last executing test programs:

1m33.946434745s ago: executing program 32 (id=24):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x7, 0x7fffffff}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000240))

1m33.079806643s ago: executing program 2 (id=28):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00004, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_clone(0x80881000, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, 0x0, 0x0, 0x20}, 0x20)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0xc8, 0x8, 0x128, 0x5803, 0x218, 0x2e8, 0x2e8, 0x218, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'batadv0\x00', 'wlan0\x00'}, 0x0, 0x108, 0x128, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@socket1={{0x28}, 0x4c}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348)

1m32.929081849s ago: executing program 2 (id=29):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000d40), 0x0, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000d80)={0xe9, [[0x7, 0xffffffff, 0x3ff, 0xffffffff, 0x6, 0xffffffff, 0x5, 0xffffffff], [0xfffffffe, 0x10001, 0xffffffff, 0xffffffff, 0x4, 0xb, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xfffffffd, 0xffffdfff, 0xfffffffb, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0x9, 0xac44, 0x0, 0x0, 0x1}, {0x138d, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1001, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x595, 0x1000, 0x0, 0x0, 0x1}, {0xffa, 0x4000, 0x0, 0x0, 0x1}, {0x7, 0xf423f, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000001000)={0x5, "9f3318b89e0c8af5227eb2ce1b2cb13e6efff16637aec2744d74609a09853c282108cbdf4bc66e4be6e9936c227cddefd05fcc0efca0c42d1054c789c66d55e8", {0x3ff, 0x1}})
ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0)
ioctl$SNDRV_PCM_IOCTL_HWSYNC(r0, 0x4122, 0x0)

1m32.823938029s ago: executing program 2 (id=30):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x10008, &(0x7f00000000c0)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000300)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef)
lsetxattr$security_capability(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=@v3={0x3000000, [{0x3, 0x3}, {0x3, 0x1ff}], 0xee01}, 0x18, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1c8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x387)
mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000880), 0x0, &(0x7f0000000980)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
truncate(&(0x7f0000002c80)='./file0/file1\x00', 0xe2)

1m32.082190435s ago: executing program 2 (id=36):
socket$inet6(0xa, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000080)={[{@inlinecrypt}, {@debug}, {@usrquota}, {@lazytime}]}, 0x1, 0x50f, &(0x7f0000000fc0)="$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")
creat(&(0x7f00000000c0)='./file1\x00', 0x31)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e20, 0x0, 0x4e24, 0x80, 0x2, 0xa0, 0xa0, 0x29}, {0x104, 0x5, 0x3, 0x9, 0x0, 0x2000002, 0x9, 0x4}, {0x401, 0x5, 0x6, 0x2}, 0x0, 0xfffffffe, 0x2, 0x0, 0x2, 0x3}, {{@in6=@remote, 0x4d4, 0x32}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3505, 0x0, 0x1, 0x9, 0x8, 0x0, 0x6}}, 0xe8)
r0 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x8210, 0x2, 0x0, 0x42}, &(0x7f00000000c0), &(0x7f0000011000), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20)

1m31.311559234s ago: executing program 2 (id=41):
r0 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, <r1=>0x0}, &(0x7f0000000480)=0x5)
setreuid(r1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x2, 0x2)
setpriority(0x2, 0xff, 0x0)

1m30.348258042s ago: executing program 2 (id=57):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0xf00, 0x0)
fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x50442, 0x175)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
read$FUSE(r1, &(0x7f0000000f00)={0x2020}, 0x2020)

1m30.212492056s ago: executing program 33 (id=57):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0xf00, 0x0)
fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x50442, 0x175)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
read$FUSE(r1, &(0x7f0000000f00)={0x2020}, 0x2020)

1m26.598820846s ago: executing program 1 (id=79):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0), 0xa7c, r0}, 0x36)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0)

1m26.149731641s ago: executing program 1 (id=81):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="b702000001000000b703000000000000b7040000000000028500000032000000b70000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280), &(0x7f00000002c0)=@tcp=r0}, 0x20)
sendto(r1, &(0x7f0000000340)="01", 0x1, 0x0, 0x0, 0x0)

1m25.978548739s ago: executing program 1 (id=83):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1)
close(r1)
r2 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10)
splice(r0, 0x0, r1, 0x0, 0x8201, 0x1)

1m25.891272168s ago: executing program 1 (id=84):
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000ac0)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000b00)='.\x00', 0xffffffffffffff9c, &(0x7f0000000b40)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000b80)='\x00', 0x9801)
move_mount(r1, &(0x7f0000000bc0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000c00)='./file0\x00', 0x0)
mount$fuseblk(0x0, &(0x7f0000000c40)='./file0\x00', 0x0, 0x24000, 0x0)
open_tree(r0, &(0x7f0000000c80)='\x00', 0x89901)

1m25.715472366s ago: executing program 5 (id=25):
r0 = syz_usb_connect(0x3, 0xc7, &(0x7f0000000000)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e0100000d2401000134000000000001011224020101020000000000000000030000000924030201010003000c2405", @ANYRESDEC=0x0], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
connect$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x2, 0x4e24, @local}, 0x10)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000008c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
accept4(0xffffffffffffffff, 0x0, &(0x7f00000009c0), 0x80000)

1m25.67203346s ago: executing program 1 (id=86):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000140)={0x7, 0x6})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r2=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x541b, 0x0)

1m25.202090058s ago: executing program 1 (id=89):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x41)
r1 = syz_open_dev$dvb_demux(&(0x7f0000000040), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000080)={0x1, 0x0, 0x3, 0x14, 0x4})
r2 = syz_open_dev$dvb_demux(&(0x7f00000000c0), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000140)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4})
close_range(r0, 0xffffffffffffffff, 0x0)

1m24.999724169s ago: executing program 34 (id=89):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x41)
r1 = syz_open_dev$dvb_demux(&(0x7f0000000040), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000080)={0x1, 0x0, 0x3, 0x14, 0x4})
r2 = syz_open_dev$dvb_demux(&(0x7f00000000c0), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000140)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4})
close_range(r0, 0xffffffffffffffff, 0x0)

1m23.375657385s ago: executing program 5 (id=100):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000640)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m23.02933951s ago: executing program 5 (id=102):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4040)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0xffffffff}, [@generic={0x91, 0x1, 0x1, 0x11}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd2c, 0x25dfdbfe, {0x13, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048891}, 0x24008090)

1m22.360752099s ago: executing program 5 (id=105):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000580)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f0000000280)='./bus\x00', 0xa909d29f8a956e01, 0x0, 0xff, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x40, 0x83)
fcntl$setstatus(r0, 0x4, 0x76400)
readahead(r0, 0x6, 0x1)

1m20.564492432s ago: executing program 5 (id=112):
recvmmsg(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=""/230, 0xe6}, 0x6}], 0x1, 0x10120, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000d80), 0x36f, 0x20102, 0x0)

1m19.40691568s ago: executing program 6 (id=58):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f00000000c0), 0xfffffe13)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000d80)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendto$unix(r3, 0x0, 0x0, 0x1, 0x0, 0x0)
splice(r0, 0x0, r3, 0x0, 0x1000, 0x0)

1m19.068153435s ago: executing program 5 (id=119):
syz_usb_connect(0x0, 0x34, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0)
syz_mount_image$vfat(&(0x7f0000001080), &(0x7f00000010c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x3, 0x0, &(0x7f0000001140))
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vxcan0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000380)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x111, 0x70bd2a, 0x100000, {0x0, 0x0, 0x74, r2, {0xffff, 0xfff6}, {0x5, 0x10}, {0xffe0, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0xc4)

1m18.852750357s ago: executing program 35 (id=119):
syz_usb_connect(0x0, 0x34, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0)
syz_mount_image$vfat(&(0x7f0000001080), &(0x7f00000010c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x3, 0x0, &(0x7f0000001140))
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vxcan0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000380)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x111, 0x70bd2a, 0x100000, {0x0, 0x0, 0x74, r2, {0xffff, 0xfff6}, {0x5, 0x10}, {0xffe0, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0xc4)

1m18.505432483s ago: executing program 6 (id=121):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=cp437,fmask=00000000000000000000315,errors=remount-ro,umask=00000000000000000000177,errors=remount-ro,umask=00000000000000000001775,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d63703933362c666d61736b3d30303030303030303030303030303030303030303030312c005e78aae2dff810901336831a8ac30acbcd22a575ef96"], 0x5, 0x1516, &(0x7f0000000640)="$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")
r0 = creat(&(0x7f0000001b80)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f0000001bc0)=<r1=>0x0)
mount(&(0x7f0000001c00)=@loop={'/dev/loop', 0x0}, &(0x7f0000001c40)='./bus\x00', 0x0, 0x5000, 0x0)
r2 = open(&(0x7f0000001c80)='./bus\x00', 0x101000, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x8e18, 0x2, 0x0, 0x0, 0xa, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
io_submit(r1, 0x3b, &(0x7f0000001dc0)=[&(0x7f0000001e00)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000001e40), 0x100000, 0x16}])

1m17.74856881s ago: executing program 6 (id=123):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10)
shutdown(r1, 0x0)
ppoll(&(0x7f00000000c0)=[{r1, 0x4040}], 0x1, 0x0, 0x0, 0x0)

1m17.251071141s ago: executing program 6 (id=125):
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1000000, &(0x7f0000000080)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xfe, 0x19c, &(0x7f0000000140)="$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")
timer_create(0x0, &(0x7f00000014c0)={0x0, 0x12, 0x2}, &(0x7f0000002200))
timer_settime(0x0, 0x0, &(0x7f0000002240)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
timer_create(0x0, &(0x7f0000002280)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f00000022c0)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000002300)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
pselect6(0x40, &(0x7f0000002340)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000002380)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f00000023c0)={0x0, 0x3938700}, 0x0)

1m17.092075417s ago: executing program 36 (id=125):
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1000000, &(0x7f0000000080)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xfe, 0x19c, &(0x7f0000000140)="$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")
timer_create(0x0, &(0x7f00000014c0)={0x0, 0x12, 0x2}, &(0x7f0000002200))
timer_settime(0x0, 0x0, &(0x7f0000002240)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
timer_create(0x0, &(0x7f0000002280)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f00000022c0)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000002300)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
pselect6(0x40, &(0x7f0000002340)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000002380)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f00000023c0)={0x0, 0x3938700}, 0x0)

29.291022872s ago: executing program 9 (id=467):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000200)="5766b1b827f6003300", 0x10)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e22, @local}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e22, @local}, 0x10)
shutdown(r0, 0x0)

29.085841113s ago: executing program 9 (id=470):
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="747a3d5554432c756e695f786c6174653d312c646973636172642c757466383d302c756e695f786c6174653d312c726f6469722c757466383d312c00ee284a015f4d8978d244929c7e584d3e858fc84e5fd63668897b1e5c17efd3c8452b5716c833fb742704c70630c7e3804afc5fe645f66ca614e17a7c3e5fcafc620b6af31b1896c6c50b36c73b7ad41b"], 0x1, 0x247, &(0x7f0000000c00)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$cgroup_subtree(r1, 0x0, 0x9)
write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000000c0))

28.477755415s ago: executing program 9 (id=474):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e21, 0xf3, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x20}, 0x1c)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)

28.282831676s ago: executing program 9 (id=475):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x408, &(0x7f00000000c0)=ANY=[], 0x1, 0x5505, &(0x7f0000005b40)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c9)
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x1a42028, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000010640)='./file1\x00', 0x183042, 0x108)
pwrite64(r0, &(0x7f00000000c0)='g', 0x1, 0x7)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.advise\x00')

26.642099845s ago: executing program 9 (id=485):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r0, 0x0)
socket$unix(0x1, 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
pselect6(0x40, &(0x7f00000003c0)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000400)={0x1f, 0x2, 0x4, 0x3, 0x4, 0x80000000000000, 0x4}, &(0x7f0000000440)={0x0, 0x3938700}, 0x0)

24.019648346s ago: executing program 9 (id=500):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000c00)='./file0\x00', 0xc0ed0040, &(0x7f0000000c40)={[{@quota}, {@nombcache}, {@norecovery}, {@noload}, {@noquota}, {@noauto_da_alloc}]}, 0xfe, 0x490, &(0x7f0000000e40)="$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")
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000a40)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000a80)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23.753747454s ago: executing program 37 (id=500):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000c00)='./file0\x00', 0xc0ed0040, &(0x7f0000000c40)={[{@quota}, {@nombcache}, {@norecovery}, {@noload}, {@noquota}, {@noauto_da_alloc}]}, 0xfe, 0x490, &(0x7f0000000e40)="$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")
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000a40)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000a80)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.043872819s ago: executing program 4 (id=593):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, 0x0, <r2=>0x0}, 0x2020)
acct(&(0x7f00000005c0)='./file0/file0\x00')
write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x5090880b, 0x0, 0x10, 0xd, 0x40, 0x0, 0x0, 0x2f, 0x1}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x80, {0x1fffffffffffffc, 0x2, 0x5, 0xfffffffffffffffe, 0xa003, 0x8, {0x8, 0x9, 0x6, 0x7d, 0x2, 0x3f45, 0xc05, 0x8, 0xd, 0x2000, 0x0, 0x0, r2, 0xe72, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0})

4.211951294s ago: executing program 4 (id=600):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400001}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x2, 0x1, 0x0, 0x0, 0x0, 0xd5e855c9ff29405c})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000880))
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000004c0))

4.033950733s ago: executing program 4 (id=601):
r0 = socket$inet6(0xa, 0x2, 0x0)
close(r0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x10)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x800, 0x0, 0x3, 0x1, 0x8, 0x8000}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000300)=0x2005, 0x4)
sendmsg$inet6(r1, &(0x7f0000000340)={&(0x7f0000000540)={0xa, 0x4e20, 0x180000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="24000000000000002900000032000000fc0000e2ffffff00000000000000000151"], 0x28}, 0x8040)

