}, {{@ip={@local, @local, 0xff, 0xffffff00, 'netpci0\x00', 'wg1\x00', {}, {}, 0xff, 0x1, 0xa}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x8, 0x5}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2b}, @loopback, 0xff000000, 0xff000000, 'wg1\x00', 'ipvlan1\x00', {0xff}, {}, 0x0, 0x6, 0x4b}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xdc}}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}, 0xff000000, 0xffffffff, 'ipvlan1\x00', 'veth0_macvtap\x00', {0x33f1ed9a02318a7b}, {}, 0x6c, 0x0, 0x41}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x3, 0xc, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x9b, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428)

2m34.265039539s ago: executing program 3 (id=77):
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r3, &(0x7f0000000240)={{0x6, @default}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)

2m34.068002232s ago: executing program 33 (id=77):
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r3, &(0x7f0000000240)={{0x6, @default}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)

12.597465233s ago: executing program 2 (id=641):
syz_usb_connect$hid(0x1, 0x36, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x73)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000180), 0xd, 0x5d8, &(0x7f0000000c00)="$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")
write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000001500)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000002840)=""/4096, 0x80a0000})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

9.687971664s ago: executing program 5 (id=648):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c)

9.412779078s ago: executing program 4 (id=649):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b0040000000008bb766f300000000000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x0)

8.632265369s ago: executing program 6 (id=650):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'lo\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'hsr0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44}, 0x0)

8.393767192s ago: executing program 4 (id=652):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001000010700000040000000000a000000060001001f"], 0x1c}}, 0x0)

7.539456254s ago: executing program 5 (id=653):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="b4acc508be15c932a47af2125bd2c8a602e02c9d102944329061ea221c8b7ed76fd4d0eb1306e229e1ad1114149a9a99bc67c3488ac0edf161a35c4f792179d6a531f8362ba628fd4d", 0x49}, {&(0x7f0000000400)="7167a8a25e9c319c40c010a5a926c850f5cc95d6d23b8bd48c61b77d85c5dca60edc08e26d6a95bc01d213e6558b1329e9fd32f6779fa000", 0x38}, {0x0}], 0x3)

7.530672045s ago: executing program 1 (id=654):
socket$tipc(0x1e, 0x2, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6)

7.470084115s ago: executing program 4 (id=655):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xb}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20000800)

7.469175065s ago: executing program 2 (id=656):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801)
ioctl$USBDEVFS_CONNECTINFO(r0, 0x8004551a, &(0x7f0000001980))

7.468829025s ago: executing program 6 (id=657):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TCGETS2(r0, 0x5433, 0x0)
socket$inet6(0xa, 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00)

7.10869503s ago: executing program 5 (id=658):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c)

7.10830012s ago: executing program 2 (id=659):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET(r4, 0x0, 0x240c00c1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

6.017848306s ago: executing program 2 (id=660):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f00000005c0)={[{@rodir}, {@numtail}, {@shortname_winnt}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_mixed}, {@utf8no}, {@rodir}, {@uni_xlate}]}, 0x1, 0x26c, &(0x7f0000000340)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
renameat2(r1, &(0x7f0000000140)='./file1\x00', r1, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
mkdirat(r0, &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x20040, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)

6.016581356s ago: executing program 1 (id=661):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@mcast1, 0x0, 0xe, 0x4e20, 0x0, 0x2}, {0x1, 0x7, 0x0, 0x0, 0xfffffffffffffffe, 0x2, 0x10000}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x0, 0x0, 0x5}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0xbb8)

5.579287972s ago: executing program 6 (id=662):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
write$P9_RSTATu(r4, &(0x7f00000007c0)={0x227, 0x2, 0x0, {{0x500, 0xe6, 0x4, 0xc000, {0x10}, 0xa810000, 0x0, 0x0, 0x4, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x41, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1d\xd5\x15z\xdc\x81\x9d{d\x97\x19\xdf\xf6\xe2m\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x227)

5.559440832s ago: executing program 4 (id=663):
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f0000001b40)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5)
pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8000c61)
write$FUSE_WRITE(r1, &(0x7f00000000c0)={0x18}, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
write$FUSE_WRITE(r3, &(0x7f00000000c0)={0x18}, 0xfffffdef)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]})
close_range(r4, 0xffffffffffffffff, 0x0)

5.360575845s ago: executing program 5 (id=664):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
fallocate(r0, 0x0, 0x10000, 0x20000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fallocate(r0, 0x8, 0x0, 0x2000)

4.226530371s ago: executing program 1 (id=665):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x58, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0)

4.220718071s ago: executing program 6 (id=666):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x2, 0x300)
syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@remote, @random="001c00", @val={@val={0x88a8, 0x7, 0x1, 0x1}, {0x8100, 0x1, 0x1, 0x1}}, {@canfd={0xd, {{0x0, 0x1, 0x1, 0x1}, 0x22, 0x3, 0x0, 0x0, "0922b3250fee8a84762ceb0ed458854d372bc34d34b21f6f8895402facc89256af91c3d6f57af84027901407ffbc48b0a9b31a3ad34a51f7b96d5cf32c7d1813"}}}}, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="6100330080000000ffffffffffff080211000000505050505050200000000000000000006400011003010c"], 0x80}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)

2.931235209s ago: executing program 4 (id=667):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10)
ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$phonet_pipe(0x23, 0x5, 0x2)
syz_io_uring_setup(0x2be, &(0x7f0000000240)={0x0, 0x4331, 0x1, 0x2, 0x113}, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x2, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0)

2.915576659s ago: executing program 1 (id=677):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x1c, r1, 0x1, 0xfffffffd, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc082}, 0xc000)
socket(0x848000000015, 0x805, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
socket$alg(0x26, 0x5, 0x0)
socket(0x1e, 0x805, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x2100, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r2], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)

2.915171589s ago: executing program 2 (id=668):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c)

2.739982612s ago: executing program 6 (id=669):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0xb00)

1.849532784s ago: executing program 2 (id=670):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94)
mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xfe, 0x19c, &(0x7f0000000200)="$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")
truncate(&(0x7f0000000000)='./file1\x00', 0x8000)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x40)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x34, r1, 0x1, 0x7ffffc, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

1.43821366s ago: executing program 6 (id=671):
rt_sigaction(0x1, &(0x7f0000000140)={&(0x7f0000000080)="2437460f1c2bdfd5c4a2f10027460f38e7418f69d8909ca3000810ffa5c43b3be5c436fe0d4e486df513bb559a00000f75bed5370b1c2665d2950e000000dbf5", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00')
preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x2c)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001f40)='net/ip6_mr_cache\x00')
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000040f900711083000000000066000000000000019500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
lseek(r3, 0x67, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r5=>0x0})
syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="7a00330080000000ffffffffffff080211000000505050505050000000000000000000000000010003010e"], 0x98}}, 0x0)

1.43690844s ago: executing program 1 (id=682):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
write$P9_RSTATu(r4, &(0x7f00000007c0)={0x227, 0x2, 0x0, {{0x500, 0xe6, 0x4, 0xc000, {0x10}, 0xa810000, 0x0, 0x0, 0x4, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x41, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1d\xd5\x15z\xdc\x81\x9d{d\x97\x19\xdf\xf6\xe2m\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x227)

1.144637584s ago: executing program 5 (id=672):
socket$unix(0x1, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c)
syz_emit_ethernet(0x82, &(0x7f0000000640)={@random='\x00\a\x00', @multicast, @val={@val={0x88a8, 0x1, 0x1, 0x2}, {0x8100, 0x2, 0x0, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "2f23aa", 0x44, 0x2f, 0x0, @empty, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x1, 0x1, 0xe, 0x0, 0x0, 0x1, 0x0, 0x5}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x1, {{0x8, 0x2, 0x3, 0x3, 0x1, 0x1, 0x6, 0x3}, 0x2, {0x7, 0x6, 0x1, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}, 0x0)

356.065325ms ago: executing program 1 (id=673):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000001e40)=0x5)
write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)

160.259668ms ago: executing program 5 (id=674):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
pread64(0xffffffffffffffff, 0x0, 0x0, 0x97)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$binder(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x10, 0x0)

0s ago: executing program 4 (id=675):
r0 = socket(0x23, 0x800000003, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x87)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e21, 0x6, @private2, 0x8001}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4008000)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4)

kernel console output (not intermixed with test programs):

