last executing test programs:

1m53.152249343s ago: executing program 2 (id=2779):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'team_slave_1\x00', @random="2b0100004ec6"})

1m53.036423129s ago: executing program 2 (id=2781):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4, 0x1}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xb}}]}, 0x2c}}, 0x0)

1m52.820221729s ago: executing program 2 (id=2783):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000070000000000000000000a40000000160a05000000000000000000020000000900010073797a300000000014000380080001400000000008000240000000030900020073797a300000000014000000110001"], 0x68}}, 0x800)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000001c000380180003801400010067656e6576653000000000000089000014000000110001"], 0x70}}, 0x24040884)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e65766530"], 0x110}}, 0x0)

1m52.542685073s ago: executing program 2 (id=2789):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000100)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0)

1m52.284219756s ago: executing program 2 (id=2792):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0)

1m49.160093222s ago: executing program 2 (id=2814):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8040)
close(0x4)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50)

1m48.896362205s ago: executing program 32 (id=2814):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8040)
close(0x4)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50)

21.428190872s ago: executing program 1 (id=3152):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001cc0)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in=@private=0xa010100, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff6}}, 0x128}}, 0x0)

21.263408601s ago: executing program 1 (id=3155):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={r0, &(0x7f0000000280), 0x0}, 0x20)

21.024216753s ago: executing program 1 (id=3156):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=E'])

20.47098999s ago: executing program 1 (id=3157):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000680)='./file0\x00', 0x2148c5, &(0x7f00000002c0)={[{@utf8no}, {@utf8no}, {@shortname_mixed}, {@utf8}, {@uni_xlateno}, {@numtail}, {@utf8}, {@uni_xlate}, {@shortname_mixed}, {@fat=@usefree}, {@shortname_lower}, {@shortname_lower}, {@rodir}, {@uni_xlateno}]}, 0x0, 0x2c4, &(0x7f0000000a40)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0)
read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020)

19.512196358s ago: executing program 1 (id=3159):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d040000000000000000020000002400018014000180080001"], 0x38}, 0x1, 0x0, 0x0, 0x805}, 0x8000)

19.144212096s ago: executing program 1 (id=3162):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@private=0xa010100, @in=@local, 0x0, 0xffff, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

18.568162265s ago: executing program 33 (id=3162):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@private=0xa010100, @in=@local, 0x0, 0xffff, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

16.417044382s ago: executing program 0 (id=3173):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x4a3, {0xb, 0x6, "95e8df", 0x73dd, 0x3c, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, [@dstopts={0x3b}, @routing={0x62, 0x2, 0x2, 0x2, 0x0, [@mcast1]}]}}}}}}}, 0x0)

11.455575759s ago: executing program 0 (id=3179):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x14, r1, 0xf21, 0x0, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000015}, 0x0)

8.465849278s ago: executing program 0 (id=3184):
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r0, 0xffffffffffffffff, 0x0)

8.159914134s ago: executing program 0 (id=3186):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='memory=low,background_gc=off,noquota,inline_dentry,data_flush,disable_roll_forward,noinline_xattr,discard,checkpoint=disable,user_xattr,atgc,resuid=', @ANYRESDEC=0x0, @ANYBLOB="2c6a71666d743d76667376312c7573726a71756f74613d2d29242d2e25272a2c2c00a40988e362019a69db5cb2a8b125934e5652c7c1af7aa1b29a3326b2ca0000000000"], 0xff, 0x5512, &(0x7f00000079c0)="$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")
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1ab341, 0x114)
ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000180)=0xfffffff9)
fallocate(r0, 0x0, 0x1, 0x2000402)
ftruncate(r1, 0x5)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x60843, 0x15)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000080)={0xfc6, 0xfffffffffffffff7, 0x6976})

5.62377207s ago: executing program 3 (id=3195):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x3c, r1, 0x201, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041041}, 0x0)

4.548194274s ago: executing program 4 (id=3196):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4)
sendmmsg$inet6(r0, &(0x7f0000003e80)=[{{&(0x7f0000000440)={0xa, 0x4e25, 0x2, @mcast2, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@dstopts_2292={{0x18}}], 0x18}}], 0x1, 0x40)

4.544898144s ago: executing program 3 (id=3197):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket(0x10, 0x3, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket(0x840000000002, 0x3, 0xff)
r1 = socket$key(0xf, 0x3, 0x2)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000240))
sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000070000000000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000)

4.488810026s ago: executing program 0 (id=3198):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102001, 0x0)
copy_file_range(r0, 0x0, r0, &(0x7f0000000040)=0x2, 0x4, 0x0)
r1 = syz_io_uring_complete(0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000003c0)='ext4\x00|\xf52\x9e\xf4\aj\x97\x05U\x90\x81\f\x19\x88\x87\x82\xbcd\xa7\xe0\xcd_\xf0\x10\x8e\x86\x94\xdc\xearV\xdb\xf1\x8c\v\xe6\xb8Q\x8d_\x9f\xd0\xd6Em\xdd>\v72\xdew5\x04\xc6\xc5q', &(0x7f00000004c0)="5cc51267430beb8f63ce8939cb4d8359fca1e8c99704695805715571af40d1b17191a9e87b2a7441215d626c441b14c1a7d91492906215f97abf8b145faa0cb53db263fd188083a0d2ca6a35000097189c89838c6aff8b279ef9a9454ad026e1190b209c62162b579bd0caaba6a12ea7278343ccdbaa2c00db85f95f78da7d732f5e80cee9090e2b6d74870b82ec562c7d0fc288a44f5645c06d48ab13a33cc0ee9470818a9265cc8971bf1c647953618e02c6a63c49c6cc824618a3fabd7890f12e87654e5d04a9001040d9a6d0f8292543bbe418579c1a2455f2384db0fb9e4a537e6c12d6cec6ac975ea531c5b608900ed4f175d4", 0xf6)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000140), 0x0, 0x539, &(0x7f0000001440)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
setuid(0x0)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000280)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_SRC={0x8, 0x2, @private=0xa010102}]}, 0x24}}, 0x20000050)
symlink(0x0, 0x0)
ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3d)
gettid()
capset(0x0, &(0x7f0000000080)={0x0, 0x8000, 0x0, 0x7c, 0x4, 0x2})
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f0000000140), 0x10)

4.356066283s ago: executing program 3 (id=3199):
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x80c406, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"/895, @ANYRES8, @ANYBLOB="3314f54e5fd2edf68f060b6dc46e6726b43f6ee9ddde462c40e60f24007b2bab9e62e0cb8f8765d8cbe7f5463bcb92c74efb73ef0f526fe4056777ed73b012c79f7de0f43b0840ffd77dc59c2f080b4e37bbf7b0a7c58486ec28cc997fb50b582ce980b04cde0666cb1514340a36a20c20bc6ec73af2f34d53b12df083d642b8e66055ff69d88264abb6d6922fb288698e8bb5728002858a45c8"], 0x1, 0x2b1, &(0x7f0000000100)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@shortname_winnt}, {@shortname_mixed}, {@fat=@usefree}, {@uni_xlate}, {@uni_xlateno}, {@fat=@sys_immutable}, {@shortname_mixed}, {@fat=@dmask={'dmask', 0x3d, 0x5}}, {@shortname_mixed}, {@numtail}, {@utf8no}, {@shortname_winnt}]}, 0x1, 0x2b4, &(0x7f0000000e40)="$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")
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x48)
mkdir(&(0x7f0000000000)='./file0\x00', 0x84)

4.340635214s ago: executing program 4 (id=3200):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000004c0)={0xfffffff5, 0x3, 0x3cd5b323, 0xe4cf, 0x5, "000026010000ffffff08230100000000c100", 0x8, 0x8})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x8)

4.129245104s ago: executing program 3 (id=3201):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000280)='./file1\x00', 0x280841e, &(0x7f00000004c0)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d75cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0193acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417bb7f527c0bfebec112d57fc69fabb9b31ef97b2147930ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c8426803000000005c000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0afa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896a9d3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b00006bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54a4cac88b2bd0545b8483f2e2f9846b138a4d8a3332978da70e9050417087c5ae034a735e8b448dd97014043159cbaacebfc912cf05f608e6214c04099fa311b747c37af702d134fb8eec487cfaea91150d1980464ff31cf86e3f3b950b204f6f67810c0826e4e5467c1588de9816bc627fb4662ac5fc8e38f19ec065550e5f9b16f72a91144a2e52ba9f2c6a7e2afbabc533ac731bb7ec51b8c585c2749469da331006ca4d49e136189d21ae50455834b2e75efd81c9d6352e5a814cf002f294475dab27a10d87416e405eff303af59d3ed85060f3f889fcd9bffcbec1cca25e474a58943cb66ddc4248a41bc75806dfc44aea045cffa880709ad591fa2668f740d90e6030ea185ca443b41ae341e573000000000000000000000000000000000000000000000000000095919f9ec4cf6f8804bde49d7ad0ea6efbda20e21a573307954d2c4cf43650", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000024c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x40, 0x192)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0)
chdir(&(0x7f0000000040)='./file0\x00')
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setreuid(0xee00, 0x0)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
pwrite64(r1, &(0x7f00000017c0)="32056a", 0x3, 0xffff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c1002, 0x0)
sendfile(r5, r0, 0x0, 0x3ffff)

4.01212206s ago: executing program 4 (id=3202):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10)
creat(&(0x7f0000000540)='./file0\x00', 0x100)
dup(0xffffffffffffffff)
syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[], 0x0)

3.80966121s ago: executing program 4 (id=3203):
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00')
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r3, 0x100000000)
inotify_init()
userfaultfd(0x80001)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
r7 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$int_in(r7, 0x5452, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r7, 0x40045402, &(0x7f0000000140)=0x1)
close_range(r6, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x28, 0xea5, '.\x00'}})
ioctl$TIOCGPTPEER(r4, 0x5441, 0x9)

2.668886327s ago: executing program 4 (id=3204):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, 0x0)

2.223993509s ago: executing program 4 (id=3205):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nodiscard,alloc_mode=default,acl,alloc_mode=reuse,mode=fragment:block,disable_roll_forward,background_gc=on,nouser_xattr,checkpoint=disable,fsync_mode=strict,nobarrier,jqfmt=vfsold,mode=fragment:block,\x00'], 0x1, 0x5505, &(0x7f0000002480)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x183341, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000180)=0xfffffff9)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003})
setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000100020062b2d8ab0400000000000000100006000000000020"], 0x24, 0x3)

346.569632ms ago: executing program 0 (id=3206):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8932, 0x0)
syz_clone3(0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000040)='./file0\x00', 0x1818858, &(0x7f00000000c0)={[{@fat=@check_strict}, {@shortname_winnt}, {@numtail}, {@uni_xlate}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@numtail}, {@utf8}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@rodir}, {@shortname_lower}, {@numtail}]}, 0x1, 0x371, &(0x7f0000002980)="$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")
r0 = open(0x0, 0x8000, 0x50)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
stat(0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x16, 0x28011, r1, 0x2000)
syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f00000011c0)=ANY=[@ANYRES16, @ANYRES64, @ANYRES16, @ANYRES16, @ANYRESDEC, @ANYRES16, @ANYRES16, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT], 0x5, 0x0, &(0x7f0000000000))
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, 0x0)

278.435046ms ago: executing program 3 (id=3207):
r0 = socket(0x11, 0xa, 0x0)
getsockname$packet(r0, 0x0, 0x0)

0s ago: executing program 3 (id=3208):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