3.890267748s ago: executing program 4 (id=602):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, 0x0, 0x0, 0x20004e, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$erofs(&(0x7f0000000680), &(0x7f00000006c0)='./file2\x00', 0x20404a, &(0x7f0000000700)=ANY=[], 0xfd, 0x1ea, &(0x7f0000000740)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000940)='./file2\x00', 0x80000, 0x0)

3.594164849s ago: executing program 7 (id=605):
syz_open_dev$tty1(0xc, 0x4, 0x4)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@updpolicy={0xc4, 0x19, 0xdbe47753d50165c1, 0x0, 0xfffffffc, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x100000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0xfffffffffffffffb}, {0x0, 0x3ffffffffffffd, 0x200000000000000}, 0x22}, [@mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2, 0x0, 0x0, 0x0, 0x4}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)

3.224022647s ago: executing program 7 (id=607):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x55, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0xfb, 0xd3f8}, {0x6, 0x66, 0x0, 0x30}]}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.072676223s ago: executing program 4 (id=611):
r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000000040)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
write$char_usb(r1, &(0x7f0000000100)='\v', 0x1)

2.912907719s ago: executing program 7 (id=613):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4)
sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x10102, &(0x7f0000000040)={0xa, 0x4e20, 0xd, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0xe)

2.882447592s ago: executing program 0 (id=614):
r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0xdcfe]}, 0x8, 0x80800)
r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0xa, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
r2 = gettid()
rt_sigtimedwait(&(0x7f0000000300)={[0xffffffff]}, 0x0, 0x0, 0x8)
timer_create(0x2, &(0x7f0000000380)={0x0, 0x4, 0x4, @tid=r2}, &(0x7f00000003c0)=<r3=>0x0)
timer_settime(r3, 0xe54aef35e9c2845d, &(0x7f0000000400)={{0x77359400}, {0x0, 0x9}}, 0x0)

2.80872647s ago: executing program 7 (id=615):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000080)=0xfd8)
ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0)
ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, &(0x7f0000001540)=0x2)
ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000000)=0x35ff)

2.670858424s ago: executing program 7 (id=616):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0)
syz_usb_control_io$uac1(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f00000008c0)={0x44, &(0x7f0000000600)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x83, 0x1, "e2"}, 0x0, 0x0})

2.075614926s ago: executing program 3 (id=623):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x7, 0x30}, 0xc)
sendto$inet(r0, &(0x7f0000000080)='}', 0x1, 0x20000004, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)='\a', 0x1}], 0x1}}], 0x1, 0x2006c0c0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x5, 0x44, 0x2, 0x8, 0x400}, 0x20)
sendto$inet(r0, &(0x7f00000002c0)="ab", 0x34000, 0x0, &(0x7f0000000300)={0x2, 0x4e22, @local}, 0x10)

1.978078876s ago: executing program 0 (id=624):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000640)='GPL\x00'}, 0x80)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000700)={r2}, 0x8)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740))
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000b00)={r1, &(0x7f0000000b40)}, 0x20)

1.947406239s ago: executing program 3 (id=625):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x30, 0x1, 0x0, 0x8000}, {0x6, 0xfd, 0x0, 0x1579}]}, 0x10)
lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000940)='./file0\x00', 0x200000, &(0x7f0000000980)={[{@resgid={'resgid', 0x3d, r1}}, {}, {@lazytime}, {@nojournal_checksum}, {@bsdgroups}, {@block_validity}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x580, &(0x7f0000001f40)="$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")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b15, &(0x7f0000000100)={'wlan0\x00'})
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000fc0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000001000)='./file0/file0\x00')

1.890480645s ago: executing program 0 (id=626):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004a80)={0x2, &(0x7f0000004ac0)=[{0x20, 0x0, 0x0, 0xc8e}, {0x16, 0x3}]}, 0x10)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000004b00)={0x0, 0x8000}, 0x4)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000004b40)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004b80)=[{{&(0x7f0000004bc0)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r1, &(0x7f0000004c00)="e8", 0x6200, 0x88050000, 0x0, 0x0)

1.769672067s ago: executing program 8 (id=627):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
r1 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
pwrite64(r0, &(0x7f0000000140)="a3dfac52fb39", 0x6, 0x7fff)

1.716872513s ago: executing program 0 (id=628):
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@block_validity}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@discard}, {@prjquota}]}, 0x1, 0x4a0, &(0x7f0000000b80)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)

1.695863665s ago: executing program 3 (id=629):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000004c0)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r0, 0x10, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x40)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x16, 0xb, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000e40)={0x0, <r3=>0x0}, 0x8)
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000e80)=r3, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000ec0)={r4, r2, 0x4, r1}, 0x10)

1.664271048s ago: executing program 8 (id=630):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x102, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x2)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000940))
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x81)
r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xa)
write(r2, &(0x7f0000000480)="51537cfc47f7c32ffb44d45b379e516fd1ede209a1", 0x15)
ioctl$TCSETS(r1, 0x5402, &(0x7f00000009c0)={0x7, 0x7fff, 0x400, 0x3, 0x3, "08de1420cf31a00d20196e0ce793345dd81d13"})

1.587145746s ago: executing program 0 (id=631):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, 0x0)
ioctl$EVIOCGSND(r1, 0x8040451a, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x0, 0x10, &(0x7f0000000800), 0xf000000}, 0x48)
syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000371e8e8403d0fa3684a77010203010902120001ae0510020904990800ffffff"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0})

1.571445378s ago: executing program 3 (id=632):
sched_setscheduler(0x0, 0x1, 0x0)
gettid()
getpid()
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/fs/afs/cells\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='add syz0 127.0.0.1+7+', 0x15)

1.435634542s ago: executing program 3 (id=633):
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000680)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv4={0x806, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x91, 0x0, @empty}}}}}, 0x0)

1.383016067s ago: executing program 8 (id=634):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{0xffff1000, 0xeeee8000, 0x4, 0xf6, 0x2, 0xf3, 0xd7, 0x8, 0x7, 0x1, 0x7, 0x5}, {0x50000, 0xeeeb2ffa, 0xd, 0x5, 0x3, 0x8, 0x5, 0x0, 0x80, 0xfc, 0xfc, 0x4}, {0x200000, 0x4000, 0xb, 0x6, 0xff, 0x3, 0x0, 0x7, 0x0, 0x27, 0xd5, 0x2}, {0x4000, 0x8080000, 0x9, 0x9, 0x8f, 0x4, 0x83, 0xfc, 0xb, 0x1, 0x9, 0x3}, {0xffffffff, 0x0, 0x3, 0x2, 0x6, 0x1, 0x9, 0x2, 0x3, 0x3, 0x0, 0xe4}, {0x200000, 0xffff1000, 0x3, 0x0, 0x3, 0x0, 0xde, 0x9, 0x3, 0x0, 0x4, 0x30}, {0xdddd0000, 0x9000, 0xc, 0x1, 0x8, 0x3, 0x2, 0x6, 0x91, 0x8, 0x9, 0x88}, {0x8000000, 0x80a0000, 0x10, 0x6, 0xc2, 0x8, 0x6, 0x10, 0x7, 0x3, 0x80, 0x87}, {0x6000, 0x8000}, {0xe9eb89d253be8b8b, 0x9}, 0x50000, 0x0, 0x0, 0x400408, 0x6, 0x9400, 0xeeef0000, [0x6, 0x5, 0x5, 0xe]})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xa, 0x0, 0x0, 0x0, 0x10, 0x0, 0xfc, 0x80, 0x9, 0x2, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0xe, 0x1000, 0xfffffffe, 0x0, [{0x2, 0x6, 0x87}, {0xf8, 0x8, 0x40, '\x00', 0x8}, {0xff, 0x6, 0x9, '\x00', 0x6}, {0x0, 0x3, 0xd4, '\x00', 0xf9}, {0xfd, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x5, 0xd8, '\x00', 0xdf}, {0x7, 0xd7, 0xf1, '\x00', 0xff}, {0x3, 0x6, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7}, {0xcf, 0x3, 0x0, '\x00', 0x48}, {0x1b, 0xee, 0x7, '\x00', 0x4}, {0x39, 0xfe, 0xff, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x65, 0x9, 0x2, '\x00', 0xd}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x81}, {0x0, 0xb, 0x80, '\x00', 0x7f}, {0xc, 0x86, 0x9, '\x00', 0xd2}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x44}]}})

1.115982855s ago: executing program 3 (id=635):
io_uring_setup(0x1369, &(0x7f0000000400)={0x0, 0x1f8a, 0x0, 0x3, 0x28c})
close(0x3)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
membarrier(0x10, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0))

637.634614ms ago: executing program 7 (id=636):
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$FUSE_INIT(r0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
syz_read_part_table(0x5f2, &(0x7f0000000000)="$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")

636.361874ms ago: executing program 8 (id=646):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/kernel/kptr_restrict\x00', 0x1, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
read$FUSE(r0, 0x0, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0xfffffff7)

586.54829ms ago: executing program 8 (id=637):
r0 = openat$kvm(0x0, &(0x7f0000000380), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000003c0)={0x0, &(0x7f0000000400)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x48})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = syz_create_resource$kvm_nested_state(&(0x7f0000000600)=@vmx={0x100, 0x0, 0x2080, {0x8000000, 0xc000, {0x1}, 0x0, 0x2}, {"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", "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"}})
ioctl$KVM_GET_NESTED_STATE_res(r3, 0xc080aebe, r4)

444.959584ms ago: executing program 0 (id=638):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x474c, 0x4)
bind$inet(r0, &(0x7f0000000300)={0x2, 0x0, @local}, 0x6f)
connect$inet(r0, &(0x7f0000000540)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000000580), 0x800001d, 0x300)
setsockopt$inet_int(r0, 0x0, 0x19, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000008c0), 0x291962b, 0x45833af92e4b39ff, 0x0)

286.68016ms ago: executing program 8 (id=639):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000240)='tcp 2', 0x5)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000b00)={0x6, 0x1, 0x0, 0x20000000, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x44}, @multicast2}, 0x10)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000b40)=0xa, 0x4)