SID 50:50:50:50:50:50
[   44.741918][  T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   44.776765][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   44.780168][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   44.783842][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   44.798410][ T4031] device veth1_vlan entered promiscuous mode
[   44.827496][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   44.830563][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.836625][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   44.839793][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.844654][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_1
[   44.866136][  T330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   44.869021][  T330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   44.872759][  T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   44.875800][  T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   44.878718][  T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   44.882732][  T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   44.899423][  T330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   44.903074][  T330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   44.905460][  T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   44.905483][ T4025] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   44.907816][  T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   44.910335][ T4025] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   44.916072][ T4025] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   44.918701][ T4025] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   44.932821][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   44.950229][  T330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   44.976553][ T4031] device veth0_macvtap entered promiscuous mode
[   44.979997][  T330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   44.983257][  T330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   44.990185][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   45.006490][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   45.009561][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   45.014176][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   45.027458][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   45.030616][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   45.042054][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   45.045012][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   45.059441][ T4037] device veth0_vlan entered promiscuous mode
[   45.100368][ T4031] device veth1_macvtap entered promiscuous mode
[   45.216439][  T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.218913][  T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.229062][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   45.242971][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   45.333869][ T4037] device veth1_vlan entered promiscuous mode
[   45.362511][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   45.366295][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.369157][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   45.373244][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.375954][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   45.378952][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.390378][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.024747][ T4037] device veth0_macvtap entered promiscuous mode
[   46.037638][ T4037] device veth1_macvtap entered promiscuous mode
[   46.061616][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   46.068514][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.074350][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   46.077704][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.080718][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   46.088525][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.094120][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   46.096976][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.106200][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.115452][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.118471][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.122633][ T4074] Bluetooth: hci2: command 0x040f tx timeout
[   46.124938][ T4074] Bluetooth: hci0: command 0x040f tx timeout
[   46.128855][ T4074] Bluetooth: hci1: command 0x040f tx timeout
[   46.131147][ T4074] Bluetooth: hci4: command 0x040f tx timeout
[   46.133230][ T4074] Bluetooth: hci3: command 0x040f tx timeout
[   46.143457][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.146578][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.153549][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.156596][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.160817][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.177335][ T1824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.179501][ T4037] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.182603][ T4037] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.183888][ T1824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.185163][ T4037] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.189692][ T4037] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.195357][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   46.199011][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   46.202090][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   46.205075][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   46.207994][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   46.210992][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   46.215052][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   46.217803][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   46.220697][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   46.228330][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   46.231467][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   46.234574][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   46.237444][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   46.242613][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.245675][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.248517][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.252305][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.256525][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.259576][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.263255][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   46.266320][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.270725][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.289971][ T4113] tipc: Started in network mode
[   46.292043][ T4113] tipc: Node identity 7f000001, cluster identity 4711
[   46.294816][ T4113] tipc: Enabled bearer <udp:syz2>, priority 10
[   46.297123][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   46.300125][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   46.317450][ T4031] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.320089][ T4031] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.325995][ T4031] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.329225][ T4031] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.308343][ T4076] tipc: Node number set to 2130706433
[   47.514792][ T4125] loop2: detected capacity change from 0 to 1024
[   47.559214][ T4125] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   47.662173][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.664509][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.671850][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   47.687519][ T4111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.690661][ T4111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.726153][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   47.824331][  T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.835400][  T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.850696][ T1824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.853167][ T1824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.853278][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   47.859298][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   48.255794][ T4038] Bluetooth: hci3: command 0x0419 tx timeout
[   48.403782][ T4038] Bluetooth: hci4: command 0x0419 tx timeout
[   48.534962][ T4038] Bluetooth: hci1: command 0x0419 tx timeout
[   48.536869][ T4038] Bluetooth: hci0: command 0x0419 tx timeout
[   48.538834][ T4038] Bluetooth: hci2: command 0x0419 tx timeout
[   48.707838][ T4142] loop0: detected capacity change from 0 to 1024
[   48.723774][ T4139] udc-core: couldn't find an available UDC or it's busy
[   48.725759][ T4139] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   48.745186][ T4142] =======================================================
[   48.745186][ T4142] WARNING: The mand mount option has been deprecated and
[   48.745186][ T4142]          and is ignored by this kernel. Remove the mand
[   48.745186][ T4142]          option from the mount to silence this warning.
[   48.745186][ T4142] =======================================================
[   48.753165][ T4144] loop3: detected capacity change from 0 to 512
[   48.778915][ T4142] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none.
[   48.806068][ T4142] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   48.812195][ T4142] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 1 with error 28
[   48.815758][ T4142] EXT4-fs (loop0): This should not happen!! Data will be lost
[   48.815758][ T4142] 
[   48.818448][ T4142] EXT4-fs (loop0): Total free blocks count 0
[   48.820048][ T4142] EXT4-fs (loop0): Free/Dirty block details
[   48.821823][ T4142] EXT4-fs (loop0): free_blocks=4293918720
[   48.823477][ T4142] EXT4-fs (loop0): dirty_blocks=16
[   48.824882][ T4142] EXT4-fs (loop0): Block reservation details
[   48.826619][ T4142] EXT4-fs (loop0): i_reserved_data_blocks=1
[   48.862218][ T4142] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: none.
[   49.060985][ T4144] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.11: casefold flag without casefold feature
[   49.072654][ T4144] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.11: couldn't read orphan inode 15 (err -117)
[   49.076621][ T4144] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   52.978559][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.994868][ T4169] bond0: (slave rose0): Enslaving as an active interface with an up link
[   53.002186][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[   53.009270][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   53.056214][ T4177] loop0: detected capacity change from 0 to 256
[   53.060199][ T4172] bond0: (slave rose0): Releasing backup interface
[   53.106625][ T4181] loop3: detected capacity change from 0 to 512
[   53.180306][ T4181] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.18: inode #1: comm syz.3.18: iget: illegal inode #
[   53.217151][ T4181] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.18: error while reading EA inode 1 err=-117
[   53.288465][ T4196] Zero length message leads to an empty skb
[   53.381310][ T4181] EXT4-fs (loop3): 1 orphan inode deleted
[   53.383090][ T4181] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   53.544588][ T4201] No such timeout policy "syz1"
[   54.164081][ T4200] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   54.190285][ T4205] loop2: detected capacity change from 0 to 64
[   55.148570][ T4224] loop0: detected capacity change from 0 to 256
[   55.184275][ T4212] loop4: detected capacity change from 0 to 1024
[   55.254786][ T4212] hfsplus: invalid attributes max_key_len 259
[   55.269945][ T4212] hfsplus: failed to load attributes file
[   55.992406][ T4070] kernel write not supported for file /adsp1 (pid: 4070 comm: kworker/1:3)
[   56.142363][ T4237] loop3: detected capacity change from 0 to 2048
[   56.393241][ T4237] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[   56.395641][ T4237] UDF-fs: Scanning with blocksize 512 failed
[   57.190830][ T4237] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   57.321293][ T4248] loop0: detected capacity change from 0 to 512
[   57.457481][ T4254] loop4: detected capacity change from 0 to 64
[   58.095496][ T4248] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.32: iget: bad extended attribute block 1
[   58.099747][ T4248] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.32: couldn't read orphan inode 15 (err -117)
[   58.135125][ T4248] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none.
[   58.348671][ T4231] loop2: detected capacity change from 0 to 40427
[   58.703212][ T4234] attempt to access beyond end of device
[   58.703212][ T4234] loop3: rw=1, want=2050, limit=2048
[   58.723723][ T4234] Buffer I/O error on dev loop3, logical block 1024, lost async page write
[   58.737765][ T4234] attempt to access beyond end of device
[   58.737765][ T4234] loop3: rw=1, want=2050, limit=2048
[   58.765886][ T4234] Buffer I/O error on dev loop3, logical block 1024, lost async page write
[   58.787082][ T4263] loop4: detected capacity change from 0 to 512
[   58.789088][ T4234] attempt to access beyond end of device
[   58.789088][ T4234] loop3: rw=1, want=2050, limit=2048
[   58.797424][ T4234] Buffer I/O error on dev loop3, logical block 1024, lost async page write
[   58.809562][ T4234] attempt to access beyond end of device
[   58.809562][ T4234] loop3: rw=1, want=2050, limit=2048
[   58.823179][ T4234] Buffer I/O error on dev loop3, logical block 1024, lost async page write
[   58.825832][ T4234] attempt to access beyond end of device
[   58.825832][ T4234] loop3: rw=1, want=2052, limit=2048
[   58.876685][ T4234] Buffer I/O error on dev loop3, logical block 1025, lost async page write
[   58.879180][ T4234] attempt to access beyond end of device
[   58.879180][ T4234] loop3: rw=1, want=2052, limit=2048
[   58.913067][ T4234] Buffer I/O error on dev loop3, logical block 1025, lost async page write
[   58.915576][ T4234] attempt to access beyond end of device
[   58.915576][ T4234] loop3: rw=1, want=2052, limit=2048
[   58.918540][ T4234] Buffer I/O error on dev loop3, logical block 1025, lost async page write
[   58.920973][ T4234] attempt to access beyond end of device
[   58.920973][ T4234] loop3: rw=1, want=2052, limit=2048
[   58.981088][ T4234] Buffer I/O error on dev loop3, logical block 1025, lost async page write
[   58.983684][ T4234] attempt to access beyond end of device
[   58.983684][ T4234] loop3: rw=1, want=2054, limit=2048
[   59.009047][ T4263] Quota error (device loop4): v2_read_file_info: Can't read info structure
[   59.012548][ T4263] EXT4-fs warning (device loop4): ext4_enable_quotas:6456: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[   59.018574][ T4263] EXT4-fs (loop4): mount failed
[   59.030106][ T4234] Buffer I/O error on dev loop3, logical block 1026, lost async page write
[   59.054682][ T4234] attempt to access beyond end of device
[   59.054682][ T4234] loop3: rw=1, want=2054, limit=2048
[   59.069095][ T4234] Buffer I/O error on dev loop3, logical block 1026, lost async page write
[   61.102199][ T4300] 8021q: adding VLAN 0 to HW filter on device batadv1
[   61.172585][ T4300] team0: Port device batadv1 added
[   61.188233][ T4306] loop3: detected capacity change from 0 to 512
[   61.284956][ T4306] EXT4-fs (loop3): Test dummy encryption mode enabled
[   61.287012][ T4306] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   61.303194][ T4306] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   61.351643][ T4306] EXT4-fs (loop3): 1 truncate cleaned up
[   61.357245][ T4306] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,resgid=0x0000000000000000,,errors=continue. Quota mode: none.
[   61.403236][ T4310] syz.1.44 (4310): attempted to duplicate a private mapping with mremap.  This is not supported.
[   61.427503][ T4310] loop1: detected capacity change from 0 to 128