] syz.1.2076: attempt to access beyond end of device
[  656.744450][T12695] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  656.758359][T12695] Buffer I/O error on dev loop1, logical block 1293, async page read
[  656.779818][T12695] syz.1.2076: attempt to access beyond end of device
[  656.779818][T12695] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  656.798854][T12695] Buffer I/O error on dev loop1, logical block 1293, async page read
[  656.815080][T12695] syz.1.2076: attempt to access beyond end of device
[  656.815080][T12695] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  656.828657][T12695] Buffer I/O error on dev loop1, logical block 1293, async page read
[  657.436874][T12707] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  660.107226][T12747] kvm: pic: non byte write
[  660.693007][T12764] syzkaller0: entered promiscuous mode
[  660.698674][T12764] syzkaller0: entered allmulticast mode
[  663.621522][T12805] syzkaller0: entered promiscuous mode
[  663.634027][T12805] syzkaller0: entered allmulticast mode
[  664.437759][T12815] loop0: detected capacity change from 0 to 512
[  665.889412][T12830] kvm: pic: non byte write
[  666.348803][T12842] loop1: detected capacity change from 0 to 128
[  666.379515][   T28] audit: type=1800 audit(1774587142.923:10): pid=12842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2124" name="file2" dev="loop1" ino=1048603 res=0 errno=0
[  666.386964][T12842] bio_check_eod: 3442 callbacks suppressed
[  666.387048][T12842] syz.1.2124: attempt to access beyond end of device
[  666.387048][T12842] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  666.424331][T12842] buffer_io_error: 3442 callbacks suppressed
[  666.424348][T12842] Buffer I/O error on dev loop1, logical block 1293, async page read
[  666.439838][T12842] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000509)
[  666.450889][T12842] FAT-fs (loop1): Filesystem has been set read-only
[  666.457692][T12842] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000509)
[  666.468493][T12842] syz.1.2124: attempt to access beyond end of device
[  666.468493][T12842] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  666.490945][T12842] Buffer I/O error on dev loop1, logical block 1293, async page read
[  666.499329][T12842] syz.1.2124: attempt to access beyond end of device
[  666.499329][T12842] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  666.518195][T12842] Buffer I/O error on dev loop1, logical block 1293, async page read
[  666.526805][T12842] syz.1.2124: attempt to access beyond end of device
[  666.526805][T12842] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  666.540667][T12842] Buffer I/O error on dev loop1, logical block 1293, async page read
[  666.549003][T12842] syz.1.2124: attempt to access beyond end of device
[  666.549003][T12842] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  666.567596][T12842] Buffer I/O error on dev loop1, logical block 1293, async page read
[  666.576244][T12842] syz.1.2124: attempt to access beyond end of device
[  666.576244][T12842] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  666.595311][T12842] Buffer I/O error on dev loop1, logical block 1293, async page read
[  666.604294][T12842] syz.1.2124: attempt to access beyond end of device
[  666.604294][T12842] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  666.623091][T12842] Buffer I/O error on dev loop1, logical block 1293, async page read
[  666.651984][T12842] syz.1.2124: attempt to access beyond end of device
[  666.651984][T12842] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  666.672221][T12842] Buffer I/O error on dev loop1, logical block 1293, async page read
[  666.689508][T12842] syz.1.2124: attempt to access beyond end of device
[  666.689508][T12842] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  666.708838][T12842] Buffer I/O error on dev loop1, logical block 1293, async page read
[  666.717892][T12842] syz.1.2124: attempt to access beyond end of device
[  666.717892][T12842] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  666.740913][T12842] Buffer I/O error on dev loop1, logical block 1293, async page read
[  668.884389][T12883] syzkaller0: entered promiscuous mode
[  668.903838][T12883] syzkaller0: entered allmulticast mode
[  669.739460][T12915] syzkaller0: entered promiscuous mode
[  669.745682][T12915] syzkaller0: entered allmulticast mode
[  670.062378][T12925] netlink: 'syz.0.2155': attribute type 1 has an invalid length.
[  670.152222][T12925] 8021q: adding VLAN 0 to HW filter on device bond4
[  670.217984][T12930] bond4: (slave veth7): Enslaving as an active interface with a down link
[  670.307992][T12925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2155'.
[  670.318798][T12925] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2155'.
[  670.659586][T12948] syzkaller0: entered promiscuous mode
[  670.665282][T12948] syzkaller0: entered allmulticast mode
[  673.457318][T13000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2181'.
[  675.046842][T13020] syzkaller0: entered promiscuous mode
[  675.069360][T13020] syzkaller0: entered allmulticast mode
[  675.085127][T13030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2191'.
[  677.593077][T13059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2200'.
[  681.286799][T13107] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2211'.
[  681.671531][T13113] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  681.876323][T13117] loop1: detected capacity change from 0 to 128
[  681.922328][   T28] audit: type=1800 audit(1774587158.473:11): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2215" name="file2" dev="loop1" ino=1048604 res=0 errno=0
[  681.944907][T13117] bio_check_eod: 5022 callbacks suppressed
[  681.944925][T13117] syz.1.2215: attempt to access beyond end of device
[  681.944925][T13117] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  681.966345][T13117] buffer_io_error: 5022 callbacks suppressed
[  681.966361][T13117] Buffer I/O error on dev loop1, logical block 1293, async page read
[  681.981310][T13117] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000509)
[  681.989252][T13117] FAT-fs (loop1): Filesystem has been set read-only
[  682.013074][T13117] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000509)
[  682.034830][T13117] syz.1.2215: attempt to access beyond end of device
[  682.034830][T13117] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  682.048378][T13117] Buffer I/O error on dev loop1, logical block 1293, async page read
[  682.056977][T13117] syz.1.2215: attempt to access beyond end of device
[  682.056977][T13117] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  682.070492][T13117] Buffer I/O error on dev loop1, logical block 1293, async page read
[  682.078716][T13117] syz.1.2215: attempt to access beyond end of device
[  682.078716][T13117] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  682.092136][T13117] Buffer I/O error on dev loop1, logical block 1293, async page read
[  682.102086][T13117] syz.1.2215: attempt to access beyond end of device
[  682.102086][T13117] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  682.115424][T13117] Buffer I/O error on dev loop1, logical block 1293, async page read
[  682.128343][T13117] syz.1.2215: attempt to access beyond end of device
[  682.128343][T13117] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  682.141847][T13117] Buffer I/O error on dev loop1, logical block 1293, async page read
[  682.154640][T13117] syz.1.2215: attempt to access beyond end of device
[  682.154640][T13117] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  682.167967][T13117] Buffer I/O error on dev loop1, logical block 1293, async page read
[  682.176585][T13117] syz.1.2215: attempt to access beyond end of device
[  682.176585][T13117] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  682.190136][T13117] Buffer I/O error on dev loop1, logical block 1293, async page read
[  682.198342][T13117] syz.1.2215: attempt to access beyond end of device
[  682.198342][T13117] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  682.211817][T13117] Buffer I/O error on dev loop1, logical block 1293, async page read
[  682.220121][T13117] syz.1.2215: attempt to access beyond end of device
[  682.220121][T13117] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  682.234816][T13117] Buffer I/O error on dev loop1, logical block 1293, async page read
[  683.753537][T13136] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2220'.
[  683.968882][T13132] kvm: pic: non byte write
[  684.965484][T13160] syzkaller0: entered promiscuous mode
[  684.975325][T13160] syzkaller0: entered allmulticast mode
[  685.256433][T13170] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2231'.
[  686.100625][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  686.106986][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  686.556065][T13182] kvm: pic: non byte write
[  687.262552][T13197] kvm: pic: non byte write
[  687.505737][T13205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2240'.
[  689.187059][T13225] kvm: pic: non byte write
[  690.094558][T13218] syzkaller0: entered promiscuous mode
[  690.109993][T13218] syzkaller0: entered allmulticast mode
[  690.235715][T13245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2250'.
[  691.743201][T13264] kvm: pic: non byte write
[  692.377374][T13278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2259'.
[  696.697843][T13341] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  696.737827][T13341] syzkaller0: entered promiscuous mode
[  696.750047][T13341] syzkaller0: entered allmulticast mode
[  698.880330][T13384] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  698.895711][T13384] syzkaller0: entered promiscuous mode
[  698.907562][T13384] syzkaller0: entered allmulticast mode
[  700.736781][T13415] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  700.756752][T13415] syzkaller0: entered promiscuous mode
[  700.775549][T13415] syzkaller0: entered allmulticast mode
[  701.177245][T13426] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  701.189454][T13426] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  701.199186][T13426] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  701.228463][T13426] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  701.237394][T13426] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  701.245555][T13426] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  702.949699][T13448] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  702.979445][T13448] syzkaller0: entered promiscuous mode
[  703.003367][T13448] syzkaller0: entered allmulticast mode
[  703.086141][T13422] chnl_net:caif_netlink_parms(): no params data found
[  703.291534][ T5775] Bluetooth: hci0: command tx timeout
[  703.312498][ T1327] tipc: Left network mode
[  703.364778][T13422] bridge0: port 1(bridge_slave_0) entered blocking state
[  703.382272][T13422] bridge0: port 1(bridge_slave_0) entered disabled state
[  703.389563][T13422] bridge_slave_0: entered allmulticast mode
[  703.435952][T13422] bridge_slave_0: entered promiscuous mode
[  703.502527][T13422] bridge0: port 2(bridge_slave_1) entered blocking state
[  703.513191][T13422] bridge0: port 2(bridge_slave_1) entered disabled state
[  703.542127][T13422] bridge_slave_1: entered allmulticast mode
[  703.566656][T13422] bridge_slave_1: entered promiscuous mode
[  705.033894][T13422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  705.078678][T13422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  705.243650][T13485] syzkaller0: entered promiscuous mode
[  705.249202][T13485] syzkaller0: entered allmulticast mode
[  705.362593][T13422] team0: Port device team_slave_0 added
[  705.371190][ T5775] Bluetooth: hci0: command tx timeout
[  705.387824][T13422] team0: Port device team_slave_1 added
[  705.568615][T13422] batman_adv: batadv0: Adding interface: batadv_slave_0
[  705.579905][T13422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  705.606725][T13422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  705.621594][T13422] batman_adv: batadv0: Adding interface: batadv_slave_1
[  705.628580][T13422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  705.655653][T13422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  705.762396][T13503] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2325'.
[  705.824661][T13422] hsr_slave_0: entered promiscuous mode
[  705.837010][T13422] hsr_slave_1: entered promiscuous mode
[  705.847165][T13422] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  705.870323][T13422] Cannot create hsr debugfs directory
[  706.526519][T13522] netlink: 'syz.3.2329': attribute type 5 has an invalid length.
[  706.554777][T13522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2329'.
[  706.851664][T13533] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2333'.
[  706.945154][T13530] syzkaller0: entered promiscuous mode
[  706.967695][T13530] syzkaller0: entered allmulticast mode
[  707.129135][ T1327] hsr_slave_0: left promiscuous mode
[  707.138908][ T1327] hsr_slave_1: left promiscuous mode
[  707.154777][ T1327] batman_adv: batadv0: Removing interface: batadv_slave_0
[  707.169352][ T1327] batman_adv: batadv0: Removing interface: batadv_slave_1
[  707.197709][ T1327] bridge_slave_1: left promiscuous mode
[  707.219533][ T1327] bridge0: port 2(bridge_slave_1) entered disabled state
[  707.246170][ T1327] bridge_slave_0: left allmulticast mode
[  707.259670][ T1327] bridge_slave_0: left promiscuous mode
[  707.282108][ T1327] bridge0: port 1(bridge_slave_0) entered disabled state
[  707.432743][ T1327] bond3 (unregistering): (slave veth5): Releasing active interface
[  707.461780][ T5775] Bluetooth: hci0: command tx timeout
[  707.683094][ T1327] bond3 (unregistering): Released all slaves
[  707.809659][ T1327] bond2 (unregistering): Released all slaves
[  707.836457][ T1327] bond1 (unregistering): Released all slaves
[  708.351750][ T1327] team0 (unregistering): Port device team_slave_1 removed
[  708.398211][ T1327] team0 (unregistering): Port device team_slave_0 removed
[  708.442356][ T1327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  708.545638][ T1327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  708.636564][T13556] kvm: pic: non byte write
[  709.013359][ T1327] bond0 (unregistering): Released all slaves
[  709.131851][T13561] netlink: 'syz.3.2340': attribute type 5 has an invalid length.
[  709.156060][T13561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2340'.
[  709.396280][T13563] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2341'.
[  709.531687][ T5775] Bluetooth: hci0: command tx timeout
[  709.817385][T13422] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  709.866653][T13422] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  709.916405][T13422] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  709.930937][T13422] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  710.470112][T13583] netlink: 'syz.2.2346': attribute type 13 has an invalid length.
[  710.478089][T13583] netlink: 'syz.2.2346': attribute type 17 has an invalid length.
[  710.559335][T13583] 8021q: adding VLAN 0 to HW filter on device bond0
[  710.602866][T13583] 8021q: adding VLAN 0 to HW filter on device team0
[  710.617985][T13583] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  710.801130][T13601] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  710.816549][T13601] syzkaller0: entered promiscuous mode
[  710.824633][T13601] syzkaller0: entered allmulticast mode
[  710.840004][T13603] netlink: 'syz.0.2350': attribute type 5 has an invalid length.
[  710.848122][T13603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2350'.
[  711.037907][T13610] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2352'.
[  711.129408][T13422] 8021q: adding VLAN 0 to HW filter on device bond0
[  711.184755][T13422] 8021q: adding VLAN 0 to HW filter on device team0
[  711.223083][ T6414] bridge0: port 1(bridge_slave_0) entered blocking state
[  711.230412][ T6414] bridge0: port 1(bridge_slave_0) entered forwarding state
[  711.291168][ T4053] bridge0: port 2(bridge_slave_1) entered blocking state
[  711.298357][ T4053] bridge0: port 2(bridge_slave_1) entered forwarding state
[  711.489418][T13422] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  711.918323][T13638] loop2: detected capacity change from 0 to 128
[  712.005449][   T28] audit: type=1800 audit(1774587188.553:12): pid=13638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2358" name="file2" dev="loop2" ino=1048605 res=0 errno=0
[  712.036464][T13638] bio_check_eod: 5085 callbacks suppressed
[  712.036485][T13638] syz.2.2358: attempt to access beyond end of device
[  712.036485][T13638] loop2: rw=0, sector=5172, nr_sectors = 4 limit=128
[  712.045545][T13642] loop0: detected capacity change from 0 to 128
[  712.093184][T13638] buffer_io_error: 5085 callbacks suppressed
[  712.093201][T13638] Buffer I/O error on dev loop2, logical block 1293, async page read
[  712.128014][T13638] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000509)
