last executing test programs:

2m27.454986665s ago: executing program 2 (id=181):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TCFLSH(r4, 0xc0384707, 0xfffffffffffffffe)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r6, 0x321, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4048010)

2m26.390109639s ago: executing program 2 (id=187):
socket$nl_route(0x10, 0x3, 0x0)
socket(0x2, 0x2, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000600001e95"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$inet(0x2, 0x3, 0x2)
socket(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800)

2m26.181176785s ago: executing program 2 (id=188):
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000440)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/228, 0xe4}, {&(0x7f0000002c00)=""/4102, 0x1006}], 0x2}, 0x9}], 0x2, 0x40002040, 0x0)

2m26.03980158s ago: executing program 2 (id=191):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3)

2m25.266396774s ago: executing program 2 (id=195):
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @empty, 0x400005}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000080)=0x40, 0x4)

2m22.378890596s ago: executing program 2 (id=207):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xff, 0x9, 0x3, 0x4}, 0xc)
recvmsg(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x0)

2m22.139098473s ago: executing program 32 (id=207):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xff, 0x9, 0x3, 0x4}, 0xc)
recvmsg(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x0)

2m17.945151216s ago: executing program 3 (id=224):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x113c02, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0)
write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './file0'}, 0xb)

2m17.863097938s ago: executing program 3 (id=226):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
close(0xffffffffffffffff)
getcwd(&(0x7f0000001bc0)=""/4112, 0xffffff19)
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000002080)=0x99, 0x23b)
mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x10008c, 0x0)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x4)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
chdir(&(0x7f0000000000)='./file0\x00')

2m16.771723803s ago: executing program 3 (id=235):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="b000000043000701fefffffffcdbdf25017c00009900028035"], 0xb0}, 0x1, 0x0, 0x0, 0xc004}, 0xc000)

2m16.704726805s ago: executing program 3 (id=236):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000001f80)=[{&(0x7f0000000380)=""/134, 0x86}], 0x1, 0x1, 0xffffffff)

2m16.416000725s ago: executing program 3 (id=237):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$vim2m(0x0, 0x10001, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmmsg$inet(r5, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0)

2m14.585273582s ago: executing program 3 (id=242):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", <r1=>0xffffffffffffffff})
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x5, "fa00114001000000000000000000000000000100000000000000ffff00", <r3=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1, <r4=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000001c0)={0x10001, "34e6498c270e0000b56a00000500000100", <r5=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff0007000000000000001a00", r5})

2m14.497406905s ago: executing program 33 (id=242):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", <r1=>0xffffffffffffffff})
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x5, "fa00114001000000000000000000000000000100000000000000ffff00", <r3=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1, <r4=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000001c0)={0x10001, "34e6498c270e0000b56a00000500000100", <r5=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff0007000000000000001a00", r5})

2m4.729141094s ago: executing program 0 (id=281):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000480)=ANY=[], 0x1, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

2m4.610978518s ago: executing program 0 (id=282):
syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f00000001c0)=ANY=[], 0x4, 0x291, &(0x7f0000000600)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129a42, 0x5)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)

2m4.179662082s ago: executing program 0 (id=285):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'batadv_slave_1\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0)

2m3.809011873s ago: executing program 0 (id=287):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f0000000600), 0x5, 0x50c, &(0x7f0000001640)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x1060, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1)
userfaultfd(0x800)
open_by_handle_at(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="19000000fb00000000fb"], 0x98300)

2m3.104086216s ago: executing program 0 (id=290):
timer_create(0x7, 0x0, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, 0x0, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
io_setup(0x81, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040))

2m1.733178999s ago: executing program 0 (id=296):
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x322020, &(0x7f0000000280)=ANY=[], 0x1, 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0)

2m1.585552193s ago: executing program 34 (id=296):
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x322020, &(0x7f0000000280)=ANY=[], 0x1, 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0)

54.601078663s ago: executing program 6 (id=609):
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, 0x0, 0x1, 0x0, 0x3})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setparam(r2, &(0x7f00000006c0)=0x4)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
sendmsg$key(0xffffffffffffffff, 0x0, 0x20000000)
syz_open_dev$vcsa(0x0, 0x6, 0x10000)
getpid()
socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @mcast2}}}, 0x108)
r7 = socket(0x80000000000000a, 0x2, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e23}}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0)
sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffa, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x7ff, @mcast1={0xff, 0x7}}}, {{0xa, 0x4001, 0xfffffffc, @mcast2}}}, 0x108)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)

53.693055301s ago: executing program 6 (id=612):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x2c, r1, 0x801, 0x70bd24, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x2400c000)

53.560689285s ago: executing program 6 (id=614):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @dev={0xfe, 0x80, '\x00', 0x20}, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000040)={0xa, 0x4e22, 0x2, @loopback={0xff00}, 0x4000000c}, 0x1c, 0x0, 0x0, 0x0, 0x18}, 0x5c39d53d76e37746)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

53.39726967s ago: executing program 6 (id=616):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4010, &(0x7f00000001c0), 0x2, 0xbd8, &(0x7f00000083c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x4)
renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file3\x00', 0x4)

51.650372986s ago: executing program 6 (id=619):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000380)={<r1=>0xffffffffffffffff}, 0x13f, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @remote, 0x4}, {0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffc}, r1, 0x400}}, 0x48)

51.398703944s ago: executing program 6 (id=623):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x3, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1c, 0x3, &(0x7f0000000040)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x20000000}, @exit], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x17}, 0x94)

36.006213361s ago: executing program 35 (id=623):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x3, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1c, 0x3, &(0x7f0000000040)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x20000000}, @exit], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x17}, 0x94)

14.596831898s ago: executing program 7 (id=722):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r1 = dup(r0)
r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0)
ioctl$TIOCSETD(r2, 0x5423, 0x0)
ioctl$FIONREAD(r2, 0x541b, &(0x7f0000002300))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x81, 0x0, 0x1, 0x5, 0x8d90, 0x2}, 0x20)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0)
madvise(&(0x7f000019f000/0x4000)=nil, 0x4000, 0x9)

13.396944626s ago: executing program 7 (id=728):
r0 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00')
syz_read_part_table(0x4074, &(0x7f0000000400)="$eJzszzFKK1EUBuB/kjcvowwEQStBDBZ2MnZWs4v0kjVYWag4O7EUF+A+3IOlLiESZKIxtoEg31cczpmfM/fesN3e+6ZafiqSPM+e9pIcT9I1zWf4r893vrab85S71SB1kqv1n08fN3p3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg24y+9YOV5DZJ93J92s/VovxflNlhups2F3VSHYyT+2HK9qjIfjI5++WMYfKapEjylmQ63txzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/5HJlGv2M6765W199OEnXlst0Pv9gd44JAABhGAhmxCAmMRkstPudgf92nD3JfdtXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4KQAA//9ggxZC")
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/time_for_children\x00')

12.302388121s ago: executing program 7 (id=733):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000080, &(0x7f0000000100)={[{@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xf2a5}}, {@errors_remount}, {@sb={'sb', 0x3d, 0x1}}]}, 0xfe, 0x7b9, &(0x7f0000000f80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000009000000000004"])

11.716984649s ago: executing program 7 (id=737):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$eJzs3U9sHFcZAPBvdx0ncd2mCY3UlIMDqUj/KLbblZwaDoQDHCjqpUioUjlYycYOXsfGdkVtLu6NE0UCBKiiasQBCSRiiQNwqChIHJAIEgIhLNRKIA78aQHhHigBjGZ31t54Z51Ftndbz+8nbfbNm7G/93bzvd19b9YTQG6dTv4pRAxGxI2IOFbfvPWA0/W775RXp66XV6cKsbHx5N8KteOulVenGoc2fu6OiFiJiHsj4seXIy4eao27sLQ8PVGtVubT7ZHFmbmRhaXlc1dmJiYrk5Wr5fJj42Nj4+fHRv+P3hR23PuJuddP/GbqicmXhv791PmZb/y1EBdq/Y5t/dhLWS3qK0Rc2I9gPVBK+hMRAx0ef7Ly/Mv73CQ69KUTayPJc3dPRNxfy/9jUao9mxEffPHpfxyLD9xs97M31l78UzfbCgDsnY3E4Z13AwdTMZLP/oXicETUy8Xi8HD9M/w9MVCszi4sPnx59pmrl+pzBHfHoeLlK9XKaDpXcHccKiTbj9TKW9uPbtsuR8TxiPhc6Whte/jibPVSV0c6oGEw4rXvfvpi/x3b8v+PpXr+AwdXkv+/+sn3f5iU3yz1ujVANyX5/603Zx4P+Q+5c/v8P9L1NgHd4fUf8kv+Q3615v/O584CB4fXf8gv+Q/5Jf8hv+Q/5Jf8h/xqzn/pD/l0fOiVtUJErLz/aO2W6E/3ZfzZHuAA2bjTt/whr7z3h/zq2yoe7WU7gO7zGR+43dn/bb8NPLf3bQG6o9jrBgA9c/aU9T/IK/P/kF99vW4A0DPe4wPm/yF/zP9Dfg22uf7XnU3X7hqNiLsi4melQ4cb1/oC3rkGI1574cb3no4o/rmQvv9PxoKJ11/9UfNx/YV/1pYI+iPiMy88+ZVnJxYX5x9J6v++Wb/41bT+0V71BuhEI08beQzk18LS8vREtVqZV1DYVoh4WzRDYR8LjXHgWnl1qnHr1tjz/EMRb3yofhJCEvd6eqvv7UvnJo/U1igH1gu3nKtQ2IO1y8+fi1h5LiLuzep/Ib3eeX3lY2C91BL/Xel9cjuVzp8kx5zsMH7prt3Fv68p/lBT/Hd3GH/t4x0euE+Of7u38V/67eayV1/W49+3y6/EnrjN/se/uatfv2t/+H1v498/1Nv4X56NeCUZf0az8q+YpOXmymfz+PPFL9TnSvp3Gf+zZ7fGv+st419xc/wrtRn/TncY56dPVT6ZVV/6ecQbz0Xclxm/Ee9ILdbAerEl/pmm8eeBHeL/5WO/nM6qv/BqxMa1iLORHb851sjizNzIwtLyuSszE5OVycrVcvmx8bGx8fNjoyO1OeqRxkx1qydunvxwVv2Zr9f7P9AmfqP/7R7/jR363Gz5a58afE9G/S9O1eM/cCb7+T+Rxq8//n0t8d+b3if/T/6TnsubHPNWRBxO6x+MiB+8fPyhrHZ99GY9/qU2/S/eEr+1/w932P/43X+fyap+9iOd/gIAYC+1nxrodcsAAIC91o2Vxl73Ecg2sN4fzcvAhZWmdYWVrXWFpP6tdH2htBLxr3SNIal/MF0lS8qZCw3A287J5ff9utdtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMi7haXl6YlqtTK/0OuWAN32vwAAAP//mSj9Tw==")
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x70, 0x80000}, 0x20)

10.368861242s ago: executing program 7 (id=746):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000002800000018010000646c6c2500000000002020207b1af8ff00000000bfa10000000000000701000006ffffffb702000008000000b7030000feffffff85000000cf00000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)

9.210064169s ago: executing program 7 (id=752):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)

8.956639927s ago: executing program 36 (id=752):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)

5.117074228s ago: executing program 5 (id=775):
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1010000, &(0x7f0000000780)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@shortname_winnt}, {@utf8no}, {@shortname_mixed}, {@utf8}, {@fat=@debug}, {@shortname_winnt}, {@shortname_lower}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@utf8no}, {@shortname_lower}, {@rodir}, {@shortname_lower}, {@numtail}]}, 0x1, 0x370, &(0x7f0000000400)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

4.211240557s ago: executing program 5 (id=783):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", <r1=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x2, "a0cdeec531a074a26db039dde81d11b8af83517a06ca27cdfb355e723f8cab95"})
ppoll(&(0x7f0000000040)=[{r1}], 0x1, 0x0, 0x0, 0x0)
ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000000)=0x6)

4.198992857s ago: executing program 4 (id=784):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x1c, r0, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

4.042014482s ago: executing program 4 (id=785):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}}}]}]}], {0x14}}, 0xd4}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0)

3.838198598s ago: executing program 4 (id=788):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0x7, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)

3.645184505s ago: executing program 8 (id=790):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r1 = dup(r0)
r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0)
ioctl$TIOCSETD(r2, 0x5423, 0x0)
ioctl$FIONREAD(r2, 0x541b, &(0x7f0000002300))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x81, 0x0, 0x1, 0x5, 0x8d90, 0x2}, 0x20)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0)
madvise(&(0x7f000019f000/0x4000)=nil, 0x4000, 0x9)

3.47720818s ago: executing program 1 (id=793):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@noload}, {@quota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@i_version}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080))
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x2368810, 0x0, 0x3, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file1\x00', 0x8000, 0x0, 0x1, 0x0, 0x0)