[   61.443788][ T4316] mmap: syz.0.45 (4316) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[   61.498271][ T4310] FAT-fs (loop1): Directory bread(block 32) failed
[   61.500296][ T4310] FAT-fs (loop1): Directory bread(block 33) failed
[   61.521230][ T4310] FAT-fs (loop1): Directory bread(block 34) failed
[   61.523210][ T4310] FAT-fs (loop1): Directory bread(block 35) failed
[   61.525120][ T4310] FAT-fs (loop1): Directory bread(block 36) failed
[   61.526974][ T4310] FAT-fs (loop1): Directory bread(block 37) failed
[   61.541442][ T4310] FAT-fs (loop1): Directory bread(block 38) failed
[   61.543477][ T4310] FAT-fs (loop1): Directory bread(block 39) failed
[   61.545941][ T4310] FAT-fs (loop1): Directory bread(block 40) failed
[   61.561822][ T4310] FAT-fs (loop1): Directory bread(block 41) failed
[   61.808416][ T4306] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce"
[   61.847232][ T4310] FAT-fs (loop1): Filesystem has been set read-only
[   61.848300][ T4324] loop0: detected capacity change from 0 to 8192
[   61.849408][ T4310] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[   61.878212][ T4324] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   61.884775][ T4324] REISERFS (device loop0): using ordered data mode
[   61.886717][ T4324] reiserfs: using flush barriers
[   61.900465][ T4324] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   61.935283][ T4324] REISERFS (device loop0): checking transaction log (loop0)
[   62.005606][ T4306] fscrypt: AES-256-XTS using implementation "xts-aes-ce"
[   62.320793][ T4324] REISERFS (device loop0): Using tea hash to sort names
[   62.324220][ T4324] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[   62.328060][ T4324] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[   63.903947][ T4353] loop3: detected capacity change from 0 to 2048
[   63.962572][ T4353] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=2362, location=2362
[   63.970129][ T4353] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   63.996464][ T4353] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[   64.175250][ T4353] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   64.205985][ T4363] tipc: Started in network mode
[   64.207641][ T4363] tipc: Node identity 7f000001, cluster identity 4711
[   64.213433][ T4363] tipc: Enabled bearer <udp:syz1>, priority 10
[   65.063110][ T4353] udc-core: couldn't find an available UDC or it's busy
[   65.065098][ T4353] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   65.105256][ T4363] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.107828][ T4369] loop0: detected capacity change from 0 to 512
[   65.148888][ T4363] device syzkaller0 entered promiscuous mode
[   65.235633][ T4362] tipc: Resetting bearer <eth:syzkaller0>
[   65.309121][ T4369] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.54: bg 0: block 248: padding at end of block bitmap is not set
[   65.319971][ T4362] tipc: Disabling bearer <eth:syzkaller0>
[   65.340035][ T4369] Quota error (device loop0): write_blk: dquota write failed
[   65.344916][ T4369] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[   65.347716][ T4369] EXT4-fs error (device loop0): ext4_acquire_dquot:6204: comm syz.0.54: Failed to acquire dquot type 1
[   65.353630][ T4378] loop4: detected capacity change from 0 to 512
[   65.367349][ T4369] EXT4-fs (loop0): 1 truncate cleaned up
[   65.369433][ T4369] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   65.420122][ T4369] tipc: Failed to obtain node identity
[   65.421992][ T4369] tipc: Enabling of bearer <ib:wg2> rejected, failed to enable media
[   65.500262][  T136] Quota error (device loop0): remove_tree: Getting block too big (0 >= 6)
[   65.507666][  T136] EXT4-fs error (device loop0): ext4_release_dquot:6240: comm kworker/u4:1: Failed to release dquot type 1
[   65.546672][ T4378] EXT4-fs (loop4): Test dummy encryption mode enabled
[   65.548897][ T4378] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   65.557027][ T4378] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002]
[   65.559633][ T4378] System zones: 1-12
[   65.566535][ T4378] EXT4-fs (loop4): 1 truncate cleaned up
[   65.568271][ T4378] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,nogrpid,test_dummy_encryption,debug,nobarrier,quota,,errors=continue. Quota mode: writeback.
[   65.591109][ T4389] loop0: detected capacity change from 0 to 8
[   65.631828][ T4389] MTD: Attempt to mount non-MTD device "/dev/loop0"
[   65.664521][ T4016] udevd[4016]: incorrect cramfs checksum on /dev/loop0
[   65.689056][ T4016] udevd[4016]: incorrect cramfs checksum on /dev/loop0
[   65.707983][ T4016] udevd[4016]: incorrect cramfs checksum on /dev/loop0
[   65.718579][ T4389] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   65.945017][ T4016] udevd[4016]: incorrect cramfs checksum on /dev/loop0
[   65.958614][ T4016] udevd[4016]: incorrect cramfs checksum on /dev/loop0
[   65.975582][ T4016] udevd[4016]: incorrect cramfs checksum on /dev/loop0
[   66.117411][ T4016] udevd[4016]: incorrect cramfs checksum on /dev/loop0
[   66.191531][ T4075] tipc: Node number set to 2130706433
[   66.199104][ T4399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.65'.
[   66.215658][ T4401] loop3: detected capacity change from 0 to 128
[   68.637536][ T4111] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.656234][ T4429] binder: 4427:4429 tried to acquire reference to desc 0, got 1 instead
[   68.660706][ T4429] binder_alloc: 4427: pid 4427 spamming oneway? 2 buffers allocated for a total size of 5120
[   68.665815][ T4429] binder_alloc: 4427: pid 4427 spamming oneway? 3 buffers allocated for a total size of 5128
[   68.669850][    T7] binder: undelivered TRANSACTION_COMPLETE
[   68.697261][    T7] binder: undelivered transaction 6, process died.
[   68.699318][    T7] binder: undelivered transaction 7, process died.
[   68.701419][    T7] binder: undelivered transaction 5, process died.
[   68.764903][ T4111] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.780687][ T4433] udc-core: couldn't find an available UDC or it's busy
[   68.783014][ T4433] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   68.855531][ T4111] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.976053][ T4111] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.016749][ T4436] MPTCP: addr_signal error, add_addr=1, echo=0
[   69.289993][ T4423] chnl_net:caif_netlink_parms(): no params data found
[   70.146397][ T2056] ieee802154 phy0 wpan0: encryption failed: -22
[   70.148683][ T2056] ieee802154 phy1 wpan1: encryption failed: -22
[   71.241633][    T7] Bluetooth: hci2: command 0x0409 tx timeout
[   71.327264][ T4423] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.329469][ T4423] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.343399][    T7] Bluetooth: hci3: command 0x0409 tx timeout
[   71.356172][ T4423] device bridge_slave_0 entered promiscuous mode
[   71.372636][ T4423] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.383001][ T4423] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.386019][ T4423] device bridge_slave_1 entered promiscuous mode
[   72.530631][ T4423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.555513][ T4423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.642626][ T4423] team0: Port device team_slave_0 added
[   72.736623][ T4423] team0: Port device team_slave_1 added
[   73.493047][    T7] Bluetooth: hci2: command 0x041b tx timeout
[   73.497659][ T4073] Bluetooth: hci3: command 0x041b tx timeout
[   73.583280][ T4423] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.585363][ T4423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.621342][ T4423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.666249][ T4423] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.668913][ T4423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.715980][ T4423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.982402][ T4423] device hsr_slave_0 entered promiscuous mode
[   74.003986][ T4495] loop1: detected capacity change from 0 to 8
[   74.762482][ T4423] device hsr_slave_1 entered promiscuous mode
[   74.788606][ T1533] cfg80211: failed to load regulatory.db
[   74.829307][ T4499] loop2: detected capacity change from 0 to 128
[   74.832280][ T4423] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.834416][ T4423] Cannot create hsr debugfs directory
[   74.863232][ T4442] chnl_net:caif_netlink_parms(): no params data found
[   74.940306][ T4499] hpfs: bad mount options.
[   75.035828][ T4510] loop4: detected capacity change from 0 to 256
[   75.118257][ T4515] TCP: tcp_parse_options: Illegal window scaling value 253 > 14 received
[   75.135871][ T4510] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   75.139087][ T4510] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[   75.205368][ T4510] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   75.290303][ T4442] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.292722][ T4442] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.295538][ T4442] device bridge_slave_0 entered promiscuous mode
[   75.302817][ T4442] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.304854][ T4442] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.308122][ T4442] device bridge_slave_1 entered promiscuous mode
[   75.543150][ T4525] binder: 4523:4525 tried to acquire reference to desc 0, got 1 instead
[   75.545582][ T4525] binder: 4523:4525 ioctl c0306201 200003c0 returned -14
[   76.266719][    T7] Bluetooth: hci3: command 0x040f tx timeout
[   76.269556][    T7] Bluetooth: hci2: command 0x040f tx timeout
[   76.297762][ T4525] binder: 4523:4525 got transaction with invalid data ptr
[   76.299997][ T4525] binder: 4523:4525 transaction failed 29201/-14, size 0-24 line 3186
[   76.393232][ T4525] syz.1.91 (4525): drop_caches: 2
[   76.434141][ T4442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.439184][ T4442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.521314][ T4070] binder: undelivered TRANSACTION_ERROR: 29201
[   76.567805][ T4532] loop1: detected capacity change from 0 to 512
[   76.606642][ T4442] team0: Port device team_slave_0 added
[   76.610259][ T4442] team0: Port device team_slave_1 added
[   76.656521][ T4524] loop2: detected capacity change from 0 to 32768
[   76.694911][ T4442] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.696946][ T4442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.727224][ T4524] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.92 (4524)
[   76.732756][ T4442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.763550][ T4532] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback.
[   76.948291][ T4524] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm
[   76.950977][ T4524] BTRFS info (device loop2): force clearing of disk cache
[   76.971412][ T4524] BTRFS info (device loop2): enabling auto defrag
[   76.973297][ T4524] BTRFS info (device loop2): max_inline at 0
[   77.022354][ T4524] BTRFS info (device loop2): enabling disk space caching
[   77.024902][ T4524] BTRFS info (device loop2): disk space caching is enabled
[   77.027281][ T4524] BTRFS info (device loop2): has skinny extents
[   77.782297][ T4423] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   77.867009][ T4442] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.869288][ T4442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.894203][ T4442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.948198][ T4423] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   78.034819][ T4423] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   78.077809][ T4524] BTRFS info (device loop2): enabling ssd optimizations
[   78.085785][ T4524] BTRFS info (device loop2): clearing free space tree
[   78.088113][ T4524] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   78.111751][ T4524] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   78.204258][ T4570] netlink: 'syz.4.97': attribute type 4 has an invalid length.
[   78.274997][ T4038] Bluetooth: hci3: command 0x0419 tx timeout
[   78.351258][ T4038] Bluetooth: hci2: command 0x0419 tx timeout
[   78.356327][ T4575] netlink: 'syz.4.97': attribute type 4 has an invalid length.
[   78.361408][ T4423] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   78.519599][ T4111] device hsr_slave_0 left promiscuous mode
[   78.596289][ T4111] device hsr_slave_1 left promiscuous mode
[   78.683006][ T4111] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.685774][ T4111] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.690592][ T4111] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.713350][ T4111] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.763715][ T4111] device bridge_slave_1 left promiscuous mode
[   78.766077][ T4111] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.916014][ T4111] device bridge_slave_0 left promiscuous mode
[   78.919122][ T4111] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.101594][ T4111] device veth1_macvtap left promiscuous mode
[   80.120493][ T4111] device veth0_macvtap left promiscuous mode
[   80.125385][ T4111] device veth1_vlan left promiscuous mode
[   81.289490][ T4111] device veth0_vlan left promiscuous mode
[   81.428599][ T4611] loop1: detected capacity change from 0 to 256
[   81.505066][ T4611] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   81.508327][ T4611] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[   81.534299][ T4611] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   81.720970][ T4111] team0 (unregistering): Port device batadv1 removed
[   84.542035][ T4111] team0 (unregistering): Port device team_slave_1 removed
[   84.570117][ T4111] team0 (unregistering): Port device team_slave_0 removed
[   84.591496][ T4111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   84.654105][ T4111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   84.789410][ T4111] bond0 (unregistering): Released all slaves
[   84.884565][ T4621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.106'.
[   84.943440][ T4442] device hsr_slave_0 entered promiscuous mode
[   84.971593][ T4442] device hsr_slave_1 entered promiscuous mode
[   85.011350][ T4442] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   85.013563][ T4442] Cannot create hsr debugfs directory
[   85.103293][ T4632] loop1: detected capacity change from 0 to 8
[   85.223578][ T4632] SQUASHFS error: lzo decompression failed, data probably corrupt
[   85.226008][ T4632] SQUASHFS error: Failed to read block 0x91: -5
[   85.227811][ T4632] SQUASHFS error: Unable to read metadata cache entry [8f]
[   85.229783][ T4632] SQUASHFS error: Unable to read inode 0x13f
[   85.324632][ T4639] loop2: detected capacity change from 0 to 256
[   86.001023][ T4639] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   86.004971][ T4639] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[   86.058667][ T4639] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   86.151683][ T4423] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.080959][ T4652] exFAT-fs (loop2): hint_cluster is invalid (17)
[   87.155574][ T4652] exFAT-fs (loop2): error, invalid access to FAT (entry 0xffffffff)
[   87.158186][ T4652] exFAT-fs (loop2): Filesystem has been set read-only
[   88.061276][ T4423] 8021q: adding VLAN 0 to HW filter on device team0
[   88.063583][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   88.066313][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   88.109900][ T1824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   88.114181][ T1824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   88.119439][ T1824] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.121536][ T1824] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.175380][ T1824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   88.178270][ T1824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   88.357137][ T1824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   88.369376][ T1824] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.371430][ T1824] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.224919][  T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   89.228123][  T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   89.240854][ T4442] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   89.287999][ T4667] loop2: detected capacity change from 0 to 512