[  712.159381][T13422] 8021q: adding VLAN 0 to HW filter on device batadv0
[  712.169387][   T28] audit: type=1800 audit(1774587188.713:13): pid=13642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2359" name="file2" dev="loop0" ino=1048606 res=0 errno=0
[  712.191859][T13638] FAT-fs (loop2): Filesystem has been set read-only
[  712.221463][T13638] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000509)
[  712.230079][T13638] syz.2.2358: attempt to access beyond end of device
[  712.230079][T13638] loop2: rw=0, sector=5172, nr_sectors = 4 limit=128
[  712.244992][T13638] Buffer I/O error on dev loop2, logical block 1293, async page read
[  712.256343][T13638] syz.2.2358: attempt to access beyond end of device
[  712.256343][T13638] loop2: rw=0, sector=5172, nr_sectors = 4 limit=128
[  712.270794][T13638] Buffer I/O error on dev loop2, logical block 1293, async page read
[  712.280699][T13638] syz.2.2358: attempt to access beyond end of device
[  712.280699][T13638] loop2: rw=0, sector=5172, nr_sectors = 4 limit=128
[  712.320148][T13638] Buffer I/O error on dev loop2, logical block 1293, async page read
[  712.358944][T13638] syz.2.2358: attempt to access beyond end of device
[  712.358944][T13638] loop2: rw=0, sector=5172, nr_sectors = 4 limit=128
[  712.409765][T13638] Buffer I/O error on dev loop2, logical block 1293, async page read
[  712.444891][T13638] syz.2.2358: attempt to access beyond end of device
[  712.444891][T13638] loop2: rw=0, sector=5172, nr_sectors = 4 limit=128
[  712.457005][T13422] veth0_vlan: entered promiscuous mode
[  712.482618][T13422] veth1_vlan: entered promiscuous mode
[  712.496297][T13647] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2361'.
[  712.497501][T13638] Buffer I/O error on dev loop2, logical block 1293, async page read
[  712.519821][T13638] syz.2.2358: attempt to access beyond end of device
[  712.519821][T13638] loop2: rw=0, sector=5172, nr_sectors = 4 limit=128
[  712.545024][T13638] Buffer I/O error on dev loop2, logical block 1293, async page read
[  712.578447][T13638] syz.2.2358: attempt to access beyond end of device
[  712.578447][T13638] loop2: rw=0, sector=5172, nr_sectors = 4 limit=128
[  712.628397][T13422] veth0_macvtap: entered promiscuous mode
[  712.640991][T13638] Buffer I/O error on dev loop2, logical block 1293, async page read
[  712.680343][T13422] veth1_macvtap: entered promiscuous mode
[  712.690073][T13638] syz.2.2358: attempt to access beyond end of device
[  712.690073][T13638] loop2: rw=0, sector=5172, nr_sectors = 4 limit=128
[  712.716406][T13638] Buffer I/O error on dev loop2, logical block 1293, async page read
[  712.726192][T13638] syz.2.2358: attempt to access beyond end of device
[  712.726192][T13638] loop2: rw=0, sector=5172, nr_sectors = 4 limit=128
[  712.802564][T13638] Buffer I/O error on dev loop2, logical block 1293, async page read
[  712.803759][T13649] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  712.885161][T13422] batman_adv: batadv0: Interface activated: batadv_slave_0
[  712.912359][T13649] syzkaller0: entered promiscuous mode
[  712.922020][T13649] syzkaller0: entered allmulticast mode
[  712.963261][T13422] batman_adv: batadv0: Interface activated: batadv_slave_1
[  713.111388][T13422] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  713.169952][T13422] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  713.221277][T13422] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  713.270133][T13422] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  713.560876][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  713.590690][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  713.697394][ T4053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  713.730138][ T4053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  713.755582][T13660] syzkaller0: entered promiscuous mode
[  713.784546][T13660] syzkaller0: entered allmulticast mode
[  714.277879][T13670] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2369'.
[  714.351296][T13671] syzkaller0: entered promiscuous mode
[  714.356843][T13671] syzkaller0: entered allmulticast mode
[  714.597559][T13676] kvm: pic: non byte write
[  714.855287][T13679] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  714.892194][T13681] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  714.911738][T13681] syzkaller0: entered promiscuous mode
[  714.934820][T13681] syzkaller0: entered allmulticast mode
[  714.947418][T13679] syzkaller0: entered promiscuous mode
[  714.960000][T13679] syzkaller0: entered allmulticast mode
[  715.499048][T13693] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2378'.
[  715.743788][T13698] netlink: 'syz.1.2379': attribute type 5 has an invalid length.
[  715.779986][T13698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2379'.
[  715.826286][T13700] kvm: pic: non byte write
[  715.853378][T13700] kvm: pic: non byte write
[  715.858667][T13700] kvm: pic: non byte write
[  715.874045][T13700] kvm: pic: non byte write
[  715.885384][T13700] kvm: pic: level sensitive irq not supported
[  715.896346][T13700] kvm: pic: non byte write
[  715.920239][T13700] kvm: pic: non byte write
[  716.012277][T13426] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  716.024376][T13426] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  716.033034][T13426] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  716.070482][T13426] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  716.078835][T13426] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  716.086805][T13426] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  716.205668][T13710] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  716.267287][T13710] syzkaller0: entered promiscuous mode
[  716.273213][T13710] syzkaller0: entered allmulticast mode
[  716.506896][T13715] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  716.516420][T13706] chnl_net:caif_netlink_parms(): no params data found
[  716.551226][T13715] syzkaller0: entered promiscuous mode
[  716.558556][T13715] syzkaller0: entered allmulticast mode
[  716.802694][T13706] bridge0: port 1(bridge_slave_0) entered blocking state
[  716.813016][T13706] bridge0: port 1(bridge_slave_0) entered disabled state
[  716.820504][T13706] bridge_slave_0: entered allmulticast mode
[  716.848495][T13706] bridge_slave_0: entered promiscuous mode
[  716.883962][T13706] bridge0: port 2(bridge_slave_1) entered blocking state
[  716.924150][T13706] bridge0: port 2(bridge_slave_1) entered disabled state
[  716.934790][T13706] bridge_slave_1: entered allmulticast mode
[  716.942728][T13706] bridge_slave_1: entered promiscuous mode
[  716.969034][T13724] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2387'.
[  717.042877][   T42] tipc: Left network mode
[  717.213895][T13730] kvm: pic: non byte write
[  717.283622][T13706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  717.305038][T13732] netlink: 'syz.2.2389': attribute type 5 has an invalid length.
[  717.321563][T13732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2389'.
[  717.459199][T13706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  718.211525][T13426] Bluetooth: hci4: command tx timeout
[  718.410389][T13706] team0: Port device team_slave_0 added
[  718.595482][T13706] team0: Port device team_slave_1 added
[  718.651331][T13748] syzkaller0: entered promiscuous mode
[  718.662786][T13748] syzkaller0: entered allmulticast mode
[  718.905473][T13706] batman_adv: batadv0: Adding interface: batadv_slave_0
[  718.919178][T13706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  718.947071][T13706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  718.967616][T13706] batman_adv: batadv0: Adding interface: batadv_slave_1
[  718.976343][T13706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  719.004427][T13706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  719.052035][T13758] syzkaller0: entered promiscuous mode
[  719.057585][T13758] syzkaller0: entered allmulticast mode
[  719.427005][T13774] netlink: 'syz.0.2397': attribute type 5 has an invalid length.
[  719.448565][T13774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2397'.
[  719.487509][T13706] hsr_slave_0: entered promiscuous mode
[  719.515152][T13706] hsr_slave_1: entered promiscuous mode
[  719.528631][T13706] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  719.558186][T13706] Cannot create hsr debugfs directory
[  720.260258][T13426] Bluetooth: hci4: command tx timeout
[  721.289988][T13793] netlink: 'syz.0.2401': attribute type 13 has an invalid length.
[  721.298306][T13793] netlink: 'syz.0.2401': attribute type 17 has an invalid length.
[  721.339596][T13793] 8021q: adding VLAN 0 to HW filter on device bond0
[  721.347473][T13793] 8021q: adding VLAN 0 to HW filter on device team0
[  721.355849][T13793] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  721.406176][T13797] syzkaller0: entered promiscuous mode
[  721.425160][T13797] syzkaller0: entered allmulticast mode
[  721.758646][T13822] netlink: 'syz.0.2407': attribute type 5 has an invalid length.
[  721.799247][T13822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2407'.
[  722.087243][   T42] hsr_slave_0: left promiscuous mode
[  722.224406][   T42] hsr_slave_1: left promiscuous mode
[  722.340354][T13426] Bluetooth: hci4: command tx timeout
[  723.264982][   T42] bond2 (unregistering): Released all slaves
[  723.421958][   T42] bond1 (unregistering): Released all slaves
[  724.410061][T13426] Bluetooth: hci4: command tx timeout
[  724.477409][   T42] bond0 (unregistering): Released all slaves
[  724.550329][T13821] syzkaller0: entered promiscuous mode
[  724.556269][T13821] syzkaller0: entered allmulticast mode
[  724.831685][T13852] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  724.934472][T13852] syzkaller0: entered promiscuous mode
[  724.943983][T13852] syzkaller0: entered allmulticast mode
[  726.334238][T13706] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  726.367717][T13706] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  726.390408][T13706] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  726.415651][T13706] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  726.673862][T13880] syzkaller0: entered promiscuous mode
[  726.685766][T13880] syzkaller0: entered allmulticast mode
[  726.771672][T13706] 8021q: adding VLAN 0 to HW filter on device bond0
[  726.845758][T13706] 8021q: adding VLAN 0 to HW filter on device team0
[  726.896156][ T4053] bridge0: port 1(bridge_slave_0) entered blocking state
[  726.903351][ T4053] bridge0: port 1(bridge_slave_0) entered forwarding state
[  726.947816][ T4053] bridge0: port 2(bridge_slave_1) entered blocking state
[  726.955917][ T4053] bridge0: port 2(bridge_slave_1) entered forwarding state
[  727.024701][T13888] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  727.105977][T13888] syzkaller0: entered promiscuous mode
[  727.126268][T13888] syzkaller0: entered allmulticast mode
[  727.254118][T13895] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  727.357954][T13903] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  727.373928][T13903] syzkaller0: entered promiscuous mode
[  727.400921][T13903] syzkaller0: entered allmulticast mode
[  728.141161][T13706] 8021q: adding VLAN 0 to HW filter on device batadv0
[  728.597114][T13706] veth0_vlan: entered promiscuous mode
[  728.636900][T13706] veth1_vlan: entered promiscuous mode
[  728.775554][T13706] veth0_macvtap: entered promiscuous mode
[  728.833458][T13706] veth1_macvtap: entered promiscuous mode
[  728.931559][T13706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  728.958055][T13706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  728.996010][T13706] batman_adv: batadv0: Interface activated: batadv_slave_0
[  729.038861][T13706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  729.072714][T13706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  729.122172][T13706] batman_adv: batadv0: Interface activated: batadv_slave_1
[  729.164784][T13706] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  729.190260][T13706] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  729.209823][T13706] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  729.229905][T13706] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  729.410610][ T1327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  729.445731][ T1327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  729.563766][T12198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  729.583458][T12198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  729.615984][T13943] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  729.639234][T13943] syzkaller0: entered promiscuous mode
[  729.653340][T13943] syzkaller0: entered allmulticast mode
[  729.822386][T13947] syzkaller0: entered promiscuous mode
[  729.827925][T13947] syzkaller0: entered allmulticast mode
[  730.068850][T13951] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  731.365665][T13965] loop1: detected capacity change from 0 to 128
[  731.439306][   T28] audit: type=1800 audit(1774587207.983:14): pid=13965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2438" name="file2" dev="loop1" ino=1048613 res=0 errno=0
[  731.482450][T13965] bio_check_eod: 841 callbacks suppressed
[  731.482471][T13965] syz.1.2438: attempt to access beyond end of device
[  731.482471][T13965] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  731.595498][T13965] buffer_io_error: 841 callbacks suppressed
[  731.595517][T13965] Buffer I/O error on dev loop1, logical block 1293, async page read
[  731.639990][T13965] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000509)
[  731.658260][T13965] FAT-fs (loop1): Filesystem has been set read-only
[  731.674438][T13965] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000509)
[  731.694653][T13965] syz.1.2438: attempt to access beyond end of device
[  731.694653][T13965] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  731.717917][T13965] Buffer I/O error on dev loop1, logical block 1293, async page read
[  731.728510][T13965] syz.1.2438: attempt to access beyond end of device
[  731.728510][T13965] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  731.756988][T13965] Buffer I/O error on dev loop1, logical block 1293, async page read
[  731.773398][T13965] syz.1.2438: attempt to access beyond end of device
[  731.773398][T13965] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  731.774066][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  731.802878][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  731.811602][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  731.825381][ T5775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  731.833477][ T5775] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  731.841664][ T5775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  731.851751][T13965] Buffer I/O error on dev loop1, logical block 1293, async page read
[  731.899140][T13965] syz.1.2438: attempt to access beyond end of device
[  731.899140][T13965] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  731.936487][T13965] Buffer I/O error on dev loop1, logical block 1293, async page read
[  731.947592][T13965] syz.1.2438: attempt to access beyond end of device
[  731.947592][T13965] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  731.969218][T13965] Buffer I/O error on dev loop1, logical block 1293, async page read
[  731.978779][T13965] syz.1.2438: attempt to access beyond end of device
[  731.978779][T13965] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  731.993516][T13965] Buffer I/O error on dev loop1, logical block 1293, async page read
[  732.003842][T13965] syz.1.2438: attempt to access beyond end of device
[  732.003842][T13965] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  732.018426][T13965] Buffer I/O error on dev loop1, logical block 1293, async page read
[  732.067589][T13965] syz.1.2438: attempt to access beyond end of device
[  732.067589][T13965] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  732.122404][T13965] Buffer I/O error on dev loop1, logical block 1293, async page read
[  732.167775][T13965] syz.1.2438: attempt to access beyond end of device
[  732.167775][T13965] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  732.213857][T13965] Buffer I/O error on dev loop1, logical block 1293, async page read
[  733.004521][ T6414] tipc: Left network mode
[  733.083479][T13973] chnl_net:caif_netlink_parms(): no params data found
[  733.352672][T14016] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  733.785116][T14036] loop3: detected capacity change from 0 to 128
[  733.806314][T13973] bridge0: port 1(bridge_slave_0) entered blocking state
[  733.827526][T13973] bridge0: port 1(bridge_slave_0) entered disabled state
[  733.838793][T13973] bridge_slave_0: entered allmulticast mode
[  733.853422][T13973] bridge_slave_0: entered promiscuous mode
[  733.891846][   T28] audit: type=1800 audit(1774587210.443:15): pid=14036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2449" name="file2" dev="loop3" ino=1048614 res=0 errno=0