0s ago: executing program 4 (id=640):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x70bd26, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r1 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r1, 0x4, 0x70bd27, 0x25dfdbff}, 0x14}}, 0x40080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r0)
recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   83.019318][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   83.022235][ T4773] loop4: detected capacity change from 0 to 1024
[   83.046086][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   83.086176][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   83.125143][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   83.154852][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   83.183467][ T4773] EXT4-fs (loop4): Ignoring removed bh option
[   83.198616][ T4773] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[   83.209676][ T4544] device veth0_vlan entered promiscuous mode
[   83.224476][ T4709] chnl_net:caif_netlink_parms(): no params data found
[   83.256794][ T4544] device veth1_vlan entered promiscuous mode
[   83.263977][ T4778] loop3: detected capacity change from 0 to 128
[   83.393297][ T4544] device veth0_macvtap entered promiscuous mode
[   83.448249][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   83.468009][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   83.482596][ T4778] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[   83.512189][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   83.521259][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   83.530197][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   83.559713][ T4544] device veth1_macvtap entered promiscuous mode
[   83.630135][ T4778] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.678201][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.723782][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.731976][ T4709] device bridge_slave_0 entered promiscuous mode
[   83.738995][ T4273] Bluetooth: hci1: command 0x0419 tx timeout
[   83.777867][ T4544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.821994][ T4544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.846850][ T4544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.890503][ T4544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.921977][ T4544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.941623][ T4544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.971814][ T4544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.983990][ T4544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.013412][ T4544] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.022121][ T4768] loop5: detected capacity change from 0 to 40427
[   84.026376][ T4544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.047385][ T4544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.064298][ T4544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.082670][ T4544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.145350][ T4768] F2FS-fs (loop5): Invalid SB checksum offset: 0
[   84.151729][ T4768] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[   84.170323][ T4544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.183235][ T4768] F2FS-fs (loop5): invalid crc value
[   84.189392][ T4544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.221188][ T4544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.244239][ T4768] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   84.253310][ T4544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.303961][ T4544] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.322809][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.340816][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.371966][ T4709] device bridge_slave_1 entered promiscuous mode
[   84.389647][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   84.399885][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   84.414779][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   84.428297][ T4768] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[   84.430747][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   84.437849][ T4768] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   84.452586][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   84.495660][ T4544] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.514961][ T4544] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.533762][ T4544] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.542499][ T4544] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.663410][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.691278][ T4397] attempt to access beyond end of device
[   84.691278][ T4397] loop5: rw=524288, want=45072, limit=40427
[   84.726043][ T4397] attempt to access beyond end of device
[   84.726043][ T4397] loop5: rw=0, want=45072, limit=40427
[   84.741338][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.784501][  T422] attempt to access beyond end of device
[   84.784501][  T422] loop5: rw=2049, want=45112, limit=40427
[   84.853979][   T13] Bluetooth: hci4: command 0x041b tx timeout
[   84.897262][ T4709] team0: Port device team_slave_0 added
[   84.988425][ T4709] team0: Port device team_slave_1 added
[   85.020882][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.031457][ T4818] FAULT_INJECTION: forcing a failure.
[   85.031457][ T4818] name failslab, interval 1, probability 0, space 0, times 1
[   85.051858][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.073912][ T4818] CPU: 0 PID: 4818 Comm: syz.3.114 Not tainted syzkaller #0
[   85.085078][ T4818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   85.095155][ T4818] Call Trace:
[   85.098455][ T4818]  <TASK>
[   85.101377][ T4818]  dump_stack_lvl+0x188/0x250
[   85.106060][ T4818]  ? show_regs_print_info+0x20/0x20
[   85.111248][ T4818]  ? load_image+0x410/0x410
[   85.115745][ T4818]  ? __might_sleep+0xf0/0xf0
[   85.120324][ T4818]  ? __lock_acquire+0x7d40/0x7d40
[   85.125361][ T4818]  should_fail+0x383/0x4b0
[   85.129770][ T4818]  should_failslab+0x5/0x20
[   85.134259][ T4818]  slab_pre_alloc_hook+0x51/0xc0
[   85.139276][ T4818]  ? __rds_conn_create+0x74e/0x1ea0
[   85.144475][ T4818]  kmem_cache_alloc+0x3d/0x280
[   85.149231][ T4818]  __rds_conn_create+0x74e/0x1ea0
[   85.154256][ T4818]  ? rds_message_copy_from_user+0x65e/0xd80
[   85.160142][ T4818]  ? rds_conn_create+0x50/0x50
[   85.164900][ T4818]  ? rds_message_map_pages+0x790/0x790
[   85.170354][ T4818]  rds_conn_create_outgoing+0x3f/0x50
[   85.175716][ T4818]  rds_sendmsg+0xf56/0x1d70
[   85.180224][ T4818]  ? rds_send_sndbuf_remove+0x230/0x230
[   85.185761][ T4818]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[   85.192171][ T4818]  ? aa_sock_msg_perm+0x94/0x150
[   85.197104][ T4818]  ? apparmor_socket_sendmsg+0x88/0x230
[   85.202639][ T4818]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[   85.207914][ T4818]  ? security_socket_sendmsg+0x7c/0xa0
[   85.213371][ T4818]  ? rds_send_sndbuf_remove+0x230/0x230
[   85.219021][ T4818]  ____sys_sendmsg+0x5be/0x8f0
[   85.223804][ T4818]  ? __sys_sendmsg_sock+0x30/0x30
[   85.228838][ T4818]  ? import_iovec+0x6f/0xa0
[   85.233335][ T4818]  ___sys_sendmsg+0x236/0x2e0
[   85.238008][ T4818]  ? __sys_sendmsg+0x290/0x290
[   85.242772][ T4818]  ? rds_bind+0x38d/0x870
[   85.247109][ T4818]  __se_sys_sendmsg+0x1b7/0x2a0
[   85.251954][ T4818]  ? __x64_sys_sendmsg+0x80/0x80
[   85.256877][ T4818]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[   85.262859][ T4818]  ? lockdep_hardirqs_on+0x94/0x140
[   85.268050][ T4818]  do_syscall_64+0x4c/0xa0
[   85.272456][ T4818]  ? clear_bhb_loop+0x30/0x80
[   85.277122][ T4818]  ? clear_bhb_loop+0x30/0x80
[   85.281812][ T4818]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   85.287711][ T4818] RIP: 0033:0x7fedb9c94b19
[   85.292113][ T4818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   85.311712][ T4818] RSP: 002b:00007fedb7eeb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   85.320384][ T4818] RAX: ffffffffffffffda RBX: 00007fedb9f1afa0 RCX: 00007fedb9c94b19
[   85.328345][ T4818] RDX: 0000000004000000 RSI: 0000200000000080 RDI: 0000000000000004
[   85.336324][ T4818] RBP: 00007fedb9d2cb70 R08: 0000000000000000 R09: 0000000000000000
[   85.344287][ T4818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   85.352243][ T4818] R13: 00007fedb9f1b038 R14: 00007fedb9f1afa0 R15: 00007ffeb0b61288
[   85.360216][ T4818]  </TASK>
[   85.374976][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.389260][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.397302][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.463827][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.497527][  T422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.522150][  T422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.551647][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   85.582909][ T4291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.614268][ T4291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.618007][ T4709] device hsr_slave_0 entered promiscuous mode
[   85.664197][ T4709] device hsr_slave_1 entered promiscuous mode
[   85.674563][ T4709] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   85.705586][ T4709] Cannot create hsr debugfs directory
[   85.714130][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   86.136726][ T4709] netdevsim netdevsim7 netdevsim0: renamed from eth0
[   86.179596][ T4709] netdevsim netdevsim7 netdevsim1: renamed from eth1
[   86.208808][ T4709] netdevsim netdevsim7 netdevsim2: renamed from eth2
[   86.236206][ T4709] netdevsim netdevsim7 netdevsim3: renamed from eth3
[   86.536323][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.586469][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   86.600983][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   86.652645][ T4709] 8021q: adding VLAN 0 to HW filter on device team0
[   86.687523][ T1333] cfg80211: failed to load regulatory.db
[   86.706915][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   86.737387][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   86.790593][  T145] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.797755][  T145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.816058][ T4852] loop6: detected capacity change from 0 to 256
[   86.879836][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   86.897958][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   86.920380][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   86.929024][ T4284] Bluetooth: hci4: command 0x040f tx timeout
[   86.956456][  T145] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.963548][  T145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.996481][ T4852] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d)
[   87.078016][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   87.128907][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   87.181748][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   87.200842][ T4833] loop4: detected capacity change from 0 to 32768
[   87.221107][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   87.254541][ T4852] loop_set_status: loop6 () has still dirty pages (nrpages=2)
[   87.268201][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   87.282052][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   87.309861][ T4709] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   87.347871][ T4833] XFS (loop4): Mounting V5 Filesystem
[   87.413737][ T4709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   87.484342][ T4278] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[   87.494449][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   87.506253][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   87.515295][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   87.524575][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   87.536246][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   87.544731][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   87.555079][ T4833] XFS (loop4): Ending clean mount
[   87.710622][ T4855] rxe_eth0 speed is unknown, defaulting to 1000
[   87.843891][ T4278] usb 4-1: not running at top speed; connect to a high speed hub
[   87.933854][ T4278] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   87.972647][ T4278] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[   88.019236][ T4278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.039083][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   88.092598][ T4198] XFS (loop4): Unmounting Filesystem
[   88.112209][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   88.154354][ T4278] usb 4-1: Found UVC 1.00 device <unnamed> (046d:0825)
[   88.170534][ T4278] usb 4-1: No streaming interface found for terminal 2.
[   88.176406][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.374530][ T4278] usb 4-1: USB disconnect, device number 4
[   88.631134][ T4855] chnl_net:caif_netlink_parms(): no params data found
[   88.730004][ T4900] rxe_eth0 speed is unknown, defaulting to 1000
[   88.862981][ T4855] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.878405][ T4855] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.894902][ T4855] device bridge_slave_0 entered promiscuous mode
[   88.906300][ T4911] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   88.915602][ T4911] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   88.924584][ T4911] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   88.933294][ T4911] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   88.944556][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): vxlan0: link becomes ready
[   88.963482][ T1241] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.979875][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   88.988948][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   89.004078][ T4276] Bluetooth: hci4: command 0x0419 tx timeout
[   89.004521][    T7] Bluetooth: hci0: command 0x0409 tx timeout
[   89.021199][ T4855] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.029469][ T4855] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.040858][ T4855] device bridge_slave_1 entered promiscuous mode
[   89.050308][ T4911] Zero length message leads to an empty skb
[   89.069023][ T4709] device veth0_vlan entered promiscuous mode
[   89.091935][ T1241] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.135843][ T4855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.154756][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   89.168319][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   89.193001][ T4709] device veth1_vlan entered promiscuous mode
[   89.219769][ T4855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.248701][ T1241] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.269019][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   89.279188][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   89.287772][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   89.336505][ T4855] team0: Port device team_slave_0 added
[   89.363433][ T1241] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.391401][ T4855] team0: Port device team_slave_1 added
[   89.450660][ T4855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.464988][ T4855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.501347][ T4855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.533464][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   89.547157][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   89.556195][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   89.590359][ T4709] device veth0_macvtap entered promiscuous mode
[   89.599070][ T4855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.607467][ T4855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.634837][ T4855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.676218][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   89.712979][ T4709] device veth1_macvtap entered promiscuous mode
[   89.760688][ T4855] device hsr_slave_0 entered promiscuous mode
[   89.781666][ T4855] device hsr_slave_1 entered promiscuous mode
[   89.789995][ T4855] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.798503][ T4855] Cannot create hsr debugfs directory
[   89.812350][ T1241] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.839594][ T4900] chnl_net:caif_netlink_parms(): no params data found
[   89.859072][ T4709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.872672][ T4709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.883443][ T4709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.896094][ T4709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.906039][ T4709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.916602][ T4709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.927138][ T4709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.937738][ T4709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.947951][ T4709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.958567][ T4709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.983437][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.025327][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   90.041011][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   90.069390][ T4709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.085690][ T4709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.122576][ T4709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.133593][ T4709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.148129][ T4709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.159060][ T4709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.173120][ T4709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.190958][ T4709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.202967][ T4709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.215280][ T4709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.226810][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.276208][ T1241] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.316017][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   90.354630][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   90.375836][ T4709] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.395233][ T4709] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.413341][ T4709] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.423297][ T4709] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.495652][ T1241] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.648898][ T1241] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.684246][ T4279] Bluetooth: hci1: command 0x0409 tx timeout