[   89.315129][ T4667] EXT4-fs (loop2): Test dummy encryption mode enabled
[   89.317140][ T4667] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   89.388910][ T4667] EXT4-fs (loop2): 1 truncate cleaned up
[   89.390615][ T4667] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,resgid=0x0000000000000000,,errors=continue. Quota mode: none.
[   89.425582][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   89.588425][ T4678] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   89.592515][ T4678] FAT-fs (loop3): unable to read boot sector
[   90.202733][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   90.233007][ T4442] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   90.291380][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   90.294295][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   90.297265][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   90.313888][ T1824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   90.316841][ T1824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   90.353543][ T1824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   90.365970][ T4684] loop4: detected capacity change from 0 to 1024
[   90.368720][ T1824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   90.377440][ T4442] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   90.417578][ T4684] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   90.422524][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   90.438232][ T4442] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   90.746612][  T330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   90.749117][  T330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   90.802317][ T4423] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.886742][ T4442] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.907883][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   90.910924][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   90.936115][ T4442] 8021q: adding VLAN 0 to HW filter on device team0
[   90.955849][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   90.959172][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   90.962493][ T4135] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.964720][ T4135] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.983310][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   90.992250][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   90.996569][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   91.003914][ T4135] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.005978][ T4135] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.026012][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   91.033468][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   91.039878][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   91.054062][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   91.068620][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   91.090235][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   91.108179][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   91.118404][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   91.125644][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   91.143095][ T4442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   91.157001][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   91.167341][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   91.170486][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   91.358088][ T4423] device veth0_vlan entered promiscuous mode
[   91.417044][ T4423] device veth1_vlan entered promiscuous mode
[   91.426162][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   91.429014][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   91.441099][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   91.453866][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   92.230227][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   92.250670][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   92.274742][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   94.889589][ T4423] device veth0_macvtap entered promiscuous mode
[   94.934224][ T1824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   94.937285][ T1824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   94.946852][ T1824] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   94.965897][ T4423] device veth1_macvtap entered promiscuous mode
[   95.083379][ T4743] batman_adv: batadv0: Adding interface: dummy0
[   95.085348][ T4743] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.101570][ T4743] batman_adv: batadv0: Interface activated: dummy0
[   95.108886][ T4423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.120092][ T4423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.123951][ T4423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.127235][ T4423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.129967][ T4423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.166352][ T4423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.173468][ T4423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.176432][ T4423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.205309][ T4423] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.219475][ T4743] batadv0: mtu less than device minimum
[   95.269004][ T4743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   95.276802][ T4743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   95.284234][ T4743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   95.289679][ T4750] loop4: detected capacity change from 0 to 2048
[   95.291702][ T4743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   95.299052][ T4743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   95.306457][ T4743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   95.313807][ T4743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   95.321543][ T4743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   95.328827][ T4743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   95.389565][ T4748] device macvlan2 entered promiscuous mode
[   95.393809][ T4748] device batadv0 entered promiscuous mode
[   95.394294][ T4748] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   95.400408][ T4748] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[   95.400542][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   95.401567][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   95.411279][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   95.439219][ T4750] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   95.439757][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   95.469552][ T4423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.473867][ T4423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.484177][ T4423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.502055][ T4423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.507240][ T4423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.544016][ T4423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.561883][ T4423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.577137][ T4423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.663436][ T4423] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.706529][ T4442] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.758152][ T1824] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   95.762526][ T1824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   95.773608][ T4423] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.786319][ T4423] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.798695][ T4423] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.824249][ T4423] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.562928][  T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.565478][  T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.626408][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   97.678844][  T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.701373][  T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.705981][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   98.898298][ T1824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   98.902182][ T1824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   98.958987][ T4442] device veth0_vlan entered promiscuous mode
[   98.972788][ T1824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   99.983149][ T1824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   99.992202][ T1824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  100.024037][ T4811] loop1: detected capacity change from 0 to 8
[  100.040683][ T1824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  100.211621][ T4442] device veth1_vlan entered promiscuous mode
[  100.233949][ T4811] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  100.236982][ T1824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  100.240051][ T1824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  100.248048][ T4442] device veth0_macvtap entered promiscuous mode
[  100.257303][ T4811] process 'syz.1.137' launched './file2' with NULL argv: empty string added
[  100.999666][    C0] net_ratelimit: 12 callbacks suppressed
[  100.999690][    C0] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  101.083964][ T4811] cramfs: Error -5 while decompressing!
[  101.085804][ T4811] cramfs: 000000009c2504c0(26)->000000009acc9000(4096)
[  101.087866][ T4811] cramfs: Error -5 while decompressing!
[  101.089540][ T4811] cramfs: 00000000e7303ed6(26)->00000000b3deac73(4096)
[  101.108055][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  101.115574][ T4442] device veth1_macvtap entered promiscuous mode
[  101.129293][ T4442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.152171][ T4811] cramfs: Error -3 while decompressing!
[  101.153965][ T4811] cramfs: 00000000483a35e6(16)->00000000790af3d1(4096)
[  101.156035][ T4811] cramfs: Error -5 while decompressing!
[  101.157577][ T4811] cramfs: 000000009c2504c0(26)->000000009acc9000(4096)
[  101.163055][ T4442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.166015][ T4442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.169088][ T4442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.224481][ T4442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.226184][ T4827] loop4: detected capacity change from 0 to 1024
[  101.227486][ T4442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.239249][ T4442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.243987][ T4442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.246816][ T4442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.249874][ T4442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.270034][ T4036] udevd[4036]: incorrect cramfs checksum on /dev/loop1
[  101.292627][ T4442] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.311225][ T1824] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  101.317103][ T1824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  101.340753][ T4827] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  101.369359][ T4442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.372918][ T4442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.376228][ T4442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.379558][ T4442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.382513][ T4442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.385782][ T4442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.388959][ T4442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.392136][ T4442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.399132][ T4442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.405613][ T4442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.414045][ T4442] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.416836][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  101.424982][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  101.459236][ T4442] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.466113][ T4442] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.468745][ T4442] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.471497][ T4442] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.682438][ T1614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.685220][ T1614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.690340][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  102.613025][ T4234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.615544][ T4234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.619934][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  102.837052][ T4847] loop2: detected capacity change from 0 to 8192
[  103.669274][ T4847] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  103.675328][ T4847] REISERFS (device loop2): using ordered data mode
[  103.678570][ T4847] reiserfs: using flush barriers
[  103.702808][ T4847] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  103.733857][ T4862] netlink: 44 bytes leftover after parsing attributes in process `syz.6.79'.
[  103.749929][ T4847] REISERFS (device loop2): checking transaction log (loop2)
[  103.759131][ T4862] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.762580][ T4862] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.787241][ T4871] loop4: detected capacity change from 0 to 512
[  103.959481][ T4871] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  105.072969][ T4882] EXT4-fs error (device loop4): ext4_do_update_inode:5203: inode #2: comm syz.4.147: corrupted inode contents
[  105.093841][ T4882] EXT4-fs error (device loop4): ext4_dirty_inode:6039: inode #2: comm syz.4.147: mark_inode_dirty error
[  105.101774][ T4882] EXT4-fs error (device loop4): ext4_do_update_inode:5203: inode #2: comm syz.4.147: corrupted inode contents
[  105.594257][ T4847] REISERFS (device loop2): Using tea hash to sort names
[  106.032432][ T4847] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  107.861486][    C1] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  108.446996][ T4923] netlink: 8 bytes leftover after parsing attributes in process `syz.6.158'.
[  108.450169][ T4923] netlink: 8 bytes leftover after parsing attributes in process `syz.6.158'.
[  109.776373][ T4936] loop2: detected capacity change from 0 to 1024
[  110.937891][ T4946] loop6: detected capacity change from 0 to 256
[  111.062351][ T4936] hfsplus: invalid btree extent records (0 size)
[  111.064301][ T4936] hfsplus: failed to load extents file
[  111.097588][ T4946] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  114.456208][ T4980] loop1: detected capacity change from 0 to 256
[  116.980261][ T4992] ODEBUG: Out of memory. ODEBUG disabled
[  118.415102][ T5010] loop5: detected capacity change from 0 to 1024
[  118.736083][ T5010] EXT4-fs (loop5): Ignoring removed nobh option
[  118.738858][ T5010] EXT4-fs (loop5): Ignoring removed bh option
[  118.745368][ T5010] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  119.226868][ T5037] loop1: detected capacity change from 0 to 40427
[  120.111755][ T5029] sched: RT throttling activated
[  120.130477][ T5034] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  120.133591][ T5034] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  120.136102][ T5034] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  120.138800][ T5034] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  121.054083][ T5010] EXT4-fs: failed to create workqueue
[  121.072188][ T5010] EXT4-fs (loop5): mount failed
[  121.099199][ T5037] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff
[  121.154331][ T5037] F2FS-fs (loop1): invalid crc value
[  121.235353][ T5037] F2FS-fs (loop1): Found nat_bits in checkpoint
[  123.660336][ T5034] team0: Port device vxlan0 added
[  123.689229][ T5037] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  123.820789][ T5054] binder: 5053:5054 tried to acquire reference to desc 0, got 1 instead
[  123.824028][ T5054] binder: 5053:5054 got transaction with invalid data ptr