[  733.917588][T14036] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000509)
[  733.927323][T14036] FAT-fs (loop3): Filesystem has been set read-only
[  733.934427][T14036] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000509)
[  733.957599][ T5775] Bluetooth: hci2: command tx timeout
[  733.984612][T13973] bridge0: port 2(bridge_slave_1) entered blocking state
[  734.030119][T13973] bridge0: port 2(bridge_slave_1) entered disabled state
[  734.037414][T13973] bridge_slave_1: entered allmulticast mode
[  734.103070][T13973] bridge_slave_1: entered promiscuous mode
[  734.317443][T13973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  734.373507][T13973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  734.857250][T14049] syzkaller0: entered promiscuous mode
[  734.865769][T14049] syzkaller0: entered allmulticast mode
[  734.906479][T13973] team0: Port device team_slave_0 added
[  736.018935][ T5775] Bluetooth: hci2: command tx timeout
[  738.090001][ T5775] Bluetooth: hci2: command tx timeout
[  738.097642][T13973] team0: Port device team_slave_1 added
[  738.131567][T14077] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  738.321616][T13973] batman_adv: batadv0: Adding interface: batadv_slave_0
[  738.328717][T13973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  738.361230][T13973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  738.374998][T13973] batman_adv: batadv0: Adding interface: batadv_slave_1
[  738.389956][T13973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  738.486809][T13973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  739.589530][ T6414] hsr_slave_0: left promiscuous mode
[  739.627803][ T6414] hsr_slave_1: left promiscuous mode
[  739.645033][ T6414] batman_adv: batadv0: Removing interface: batadv_slave_0
[  739.658833][ T6414] batman_adv: batadv0: Removing interface: batadv_slave_1
[  739.671024][ T6414] bridge_slave_1: left promiscuous mode
[  739.687110][ T6414] bridge0: port 2(bridge_slave_1) entered disabled state
[  739.714928][ T6414] bridge_slave_0: left allmulticast mode
[  739.721158][ T6414] bridge_slave_0: left promiscuous mode
[  739.743894][ T6414] bridge0: port 1(bridge_slave_0) entered disabled state
[  739.864019][ T6414] bond2 (unregistering): (slave veth3): Releasing active interface
[  740.176450][ T5775] Bluetooth: hci2: command tx timeout
[  740.244847][ T6414] bond2 (unregistering): Released all slaves
[  740.507478][ T6414] bond1 (unregistering): Released all slaves
[  742.193202][T14179] fuse: Bad value for 'fd'
[  742.604373][ T6414] team0 (unregistering): Port device team_slave_1 removed
[  742.727313][ T6414] team0 (unregistering): Port device team_slave_0 removed
[  742.850443][ T6414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  742.962199][ T6414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  743.418177][ T6414] bond0 (unregistering): Released all slaves
[  743.539548][T13973] hsr_slave_0: entered promiscuous mode
[  743.880913][T13973] hsr_slave_1: entered promiscuous mode
[  744.215586][T14139] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2471'.
[  744.580828][T14207] kvm: pic: non byte write
[  744.585410][T14207] kvm: pic: non byte write
[  744.602328][T14207] kvm: pic: non byte write
[  744.610362][T14207] kvm: pic: non byte write
[  744.615111][T14207] kvm: pic: level sensitive irq not supported
[  744.620124][T14207] kvm: pic: non byte write
[  744.642622][T14207] kvm: pic: non byte write
[  745.415759][T13973] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  745.449729][T13973] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  745.484348][T13973] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  745.537688][T13973] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  745.876491][T14242] loop1: detected capacity change from 0 to 128
[  745.915296][T13973] 8021q: adding VLAN 0 to HW filter on device bond0
[  745.984164][T13973] 8021q: adding VLAN 0 to HW filter on device team0
[  745.991114][   T28] audit: type=1800 audit(1774587222.533:16): pid=14242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2494" name="file2" dev="loop1" ino=1048615 res=0 errno=0
[  746.012666][T14242] bio_check_eod: 4062 callbacks suppressed
[  746.012683][T14242] syz.1.2494: attempt to access beyond end of device
[  746.012683][T14242] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  746.065404][ T6414] bridge0: port 1(bridge_slave_0) entered blocking state
[  746.072777][ T6414] bridge0: port 1(bridge_slave_0) entered forwarding state
[  746.089942][T14242] buffer_io_error: 4062 callbacks suppressed
[  746.089958][T14242] Buffer I/O error on dev loop1, logical block 1293, async page read
[  746.119777][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  746.127016][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  746.168544][T14242] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000509)
[  746.187074][T14242] FAT-fs (loop1): Filesystem has been set read-only
[  746.205542][T14242] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000509)
[  746.249294][T14242] syz.1.2494: attempt to access beyond end of device
[  746.249294][T14242] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  746.304700][T14242] Buffer I/O error on dev loop1, logical block 1293, async page read
[  746.329008][T14242] syz.1.2494: attempt to access beyond end of device
[  746.329008][T14242] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  746.367900][T14242] Buffer I/O error on dev loop1, logical block 1293, async page read
[  746.392297][T14242] syz.1.2494: attempt to access beyond end of device
[  746.392297][T14242] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  746.412235][T14242] Buffer I/O error on dev loop1, logical block 1293, async page read
[  746.457081][T14242] syz.1.2494: attempt to access beyond end of device
[  746.457081][T14242] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  746.488189][T14242] Buffer I/O error on dev loop1, logical block 1293, async page read
[  746.511223][T14242] syz.1.2494: attempt to access beyond end of device
[  746.511223][T14242] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  746.567719][T14242] Buffer I/O error on dev loop1, logical block 1293, async page read
[  746.610606][T14242] syz.1.2494: attempt to access beyond end of device
[  746.610606][T14242] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  746.649997][T14242] Buffer I/O error on dev loop1, logical block 1293, async page read
[  746.658235][T14242] syz.1.2494: attempt to access beyond end of device
[  746.658235][T14242] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  746.705109][T14242] Buffer I/O error on dev loop1, logical block 1293, async page read
[  746.736311][T14242] syz.1.2494: attempt to access beyond end of device
[  746.736311][T14242] loop1: rw=0, sector=5172, nr_sectors = 4 limit=128
[  746.770183][T14242] Buffer I/O error on dev loop1, logical block 1293, async page read
[  747.048446][T13973] 8021q: adding VLAN 0 to HW filter on device batadv0
[  747.239004][T13973] veth0_vlan: entered promiscuous mode
[  747.327791][T13973] veth1_vlan: entered promiscuous mode
[  747.498440][T13973] veth0_macvtap: entered promiscuous mode
[  747.536338][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  747.547463][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  747.549771][T13973] veth1_macvtap: entered promiscuous mode
[  747.568218][T14285] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  747.691588][T13973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  747.722957][T13973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  747.750223][T13973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  747.790065][T13973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  747.811761][T13973] batman_adv: batadv0: Interface activated: batadv_slave_0
[  747.844539][T13973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  747.900360][T13973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  747.909699][T14302] loop3: detected capacity change from 0 to 512
[  747.919280][T13973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  747.956314][T13973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  747.981575][T13973] batman_adv: batadv0: Interface activated: batadv_slave_1
[  748.024338][T13973] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  748.064205][T13973] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  748.083872][T13973] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  748.094680][T13973] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  748.321297][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  748.352191][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  748.451877][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  748.485232][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  748.521444][T14313] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  748.660778][T14317] kvm: vcpu 0: requested 57458 ns lapic timer period limited to 200000 ns
[  748.717470][T14317] kvm: pic: non byte write
[  748.806212][   T28] audit: type=1800 audit(1774587225.353:17): pid=14323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2434" name="file1" dev="overlay" ino=25 res=0 errno=0
[  748.843250][   T28] audit: type=1804 audit(1774587225.373:18): pid=14323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2434" name="/newroot/0/bus/file1" dev="overlay" ino=25 res=1 errno=0
[  749.812749][T13426] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  749.830981][T13426] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  749.840236][T13426] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  749.854252][T13426] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  749.872438][T14345] kvm: pic: non byte write
[  749.881961][T13426] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  749.911286][T13426] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  750.567326][T14359] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  750.879539][T14347] chnl_net:caif_netlink_parms(): no params data found
[  751.070946][ T6414] tipc: Left network mode
[  751.075464][T14376] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2524'.
[  751.542737][T14384] syzkaller0: entered promiscuous mode
[  751.559193][T14384] syzkaller0: entered allmulticast mode
[  751.812252][T14347] bridge0: port 1(bridge_slave_0) entered blocking state
[  751.819519][T14347] bridge0: port 1(bridge_slave_0) entered disabled state
[  751.847612][T14347] bridge_slave_0: entered allmulticast mode
[  751.863100][T14347] bridge_slave_0: entered promiscuous mode
[  751.996349][T14347] bridge0: port 2(bridge_slave_1) entered blocking state
[  752.009807][T14347] bridge0: port 2(bridge_slave_1) entered disabled state
[  752.012026][ T5775] Bluetooth: hci3: command tx timeout
[  752.038147][T14347] bridge_slave_1: entered allmulticast mode
[  752.047598][T14347] bridge_slave_1: entered promiscuous mode
[  752.060324][T14409] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2532'.
[  752.277922][T14347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  752.305242][T14347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  753.598988][T14347] team0: Port device team_slave_0 added
[  753.627644][T14347] team0: Port device team_slave_1 added
[  753.806042][T14439] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  753.823098][T14446] syzkaller0: entered promiscuous mode
[  753.828627][T14446] syzkaller0: entered allmulticast mode
[  753.857738][T14347] batman_adv: batadv0: Adding interface: batadv_slave_0
[  753.885441][T14347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  753.940745][T14347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  754.036065][T14347] batman_adv: batadv0: Adding interface: batadv_slave_1
[  754.054979][T14347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  754.088479][T14347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  754.100971][ T5775] Bluetooth: hci3: command tx timeout
[  754.170318][T14451] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2540'.
[  754.527214][T14347] hsr_slave_0: entered promiscuous mode
[  754.548254][T14347] hsr_slave_1: entered promiscuous mode
[  754.569268][T14347] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  754.590845][T14347] Cannot create hsr debugfs directory
[  754.618540][T14460] tipc: Started in network mode
[  754.628275][T14460] tipc: Node identity 228809d869cb, cluster identity 4711
[  754.648421][T14460] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  754.705984][T14462] syzkaller0: entered promiscuous mode
[  754.711870][T14462] syzkaller0: entered allmulticast mode
[  754.718159][T14462] tipc: Resetting bearer <eth:syzkaller0>
[  754.821164][ T6414] hsr_slave_0: left promiscuous mode
[  754.836371][ T6414] hsr_slave_1: left promiscuous mode
[  754.844261][ T6414] batman_adv: batadv0: Removing interface: batadv_slave_0
[  754.859534][ T6414] batman_adv: batadv0: Removing interface: batadv_slave_1
[  754.867822][ T6414] bridge_slave_1: left promiscuous mode
[  754.880189][ T6414] bridge0: port 2(bridge_slave_1) entered disabled state
[  754.900895][ T6414] bridge_slave_0: left allmulticast mode
[  754.906749][ T6414] bridge_slave_0: left promiscuous mode
[  754.925922][ T6414] bridge0: port 1(bridge_slave_0) entered disabled state
[  755.067657][ T6414] bond4 (unregistering): (slave veth7): Releasing active interface
[  755.356633][ T6414] bond4 (unregistering): Released all slaves
[  755.437458][ T6414] bond3 (unregistering): (slave veth5): Releasing active interface
[  755.639778][ T6414] bond3 (unregistering): Released all slaves
[  755.815331][ T6414] bond2 (unregistering): Released all slaves
[  755.846810][ T6414] bond1 (unregistering): (slave veth3): Releasing active interface
[  755.991389][ T6414] bond1 (unregistering): Released all slaves
[  756.170369][ T5775] Bluetooth: hci3: command tx timeout
[  756.529312][ T6414] team0 (unregistering): Port device team_slave_1 removed
[  756.582681][ T6414] team0 (unregistering): Port device team_slave_0 removed
[  756.641963][ T6414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  756.706652][ T6414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  757.054479][ T6414] bond0 (unregistering): Released all slaves
[  757.185285][T14459] tipc: Resetting bearer <eth:syzkaller0>
[  758.260887][ T5775] Bluetooth: hci3: command tx timeout
[  759.076535][T14459] tipc: Disabling bearer <eth:syzkaller0>
[  759.093592][T14480] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2550'.
[  759.103902][ T5811] tipc: Node number set to 1262684632
[  760.451245][T14524] netlink: 'syz.1.2558': attribute type 1 has an invalid length.
[  760.593636][T14524] 8021q: adding VLAN 0 to HW filter on device bond1
[  760.662854][T14526] kvm: requested 101409 ns i8254 timer period limited to 200000 ns
[  760.694335][T14526] kvm: requested 140800 ns i8254 timer period limited to 200000 ns
[  760.728278][T14526] kvm: requested 86323 ns i8254 timer period limited to 200000 ns
[  760.761095][T14529] bond1: (slave veth3): Enslaving as an active interface with a down link
[  760.766859][T14526] kvm: requested 114819 ns i8254 timer period limited to 200000 ns
[  760.790686][T14532] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2558'.
[  760.816609][T14533] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2558'.
[  761.286036][T14347] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  761.340569][T14347] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  761.385533][T14347] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  761.460057][T14347] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  761.828641][T14347] 8021q: adding VLAN 0 to HW filter on device bond0
[  761.910878][T14347] 8021q: adding VLAN 0 to HW filter on device team0
[  761.953531][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  761.960899][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  762.015053][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  762.022403][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  762.807334][T14347] 8021q: adding VLAN 0 to HW filter on device batadv0
[  762.989427][T14347] veth0_vlan: entered promiscuous mode
[  763.063869][T14347] veth1_vlan: entered promiscuous mode
[  763.322847][T14347] veth0_macvtap: entered promiscuous mode
[  763.386400][T14347] veth1_macvtap: entered promiscuous mode
[  763.462998][T14347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  763.500025][T14347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  763.527631][T14347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  763.557029][T14347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  763.585156][T14347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  763.596136][T14347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  763.616287][T14347] batman_adv: batadv0: Interface activated: batadv_slave_0