[   90.741434][ T4900] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.764234][ T4900] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.783474][ T4900] device bridge_slave_0 entered promiscuous mode
[   90.815494][ T4900] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.833055][ T4900] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.841313][ T4900] device bridge_slave_1 entered promiscuous mode
[   90.869986][ T4950] loop3: detected capacity change from 0 to 32768
[   90.919089][ T4900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.944397][ T4950] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.133 (4950)
[   90.966373][ T4900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.001811][ T4473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.024788][ T4473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.054234][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   91.077940][ T1241] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.089089][ T4950] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[   91.093875][ T4312] Bluetooth: hci0: command 0x041b tx timeout
[   91.098484][ T4950] BTRFS info (device loop3): using free space tree
[   91.112841][ T4950] BTRFS info (device loop3): has skinny extents
[   91.123177][ T4900] team0: Port device team_slave_0 added
[   91.137338][  T422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.141169][ T4900] team0: Port device team_slave_1 added
[   91.167161][ T1241] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.177602][  T422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.198897][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   91.261827][ T1241] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.326179][ T4900] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.333250][ T4900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.394350][ T4900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.423165][ T1241] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.454523][ T4900] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.489026][ T4900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.515855][ T4900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.518713][ T4950] BTRFS info (device loop3): enabling ssd optimizations
[   91.563391][ T4981] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   91.605588][ T4900] device hsr_slave_0 entered promiscuous mode
[   91.642869][ T4900] device hsr_slave_1 entered promiscuous mode
[   91.704827][ T4900] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.712439][ T4900] Cannot create hsr debugfs directory
[   91.809951][   T25] kauditd_printk_skb: 9 callbacks suppressed
[   91.809984][   T25] audit: type=1800 audit(1793720254.939:21): pid=4996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.133" name="file1" dev="loop3" ino=260 res=0 errno=0
[   91.950015][   T25] audit: type=1800 audit(1793720255.079:22): pid=4996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.133" name="file1" dev="loop3" ino=260 res=0 errno=0
[   92.015994][ T4855] netdevsim netdevsim8 netdevsim0: renamed from eth0
[   92.070842][ T4855] netdevsim netdevsim8 netdevsim1: renamed from eth1
[   92.126805][ T4855] netdevsim netdevsim8 netdevsim2: renamed from eth2
[   92.191320][ T4855] netdevsim netdevsim8 netdevsim3: renamed from eth3
[   92.316423][ T4473] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[   92.619663][ T4855] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.636745][ T4900] netdevsim netdevsim9 netdevsim0: renamed from eth0
[   92.765177][ T1333] Bluetooth: hci1: command 0x041b tx timeout
[   92.837176][ T4900] netdevsim netdevsim9 netdevsim1: renamed from eth1
[   92.901262][ T5028] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   92.903200][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   92.972823][ T4370] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop3 scanned by udevd (4370)
[   92.985681][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   93.012893][ T4900] netdevsim netdevsim9 netdevsim2: renamed from eth2
[   93.065699][ T4855] 8021q: adding VLAN 0 to HW filter on device team0
[   93.073049][ T4900] netdevsim netdevsim9 netdevsim3: renamed from eth3
[   93.175296][    T7] Bluetooth: hci0: command 0x040f tx timeout
[   93.223407][ T5039] loop7: detected capacity change from 0 to 256
[   93.236044][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   93.266203][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   93.303492][  T422] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.306162][ T5039] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   93.310717][  T422] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.336118][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   93.345722][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   93.364494][  T422] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.371633][  T422] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.391835][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   93.405936][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   93.425155][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   93.444412][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   93.457509][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   93.467135][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   93.477128][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   93.486391][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   93.543859][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   93.552349][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   93.566058][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   93.576376][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   93.600501][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   93.802420][ T4900] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.912841][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   93.932523][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   93.953168][ T4900] 8021q: adding VLAN 0 to HW filter on device team0
[   93.990095][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   93.999872][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   94.009221][  T422] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.016349][  T422] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.054141][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   94.073185][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   94.084809][  T422] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.091939][  T422] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.101257][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   94.140811][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   94.162048][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   94.180714][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   94.212769][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   94.584792][ T5067] FAULT_INJECTION: forcing a failure.
[   94.584792][ T5067] name failslab, interval 1, probability 0, space 0, times 0
[   94.623605][ T5067] CPU: 1 PID: 5067 Comm: syz.3.150 Not tainted syzkaller #0
[   94.630937][ T5067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   94.641006][ T5067] Call Trace:
[   94.644297][ T5067]  <TASK>
[   94.647231][ T5067]  dump_stack_lvl+0x188/0x250
[   94.651933][ T5067]  ? show_regs_print_info+0x20/0x20
[   94.657151][ T5067]  ? load_image+0x410/0x410
[   94.661684][ T5067]  should_fail+0x383/0x4b0
[   94.666119][ T5067]  ? bpf_clone_redirect+0x1c2/0x460
[   94.671331][ T5067]  should_failslab+0x5/0x20
[   94.675847][ T5067]  slab_pre_alloc_hook+0x51/0xc0
[   94.680800][ T5067]  ? bpf_clone_redirect+0x1c2/0x460
[   94.686012][ T5067]  __kmalloc_node_track_caller+0x68/0x3a0
[   94.691750][ T5067]  ? bpf_clone_redirect+0x1c2/0x460
[   94.696972][ T5067]  ? bpf_clone_redirect+0x1c2/0x460
[   94.702185][ T5067]  pskb_expand_head+0x128/0x1100
[   94.707150][ T5067]  bpf_clone_redirect+0x1c2/0x460
[   94.712199][ T5067]  bpf_prog_c08ef512837047f4+0x59/0xba8
[   94.717761][ T5067]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[   94.723767][ T5067]  ? lock_chain_count+0x20/0x20
[   94.728635][ T5067]  ? __kasan_slab_alloc+0xa9/0xc0
[   94.733692][ T5067]  ? seqcount_lockdep_reader_access+0x127/0x1d0
[   94.739948][ T5067]  ? lockdep_hardirqs_on+0x94/0x140
[   94.745174][ T5067]  ? ktime_get+0x7b/0x270
[   94.749522][ T5067]  ? seqcount_lockdep_reader_access+0x18d/0x1d0
[   94.755782][ T5067]  ? ktime_get_real_ts64+0x440/0x440
[   94.761124][ T5067]  ? read_lock_is_recursive+0x10/0x10
[   94.766520][ T5067]  ? __cant_sleep+0x220/0x220
[   94.771223][ T5067]  ? bpf_test_timer_continue+0x13d/0x380
[   94.776883][ T5067]  bpf_test_run+0x2a8/0x800
[   94.781429][ T5067]  ? convert___skb_to_skb+0x4c0/0x4c0
[   94.786824][ T5067]  ? eth_get_headlen+0x200/0x200
[   94.791781][ T5067]  ? convert___skb_to_skb+0x3d/0x4c0
[   94.797119][ T5067]  bpf_prog_test_run_skb+0x9fb/0x1190
[   94.802529][ T5067]  ? cpu_online+0x60/0x60
[   94.806920][ T5067]  bpf_prog_test_run+0x31c/0x390
[   94.811877][ T5067]  __sys_bpf+0x5a5/0x6f0
[   94.816142][ T5067]  ? bpf_link_show_fdinfo+0x380/0x380
[   94.821551][ T5067]  __x64_sys_bpf+0x78/0x90
[   94.825986][ T5067]  do_syscall_64+0x4c/0xa0
[   94.830415][ T5067]  ? clear_bhb_loop+0x30/0x80
[   94.835105][ T5067]  ? clear_bhb_loop+0x30/0x80
[   94.839810][ T5067]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   94.845719][ T5067] RIP: 0033:0x7fedb9c94b19
[   94.850149][ T5067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   94.869769][ T5067] RSP: 002b:00007fedb7eeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   94.878203][ T5067] RAX: ffffffffffffffda RBX: 00007fedb9f1afa0 RCX: 00007fedb9c94b19
[   94.886285][ T5067] RDX: 0000000000000028 RSI: 0000200000000bc0 RDI: 000000000000000a
[   94.894277][ T5067] RBP: 00007fedb9d2cb70 R08: 0000000000000000 R09: 0000000000000000
[   94.902264][ T5067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   94.910253][ T5067] R13: 00007fedb9f1b038 R14: 00007fedb9f1afa0 R15: 00007ffeb0b61288
[   94.918262][ T5067]  </TASK>
[   95.153689][    C0] sched: RT throttling activated
[   95.373939][ T5024] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   95.443256][    T7] Bluetooth: hci1: command 0x040f tx timeout
[   95.457980][ T4855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.460325][    T7] Bluetooth: hci0: command 0x0419 tx timeout
[   95.486998][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   95.516039][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   95.570270][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   95.594013][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   95.621047][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   95.632221][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   95.641399][ T5024] usb 8-1: Using ep0 maxpacket: 8
[   95.651015][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   95.669999][ T4900] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   95.686103][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   95.696622][ T5087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.155'.
[   95.706626][ T5087] netlink: 'syz.3.155': attribute type 11 has an invalid length.
[   95.716980][ T5087] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   95.726794][ T5087] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   95.736123][ T5087] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   95.744873][ T5087] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   95.755402][ T5087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.155'.
[   95.771566][ T5087] netlink: 'syz.3.155': attribute type 11 has an invalid length.
[   95.784681][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   95.796098][ T5024] usb 8-1: config 179 has an invalid interface number: 65 but max is 0
[   95.814335][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   95.822352][ T5024] usb 8-1: config 179 has no interface number 0
[   95.839246][ T5024] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   95.877577][ T5024] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   95.934855][ T5024] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   95.980922][ T5024] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[   96.004502][ T5024] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   96.027963][ T5024] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   96.039857][ T5024] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.082550][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   96.091037][ T5072] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   96.105479][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   96.122479][ T5112] loop4: detected capacity change from 0 to 8
[   96.274775][ T4855] device veth0_vlan entered promiscuous mode
[   96.306247][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   96.324695][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   96.379133][ T4855] device veth1_vlan entered promiscuous mode
[   96.398748][ T5024] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input5
[   96.403284][ T4900] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.434605][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   96.444538][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   96.475451][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   96.492217][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   96.527116][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   96.562485][ T5024] usb 8-1: USB disconnect, device number 2
[   96.568429][    C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[   96.568566][    C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[   96.597029][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   96.618066][ T5024] xpad 8-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[   96.632489][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   96.656902][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   96.764228][ T4855] device veth0_macvtap entered promiscuous mode
[   96.799981][ T4855] device veth1_macvtap entered promiscuous mode
[   96.903550][ T4855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.935757][ T4855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.956059][ T4855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.981162][ T4855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.013816][ T4855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.043848][ T4855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.067160][ T4855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.077949][ T4855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.094003][ T4855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.105623][ T4855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.116562][ T5147] Disabled LAPIC found during irq injection
[   97.124569][ T4855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.137221][ T4855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.151989][ T4855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.165337][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   97.181385][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   97.192506][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   97.201956][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   97.222992][ T5149] 9pnet: p9_errstr2errno: server reported unknown error �@¬¿Ê6)ÎxÑ$)8k‹îh½H&‘ÙB—J‘$ÜûI’Ýå
[   97.232840][ T4855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.279232][ T4855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.306556][ T4855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.357078][ T4855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.383344][ T4855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.402722][ T4855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.427095][ T4855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.458150][ T4855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.487265][ T4855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.494278][ T1109] Bluetooth: hci1: command 0x0419 tx timeout
[   97.514717][ T4855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.533822][ T4855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.553801][ T4855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.595259][ T4855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.641344][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   97.661237][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   97.673419][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   97.691544][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   97.707601][ T4855] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.721167][ T4855] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.734770][ T4855] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.743507][ T4855] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.794858][ T5173] loop3: detected capacity change from 0 to 8192
[   97.871629][ T4900] device veth0_vlan entered promiscuous mode
[   97.885448][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   97.904063][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   97.913015][   T25] audit: type=1800 audit(1793720261.039:23): pid=5173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.173" name="file1" dev="loop3" ino=1048661 res=0 errno=0
[   97.964408][ T4900] device veth1_vlan entered promiscuous mode
[   98.017209][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   98.036402][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   98.044897][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   98.067037][ T5180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.174'.
[   98.104809][ T5180] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.146609][ T5180] device bridge_slave_0 left promiscuous mode