3.417148802s ago: executing program 1 (id=794):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
setrlimit(0xe, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x8004, &(0x7f00000000c0)={[{@shortname_win95}, {@uni_xlate}, {@fat=@dos1xfloppy}, {@rodir}, {@fat=@discard}, {@shortname_winnt}]}, 0xfc, 0x259, &(0x7f0000000540)="$eJzs2k9rXFUYB+D31kjS1HQi/qMF8aALdXNpsnbRIC2IAUUboQrSW3OjQ64zIXcIjIgNCLr1I7i1uHQnSJdusvETuNBVNlkqSK+kM7WTOCrFtBPt82zmZc75Xe6Zc3g5i9l96YsP19fqfK3IIiKLE+djO25mMR8nIuKr2LcdLz5/+fun37z89qtLy8sX3kjp4tKlhcWU0ulnvnvn46+fvdE79dY3p7+djp35d3f3Fn/aeXLnzO7NSx+069SuU6fbS0W62u32iqtVmVbb9Xqe0utVWdRlanfqcvPA+FrV3djop6KzOje7sVnWdSo6/bRe9lOvm3qb/VS8X7Q7Kc/zNDcb/Bsr139pmthrHr4STdOc/DJO3Yi5H6MV2aMpe+x89sSV7Knt7Mxe07Qm/arcE/b/wTbS1Gciqs+3VrZWBp+D8aW1aEcVZZyLVvwW+8dkaFBffGX5wrl0y3x8Vl0b5q9trTx0ML8QrZgfn18Y5NPB/HTMjuYXoxWPj88vjs3PxAvPjeTzaMUP70U3qliN/eyd/CcLKb382vKh/Nlb8wAA/m/y9Iex97c8/6vxQf4u7oeH7ldTcXZqsmsnou5/tF5UVbk5UjwyHLv9zcmIODznP1JMHdFzpoc/yXFZ15EWP396dA/M/nnO7aM30bXP/Gkrm0HDi2OyKRMv/qZp/Hr9HnYk7qc7mz7pNwEAAAAAAAAAAOBu3I+/E056jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPH2ewAAAP//OOjINQ==")
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.042983054s ago: executing program 4 (id=795):
unshare(0x6a040000)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbd5, &(0x7f0000002380)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)={@cgroup=r2, r0, 0x12, 0x6}, 0x10)

2.245908489s ago: executing program 5 (id=796):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f8, 0x200, 0x70bd2c, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x800)

1.948700908s ago: executing program 5 (id=797):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x2000000, &(0x7f0000000340)={[], [{@obj_role={'obj_role', 0x3d, '#%!/^.'}}, {@subj_role={'subj_role', 0x3d, 'veth1_to_team\x00'}}, {@permit_directio}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}, 0x1, 0x5e7, &(0x7f0000000800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10)
r1 = openat$cgroup_ro(r0, &(0x7f0000000600)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[]}, 0x78)
write$binfmt_script(r1, &(0x7f0000000000), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8)

1.947178918s ago: executing program 8 (id=798):
unshare(0x42000000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000030900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174001400"], 0x90}}, 0x0)

1.325251048s ago: executing program 8 (id=799):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001600)={0x0, 0x18, 0xfa00, {0x0, 0xfffffffffffffffe, 0x111, 0x6}}, 0x20)

1.318982218s ago: executing program 4 (id=800):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x2810000, &(0x7f00000003c0)=ANY=[@ANYBLOB='shortname=winnt,flush,iocharset=iso8v\"9-4,shortname=win95,check=strict,uni_xlate=1,tz=UTC,uni_xlate=0,iocharset=iso8859-3,rodir,flush,utf8=0,\x00'], 0x1, 0x34a, &(0x7f0000001740)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)

1.183234522s ago: executing program 1 (id=801):
r0 = socket$inet6(0xa, 0x3, 0x2f)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in, @in6=@private1, 0x0, 0x8, 0x4e23, 0x3, 0xa, 0x50, 0x40, 0x3c}, {0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x6, 0x0, 0xe}, {0x0, 0xfffffffffffffffe, 0x101}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)

1.085182136s ago: executing program 8 (id=802):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x160, 0x4c, 0x1a, 0x160, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0xfffffffc, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)

1.081346426s ago: executing program 1 (id=803):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x2fd, 0xffff, 0x101, 0x300}})

1.071023276s ago: executing program 8 (id=804):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x5, 0x1c)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0000"], 0x50)

996.424659ms ago: executing program 5 (id=805):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x6c, r1, 0x5, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @broadcast, @from_mac}, 0x0, @default, 0x821, @void, @void, @val={0x3, 0x1, 0x2}, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x80, 0xa}}, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xffffffff}]}, 0x6c}}, 0x0)

937.2748ms ago: executing program 1 (id=806):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f8, 0x200, 0x70bd2c, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x800)

802.661374ms ago: executing program 1 (id=807):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", <r1=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x2, "a0cdeec531a074a26db039dde81d11b8af83517a06ca27cdfb355e723f8cab95"})
ppoll(&(0x7f0000000040)=[{r1}], 0x1, 0x0, 0x0, 0x0)
ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000000)=0x6)

98.887917ms ago: executing program 8 (id=808):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000000c0)={0x4, 0xfff, 0x4, 0x8fff})

1.1045ms ago: executing program 4 (id=809):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0xf00, 0x0)
fanotify_mark(r1, 0x1, 0x10001043, r0, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
chdir(&(0x7f0000000300)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x58)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x2)

0s ago: executing program 5 (id=810):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{}, 0x1}}, 0x10, 0x0}, 0x10)
setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88)

kernel console output (not intermixed with test programs):