[  763.656615][T14347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  763.673825][T14347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  763.685709][T14347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  763.703307][T14347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  763.715262][T14347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  763.739398][T14347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  763.763113][T14347] batman_adv: batadv0: Interface activated: batadv_slave_1
[  763.820790][T14347] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  763.875284][T14347] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  763.920254][T14347] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  763.929035][T14347] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  764.347116][ T1327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  764.367670][ T1327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  764.475996][ T4053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  764.519503][ T4053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  766.434223][T14680] syzkaller0: entered promiscuous mode
[  766.440156][T14680] syzkaller0: entered allmulticast mode
[  767.777198][T14701] kvm: pic: non byte write
[  768.623334][T14734] syzkaller0: entered promiscuous mode
[  768.645841][T14734] syzkaller0: entered allmulticast mode
[  769.695019][T14775] syzkaller0: entered promiscuous mode
[  769.712903][T14775] syzkaller0: entered allmulticast mode
[  770.741253][T14816] syzkaller0: entered promiscuous mode
[  770.746946][T14816] syzkaller0: entered allmulticast mode
[  770.881198][T14818] syzkaller0: entered promiscuous mode
[  770.886742][T14818] syzkaller0: entered allmulticast mode
[  771.715567][T14845] syzkaller0: entered promiscuous mode
[  771.726657][T14845] syzkaller0: entered allmulticast mode
[  771.816469][T14841] kvm: pic: non byte write
[  771.840799][T14844] kvm: requested 82971 ns i8254 timer period limited to 200000 ns
[  771.869651][T14844] kvm: requested 181866 ns i8254 timer period limited to 200000 ns
[  771.869727][T14850] kvm: pic: non byte write
[  771.890303][T14844] kvm: requested 28495 ns i8254 timer period limited to 200000 ns
[  771.903226][T14844] kvm: requested 86323 ns i8254 timer period limited to 200000 ns
[  771.937772][T14844] kvm: requested 178514 ns i8254 timer period limited to 200000 ns
[  771.960458][T14844] kvm: requested 82133 ns i8254 timer period limited to 200000 ns
[  771.978212][T14844] kvm: requested 89676 ns i8254 timer period limited to 200000 ns
[  772.002174][T14844] kvm: requested 189409 ns i8254 timer period limited to 200000 ns
[  772.015324][T14844] kvm: requested 173485 ns i8254 timer period limited to 200000 ns
[  772.026505][T14844] kvm: requested 198628 ns i8254 timer period limited to 200000 ns
[  772.862849][T14876] syzkaller0: entered promiscuous mode
[  772.868590][T14876] syzkaller0: entered allmulticast mode
[  773.242038][T14884] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  773.272974][T14884] syzkaller0: entered promiscuous mode
[  773.292126][T14884] syzkaller0: entered allmulticast mode
[  773.493343][T14888] syzkaller0: entered promiscuous mode
[  773.499065][T14888] syzkaller0: entered allmulticast mode
[  773.757593][T14892] syzkaller0: entered promiscuous mode
[  773.768091][T14892] syzkaller0: entered allmulticast mode
[  774.065960][T14906] kvm: pic: non byte write
[  774.077164][T14906] kvm: pic: non byte write
[  774.087361][T14906] kvm: pic: non byte write
[  777.195073][T14919] syzkaller0: entered promiscuous mode
[  777.216679][T14919] syzkaller0: entered allmulticast mode
[  780.385458][T15026] sch_tbf: peakrate 3 is lower than or equals to rate 183 !
[  780.622398][T15034] netlink: 'syz.0.2692': attribute type 29 has an invalid length.
[  780.661630][T15034] netlink: 'syz.0.2692': attribute type 29 has an invalid length.
[  780.681864][T15034] netlink: 'syz.0.2692': attribute type 29 has an invalid length.
[  780.710667][T15034] netlink: 'syz.0.2692': attribute type 29 has an invalid length.
[  781.078332][T15054] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2702'.
[  781.355249][T15058] syzkaller0: entered promiscuous mode
[  781.361123][T15058] syzkaller0: entered allmulticast mode
[  781.466176][T15070] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.2708'.
[  781.971733][T15086] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2713'.
[  783.879605][T15094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2715'.
[  783.890351][T15094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2715'.
[  783.900694][T15094] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2715'.
[  784.074669][T15100] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.2718'.
[  784.111365][T15102] netlink: 'syz.0.2719': attribute type 32 has an invalid length.
[  784.426622][T15111] pim6reg: tun_chr_ioctl cmd 2148553947
[  784.828485][T15128] netlink: 'syz.2.2731': attribute type 29 has an invalid length.
[  784.840353][T15128] netlink: 'syz.2.2731': attribute type 29 has an invalid length.
[  784.864888][T15128] netlink: 'syz.2.2731': attribute type 29 has an invalid length.
[  784.901029][T15128] netlink: 'syz.2.2731': attribute type 29 has an invalid length.
[  785.316770][T15145] netlink: 'syz.0.2739': attribute type 21 has an invalid length.
[  785.327275][T15145] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2739'.
[  785.352676][T15149] warning: `syz.3.2741' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  785.587474][T15157] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  790.170257][T14987] wlan1: Trigger new scan to find an IBSS to join
[  792.695414][T13426] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  792.734576][T13426] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  792.743495][T13426] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  792.756152][T13426] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  792.773082][T13426] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  792.780813][T13426] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  793.138419][T14987] wlan1: Trigger new scan to find an IBSS to join
[  794.041960][   T59] wlan1: Creating new IBSS network, BSSID be:68:13:63:ca:30
[  794.521577][T15337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2827'.
[  794.891582][ T5775] Bluetooth: hci1: command tx timeout
[  795.156236][T15352] syzkaller0: entered promiscuous mode
[  795.162257][T15352] syzkaller0: entered allmulticast mode
[  796.970172][ T5775] Bluetooth: hci1: command tx timeout
[  797.013272][T15397] netlink: 'syz.1.2853': attribute type 32 has an invalid length.
[  798.388310][T15395] netlink: 'syz.0.2852': attribute type 46 has an invalid length.
[  798.415780][T15334] chnl_net:caif_netlink_parms(): no params data found
[  798.673834][T15334] bridge0: port 1(bridge_slave_0) entered blocking state
[  798.681201][T15334] bridge0: port 1(bridge_slave_0) entered disabled state
[  798.688576][T15334] bridge_slave_0: entered allmulticast mode
[  798.732804][T15334] bridge_slave_0: entered promiscuous mode
[  798.780404][T15334] bridge0: port 2(bridge_slave_1) entered blocking state
[  798.787698][T15334] bridge0: port 2(bridge_slave_1) entered disabled state
[  798.841679][T15334] bridge_slave_1: entered allmulticast mode
[  798.869271][T15334] bridge_slave_1: entered promiscuous mode
[  798.879406][T15416] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer.
[  798.955250][T15334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  798.972855][T15334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  799.018421][T15334] team0: Port device team_slave_0 added
[  799.027803][T15334] team0: Port device team_slave_1 added
[  799.050076][ T5775] Bluetooth: hci1: command tx timeout
[  799.138298][T15334] batman_adv: batadv0: Adding interface: batadv_slave_0
[  799.146203][T15334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  799.173094][T15334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  799.187721][T15334] batman_adv: batadv0: Adding interface: batadv_slave_1
[  799.197133][T15334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  799.224847][T15334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  799.249589][T15428] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2866'.
[  799.269305][T15428] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  799.390465][   T23] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  799.412973][T15334] hsr_slave_0: entered promiscuous mode
[  799.430533][T15334] hsr_slave_1: entered promiscuous mode
[  799.447259][T15334] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  799.457374][T15334] Cannot create hsr debugfs directory
[  799.582921][T15440] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2870'.
[  799.598845][T15440] xt_CT: You must specify a L4 protocol and not use inversions on it
[  799.609679][   T23] usb 4-1: Using ep0 maxpacket: 16
[  799.653570][   T23] usb 4-1: unable to get BOS descriptor or descriptor too short
[  799.751337][   T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  799.900619][   T23] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  800.058513][   T23] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  800.186200][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  800.390019][   T23] usb 4-1: Product: syz
[  800.394258][   T23] usb 4-1: Manufacturer: syz
[  800.398884][   T23] usb 4-1: SerialNumber: syz
[  800.803512][   T23] usb 4-1: USB disconnect, device number 13
[  800.949413][T15334] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  801.197335][T15334] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  801.230572][ T5775] Bluetooth: hci1: command tx timeout
[  801.452493][T15334] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  801.493473][T15334] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  801.826078][T15436] loop0: detected capacity change from 0 to 40427
[  801.847569][T15334] 8021q: adding VLAN 0 to HW filter on device bond0
[  801.940323][T15436] F2FS-fs (loop0): Small segment_count (9 < 1 * 24)
[  801.992193][T15436] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  802.009362][T15334] 8021q: adding VLAN 0 to HW filter on device team0
[  802.114724][T14987] bridge0: port 1(bridge_slave_0) entered blocking state
[  802.131737][T14987] bridge0: port 1(bridge_slave_0) entered forwarding state
[  802.199736][T15436] F2FS-fs (loop0): Found nat_bits in checkpoint
[  802.350893][T14987] bridge0: port 2(bridge_slave_1) entered blocking state
[  802.358085][T14987] bridge0: port 2(bridge_slave_1) entered forwarding state
[  802.466818][T15436] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  802.580622][T15436] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  802.913588][T15455] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2874'.
[  803.798507][T15457] loop3: detected capacity change from 0 to 256
[  803.875669][T15457] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x66b62981, utbl_chksum : 0xe619d30d)
[  804.435923][T15334] 8021q: adding VLAN 0 to HW filter on device batadv0
[  804.649534][T15470] loop3: detected capacity change from 0 to 4096
[  804.685798][T15470] EXT4-fs: Ignoring removed nomblk_io_submit option
[  804.709966][T15470] EXT4-fs (loop3): stripe (97) is not aligned with cluster size (16), stripe is disabled
[  805.401338][T15470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  805.647651][T13706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  806.161504][T15334] veth0_vlan: entered promiscuous mode
[  806.162758][T15492] random: crng reseeded on system resumption
[  806.218755][T15334] veth1_vlan: entered promiscuous mode
[  806.239065][T15493] loop1: detected capacity change from 0 to 256
[  806.264896][T15493] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  806.303606][T15493] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  806.326401][T15334] veth0_macvtap: entered promiscuous mode
[  806.366772][T15493] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  806.407484][T15334] veth1_macvtap: entered promiscuous mode
[  806.515661][T15334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  806.535293][T15497] loop3: detected capacity change from 0 to 1024
[  806.584106][T15334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  806.690035][T15334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  806.765535][T15334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  806.817255][T15334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  806.828495][T15334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  806.832747][T15497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  806.838400][T15334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  806.861458][T15334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  806.874605][T15334] batman_adv: batadv0: Interface activated: batadv_slave_0
[  806.906383][T15334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  806.917570][T15334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  806.931456][T15334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  806.942551][T15334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  806.952785][T15334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  806.963579][T15334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  806.973746][T15334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  806.984547][T15334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  806.996639][T15334] batman_adv: batadv0: Interface activated: batadv_slave_1
[  807.009720][T15334] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  807.019109][T15334] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  807.028261][T15334] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  807.038029][T15334] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  807.112886][T13706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  807.451266][ T4830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  807.459162][ T4830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  807.551681][T14987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  807.569982][T14987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  808.080859][T15518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2890'.
[  808.181298][T15518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2890'.
[  808.565747][T15523] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  809.051175][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  809.078094][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  810.266762][T15541] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  810.275026][ T5850] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  810.296619][   T28] audit: type=1326 audit(1774587286.843:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15542 comm="syz.4.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3544d9c799 code=0x7ffc0000
[  810.320142][   T28] audit: type=1326 audit(1774587286.843:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15542 comm="syz.4.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3544d9c799 code=0x7ffc0000
[  810.349435][   T28] audit: type=1326 audit(1774587286.863:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15542 comm="syz.4.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3544d9c799 code=0x7ffc0000
[  810.396630][   T28] audit: type=1326 audit(1774587286.863:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15542 comm="syz.4.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3544d9c799 code=0x7ffc0000
[  810.434420][   T28] audit: type=1326 audit(1774587286.863:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15542 comm="syz.4.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3544d9c799 code=0x7ffc0000
[  810.490161][ T5850] usb 2-1: Using ep0 maxpacket: 16
[  810.497238][ T5850] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  810.514967][ T5850] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  810.539868][ T5850] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  810.589997][ T5850] usb 2-1: config 0 interface 0 has no altsetting 0
[  810.606952][ T5850] usb 2-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00
[  810.626425][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  810.657329][ T5850] usb 2-1: config 0 descriptor??
[  810.667323][T15547] loop4: detected capacity change from 0 to 512
[  810.904713][T15537] loop1: detected capacity change from 0 to 512
[  810.923142][T15537] EXT4-fs (loop1): Test dummy encryption mode enabled
[  810.933294][T15537] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  810.952874][T15537] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  810.981093][T14204] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  810.990816][T15537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  811.203591][T14204] usb 5-1: config index 0 descriptor too short (expected 903, got 18)
[  811.211965][T14204] usb 5-1: config 116 has too many interfaces: 195, using maximum allowed: 32
[  811.224393][T15537] netlink: 'syz.1.2897': attribute type 12 has an invalid length.
[  811.232590][T14204] usb 5-1: config 116 has an invalid descriptor of length 213, skipping remainder of the config
[  811.266884][T14204] usb 5-1: config 116 has 0 interfaces, different from the descriptor's value: 195