[   98.153997][ T5180] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.299004][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   98.315956][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   98.343076][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   98.371840][ T4900] device veth0_macvtap entered promiscuous mode
[   98.394573][  T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.402426][  T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.429042][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   98.438883][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   98.453525][ T4900] device veth1_macvtap entered promiscuous mode
[   98.530880][ T5192] loop3: detected capacity change from 0 to 512
[   98.532414][ T4900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.558905][ T4900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.579442][ T5192] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   98.587844][ T4900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.601283][ T5192] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   98.612232][ T4900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.634174][ T5192] EXT4-fs (loop3): SIPHASH is not a valid default hash value
[   98.640904][ T4900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.652451][ T4900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.662429][ T4900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.674011][ T4900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.687221][ T4900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.698534][ T4900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.708601][ T4900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.719266][ T4900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.729247][ T4900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.740133][ T4900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.752425][ T4900] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.762860][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   98.773483][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   98.793502][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   98.860551][  T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.863414][ T4900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.889021][  T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.928082][ T4900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.973914][ T4900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.999194][ T4900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.023554][ T4900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.052341][ T4900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.062716][ T4900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.080369][ T4900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.100532][ T4900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.122973][ T4900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.138884][ T4900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.159899][ T4900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.174833][ T4900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.189957][ T4900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.201509][ T4900] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.224123][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   99.264466][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   99.294309][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   99.353417][ T4900] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.380237][ T4900] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.396896][ T4900] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.406462][ T4900] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.683887][   T21] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   99.750636][  T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.768954][  T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.824557][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   99.866423][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.880195][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.928258][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  100.027723][ T5244] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  100.044782][   T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  100.095684][   T21] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  100.140373][   T21] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  100.179276][   T21] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64
[  100.205129][   T21] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64
[  100.256169][   T21] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64
[  100.286851][   T21] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64
[  100.318130][   T21] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64
[  100.353872][   T21] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  100.375450][ T4312] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  100.386833][   T21] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  100.417526][   T21] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[  100.453261][   T21] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64
[  100.481338][ T5244] loop8: detected capacity change from 0 to 8192
[  100.496520][   T21] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 57537, setting to 1024
[  100.528204][   T21] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  100.573432][   T21] usb 4-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14
[  100.638251][ T5244]  loop8: p1 < > p2 < > p3 p4 < >
[  100.644333][ T4312] usb 8-1: Using ep0 maxpacket: 8
[  100.664334][ T5244] loop8: partition table partially beyond EOD, truncated
[  100.674906][ T1241] device hsr_slave_0 left promiscuous mode
[  100.702835][ T1241] device hsr_slave_1 left promiscuous mode
[  100.723358][ T1241] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.735410][ T5244] loop8: p1 start 67108864 is beyond EOD, truncated
[  100.742172][ T5263] loop9: detected capacity change from 0 to 8192
[  100.764657][   T21] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00
[  100.789121][   T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.803968][ T1241] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.812706][ T5244] loop8: p3 start 100859904 is beyond EOD, truncated
[  100.821326][   T21] usb 4-1: Product: syz
[  100.843417][   T21] usb 4-1: Manufacturer: syz
[  100.849861][   T21] usb 4-1: SerialNumber: syz
[  100.862167][ T5263] REISERFS (device loop9): found reiserfs format "3.6" with non-standard journal
[  100.874059][ T5263] REISERFS (device loop9): using ordered data mode
[  100.880598][ T5263] reiserfs: using flush barriers
[  100.886158][ T5225] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  100.893859][ T1241] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.894239][ T5225] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  100.901531][ T1241] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.914568][ T5263] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  100.933331][ T1241] device bridge_slave_1 left promiscuous mode
[  100.944019][ T1241] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.963511][ T1241] device bridge_slave_0 left promiscuous mode
[  100.970108][ T4312] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  100.973978][ T5225] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  100.993854][ T5225] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  100.999636][ T4312] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.001062][ T5225] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  101.014522][ T1241] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.017198][ T5263] REISERFS (device loop9): checking transaction log (loop9)
[  101.054192][ T4312] usb 8-1: Product: syz
[  101.061085][ T5225] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  101.081987][ T4312] usb 8-1: Manufacturer: syz
[  101.100391][ T5225] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  101.103727][ T4312] usb 8-1: SerialNumber: syz
[  101.142799][ T5225] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  101.161244][ T4312] usb 8-1: config 0 descriptor??
[  101.166107][ T5225] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  101.199896][ T5225] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  101.221371][ T5225] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  101.229103][ T1241] device hsr_slave_0 left promiscuous mode
[  101.241577][ T5225] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  101.282584][   T21] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected
[  101.291239][ T1241] device hsr_slave_1 left promiscuous mode
[  101.302264][   T21] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 7
[  101.312144][ T1241] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.315540][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory
[  101.331812][ T4370] udevd[4370]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory
[  101.343046][ T1241] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.351730][ T5263] REISERFS (device loop9): Using tea hash to sort names
[  101.364629][ T1241] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.372072][ T1241] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.383858][ T5263] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage.
[  101.395677][   T21] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  101.404558][ T1241] device bridge_slave_1 left promiscuous mode
[  101.410820][ T1241] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.433948][   T21] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6
[  101.449827][ T1241] device bridge_slave_0 left promiscuous mode
[  101.456416][ T4312] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  101.474228][ T1241] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.484528][   T21] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  101.507083][ T1241] device hsr_slave_0 left promiscuous mode
[  101.522507][ T1241] device hsr_slave_1 left promiscuous mode
[  101.533924][ T1241] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.546580][ T5263] CacheFiles: Can't set xattr on cache [4] (err 95)
[  101.554808][ T1241] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.599942][ T5263] CacheFiles: Failed to register: -95
[  101.615977][ T1241] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.661326][ T1241] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.701779][ T1241] device bridge_slave_1 left promiscuous mode
[  101.715302][ T1241] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.742631][ T1241] device bridge_slave_0 left promiscuous mode
[  101.759228][ T1241] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.818054][ T1241] device veth1_macvtap left promiscuous mode
[  101.828385][ T1241] device veth0_macvtap left promiscuous mode
[  101.838594][ T1241] device veth1_vlan left promiscuous mode
[  101.848786][ T1241] device veth0_vlan left promiscuous mode
[  101.874696][ T1241] device veth1_macvtap left promiscuous mode
[  101.880817][ T1241] device veth0_macvtap left promiscuous mode
[  101.950086][ T1241] device veth1_vlan left promiscuous mode
[  101.956579][ T1241] device veth0_vlan left promiscuous mode
[  101.972149][ T1241] device veth1_macvtap left promiscuous mode
[  101.983833][ T1241] device veth0_macvtap left promiscuous mode
[  101.989949][ T1241] device veth1_vlan left promiscuous mode
[  101.990374][   T26] usb 4-1: USB disconnect, device number 5
[  102.007701][ T1241] device veth0_vlan left promiscuous mode
[  102.030774][   T26] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  102.056792][   T26] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  102.081796][   T26] keyspan 4-1:1.0: device disconnected
[  102.197622][ T4312] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -71
[  102.219098][ T4312] usb 8-1: USB disconnect, device number 3
[  102.772753][ T5294] loop7: detected capacity change from 0 to 128
[  102.858793][ T1241] team0 (unregistering): Port device team_slave_1 removed
[  102.901329][ T1241] team0 (unregistering): Port device team_slave_0 removed
[  102.941293][ T1241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.985430][ T1241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  103.114213][ T1241] bond0 (unregistering): Released all slaves
[  103.222611][ T1241] team0 (unregistering): Port device team_slave_1 removed
[  103.240304][ T1241] team0 (unregistering): Port device team_slave_0 removed
[  103.255506][ T1241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  103.272397][ T1241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  103.353583][ T1241] bond0 (unregistering): Released all slaves
[  103.452806][ T1241] team0 (unregistering): Port device team_slave_1 removed
[  103.471521][ T1241] team0 (unregistering): Port device team_slave_0 removed
[  103.485454][ T1241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  103.504718][ T1241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  103.577452][ T1241] bond0 (unregistering): Released all slaves
[  103.632190][ T5286] netlink: 4 bytes leftover after parsing attributes in process `syz.9.196'.
[  103.753201][ T5303] Unknown status report in ack skb
[  103.866792][ T5311] FAULT_INJECTION: forcing a failure.
[  103.866792][ T5311] name failslab, interval 1, probability 0, space 0, times 0
[  103.934207][ T5311] CPU: 0 PID: 5311 Comm: syz.3.204 Not tainted syzkaller #0
[  103.941540][ T5311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  103.951603][ T5311] Call Trace:
[  103.954894][ T5311]  <TASK>
[  103.957902][ T5311]  dump_stack_lvl+0x188/0x250
[  103.962578][ T5311]  ? show_regs_print_info+0x20/0x20
[  103.967776][ T5311]  ? load_image+0x410/0x410
[  103.972309][ T5311]  ? __might_sleep+0xf0/0xf0
[  103.976894][ T5311]  ? __lock_acquire+0x7d40/0x7d40
[  103.981917][ T5311]  should_fail+0x383/0x4b0
[  103.986329][ T5311]  should_failslab+0x5/0x20
[  103.990825][ T5311]  slab_pre_alloc_hook+0x51/0xc0
[  103.995751][ T5311]  kmem_cache_alloc_trace+0x47/0x290
[  104.001025][ T5311]  ? fscontext_alloc_log+0x4f/0x150
[  104.006213][ T5311]  ? alloc_fs_context+0x63c/0x7d0
[  104.011232][ T5311]  fscontext_alloc_log+0x4f/0x150
[  104.016250][ T5311]  __se_sys_fspick+0x2db/0x350
[  104.021004][ T5311]  ? __x64_sys_fspick+0x80/0x80
[  104.025844][ T5311]  ? lockdep_hardirqs_on+0x94/0x140
[  104.031035][ T5311]  do_syscall_64+0x4c/0xa0
[  104.035438][ T5311]  ? clear_bhb_loop+0x30/0x80
[  104.040109][ T5311]  ? clear_bhb_loop+0x30/0x80
[  104.044779][ T5311]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  104.050664][ T5311] RIP: 0033:0x7fedb9c94b19
[  104.055072][ T5311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  104.074674][ T5311] RSP: 002b:00007fedb7eeb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1
[  104.083087][ T5311] RAX: ffffffffffffffda RBX: 00007fedb9f1afa0 RCX: 00007fedb9c94b19
[  104.091051][ T5311] RDX: 0000000000000000 RSI: 0000200000000440 RDI: ffffffffffffff9c
[  104.099015][ T5311] RBP: 00007fedb9d2cb70 R08: 0000000000000000 R09: 0000000000000000
[  104.106975][ T5311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  104.114935][ T5311] R13: 00007fedb9f1b038 R14: 00007fedb9f1afa0 R15: 00007ffeb0b61288
[  104.122909][ T5311]  </TASK>
[  104.125960][    C0] vkms_vblank_simulate: vblank timer overrun
[  104.694942][ T5352] device ip6gretap0 entered promiscuous mode
[  104.710498][ T5352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.211'.
[  104.738927][ T5345] block device autoloading is deprecated and will be removed.
[  104.818735][ T5357] loop7: detected capacity change from 0 to 512
[  104.842006][ T5350] block device autoloading is deprecated and will be removed.
[  105.007340][ T5357] EXT4-fs (loop7): mounted filesystem without journal. Opts: stripe=0x0000000000010000,noinit_itable,nombcache,dioread_lock,errors=remount-ro,nodiscard,block_validity,. Quota mode: writeback.
[  105.034336][ T5357] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.089683][ T5367] loop8: detected capacity change from 0 to 128
[  105.143987][ T5357] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  105.245529][ T5357] EXT4-fs (loop7): Remounting filesystem read-only
[  105.337057][ T5375] attempt to access beyond end of device
[  105.337057][ T5375] loop8: rw=2049, want=1041, limit=128
[  105.560066][ T5382] loop9: detected capacity change from 0 to 2048
[  105.673030][ T5382] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found
[  105.709006][ T5382] UDF-fs: Scanning with blocksize 512 failed
[  105.766966][ T5382] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  106.073820][ T4312] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  106.280239][    T9] attempt to access beyond end of device
[  106.280239][    T9] loop9: rw=1, want=2050, limit=2048
[  106.353263][    T9] Buffer I/O error on dev loop9, logical block 1024, lost async page write
[  106.411442][    T9] attempt to access beyond end of device
[  106.411442][    T9] loop9: rw=1, want=2050, limit=2048
[  106.450954][    T9] Buffer I/O error on dev loop9, logical block 1024, lost async page write
[  106.481586][    T9] attempt to access beyond end of device
[  106.481586][    T9] loop9: rw=1, want=2052, limit=2048
[  106.523236][ T5426] loop8: detected capacity change from 0 to 2048
[  106.531404][    T9] Buffer I/O error on dev loop9, logical block 1025, lost async page write
[  106.562067][    T9] attempt to access beyond end of device
[  106.562067][    T9] loop9: rw=1, want=2052, limit=2048
[  106.576318][    T9] Buffer I/O error on dev loop9, logical block 1025, lost async page write
[  106.588870][    T9] attempt to access beyond end of device
[  106.588870][    T9] loop9: rw=1, want=2054, limit=2048
[  106.588915][ T5428] bond0: no command found in slaves file - use +ifname or -ifname
[  106.605082][    T9] Buffer I/O error on dev loop9, logical block 1026, lost async page write
[  106.623176][    T9] attempt to access beyond end of device
[  106.623176][    T9] loop9: rw=1, want=2054, limit=2048
[  106.642622][ T5426]  loop8: p3 p4 < >
[  106.652872][ T5426] loop8: p3 start 33554432 is beyond EOD, truncated
[  106.661939][    T9] Buffer I/O error on dev loop9, logical block 1026, lost async page write