[  123.826131][ T5054] binder: 5053:5054 transaction failed 29201/-14, size 0-24 line 3186
[  123.828848][ T5054] binder_alloc: 5053: pid 5053 spamming oneway? 1 buffers allocated for a total size of 5184
[  123.832308][   T13] binder: undelivered TRANSACTION_COMPLETE
[  123.845606][   T13] binder: undelivered transaction 18, process died.
[  126.265935][ T4111] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.612968][ T5096] loop2: detected capacity change from 0 to 8192
[  128.697163][ T5097] loop4: detected capacity change from 0 to 1024
[  128.738987][ T4111] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.762498][ T4036]  loop2: p1 p2 p3 p4
[  128.762498][ T4036]  p3: <minix: p5 p6 p7 >
[  128.765349][ T4036] loop2: partition table partially beyond EOD, truncated
[  128.768138][ T4036] loop2: p1 start 51379968 is beyond EOD, truncated
[  128.770156][ T4036] loop2: p2 start 4293394690 is beyond EOD, truncated
[  128.772521][ T4036] loop2: p3 size 100663552 extends beyond EOD, truncated
[  128.782061][ T4036] loop2: p4 size 50331648 extends beyond EOD, truncated
[  128.785179][ T4036] loop2: p5 start 51379968 is beyond EOD, truncated
[  130.315660][ T5111] loop6: detected capacity change from 0 to 256
[  130.981658][ T4036] loop2: p6 start 4293394690 is beyond EOD, truncated
[  130.983763][ T4036] loop2: p7 size 100663552 extends beyond EOD, truncated
[  131.026342][ T4111] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.040985][ T5096]  loop2: p1 p2 p3 p4
[  131.040985][ T5096]  p3: <minix: p5 p6 p7 >
[  131.043461][ T5096] loop2: partition table partially beyond EOD, truncated
[  131.045803][ T5096] loop2: p1 start 51379968 is beyond EOD, truncated
[  131.047629][ T5096] loop2: p2 start 4293394690 is beyond EOD, truncated
[  131.049584][ T5096] loop2: p3 size 100663552 extends beyond EOD, truncated
[  131.111674][ T2056] ieee802154 phy0 wpan0: encryption failed: -22
[  131.114881][ T5096] loop2: p4 size 50331648 extends beyond EOD, truncated
[  131.120131][ T5096] loop2: p5 start 51379968 is beyond EOD, truncated
[  131.122188][ T5096] loop2: p6 start 4293394690 is beyond EOD, truncated
[  131.124043][ T5096] loop2: p7 size 100663552 extends beyond EOD, truncated
[  131.189414][ T2056] ieee802154 phy1 wpan1: encryption failed: -22
[  131.292282][ T5119] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  131.857659][ T4111] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.595288][ T5150] netlink: 44 bytes leftover after parsing attributes in process `syz.4.208'.
[  134.348966][ T5155] udc-core: couldn't find an available UDC or it's busy
[  134.351792][ T5155] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  134.448788][ T4016] udevd[4016]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  134.463110][ T5164] loop4: detected capacity change from 0 to 256
[  134.482821][ T4036] udevd[4036]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  134.533722][ T4133] udevd[4133]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory
[  134.685671][ T5164] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  135.669011][ T4016] udevd[4016]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  135.729446][ T5169] loop2: detected capacity change from 0 to 8192
[  137.210041][ T4036] udevd[4036]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  137.216475][ T4133] udevd[4133]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory
[  138.271846][ T5169] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  138.301290][ T5169] REISERFS (device loop2): using ordered data mode
[  138.303282][ T5169] reiserfs: using flush barriers
[  138.494674][ T5169] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  138.522823][ T5169] REISERFS (device loop2): checking transaction log (loop2)
[  140.071210][ T5169] REISERFS (device loop2): Using r5 hash to sort names
[  140.074116][ T5169] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  140.642383][ T5204] delete_channel: no stack
[  143.603579][   T25] Bluetooth: hci3: command 0x0405 tx timeout
[  145.756296][ T5278] loop4: detected capacity change from 0 to 512
[  146.256377][ T5275] loop6: detected capacity change from 0 to 8192
[  146.309459][ T5278] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,barrier=0x0000000000001000,grpjquota=,quota,nobarrier,,errors=continue. Quota mode: writeback.
[  146.353894][ T5275] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal
[  146.357466][ T5275] REISERFS (device loop6): using ordered data mode
[  146.359446][ T5275] reiserfs: using flush barriers
[  146.370176][ T5275] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  146.391501][ T5275] REISERFS (device loop6): checking transaction log (loop6)
[  146.401637][ T5286] loop5: detected capacity change from 0 to 512
[  146.412095][ T5275] REISERFS (device loop6): Using r5 hash to sort names
[  146.414323][ T5275] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  146.457374][ T5286] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  146.459745][ T5286] EXT4-fs (loop5): Ignoring removed mblk_io_submit option
[  146.577939][ T5286] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  146.580528][ T5286] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  146.618589][ T5286] EXT4-fs (loop5): 1 truncate cleaned up
[  146.620264][ T5286] EXT4-fs (loop5): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,mblk_io_submit,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback.
[  146.863902][ T5296] binder: 5289:5296 ioctl c0306201 0 returned -14
[  146.871974][ T5296] binder: 5289:5296 got transaction to invalid handle, 1
[  146.874291][ T5296] binder: 5289:5296 transaction failed 29201/-22, size 0-0 line 2917
[  147.657731][ T4071] binder: undelivered TRANSACTION_ERROR: 29201
[  148.033048][ T5305] bpf_jit: unknown atomic op code 51
[  149.476904][ T5317] loop2: detected capacity change from 0 to 256
[  149.552292][ T5317] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  151.359366][ T5333] loop4: detected capacity change from 0 to 40427
[  152.095499][ T5341] loop5: detected capacity change from 0 to 2048
[  152.252920][ T5333] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1ffff
[  152.255499][ T5333] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4
[  152.269969][ T5333] F2FS-fs (loop4): invalid crc value
[  152.329896][ T5333] F2FS-fs (loop4): Found nat_bits in checkpoint
[  152.354802][ T5333] F2FS-fs (loop4): Start checkpoint disabled!
[  152.385212][ T5333] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  153.280815][ T5358] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  153.754547][ T5367] NILFS (loop5): failed to count free inodes: err=-34
[  153.757152][ T5367] NILFS (loop5): failed to count free inodes: err=-34
[  154.214568][ T5367] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=16, inode=2, rec_len=16, name_len=255
[  154.229689][ T5359] loop2: detected capacity change from 0 to 2048
[  154.269748][ T5367] Remounting filesystem read-only
[  154.374367][ T1614] handle_bad_sector: 3 callbacks suppressed
[  154.374385][ T1614] attempt to access beyond end of device
[  154.374385][ T1614] loop4: rw=2049, want=40984, limit=40427
[  154.575206][ T5359] EXT4-fs (loop2): Ignoring removed bh option
[  154.577548][ T5359] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  154.579927][ T5359] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  154.617570][ T5359] EXT4-fs (loop2): Ignoring removed orlov option
[  154.619659][ T5359] EXT4-fs (loop2): can't mount with both data=journal and dax
[  155.505139][ T5377] loop4: detected capacity change from 0 to 512
[  155.534037][ T5377] EXT4-fs (loop4): Ignoring removed nobh option
[  155.535873][ T5377] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  155.547710][ T5385] loop5: detected capacity change from 0 to 512
[  155.559907][ T5385] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled
[  155.566855][ T5385] EXT4-fs (loop5): Unrecognized mount option "nodelalloc2" or missing value
[  155.608704][ T5377] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.250: invalid indirect mapped block 256 (level 2)
[  155.669084][ T5377] EXT4-fs (loop4): 2 truncates cleaned up
[  155.670848][ T5377] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback.
[  156.864932][ T5398] loop5: detected capacity change from 0 to 1024
[  157.068465][ T5398] EXT4-fs (loop5): Ignoring removed bh option
[  157.070636][ T5398] EXT4-fs (loop5): Mount option "nodelalloc" incompatible with ext3
[  157.075997][ T5371] loop1: detected capacity change from 0 to 32768
[  157.087341][ T5403] loop4: detected capacity change from 0 to 256
[  157.945373][ T5410] loop6: detected capacity change from 0 to 256
[  158.291557][ T5413] capability: warning: `syz.4.255' uses deprecated v2 capabilities in a way that may be insecure
[  159.358775][ T5410] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  161.805207][ T5428] device batadv1 entered promiscuous mode
[  162.144781][    C0] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  162.186303][ T4111] device hsr_slave_0 left promiscuous mode
[  163.053221][ T4111] device hsr_slave_1 left promiscuous mode
[  163.130966][ T5446] loop1: detected capacity change from 0 to 64
[  163.725720][ T5453] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  163.733663][ T5453] CIFS: Unable to determine destination address
[  164.344859][ T4111] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  165.012859][    T7] Bluetooth: hci4: command 0x0406 tx timeout
[  165.014751][    T7] Bluetooth: hci0: command 0x0406 tx timeout
[  165.016522][    T7] Bluetooth: hci1: command 0x0406 tx timeout
[  165.052607][ T4111] batman_adv: batadv0: Removing interface: batadv_slave_0
[  165.083638][ T4111] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  165.086119][ T4111] batman_adv: batadv0: Removing interface: batadv_slave_1
[  165.089145][ T4111] device bridge_slave_1 left promiscuous mode
[  165.094565][ T4111] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.202600][ T4111] device bridge_slave_0 left promiscuous mode
[  165.204532][ T4111] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.222139][ T5460] loop1: detected capacity change from 0 to 2048
[  165.331677][ T4111] device veth1_macvtap left promiscuous mode
[  165.333885][ T4111] device veth0_macvtap left promiscuous mode
[  165.335712][ T4111] device veth1_vlan left promiscuous mode
[  165.337260][ T4111] device veth0_vlan left promiscuous mode
[  165.343747][ T5460] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  165.510262][ T5464] loop2: detected capacity change from 0 to 40427
[  165.523935][ T5464] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  165.526213][ T5464] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  165.543012][ T5464] F2FS-fs (loop2): invalid crc value
[  165.587133][ T5464] F2FS-fs (loop2): Found nat_bits in checkpoint
[  166.136894][ T5464] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  166.139131][ T5464] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  167.756451][ T4111] team0 (unregistering): Port device team_slave_1 removed
[  167.801524][ T4111] team0 (unregistering): Port device team_slave_0 removed
[  167.816550][ T4111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  167.910834][ T4111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  168.718081][ T4111] bond0 (unregistering): Released all slaves
[  168.925871][ T5480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.270'.
[  168.928656][ T5480] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  169.381008][ T5487] loop6: detected capacity change from 0 to 65536
[  170.236602][ T5487] XFS (loop6): Mounting V5 Filesystem
[  170.284990][ T5487] XFS (loop6): Ending clean mount
[  171.268584][ T5533] loop2: detected capacity change from 0 to 1024
[  172.342343][ T5545] netlink: 9 bytes leftover after parsing attributes in process `syz.4.281'.
[  172.396045][ T5545] device gretap0 entered promiscuous mode
[  172.589464][ T5545] netlink: 5 bytes leftover after parsing attributes in process `syz.4.281'.
[  172.599627][ T5545] 0ªX¹¦D: renamed from gretap0
[  172.662228][ T5545] device 
30ªX¹¦D left promiscuous mode
[  172.665368][ T5545] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[  172.906833][ T5561] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  172.920901][ T5561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  172.940721][ T5561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  172.956243][ T5561] device bridge_slave_0 left promiscuous mode
[  172.965654][ T5561] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.015293][ T5561] device bridge_slave_1 left promiscuous mode
[  173.017281][ T5561] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.074383][ T5561] bond0: (slave bond_slave_0): Releasing backup interface
[  173.124509][ T5573] ceph: No source
[  173.192322][ T5557] Process accounting resumed
[  173.503803][ T5561] bond0: (slave bond_slave_1): Releasing backup interface
[  173.653901][ T5579] loop5: detected capacity change from 0 to 256
[  174.207938][ T5561] team0: Port device team_slave_0 removed
[  174.252346][ T5561] team0: Port device team_slave_1 removed
[  174.271271][ T5561] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  174.273482][ T5561] batman_adv: batadv0: Removing interface: batadv_slave_0
[  174.276992][ T5561] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  174.279139][ T5561] batman_adv: batadv0: Removing interface: batadv_slave_1
[  174.337764][ T5561] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  174.340235][ T5561] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  174.343013][ T5561] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  174.345612][ T5561] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  174.404809][ T5561] team0: Port device vxlan0 removed
[  174.434541][   T25] XFS (loop6): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 
[  174.437740][   T25] XFS (loop6): Unmount and run xfs_repair
[  174.439261][   T25] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  174.451578][   T25] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  174.454282][   T25] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  174.456610][   T25] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  174.468217][   T25] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  174.470689][   T25] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  174.481134][   T25] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  174.483548][   T25] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  174.486009][   T25] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  174.488710][  T148] XFS (loop6): metadata I/O error in "xfs_read_agf+0x200/0x504" at daddr 0x1 len 1 error 74
[  174.492319][  T148] XFS (loop6): page discard on page 00000000f7f5a02a, inode 0x2a, offset 0.
[  174.509765][ T4074] XFS (loop6): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 
[  174.521063][ T4074] XFS (loop6): Unmount and run xfs_repair
[  174.522910][ T4074] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  174.525293][ T4074] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  174.527745][ T4074] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  174.530176][ T4074] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  174.541210][ T4074] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  174.543870][ T4074] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  174.551547][ T4074] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  174.554019][ T4074] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  174.556467][ T4074] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  174.569460][ T1614] XFS (loop6): metadata I/O error in "xfs_read_agf+0x200/0x504" at daddr 0x1 len 1 error 74
[  174.573609][ T1614] XFS (loop6): page discard on page 000000000f3b8e56, inode 0x2a, offset 4096.
[  174.577113][ T4122] XFS (loop6): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 
[  174.580500][ T4122] XFS (loop6): Unmount and run xfs_repair