[  811.280953][T14204] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  811.298986][T14204] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  811.442513][T15556] loop3: detected capacity change from 0 to 512
[  811.517035][ T5776] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  811.563139][T15556] process 'syz.3.2905' launched './file0' with NULL argv: empty string added
[  811.755811][T14204] usb 5-1: string descriptor 0 read error: -71
[  811.797113][T14204] usb 5-1: USB disconnect, device number 2
[  811.818094][ T5850] usbhid 2-1:0.0: can't add hid device: -71
[  811.830224][ T5850] usbhid: probe of 2-1:0.0 failed with error -71
[  811.853663][ T5850] usb 2-1: USB disconnect, device number 12
[  811.871954][T13422] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  811.970968][T15559] support for cryptoloop has been removed.  Use dm-crypt instead.
[  812.065689][T15561] loop1: detected capacity change from 0 to 128
[  812.108787][T15561] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  812.257918][T15561] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  812.330748][ T5775] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  812.339104][T13426] Bluetooth: hci2: command 0x1003 tx timeout
[  812.368567][T15561] ext2 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  813.243538][T13422] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  813.722133][T15583] loop1: detected capacity change from 0 to 128
[  813.796823][T15583] EXT4-fs (loop1): Test dummy encryption mode enabled
[  813.879292][T15583] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  813.970110][T15583] ext4 filesystem being mounted at /155/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  814.284850][T15592] loop3: detected capacity change from 0 to 512
[  815.441641][T13422] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  816.568839][T15603] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2918'.
[  816.649742][T15605] loop0: detected capacity change from 0 to 256
[  816.674462][T15605] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  819.250707][T15620] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow
[  820.358514][T15629] loop4: detected capacity change from 0 to 128
[  820.389183][T15629] EXT4-fs (loop4): Test dummy encryption mode enabled
[  820.423171][T15629] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  820.448118][T15629] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  820.510613][ T6455] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  820.719916][ T6455] usb 2-1: Using ep0 maxpacket: 16
[  820.738765][ T6455] usb 2-1: unable to get BOS descriptor or descriptor too short
[  820.754672][ T6455] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  820.784729][ T6455] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  820.819669][T15629] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  820.840973][ T6455] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  820.860905][ T6455] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  820.869444][ T6455] usb 2-1: Product: syz
[  820.900007][ T6455] usb 2-1: Manufacturer: syz
[  820.904678][ T6455] usb 2-1: SerialNumber: syz
[  820.993073][T15651] loop3: detected capacity change from 0 to 128
[  821.078175][T15635] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  821.192262][ T6455] usb 2-1: Audio class v2/v3 interfaces need an interface association
[  821.209541][ T6455] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[  821.252875][T15334] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  822.135921][T15662] loop0: detected capacity change from 0 to 1024
[  822.249757][T15662] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  822.272512][  T136] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 1
[  822.356778][T14992] Bluetooth: hci2: Frame reassembly failed (-84)
[  822.367292][T15662] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 2: comm syz.0.2933: lblock 2 mapped to illegal pblock 2 (length 1)
[  822.399683][T15662] Quota error (device loop0): qtree_write_dquot: dquota write failed
[  822.402453][ T6455] usb 2-1: USB disconnect, device number 13
[  822.408097][T15662] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 48: comm syz.0.2933: lblock 0 mapped to illegal pblock 48 (length 1)
[  822.430987][T15662] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  822.440024][T15662] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.2933: Failed to acquire dquot type 0
[  822.455189][T15662] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5920: Corrupt filesystem
[  822.470675][T15662] EXT4-fs error (device loop0): ext4_evict_inode:252: inode #11: comm syz.0.2933: mark_inode_dirty error
[  822.482401][T15662] EXT4-fs warning (device loop0): ext4_evict_inode:255: couldn't mark inode dirty (err -117)
[  822.492910][T15662] EXT4-fs (loop0): 1 orphan inode deleted
[  822.501282][T15662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  822.540328][T14978] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:13: lblock 1 mapped to illegal pblock 1 (length 1)
[  822.588306][T14978] Quota error (device loop0): remove_tree: Can't read quota data block 1
[  822.590838][ T5776] udevd[5776]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  822.613424][T14978] EXT4-fs error (device loop0): ext4_release_dquot:6985: comm kworker/u4:13: Failed to release dquot type 0
[  823.162500][T15660] loop4: detected capacity change from 0 to 40427
[  823.177751][T15660] F2FS-fs (loop4): build fault injection attr: rate: 174, type: 0x7ffff
[  824.022343][T15680] loop1: detected capacity change from 0 to 256
[  824.036617][T15680] exfat: Deprecated parameter 'utf8'
[  824.066284][T15680] exfat: Deprecated parameter 'namecase'
[  824.076498][T15680] exfat: Deprecated parameter 'namecase'
[  824.085672][T15680] exfat: Deprecated parameter 'utf8'
[  824.105434][T14978] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  824.141374][T15680] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  824.172387][ T5772] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  824.188234][T15662] syz.0.2933 (15662) used greatest stack depth: 16680 bytes left
[  824.323634][T14347] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  824.390463][T14347] EXT4-fs error (device loop0): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0
[  824.447118][T14347] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5920: Corrupt filesystem
[  824.538907][T14347] EXT4-fs error (device loop0): ext4_quota_off:7233: inode #3: comm syz-executor: mark_inode_dirty error
[  824.550023][T15683] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2943'.
[  824.552567][T15683] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2943'.
[  824.601167][   T28] audit: type=1326 audit(1774587301.143:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15682 comm="syz.3.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdab9c799 code=0x7ffc0000
[  824.601243][   T28] audit: type=1326 audit(1774587301.143:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15682 comm="syz.3.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdab9c799 code=0x7ffc0000
[  824.601284][   T28] audit: type=1326 audit(1774587301.153:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15682 comm="syz.3.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7efcdab9c799 code=0x7ffc0000
[  824.601328][   T28] audit: type=1326 audit(1774587301.153:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15682 comm="syz.3.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdab9c799 code=0x7ffc0000
[  824.601369][   T28] audit: type=1326 audit(1774587301.153:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15682 comm="syz.3.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdab9c799 code=0x7ffc0000
[  824.603314][   T28] audit: type=1326 audit(1774587301.153:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15682 comm="syz.3.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efcdab9c799 code=0x7ffc0000
[  824.603365][   T28] audit: type=1326 audit(1774587301.153:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15682 comm="syz.3.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdab9c799 code=0x7ffc0000
[  824.724861][T15688] loop0: detected capacity change from 0 to 512
[  824.725897][T15688] EXT4-fs: quotafile must be on filesystem root
[  824.800046][ T5776] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  825.531169][T15700] Illegal XDP return value 51 on prog  (id 220) dev syz_tun, expect packet loss!
[  825.760048][ T5812] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  825.820732][T15704] overlayfs: failed to resolve './file0': -2
[  825.960136][ T5812] usb 2-1: Using ep0 maxpacket: 32
[  825.980638][ T5812] usb 2-1: config 0 has an invalid interface number: 196 but max is 0
[  825.988883][ T5812] usb 2-1: config 0 has no interface number 0
[  826.024411][ T5812] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  826.059101][ T5812] usb 2-1: config 0 interface 196 has no altsetting 0
[  826.109075][ T5812] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  826.139235][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  826.165178][ T5812] usb 2-1: Product: syz
[  826.169424][ T5812] usb 2-1: Manufacturer: syz
[  826.179982][ T5812] usb 2-1: SerialNumber: syz
[  826.201740][ T5812] usb 2-1: config 0 descriptor??
[  826.210952][T15702] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  826.418818][T13426] Bluetooth: hci0: command 0x0406 tx timeout
[  826.814707][T15706] loop0: detected capacity change from 0 to 40427
[  826.865841][T15706] F2FS-fs (loop0): Found nat_bits in checkpoint
[  827.020763][T15706] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  827.043260][T15702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  827.081609][T15702] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  827.125019][ T5812] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: -71
[  827.218981][T14347] syz-executor: attempt to access beyond end of device
[  827.218981][T14347] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  827.231019][ T5812] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached
[  827.268118][T14347] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  827.277906][ T5812] usb 2-1: USB disconnect, device number 14
[  827.408772][ T5812] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected
[  827.830127][T15725] mmap: syz.3.2958 (15725) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  828.455973][T15745] loop1: detected capacity change from 0 to 256
[  828.517202][T15745] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  830.108649][T15762] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2970'.
[  833.523384][T15795] loop0: detected capacity change from 0 to 40427
[  833.559228][T15795] F2FS-fs (loop0): invalid crc value
[  833.601654][T15795] F2FS-fs (loop0): Found nat_bits in checkpoint
[  833.821191][T15795] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  834.115343][T14347] syz-executor: attempt to access beyond end of device
[  834.115343][T14347] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  834.149755][T14347] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  834.346208][T15820] loop4: detected capacity change from 0 to 256
[  834.417164][T15820] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  834.686671][T15828] loop4: detected capacity change from 0 to 512
[  834.751954][T15828] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  834.813648][T15334] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  835.741966][T15853] overlayfs: failed to clone upperpath
[  835.791460][T15855] loop0: detected capacity change from 0 to 128
[  835.859095][T15855] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  835.930809][T15855] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  836.227203][T14347] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  836.260349][ T6440] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  836.407992][T15865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3007'.
[  836.417050][T15865] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3007'.
[  836.540085][ T6440] usb 5-1: Using ep0 maxpacket: 32
[  836.646021][ T6440] usb 5-1: unable to get BOS descriptor or descriptor too short
[  836.994596][ T6440] usb 5-1: config 3 has an invalid interface number: 212 but max is 0
[  837.045013][ T6440] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  837.085107][ T6440] usb 5-1: config 3 has no interface number 0
[  837.120535][ T6440] usb 5-1: config 3 interface 212 has no altsetting 0
[  837.188638][ T6440] usb 5-1: New USB device found, idVendor=0421, idProduct=008f, bcdDevice=c1.67
[  837.424360][ T6440] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  837.442841][ T6440] usb 5-1: Product: syz
[  837.447158][ T6440] usb 5-1: Manufacturer: syz
[  837.452520][ T6440] usb 5-1: SerialNumber: syz
[  838.171987][ T6440] usb 5-1: bad CDC descriptors
[  838.216250][ T6440] usb 5-1: bad CDC descriptors
[  838.302014][ T6440] usb 5-1: USB disconnect, device number 3
[  838.968612][T15883] loop1: detected capacity change from 0 to 512
[  838.991110][T15883] EXT4-fs: quotafile must be on filesystem root
[  839.657936][ T5776] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  840.081754][T15899] loop1: detected capacity change from 0 to 256
[  840.091093][T15897] No such timeout policy "syz0"
[  840.103409][T15897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3015'.
[  841.925674][T13426] Bluetooth: hci4: command 0x0406 tx timeout
[  843.690767][T15926] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  843.866948][T15929] loop1: detected capacity change from 0 to 4096
[  843.888234][T15929] EXT4-fs: inline encryption not supported
[  843.943774][T15929] EXT4-fs (loop1): Test dummy encryption mode enabled
[  843.988393][T15929] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8843c018, mo2=0003]
[  844.010855][T15929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  844.421138][T13422] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  844.636711][T15936] loop1: detected capacity change from 0 to 256
[  844.668734][T15936] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1d73664b, utbl_chksum : 0xe619d30d)
[  844.885526][T15936] exFAT-fs (loop1): error, broken FAT chain.
[  844.893099][T15936] exFAT-fs (loop1): Filesystem has been set read-only
[  844.901182][T15936] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805ae214e0 iblock : 0, err : -5)
[  844.912670][T15936] exFAT-fs (loop1): error, broken FAT chain.
[  844.918885][T15936] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805ae214e0 iblock : 0, err : -5)
[  844.960025][T15936] exFAT-fs (loop1): error, broken FAT chain.
[  844.966091][T15936] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805ae214e0 iblock : 1, err : -5)
[  845.005648][T15936] exFAT-fs (loop1): error, broken FAT chain.
[  845.038105][T15936] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805ae214e0 iblock : 2, err : -5)
[  845.089913][T15936] exFAT-fs (loop1): error, broken FAT chain.
[  845.096729][T15936] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805ae214e0 iblock : 3, err : -5)
[  845.127591][T15936] exFAT-fs (loop1): error, broken FAT chain.
[  845.159497][T15936] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805ae214e0 iblock : 4, err : -5)
[  845.216985][T15936] exFAT-fs (loop1): error, broken FAT chain.
[  845.237216][T15936] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805ae214e0 iblock : 5, err : -5)
[  845.275072][T15936] exFAT-fs (loop1): error, broken FAT chain.
[  845.300490][T15936] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805ae214e0 iblock : 6, err : -5)
[  845.339884][T15936] exFAT-fs (loop1): error, broken FAT chain.
[  845.356273][T15936] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805ae214e0 iblock : 7, err : -5)
[  845.409906][T15936] exFAT-fs (loop1): error, broken FAT chain.
[  845.415980][T15936] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805ae214e0 iblock : 0, err : -5)
[  845.489892][T15936] exFAT-fs (loop1): error, broken FAT chain.
[  845.495966][T15936] exFAT-fs (loop1): error, broken FAT chain.
[  845.540768][T15936] exFAT-fs (loop1): error, broken FAT chain.
[  845.566134][T15936] exFAT-fs (loop1): error, broken FAT chain.
[  845.572766][T15936] exFAT-fs (loop1): error, broken FAT chain.
[  845.578888][T15936] exFAT-fs (loop1): error, broken FAT chain.
[  845.592319][T15936] exFAT-fs (loop1): error, broken FAT chain.
[  845.598750][   T28] kauditd_printk_skb: 7 callbacks suppressed
[  845.598765][   T28] audit: type=1800 audit(1774587322.143:38): pid=15936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3030" name="file0" dev="loop1" ino=1048632 res=0 errno=0
[  846.077229][T15949] loop1: detected capacity change from 0 to 256
[  847.097028][T15957] loop1: detected capacity change from 0 to 512
[  847.144976][T15957] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  847.198274][T15957] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  847.232017][T15957] EXT4-fs error (device loop1): ext4_orphan_get:1424: comm syz.1.3040: bad orphan inode 4