[  106.689317][ T4312] usb 8-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  106.709076][    T9] attempt to access beyond end of device
[  106.709076][    T9] loop9: rw=1, want=2056, limit=2048
[  106.710228][ T3561]  loop8: p3 p4 < >
[  106.720550][ T4312] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.743609][   T25] audit: type=1326 audit(1793720269.869:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5429 comm="syz.4.238" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b8d87eb19 code=0x0
[  106.773488][ T3561] loop8: p3 start 33554432 is beyond EOD, truncated
[  106.775245][    T9] Buffer I/O error on dev loop9, logical block 1027, lost async page write
[  106.793422][ T4312] usb 8-1: Product: syz
[  106.811567][ T4312] usb 8-1: Manufacturer: syz
[  106.828979][ T4312] usb 8-1: SerialNumber: syz
[  106.853318][ T4312] usb 8-1: config 0 descriptor??
[  106.868132][    T9] attempt to access beyond end of device
[  106.868132][    T9] loop9: rw=1, want=2056, limit=2048
[  106.887056][ T5435] device macvlan0 entered promiscuous mode
[  106.890058][    T9] Buffer I/O error on dev loop9, logical block 1027, lost async page write
[  106.902513][    T9] attempt to access beyond end of device
[  106.902513][    T9] loop9: rw=1, want=2058, limit=2048
[  106.919647][    T9] Buffer I/O error on dev loop9, logical block 1028, lost async page write
[  106.926081][ T5435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.239'.
[  106.938924][ T4312] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  106.956935][    T9] Buffer I/O error on dev loop9, logical block 1028, lost async page write
[  107.003325][ T4370] udevd[4370]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory
[  107.011019][ T4312] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  107.042663][ T5435] device macvlan0 left promiscuous mode
[  107.074177][ T4312] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  107.122176][ T4312] usb 8-1: media controller created
[  107.147182][ T5393] digitv: more than 2 i2c messages at a time is not handled yet. TODO.
[  107.184209][ T5393] dvb-usb: bulk message failed: -22 (7/0)
[  107.191043][ T4312] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  107.212627][ T5442] loop8: detected capacity change from 0 to 512
[  107.306878][ T5442] EXT4-fs (loop8): Ignoring removed mblk_io_submit option
[  107.370072][ T4312] DVB: Unable to find symbol mt352_attach()
[  107.377020][ T5442] EXT4-fs error (device loop8): ext4_iget_extra_inode:4573: inode #15: comm syz.8.241: corrupted in-inode xattr
[  107.433405][ T4312] DVB: Unable to find symbol nxt6000_attach()
[  107.433612][ T5450] device syzkaller0 entered promiscuous mode
[  107.446568][ T4312] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  107.448693][ T5442] EXT4-fs error (device loop8): ext4_orphan_get:1415: comm syz.8.241: couldn't read orphan inode 15 (err -117)
[  107.475797][ T5442] EXT4-fs (loop8): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,quota,noload,user_xattr,mblk_io_submit,noinit_itable,grpquota,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback.
[  107.485378][ T5452] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487
[  107.507332][ T4312] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input6
[  107.526832][ T4312] dvb-usb: schedule remote query interval to 1000 msecs.
[  107.534734][ T4312] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  107.545121][ T4312] dvb-usb: bulk message failed: -22 (7/0)
[  107.551368][ T4312] dvb-usb: bulk message failed: -22 (7/0)
[  107.574449][ T4312] usb 8-1: USB disconnect, device number 4
[  107.663976][ T5024] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  107.746235][ T4312] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  107.955109][ T5458] loop8: detected capacity change from 0 to 164
[  108.213998][ T5024] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  108.232660][ T5024] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.298236][ T5024] usb 4-1: Product: syz
[  108.302444][ T5024] usb 4-1: Manufacturer: syz
[  108.332587][ T5024] usb 4-1: SerialNumber: syz
[  108.370435][ T5024] usb 4-1: config 0 descriptor??
[  108.649559][ T5472] block device autoloading is deprecated and will be removed.
[  108.659140][ T5024] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 006
[  109.127198][ T5490] netlink: 'syz.7.257': attribute type 1 has an invalid length.
[  109.201204][ T5490] 8021q: adding VLAN 0 to HW filter on device bond1
[  109.311957][ T5459] loop4: detected capacity change from 0 to 32768
[  109.353394][ T5492] bond1: (slave gretap1): making interface the new active one
[  109.375430][ T5492] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  109.394210][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  109.463533][ T5459] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.246 (5459)
[  109.721764][ T5503] loop5: detected capacity change from 0 to 4095
[  109.731559][  T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  109.750819][   T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  109.766389][ T5024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  109.776521][ T5459] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  109.776630][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  109.796778][ T4311] usb 4-1: USB disconnect, device number 6
[  109.825996][    C1] blk_update_request: I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  109.862025][    C1] blk_update_request: I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  109.890455][    C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 0
[  109.904908][    C1] blk_update_request: I/O error, dev loop5, sector 1048 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 0
[  109.916787][    C1] blk_update_request: I/O error, dev loop5, sector 2152 op 0x0:(READ) flags 0x80700 phys_seg 46 prio class 0
[  109.934251][    C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  109.947675][ T5459] BTRFS info (device loop4): using free space tree
[  109.964755][ T5459] BTRFS info (device loop4): has skinny extents
[  110.633402][ T5459] BTRFS info (device loop4): enabling ssd optimizations
[  110.723993][ T4284] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  110.752324][ T5509] loop7: detected capacity change from 0 to 32768
[  110.810256][ T5509] XFS: attr2 mount option is deprecated.
[  110.823102][ T5552] FAULT_INJECTION: forcing a failure.
[  110.823102][ T5552] name failslab, interval 1, probability 0, space 0, times 0
[  110.836660][ T5552] CPU: 1 PID: 5552 Comm: syz.8.269 Not tainted syzkaller #0
[  110.844005][ T5552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  110.854052][ T5552] Call Trace:
[  110.857320][ T5552]  <TASK>
[  110.860238][ T5552]  dump_stack_lvl+0x188/0x250
[  110.864957][ T5552]  ? show_regs_print_info+0x20/0x20
[  110.870149][ T5552]  ? load_image+0x410/0x410
[  110.874644][ T5552]  ? do_futex+0xdc2/0x12b0
[  110.879062][ T5552]  should_fail+0x383/0x4b0
[  110.883472][ T5552]  should_failslab+0x5/0x20
[  110.887963][ T5552]  slab_pre_alloc_hook+0x51/0xc0
[  110.892889][ T5552]  kmem_cache_alloc_node+0x47/0x2c0
[  110.898076][ T5552]  ? create_task_io_context+0x2c/0x400
[  110.903527][ T5552]  create_task_io_context+0x2c/0x400
[  110.908800][ T5552]  get_task_io_context+0xb2/0x140
[  110.913810][ T5552]  ? set_task_ioprio+0x2d2/0x450
[  110.918738][ T5552]  set_task_ioprio+0x2f2/0x450
[  110.923490][ T5552]  __se_sys_ioprio_set+0x77d/0x9b0
[  110.928588][ T5552]  ? lockdep_hardirqs_on+0x94/0x140
[  110.933777][ T5552]  do_syscall_64+0x4c/0xa0
[  110.938185][ T5552]  ? clear_bhb_loop+0x30/0x80
[  110.942850][ T5552]  ? clear_bhb_loop+0x30/0x80
[  110.947512][ T5552]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  110.953392][ T5552] RIP: 0033:0x7f1d14865b19
[  110.957798][ T5552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  110.977391][ T5552] RSP: 002b:00007f1d12abc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fb
[  110.985832][ T5552] RAX: ffffffffffffffda RBX: 00007f1d14aebfa0 RCX: 00007f1d14865b19
[  110.993796][ T5552] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000002
[  111.001754][ T5552] RBP: 00007f1d148fdb70 R08: 0000000000000000 R09: 0000000000000000
[  111.009713][ T5552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  111.017667][ T5552] R13: 00007f1d14aec038 R14: 00007f1d14aebfa0 R15: 00007ffe5bd19e08
[  111.025653][ T5552]  </TASK>
[  111.284166][ T4284] usb 10-1: config 0 has no interfaces?
[  111.299675][ T4284] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  111.322222][ T4284] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.412167][ T4284] usb 10-1: config 0 descriptor??
[  111.533396][ T5565] loop8: detected capacity change from 0 to 256
[  111.585505][ T5543] loop3: detected capacity change from 0 to 32768
[  111.608275][ T5509] XFS (loop7): Mounting V5 Filesystem
[  111.662378][ T5543] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.267 (5543)
[  111.848483][ T5509] XFS (loop7): Ending clean mount
[  111.912976][ T5543] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  111.953598][ T5509] xfs: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿÿÿÿÿÿÿš@­LqE�:†‹� á艞Õt}²0ü�$‰'
[  111.964563][ T5543] BTRFS info (device loop3): setting nodatacow, compression disabled
[  111.976072][    T7] usb 10-1: USB disconnect, device number 2
[  111.990632][ T5543] BTRFS error (device loop3): support for check_integrity* not compiled in!
[  112.048697][ T5543] BTRFS error (device loop3): open_ctree failed: -22
[  112.126050][ T4709] XFS (loop7): Unmounting Filesystem
[  113.121894][ T5621] loop9: detected capacity change from 0 to 512
[  113.286458][ T5631] loop8: detected capacity change from 0 to 8192
[  113.293527][ T5621] EXT4-fs (loop9): 1 truncate cleaned up
[  113.299442][ T5621] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  113.431461][   T25] audit: type=1804 audit(1793720276.559:25): pid=5621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.283" name="/newroot/16/file0/file0/bus" dev="loop9" ino=18 res=1 errno=0
[  113.480536][ T5635] smc: removing ib device rxe0
[  113.516582][ T5637] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.283: bg 0: block 465: padding at end of block bitmap is not set
[  113.543222][ T5638] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  113.611370][ T5607] loop4: detected capacity change from 0 to 32768
[  113.665111][ T5637] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  113.706823][ T5637] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.283: invalid indirect mapped block 234881024 (level 0)
[  114.171692][   T25] audit: type=1326 audit(1793720277.299:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5655 comm="syz.7.294" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2790aa8b19 code=0x7ffc0000
[  114.300552][   T25] audit: type=1326 audit(1793720277.299:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5655 comm="syz.7.294" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2790aa8b19 code=0x7ffc0000
[  114.360022][ T5656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.292'.
[  114.376746][   T25] audit: type=1326 audit(1793720277.299:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5655 comm="syz.7.294" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f2790aa8b19 code=0x7ffc0000
[  114.433924][   T25] audit: type=1326 audit(1793720277.299:29): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=5655 comm="syz.7.294" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2790aa8b19 code=0x7ffc0000
[  114.547729][   T25] audit: type=1326 audit(1793720277.299:30): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=5655 comm="syz.7.294" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2790aa8b19 code=0x7ffc0000
[  114.594980][ T5662] loop8: detected capacity change from 0 to 512
[  114.671735][ T5662] EXT4-fs (loop8): Ignoring removed bh option
[  114.672781][   T25] audit: type=1326 audit(1793720277.299:31): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=5655 comm="syz.7.294" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2790aa8b19 code=0x7ffc0000
[  114.828624][   T25] audit: type=1326 audit(1793720277.459:32): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=5655 comm="syz.7.294" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2790aa8b19 code=0x7ffc0000
[  114.889094][   T25] audit: type=1326 audit(1793720277.459:33): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=5655 comm="syz.7.294" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2790aa8b19 code=0x7ffc0000
[  114.916609][   T25] audit: type=1326 audit(1793720277.549:34): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=5655 comm="syz.7.294" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2790aa8b19 code=0x7ffc0000
[  115.004472][    C0] net_ratelimit: 59 callbacks suppressed
[  115.011040][ T4312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  115.084435][ T5662] EXT4-fs (loop8): mounted filesystem without journal. Opts: noquota,norecovery,bh,noload,bsdgroups,noquota,,errors=continue. Quota mode: writeback.
[  115.137077][ T5679] loop7: detected capacity change from 0 to 512
[  115.160964][ T5662] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.173527][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  115.457385][ T5705] loop9: detected capacity change from 0 to 64
[  116.372784][ T5725] loop7: detected capacity change from 0 to 128
[  116.464337][ T5725] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  116.511125][ T5725] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  116.528218][ T4487] handle_bad_sector: 11 callbacks suppressed
[  116.528233][ T4487] attempt to access beyond end of device
[  116.528233][ T4487] loop9: rw=1, want=162, limit=64
[  116.607868][ T4487] buffer_io_error: 12 callbacks suppressed
[  116.607882][ T4487] Buffer I/O error on dev loop9, logical block 161, lost async page write
[  116.631586][ T4487] attempt to access beyond end of device
[  116.631586][ T4487] loop9: rw=1, want=163, limit=64
[  116.677619][ T4487] Buffer I/O error on dev loop9, logical block 162, lost async page write
[  116.719764][ T4487] attempt to access beyond end of device
[  116.719764][ T4487] loop9: rw=1, want=164, limit=64
[  116.762558][ T4487] Buffer I/O error on dev loop9, logical block 163, lost async page write
[  116.799956][ T4487] attempt to access beyond end of device
[  116.799956][ T4487] loop9: rw=1, want=168, limit=64
[  116.892255][ T4487] Buffer I/O error on dev loop9, logical block 167, lost async page write
[  116.938961][ T4487] attempt to access beyond end of device
[  116.938961][ T4487] loop9: rw=1, want=170, limit=64
[  117.013818][ T4487] Buffer I/O error on dev loop9, logical block 169, lost async page write
[  117.022404][ T4487] attempt to access beyond end of device
[  117.022404][ T4487] loop9: rw=1, want=172, limit=64
[  117.092662][ T5737] loop7: detected capacity change from 0 to 512
[  117.141795][ T4487] Buffer I/O error on dev loop9, logical block 171, lost async page write
[  117.218603][ T4487] attempt to access beyond end of device
[  117.218603][ T4487] loop9: rw=1, want=173, limit=64
[  117.276781][ T4487] Buffer I/O error on dev loop9, logical block 172, lost async page write
[  117.287740][ T5737] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  117.344012][ T5737] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.372063][ T4487] attempt to access beyond end of device
[  117.372063][ T4487] loop9: rw=1, want=174, limit=64
[  117.393769][ T4487] Buffer I/O error on dev loop9, logical block 173, lost async page write
[  117.413277][ T4487] attempt to access beyond end of device
[  117.413277][ T4487] loop9: rw=1, want=175, limit=64
[  117.492905][ T4487] Buffer I/O error on dev loop9, logical block 174, lost async page write
[  117.527563][ T5748] input: syz0 as /devices/virtual/input/input7
[  117.543827][ T4487] attempt to access beyond end of device
[  117.543827][ T4487] loop9: rw=1, want=176, limit=64
[  117.598148][ T4487] Buffer I/O error on dev loop9, logical block 175, lost async page write
[  118.091738][ T5761] netlink: 20 bytes leftover after parsing attributes in process `syz.4.321'.
[  118.175811][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): vxlan1: link becomes ready
[  118.214048][ T5761] netlink: 20 bytes leftover after parsing attributes in process `syz.4.321'.
[  118.487031][ T5780] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  118.676604][ T5785] loop4: detected capacity change from 0 to 256
[  118.733879][ T4311] usb 9-1: new full-speed USB device number 2 using dummy_hcd
[  118.788532][ T5785] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xd55760ab, utbl_chksum : 0xe619d30d)
[  118.902282][   T25] kauditd_printk_skb: 8 callbacks suppressed
[  118.902296][   T25] audit: type=1800 audit(1793720282.029:43): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.325" name="file1" dev="loop4" ino=1048691 res=0 errno=0
[  119.072115][ T4311] usb 9-1: not running at top speed; connect to a high speed hub
[  119.165205][ T4311] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  119.216266][ T4311] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  119.288797][  T147] block nbd9: Receive control failed (result -32)
[  119.306716][ T5791] block nbd9: shutting down sockets
[  119.424094][ T4311] usb 9-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40
[  119.438948][ T4311] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.467415][ T4311] usb 9-1: Product: syz
[  119.471619][ T4311] usb 9-1: Manufacturer: syz
[  119.485181][ T4311] usb 9-1: SerialNumber: syz
[  119.501382][ T5801] loop4: detected capacity change from 0 to 128
[  119.884885][ T4311] usb 9-1: invalid UAC_HEADER (v1)
[  119.956032][ T4311] snd-usb-audio: probe of 9-1:1.0 failed with error -22
[  119.989752][ T4311] usb 9-1: USB disconnect, device number 2
[  120.244636][ T4370] udevd[4370]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  120.363744][    C1] net_ratelimit: 86 callbacks suppressed
[  120.532640][ T5836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'.
[  120.587163][ T5836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'.
[  120.605570][ T4487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  120.613746][ T4487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  120.712369][ T5804] loop7: detected capacity change from 0 to 32768