[  174.582639][ T4122] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  174.584668][ T4122] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  174.587066][ T4122] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  174.589556][ T4122] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  174.593095][ T4122] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  174.595587][ T4122] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  174.598239][ T4122] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  174.600699][ T4122] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  174.606162][ T4122] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  174.608893][ T1614] XFS (loop6): metadata I/O error in "xfs_read_agf+0x200/0x504" at daddr 0x1 len 1 error 74
[  174.612199][ T1614] XFS (loop6): page discard on page 0000000097b0d4e4, inode 0x2a, offset 8192.
[  174.615129][ T4595] XFS (loop6): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 
[  174.618204][ T4595] XFS (loop6): Unmount and run xfs_repair
[  174.619834][ T4595] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  174.624354][ T4595] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  174.631442][ T4595] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  174.659466][ T4595] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  174.677757][ T4595] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  174.680372][ T4595] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  174.692647][ T4595] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  174.695179][ T4595] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  174.697664][ T4595] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  174.701566][ T1614] XFS (loop6): metadata I/O error in "xfs_read_agf+0x200/0x504" at daddr 0x1 len 1 error 74
[  174.713975][ T1614] XFS (loop6): page discard on page 000000002df0d563, inode 0x2a, offset 12288.
[  174.752248][ T4595] XFS (loop6): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 
[  174.772132][ T4595] XFS (loop6): Unmount and run xfs_repair
[  174.913100][ T5596] loop4: detected capacity change from 0 to 512
[  174.926188][ T4595] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  174.928644][ T4595] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  174.931024][ T4595] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  174.933724][ T4595] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  174.936328][ T4595] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  174.939133][ T4595] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  174.942024][ T4595] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  174.944457][ T4595] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  174.946888][ T4595] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  174.949382][ T1614] XFS (loop6): metadata I/O error in "xfs_read_agf+0x200/0x504" at daddr 0x1 len 1 error 74
[  174.949772][ T5590] loop2: detected capacity change from 0 to 4096
[  174.952250][ T1614] XFS (loop6): page discard on page 00000000b504849d, inode 0x2a, offset 16384.
[  174.956836][ T4122] XFS (loop6): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 
[  174.959950][ T4122] XFS (loop6): Unmount and run xfs_repair
[  174.961759][ T4122] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  174.965946][ T4122] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  174.968433][ T4122] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  174.970830][ T4122] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  175.552587][ T5596] EXT4-fs (loop4): Ignoring removed oldalloc option
[  175.647365][ T5596] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.289: Parent and EA inode have the same ino 15
[  175.667308][ T5610] loop1: detected capacity change from 0 to 512
[  175.681239][ T5596] EXT4-fs (loop4): Remounting filesystem read-only
[  175.690863][ T5596] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  175.706390][ T5596] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.289: Parent and EA inode have the same ino 15
[  175.732456][ T5596] EXT4-fs (loop4): Remounting filesystem read-only
[  175.734560][ T5596] EXT4-fs (loop4): 1 orphan inode deleted
[  175.738049][ T4122] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  175.740549][ T4122] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  175.743474][ T4122] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  175.746346][ T4122] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  175.748717][ T4122] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  175.751665][ T1614] XFS (loop6): metadata I/O error in "xfs_read_agf+0x200/0x504" at daddr 0x1 len 1 error 74
[  175.754825][ T1614] XFS (loop6): page discard on page 00000000f03352e6, inode 0x2a, offset 20480.
[  175.762445][   T25] XFS (loop6): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 
[  175.765315][   T25] XFS (loop6): Unmount and run xfs_repair
[  175.766804][   T25] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  175.767769][ T5596] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,abort,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,block_validity,oldalloc,mb_optimize_scan=0x0000000000000001,. Quota mode: none.
[  175.769091][   T25] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  175.799453][   T25] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  175.809835][   T25] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  175.829387][   T25] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  175.851420][   T25] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  175.854036][   T25] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  175.856599][   T25] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  175.859031][   T25] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  175.877159][ T1614] XFS (loop6): metadata I/O error in "xfs_read_agf+0x200/0x504" at daddr 0x1 len 1 error 74
[  175.880073][ T1614] XFS (loop6): page discard on page 00000000eae98955, inode 0x2a, offset 24576.
[  175.903891][ T4074] XFS (loop6): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 
[  175.906971][ T4074] XFS (loop6): Unmount and run xfs_repair
[  175.908906][ T4074] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  175.921991][ T4074] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  175.924606][ T4074] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  175.927070][ T4074] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  175.929842][ T4074] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  176.126211][ T4074] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  176.128825][ T4074] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  176.132259][ T4074] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.134790][ T4074] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.138904][ T1614] XFS (loop6): metadata I/O error in "xfs_read_agf+0x200/0x504" at daddr 0x1 len 1 error 74
[  176.146508][ T1614] XFS (loop6): page discard on page 00000000a48be0e1, inode 0x2a, offset 28672.
[  176.155596][   T25] XFS (loop6): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 
[  176.158748][   T25] XFS (loop6): Unmount and run xfs_repair
[  176.160295][   T25] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  176.168903][   T25] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  176.182956][   T25] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  176.185444][   T25] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  176.187905][   T25] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  176.190316][   T25] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  176.233635][   T25] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  176.236198][   T25] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.238657][   T25] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.281143][ T1614] XFS (loop6): metadata I/O error in "xfs_read_agf+0x200/0x504" at daddr 0x1 len 1 error 74
[  176.284195][ T1614] XFS (loop6): page discard on page 000000001ec5c74a, inode 0x2a, offset 32768.
[  176.287157][ T4122] XFS (loop6): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 
[  176.290097][ T4122] XFS (loop6): Unmount and run xfs_repair
[  176.292464][ T4122] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  176.294608][ T4122] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  176.297006][ T4122] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  176.299428][ T4122] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  176.332736][ T4122] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  176.335379][ T4122] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  176.337856][ T4122] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  176.340227][ T4122] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.388607][ T4122] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.391126][ T1614] XFS (loop6): metadata I/O error in "xfs_read_agf+0x200/0x504" at daddr 0x1 len 1 error 74
[  176.394173][ T1614] XFS (loop6): page discard on page 00000000e4273ca2, inode 0x2a, offset 36864.
[  176.403577][ T4122] XFS (loop6): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 
[  176.431161][ T4122] XFS (loop6): Unmount and run xfs_repair
[  176.432850][ T4122] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  176.434850][ T4122] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  176.457041][ T4122] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  176.477727][ T4122] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  176.488327][ T4122] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  176.491866][ T4122] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  176.503134][ T4122] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  176.505712][ T4122] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.551262][ T4122] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.566279][ T5040] XFS (loop6): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 
[  176.569226][ T5040] XFS (loop6): Unmount and run xfs_repair
[  176.570807][ T5040] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  176.581085][ T5040] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  176.585933][ T5040] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  176.588617][ T5040] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  176.590971][ T5040] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  176.634619][ T5040] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  176.637088][ T5040] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  176.639647][ T5040] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.667086][ T5040] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.670263][ T4122] XFS (loop6): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 
[  176.673890][ T4122] XFS (loop6): Unmount and run xfs_repair
[  176.675629][ T4122] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  176.677699][ T4122] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  176.680088][ T4122] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  176.706996][ T4122] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  176.709547][ T4122] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  176.741227][ T4122] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  176.743714][ T4122] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  176.746110][ T4122] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.748574][ T4122] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.807528][ T4122] XFS (loop6): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 
[  176.810521][ T4122] XFS (loop6): Unmount and run xfs_repair
[  176.817604][ T4122] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  176.819612][ T4122] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  176.828724][ T4122] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  176.842302][ T4122] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  176.860488][ T4122] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  176.872381][ T5640] loop2: detected capacity change from 0 to 8
[  176.879468][ T4122] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  176.887718][ T4122] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  176.890213][ T4122] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.897538][ T5613] loop5: detected capacity change from 0 to 32768
[  176.902968][ T4122] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.907063][ T5040] XFS (loop6): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 
[  176.910041][ T5040] XFS (loop6): Unmount and run xfs_repair
[  176.926726][ T5640] SQUASHFS error: zlib decompression failed, data probably corrupt
[  176.928106][ T5040] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  176.929160][ T5640] SQUASHFS error: Failed to read block 0x9b: -5
[  176.934942][ T5040] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  176.937481][ T5040] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  176.947521][ T5040] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  176.950089][ T5040] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  176.953178][ T5040] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  176.955592][ T5040] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  176.957983][ T5040] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.960445][ T5040] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.981873][ T4071] XFS (loop6): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 
[  176.984854][ T4071] XFS (loop6): Unmount and run xfs_repair
[  176.986445][ T4071] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  176.989451][ T4071] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  177.005139][ T5613] XFS (loop5): Mounting V5 Filesystem
[  177.008002][ T5640] SQUASHFS error: Unable to read metadata cache entry [99]
[  177.009982][ T5640] SQUASHFS error: Unable to read inode 0x127
[  177.021618][ T4071] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  177.024108][ T4071] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  177.026532][ T4071] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  177.028979][ T4071] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  177.051120][ T4071] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  177.053145][ T5613] XFS (loop5): Internal error !uuid_equal(&mp->m_sb.sb_uuid, &head->h_fs_uuid) at line 261 of file fs/xfs/xfs_log_recover.c.  Caller xlog_header_check_mount+0xa4/0xec
[  177.053657][ T4071] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  177.060407][ T4071] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  177.077488][ T4442] XFS (loop6): Unmounting Filesystem
[  177.090482][ T5613] CPU: 0 PID: 5613 Comm: syz.5.291 Not tainted 5.15.185-syzkaller #0
[  177.092841][ T5613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  177.095684][ T5613] Call trace:
[  177.096608][ T5613]  dump_backtrace+0x0/0x43c
[  177.097865][ T5613]  show_stack+0x2c/0x3c
[  177.099023][ T5613]  __dump_stack+0x30/0x40
[  177.100170][ T5613]  dump_stack_lvl+0xf8/0x160
[  177.101476][ T5613]  dump_stack+0x1c/0x5c
[  177.102662][ T5613]  xfs_corruption_error+0x124/0x180
[  177.104199][ T5613]  xlog_header_check_mount+0xdc/0xec
[  177.105700][ T5613]  xlog_find_verify_log_record+0x2d8/0x4d4
[  177.107295][ T5613]  xlog_find_zeroed+0x348/0x410
[  177.108598][ T5613]  xlog_find_head+0x74/0x6f0
[  177.109822][ T5613]  xlog_find_tail+0x50/0x838
[  177.111106][ T5613]  xlog_recover+0x4c/0x3fc
[  177.112308][ T5613]  xfs_log_mount+0x2f4/0x5f4
[  177.113662][ T5613]  xfs_mountfs+0x8b4/0x15f8
[  177.114937][ T5613]  xfs_fs_fill_super+0xe1c/0x106c
[  177.116294][ T5613]  get_tree_bdev+0x358/0x544
[  177.117591][ T5613]  xfs_fs_get_tree+0x28/0x38
[  177.118879][ T5613]  vfs_get_tree+0x90/0x274
[  177.120101][ T5613]  do_new_mount+0x228/0x810
[  177.121330][ T5613]  path_mount+0x5b4/0x1000
[  177.122599][ T5613]  __arm64_sys_mount+0x514/0x5e4
[  177.123921][ T5613]  invoke_syscall+0x98/0x2b8
[  177.125233][ T5613]  el0_svc_common+0x138/0x258
[  177.126540][ T5613]  do_el0_svc+0x58/0x14c
[  177.127730][ T5613]  el0_svc+0x78/0x1e0
[  177.128837][ T5613]  el0t_64_sync_handler+0xcc/0xe4
[  177.130230][ T5613]  el0t_64_sync+0x1a0/0x1a4
[  177.201931][ T5613] XFS (loop5): Corruption detected. Unmount and run xfs_repair
[  177.204236][ T5613] XFS (loop5): log has mismatched uuid - can't recover