498] EXT4-fs (loop4): 1 truncate cleaned up
[   72.695865][ T4498] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,noblock_validity,discard,errors=remount-ro,mblk_io_submit. Quota mode: none.
[   72.777103][ T4510] loop3: detected capacity change from 0 to 256
[   73.457360][ T4513] loop2: detected capacity change from 0 to 8192
[   73.588362][ T4522] loop0: detected capacity change from 0 to 512
[   73.761778][ T4522] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.70: iget: bad i_size value: 38620345925642
[   73.775286][ T4522] EXT4-fs (loop0): Remounting filesystem read-only
[   73.781862][ T4522] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.70: couldn't read orphan inode 15 (err -117)
[   73.794295][ T4522] EXT4-fs (loop0): Remounting filesystem read-only
[   73.800950][ T4522] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,max_batch_time=0x0000000000000004,data_err=ignore,. Quota mode: writeback.
[   74.038542][ T4544] loop1: detected capacity change from 0 to 512
[   74.049630][ T4545] capability: warning: `syz.2.80' uses deprecated v2 capabilities in a way that may be insecure
[   74.156187][ T4547] nbd0: detected capacity change from 0 to 63
[   74.166033][ T4549] tipc: Started in network mode
[   74.171084][ T4549] tipc: Node identity 4, cluster identity 4711
[   74.180183][ T4549] tipc: Node number set to 4
[   74.202494][ T4551] block nbd0: NBD_DISCONNECT
[   74.211570][ T4551] block nbd0: Disconnected due to user request.
[   74.356304][ T4551] block nbd0: shutting down sockets
[   74.489112][ T4544] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   75.475003][ T4573] loop3: detected capacity change from 0 to 256
[   76.019898][ T4591] loop3: detected capacity change from 0 to 1024
[   76.109977][ T4591] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[   76.163705][ T4591] EXT4-fs (loop3): invalid journal inode
[   76.169540][ T4591] EXT4-fs (loop3): can't get journal size
[   76.196760][ T4591] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 17104912: comm syz.3.92: lblock 2 mapped to illegal pblock 17104912 (length 1)
[   76.281514][ T4591] EXT4-fs (loop3): failed to initialize system zone (-117)
[   76.289650][ T4591] EXT4-fs (loop3): mount failed
[   76.306311][   T21] cfg80211: failed to load regulatory.db
[   77.328307][ T4608] loop0: detected capacity change from 0 to 512
[   77.398035][ T4608] EXT4-fs (loop0): Unrecognized mount option "smackfsdef=vfat" or missing value
[   77.552245][ T4612] loop1: detected capacity change from 0 to 512
[   77.617642][ T4612] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   77.657755][ T4612] EXT4-fs (loop1): invalid journal inode
[   77.711292][ T4612] EXT4-fs (loop1): can't get journal size
[   77.770415][ T4612] EXT4-fs (loop1): 1 truncate cleaned up
[   77.804235][ T4612] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none.
[   78.106342][ T4627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'.
[   78.270247][ T4631] loop0: detected capacity change from 0 to 512
[   78.302748][ T4631] overlayfs: failed to get inode (-116)
[   78.324983][ T4631] overlayfs: failed to get inode (-116)
[   78.343282][ T4631] overlayfs: failed to get inode (-116)
[   78.661802][ T4583] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   78.839286][ T4637] loop0: detected capacity change from 0 to 4096
[   78.889364][ T4639] device syzkaller0 entered promiscuous mode
[   78.912152][ T4639] tipc: Started in network mode
[   78.917439][ T4639] tipc: Node identity 82dffdc204b, cluster identity 4711
[   78.926415][ T4639] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.936291][ T4638] tipc: Resetting bearer <eth:syzkaller0>
[   78.977229][ T4637] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   78.989922][ T4638] tipc: Disabling bearer <eth:syzkaller0>
[   79.069968][ T4196] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[   79.079810][ T4196] CPU: 1 PID: 4196 Comm: kworker/u5:3 Not tainted syzkaller #0
[   79.087368][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[   79.097429][ T4196] Workqueue: hci0 hci_rx_work
[   79.102144][ T4196] Call Trace:
[   79.105422][ T4196]  <TASK>
[   79.108353][ T4196]  dump_stack_lvl+0x188/0x250
[   79.113043][ T4196]  ? show_regs_print_info+0x20/0x20
[   79.118260][ T4196]  ? load_image+0x400/0x400
[   79.122787][ T4196]  sysfs_create_dir_ns+0x26a/0x290
[   79.127914][ T4196]  ? sysfs_warn_dup+0xa0/0xa0
[   79.132596][ T4196]  ? process_one_work+0x85f/0x1010
[   79.137714][ T4196]  ? do_raw_spin_unlock+0x11d/0x230
[   79.142938][ T4196]  kobject_add_internal+0x6e0/0xd90
[   79.148151][ T4196]  kobject_add+0x160/0x230
[   79.152581][ T4196]  ? kobject_init+0x1d0/0x1d0
[   79.157271][ T4196]  ? klist_children_get+0x50/0x50
[   79.162319][ T4196]  ? get_device_parent+0x121/0x3f0
[   79.167446][ T4196]  device_add+0x48c/0x1000
[   79.171881][ T4196]  hci_conn_add_sysfs+0xd1/0x1e0
[   79.176826][ T4196]  le_conn_complete_evt+0xc4b/0x15c0
[   79.182128][ T4196]  ? cs_le_create_conn+0x5e0/0x5e0
[   79.187253][ T4196]  ? __mutex_trylock_common+0x155/0x260
[   79.192818][ T4196]  hci_le_meta_evt+0x285/0x3cb0
[   79.197680][ T4196]  ? hci_event_packet+0x37e/0x1370
[   79.202803][ T4196]  ? __lock_acquire+0x7d10/0x7d10
[   79.207843][ T4196]  ? hci_remote_host_features_evt+0x290/0x290
[   79.213918][ T4196]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[   79.219561][ T4196]  ? mark_lock+0x94/0x320
[   79.223898][ T4196]  ? mutex_unlock+0x10/0x10
[   79.228408][ T4196]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[   79.234397][ T4196]  ? lock_chain_count+0x20/0x20
[   79.239260][ T4196]  ? __rwlock_init+0x140/0x140
[   79.244042][ T4196]  hci_event_packet+0xe4b/0x1370
[   79.248986][ T4196]  ? lockdep_hardirqs_on+0x94/0x140
[   79.254200][ T4196]  ? rcu_lock_release+0x20/0x20
[   79.259066][ T4196]  ? hci_send_to_monitor+0x9c/0x4a0
[   79.264290][ T4196]  hci_rx_work+0x255/0xa10
[   79.268728][ T4196]  process_one_work+0x85f/0x1010
[   79.273697][ T4196]  ? worker_detach_from_pool+0x240/0x240
[   79.279334][ T4196]  ? lockdep_hardirqs_off+0x70/0x100
[   79.284627][ T4196]  ? _raw_spin_lock_irq+0xb7/0xf0
[   79.289659][ T4196]  ? _raw_spin_lock_irqsave+0x100/0x100
[   79.295212][ T4196]  ? wq_worker_running+0x97/0x170
[   79.300264][ T4196]  worker_thread+0xaa6/0x1290
[   79.304976][ T4196]  kthread+0x436/0x520
[   79.309051][ T4196]  ? rcu_lock_release+0x20/0x20
[   79.313908][ T4196]  ? kthread_blkcg+0xd0/0xd0
[   79.318508][ T4196]  ret_from_fork+0x1f/0x30
[   79.322947][ T4196]  </TASK>
[   79.330645][ T4196] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[   79.344542][ T4196] Bluetooth: hci0: failed to register connection device
[   79.737697][ T4654] device macvlan0 entered promiscuous mode
[   79.943231][ T4654] netlink: 'syz.0.118': attribute type 1 has an invalid length.
[   80.139273][ T4654] netlink: 'syz.0.118': attribute type 2 has an invalid length.
[   81.327770][ T4693] netlink: 32 bytes leftover after parsing attributes in process `syz.2.129'.
[   81.641752][ T4704] device syzkaller0 entered promiscuous mode
[   81.844204][ T4712] hub 8-0:1.0: USB hub found
[   81.850531][ T4712] hub 8-0:1.0: 1 port detected
[   82.739905][ T1325] Bluetooth: hci5: command 0x1003 tx timeout
[   82.761708][ T4196] Bluetooth: hci5: sending frame failed (-49)
[   83.864749][ T4745] loop0: detected capacity change from 0 to 512
[   83.942727][ T4745] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   84.144593][ T4761] tipc: Can't bind to reserved service type 1
[   84.258408][ T4763] loop2: detected capacity change from 0 to 256
[   84.485159][ T4763] FAT-fs (loop2): Directory bread(block 64) failed
[   84.492306][ T4763] FAT-fs (loop2): Directory bread(block 65) failed
[   84.499458][ T4763] FAT-fs (loop2): Directory bread(block 66) failed
[   84.506238][ T4763] FAT-fs (loop2): Directory bread(block 67) failed
[   84.513344][ T4763] FAT-fs (loop2): Directory bread(block 68) failed
[   84.520011][ T4763] FAT-fs (loop2): Directory bread(block 69) failed
[   84.527110][ T4763] FAT-fs (loop2): Directory bread(block 70) failed
[   84.533838][ T4763] FAT-fs (loop2): Directory bread(block 71) failed
[   84.540850][ T4763] FAT-fs (loop2): Directory bread(block 72) failed
[   84.547583][ T4763] FAT-fs (loop2): Directory bread(block 73) failed
[   84.783601][ T4234] Bluetooth: hci5: command 0x1001 tx timeout
[   84.980828][ T4196] Bluetooth: hci5: sending frame failed (-49)
[   85.082017][ T4766] loop1: detected capacity change from 0 to 512
[   86.471546][ T4766] EXT4-fs (loop1): 1 truncate cleaned up
[   86.533542][ T4766] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,,errors=continue. Quota mode: none.
[   86.598229][   T26] kauditd_printk_skb: 3 callbacks suppressed
[   86.598243][   T26] audit: type=1800 audit(1780820891.101:15): pid=4766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.150" name="file0" dev="loop1" ino=13 res=0 errno=0
[   86.599100][ T4766] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.150: invalid indirect mapped block 234881024 (level 0)
[   86.839493][ T4789] loop2: detected capacity change from 0 to 8
[   86.894408][ T4791] loop0: detected capacity change from 0 to 1024
[   87.023680][ T4231] Bluetooth: hci5: command 0x1009 tx timeout
[   87.070594][ T4791] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[   87.333418][ T4791] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,bsddf,sysvgroups,resuid=0x000000000000ee01,sysvgroups,nodelalloc,journal_dev=0x0000000000000001,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[   88.969394][ T4827] loop1: detected capacity change from 0 to 8192
[   89.058610][ T4832] loop4: detected capacity change from 0 to 8
[   89.333897][ T4848] loop0: detected capacity change from 0 to 8
[   89.395381][ T4851] binder: 4843:4851 unknown command 1074553619
[   89.407225][ T4851] binder: 4843:4851 ioctl c0306201 200000000040 returned -22
[   89.418862][ T4848] SQUASHFS error: zlib decompression failed, data probably corrupt
[   89.427809][ T4851] binder: 4843:4851 unknown command 1074553620
[   89.434501][ T4848] SQUASHFS error: Failed to read block 0x4de: -5
[   89.438755][ T4851] binder: 4843:4851 ioctl c0306201 200000000640 returned -22
[   89.446006][ T4848] SQUASHFS error: Failed to read block 0x4e2: -5
[   89.455680][ T4848] SQUASHFS error: Failed to read block 0x9ca: -5
[   89.463785][ T4848] SQUASHFS error: Failed to read block 0x2cf2: -5
[   89.477857][ T4848] SQUASHFS error: Failed to read block 0x52cf2: -5
[   89.487165][ T4848] SQUASHFS error: Failed to read block 0x535f2: -5
[   89.526785][   T26] audit: type=1800 audit(1780820894.031:16): pid=4848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.168" name="file1" dev="loop0" ino=5 res=0 errno=0
[   89.772446][ T4862] netlink: 36 bytes leftover after parsing attributes in process `syz.2.170'.
[   89.844033][ T4863] loop1: detected capacity change from 0 to 2048
[   90.345289][ T4863] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nolazytime,bsddf,,errors=continue. Quota mode: none.
[   90.501814][ T4863] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.616448][ T4863] fs-verity: sha512 using implementation "sha512-avx2"
[   90.684509][ T4863] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.171: bg 0: block 345: padding at end of block bitmap is not set
[   90.732341][ T4876] device syzkaller0 entered promiscuous mode
[   90.784363][ T4863] fs-verity (loop1, inode 13): Error -28 writing Merkle tree block 1
[   90.826921][ T4886] loop3: detected capacity change from 0 to 256
[   90.834493][ T4863] fs-verity (loop1, inode 13): Error -28 building Merkle tree
[   90.863119][ T4863] syz.1.171 (4863) used greatest stack depth: 20792 bytes left
[   90.906274][ T4886] FAT-fs (loop3): Unrecognized mount option "smackfsroot=check=strict" or missing value
[   90.912952][ T4889] netlink: 24 bytes leftover after parsing attributes in process `syz.2.179'.
[   91.087496][ T4894] loop4: detected capacity change from 0 to 2048
[   91.247472][ T4894]  loop4: p1 p3 < > p4 < p5 >
[   91.252527][ T4894] loop4: partition table partially beyond EOD, truncated
[   91.308152][ T4894] loop4: p1 size 33024 extends beyond EOD, truncated
[   91.431162][ T4894] loop4: p3 start 4284289 is beyond EOD, truncated
[   91.986823][ T4922] loop0: detected capacity change from 0 to 512
[   92.003923][ T4894] loop4: p5 size 33024 extends beyond EOD, truncated
[   92.235211][ T4922] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000006,,errors=continue. Quota mode: writeback.
[   92.278712][ T4922] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.424604][ T4922] syz.0.185 (4922) used greatest stack depth: 20496 bytes left
[   92.463330][ T4937] loop4: detected capacity change from 0 to 256
[   92.541144][ T4939] loop2: detected capacity change from 0 to 1024
[   92.566982][ T4937] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   92.652336][ T4947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.685325][ T4939] EXT4-fs (loop2): Ignoring removed bh option
[   92.734836][ T4939] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none.
[   93.095070][ T4956] loop1: detected capacity change from 0 to 8
[   93.128090][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   93.136893][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[   93.156610][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory
[   93.208143][ T4198] EXT4-fs error (device loop2): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /32/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   93.296999][ T4198] EXT4-fs (loop2): Remounting filesystem read-only
[   93.301904][ T4956] SQUASHFS error: Unable to read inode 0xa7
[   93.305850][ T4198] EXT4-fs error (device loop2): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /32/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   93.333074][ T4198] EXT4-fs (loop2): Remounting filesystem read-only
[   93.347070][ T4198] EXT4-fs error (device loop2): empty_inline_dir:1873: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   93.377504][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory
[   93.379698][ T4198] EXT4-fs (loop2): Remounting filesystem read-only
[   93.402813][ T4198] EXT4-fs warning (device loop2): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   93.426794][ T4198] EXT4-fs error (device loop2): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /32/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   93.491128][ T4198] EXT4-fs (loop2): Remounting filesystem read-only
[   93.516307][ T4198] EXT4-fs error (device loop2): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /32/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   93.575588][ T4198] EXT4-fs (loop2): Remounting filesystem read-only
[   93.583816][ T4198] EXT4-fs error (device loop2): empty_inline_dir:1873: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   93.654794][ T4198] EXT4-fs (loop2): Remounting filesystem read-only
[   93.674213][ T4198] EXT4-fs warning (device loop2): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   93.713277][ T4962] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   93.744962][ T4198] EXT4-fs error (device loop2): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /32/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   93.783040][ T4962] EXT4-fs (loop1): 1 truncate cleaned up
[   93.802063][ T4198] EXT4-fs (loop2): Remounting filesystem read-only
[   93.816250][ T4198] EXT4-fs error (device loop2): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /32/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   93.822848][ T4962] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   93.969290][ T4198] EXT4-fs (loop2): Remounting filesystem read-only
[   93.989905][ T4198] EXT4-fs error (device loop2): empty_inline_dir:1873: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   94.006126][ T4958] ODEBUG: Out of memory. ODEBUG disabled
[   94.018841][ T4198] EXT4-fs (loop2): Remounting filesystem read-only
[   94.027113][ T4198] EXT4-fs warning (device loop2): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   94.047457][ T4198] EXT4-fs error (device loop2): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /32/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   94.079872][ T4198] EXT4-fs (loop2): Remounting filesystem read-only
[   94.091843][ T4198] EXT4-fs warning (device loop2): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   94.114244][ T4198] EXT4-fs warning (device loop2): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   94.141695][ T4198] EXT4-fs warning (device loop2): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   94.219028][ T4198] EXT4-fs warning (device loop2): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   94.259941][ T4198] EXT4-fs warning (device loop2): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   94.290926][ T4198] EXT4-fs warning (device loop2): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   94.385353][ T4198] EXT4-fs warning (device loop2): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   94.986275][ T4977] tmpfs: Unknown parameter 'usrquota_inode_hardlimit'
[   95.038077][ T4980] set_capacity_and_notify: 1 callbacks suppressed
[   95.038092][ T4980] loop0: detected capacity change from 0 to 512
[   95.188282][ T4983] loop1: detected capacity change from 0 to 1024
[   95.327416][ T4980] EXT4-fs (loop0): Test dummy encryption mode enabled
[   95.353942][ T4980] EXT4-fs (loop0): Test dummy encryption mode enabled
[   95.384205][ T4980] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   95.412847][ T4980] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,dioread_nolock,jqfmt=vfsv1,nojournal_checksum,minixdf,barrier=0x0000000000000a18,errors=remount-ro,lazytime,test_dummy_encryption,min_batch_time=0x0000000000000004,. Quota mode: none.
[   95.550603][ T4983] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[   95.670377][ T4983] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[   95.910190][ T4313] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.984224][ T4983] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz.1.202: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[   96.024039][ T4983] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.202: couldn't read orphan inode 11 (err -117)
[   96.121699][ T4983] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,grpjquota=,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback.
[   96.234374][ T4313] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.295376][ T4983] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.202: Invalid block bitmap block 0 in block_group 0
[   96.331313][ T4980] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   96.362496][ T4980] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.205: Directory hole found for htree leaf block 0