[  120.746845][ T5836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'.
[  120.910278][ T5804] XFS (loop7): Mounting V5 Filesystem
[  121.108953][ T5804] XFS (loop7): Ending clean mount
[  121.160165][ T5804] XFS (loop7): Quotacheck needed: Please wait.
[  121.360610][ T5804] XFS (loop7): Quotacheck: Done.
[  121.604858][ T5872] loop4: detected capacity change from 0 to 512
[  121.701004][ T5872] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  121.748097][ T5872] EXT4-fs error (device loop4): ext4_xattr_set_entry:1615: inode #2: comm syz.4.346: corrupted xattr entries
[  121.770682][ T5834] loop8: detected capacity change from 0 to 32768
[  122.107212][ T5834] XFS (loop8): Mounting V5 Filesystem
[  122.206385][ T5834] XFS (loop8): Ending clean mount
[  122.230918][ T4709] XFS (loop7): Unmounting Filesystem
[  122.268202][ T5894] syz.9.350 sent an empty control message without MSG_MORE.
[  122.452666][ T5899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.351'.
[  122.490869][ T4855] XFS (loop8): Unmounting Filesystem
[  122.690161][ T5899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.351'.
[  124.685764][ T6011] loop8: detected capacity change from 0 to 512
[  124.899264][ T5935] loop9: detected capacity change from 0 to 32768
[  124.940643][   T25] audit: type=1800 audit(1793720288.069:44): pid=6011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.369" name="bus" dev="loop8" ino=1048695 res=0 errno=0
[  125.136553][ T5935] XFS (loop9): Mounting V5 Filesystem
[  125.326155][ T6026] handle_bad_sector: 7 callbacks suppressed
[  125.326177][ T6026] attempt to access beyond end of device
[  125.326177][ T6026] loop8: rw=34817, want=1320, limit=512
[  125.373894][ T5935] XFS (loop9): Ending clean mount
[  125.403788][    C0] net_ratelimit: 74 callbacks suppressed
[  125.431105][ T5935] XFS (loop9): Quotacheck needed: Please wait.
[  125.605033][ T5935] XFS (loop9): Quotacheck: Done.
[  125.729745][ T5935] 9pnet_virtio: no channels available for device syz
[  125.947804][ T4900] XFS (loop9): Unmounting Filesystem
[  125.957112][ T6057] loop8: detected capacity change from 0 to 4096
[  126.035363][ T6057] EXT4-fs (loop8): Ignoring removed nobh option
[  126.064638][ T6057] EXT4-fs (loop8): Test dummy encryption mode enabled
[  126.071517][ T6057] EXT4-fs (loop8): Ignoring removed bh option
[  126.197778][ T6057] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpid,nobh,nodioread_nolock,test_dummy_encryption,lazytime,nojournal_checksum,minixdf,bh,,errors=continue. Quota mode: writeback.
[  126.284427][ T6064] loop4: detected capacity change from 0 to 8192
[  126.333951][ T6057] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  126.413182][ T6064] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  126.484384][ T6064] REISERFS (device loop4): using ordered data mode
[  126.491270][ T6064] reiserfs: using flush barriers
[  126.551689][ T6064] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  126.604248][ T6064] REISERFS (device loop4): checking transaction log (loop4)
[  126.669465][ T6064] REISERFS (device loop4): Using r5 hash to sort names
[  126.722108][ T6078] loop9: detected capacity change from 0 to 2048
[  126.730871][ T6064] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  126.889084][ T6078] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  126.904067][ T6078] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  127.533362][ T6127] Mass Storage Function, version: 2009/09/11
[  127.581633][ T6127] LUN: removable file: (no medium)
[  127.723210][ T6136] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  128.653157][ T6160] loop9: detected capacity change from 0 to 1764
[  128.711459][ T6152] loop7: detected capacity change from 0 to 32768
[  128.982447][ T6152] XFS (loop7): Mounting V5 Filesystem
[  129.109202][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.8.412'.
[  129.182014][ T6152] XFS (loop7): Ending clean mount
[  129.367645][ T4709] XFS (loop7): Unmounting Filesystem
[  129.486849][ T6188] block device autoloading is deprecated and will be removed.
[  129.554419][ T6172] bond0: (slave bond_slave_0): Releasing backup interface
[  129.749729][ T6190] block device autoloading is deprecated and will be removed.
[  130.523866][    C1] net_ratelimit: 85 callbacks suppressed
[  130.529853][ T4311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  130.713308][ T6224] loop7: detected capacity change from 0 to 32768
[  130.796186][ T6231] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  130.842958][ T6224] JBD2: Ignoring recovery information on journal
[  130.880735][ T6234] loop9: detected capacity change from 0 to 256
[  130.961359][ T6224] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  131.509158][ T4709] ocfs2: Unmounting device (7,7) on (node local)
[  131.667375][ T6259] netlink: 25 bytes leftover after parsing attributes in process `syz.4.430'.
[  131.760374][ T6263] netlink: 'syz.4.430': attribute type 4 has an invalid length.
[  131.983242][ T6274] loop7: detected capacity change from 0 to 2048
[  132.036824][   T21] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  132.075651][ T6274] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  132.167870][   T25] audit: type=1804 audit(1793720295.299:45): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.428" name="/newroot/60/file0/file1" dev="loop7" ino=1415 res=1 errno=0
[  132.459098][   T21] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.514522][   T21] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.527929][ T6291] overlayfs: failed to clone lowerpath
[  132.568601][   T21] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  132.581838][ T6295] overlayfs: failed to clone lowerpath
[  132.608716][   T21] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.658669][   T21] usb 10-1: config 0 descriptor??
[  132.776049][ T1435] ieee802154 phy1 wpan1: encryption failed: -22
[  132.788203][ T6302] loop8: detected capacity change from 0 to 1024
[  132.964277][ T6302] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  133.038476][ T6284] loop4: detected capacity change from 0 to 40427
[  133.179687][ T6284] F2FS-fs (loop4): invalid crc value
[  133.231470][ T6284] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  133.379385][   T21] usb 10-1: language id specifier not provided by device, defaulting to English
[  133.534237][ T6284] F2FS-fs (loop4): Start checkpoint disabled!
[  133.652513][ T6284] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e7
[  133.821170][   T25] audit: type=1800 audit(1793720296.949:46): pid=6284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.435" name="bus" dev="loop4" ino=10 res=0 errno=0
[  133.961776][ T6284] attempt to access beyond end of device
[  133.961776][ T6284] loop4: rw=524288, want=49408, limit=40427
[  133.985870][ T6284] attempt to access beyond end of device
[  133.985870][ T6284] loop4: rw=0, want=49160, limit=40427
[  134.004210][ T6344] loop7: detected capacity change from 0 to 8192
[  134.040205][ T6284] attempt to access beyond end of device
[  134.040205][ T6284] loop4: rw=0, want=49160, limit=40427
[  134.083534][ T6344] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal
[  134.093058][   T21] uclogic 0003:256C:006D.0002: v1 buttonpad probing failed: -71
[  134.112039][   T21] uclogic 0003:256C:006D.0002: failed probing parameters: -71
[  134.136281][ T6344] REISERFS (device loop7): using ordered data mode
[  134.169271][ T6344] reiserfs: using flush barriers
[  134.175802][ T6344] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  134.196707][   T21] uclogic: probe of 0003:256C:006D.0002 failed with error -71
[  134.198417][ T6344] REISERFS (device loop7): checking transaction log (loop7)
[  134.299239][   T21] usb 10-1: USB disconnect, device number 3
[  134.378573][ T6002] attempt to access beyond end of device
[  134.378573][ T6002] loop4: rw=2049, want=45104, limit=40427
[  134.445878][ T6344] REISERFS (device loop7): Using tea hash to sort names
[  134.453192][ T6344] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage.
[  135.162337][ T6383] loop2: detected capacity change from 0 to 7
[  135.191706][ T4370] Dev loop2: unable to read RDB block 7
[  135.198263][ T4370]  loop2: unable to read partition table
[  135.208492][ T4370] loop2: partition table beyond EOD, truncated
[  135.220466][ T6383] Dev loop2: unable to read RDB block 7
[  135.248263][ T6383]  loop2: unable to read partition table
[  135.282205][ T6383] loop2: partition table beyond EOD, truncated
[  135.308835][ T6383] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  135.358484][ T3561] Dev loop2: unable to read RDB block 7
[  135.377721][ T3561]  loop2: unable to read partition table
[  135.397068][ T3561] loop2: partition table beyond EOD, truncated
[  135.584899][    C0] net_ratelimit: 80 callbacks suppressed
[  135.841813][   T21] kernel write not supported for file /tomoyo/domain_policy (pid: 21 comm: kworker/1:0)
[  136.177812][ T6436] loop7: detected capacity change from 0 to 256
[  136.216289][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  136.242774][ T6441] loop9: detected capacity change from 0 to 128
[  136.296267][ T6436] exFAT-fs (loop7): bogus fat length
[  136.345320][ T6436] exFAT-fs (loop7): failed to read boot sector
[  136.364448][ T6436] exFAT-fs (loop7): failed to recognize exfat type
[  136.400830][ T6447] FAT-fs (loop9): error, corrupted directory (invalid entries)
[  136.420507][ T6447] FAT-fs (loop9): Filesystem has been set read-only
[  136.937233][ T6429] loop4: detected capacity change from 0 to 32768
[  137.056773][ T6429] XFS (loop4): Mounting V5 Filesystem
[  137.265792][ T6429] XFS (loop4): Ending clean mount
[  137.331429][ T6429] XFS (loop4): Quotacheck needed: Please wait.
[  137.531549][ T6429] XFS (loop4): Quotacheck: Done.
[  137.592648][ T6466] loop9: detected capacity change from 0 to 40427
[  137.685857][ T6498] CIFS: Attempting to mount \\127.0.0.1\share
[  137.701889][ T6466] F2FS-fs (loop9): invalid crc value
[  137.755928][ T6466] F2FS-fs (loop9): Found nat_bits in checkpoint
[  137.826464][ T6505] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes)
[  138.029799][ T4198] XFS (loop4): Unmounting Filesystem
[  138.036643][ T6466] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  138.177840][ T6498] CIFS: VFS: cifs_mount failed w/return code = -112
[  138.391372][ T6500] attempt to access beyond end of device
[  138.391372][ T6500] loop9: rw=2049, want=45120, limit=40427
[  138.554716][ T4900] attempt to access beyond end of device
[  138.554716][ T4900] loop9: rw=524288, want=45072, limit=40427
[  138.594208][ T4900] attempt to access beyond end of device
[  138.594208][ T4900] loop9: rw=0, want=45072, limit=40427
[  138.759056][   T21] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  139.134119][   T21] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.169659][   T21] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  139.232925][   T21] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  139.257823][   T21] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  139.273563][   T21] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.304581][   T21] usb 8-1: config 0 descriptor??
[  139.317975][ T6541] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.389085][ T6545] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.396287][ T6545] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.431823][ T6545] device bridge0 entered promiscuous mode
[  139.482931][ T5989] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.552855][ T5989] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.570988][ T6556] loop4: detected capacity change from 0 to 256
[  139.631241][ T6556] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  139.731203][ T5989] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.794505][   T21] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd
[  139.803600][   T21] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[  139.928158][   T21] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  140.026111][ T5989] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.190521][    T7] usb 8-1: USB disconnect, device number 5
[  140.285191][ T6563] fido_id[6563]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:047F:FFFF.0003/report_descriptor': No such device
[  140.603748][    C1] net_ratelimit: 92 callbacks suppressed
[  140.611038][   T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.229776][ T6556] overlayfs: filesystem on './file0' not supported
[  141.559284][ T6596] gadgetfs: bound to dummy_udc driver
[  141.749527][ T5989] device hsr_slave_0 left promiscuous mode
[  141.784290][ T5989] device hsr_slave_1 left promiscuous mode
[  141.818547][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  141.853768][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0
[  141.888763][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  141.917922][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1
[  141.931396][ T5989] device bridge_slave_1 left promiscuous mode
[  141.949521][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.953976][   T21] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  141.991753][ T5989] device bridge_slave_0 left promiscuous mode
[  142.023613][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.164386][ T5989] device veth1_macvtap left promiscuous mode
[  142.170522][ T5989] device veth0_macvtap left promiscuous mode
[  142.203028][ T5989] device veth1_vlan left promiscuous mode
[  142.226834][ T5989] device veth0_vlan left promiscuous mode
[  142.310705][ T6588] loop8: detected capacity change from 0 to 32768
[  142.354164][   T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  142.386015][   T21] usb 5-1: config 0 has no interfaces?
[  142.543976][ T6588] XFS (loop8): Mounting V5 Filesystem
[  142.574117][   T21] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b
[  142.620092][   T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.651748][   T21] usb 5-1: Product: syz
[  142.656049][   T21] usb 5-1: Manufacturer: syz
[  142.684930][   T21] usb 5-1: SerialNumber: syz
[  142.723887][ T6588] XFS (loop8): Ending clean mount
[  142.752946][   T21] usb 5-1: config 0 descriptor??
[  142.790563][ T6588] XFS (loop8): Quotacheck needed: Please wait.
[  142.917468][ T6588] XFS (loop8): Quotacheck: Done.
[  142.981701][ T6588] 9pnet_virtio: no channels available for device syz
[  143.087154][   T13] usb 5-1: USB disconnect, device number 4
[  143.146263][ T4855] XFS (loop8): Unmounting Filesystem
[  143.519169][ T5989] team0 (unregistering): Port device team_slave_1 removed
[  143.592570][ T5989] team0 (unregistering): Port device team_slave_0 removed
[  143.636399][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  143.680422][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  143.923794][ T6639] device-mapper: thin: Data device (ram9) discard unsupported: Disabling discard passdown.
[  144.025747][ T6645] loop8: detected capacity change from 0 to 64
[  144.131767][   T21] Bluetooth: hci1: command 0x0409 tx timeout
[  144.132155][ T5989] bond0 (unregistering): Released all slaves
[  144.453815][ T6604] rxe_eth0 speed is unknown, defaulting to 1000
[  144.505273][ T6604] rxe_eth0 speed is unknown, defaulting to 1000
[  144.512521][ T6604] rxe_eth0 speed is unknown, defaulting to 1000
[  144.596804][ T6642] loop4: detected capacity change from 0 to 32768
[  144.692181][ T6642] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.508 (6642)
[  144.790936][ T6642] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  144.832183][ T6642] BTRFS info (device loop4): use zlib compression, level 3
[  144.904380][ T6642] BTRFS info (device loop4): using free space tree
[  144.957242][ T6642] BTRFS info (device loop4): has skinny extents
[  145.013251][ T5024] rxe_eth0 speed is unknown, defaulting to 1000
[  145.013220][ T6604] infiniband rxe0: set active
[  145.040230][ T6604] infiniband rxe0: added rxe_eth0
[  145.155220][ T6604] RDS/IB: rxe0: added
[  145.183948][ T6604] smc: adding ib device rxe0 with port count 1
[  145.256878][ T6642] BTRFS info (device loop4): enabling ssd optimizations
[  145.273735][ T6604] smc:    ib device rxe0 port 1 has pnetid 
[  145.305200][    T7] rxe_eth0 speed is unknown, defaulting to 1000
[  145.312348][ T6604] rxe_eth0 speed is unknown, defaulting to 1000
[  145.549460][ T6639] device-mapper: thin: Unrecognised thin pool target message received: hydration_threshold
[  145.723805][    C0] net_ratelimit: 60 callbacks suppressed
[  145.802877][ T6662] loop7: detected capacity change from 0 to 32768
[  145.832899][ T6604] rxe_eth0 speed is unknown, defaulting to 1000
[  146.044212][ T6711] loop8: detected capacity change from 0 to 16
[  146.065099][ T4370] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop4 scanned by udevd (4370)
[  146.214513][ T4312] Bluetooth: hci1: command 0x041b tx timeout
[  146.247851][ T6711] erofs: (device loop8): mounted with root inode @ nid 36.
[  146.427712][ T6604] rxe_eth0 speed is unknown, defaulting to 1000
[  146.445321][ T6720] overlayfs: failed to get redirect (-117)
[  146.902414][ T6604] rxe_eth0 speed is unknown, defaulting to 1000
[  147.462215][ T6604] rxe_eth0 speed is unknown, defaulting to 1000
[  147.618487][ T6756] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  147.666224][ T6756] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  147.682160][ T6766] loop4: detected capacity change from 0 to 512
[  147.730077][ T6766] EXT4-fs (loop4): Ignoring removed nobh option
[  147.736505][ T6766] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  147.749317][ T6766] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (33925!=0)
[  147.759325][ T6766] EXT4-fs (loop4): group descriptors corrupted!
[  148.293961][    T7] Bluetooth: hci1: command 0x040f tx timeout
[  148.774080][ T6772] loop7: detected capacity change from 0 to 131072
[  148.796002][ T6747] loop8: detected capacity change from 0 to 40427
[  148.883373][ T6772] F2FS-fs (loop7): invalid crc value
[  148.946025][ T6747] F2FS-fs (loop8): build fault injection attr: rate: 14, type: 0x1ffff
[  148.964880][ T6747] F2FS-fs (loop8): build fault injection attr: rate: 0, type: 0xe4
[  148.983238][ T6772] F2FS-fs (loop7): Found nat_bits in checkpoint
[  149.041485][ T6772] F2FS-fs (loop7): Cannot turn on quotas: -2 on 2