[  177.206131][ T5613] XFS (loop5): empty log check failed
[  177.207680][ T5613] XFS (loop5): log mount/recovery failed: error -117
[  177.284357][ T5613] XFS (loop5): log mount failed
[  177.285248][ T5626] loop4: detected capacity change from 0 to 32768
[  177.607937][ T5620] loop1: detected capacity change from 0 to 32768
[  177.696355][ T5626] (syz.4.292,5626,1):ocfs2_journal_init:900 ERROR: Journal file size (0) is too small!
[  177.699653][ T5626] (syz.4.292,5626,1):ocfs2_check_volume:2408 ERROR: Could not initialize journal!
[  177.704907][ T5620] gfs2: fsid=upgrade: Trying to join cluster "lock_nolock", "upgrade"
[  178.413923][ T5664] loop2: detected capacity change from 0 to 8192
[  178.431897][ T5620] gfs2: fsid=upgrade: Now mounting FS (format 1801)...
[  178.432971][ T5626] (syz.4.292,5626,0):ocfs2_check_volume:2493 ERROR: status = -22
[  178.436132][ T5626] (syz.4.292,5626,0):ocfs2_mount_volume:1824 ERROR: status = -22
[  178.463613][ T5626] (syz.4.292,5626,0):ocfs2_fill_super:1177 ERROR: status = -22
[  178.503077][ T5664] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  178.597249][ T5620] gfs2: fsid=upgrade.s: fatal: invalid metadata block
[  178.597249][ T5620]   bh = 2 (magic number)
[  178.597249][ T5620]   function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 493
[  178.618062][ T5620] gfs2: fsid=upgrade.s: about to withdraw this file system
[  178.620467][ T5620] gfs2: fsid=upgrade.s: Journal recovery skipped for jid 0 until next mount.
[  178.638761][ T5620] gfs2: fsid=upgrade.s: Glock dequeues delayed: 0
[  178.647884][ T5620] gfs2: fsid=upgrade.s: File system withdrawn
[  178.660739][ T5620] CPU: 0 PID: 5620 Comm: syz.1.293 Not tainted 5.15.185-syzkaller #0
[  178.663164][ T5620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  178.666110][ T5620] Call trace:
[  178.667051][ T5620]  dump_backtrace+0x0/0x43c
[  178.668334][ T5620]  show_stack+0x2c/0x3c
[  178.669551][ T5620]  __dump_stack+0x30/0x40
[  178.670754][ T5620]  dump_stack_lvl+0xf8/0x160
[  178.672086][ T5620]  dump_stack+0x1c/0x5c
[  178.673264][ T5620]  gfs2_withdraw+0xc60/0x129c
[  178.674564][ T5620]  gfs2_meta_check_ii+0x80/0x9c
[  178.675999][ T5620]  gfs2_meta_buffer+0x228/0x2ec
[  178.677376][ T5620]  __fillup_metapath+0x138/0x2e0
[  178.678759][ T5620]  __gfs2_iomap_get+0x4e8/0x100c
[  178.680115][ T5620]  gfs2_block_map+0x2b4/0xbc8
[  178.681469][ T5620]  gfs2_write_alloc_required+0x298/0x4dc
[  178.683052][ T5620]  gfs2_jdesc_check+0x19c/0x264
[  178.684353][ T5620]  check_journal_clean+0x140/0x2bc
[  178.685769][ T5620]  init_journal+0x1370/0x1d7c
[  178.687115][ T5620]  init_inodes+0xe0/0x2d4
[  178.688304][ T5620]  gfs2_fill_super+0x121c/0x19e0
[  178.689664][ T5620]  get_tree_bdev+0x358/0x544
[  178.690939][ T5620]  gfs2_get_tree+0x54/0x1b4
[  178.692164][ T5620]  vfs_get_tree+0x90/0x274
[  178.693388][ T5620]  do_new_mount+0x228/0x810
[  178.694667][ T5620]  path_mount+0x5b4/0x1000
[  178.695878][ T5620]  __arm64_sys_mount+0x514/0x5e4
[  178.697267][ T5620]  invoke_syscall+0x98/0x2b8
[  178.698540][ T5620]  el0_svc_common+0x138/0x258
[  178.699880][ T5620]  do_el0_svc+0x58/0x14c
[  178.701102][ T5620]  el0_svc+0x78/0x1e0
[  178.702158][ T5620]  el0t_64_sync_handler+0xcc/0xe4
[  178.703567][ T5620]  el0t_64_sync+0x1a0/0x1a4
[  178.741284][ T5620] gfs2: fsid=upgrade.s: Error checking journal for spectator mount.
[  179.310761][ T5693] loop6: detected capacity change from 0 to 256
[  180.012695][ T5688] syz.6.285 uses obsolete (PF_INET,SOCK_PACKET)
[  181.102639][ T5704] loop4: detected capacity change from 0 to 32768
[  181.153722][ T5713] loop5: detected capacity change from 0 to 1024
[  181.251163][ T5709] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  181.253483][ T5709] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  181.269368][ T5709] vhci_hcd vhci_hcd.0: Device attached
[  181.315623][ T5704] XFS: noikeep mount option is deprecated.
[  181.317445][ T5704] xfs: Unknown parameter 'obj_role'
[  181.327362][ T5698] loop1: detected capacity change from 0 to 40427
[  181.338026][ T5713] hfsplus: wrong filesystem version
[  181.405040][ T5712] vhci_hcd: connection closed
[  181.470305][  T153] vhci_hcd: stop threads
[  181.476478][  T153] vhci_hcd: release socket
[  181.480404][ T5698] F2FS-fs (loop1): invalid crc value
[  181.488068][ T5698] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  181.491732][ T4595] vhci_hcd: vhci_device speed not set
[  181.514018][ T5698] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0
[  181.516468][ T5698] F2FS-fs (loop1): Start checkpoint disabled!
[  181.519728][  T153] vhci_hcd: disconnect device
[  181.521217][ T5698] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  181.655251][ T5729] loop6: detected capacity change from 0 to 16
[  181.672769][ T5727] loop4: detected capacity change from 0 to 128
[  181.727586][ T5727] ufs: Unable to do repair on error, will lock lock instead
[  181.733746][ T5729] cramfs: empty filesystem
[  182.506762][ T5727] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2
[  182.597826][ T5743] loop2: detected capacity change from 0 to 64
[  182.624646][ T4459] attempt to access beyond end of device
[  182.624646][ T4459] loop1: rw=2049, want=45104, limit=40427
[  182.647064][ T5742] loop6: detected capacity change from 0 to 2048
[  182.694213][ T5742] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  182.719052][ T5742] NILFS (loop6): too large filesystem blocksize: 2 ^ 347668480 KiB
[  182.784868][ T5739] loop5: detected capacity change from 0 to 8192
[  182.872600][ T5739] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  182.875254][ T5739] REISERFS (device loop5): using ordered data mode
[  182.877218][ T5739] reiserfs: using flush barriers
[  182.901476][ T5739] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  182.951379][ T5739] REISERFS (device loop5): checking transaction log (loop5)
[  183.000805][ T5757] loop2: detected capacity change from 0 to 4096
[  183.264161][ T5739] REISERFS (device loop5): Using r5 hash to sort names
[  183.266842][ T5739] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  184.380196][ T5792] loop2: detected capacity change from 0 to 128
[  184.447135][ T5787] loop6: detected capacity change from 0 to 4096
[  184.469030][ T5751] loop4: detected capacity change from 0 to 32768
[  184.480366][ T5792] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  184.492186][ T5792] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  184.531318][ T5802] loop5: detected capacity change from 0 to 512
[  184.565512][ T5787] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512)
[  184.570010][ T5751] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.320 (5751)
[  184.570606][ T5802] EXT4-fs (loop5): journaled quota format not specified
[  184.638805][ T5751] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  184.647123][ T5751] BTRFS info (device loop4): turning off barriers
[  184.649103][ T5751] BTRFS info (device loop4): enabling all of the rescue options
[  184.663613][ T5751] BTRFS info (device loop4): ignoring data csums
[  184.665546][ T5751] BTRFS info (device loop4): ignoring bad roots
[  184.667284][ T5751] BTRFS info (device loop4): disabling log replay at mount time
[  184.669830][ T5751] BTRFS info (device loop4): disabling tree log
[  184.712371][ T5751] BTRFS info (device loop4): turning on flush-on-commit
[  184.714637][ T5751] BTRFS info (device loop4): using free space tree
[  184.716474][ T5751] BTRFS info (device loop4): has skinny extents
[  184.824253][ T5821] loop5: detected capacity change from 0 to 128
[  184.908754][ T5821] VFS: Found a Xenix FS (block size = 512) on device loop5
[  184.945076][ T5821] sysv_free_block: trying to free block not in datazone
[  185.001335][ T5821] sysv_free_block: trying to free block not in datazone
[  185.004336][ T5821] sysv_free_block: getblk() failed
[  185.007119][ T5797] loop1: detected capacity change from 0 to 32768
[  185.049350][ T5821] sysv_free_block: getblk() failed
[  185.050948][ T5821] sysv_free_block: getblk() failed
[  185.052790][ T5821] sysv_free_block: getblk() failed
[  185.054351][ T5821] sysv_free_block: getblk() failed
[  185.057090][ T5821] sysv_free_block: getblk() failed
[  185.065453][ T5821] sysv_free_block: getblk() failed
[  185.067124][ T5821] sysv_free_block: getblk() failed
[  185.068762][ T5821] sysv_free_block: getblk() failed
[  185.070177][ T5821] sysv_free_block: getblk() failed
[  185.086930][ T5821] sysv_free_block: getblk() failed
[  185.090953][ T5821] sysv_free_block: getblk() failed
[  185.121468][ T5821] sysv_free_block: getblk() failed
[  185.123003][ T5821] sysv_free_block: getblk() failed
[  185.124390][ T5821] sysv_free_block: getblk() failed
[  185.125827][ T5821] sysv_free_block: getblk() failed
[  185.127211][ T5821] sysv_free_block: getblk() failed
[  185.128700][ T5821] sysv_free_block: getblk() failed
[  185.130070][ T5821] sysv_free_block: getblk() failed
[  185.132666][ T5821] sysv_free_block: getblk() failed
[  185.134213][ T5821] sysv_free_block: getblk() failed
[  185.138892][ T5821] sysv_free_block: getblk() failed
[  185.140364][ T5821] sysv_free_block: getblk() failed
[  185.142029][ T5821] sysv_free_block: getblk() failed
[  185.143564][ T5821] sysv_free_block: getblk() failed
[  185.144981][ T5821] sysv_free_block: getblk() failed
[  185.146587][ T5821] sysv_free_block: getblk() failed
[  185.148039][ T5821] sysv_free_block: getblk() failed
[  185.174456][ T5821] sysv_free_block: getblk() failed
[  185.176071][ T5821] sysv_free_block: getblk() failed
[  185.177552][ T5821] sysv_free_block: getblk() failed
[  185.179121][ T5821] sysv_free_block: getblk() failed
[  185.180684][ T5821] sysv_free_block: getblk() failed
[  185.214836][ T5821] sysv_free_block: getblk() failed
[  185.216442][ T5821] sysv_free_block: getblk() failed
[  185.216823][ T5804] loop2: detected capacity change from 0 to 16384
[  185.217936][ T5821] sysv_free_block: getblk() failed
[  185.244588][ T5846] loop6: detected capacity change from 0 to 8
[  185.247696][ T5821] sysv_free_block: getblk() failed
[  185.249192][ T5821] sysv_free_block: getblk() failed
[  185.250607][ T5821] sysv_free_block: getblk() failed
[  185.278055][ T5821] sysv_free_block: getblk() failed
[  185.309182][ T5846] SQUASHFS error: zlib decompression failed, data probably corrupt
[  185.309742][ T5821] sysv_free_block: getblk() failed
[  185.312288][ T5846] SQUASHFS error: Failed to read block 0x9b: -5
[  185.313173][ T5821] sysv_free_block: trying to free block not in datazone
[  185.314985][ T5846] SQUASHFS error: Unable to read metadata cache entry [99]
[  185.316946][ T5821] sysv_free_block: trying to free block not in datazone
[  185.329026][ T5804] REISERFS warning (device loop2): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop2, block 16, size 4096)
[  185.333278][ T5804] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2
[  185.358578][ T5846] SQUASHFS error: Unable to read inode 0x127
[  185.374333][ T5821] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  185.448965][ T4016] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by udevd (4016)
[  186.503653][ T5865] loop5: detected capacity change from 0 to 8
[  186.549063][ T5874] futex_wake_op: syz.6.353 tries to shift op by 32; fix this program
[  186.610387][ T5865] SQUASHFS error: xz decompression failed, data probably corrupt
[  186.651159][ T5865] SQUASHFS error: Failed to read block 0x108: -5
[  186.653089][ T5865] SQUASHFS error: Unable to read metadata cache entry [106]
[  186.655188][ T5865] SQUASHFS error: Unable to read inode 0x11f
[  186.743676][ T5887] loop2: detected capacity change from 0 to 64
[  187.883549][ T5903] loop1: detected capacity change from 0 to 4096
[  187.912911][ T5861] loop4: detected capacity change from 0 to 32768
[  187.915815][ T5912] loop6: detected capacity change from 0 to 8
[  187.919962][ T5904] loop5: detected capacity change from 0 to 4096
[  187.984751][ T5903] ntfs: volume version 3.1.
[  187.999153][ T5912] SQUASHFS error: lzo decompression failed, data probably corrupt
[  188.001902][ T5912] SQUASHFS error: Failed to read block 0x91: -5
[  188.003703][ T5912] SQUASHFS error: Unable to read metadata cache entry [8f]
[  188.005754][ T5912] SQUASHFS error: Unable to read inode 0x11f
[  188.226617][ T5922] loop5: detected capacity change from 0 to 1764
[  188.256090][ T5922] ISOFS: Unable to identify CD-ROM format.
[  188.461961][ T5934] loop5: detected capacity change from 0 to 64
[  188.941194][ T5968] loop5: detected capacity change from 0 to 8
[  189.000663][ T5974] loop4: detected capacity change from 0 to 128
[  190.307238][ T5995] loop4: detected capacity change from 0 to 32768
[  190.351837][ T5995] XFS: attr2 mount option is deprecated.
[  190.353796][ T5995] XFS (loop4): invalid logbufs value: 45626 [not 2-8]
[  190.704675][ T6020] loop5: detected capacity change from 0 to 2364
[  191.507459][ T6029] loop5: detected capacity change from 0 to 2048
[  191.605511][ T6031] loop6: detected capacity change from 0 to 512
[  191.702314][ T6031] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.413: bg 0: block 321: padding at end of block bitmap is not set
[  191.752640][ T6029] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  191.766061][ T6031] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6183: Corrupt filesystem
[  191.772246][ T6031] EXT4-fs (loop6): 1 orphan inode deleted
[  191.773911][ T6031] EXT4-fs (loop6): mounted filesystem without journal. Opts: sysvgroups,prjquota,noquota,init_itable,dax=never,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,,errors=continue. Quota mode: writeback.
[  191.955948][ T6038] loop2: detected capacity change from 0 to 256
[  191.984867][ T6038] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  192.230288][ T6051] netlink: 8 bytes leftover after parsing attributes in process `syz.5.422'.
[  192.244419][ T6052] loop2: detected capacity change from 0 to 1024
[  192.257603][ T6056] netlink: 'syz.1.423': attribute type 11 has an invalid length.
[  192.298677][ T6052] EXT4-fs (loop2): Ignoring removed oldalloc option
[  192.300700][ T6052] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  192.350441][ T6052] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000007,barrier=0x0000000000000003,dax=inode,data_err=ignore,dioread_nolock,nojournal_checksum,data_err=ignore,oldalloc,bsdgroups,,errors=continue. Quota mode: none.
[  192.398991][ T6062] loop1: detected capacity change from 0 to 512
[  192.402056][ T6052] fscrypt (loop2, inode 15): Error -61 getting encryption context
[  192.520915][ T2056] ieee802154 phy0 wpan0: encryption failed: -22
[  192.523381][ T2056] ieee802154 phy1 wpan1: encryption failed: -22
[  192.542870][ T6062] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback.
[  192.598549][ T6074] loop2: detected capacity change from 0 to 4096
[  192.600333][ T6062] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz.1.425: invalid size
[  192.608674][ T6074] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  192.648791][ T6062] EXT4-fs (loop1): Remounting filesystem read-only
[  193.879621][ T6090] loop1: detected capacity change from 0 to 40427
[  193.917100][ T6137] netlink: 20 bytes leftover after parsing attributes in process `syz.5.457'.
[  193.919673][ T6137] netlink: 20 bytes leftover after parsing attributes in process `syz.5.457'.
[  193.970424][ T6090] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  193.973642][ T6090] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  193.983466][ T6090] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x1ffff
[  193.986076][ T6090] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8
[  194.014392][ T6090] F2FS-fs (loop1): invalid crc value
[  194.066354][ T6090] F2FS-fs (loop1): Found nat_bits in checkpoint
[  194.137612][ T6148] netlink: 24 bytes leftover after parsing attributes in process `syz.5.460'.
[  194.177694][ T6090] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  194.179757][ T6090] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  194.289665][ T6126] loop2: detected capacity change from 0 to 32768
[  194.303198][ T6124] loop6: detected capacity change from 0 to 32768