[   96.377824][ T4983] Quota error (device loop1): write_blk: dquota write failed
[   96.402550][ T4983] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[   96.448628][ T4980] EXT4-fs (loop0): Remounting filesystem read-only
[   96.477469][ T4313] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.584956][ T4980] EXT4-fs error (device loop0): htree_dirblock_to_tree:1083: inode #2: comm syz.0.205: Directory hole found for htree leaf block 0
[   96.685085][ T4983] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.202: Failed to acquire dquot type 0
[   96.855014][ T4980] EXT4-fs (loop0): Remounting filesystem read-only
[   96.878131][ T4313] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.258244][  T146] Bluetooth: hci2: ACL packet for unknown connection handle 201
[   97.279188][ T5011] loop0: detected capacity change from 0 to 1024
[   97.403076][ T5015] loop3: detected capacity change from 0 to 1024
[   97.560912][ T5015] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,resgid=0x0000000000000000,errors=remount-ro,. Quota mode: none.
[   98.803279][ T5016] chnl_net:caif_netlink_parms(): no params data found
[   99.419042][   T26] audit: type=1326 audit(1780820903.921:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5045 comm="syz.3.219" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d6b1d7e59 code=0x0
[   99.503430][ T1108] Bluetooth: hci3: command 0x0409 tx timeout
[  100.207835][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.218606][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.228502][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.238970][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.249289][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.259751][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.269629][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.280156][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.291224][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.301761][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.398544][ T5016] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.426330][ T5016] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.514844][ T5016] device bridge_slave_0 entered promiscuous mode
[  100.530562][ T5016] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.539198][ T5016] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.547845][ T5016] device bridge_slave_1 entered promiscuous mode
[  100.655532][ T5016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.694830][ T5016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.807289][ T5089] loop0: detected capacity change from 0 to 128
[  100.812753][ T5016] team0: Port device team_slave_0 added
[  100.895555][ T5089] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  100.939201][ T5016] team0: Port device team_slave_1 added
[  100.953153][ T4958] Set syz1 is full, maxelem 65536 reached
[  100.978004][ T5089] ext4 filesystem being mounted at /57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  101.016252][ T5016] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.023292][ T5016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.049655][    C0] vkms_vblank_simulate: vblank timer overrun
[  101.124330][ T5016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.168583][ T5016] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.185958][ T5016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.268752][ T5016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.380626][ T5016] device hsr_slave_0 entered promiscuous mode
[  101.417915][ T5016] device hsr_slave_1 entered promiscuous mode
[  101.430004][ T5016] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  101.445300][ T5016] Cannot create hsr debugfs directory
[  101.583424][    T7] Bluetooth: hci3: command 0x041b tx timeout
[  101.601590][ T4313] device hsr_slave_0 left promiscuous mode
[  101.636018][ T4313] device hsr_slave_1 left promiscuous mode
[  101.644121][ T4313] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.651614][ T4313] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.702979][ T4313] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.734258][ T4313] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.772771][ T4313] device bridge_slave_1 left promiscuous mode
[  101.780947][ T4313] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.837749][ T4313] device bridge_slave_0 left promiscuous mode
[  101.845390][ T4313] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.855374][ T5124] loop3: detected capacity change from 0 to 1024
[  101.874798][ T5124] EXT4-fs (loop3): Ignoring removed bh option
[  101.900734][ T4313] device veth1_macvtap left promiscuous mode
[  101.911949][ T4313] device veth0_macvtap left promiscuous mode
[  101.922558][ T4313] device veth1_vlan left promiscuous mode
[  101.928828][ T4313] device veth0_vlan left promiscuous mode
[  101.940389][ T5124] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none.
[  102.147819][ T4200] EXT4-fs error (device loop3): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /41/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  102.183785][ T4200] EXT4-fs (loop3): Remounting filesystem read-only
[  102.200211][ T4200] EXT4-fs error (device loop3): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /41/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  102.236710][ T4200] EXT4-fs (loop3): Remounting filesystem read-only
[  102.244851][ T4200] EXT4-fs error (device loop3): empty_inline_dir:1873: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  102.271907][ T4200] EXT4-fs (loop3): Remounting filesystem read-only
[  102.278667][ T4200] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  102.301658][ T4200] EXT4-fs error (device loop3): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /41/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  102.330184][ T4200] EXT4-fs (loop3): Remounting filesystem read-only
[  102.336955][ T4200] EXT4-fs error (device loop3): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /41/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  102.390751][ T4200] EXT4-fs (loop3): Remounting filesystem read-only
[  102.398326][ T4200] EXT4-fs error (device loop3): empty_inline_dir:1873: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  102.420198][ T4200] EXT4-fs (loop3): Remounting filesystem read-only
[  102.422006][ T4313] team0 (unregistering): Port device team_slave_1 removed
[  102.434972][ T4200] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  102.449805][ T4200] EXT4-fs error (device loop3): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /41/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  102.456614][ T4313] team0 (unregistering): Port device team_slave_0 removed
[  102.472314][ T4200] EXT4-fs (loop3): Remounting filesystem read-only
[  102.486001][ T4200] EXT4-fs error (device loop3): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /41/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  102.508828][ T4313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.518177][ T4200] EXT4-fs (loop3): Remounting filesystem read-only
[  102.529559][ T4200] EXT4-fs error (device loop3): empty_inline_dir:1873: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  102.549208][    C0] vkms_vblank_simulate: vblank timer overrun
[  102.559690][ T4313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  102.583832][ T4200] EXT4-fs (loop3): Remounting filesystem read-only
[  102.590590][ T4200] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  102.616421][ T4200] EXT4-fs error (device loop3): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /41/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  102.639281][ T4200] EXT4-fs (loop3): Remounting filesystem read-only
[  102.646895][ T4200] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  102.648060][ T4313] bond0 (unregistering): Released all slaves
[  102.662908][ T4200] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  102.683041][ T4200] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  102.699108][ T4200] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  102.716175][ T4200] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  102.731882][ T4200] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  102.748953][ T4200] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  103.696605][    T7] Bluetooth: hci3: command 0x040f tx timeout
[  104.428505][ T5154] chnl_net:caif_netlink_parms(): no params data found
[  104.504006][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.511295][ T5154] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.544045][ T5154] device bridge_slave_0 entered promiscuous mode
[  104.574632][ T5154] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.581780][ T5154] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.604387][ T5154] device bridge_slave_1 entered promiscuous mode
[  104.644715][ T5154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.657135][ T5154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.685909][ T5154] team0: Port device team_slave_0 added
[  104.694937][ T5154] team0: Port device team_slave_1 added
[  104.722965][ T5113] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  104.750692][ T5154] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.780197][ T5154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.865666][ T5154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.917441][ T5016] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  104.943053][ T5154] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.963590][ T5154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.063407][ T5154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.104791][ T5016] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  105.127880][ T5016] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  105.230810][ T5016] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  105.257008][ T5154] device hsr_slave_0 entered promiscuous mode
[  105.259332][ T5172] loop4: detected capacity change from 0 to 128
[  105.313865][ T5154] device hsr_slave_1 entered promiscuous mode
[  105.362648][ T5172] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  105.373891][ T5172] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  105.678098][ T5016] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.743676][ T4194] Bluetooth: hci3: command 0x0419 tx timeout
[  105.784683][ T5016] 8021q: adding VLAN 0 to HW filter on device team0
[  105.808019][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  105.903743][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  105.992459][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  106.001871][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  106.010438][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.017543][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.303473][   T21] Bluetooth: hci4: command 0x0409 tx timeout
[  106.764448][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  106.772718][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  106.856746][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  106.873579][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.880674][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.913669][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  106.933904][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  106.982613][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  107.146958][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  107.194404][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  107.251190][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  107.294620][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  107.331315][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  107.413657][ T5154] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  107.502978][ T5016] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  107.504779][  T146] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  107.523233][  T146] CPU: 0 PID: 146 Comm: kworker/u5:0 Not tainted syzkaller #0
[  107.530710][  T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  107.540775][  T146] Workqueue: hci0 hci_rx_work
[  107.545478][  T146] Call Trace:
[  107.548767][  T146]  <TASK>
[  107.551702][  T146]  dump_stack_lvl+0x188/0x250
[  107.554080][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  107.556390][  T146]  ? show_regs_print_info+0x20/0x20
[  107.568676][  T146]  ? load_image+0x400/0x400
[  107.573199][  T146]  sysfs_create_dir_ns+0x26a/0x290
[  107.578329][  T146]  ? sysfs_warn_dup+0xa0/0xa0
[  107.583013][  T146]  ? process_one_work+0x85f/0x1010
[  107.588132][  T146]  ? do_raw_spin_unlock+0x11d/0x230
[  107.593340][  T146]  kobject_add_internal+0x6e0/0xd90
[  107.598588][  T146]  kobject_add+0x160/0x230
[  107.603019][  T146]  ? kobject_init+0x1d0/0x1d0
[  107.607700][  T146]  ? klist_children_get+0x50/0x50
[  107.612724][  T146]  ? get_device_parent+0x121/0x3f0
[  107.616092][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  107.617848][  T146]  device_add+0x48c/0x1000
[  107.617881][  T146]  hci_conn_add_sysfs+0xd1/0x1e0
[  107.617904][  T146]  le_conn_complete_evt+0xc4b/0x15c0
[  107.617935][  T146]  ? cs_le_create_conn+0x5e0/0x5e0
[  107.617960][  T146]  ? __mutex_trylock_common+0x155/0x260
[  107.617988][  T146]  hci_le_meta_evt+0xd62/0x3cb0
[  107.618009][  T146]  ? hci_event_packet+0x37e/0x1370
[  107.618030][  T146]  ? __lock_acquire+0x7d10/0x7d10
[  107.618059][  T146]  ? hci_remote_host_features_evt+0x290/0x290
[  107.618078][  T146]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  107.618100][  T146]  ? mark_lock+0x94/0x320
[  107.618116][  T146]  ? mutex_unlock+0x10/0x10
[  107.618135][  T146]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  107.618158][  T146]  ? lock_chain_count+0x20/0x20
[  107.618178][  T146]  ? __rwlock_init+0x140/0x140
[  107.618200][  T146]  hci_event_packet+0xe4b/0x1370
[  107.618217][  T146]  ? lockdep_hardirqs_on+0x94/0x140
[  107.618243][  T146]  ? rcu_lock_release+0x20/0x20
[  107.618267][  T146]  ? hci_send_to_monitor+0x9c/0x4a0
[  107.618298][  T146]  hci_rx_work+0x255/0xa10
[  107.618331][  T146]  process_one_work+0x85f/0x1010
[  107.618365][  T146]  ? worker_detach_from_pool+0x240/0x240
[  107.618382][  T146]  ? lockdep_hardirqs_off+0x70/0x100
[  107.618405][  T146]  ? _raw_spin_lock_irq+0xb7/0xf0
[  107.652459][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  107.655624][  T146]  ? _raw_spin_lock_irqsave+0x100/0x100
[  107.655652][  T146]  ? wq_worker_running+0x97/0x170
[  107.655673][  T146]  worker_thread+0xaa6/0x1290
[  107.690580][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  107.692213][  T146]  kthread+0x436/0x520
[  107.782365][  T146]  ? rcu_lock_release+0x20/0x20
[  107.787230][  T146]  ? kthread_blkcg+0xd0/0xd0
[  107.791839][  T146]  ret_from_fork+0x1f/0x30
[  107.796272][  T146]  </TASK>
[  107.805892][  T146] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  107.812800][ T5154] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  107.819809][  T146] Bluetooth: hci0: failed to register connection device
[  107.896872][ T5154] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  107.932789][ T5154] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  108.773946][ T1325] Bluetooth: hci4: command 0x041b tx timeout
[  110.227716][ T5245] loop4: detected capacity change from 0 to 128
[  110.384424][ T5245] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  110.423492][ T5245] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  110.578336][ T5245] fscrypt (loop4, inode 12): Direct key flag not allowed with different contents and filenames modes
[  110.617802][ T4313] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.722081][ T4313] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.805302][ T4313] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.173245][ T5016] 8021q: adding VLAN 0 to HW filter on device batadv0
[  111.208260][ T4233] Bluetooth: hci4: command 0x040f tx timeout
[  111.224414][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  111.287636][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  111.517456][ T5264] tipc: Started in network mode
[  111.522939][ T5264] tipc: Node identity 4, cluster identity 6
[  111.613968][ T5264] tipc: Node number set to 4
[  111.738575][ T5154] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.927216][ T4313] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.998985][ T5154] 8021q: adding VLAN 0 to HW filter on device team0
[  112.062828][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  112.101738][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  112.144454][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  112.204325][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  112.280804][ T4427] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.287937][ T4427] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.102140][ T5294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.143671][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  113.158561][ T5292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.331577][    T7] Bluetooth: hci4: command 0x0419 tx timeout
[  113.366336][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  113.386798][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  113.411966][ T4310] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.419143][ T4310] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.437372][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  113.480453][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  113.498910][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  113.517031][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  113.530557][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  113.542357][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  113.557195][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  113.571324][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  113.582490][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  113.601835][ T5304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'.
[  113.631963][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  113.649478][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  113.691314][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  113.709414][ T5314] loop1: detected capacity change from 0 to 256
[  113.735055][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  113.754278][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  113.836949][ T5314] FAT-fs (loop1): Directory bread(block 64) failed
[  113.849174][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  113.875344][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  113.897184][ T5314] FAT-fs (loop1): Directory bread(block 65) failed