[  847.290832][T15957] EXT4-fs (loop1): Remounting filesystem read-only
[  847.297546][T15957] EXT4-fs (loop1): 1 orphan inode deleted
[  847.335314][T15957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  847.510962][T13422] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  848.690724][T15975] loop1: detected capacity change from 0 to 512
[  848.708547][T15975] EXT4-fs: Ignoring removed bh option
[  848.730332][T15975] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  848.757157][T15975] EXT4-fs (loop1): 1 truncate cleaned up
[  848.771354][T15975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  848.924977][T13422] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  849.019168][T15979] xt_hashlimit: size too large, truncated to 1048576
[  849.165402][T15984] loop1: detected capacity change from 0 to 1024
[  849.193119][T15984] EXT4-fs: Ignoring removed bh option
[  849.244189][T15984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  849.285020][T15984] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.3048: iget: bogus i_mode (7)
[  849.351600][T15984] EXT4-fs (loop1): Remounting filesystem read-only
[  849.737086][T13422] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  851.935220][T16023] binder: 16020:16023 ioctl c0385869 0 returned -22
[  852.240494][T16028] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  852.497780][T16030] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3067'.
[  852.525708][T16030] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3067'.
[  852.839073][T16039] raw_sendmsg: syz.3.3071 forgot to set AF_INET. Fix it!
[  853.130093][  T968] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  853.359855][  T968] usb 5-1: Using ep0 maxpacket: 16
[  853.372010][  T968] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  853.399846][  T968] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  853.429880][  T968] usb 5-1: config 0 has no interface number 0
[  853.439056][  T968] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  853.468502][  T968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  853.488766][  T968] usb 5-1: Product: syz
[  853.493914][  T968] usb 5-1: Manufacturer: syz
[  853.498566][  T968] usb 5-1: SerialNumber: syz
[  853.521440][  T968] usb 5-1: config 0 descriptor??
[  853.541702][  T968] usb 5-1: Found UVC 0.00 device syz (046d:08f3)
[  853.558311][  T968] usb 5-1: No valid video chain found.
[  853.766682][ T5832] usb 5-1: USB disconnect, device number 4
[  855.029464][T16065] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3082'.
[  855.233071][   T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  855.307955][T16055] loop4: detected capacity change from 0 to 40427
[  855.348350][T16055] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  855.368651][T16055] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  855.427112][T16055] F2FS-fs (loop4): Found nat_bits in checkpoint
[  855.584650][T16055] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  855.604896][T16055] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  855.819686][T16061] loop0: detected capacity change from 0 to 40427
[  855.856506][T16061] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  855.884925][T16061] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  855.915375][T16061] F2FS-fs (loop0): invalid crc value
[  855.956588][T16061] F2FS-fs (loop0): Found nat_bits in checkpoint
[  856.144359][T16061] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  856.158001][T16061] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  857.753634][T16080] loop1: detected capacity change from 0 to 40427
[  857.800911][T16080] F2FS-fs (loop1): Found nat_bits in checkpoint
[  857.882105][T16080] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  858.120124][T16089] f2fs_ckpt-7:1: attempt to access beyond end of device
[  858.120124][T16089] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  858.214456][T16089] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  859.734623][T16105] loop0: detected capacity change from 0 to 256
[  859.874883][T16107] binder: 16106:16107 unknown command 1074553619
[  859.887039][T16107] binder: 16106:16107 ioctl c0306201 200000000040 returned -22
[  859.906205][T16107] binder: 16106:16107 unknown command 1074553620
[  859.922265][T16107] binder: 16106:16107 ioctl c0306201 200000000640 returned -22
[  861.299154][T16121] binder: 16120:16121 unknown command 1074815763
[  861.315991][T16121] binder: 16120:16121 ioctl c0306201 2000000004c0 returned -22
[  861.864125][T16127] loop4: detected capacity change from 0 to 4096
[  861.912013][T16127] EXT4-fs (loop4): Test dummy encryption mode enabled
[  861.977144][T16127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  862.694682][T16123] loop0: detected capacity change from 0 to 40427
[  862.760305][T16123] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  862.822731][T16123] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  862.925765][T16123] F2FS-fs (loop0): Found nat_bits in checkpoint
[  863.040238][T15334] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  863.159884][T16123] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  863.167001][T16123] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  863.284034][T16125] loop1: detected capacity change from 0 to 40427
[  863.352714][T16125] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  863.400529][T16125] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  863.457443][T16125] F2FS-fs (loop1): invalid crc value
[  863.547534][T16125] F2FS-fs (loop1): Found nat_bits in checkpoint
[  864.326933][T16125] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  864.361233][T16125] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  866.350135][T16159] fuse: Unknown parameter '0x000000000000000800000000000000000000'
[  866.675258][T16163] loop0: detected capacity change from 0 to 512
[  866.816913][T16163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  866.904616][T16163] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  867.953648][T14347] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  868.283041][T16168] loop4: detected capacity change from 0 to 40427
[  868.324268][T16168] F2FS-fs (loop4): invalid crc value
[  868.346849][T16168] F2FS-fs (loop4): Found nat_bits in checkpoint
[  868.530098][T16168] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  868.583044][T16168] F2FS-fs (loop4): Stopped filesystem due to reason: 0
[  870.479180][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  870.488388][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  871.686805][T16177] loop4: detected capacity change from 0 to 40427
[  871.752020][T16177] F2FS-fs (loop4): invalid crc value
[  871.830814][T16177] F2FS-fs (loop4): Found nat_bits in checkpoint
[  872.193403][T16177] F2FS-fs (loop4): Start checkpoint disabled!
[  872.490046][T13426] Bluetooth: hci3: command 0x0406 tx timeout
[  872.676929][T16194] loop4: detected capacity change from 0 to 512
[  873.367551][T16185] loop1: detected capacity change from 0 to 40427
[  873.398292][T16185] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  873.427319][T16185] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  873.457506][T16185] F2FS-fs (loop1): invalid crc value
[  873.492617][T16185] F2FS-fs (loop1): Found nat_bits in checkpoint
[  873.594275][T16211] loop0: detected capacity change from 0 to 512
[  873.662507][T16211] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  873.696530][T16185] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  873.736585][T16185] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  873.754810][T16211] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  873.814939][T16211] EXT4-fs (loop0): orphan cleanup on readonly fs
[  873.884597][   T28] audit: type=1800 audit(2000000026.240:39): pid=16185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3113" name="file1" dev="loop1" ino=10 res=0 errno=0
[  873.884879][T16211] Quota error (device loop0): v2_read_file_info: Can't read info structure
[  873.971316][T16211] EXT4-fs warning (device loop0): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix.
[  874.011092][T16211] EXT4-fs (loop0): Cannot turn on quotas: error -5
[  874.075180][T16211] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.3122: bg 0: block 64: padding at end of block bitmap is not set
[  874.150725][T16211] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  874.190548][T16211] EXT4-fs (loop0): 1 truncate cleaned up
[  874.197596][T16211] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  874.218464][T16185] syz.1.3113: attempt to access beyond end of device
[  874.218464][T16185] loop1: rw=34817, sector=77824, nr_sectors = 2072 limit=40427
[  874.312020][T16211] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  874.368713][T14347] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  874.421574][T16203] overlayfs: failed to clone upperpath
[  874.461726][T16204] loop4: detected capacity change from 0 to 40427
[  874.529371][T16204] F2FS-fs (loop4): invalid crc value
[  874.538080][T16217] loop0: detected capacity change from 0 to 256
[  874.568373][T16204] F2FS-fs (loop4): Found nat_bits in checkpoint
[  874.600897][T16217] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1d73664b, utbl_chksum : 0xe619d30d)
[  874.658613][   T28] audit: type=1800 audit(2000000027.010:40): pid=16217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3123" name="file1" dev="loop0" ino=1048635 res=0 errno=0
[  874.702178][T16217] syz.0.3123: attempt to access beyond end of device
[  874.702178][T16217] loop0: rw=34817, sector=184, nr_sectors = 120 limit=256
[  874.779683][T16204] F2FS-fs (loop4): Start checkpoint disabled!
[  874.826744][T16204] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  875.163840][T16229] loop0: detected capacity change from 0 to 256
[  875.196446][T16229] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  875.223499][T16229] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  875.243584][   T42] kworker/u4:2: attempt to access beyond end of device
[  875.243584][   T42] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  875.247660][T16229] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d)
[  875.288408][   T42] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  875.313306][   T42] kworker/u4:2: attempt to access beyond end of device
[  875.313306][   T42] loop4: rw=2049, sector=40984, nr_sectors = 8 limit=40427
[  875.356506][   T42] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  876.699820][   T28] audit: type=1400 audit(2000000029.050:41): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=16253 comm="syz.4.3139"
[  876.711267][T16254] loop4: detected capacity change from 0 to 512
[  876.814515][T16254] EXT4-fs error (device loop4): ext4_orphan_get:1398: inode #15: comm syz.4.3139: inode has both inline data and extents flags
[  876.835259][T16258] loop0: detected capacity change from 0 to 512
[  876.844334][T16254] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.3139: couldn't read orphan inode 15 (err -117)
[  876.871061][T16258] EXT4-fs: quotafile must be on filesystem root
[  876.890516][T16254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  877.113929][T16263] input: syz0 as /devices/virtual/input/input5
[  877.123092][T15334] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  877.465729][T16272] xt_hashlimit: size too large, truncated to 1048576
[  878.395692][T16273] loop0: detected capacity change from 0 to 40427
[  878.409393][T16273] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  878.430686][T16273] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  878.453179][T16273] F2FS-fs (loop0): invalid crc value
[  878.476586][T16273] F2FS-fs (loop0): Found nat_bits in checkpoint
[  878.654888][T16273] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  878.675522][T16273] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  878.756082][   T28] audit: type=1800 audit(2000000031.110:42): pid=16273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3145" name="file1" dev="loop0" ino=10 res=0 errno=0
[  879.043072][T16273] syz.0.3145: attempt to access beyond end of device
[  879.043072][T16273] loop0: rw=34817, sector=77824, nr_sectors = 8 limit=40427
[  879.957898][T16301] 9pnet: Could not find request transport: E
[  880.082172][T16306] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3150'.
[  881.033339][T16308] loop1: detected capacity change from 0 to 128
[  881.058411][T16308] FAT-fs (loop1): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1)
[  881.457604][T16314] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370
[  881.719187][  T136] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  881.897982][  T136] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  882.074366][  T136] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  882.212681][  T136] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  882.301292][T16320] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3164'.
[  882.721330][T16326] loop0: detected capacity change from 0 to 128
[  882.855590][T16326] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  882.903462][T16326] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  882.976859][T13426] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  883.010504][T16326] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.3166: No space for directory leaf checksum. Please run e2fsck -D.
[  883.034527][T13426] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  883.050223][T13426] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  883.077979][T13426] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  883.105513][T13426] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  883.106469][T16326] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.3166: checksumming directory block 0
[  883.130804][T13426] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  883.241641][T16334] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.3166: No space for directory leaf checksum. Please run e2fsck -D.
[  883.299960][T16334] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.3166: checksumming directory block 0
[  883.334081][T16326] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.3166: No space for directory leaf checksum. Please run e2fsck -D.
[  883.369042][T16326] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.3166: checksumming directory block 0
[  883.424741][T16337] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.3166: No space for directory leaf checksum. Please run e2fsck -D.
[  883.466973][T16337] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.3166: checksumming directory block 0
[  883.527604][T16334] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.3166: No space for directory leaf checksum. Please run e2fsck -D.
[  883.551330][T16334] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.3166: checksumming directory block 0
[  883.569134][T16326] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.3166: No space for directory leaf checksum. Please run e2fsck -D.
[  883.609789][T16326] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.3166: checksumming directory block 0
[  883.642188][T16347] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.3166: No space for directory leaf checksum. Please run e2fsck -D.
[  883.678906][T16347] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.3166: checksumming directory block 0
[  883.749671][T16334] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.3166: No space for directory leaf checksum. Please run e2fsck -D.
[  883.805684][T16334] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.3166: checksumming directory block 0
[  883.869978][T16337] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.3166: No space for directory leaf checksum. Please run e2fsck -D.
[  883.923338][T16348] overlayfs: failed to clone lowerpath
[  884.021702][T16337] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.3166: checksumming directory block 0
[  884.090294][T16326] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.3166: No space for directory leaf checksum. Please run e2fsck -D.
[  884.150179][T16326] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.3166: checksumming directory block 0
[  884.341242][T16360] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3168'.
[  884.387355][T16360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3168'.
[  884.439837][T16360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3168'.
[  884.450402][T14347] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  884.480226][T16360] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3168'.
[  884.720772][T16372] xt_hashlimit: size too large, truncated to 1048576
[  885.210315][T13426] Bluetooth: hci0: command tx timeout
[  885.417484][T16332] chnl_net:caif_netlink_parms(): no params data found
[  885.537338][T16379] loop4: detected capacity change from 0 to 4096
[  885.581272][T16379] EXT4-fs: Ignoring removed nomblk_io_submit option