[  194.357487][ T6126] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.452 (6126)
[  194.367913][ T6157] loop5: detected capacity change from 0 to 64
[  194.372169][ T6159] loop4: detected capacity change from 0 to 512
[  194.395372][ T6124] XFS (loop6): Mounting V5 Filesystem
[  194.415913][ T6159] EXT4-fs (loop4): error: journal path ./bus is not a block device
[  194.419817][ T6126] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm
[  194.437730][ T6126] BTRFS info (device loop2): using free space tree
[  194.439585][ T6126] BTRFS info (device loop2): has skinny extents
[  194.497838][ T6124] XFS (loop6): Ending clean mount
[  194.546950][ T6124] overlayfs: bad mount option "redirect_dir=on:/"
[  194.591748][ T4593] Bluetooth: hci2: command 0x0406 tx timeout
[  194.593571][ T4593] Bluetooth: hci3: command 0x0406 tx timeout
[  194.630200][ T4442] XFS (loop6): Unmounting Filesystem
[  194.761257][ T6126] BTRFS info (device loop2): enabling ssd optimizations
[  195.050753][ T6212] loop5: detected capacity change from 0 to 2048
[  195.211616][ T6212]  loop5: p3 p4 < >
[  195.212956][ T6212] loop5: p3 start 4284289 is beyond EOD, truncated
[  195.277131][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.485'.
[  195.315808][ T6233] netlink: 'syz.4.486': attribute type 1 has an invalid length.
[  195.361558][ T6236] netlink: 'syz.2.488': attribute type 5 has an invalid length.
[  195.400078][ T6236] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.403110][ T6236] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.448006][ T4133] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop2 scanned by udevd (4133)
[  195.452462][ T6245] netlink: 'syz.1.492': attribute type 49 has an invalid length.
[  195.568246][ T6257] loop5: detected capacity change from 0 to 736
[  195.614643][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.501'.
[  195.719695][ T6273] mmap: syz.6.505 (6273): VmData 175906816 exceed data ulimit 1. Update limits or use boot option ignore_rlimit_data.
[  195.727999][ T6257] rock: directory entry would overflow storage
[  195.729723][ T6257] rock: sig=0x3b10, size=4, remaining=3
[  195.824557][ T6280] loop6: detected capacity change from 0 to 2048
[  195.889251][ T6289] netlink: 28 bytes leftover after parsing attributes in process `syz.2.514'.
[  195.910173][ T6289] netlink: 28 bytes leftover after parsing attributes in process `syz.2.514'.
[  195.926323][ T6293] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  195.968316][ T6280] NILFS error (device loop6): nilfs_lookup: deleted inode referenced: 12
[  195.998886][ T6280] Remounting filesystem read-only
[  196.148885][ T6302] loop1: detected capacity change from 0 to 4096
[  196.172264][ T6311] netlink: 32 bytes leftover after parsing attributes in process `syz.6.523'.
[  196.174948][ T6311] netlink: 216 bytes leftover after parsing attributes in process `syz.6.523'.
[  196.178114][ T6311] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  196.206357][ T6312] usb usb1: usbfs: process 6312 (syz.2.524) did not claim interface 0 before use
[  196.224913][ T6302] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  196.488484][ T6324] loop6: detected capacity change from 0 to 16
[  196.511927][ T6324] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  196.651942][ T6334] capability: warning: `syz.1.534' uses 32-bit capabilities (legacy support in use)
[  196.722978][ T6295] loop5: detected capacity change from 0 to 32768
[  196.889490][ T6308] loop4: detected capacity change from 0 to 32768
[  196.947624][ T6340] loop1: detected capacity change from 0 to 2048
[  197.040612][ T6340] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  197.164885][ T6337] loop6: detected capacity change from 0 to 32768
[  197.165192][ T6308] XFS (loop4): Mounting V5 Filesystem
[  197.203343][ T6332] loop2: detected capacity change from 0 to 32768
[  197.205269][ T6337] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 scanned by syz.6.535 (6337)
[  197.260693][ T6337] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm
[  197.263470][ T6337] BTRFS info (device loop6): force zlib compression, level 3
[  197.276146][ T6337] BTRFS info (device loop6): force clearing of disk cache
[  197.281686][ T6337] BTRFS info (device loop6): setting nodatasum
[  197.283496][ T6337] BTRFS info (device loop6): doing ref verification
[  197.285321][ T6337] BTRFS info (device loop6): allowing degraded mounts
[  197.307445][ T6332] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm
[  197.310044][ T6332] BTRFS info (device loop2): using free space tree
[  197.320364][ T6332] BTRFS info (device loop2): has skinny extents
[  197.327887][ T6337] BTRFS info (device loop6): enabling disk space caching
[  197.329833][ T6308] XFS (loop4): Ending clean mount
[  197.329884][ T6337] BTRFS info (device loop6): disk space caching is enabled
[  197.344069][ T6337] BTRFS info (device loop6): has skinny extents
[  197.401160][ T4037] XFS (loop4): Unmounting Filesystem
[  197.454846][ T5382] udevd[5382]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  197.519566][ T6332] BTRFS info (device loop2): enabling ssd optimizations
[  197.577209][ T6399] loop5: detected capacity change from 0 to 4096
[  197.583049][ T6337] BTRFS info (device loop6): enabling ssd optimizations
[  197.594558][ T6337] BTRFS info (device loop6): clearing free space tree
[  197.596655][ T6337] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  197.599433][ T6337] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  197.661233][ T6399] ntfs: volume version 3.1.
[  197.940868][ T6356] loop1: detected capacity change from 0 to 32768
[  198.341019][ T6356] XFS (loop1): Mounting V5 Filesystem
[  198.349045][ T4228] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop2 scanned by udevd (4228)
[  198.480231][ T6356] XFS (loop1): Ending clean mount
[  198.529437][ T6356] XFS (loop1): Quotacheck needed: Please wait.
[  198.742572][ T6356] XFS (loop1): Quotacheck: Done.
[  198.800688][ T4024] XFS (loop1): Unmounting Filesystem
[  199.059498][ T6481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  199.120755][ T6487] loop5: detected capacity change from 0 to 256
[  199.173716][ T6491] loop4: detected capacity change from 0 to 256
[  199.221840][ T6487] exfat: Deprecated parameter 'utf8'
[  199.223434][ T6487] exfat: Deprecated parameter 'namecase'
[  199.227602][ T6487] exfat: Deprecated parameter 'utf8'
[  199.243591][ T6491] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  199.246634][ T6491] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  199.262136][ T6487] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d)
[  199.274485][ T6499] xt_hashlimit: max too large, truncated to 1048576
[  199.302667][ T6487] exFAT-fs (loop5): error, tried to truncate zeroed cluster.
[  199.314735][ T6491] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  199.923181][ T6515] exFAT-fs (loop4): hint_cluster is invalid (17)
[  199.926854][ T6515] exFAT-fs (loop4): error, invalid access to FAT (entry 0xffffffff)
[  199.929065][ T6515] exFAT-fs (loop4): Filesystem has been set read-only
[  202.539976][ T6553] loop2: detected capacity change from 0 to 64
[  202.875432][ T6568] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  202.878503][ T6568] FAT-fs (loop9): unable to read boot sector
[  205.118590][ T6551] loop6: detected capacity change from 0 to 32768
[  207.775258][ T6633] __nla_validate_parse: 1 callbacks suppressed
[  207.775273][ T6633] netlink: 36 bytes leftover after parsing attributes in process `syz.4.628'.
[  208.344329][ T6645] loop2: detected capacity change from 0 to 512
[  209.002719][ T6652] loop5: detected capacity change from 0 to 8
[  209.005086][ T6652] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  209.092583][ T6642] cramfs: Error -5 while decompressing!
[  209.111253][ T6642] cramfs: 0000000032e6448a(26)->000000006c6b0717(4096)
[  209.113305][ T6642] cramfs: Error -5 while decompressing!
[  209.114948][ T6642] cramfs: 00000000a58f781b(26)->00000000a2dc5fa7(4096)
[  209.116988][ T6642] cramfs: Error -3 while decompressing!
[  209.118555][ T6642] cramfs: 000000004a31918d(16)->000000006b712550(4096)
[  209.120539][ T6642] cramfs: Error -5 while decompressing!
[  209.172195][ T6645] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  209.207932][ T6642] cramfs: 0000000032e6448a(26)->000000006c6b0717(4096)
[  209.340351][ T4228] udevd[4228]: incorrect cramfs checksum on /dev/loop5
[  209.366282][ T4228] udevd[4228]: incorrect cramfs checksum on /dev/loop5
[  209.919932][ T6666] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #2: comm syz.2.633: corrupted inode contents
[  209.924876][ T6666] EXT4-fs error (device loop2): ext4_dirty_inode:6039: inode #2: comm syz.2.633: mark_inode_dirty error
[  209.928913][ T6666] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #2: comm syz.2.633: corrupted inode contents
[  210.204758][ T4228] udevd[4228]: incorrect cramfs checksum on /dev/loop5
[  211.011408][ T6680] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  211.196311][ T6688] loop2: detected capacity change from 0 to 1024
[  212.458055][ T6688] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  214.578031][ T6726] device lo entered promiscuous mode
[  214.606303][ T6726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  216.966946][ T6747] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  217.377264][ T6762] loop2: detected capacity change from 0 to 256
[  217.660927][ T6774] loop4: detected capacity change from 0 to 2048
[  217.799875][ T6774] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  217.827421][ T6774] UDF-fs: Scanning with blocksize 512 failed
[  217.861425][ T6774] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  220.135582][ T4111] attempt to access beyond end of device
[  220.135582][ T4111] loop4: rw=1, want=2050, limit=2048
[  220.138603][ T4111] buffer_io_error: 2 callbacks suppressed
[  220.138616][ T4111] Buffer I/O error on dev loop4, logical block 1024, lost async page write
[  220.180167][ T4111] attempt to access beyond end of device
[  220.180167][ T4111] loop4: rw=1, want=2050, limit=2048
[  220.202453][ T4111] Buffer I/O error on dev loop4, logical block 1024, lost async page write
[  220.207423][ T4111] attempt to access beyond end of device
[  220.207423][ T4111] loop4: rw=1, want=2050, limit=2048
[  220.216426][ T6800] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  220.219191][ T6800] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  220.221656][ T6800] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  220.224031][ T6800] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  220.236179][ T4111] Buffer I/O error on dev loop4, logical block 1024, lost async page write
[  220.249978][ T4111] attempt to access beyond end of device
[  220.249978][ T4111] loop4: rw=1, want=2050, limit=2048
[  220.265965][ T6800] team0: Port device vxlan0 added
[  220.299138][ T4111] Buffer I/O error on dev loop4, logical block 1024, lost async page write
[  220.310022][ T4111] attempt to access beyond end of device
[  220.310022][ T4111] loop4: rw=1, want=2052, limit=2048
[  220.318633][ T4111] Buffer I/O error on dev loop4, logical block 1025, lost async page write
[  220.330593][ T4111] attempt to access beyond end of device
[  220.330593][ T4111] loop4: rw=1, want=2052, limit=2048
[  220.537186][ T4111] Buffer I/O error on dev loop4, logical block 1025, lost async page write
[  220.687866][ T4111] attempt to access beyond end of device
[  220.687866][ T4111] loop4: rw=1, want=2052, limit=2048
[  220.837997][ T4111] Buffer I/O error on dev loop4, logical block 1025, lost async page write
[  221.064075][ T4111] attempt to access beyond end of device
[  221.064075][ T4111] loop4: rw=1, want=2052, limit=2048
[  221.067139][ T4111] Buffer I/O error on dev loop4, logical block 1025, lost async page write
[  221.069533][ T4111] attempt to access beyond end of device
[  221.069533][ T4111] loop4: rw=1, want=2054, limit=2048
[  221.072622][ T4111] Buffer I/O error on dev loop4, logical block 1026, lost async page write
[  221.074948][ T4111] attempt to access beyond end of device
[  221.074948][ T4111] loop4: rw=1, want=2054, limit=2048
[  221.077943][ T4111] Buffer I/O error on dev loop4, logical block 1026, lost async page write
[  221.270685][ T6812] loop2: detected capacity change from 0 to 128
[  221.361878][ T6812] FAT-fs (loop2): Directory bread(block 32) failed
[  221.375892][ T6812] FAT-fs (loop2): Directory bread(block 33) failed
[  221.393342][ T6812] FAT-fs (loop2): Directory bread(block 34) failed
[  221.407925][ T6812] FAT-fs (loop2): Directory bread(block 35) failed
[  221.422826][ T6812] FAT-fs (loop2): Directory bread(block 36) failed
[  221.443615][ T6812] FAT-fs (loop2): Directory bread(block 37) failed
[  221.457347][ T6812] FAT-fs (loop2): Directory bread(block 38) failed
[  221.470637][ T6812] FAT-fs (loop2): Directory bread(block 39) failed
[  221.484031][ T6812] FAT-fs (loop2): Directory bread(block 40) failed
[  221.497835][ T6812] FAT-fs (loop2): Directory bread(block 41) failed
[  222.883184][ T6812] FAT-fs (loop2): Filesystem has been set read-only
[  222.896422][ T6812] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[  223.242586][ T6837] BUG: sleeping function called from invalid context at net/core/sock.c:3283
[  223.245702][ T6837] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6837, name: syz.4.675
[  223.248144][ T6837] 7 locks held by syz.4.675/6837:
[  223.249531][ T6837]  #0: ffff8000162921a8 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x2c/0x54
[  223.252269][ T6837]  #1: ffff800016292068 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x214/0x390
[  223.255168][ T6837]  #2: ffff0000c867d690 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x108/0x6f0
[  223.258132][ T6837]  #3: ffff800016369088 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x170/0x350
[  223.260990][ T6837]  #4: ffff8000143311e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c
[  223.263743][ T6837]  #5: ffff0000c54a1d38 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x830/0x10f0
[  223.266611][ T6837]  #6: ffff0000c87c2520 (msk_lock-AF_INET){+.+.}-{0:0}, at: inet_sk_diag_fill+0xbb4/0x1584
[  223.269485][ T6837] Preemption disabled at:
[  223.269498][ T6837] [<ffff8000110d6afc>] mptcp_diag_dump+0x830/0x10f0
[  223.272554][ T6837] CPU: 1 PID: 6837 Comm: syz.4.675 Not tainted 5.15.185-syzkaller #0
[  223.274779][ T6837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  223.277505][ T6837] Call trace:
[  223.278408][ T6837]  dump_backtrace+0x0/0x43c
[  223.279676][ T6837]  show_stack+0x2c/0x3c
[  223.280817][ T6837]  __dump_stack+0x30/0x40
[  223.282036][ T6837]  dump_stack_lvl+0xf8/0x160
[  223.283337][ T6837]  dump_stack+0x1c/0x5c
[  223.284466][ T6837]  ___might_sleep+0x358/0x4d4
[  223.285755][ T6837]  __might_sleep+0x98/0x124
[  223.286999][ T6837]  __lock_sock_fast+0x3c/0xec
[  223.288287][ T6837]  mptcp_diag_get_info+0x204/0x868
[  223.289740][ T6837]  inet_sk_diag_fill+0xbb4/0x1584
[  223.291156][ T6837]  mptcp_diag_dump+0xb5c/0x10f0
[  223.292468][ T6837]  __inet_diag_dump+0x1dc/0x350
[  223.293792][ T6837]  inet_diag_dump+0x4c/0x5c
[  223.295066][ T6837]  netlink_dump+0x49c/0xab4
[  223.296290][ T6837]  __netlink_dump_start+0x480/0x6f0
[  223.297788][ T6837]  inet_diag_handler_cmd+0x190/0x268
[  223.299269][ T6837]  sock_diag_rcv_msg+0x168/0x390
[  223.300675][ T6837]  netlink_rcv_skb+0x208/0x3c4
[  223.302033][ T6837]  sock_diag_rcv+0x3c/0x54
[  223.303290][ T6837]  netlink_unicast+0x60c/0x89c
[  223.304546][ T6837]  netlink_sendmsg+0x6e8/0x9cc
[  223.305921][ T6837]  sock_write_iter+0x23c/0x31c
[  223.307272][ T6837]  do_iter_readv_writev+0x3a0/0x4f8
[  223.308790][ T6837]  do_iter_write+0x1c4/0x670
[  223.310106][ T6837]  do_writev+0x1e0/0x380
[  223.311304][ T6837]  __arm64_sys_writev+0x80/0x94
[  223.312599][ T6837]  invoke_syscall+0x98/0x2b8
[  223.313885][ T6837]  el0_svc_common+0x138/0x258
[  223.315221][ T6837]  do_el0_svc+0x58/0x14c
[  223.316422][ T6837]  el0_svc+0x78/0x1e0
[  223.317515][ T6837]  el0t_64_sync_handler+0xcc/0xe4
[  223.318883][ T6837]  el0t_64_sync+0x1a0/0x1a4