[  113.919917][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  113.935261][ T5314] FAT-fs (loop1): Directory bread(block 66) failed
[  113.946889][ T5324] loop0: detected capacity change from 0 to 128
[  113.989603][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  114.005150][ T5314] FAT-fs (loop1): Directory bread(block 67) failed
[  114.008615][ T5324] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  114.012440][ T5314] FAT-fs (loop1): Directory bread(block 68) failed
[  114.035541][ T4313] tipc: Left network mode
[  114.040528][ T5016] device veth0_vlan entered promiscuous mode
[  114.047530][ T5314] FAT-fs (loop1): Directory bread(block 69) failed
[  114.062861][ T5314] FAT-fs (loop1): Directory bread(block 70) failed
[  114.075286][ T5314] FAT-fs (loop1): Directory bread(block 71) failed
[  114.089332][ T5016] device veth1_vlan entered promiscuous mode
[  114.093100][ T5314] FAT-fs (loop1): Directory bread(block 72) failed
[  114.114439][ T5314] FAT-fs (loop1): Directory bread(block 73) failed
[  114.194911][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  114.216853][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  114.266366][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  114.315390][ T4245] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  114.319772][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  114.361356][ T5016] device veth0_macvtap entered promiscuous mode
[  114.419214][ T5154] 8021q: adding VLAN 0 to HW filter on device batadv0
[  114.431181][ T5016] device veth1_macvtap entered promiscuous mode
[  114.466368][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  114.475365][ T5339] loop1: detected capacity change from 0 to 256
[  114.486884][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  114.505210][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  114.512926][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  114.524541][ T5336] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.532089][ T5336] device batadv_slave_1 entered promiscuous mode
[  114.540902][ T5336] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.581255][ T5339] FAT-fs (loop1): Directory bread(block 64) failed
[  114.612552][ T5339] FAT-fs (loop1): Directory bread(block 65) failed
[  114.619442][ T5339] FAT-fs (loop1): Directory bread(block 66) failed
[  114.642074][ T5016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.658722][ T5339] FAT-fs (loop1): Directory bread(block 67) failed
[  114.675596][ T5016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.698441][ T5339] FAT-fs (loop1): Directory bread(block 68) failed
[  114.711723][ T5016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.722934][ T5344] loop0: detected capacity change from 0 to 512
[  114.729331][ T5339] FAT-fs (loop1): Directory bread(block 69) failed
[  114.736342][ T5016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.746640][ T5339] FAT-fs (loop1): Directory bread(block 70) failed
[  114.753291][ T5339] FAT-fs (loop1): Directory bread(block 71) failed
[  114.760041][ T5016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.770760][ T5339] FAT-fs (loop1): Directory bread(block 72) failed
[  114.777451][ T5016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.787728][ T5339] FAT-fs (loop1): Directory bread(block 73) failed
[  114.795589][ T5016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.807964][ T5016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.821637][ T5016] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.837347][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  114.874940][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  114.905919][ T5344] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  114.926572][ T5016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.960158][ T5344] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  114.978610][ T5016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.012025][ T5016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.029706][ T5016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.039930][ T5016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.053905][ T5016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.081558][ T5016] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.121003][ T5358] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  115.144539][ T5353] loop1: detected capacity change from 0 to 256
[  115.168904][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  115.182788][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  115.332653][ T5154] device veth0_vlan entered promiscuous mode
[  115.364442][ T5016] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.373184][ T5016] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.382272][ T5016] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.383584][ T5353] FAT-fs (loop1): Directory bread(block 64) failed
[  115.445997][ T5353] FAT-fs (loop1): Directory bread(block 65) failed
[  115.466087][ T5016] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.487859][ T5353] FAT-fs (loop1): Directory bread(block 66) failed
[  115.520313][ T4190] VFS: Lookup of '��' in ext4 loop0 would have caused loop
[  115.556388][ T4190] VFS: Lookup of '��' in ext4 loop0 would have caused loop
[  115.582914][ T5353] FAT-fs (loop1): Directory bread(block 67) failed
[  115.678883][ T5353] FAT-fs (loop1): Directory bread(block 68) failed
[  115.773054][ T5353] FAT-fs (loop1): Directory bread(block 69) failed
[  115.872036][ T5353] FAT-fs (loop1): Directory bread(block 70) failed
[  116.006599][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  116.023388][ T5353] FAT-fs (loop1): Directory bread(block 71) failed
[  116.030309][ T5353] FAT-fs (loop1): Directory bread(block 72) failed
[  116.063971][ T5353] FAT-fs (loop1): Directory bread(block 73) failed
[  116.084239][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  116.112074][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  116.121160][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  116.247729][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  116.247958][ T5373] loop4: detected capacity change from 0 to 1024
[  116.275075][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  116.315540][ T5154] device veth1_vlan entered promiscuous mode
[  116.341928][ T5373] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none.
[  116.364493][ T5373] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.581573][ T4257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.584627][  T154] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: comm kworker/u4:2: lblock 0 mapped to illegal pblock 0 (length 1)
[  116.598704][ T4257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.605807][  T154] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  116.624875][  T154] EXT4-fs (loop4): This should not happen!! Data will be lost
[  116.624875][  T154] 
[  116.640438][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  116.691250][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  116.700645][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  116.732065][ T5154] device veth0_macvtap entered promiscuous mode
[  116.739177][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.767922][ T5154] device veth1_macvtap entered promiscuous mode
[  116.773486][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.819140][ T5154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.850645][ T5154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.860830][ T5154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.871732][ T5154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.891223][ T5154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.909034][ T5154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.936178][ T5154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.953336][ T5154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.963183][ T5154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.993357][ T5154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.040112][ T5393] loop4: detected capacity change from 0 to 512
[  117.042266][ T5154] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.080502][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  117.090124][ T5393] EXT4-fs (loop4): Unrecognized mount option "smackfsfloor=quota" or missing value
[  117.103232][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  117.120726][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  117.137043][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  117.152845][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  117.185793][ T5154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.216257][ T5154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.316369][ T5154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.335292][ T5405] loop1: detected capacity change from 0 to 128
[  117.336528][ T5154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.352659][ T5154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.365779][ T5154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.376462][ T5154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.387173][ T5154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.404673][ T5154] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.473434][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  117.502388][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  117.544209][ T5154] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.573438][ T5154] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.582180][ T5154] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.608539][ T5154] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.638822][ T5405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.301'.
[  118.036471][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.093637][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.154411][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  118.179108][ T4426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.191927][ T4426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.263454][ T4313] device hsr_slave_0 left promiscuous mode
[  118.310354][ T4313] device hsr_slave_1 left promiscuous mode
[  118.333092][ T4313] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  118.342343][ T5441] loop5: detected capacity change from 0 to 256
[  118.349159][ T4313] batman_adv: batadv0: Removing interface: batadv_slave_0
[  118.371907][ T4313] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  118.384709][ T4313] batman_adv: batadv0: Removing interface: batadv_slave_1
[  118.404060][ T4313] device bridge_slave_1 left promiscuous mode
[  118.410296][ T4313] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.436178][ T4313] device bridge_slave_0 left promiscuous mode
[  118.452604][ T4313] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.505868][ T4313] device veth1_macvtap left promiscuous mode
[  118.511921][ T4313] device veth0_macvtap left promiscuous mode
[  118.563836][ T4313] device veth1_vlan left promiscuous mode
[  118.569651][ T4313] device veth0_vlan left promiscuous mode
[  119.081363][ T4313] team0 (unregistering): Port device team_slave_1 removed
[  119.112065][ T4313] team0 (unregistering): Port device team_slave_0 removed
[  119.144757][ T4313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  119.162780][ T4313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  119.261499][ T4313] bond0 (unregistering): Released all slaves
[  119.334957][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  119.343538][ T1108] Bluetooth: hci2: command 0x0409 tx timeout
[  119.355877][ T5396] chnl_net:caif_netlink_parms(): no params data found
[  119.843815][ T5467] syz.1.317 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  119.890179][ T5396] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.899752][ T5396] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.806268][ T5396] device bridge_slave_0 entered promiscuous mode
[  120.889892][ T5396] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.941412][ T5396] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.968867][ T5396] device bridge_slave_1 entered promiscuous mode
[  121.024665][ T5476] device vlan0 entered promiscuous mode
[  121.148740][ T5476] team0: Port device vlan0 added
[  121.160142][ T5483] process 'syz.6.320' launched './file0' with NULL argv: empty string added
[  121.295100][ T5478] team0: Port device vlan0 removed
[  121.423875][ T1108] Bluetooth: hci2: command 0x041b tx timeout
[  121.441895][ T5396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  121.486404][ T5396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  121.600958][ T5396] team0: Port device team_slave_0 added
[  121.662279][ T5396] team0: Port device team_slave_1 added
[  121.773814][ T5396] batman_adv: batadv0: Adding interface: batadv_slave_0
[  121.793414][ T5396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.869658][ T5510] loop6: detected capacity change from 0 to 256
[  121.937029][ T5512] tmpfs: Bad value for 'huge'
[  122.014718][ T5513] mmap: syz.5.325 (5513) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  122.271524][ T5510] FAT-fs (loop6): "posix" option is obsolete, not supported now
[  122.459782][ T5396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  122.501915][ T5512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.325'.
[  122.510935][ T5512] netlink: 43 bytes leftover after parsing attributes in process `syz.5.325'.
[  122.599887][ T5396] batman_adv: batadv0: Adding interface: batadv_slave_1
[  122.610883][ T5396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.486277][ T5396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  124.169498][ T4194] Bluetooth: hci2: command 0x040f tx timeout
[  124.372448][ T5541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.335'.
[  124.414201][ T5541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.335'.
[  124.440060][ T5541] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  124.449340][ T5541] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  124.458153][ T5541] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  124.466908][ T5541] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  124.526659][ T5396] device hsr_slave_0 entered promiscuous mode
[  124.555650][ T5396] device hsr_slave_1 entered promiscuous mode
[  124.594525][ T5396] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  124.619882][ T5396] Cannot create hsr debugfs directory
[  124.769371][ T5558] vivid-001: disconnect
[  124.812662][ T5557] vivid-001: reconnect
[  125.734710][ T5567] loop6: detected capacity change from 0 to 1024
[  125.848411][ T5575] loop5: detected capacity change from 0 to 256
[  125.954392][ T5567] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier,init_itable,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  125.997460][ T5567] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  126.028379][ T5396] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  126.038400][ T5396] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  126.047770][ T5396] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  126.057846][ T5396] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  126.165303][ T5575] FAT-fs (loop5): Directory bread(block 64) failed
[  126.171867][ T5575] FAT-fs (loop5): Directory bread(block 65) failed
[  126.360251][ T5575] FAT-fs (loop5): Directory bread(block 66) failed
[  126.521080][ T5575] FAT-fs (loop5): Directory bread(block 67) failed
[  126.677373][ T5575] FAT-fs (loop5): Directory bread(block 68) failed
[  126.813416][ T5575] FAT-fs (loop5): Directory bread(block 69) failed
[  126.879332][ T1108] Bluetooth: hci2: command 0x0419 tx timeout
[  126.892489][ T5575] FAT-fs (loop5): Directory bread(block 70) failed
[  126.899195][ T5575] FAT-fs (loop5): Directory bread(block 71) failed
[  126.904090][ T5396] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.906110][ T5575] FAT-fs (loop5): Directory bread(block 72) failed
[  126.949210][ T5575] FAT-fs (loop5): Directory bread(block 73) failed
[  127.019288][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  127.054034][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  127.097328][ T5396] 8021q: adding VLAN 0 to HW filter on device team0
[  127.157858][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  127.194218][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  127.224054][ T4257] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.231133][ T4257] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.417212][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  127.440727][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  132.868656][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.875010][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  132.939868][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  132.963509][ T4427] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.970585][ T4427] bridge0: port 2(bridge_slave_1) entered forwarding state
[  132.978259][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  133.001714][ T5396] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  133.012755][ T5396] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  133.083587][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  133.099701][ T5620] loop5: detected capacity change from 0 to 2048
[  133.105078][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  133.158803][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  133.194142][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  133.253411][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  133.262249][ T5620] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  133.296720][ T5620] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  133.329712][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  133.376077][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  133.439581][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  133.469289][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  133.525397][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  133.565317][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  133.590118][ T5631] team0: Device vlan0 is up. Set it down before adding it as a team port
[  135.360081][ T5396] 8021q: adding VLAN 0 to HW filter on device batadv0
[  135.613691][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  135.627089][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  135.759049][ T5671] device syzkaller0 entered promiscuous mode
[  136.470852][ T5684] loop5: detected capacity change from 0 to 128
[  136.651375][ T5658] netlink: 'syz.1.363': attribute type 4 has an invalid length.