[  885.633314][T16379] EXT4-fs (loop4): stripe (97) is not aligned with cluster size (16), stripe is disabled
[  885.714969][T16379] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  885.877082][T16379] EXT4-fs (loop4): Online resizing not supported with bigalloc
[  886.011334][T15334] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  886.261842][ T4830] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  886.414328][T16370] overlayfs: failed to resolve './file0': -2
[  886.734629][  T136] hsr_slave_0: left promiscuous mode
[  886.800591][  T136] hsr_slave_1: left promiscuous mode
[  886.837417][  T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  886.859953][  T136] batman_adv: batadv0: Removing interface: batadv_slave_0
[  886.900399][  T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  886.924855][  T136] batman_adv: batadv0: Removing interface: batadv_slave_1
[  886.947703][  T136] bridge_slave_1: left allmulticast mode
[  886.966107][  T136] bridge_slave_1: left promiscuous mode
[  886.984439][  T136] bridge0: port 2(bridge_slave_1) entered disabled state
[  887.022101][  T136] bridge_slave_0: left allmulticast mode
[  887.029064][  T136] bridge_slave_0: left promiscuous mode
[  887.041745][  T136] bridge0: port 1(bridge_slave_0) entered disabled state
[  887.124691][  T136] veth1_macvtap: left promiscuous mode
[  887.133269][  T136] veth0_macvtap: left promiscuous mode
[  887.146786][  T136] veth1_vlan: left promiscuous mode
[  887.159341][  T136] veth0_vlan: left promiscuous mode
[  887.290542][T13426] Bluetooth: hci0: command tx timeout
[  887.693967][  T136] bond1 (unregistering): (slave veth3): Releasing active interface
[  888.073006][  T136] bond1 (unregistering): Released all slaves
[  888.870215][T16392] loop4: detected capacity change from 0 to 131072
[  888.879141][T16392] F2FS-fs (loop4): Test dummy encryption mode enabled
[  888.921165][T16392] F2FS-fs (loop4): invalid crc value
[  888.953887][T16392] F2FS-fs (loop4): Found nat_bits in checkpoint
[  889.026592][T16392] F2FS-fs (loop4): access invalid blkaddr:0
[  889.039774][T16392] CPU: 0 PID: 16392 Comm: syz.4.3177 Not tainted syzkaller #0
[  889.047303][T16392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  889.057391][T16392] Call Trace:
[  889.060788][T16392]  <TASK>
[  889.063750][T16392]  dump_stack_lvl+0x18c/0x250
[  889.068483][T16392]  ? show_regs_print_info+0x20/0x20
[  889.073915][T16392]  ? __up_read+0x2b6/0x6b0
[  889.078372][T16392]  f2fs_is_valid_blkaddr+0xef8/0x1580
[  889.083792][T16392]  sanity_check_extent_cache+0xfc/0x1f0
[  889.089388][T16392]  f2fs_iget+0x33c5/0x47e0
[  889.093882][T16392]  f2fs_fill_super+0x48b3/0x6be0
[  889.098911][T16392]  ? kill_f2fs_super+0x3d0/0x3d0
[  889.103880][T16392]  ? down_write+0x16e/0x200
[  889.108426][T16392]  ? down_read_killable+0x340/0x340
[  889.113677][T16392]  ? setup_bdev_super+0x56b/0x660
[  889.118741][T16392]  mount_bdev+0x221/0x2d0
[  889.123179][T16392]  ? kill_f2fs_super+0x3d0/0x3d0
[  889.128204][T16392]  ? get_tree_bdev+0x520/0x520
[  889.133065][T16392]  ? vfs_parse_fs_param+0x420/0x420
[  889.138272][T16392]  legacy_get_tree+0xea/0x180
[  889.142966][T16392]  ? trace_raw_output_f2fs__rw_end+0x110/0x110
[  889.149172][T16392]  vfs_get_tree+0x8c/0x280
[  889.153602][T16392]  do_new_mount+0x24b/0xa40
[  889.158120][T16392]  __se_sys_mount+0x2e7/0x3d0
[  889.162814][T16392]  ? __x64_sys_mount+0xc0/0xc0
[  889.167589][T16392]  ? lockdep_hardirqs_on+0x98/0x150
[  889.172884][T16392]  ? __x64_sys_mount+0x20/0xc0
[  889.177666][T16392]  do_syscall_64+0x55/0xa0
[  889.182185][T16392]  ? clear_bhb_loop+0x40/0x90
[  889.186958][T16392]  ? clear_bhb_loop+0x40/0x90
[  889.191735][T16392]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  889.197724][T16392] RIP: 0033:0x7f3544d9da0a
[  889.202349][T16392] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  889.222079][T16392] RSP: 002b:00007f3545c15e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  889.230520][T16392] RAX: ffffffffffffffda RBX: 00007f3545c15ee0 RCX: 00007f3544d9da0a
[  889.238509][T16392] RDX: 0000200000000100 RSI: 0000200000010600 RDI: 00007f3545c15ea0
[  889.246492][T16392] RBP: 0000200000000100 R08: 00007f3545c15ee0 R09: 0000000000000010
[  889.254478][T16392] R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000010600
[  889.262461][T16392] R13: 00007f3545c15ea0 R14: 00000000000105d6 R15: 00002000000003c0
[  889.270492][T16392]  </TASK>
[  889.345969][T16392] F2FS-fs (loop4): sanity_check_extent_cache: inode (ino=3) extent info [0, 0, 4128768] is incorrect, run fsck to fix
[  889.371517][T13426] Bluetooth: hci0: command tx timeout
[  889.374987][T16392] F2FS-fs (loop4): Failed to read root inode
[  890.714810][  T136] team0 (unregistering): Port device team_slave_1 removed
[  890.823352][  T136] team0 (unregistering): Port device team_slave_0 removed
[  890.997410][  T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  891.110272][  T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  891.457481][T13426] Bluetooth: hci0: command tx timeout
[  891.874701][  T136] bond0 (unregistering): Released all slaves
[  892.054414][T16332] bridge0: port 1(bridge_slave_0) entered blocking state
[  892.069694][T16332] bridge0: port 1(bridge_slave_0) entered disabled state
[  892.109462][T16332] bridge_slave_0: entered allmulticast mode
[  892.122010][T16332] bridge_slave_0: entered promiscuous mode
[  892.151712][T16332] bridge0: port 2(bridge_slave_1) entered blocking state
[  892.158896][T16332] bridge0: port 2(bridge_slave_1) entered disabled state
[  892.179971][T16332] bridge_slave_1: entered allmulticast mode
[  892.198237][T16332] bridge_slave_1: entered promiscuous mode
[  892.378412][T16332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  892.404373][T16332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  892.640172][T16332] team0: Port device team_slave_0 added
[  892.684586][T16332] team0: Port device team_slave_1 added
[  892.788356][T16332] batman_adv: batadv0: Adding interface: batadv_slave_0
[  892.812219][T16332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  892.900154][T16332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  892.932901][T16332] batman_adv: batadv0: Adding interface: batadv_slave_1
[  892.949903][T16332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  893.288927][T16332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  893.986016][T16332] hsr_slave_0: entered promiscuous mode
[  894.012963][T16332] hsr_slave_1: entered promiscuous mode
[  894.035883][T16332] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  894.059790][T16332] Cannot create hsr debugfs directory
[  894.797495][T16332] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  894.820342][T16435] loop0: detected capacity change from 0 to 40427
[  894.836569][T16332] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  894.858938][T16435] F2FS-fs (loop0): invalid crc value
[  894.887251][T16435] F2FS-fs (loop0): Found nat_bits in checkpoint
[  894.897557][T16332] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  894.934189][T16332] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  895.078233][T16435] F2FS-fs (loop0): Start checkpoint disabled!
[  895.138387][T16435] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  896.255065][T16332] 8021q: adding VLAN 0 to HW filter on device bond0
[  896.339122][T16332] 8021q: adding VLAN 0 to HW filter on device team0
[  896.393721][T14978] bridge0: port 1(bridge_slave_0) entered blocking state
[  896.400977][T14978] bridge0: port 1(bridge_slave_0) entered forwarding state
[  896.481285][ T6414] bridge0: port 2(bridge_slave_1) entered blocking state
[  896.488497][ T6414] bridge0: port 2(bridge_slave_1) entered forwarding state
[  896.554621][T16485] loop0: detected capacity change from 0 to 512
[  896.661130][T16485] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  896.669520][T16485] EXT4-fs (loop0): orphan cleanup on readonly fs
[  896.709529][T16485] Quota error (device loop0): v2_read_file_info: Can't read info structure
[  896.800451][T16485] EXT4-fs warning (device loop0): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix.
[  896.870083][T16485] EXT4-fs (loop0): Cannot turn on quotas: error -5
[  896.923411][T16485] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.3198: bg 0: block 64: padding at end of block bitmap is not set
[  896.988738][T16485] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  897.033536][T16485] EXT4-fs (loop0): 1 truncate cleaned up
[  897.054792][T16485] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  897.862435][T16332] 8021q: adding VLAN 0 to HW filter on device batadv0
[  899.044918][T16332] veth0_vlan: entered promiscuous mode
[  899.084763][T16332] veth1_vlan: entered promiscuous mode
[  899.185999][T16332] veth0_macvtap: entered promiscuous mode
[  899.274930][T16332] veth1_macvtap: entered promiscuous mode
[  899.316218][T16332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  899.337693][T16332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  899.459832][T16332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  899.496803][T16332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  899.537466][T16332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  899.611231][T16332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  899.622017][T16332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  899.633195][T16332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  899.646050][T16332] batman_adv: batadv0: Interface activated: batadv_slave_0
[  900.384433][T16332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  900.430924][T16332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  900.459805][T16332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  900.482283][T16332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  900.492506][T16332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  900.496111][T16521] loop4: detected capacity change from 0 to 40427
[  900.503458][T16332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  900.519680][T16332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  900.531105][T16332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  900.542788][T16332] batman_adv: batadv0: Interface activated: batadv_slave_1
[  900.558771][T14347] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  900.563416][T16332] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  900.586167][T16521] F2FS-fs (loop4): invalid crc value
[  900.599064][T16332] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  900.612041][T16332] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  900.621718][T16332] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  900.630530][T16521] F2FS-fs (loop4): Found nat_bits in checkpoint
[  900.778064][T16535] loop0: detected capacity change from 0 to 256
[  900.820475][T16521] F2FS-fs (loop4): Start checkpoint disabled!
[  900.859398][T16521] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  900.916196][T16535] FAT-fs (loop0): Directory bread(block 64) failed
[  900.925723][  T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  900.954459][  T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  900.966402][T16535] FAT-fs (loop0): Directory bread(block 65) failed
[  901.010253][T16535] FAT-fs (loop0): Directory bread(block 66) failed
[  901.016852][T16535] FAT-fs (loop0): Directory bread(block 67) failed
[  901.039429][T16521] ------------[ cut here ]------------
[  901.045628][T16521] kernel BUG at fs/f2fs/segment.c:3481!
[  901.067804][  T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  901.076648][T16535] FAT-fs (loop0): Directory bread(block 68) failed
[  901.085435][T16521] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  901.088870][  T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  901.091632][T16521] CPU: 0 PID: 16521 Comm: syz.4.3205 Not tainted syzkaller #0
[  901.091656][T16521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  901.091667][T16521] RIP: 0010:f2fs_allocate_data_block+0x3f6f/0x3fb0
[  901.091700][T16521] Code: 19 fe 48 8b 54 24 30 e9 88 eb ff ff e8 8a 82 c1 fd 48 c7 c7 f0 ed 6f 8d 4c 89 f6 e8 2b a2 97 00 e9 a4 eb ff ff e8 71 82 c1 fd <0f> 0b e8 6a 82 c1 fd 0f 0b e8 63 82 c1 fd 0f 0b e8 5c 82 c1 fd 0f
[  901.091718][T16521] RSP: 0018:ffffc900033e7410 EFLAGS: 00010283
[  901.091737][T16521] RAX: ffffffff83c59daf RBX: 0000000000000203 RCX: 0000000000080000
[  901.091751][T16521] RDX: ffffc90005099000 RSI: 0000000000025b3d RDI: 0000000000025b3e
[  901.091764][T16521] RBP: 0000000000000200 R08: ffff88802a45485f R09: 1ffff1100548a90b
[  901.091778][T16521] R10: dffffc0000000000 R11: ffffed100548a90c R12: 1ffff9200067cef8
[  901.091794][T16521] R13: 0000000000000000 R14: 0000000000002a03 R15: dffffc0000000000
[  901.091808][T16521] FS:  00007f3545c166c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  901.091826][T16521] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  901.091840][T16521] CR2: 00007fc7bc93f000 CR3: 000000006846f000 CR4: 00000000003506f0
[  901.091858][T16521] Call Trace:
[  901.091866][T16521]  <TASK>
[  901.091879][T16521]  ? f2fs_mark_inode_dirty_sync+0x120/0x1f0
[  901.091911][T16521]  f2fs_map_blocks+0x1338/0x3e60
[  901.091956][T16521]  ? f2fs_get_block_locked+0xe0/0xe0
[  901.091983][T16521]  ? __up_read+0x2b6/0x6b0
[  901.092003][T16521]  ? up_read+0x20/0x20
[  901.092025][T16521]  ? f2fs_allocate_pinning_section+0x1af/0x590
[  901.092053][T16521]  f2fs_expand_inode_data+0x67a/0xa10
[  901.092092][T16521]  ? f2fs_insert_range+0x470/0x470
[  901.092117][T16521]  ? __mnt_drop_write_file+0xc3/0x100
[  901.266274][T16521]  ? file_modified_flags+0x267/0x2a0
[  901.271580][T16521]  f2fs_fallocate+0x416/0x890
[  901.276617][T16521]  vfs_fallocate+0x58e/0x700
[  901.281215][T16521]  do_vfs_ioctl+0x19f6/0x1cc0
[  901.285901][T16521]  ? __ia32_compat_sys_ioctl+0x8a0/0x8a0
[  901.291549][T16521]  ? tomoyo_path_number_perm+0x217/0x620
[  901.297206][T16521]  ? __lock_acquire+0x7d40/0x7d40
[  901.302239][T16521]  ? slab_free_freelist_hook+0x130/0x1a0
[  901.307883][T16521]  ? tomoyo_path_number_perm+0x5b4/0x620
[  901.313528][T16521]  ? tomoyo_path_number_perm+0x217/0x620
[  901.319173][T16521]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  901.324747][T16521]  ? __fget_files+0x28/0x4b0
[  901.329346][T16521]  ? __fget_files+0x28/0x4b0
[  901.333950][T16521]  ? bpf_lsm_file_ioctl+0x9/0x10
[  901.338892][T16521]  ? security_file_ioctl+0x80/0xa0
[  901.344017][T16521]  __se_sys_ioctl+0x83/0x170
[  901.348616][T16521]  do_syscall_64+0x55/0xa0
[  901.353048][T16521]  ? clear_bhb_loop+0x40/0x90
[  901.357739][T16521]  ? clear_bhb_loop+0x40/0x90
[  901.362423][T16521]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  901.368326][T16521] RIP: 0033:0x7f3544d9c799
[  901.372748][T16521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  901.392459][T16521] RSP: 002b:00007f3545c16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  901.400880][T16521] RAX: ffffffffffffffda RBX: 00007f3545015fa0 RCX: 00007f3544d9c799
[  901.408882][T16521] RDX: 00002000000000c0 RSI: 0000000040305828 RDI: 0000000000000005
[  901.416858][T16521] RBP: 00007f3544e32c99 R08: 0000000000000000 R09: 0000000000000000
[  901.424942][T16521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  901.433031][T16521] R13: 00007f3545016038 R14: 00007f3545015fa0 R15: 00007ffc6f4c9288
[  901.441026][T16521]  </TASK>
[  901.444064][T16521] Modules linked in:
[  901.450346][T16535] FAT-fs (loop0): Directory bread(block 69) failed
[  901.457692][T16535] FAT-fs (loop0): Directory bread(block 70) failed
[  901.458265][T16521] ---[ end trace 0000000000000000 ]---
[  901.464499][T16535] FAT-fs (loop0): Directory bread(block 71) failed
[  901.476612][T16535] FAT-fs (loop0): Directory bread(block 72) failed
[  901.483429][T16535] FAT-fs (loop0): Directory bread(block 73) failed
[  901.504814][T16521] RIP: 0010:f2fs_allocate_data_block+0x3f6f/0x3fb0
[  901.511488][T16521] Code: 19 fe 48 8b 54 24 30 e9 88 eb ff ff e8 8a 82 c1 fd 48 c7 c7 f0 ed 6f 8d 4c 89 f6 e8 2b a2 97 00 e9 a4 eb ff ff e8 71 82 c1 fd <0f> 0b e8 6a 82 c1 fd 0f 0b e8 63 82 c1 fd 0f 0b e8 5c 82 c1 fd 0f
[  901.531961][T16521] RSP: 0018:ffffc900033e7410 EFLAGS: 00010283
[  901.538093][T16521] RAX: ffffffff83c59daf RBX: 0000000000000203 RCX: 0000000000080000
[  901.546277][T16521] RDX: ffffc90005099000 RSI: 0000000000025b3d RDI: 0000000000025b3e
[  901.557204][T16521] RBP: 0000000000000200 R08: ffff88802a45485f R09: 1ffff1100548a90b
[  901.568007][T16521] R10: dffffc0000000000 R11: ffffed100548a90c R12: 1ffff9200067cef8
[  901.572195][  T136] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  901.576096][T16521] R13: 0000000000000000 R14: 0000000000002a03 R15: dffffc0000000000
[  901.594472][T16521] FS:  00007f3545c166c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  901.603605][T16521] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  901.616413][T16521] CR2: 00007ffea4340278 CR3: 000000006846f000 CR4: 00000000003506f0
[  901.629785][T16521] Kernel panic - not syncing: Fatal exception
[  901.636517][T16521] Kernel Offset: disabled
[  901.640883][T16521] Rebooting in 86400 seconds..