[  136.766147][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  136.781601][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  136.813041][ T5396] device veth0_vlan entered promiscuous mode
[  136.844598][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  136.864287][ T5695] loop1: detected capacity change from 0 to 2048
[  136.874554][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  136.929176][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  136.941371][ T5699] loop5: detected capacity change from 0 to 256
[  136.968157][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  137.017287][ T5700] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  137.038661][ T5700] overlayfs: failed to set xattr on upper
[  137.050384][ T5700] overlayfs: ...falling back to index=off,metacopy=off.
[  137.131957][ T5396] device veth1_vlan entered promiscuous mode
[  137.314497][ T5695] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  137.380611][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  137.396690][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  137.472202][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  137.522251][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  137.570493][ T5396] device veth0_macvtap entered promiscuous mode
[  137.580923][ T5396] device veth1_macvtap entered promiscuous mode
[  137.631580][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  137.643443][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.667795][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  137.696925][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.987621][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  138.423338][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.433235][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  140.639839][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.649781][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  140.660289][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.671844][ T5396] batman_adv: batadv0: Interface activated: batadv_slave_0
[  140.781546][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.819477][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.851125][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.927787][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.969904][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.031452][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.226758][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.269961][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.304642][ T5396] batman_adv: batadv0: Interface activated: batadv_slave_1
[  141.551716][ T4313] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.569810][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  141.577958][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  141.587332][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  141.596562][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  141.605397][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  141.614588][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  141.626766][ T5738] netlink: 'syz.4.379': attribute type 4 has an invalid length.
[  141.754395][ T5755] loop4: detected capacity change from 0 to 256
[  141.770857][ T5753] loop1: detected capacity change from 0 to 512
[  141.793471][ T5751] netlink: 'syz.5.384': attribute type 10 has an invalid length.
[  141.834606][ T5755] FAT-fs (loop4): Directory bread(block 64) failed
[  141.844715][ T5753] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  141.867416][ T5755] FAT-fs (loop4): Directory bread(block 65) failed
[  141.880159][ T5755] FAT-fs (loop4): Directory bread(block 66) failed
[  141.899979][ T5751] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  141.944316][ T5396] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.976880][ T5755] FAT-fs (loop4): Directory bread(block 67) failed
[  141.982272][ T5396] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.999325][ T5755] FAT-fs (loop4): Directory bread(block 68) failed
[  142.008485][ T5396] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  142.029613][ T5753] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[  142.038640][ T5753] System zones: 1-12
[  142.047863][ T5396] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  142.053871][ T5755] FAT-fs (loop4): Directory bread(block 69) failed
[  142.074757][ T4313] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.094122][ T5758] loop6: detected capacity change from 0 to 512
[  142.103929][ T5755] FAT-fs (loop4): Directory bread(block 70) failed
[  142.113930][ T5755] FAT-fs (loop4): Directory bread(block 71) failed
[  142.120539][ T5755] FAT-fs (loop4): Directory bread(block 72) failed
[  142.122844][ T5753] EXT4-fs (loop1): 1 truncate cleaned up
[  142.128084][ T5755] FAT-fs (loop4): Directory bread(block 73) failed
[  142.164433][ T5753] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none.
[  142.165758][ T4313] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.291814][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.303461][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.319262][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  142.342694][ T5758] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback.
[  142.424934][ T5758] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.460857][ T4313] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.613235][ T5515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.639011][ T5515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.648650][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  146.978051][ T5828] netlink: 'syz.7.396': attribute type 4 has an invalid length.
[  148.312863][ T4230] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  148.344906][ T5854] overlayfs: failed to clone upperpath
[  148.442077][ T4230] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  149.261663][ T5875] loop6: detected capacity change from 0 to 512
[  149.361544][ T5875] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  149.401347][ T5875] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[  149.412973][ T5875] System zones: 1-12
[  149.462216][ T5865] fido_id[5865]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  149.490244][ T5875] EXT4-fs (loop6): 1 truncate cleaned up
[  149.496089][ T5875] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,stripe=0x00000000000000b9,,errors=continue. Quota mode: none.
[  149.508109][ T5886] loop5: detected capacity change from 0 to 512
[  150.565184][ T5906] fuse: Bad value for 'fd'
[  150.637291][ T5886] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback.
[  150.654752][ T5886] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.767759][ T4313] device hsr_slave_0 left promiscuous mode
[  150.905569][ T4313] device hsr_slave_1 left promiscuous mode
[  150.987393][ T4313] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  151.006627][ T4313] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.036387][ T4313] device bridge_slave_1 left promiscuous mode
[  151.411217][ T5928] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  151.815012][ T4313] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.061434][ T4313] device bridge_slave_0 left promiscuous mode
[  152.099686][ T4313] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.122382][ T5935] loop7: detected capacity change from 0 to 128
[  152.251433][ T4313] device veth1_macvtap left promiscuous mode
[  152.265497][ T4313] device veth0_macvtap left promiscuous mode
[  152.271800][ T4313] device veth1_vlan left promiscuous mode
[  152.873368][ T5935] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  153.225134][ T4313] device veth0_vlan left promiscuous mode
[  153.255537][ T5935] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  154.387102][ T5957] input: syz1 as /devices/virtual/input/input6
[  154.511953][ T4313] team0 (unregistering): Port device team_slave_1 removed
[  154.535241][ T4313] team0 (unregistering): Port device team_slave_0 removed
[  154.789954][ T4313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  154.813665][ T4313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  155.018342][ T4313] bond0 (unregistering): Released all slaves
[  155.082403][ T5974] netlink: 'syz.6.442': attribute type 10 has an invalid length.
[  155.175939][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.217847][ T5974] device bridge_slave_1 left promiscuous mode
[  155.240818][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.313046][ T5974] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  155.341357][ T5982] loop4: detected capacity change from 0 to 8
[  155.363973][    C0] Illegal XDP return value 16128, expect packet loss!
[  155.962532][ T6006] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  156.279858][ T6017] loop7: detected capacity change from 0 to 512
[  157.663122][ T6017] EXT4-fs (loop7): Ignoring removed mblk_io_submit option
[  157.670482][ T6017] EXT4-fs (loop7): inline encryption not supported
[  157.677101][ T6017] EXT4-fs (loop7): Ignoring removed mblk_io_submit option
[  157.684363][ T6017] EXT4-fs (loop7): Ignoring removed mblk_io_submit option
[  157.691965][ T6017] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  157.903990][ T6017] EXT4-fs (loop7): 1 truncate cleaned up
[  157.909753][ T6017] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,mblk_io_submit,barrier,mblk_io_submit,nogrpid,. Quota mode: none.
[  160.807496][ T6079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.475'.
[  161.946625][ T6121] device syzkaller0 entered promiscuous mode
[  161.960990][ T6130] fuse: Bad value for 'fd'
[  162.805961][ T6136] input: syz1 as /devices/virtual/input/input7
[  163.657578][ T6168] netlink: 'syz.6.501': attribute type 4 has an invalid length.
��	+}q���������@�!$[  164.184035][ T6193] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5154] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           
[  166.790064][ T6232] input: syz1 as /devices/virtual/input/input8
[  166.959454][ T6240] netlink: 'syz.5.519': attribute type 4 has an invalid length.
[  167.317978][ T6254] loop5: detected capacity change from 0 to 4096
[  167.422041][ T6254] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  167.525197][ T6254] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #15: comm syz.5.525: corrupted inode contents
[  167.543870][ T6254] EXT4-fs error (device loop5): ext4_dirty_inode:6077: inode #15: comm syz.5.525: mark_inode_dirty error
[  167.581708][ T6254] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #15: comm syz.5.525: corrupted inode contents
[  167.607449][ T6254] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #15: comm syz.5.525: mark_inode_dirty error
[  167.626000][ T6254] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #15: comm syz.5.525: corrupted inode contents
[  167.643077][ T6254] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #15: comm syz.5.525: mark_inode_dirty error
[  167.660965][ T6254] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #15: comm syz.5.525: corrupted inode contents
[  167.680393][ T6254] EXT4-fs error (device loop5): ext4_truncate:4286: inode #15: comm syz.5.525: mark_inode_dirty error
[  167.700363][ T6254] EXT4-fs error (device loop5) in ext4_setattr:5645: Corrupt filesystem
[  167.730850][ T6267] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #15: comm syz.5.525: corrupted inode contents
[  167.744671][ T6250] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.752142][ T6250] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.801290][ T5016] EXT4-fs warning (device loop5): ext4_evict_inode:287: couldn't mark inode dirty (err -117)
[  168.222168][ T6250] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  168.260854][ T6250] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  168.546938][ T6250] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.556101][ T6250] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.565010][ T6250] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.573941][ T6250] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.664516][ T6250] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 1038 - 0
[  168.673490][ T6250] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 1038 - 0
[  168.682347][ T6250] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 1038 - 0
[  168.691966][ T6250] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 1038 - 0
[  168.795356][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.5.529'.
[  168.819431][ T6281] netlink: 20 bytes leftover after parsing attributes in process `syz.5.529'.
[  168.859821][ T6289] input: syz1 as /devices/virtual/input/input9
[  168.874050][ T6281] device geneve2 entered promiscuous mode
[  169.144524][ T6299] loop4: detected capacity change from 0 to 256
[  169.328906][ T6299] FAT-fs (loop4): Directory bread(block 64) failed
[  169.335760][ T6299] FAT-fs (loop4): Directory bread(block 65) failed
[  169.342705][ T6299] FAT-fs (loop4): Directory bread(block 66) failed
[  169.349541][ T6299] FAT-fs (loop4): Directory bread(block 67) failed
[  169.356494][ T6299] FAT-fs (loop4): Directory bread(block 68) failed
[  169.363148][ T6299] FAT-fs (loop4): Directory bread(block 69) failed
[  169.370318][ T6299] FAT-fs (loop4): Directory bread(block 70) failed
[  169.377069][ T6299] FAT-fs (loop4): Directory bread(block 71) failed
[  169.384050][ T6299] FAT-fs (loop4): Directory bread(block 72) failed
[  169.390678][ T6299] FAT-fs (loop4): Directory bread(block 73) failed
[  171.249773][ T6324] loop5: detected capacity change from 0 to 512
[  171.910041][ T6324] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,grpquota,,errors=continue. Quota mode: writeback.
[  171.961738][ T6324] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.173551][ T6347] fuse: Bad value for 'fd'
[  174.098459][ T6359] syz.7.552 sent an empty control message without MSG_MORE.
[  174.115060][ T6365] loop6: detected capacity change from 0 to 256
[  174.357839][ T6365] FAT-fs (loop6): Directory bread(block 64) failed
[  174.405604][ T6365] FAT-fs (loop6): Directory bread(block 65) failed
[  174.456224][ T6365] FAT-fs (loop6): Directory bread(block 66) failed
[  174.462802][ T6365] FAT-fs (loop6): Directory bread(block 67) failed
[  174.506290][ T6365] FAT-fs (loop6): Directory bread(block 68) failed
[  174.515832][ T6365] FAT-fs (loop6): Directory bread(block 69) failed
[  174.545069][ T6385] loop7: detected capacity change from 0 to 128
[  174.562867][ T6365] FAT-fs (loop6): Directory bread(block 70) failed
[  174.917954][ T6365] FAT-fs (loop6): Directory bread(block 71) failed
[  175.255786][ T6365] FAT-fs (loop6): Directory bread(block 72) failed
[  175.279934][ T6389] loop5: detected capacity change from 0 to 1024
[  175.316919][ T6365] FAT-fs (loop6): Directory bread(block 73) failed
[  175.456633][ T6365] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  175.494288][ T6389] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,data_err=ignore,,errors=continue. Quota mode: writeback.
[  176.240211][   T13] Bluetooth: hci0: command 0x0406 tx timeout
[  176.276012][   T13] Bluetooth: hci1: command 0x0406 tx timeout
[  178.797970][ T6432] crypto_alloc_aead failed rc=-2
[  178.897047][ T6458] loop6: detected capacity change from 0 to 4096
[  179.025059][ T6458] EXT4-fs (loop6): Ignoring removed mblk_io_submit option
[  179.128871][ T6458] EXT4-fs (loop6): Test dummy encryption mode enabled
[  179.234945][ T6458] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,init_itable=0x0000000000000001,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  180.695459][ T6458] syz.6.575 (6458) used greatest stack depth: 19352 bytes left
[  180.750870][ T6504] device syzkaller0 entered promiscuous mode
[  181.434226][ T6538] loop4: detected capacity change from 0 to 128
[  181.654642][ T6538] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  181.675153][ T6538] ext4 filesystem being mounted at /116/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  184.041818][ T6585] netlink: 36 bytes leftover after parsing attributes in process `syz.6.609'.
[  185.291939][ T6607] loop6: detected capacity change from 0 to 4096
[  185.625471][ T6607] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  185.738060][ T6607] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.616: corrupted inode contents
[  185.809924][ T6607] EXT4-fs error (device loop6): ext4_dirty_inode:6077: inode #15: comm syz.6.616: mark_inode_dirty error
[  185.831921][ T6607] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.616: corrupted inode contents
[  186.284303][ T6607] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #15: comm syz.6.616: mark_inode_dirty error
[  186.352186][ T6607] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.616: corrupted inode contents
[  186.422896][ T6607] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #15: comm syz.6.616: mark_inode_dirty error
[  186.543686][ T6607] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.616: corrupted inode contents
[  186.591561][ T6607] EXT4-fs error (device loop6): ext4_truncate:4286: inode #15: comm syz.6.616: mark_inode_dirty error
[  186.633865][ T6607] EXT4-fs error (device loop6) in ext4_setattr:5645: Corrupt filesystem
[  186.671911][ T6626] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.616: corrupted inode contents
[  186.744907][ T6631] loop4: detected capacity change from 0 to 512
[  186.806757][ T6631] EXT4-fs (loop4): Ignoring removed nobh option
[  187.048643][ T6631] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nogrpid,noauto_da_alloc,nobh,,errors=continue. Quota mode: writeback.
[  187.124934][ T6631] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  189.011847][ T6669] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  189.074297][ T6669] overlayfs: failed to set xattr on upper
[  189.098806][ T6669] overlayfs: ...falling back to index=off,metacopy=off.
[  190.015364][ T6697] netlink: 'syz.1.634': attribute type 5 has an invalid length.
[  191.393474][ T6708] loop5: detected capacity change from 0 to 2048
[  191.433605][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  191.552234][ T6708] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,barrier=0x00000000000003ff,dax=never,noblock_validity,,errors=continue. Quota mode: none.
[  191.565531][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  191.586405][ T6715] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.638720][ T6715] 8021q: adding VLAN 0 to HW filter on device team0
[  191.707863][ T6715] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  191.999841][ T6739] netlink: 'syz.1.645': attribute type 1 has an invalid length.
[  192.097840][ T6739] 8021q: adding VLAN 0 to HW filter on device bond1
[  192.227274][ T6744] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.288882][ T6744] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.319987][ T6744] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  192.333389][ T6744] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  192.354750][ T6744] bond1: (slave geneve3): making interface the new active one
[  192.371805][ T6744] bond1: (slave geneve3): Enslaving as an active interface with an up link
[  192.390835][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  192.528653][ T6753] netlink: 36 bytes leftover after parsing attributes in process `syz.4.648'.
[  193.376677][ T6762] loop7: detected capacity change from 0 to 128
[  193.665758][ T6769] loop4: detected capacity change from 0 to 128
[  193.710336][ T6773] FAT-fs (loop7): error, corrupted directory (invalid entries)
[  193.718395][ T6773] FAT-fs (loop7): Filesystem has been set read-only
[  194.146551][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  194.152906][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  194.224267][ T6779] loop5: detected capacity change from 0 to 256
[  194.230490][ T6769] EXT4-fs (loop4): Ignoring removed nobh option
[  194.282991][ T6769] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: none.
[  194.305250][ T6769] ext4 filesystem being mounted at /130/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  195.244558][ T6795] loop5: detected capacity change from 0 to 512
[  196.104029][ T6795] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  196.111990][ T6795] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  196.120090][ T6795] System zones: 0-1, 15-15, 18-18, 34-34
[  196.126777][ T6795] EXT4-fs (loop5): orphan cleanup on readonly fs
[  196.133176][ T6795] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0
[  196.142547][ T6795] EXT4-fs warning (device loop5): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  196.157168][ T6795] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  196.164152][ T6795] EXT4-fs error (device loop5): ext4_orphan_get:1432: comm syz.5.659: bad orphan inode 16
[  196.174366][ T6795] ext4_test_bit(bit=15, block=18) = 1
[  196.179747][ T6795] is_bad_inode(inode)=0
[  196.183929][ T6795] NEXT_ORPHAN(inode)=0
[  196.187994][ T6795] max_ino=32
[  196.191185][ T6795] i_nlink=2
[  196.194701][ T6795] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback.
[  196.584631][ T6811] loop5: detected capacity change from 0 to 512
[  196.598973][ T6811] EXT4-fs (loop5): filesystem is read-only
[  196.730341][ T6811] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  196.842062][ T6811] EXT4-fs (loop5): filesystem is read-only
[  197.440847][ T6821] loop4: detected capacity change from 0 to 512
[  197.452286][ T6811] EXT4-fs (loop5): orphan cleanup on readonly fs
[  197.691030][ T6811] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.662: bg 0: block 64: padding at end of block bitmap is not set
[  197.866064][ T6811] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  198.848688][ T6821] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  198.860207][ T6821] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.663873][ T6811] EXT4-fs (loop5): 1 orphan inode deleted
[  199.783704][ T6811] EXT4-fs (loop5): mounted filesystem without journal. Opts: resuid=0x0000000000000000,bsdgroups,auto_da_alloc=0x0000000000000000,stripe=0x0000000000000004,bsdgroups,noblock_validity,minixdf,nouid32,nojournal_checksum,nolazytime,dioread_nolock,usrquota,,errors=continue. Quota mode: writeback.
[  200.360620][ T6836] device syzkaller0 entered promiscuous mode
[  200.801069][ T6855] loop4: detected capacity change from 0 to 128
[  200.916576][ T6855] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  201.080635][ T4312] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8)
[  201.097235][ T4312] FAT-fs (loop4): Filesystem has been set read-only
[  201.130046][ T4312] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522)
[  201.182882][ T4312] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522)
[  201.512929][ T6874] loop4: detected capacity change from 0 to 512
[  201.594871][ T6878] loop5: detected capacity change from 0 to 512
[  201.959504][ T6878] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.674: inode has both inline data and extents flags
[  201.976052][ T6878] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.674: couldn't read orphan inode 15 (err -117)
[  201.989013][ T6878] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,,errors=continue. Quota mode: writeback.
[  202.103247][ T6878] overlayfs: missing 'lowerdir'
[  202.178564][ T6876] overlayfs: failed to clone upperpath
[  202.245682][ T6883] overlayfs: failed to clone upperpath
[  202.266079][ T6874] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  202.329291][ T6874] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  202.852259][ T6895] loop7: detected capacity change from 0 to 256
[  203.013200][ T6895] FAT-fs (loop7): Directory bread(block 64) failed
[  203.036872][ T6895] FAT-fs (loop7): Directory bread(block 65) failed
[  203.081715][ T6895] FAT-fs (loop7): Directory bread(block 66) failed
[  203.114691][ T6895] FAT-fs (loop7): Directory bread(block 67) failed
[  203.121302][ T6895] FAT-fs (loop7): Directory bread(block 68) failed
[  203.173464][ T6895] FAT-fs (loop7): Directory bread(block 69) failed
[  203.206991][ T6895] FAT-fs (loop7): Directory bread(block 70) failed
[  203.264197][ T6895] FAT-fs (loop7): Directory bread(block 71) failed
[  203.292255][ T6895] FAT-fs (loop7): Directory bread(block 72) failed
[  203.327813][ T6895] FAT-fs (loop7): Directory bread(block 73) failed
[  203.617427][ T6910] loop4: detected capacity change from 0 to 128
[  203.710231][ T6910] EXT4-fs (loop4): Test dummy encryption mode enabled
[  203.765089][ T6910] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  203.783799][ T6910] ext4 filesystem being mounted at /136/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  205.504623][ T6900] chnl_net:caif_netlink_parms(): no params data found
[  205.674851][ T6940] loop7: detected capacity change from 0 to 512
[  205.872041][ T6900] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.922620][ T6900] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.968885][ T6900] device bridge_slave_0 entered promiscuous mode
[  206.051350][ T4232] Bluetooth: hci5: command 0x0409 tx timeout
[  206.264513][ T6900] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.271665][ T6900] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.286070][ T6900] device bridge_slave_1 entered promiscuous mode
[  208.574001][ T6940] EXT4-fs: error -4 creating inode table initialization thread
[  208.582240][ T6940] EXT4-fs (loop7): mount failed
[  208.850158][ T6966] loop5: detected capacity change from 0 to 2048
[  208.885525][ T6900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  209.024116][ T6900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  209.049946][ T6966] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  209.201188][ T5797] Bluetooth: hci5: command 0x041b tx timeout
[  209.316450][ T6900] team0: Port device team_slave_0 added
[  209.325702][ T6991] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[  209.364511][ T6900] team0: Port device team_slave_1 added
[  209.428579][ T6900] batman_adv: batadv0: Adding interface: batadv_slave_0
[  209.473065][ T6900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.781323][ T6900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  209.807360][ T6998] loop4: detected capacity change from 0 to 512
[  209.888129][ T6900] batman_adv: batadv0: Adding interface: batadv_slave_1
[  209.925317][ T6998] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  209.980140][ T6998] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  209.990484][ T6900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.063683][ T6998] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  210.066893][ T6900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  210.092901][ T6998] EXT4-fs (loop4): orphan cleanup on readonly fs
[  210.100263][ T6998] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.702: bg 0: block 361: padding at end of block bitmap is not set
[  210.124488][ T6998] EXT4-fs (loop4): Remounting filesystem read-only
[  210.131036][ T6998] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  210.187058][ T6998] EXT4-fs (loop4): Remounting filesystem read-only
[  210.197099][ T6998] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.702: attempt to clear invalid blocks 33619980 len 1
[  210.204022][ T6900] device hsr_slave_0 entered promiscuous mode
[  210.222956][ T6998] EXT4-fs (loop4): Remounting filesystem read-only
[  210.240595][ T6998] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.702: invalid indirect mapped block 1811939328 (level 0)
[  210.264439][ T6900] device hsr_slave_1 entered promiscuous mode
[  210.281269][ T6900] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  210.291162][ T6900] Cannot create hsr debugfs directory
[  210.297520][ T6998] EXT4-fs (loop4): Remounting filesystem read-only
[  210.317936][ T6998] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.702: invalid indirect mapped block 2185560079 (level 1)
[  210.389906][ T6998] EXT4-fs (loop4): Remounting filesystem read-only
[  210.409839][ T6998] EXT4-fs (loop4): 1 truncate cleaned up
[  210.423348][ T6998] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,noblock_validity,discard,errors=remount-ro,mblk_io_submit. Quota mode: none.
[  211.322877][   T13] Bluetooth: hci5: command 0x040f tx timeout
[  211.351007][ T7026] netlink: 20 bytes leftover after parsing attributes in process `syz.5.696'.
[  211.572575][ T6900] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  211.592166][ T6900] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  211.624694][ T6900] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  211.656371][ T6900] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  211.844833][ T6900] 8021q: adding VLAN 0 to HW filter on device bond0
[  211.885467][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  211.910463][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  211.964175][ T6900] 8021q: adding VLAN 0 to HW filter on device team0
[  211.990148][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  212.018410][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  212.033192][ T1276] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.040311][ T1276] bridge0: port 1(bridge_slave_0) entered forwarding state
[  212.078100][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  212.121813][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  212.147661][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  212.170293][ T1276] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.177428][ T1276] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.229946][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  212.279528][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  212.306650][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  212.327052][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  212.358337][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  212.424327][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  212.460650][ T6900] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  212.492802][ T6900] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  212.513179][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  212.522272][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  212.538121][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  212.549234][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  212.581984][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  212.619759][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  212.887717][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  212.903570][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  212.934089][ T6900] 8021q: adding VLAN 0 to HW filter on device batadv0
[  213.316428][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  213.343753][ T4233] Bluetooth: hci5: command 0x0419 tx timeout
[  213.357798][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  213.416494][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  213.445811][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  213.474205][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  213.484264][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  213.514878][ T6900] device veth0_vlan entered promiscuous mode
[  213.539451][ T6900] device veth1_vlan entered promiscuous mode
[  213.567630][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  213.602340][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  213.611302][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  213.626933][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  213.641171][ T6900] device veth0_macvtap entered promiscuous mode
[  213.662213][ T6900] device veth1_macvtap entered promiscuous mode
[  213.692404][ T6900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  213.710167][ T6900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.720711][ T6900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  213.734024][ T6900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.763474][ T6900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  213.783355][ T6900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.793217][ T6900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  213.815871][ T6900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.827357][ T6900] batman_adv: batadv0: Interface activated: batadv_slave_0
[  213.838657][ T6900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  213.849808][ T6900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.860450][ T6900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  213.883430][ T6900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.893272][ T6900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  213.941163][ T6900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.951328][ T6900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  213.968567][ T6900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.984406][ T6900] batman_adv: batadv0: Interface activated: batadv_slave_1
[  214.001305][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  214.021920][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  214.040279][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  214.052126][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  214.067782][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  214.082732][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  214.100812][ T6900] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  214.117643][ T6900] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  214.130499][ T6900] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  214.139484][ T6900] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  214.276977][ T4245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.296873][ T4245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.048476][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  215.235973][ T7114] loop5: detected capacity change from 0 to 512
[  215.342167][ T7124] loop4: detected capacity change from 0 to 256
[  215.406058][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.414109][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.422628][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  215.430167][ T7114] EXT4-fs (loop5): Ignoring removed nobh option
[  215.835744][ T7114] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nogrpid,noauto_da_alloc,nobh,,errors=continue. Quota mode: writeback.
[  216.080422][ T7114] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  216.197177][ T7124] FAT-fs (loop4): Directory bread(block 64) failed
[  216.236405][ T7124] FAT-fs (loop4): Directory bread(block 65) failed
[  216.253464][ T7124] FAT-fs (loop4): Directory bread(block 66) failed
[  216.278866][ T7136] fuse: Bad value for 'fd'
[  216.305527][ T7124] FAT-fs (loop4): Directory bread(block 67) failed
[  216.340763][ T7136] overlayfs: failed to clone upperpath
[  216.371951][ T7124] FAT-fs (loop4): Directory bread(block 68) failed
[  216.423832][ T7124] FAT-fs (loop4): Directory bread(block 69) failed
[  216.457521][ T7124] FAT-fs (loop4): Directory bread(block 70) failed
[  216.483579][ T7124] FAT-fs (loop4): Directory bread(block 71) failed
[  216.491413][ T7124] FAT-fs (loop4): Directory bread(block 72) failed
[  216.508920][ T7124] FAT-fs (loop4): Directory bread(block 73) failed
[  216.849447][ T7155] netlink: 36 bytes leftover after parsing attributes in process `syz.7.713'.
[  218.417395][ T7156] loop8: detected capacity change from 0 to 512
[  223.032101][ T7163] overlayfs: failed to clone upperpath
[  223.819937][ T7174] loop8: detected capacity change from 0 to 512
[  223.901646][ T7174] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  223.909839][ T7174] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  223.918282][ T7174] System zones: 0-1, 15-15, 18-18, 34-34
[  223.924945][ T7174] EXT4-fs (loop8): orphan cleanup on readonly fs
[  223.931363][ T7174] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=0
[  223.940994][ T7174] EXT4-fs warning (device loop8): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  223.955941][ T7174] EXT4-fs (loop8): Cannot turn on quotas: error -22
[  223.970436][ T7174] EXT4-fs error (device loop8): ext4_orphan_get:1432: comm syz.8.719: bad orphan inode 16
[  223.992295][ T7174] ext4_test_bit(bit=15, block=18) = 1
[  223.997802][ T7174] is_bad_inode(inode)=0
[  224.001997][ T7174] NEXT_ORPHAN(inode)=0
[  224.006171][ T7174] max_ino=32
[  224.009396][ T7174] i_nlink=2
[  224.012554][ T7174] EXT4-fs (loop8): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback.
[  224.295992][ T7192] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  224.319710][ T7192] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  224.942749][   T13] Bluetooth: hci3: command 0x0406 tx timeout
[  225.197314][ T7212] netlink: 36 bytes leftover after parsing attributes in process `syz.4.726'.
[  226.113751][ T7227] loop4: detected capacity change from 0 to 256
[  226.184660][ T7230] loop8: detected capacity change from 0 to 512
[  226.288336][ T7232] loop7: detected capacity change from 0 to 2048
[  226.313568][ T7230] EXT4-fs (loop8): Ignoring removed nobh option
[  226.399950][ T7230] EXT4-fs (loop8): mounted filesystem without journal. Opts: i_version,nogrpid,noauto_da_alloc,nobh,,errors=continue. Quota mode: writeback.
[  226.415531][ T7230] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  226.433138][ T7232] EXT4-fs (loop7): mounted filesystem without journal. Opts: nouid32,max_dir_size_kb=0x000000000000f2a5,errors=remount-ro,sb=0x0000000000000001,. Quota mode: none.
[  226.897395][ T7255] loop7: detected capacity change from 0 to 512
[  227.224890][ T7255] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  227.301165][ T7255] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  228.026691][ T7283] loop5: detected capacity change from 0 to 128
[  228.094731][ T5396] EXT4-fs error (device loop7): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid
[  228.156695][ T5396] EXT4-fs error (device loop7): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid
[  228.359874][ T7283] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  228.506956][ T7283] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  228.988914][ T7293] 9pnet: p9_fd_create_tcp (7293): problem connecting socket to 127.0.0.1
[  229.405725][ T7303] loop5: detected capacity change from 0 to 4096
[  229.549093][ T7303] EXT4-fs (loop5): inline encryption not supported
[  229.581692][ T7303] EXT4-fs (loop5): Test dummy encryption mode enabled
[  229.832497][ T7303] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled
[  230.773065][ T7303] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  230.783595][ T7303] System zones: 0-5
[  230.836300][ T7303] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,dioread_nolock,inlinecrypt,test_dummy_encryption,grpjquota=,auto_da_alloc,delalloc,jqfmt=vfsv0,,errors=continue. Quota mode: writeback.
[  231.321539][ T7354] xt_TCPMSS: Only works on TCP SYN packets
[  231.797299][ T7356] loop8: detected capacity change from 0 to 128
[  232.488533][ T7366] Set syz1 is full, maxelem 65536 reached
[  232.827231][ T7342] chnl_net:caif_netlink_parms(): no params data found
[  233.053569][ T4196] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  233.064320][ T4196] CPU: 1 PID: 4196 Comm: kworker/u5:3 Not tainted syzkaller #0
[  233.071881][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  233.081934][ T4196] Workqueue: hci3 hci_rx_work
[  233.086624][ T4196] Call Trace:
[  233.089898][ T4196]  <TASK>
[  233.092827][ T4196]  dump_stack_lvl+0x188/0x250
[  233.097509][ T4196]  ? show_regs_print_info+0x20/0x20
[  233.102705][ T4196]  ? load_image+0x400/0x400
[  233.107221][ T4196]  sysfs_create_dir_ns+0x26a/0x290
[  233.112337][ T4196]  ? sysfs_warn_dup+0xa0/0xa0
[  233.117014][ T4196]  ? process_one_work+0x85f/0x1010
[  233.122129][ T4196]  ? do_raw_spin_unlock+0x11d/0x230
[  233.127333][ T4196]  kobject_add_internal+0x6e0/0xd90
[  233.132538][ T4196]  kobject_add+0x160/0x230
[  233.136957][ T4196]  ? kobject_init+0x1d0/0x1d0
[  233.141635][ T4196]  ? klist_children_get+0x50/0x50
[  233.146660][ T4196]  ? get_device_parent+0x121/0x3f0
[  233.151774][ T4196]  device_add+0x48c/0x1000
[  233.156199][ T4196]  hci_conn_add_sysfs+0xd1/0x1e0
[  233.161142][ T4196]  le_conn_complete_evt+0xc4b/0x15c0
[  233.166445][ T4196]  ? cs_le_create_conn+0x5e0/0x5e0
[  233.171564][ T4196]  ? __mutex_trylock_common+0x155/0x260
[  233.177118][ T4196]  hci_le_meta_evt+0xd62/0x3cb0
[  233.181971][ T4196]  ? hci_event_packet+0x37e/0x1370
[  233.187141][ T4196]  ? __lock_acquire+0x7d10/0x7d10
[  233.192194][ T4196]  ? hci_remote_host_features_evt+0x290/0x290
[  233.198262][ T4196]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  233.203898][ T4196]  ? mark_lock+0x94/0x320
[  233.208226][ T4196]  ? mutex_unlock+0x10/0x10
[  233.212731][ T4196]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  233.215848][   T13] Bluetooth: hci2: command 0x0409 tx timeout
[  233.218714][ T4196]  ? lock_chain_count+0x20/0x20
[  233.229507][ T4196]  ? __rwlock_init+0x140/0x140
[  233.234280][ T4196]  hci_event_packet+0xe4b/0x1370
[  233.239220][ T4196]  ? lockdep_hardirqs_on+0x94/0x140
[  233.244435][ T4196]  ? rcu_lock_release+0x20/0x20
[  233.249297][ T4196]  ? hci_send_to_monitor+0x9c/0x4a0
[  233.254501][ T4196]  hci_rx_work+0x255/0xa10
[  233.258938][ T4196]  process_one_work+0x85f/0x1010
[  233.263896][ T4196]  ? worker_detach_from_pool+0x240/0x240
[  233.269537][ T4196]  ? lockdep_hardirqs_off+0x70/0x100
[  233.274832][ T4196]  ? _raw_spin_lock_irq+0xb7/0xf0
[  233.279866][ T4196]  ? _raw_spin_lock_irqsave+0x100/0x100
[  233.285422][ T4196]  ? wq_worker_running+0x97/0x170
[  233.290452][ T4196]  worker_thread+0xaa6/0x1290
[  233.295162][ T4196]  kthread+0x436/0x520
[  233.299236][ T4196]  ? rcu_lock_release+0x20/0x20
[  233.304091][ T4196]  ? kthread_blkcg+0xd0/0xd0
[  233.308687][ T4196]  ret_from_fork+0x1f/0x30
[  233.313124][ T4196]  </TASK>
[  233.333583][ T4196] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  233.346943][ T4196] Bluetooth: hci3: failed to register connection device
[  233.518423][ T7395] loop5: detected capacity change from 0 to 256
[  233.615790][ T7342] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.622240][ T7395] FAT-fs (loop5): Directory bread(block 64) failed
[  233.635949][ T7342] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.668490][ T7342] device bridge_slave_0 entered promiscuous mode
[  233.683465][ T7395] FAT-fs (loop5): Directory bread(block 65) failed
[  233.697917][ T7401] loop8: detected capacity change from 0 to 512
[  233.713666][ T7395] FAT-fs (loop5): Directory bread(block 66) failed
[  233.720218][ T7395] FAT-fs (loop5): Directory bread(block 67) failed
[  233.731228][ T7342] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.751812][ T7342] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.783080][ T7342] device bridge_slave_1 entered promiscuous mode
[  233.798475][ T7395] FAT-fs (loop5): Directory bread(block 68) failed
[  233.806989][ T7401] EXT4-fs (loop8): mounted filesystem without journal. Opts: sb=0x0000000000000001,errors=remount-ro,. Quota mode: writeback.
[  233.820378][ T7395] FAT-fs (loop5): Directory bread(block 69) failed
[  233.833511][ T7395] FAT-fs (loop5): Directory bread(block 70) failed
[  233.833947][ T4426] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.840050][ T7395] FAT-fs (loop5): Directory bread(block 71) failed
[  233.873004][ T7342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  233.885455][ T7342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  233.910105][ T7342] team0: Port device team_slave_0 added
[  233.917779][ T7342] team0: Port device team_slave_1 added
[  233.933874][ T7395] FAT-fs (loop5): Directory bread(block 72) failed
[  233.940426][ T7395] FAT-fs (loop5): Directory bread(block 73) failed
[  233.947228][ T7401] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  233.981340][ T7401] EXT4-fs warning (device loop8): ext4_group_add:1676: Can't resize non-sparse filesystem further
[  233.994270][ T7342] batman_adv: batadv0: Adding interface: batadv_slave_0
[  234.001367][ T7342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.027293][    C0] vkms_vblank_simulate: vblank timer overrun
[  234.104457][ T7342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  234.161049][ T7342] batman_adv: batadv0: Adding interface: batadv_slave_1
[  234.193372][ T7342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.316736][ T7342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  234.364278][ T4426] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.463946][ T7431] tmpfs: Unknown parameter 'quota'
[  234.548726][ T7342] device hsr_slave_0 entered promiscuous mode
[  234.570271][ T7342] device hsr_slave_1 entered promiscuous mode
[  234.591774][ T7342] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  234.607144][  T146] Bluetooth: hci5: Unknown advertising packet type: 0x19
[  234.607200][  T146] Bluetooth: hci5: Unknown advertising packet type: 0x1f
[  234.613390][ T7342] Cannot create hsr debugfs directory
[  234.614761][  T146] Bluetooth: hci5: Unknown advertising packet type: 0x31
[  234.629296][  T146] Bluetooth: hci5: Unknown advertising packet type: 0x37
[  234.692671][ T4426] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.772581][ T7439] netlink: 'syz.4.788': attribute type 13 has an invalid length.
[  234.813590][ T7439] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  234.839305][ T7439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  234.868535][ T7439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  235.017670][ T7453] overlayfs: failed to clone upperpath
[  235.035863][ T4426] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.084070][ T7447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.788'.
[  236.215896][ T5268] Bluetooth: hci2: command 0x041b tx timeout
[  236.616207][ T7470] loop5: detected capacity change from 0 to 512
[  236.663845][ T7466] loop4: detected capacity change from 0 to 4096
[  236.693162][ T7470] EXT4-fs (loop5): Unrecognized mount option "obj_role=#%!/^." or missing value
[  236.755141][ T7342] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  236.801540][ T7466] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  236.888712][ T7342] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  236.932654][ T7342] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  237.010848][ T7342] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  237.310537][ T7342] 8021q: adding VLAN 0 to HW filter on device bond0
[  237.330461][ T7342] 8021q: adding VLAN 0 to HW filter on device team0
[  237.344676][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  237.380592][ T7488] xt_l2tp: v2 sid > 0xffff: 4294967292
[  237.403223][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  237.444273][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  237.464675][ T7493] loop4: detected capacity change from 0 to 256
[  237.477511][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  237.530520][ T7493] FAT-fs (loop4): Directory bread(block 64) failed
[  237.579149][  T156] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.586317][  T156] bridge0: port 1(bridge_slave_0) entered forwarding state
[  237.603419][ T7493] FAT-fs (loop4): Directory bread(block 65) failed
[  237.611233][ T7493] FAT-fs (loop4): Directory bread(block 66) failed
[  237.625023][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  237.644286][ T7493] FAT-fs (loop4): Directory bread(block 67) failed
[  237.650953][ T7493] FAT-fs (loop4): Directory bread(block 68) failed
[  237.658114][ T7493] FAT-fs (loop4): Directory bread(block 69) failed
[  237.665418][ T7493] FAT-fs (loop4): Directory bread(block 70) failed
[  237.672043][ T7493] FAT-fs (loop4): Directory bread(block 71) failed
[  237.682049][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  237.688754][ T7493] FAT-fs (loop4): Directory bread(block 72) failed
[  237.692427][  T156] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.703676][  T156] bridge0: port 2(bridge_slave_1) entered forwarding state
[  237.773681][ T7493] FAT-fs (loop4): Directory bread(block 73) failed
[  238.217767][ T7342] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  238.326447][ T4293] Bluetooth: hci2: command 0x040f tx timeout
[  238.362670][ T7342] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  238.404200][ T7508] loop8: detected capacity change from 0 to 128
[  238.449516][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  238.458271][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  238.468105][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  238.484445][    C1] ------------[ cut here ]------------
[  238.490211][    C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x20
[  238.500853][    C1] WARNING: CPU: 1 PID: 20 at net/mac80211/rate.c:376 __rate_control_send_low+0x630/0x880
[  238.510741][    C1] Modules linked in:
[  238.514670][    C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0
[  238.521961][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  238.525034][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  238.532053][    C1] RIP: 0010:__rate_control_send_low+0x630/0x880
[  238.546205][    C1] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 00 a0 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 e0 01 6a 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff
[  238.565943][    C1] RSP: 0018:ffffc90000da7628 EFLAGS: 00010246
[  238.572035][    C1] RAX: 6d5d083b4ef88f00 RBX: 000000000000000c RCX: ffff888016e98000
[  238.580047][    C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000
[  238.588057][    C1] RBP: 0000000000000084 R08: ffffc90000da7147 R09: 1ffff920001b4e28
[  238.596065][    C1] R10: dffffc0000000000 R11: fffff520001b4e29 R12: ffff888071afa168
[  238.601323][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  238.604070][    C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000020
[  238.604088][    C1] FS:  0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  238.604104][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  238.604117][    C1] CR2: 00007fc77de616b8 CR3: 000000000c08e000 CR4: 00000000003506e0
[  238.604132][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  238.604144][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  238.604157][    C1] Call Trace:
[  238.604163][    C1]  <TASK>
[  238.604180][    C1]  rate_control_send_low+0x194/0x790
[  238.604211][    C1]  rate_control_get_rate+0x207/0x5c0
[  238.676276][    C1]  __ieee80211_beacon_get+0x155e/0x2000
[  238.681853][    C1]  ? ieee80211_beacon_get_template+0x30/0x30
[  238.687910][    C1]  ? verify_lock_unused+0x140/0x140
[  238.693137][    C1]  ieee80211_beacon_get_tim+0x48/0x840
[  238.698644][    C1]  mac80211_hwsim_beacon_tx+0xf4/0x920
[  238.704140][    C1]  __iterate_interfaces+0x243/0x500
[  238.709354][    C1]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  238.715630][    C1]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  238.721890][    C1]  ieee80211_iterate_active_interfaces_atomic+0xb3/0x140
[  238.728952][    C1]  mac80211_hwsim_beacon+0x9b/0x180
[  238.734186][    C1]  ? hw_scan_work+0xec0/0xec0
[  238.738870][    C1]  __hrtimer_run_queues+0x4f2/0xb70
[  238.744128][    C1]  ? hrtimer_interrupt+0x8d0/0x8d0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  238.749267][    C1]  hrtimer_run_softirq+0x176/0x240
[  238.754421][    C1]  handle_softirqs+0x339/0x830
[  238.759200][    C1]  ? run_ksoftirqd+0xa4/0x100
[  238.763922][    C1]  ? do_softirq+0x210/0x210
[  238.768435][    C1]  ? run_ksoftirqd+0x81/0x100
[  238.773173][    C1]  ? ksoftirqd_should_run+0x20/0x20
[  238.778414][    C1]  ? lockdep_hardirqs_off+0x70/0x100
[  238.783747][    C1]  ? ksoftirqd_should_run+0x20/0x20
[  238.788956][    C1]  run_ksoftirqd+0xa4/0x100
[  238.793506][    C1]  ? ksoftirqd_should_run+0x20/0x20
[  238.798718][    C1]  smpboot_thread_fn+0x4f6/0x970
[  238.803715][    C1]  kthread+0x436/0x520
[  238.807790][    C1]  ? cpu_report_death+0x180/0x180
[  238.812823][    C1]  ? kthread_blkcg+0xd0/0xd0
[  238.817469][    C1]  ret_from_fork+0x1f/0x30
[  238.821918][    C1]  </TASK>
[  238.824997][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  238.827413][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  238.832265][    C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0
[  238.847491][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  238.857551][    C1] Call Trace:
[  238.860833][    C1]  <TASK>
[  238.863778][    C1]  dump_stack_lvl+0x188/0x250
[  238.868472][    C1]  ? show_regs_print_info+0x20/0x20
[  238.873683][    C1]  ? load_image+0x400/0x400
[  238.878206][    C1]  panic+0x2e5/0x810
[  238.882118][    C1]  ? bpf_jit_dump+0xd0/0xd0
[  238.886637][    C1]  ? ret_from_fork+0x1f/0x30
[  238.891231][    C1]  ? __rate_control_send_low+0x630/0x880
[  238.892421][ T7508] EXT4-fs: failed to create workqueue
[  238.896868][    C1]  __warn+0x248/0x2b0
[  238.896888][    C1]  ? __rate_control_send_low+0x630/0x880
[  238.896910][    C1]  report_bug+0x1b7/0x2e0
[  238.896929][    C1]  handle_bug+0x3a/0x70
[  238.896946][    C1]  exc_invalid_op+0x16/0x40
[  238.896960][    C1]  asm_exc_invalid_op+0x16/0x20
[  238.896978][    C1] RIP: 0010:__rate_control_send_low+0x630/0x880
[  238.896997][    C1] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 00 a0 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 e0 01 6a 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff
[  238.897012][    C1] RSP: 0018:ffffc90000da7628 EFLAGS: 00010246
[  238.897029][    C1] RAX: 6d5d083b4ef88f00 RBX: 000000000000000c RCX: ffff888016e98000
[  238.897042][    C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000
[  238.897053][    C1] RBP: 0000000000000084 R08: ffffc90000da7147 R09: 1ffff920001b4e28
[  238.897066][    C1] R10: dffffc0000000000 R11: fffff520001b4e29 R12: ffff888071afa168
[  238.897080][    C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000020
[  238.897107][    C1]  ? __rate_control_send_low+0x630/0x880
[  238.897137][    C1]  rate_control_send_low+0x194/0x790
[  238.947964][ T7508] EXT4-fs (loop8): mount failed
[  238.955640][    C1]  rate_control_get_rate+0x207/0x5c0
[  238.955678][    C1]  __ieee80211_beacon_get+0x155e/0x2000
[  238.955708][    C1]  ? ieee80211_beacon_get_template+0x30/0x30
[  238.988720][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  238.993613][    C1]  ? verify_lock_unused+0x140/0x140
[  238.993657][    C1]  ieee80211_beacon_get_tim+0x48/0x840
[  238.993686][    C1]  mac80211_hwsim_beacon_tx+0xf4/0x920
[  238.993708][    C1]  __iterate_interfaces+0x243/0x500
[  238.993726][    C1]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  239.013292][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  239.017397][    C1]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  239.030239][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  239.034144][    C1]  ieee80211_iterate_active_interfaces_atomic+0xb3/0x140
[  239.034175][    C1]  mac80211_hwsim_beacon+0x9b/0x180
[  239.034194][    C1]  ? hw_scan_work+0xec0/0xec0
[  239.042897][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  239.047162][    C1]  __hrtimer_run_queues+0x4f2/0xb70
[  239.047202][    C1]  ? hrtimer_interrupt+0x8d0/0x8d0
[  239.047227][    C1]  hrtimer_run_softirq+0x176/0x240
[  239.047251][    C1]  handle_softirqs+0x339/0x830
[  239.047274][    C1]  ? run_ksoftirqd+0xa4/0x100
[  239.047296][    C1]  ? do_softirq+0x210/0x210
[  239.047314][    C1]  ? run_ksoftirqd+0x81/0x100
[  239.047330][    C1]  ? ksoftirqd_should_run+0x20/0x20
[  239.047346][    C1]  ? lockdep_hardirqs_off+0x70/0x100
[  239.047369][    C1]  ? ksoftirqd_should_run+0x20/0x20
[  239.047386][    C1]  run_ksoftirqd+0xa4/0x100
[  239.047403][    C1]  ? ksoftirqd_should_run+0x20/0x20
[  239.047427][    C1]  smpboot_thread_fn+0x4f6/0x970
[  239.064588][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  239.069691][    C1]  kthread+0x436/0x520
[  239.108021][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  239.108262][    C1]  ? cpu_report_death+0x180/0x180
[  239.121902][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  239.126320][    C1]  ? kthread_blkcg+0xd0/0xd0
[  239.126346][    C1]  ret_from_fork+0x1f/0x30
[  239.126374][    C1]  </TASK>
[  239.126492][    C1] Kernel Offset: disabled
[  239.227366][    C1] Rebooting in 86400 seconds..