[  149.052438][ T6747] F2FS-fs (loop8): invalid crc value
[  149.073486][ T6772] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  149.096672][ T6792] 9pnet: Insufficient options for proto=fd
[  149.138866][ T6747] F2FS-fs (loop8): Found nat_bits in checkpoint
[  149.180129][ T6604] chnl_net:caif_netlink_parms(): no params data found
[  149.356088][ T6747] F2FS-fs (loop8) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0
[  149.454126][ T6802] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.461892][ T6802] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.509940][ T6803] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.517113][ T6803] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.527004][ T6803] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.534150][ T6803] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.565056][ T6747] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  149.700158][ T6747] F2FS-fs (loop8) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x180/0x8e0
[  149.723921][ T6803] device bridge0 entered promiscuous mode
[  149.760913][ T6747] F2FS-fs (loop8) : inject page alloc in f2fs_grab_cache_page of f2fs_convert_inline_inode+0x41c/0x5b0
[  149.812366][ T6747] F2FS-fs (loop8) : inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x12a/0xc40
[  149.961463][ T4855] attempt to access beyond end of device
[  149.961463][ T4855] loop8: rw=2049, want=45104, limit=40427
[  150.242085][ T6604] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.303883][ T6604] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.312237][ T6604] device bridge_slave_0 entered promiscuous mode
[  150.352961][ T6604] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.364128][    T7] Bluetooth: hci1: command 0x0419 tx timeout
[  150.381365][ T6604] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.432271][ T6604] device bridge_slave_1 entered promiscuous mode
[  150.619166][ T6604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  150.677327][ T6604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  150.843779][    C1] net_ratelimit: 47 callbacks suppressed
[  150.850387][ T5014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  151.003828][ T6604] team0: Port device team_slave_0 added
[  151.068021][ T6604] team0: Port device team_slave_1 added
[  151.253165][ T6604] batman_adv: batadv0: Adding interface: batadv_slave_0
[  151.306519][ T6604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.441020][ T6849] loop8: detected capacity change from 0 to 8192
[  151.455077][ T6604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  151.509577][ T6604] batman_adv: batadv0: Adding interface: batadv_slave_1
[  151.521736][ T6861] overlayfs: statfs failed on './file0'
[  151.545413][ T6604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.613099][ T6865] loop7: detected capacity change from 0 to 128
[  151.706632][ T6604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  151.743065][ T6865] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  151.764117][ T6865] hpfs: filesystem error: improperly stopped
[  151.770155][ T6865] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  151.831089][ T6865] hpfs: You really don't want any checks? You are crazy...
[  151.866916][ T6865] hpfs: Code page index out of array
[  151.872402][ T6865] hpfs: code page support is disabled
[  151.930471][ T6865] hpfs: hpfs_map_4sectors(): unaligned read
[  151.975179][ T6865] hpfs: hpfs_map_4sectors(): unaligned read
[  151.981117][ T6865] hpfs: filesystem error: unable to find root dir
[  152.065671][ T6604] device hsr_slave_0 entered promiscuous mode
[  152.111511][ T6604] device hsr_slave_1 entered promiscuous mode
[  152.148301][ T6604] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  152.180813][ T6604] Cannot create hsr debugfs directory
[  152.655082][ T6868] loop4: detected capacity change from 0 to 32768
[  152.802442][ T6868] XFS (loop4): Mounting V5 Filesystem
[  152.963973][ T6868] XFS (loop4): Ending clean mount
[  153.003215][   T25] audit: type=1800 audit(1793720316.129:47): pid=6868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.552" name="file1" dev="loop4" ino=4422 res=0 errno=0
[  153.545333][ T4198] XFS (loop4): Unmounting Filesystem
[  154.231508][ T6604] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  154.261848][ T6604] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  154.299192][ T6604] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  154.329140][ T6604] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  154.511004][ T6604] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.542580][ T5991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  154.574020][ T5991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  154.601264][ T6604] 8021q: adding VLAN 0 to HW filter on device team0
[  154.615733][ T6000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  154.639883][ T6000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  154.659821][ T6000] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.666975][ T6000] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.704132][ T6000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  154.729425][ T6000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  154.754956][ T6000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  154.763452][ T6000] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.770551][ T6000] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.807933][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  154.824803][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  154.872506][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  154.893428][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  154.903553][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  154.921386][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  154.942898][ T6604] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  154.959789][ T6604] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  154.983469][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  154.993330][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  155.002287][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  155.034987][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  155.054317][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  155.072038][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  155.350320][ T6000] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  155.374207][ T6000] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  155.388343][ T6604] 8021q: adding VLAN 0 to HW filter on device batadv0
[  155.429508][ T6000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  155.459749][ T6000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  155.491921][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  155.502909][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  155.513875][ T6604] device veth0_vlan entered promiscuous mode
[  155.531724][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  155.540450][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  155.552386][ T6604] device veth1_vlan entered promiscuous mode
[  155.560714][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  155.593879][ T6002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  155.609432][ T6002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  155.633981][ T6604] device veth0_macvtap entered promiscuous mode
[  155.651826][ T6604] device veth1_macvtap entered promiscuous mode
[  155.679671][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.700575][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.711271][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.727364][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.739403][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.756595][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.770182][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.788566][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.802470][ T6604] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.823845][ T6000] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  155.839423][ T6000] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  155.852955][ T6000] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  155.872578][ T6000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  155.883757][    C0] net_ratelimit: 55 callbacks suppressed
[  155.895942][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.910933][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.928895][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.948073][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.983171][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  156.000953][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.012375][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  156.030170][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.042585][ T6604] batman_adv: batadv0: Interface activated: batadv_slave_1
[  156.051089][ T5014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  156.062419][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  156.072058][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  156.088083][ T6604] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  156.103124][ T6604] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.112451][ T6604] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.129403][ T6604] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.273590][ T6002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.286856][ T6002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.310038][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  156.351284][ T6000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.370326][ T6000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.380920][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  157.792904][ T7021] overlayfs: upper fs does not support file handles, falling back to index=off.
[  158.730332][ T7055] loop8: detected capacity change from 0 to 2048
[  158.843504][ T7059] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9
[  158.988065][ T4370]  loop8: unable to read partition table
[  159.023304][ T4370] loop8: partition table beyond EOD, truncated
[  159.366036][ T7076] loop4: detected capacity change from 0 to 128
[  159.368905][ T7055]  loop8: unable to read partition table
[  159.424542][ T7076] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  159.436096][ T7055] loop8: partition table beyond EOD, truncated
[  159.452946][ T7055] loop_reread_partitions: partition scan of loop8 () failed (rc=-5)
[  159.475790][ T7082] device gretap0 entered promiscuous mode
[  159.522932][ T7076] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  159.666984][ T7076] syz.4.583 (pid 7076) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  159.763040][ T3561]  loop8: unable to read partition table
[  159.788897][ T3561] loop8: partition table beyond EOD, truncated
[  160.330971][ T7106] loop8: detected capacity change from 0 to 8192
[  160.422605][ T7106] REISERFS (device loop8): found reiserfs format "3.5" with non-standard journal
[  160.438758][ T7106] REISERFS (device loop8): using ordered data mode
[  160.483992][ T7106] reiserfs: using flush barriers
[  160.490242][ T7106] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  160.557755][ T7106] REISERFS (device loop8): checking transaction log (loop8)
[  160.647271][ T7106] REISERFS (device loop8): Using r5 hash to sort names
[  160.660932][ T7106] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage.
[  160.933729][    C0] net_ratelimit: 95 callbacks suppressed
[  161.284288][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  161.446436][ T7151] loop4: detected capacity change from 0 to 16
[  161.507528][ T7151] erofs: (device loop4): mounted with root inode @ nid 36.
[  161.541491][ T7151] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89
[  161.565374][ T7151] erofs: (device loop4): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 89
[  161.613587][ T7151] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 89
[  161.671903][ T7151] attempt to access beyond end of device
[  161.671903][ T7151] loop4: rw=524288, want=524304, limit=16
[  161.767732][  T147] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[3588]
[  161.828147][ T7151] erofs: (device loop4): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 89
[  161.895225][ T7151] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[3584]
[  161.929313][ T7151] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117]
[  161.938105][   T25] audit: type=1800 audit(1793720325.081:48): pid=7151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.602" name="file2" dev="loop4" ino=89 res=0 errno=0
[  162.513886][ T1112] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  162.883248][   T26] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[  163.019496][ T1112] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  163.048512][ T1112] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.056542][ T1112] usb 5-1: Product: syz
[  163.090329][ T1112] usb 5-1: Manufacturer: syz
[  163.095042][ T1112] usb 5-1: SerialNumber: syz
[  163.242166][   T26] usb 8-1: config 0 has an invalid interface number: 133 but max is 0
[  163.254901][   T26] usb 8-1: config 0 has no interface number 0
[  163.439024][   T26] usb 8-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  163.459727][   T26] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.487917][   T26] usb 8-1: Product: syz
[  163.498256][   T26] usb 8-1: Manufacturer: syz
[  163.502980][   T26] usb 8-1: SerialNumber: syz
[  163.530330][   T26] usb 8-1: config 0 descriptor??
[  163.597803][ T1112] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  163.787704][   T26] keyspan 8-1:0.133: Keyspan 1 port adapter converter detected
[  163.823591][ T7242] bridge0: port 3(syz_tun) entered blocking state
[  163.840711][   T26] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 81
[  163.853911][   T26] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 1
[  163.868625][ T7242] bridge0: port 3(syz_tun) entered disabled state
[  163.876386][   T26] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 2
[  163.899966][ T7242] device syz_tun entered promiscuous mode
[  163.909148][ T7242] bridge0: port 3(syz_tun) entered blocking state
[  163.915728][ T7242] bridge0: port 3(syz_tun) entered forwarding state
[  163.941957][   T26] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  164.000788][   T26] usb 8-1: USB disconnect, device number 6
[  164.018334][ T7247] Disabled LAPIC found during irq injection
[  164.054704][   T26] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  164.076875][   T26] keyspan 8-1:0.133: device disconnected
[  164.234063][   T25] audit: type=1326 audit(1793720327.439:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.3.635" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb9c94b19 code=0x7fc00000
[  164.689184][ T7279] loop7: detected capacity change from 0 to 2048
[  164.894740][ T7279]  loop7: unable to read partition table
[  164.928064][ T7279] loop7: partition table beyond EOD, truncated
[  164.948851][ T7279] loop_reread_partitions: partition scan of loop7 () failed (rc=-5)
[  164.970805][   T25] audit: type=1326 audit(1793720328.188:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.3.635" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb9c94b19 code=0x7fc00000
[  165.031331][   T25] audit: type=1326 audit(1793720328.188:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.3.635" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7fedb9c94b19 code=0x7fc00000
[  165.126542][ T7291] ------------[ cut here ]------------
[  165.194055][ T4312] usb 5-1: USB disconnect, device number 5
[  165.200207][   T25] audit: type=1326 audit(1793720328.188:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.3.635" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb9c94b19 code=0x7fc00000
[  165.221422][ T3561]  loop7: unable to read partition table
[  165.270349][ T4312] usblp0: removed
[  165.280443][ T3561] loop7: partition table beyond EOD, truncated
[  165.290280][ T7291] kernel BUG at net/sunrpc/svc.c:599!
[  165.342291][   T25] audit: type=1326 audit(1793720328.188:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.3.635" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb9c94b19 code=0x7fc00000
[  165.452662][   T25] audit: type=1326 audit(1793720328.188:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.3.635" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb9c94b19 code=0x7fc00000
[  165.497767][ T7291] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  165.503886][ T7291] CPU: 1 PID: 7291 Comm: syz.8.639 Not tainted syzkaller #0
[  165.511178][ T7291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  165.521278][ T7291] RIP: 0010:svc_destroy+0x184/0x190
[  165.526496][ T7291] Code: 5f 5d e9 8f 26 bb f8 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 24 ff ff ff 4c 89 ff e8 f6 ba bb f8 e9 17 ff ff ff e8 cc 72 76 f8 <0f> 0b e8 c5 72 76 f8 0f 0b 0f 1f 00 55 41 57 41 56 41 55 41 54 53
[  165.530691][   T25] audit: type=1326 audit(1793720328.188:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.3.635" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb9c94b19 code=0x7fc00000
[  165.546110][ T7291] RSP: 0018:ffffc90002ecfad0 EFLAGS: 00010283
[  165.546147][ T7291] RAX: ffffffff8902bac4 RBX: ffff8880611e0050 RCX: 0000000000080000
[  165.546161][ T7291] RDX: ffffc90003af2000 RSI: 000000000001ee9c RDI: 000000000001ee9d
[  165.546178][ T7291] RBP: ffffc90002ecfc78 R08: ffffffff910472a7 R09: 1ffffffff2208e54
[  165.546191][ T7291] R10: dffffc0000000000 R11: fffffbfff2208e55 R12: dffffc0000000000
[  165.546206][ T7291] R13: dffffc0000000000 R14: ffff8880611e0068 R15: 0000000000000001
[  165.572934][    C0] kcov: kcov_remote_start: handle = 100000000000005, context: softirq
[  165.576113][ T7291] FS:  00007f1d12abc6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  165.584073][    C0] kcov: kcov_start: t = ffff88813fea1dc0, size = 262144, area = ffffc90002169000
[  165.592033][ T7291] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  165.600080][    C0] kcov: kcov_move_area: ffffc90012ad8000 1048576 <= ffffc90002169000 34
[  165.607947][ T7291] CR2: 0000001b32d16ff8 CR3: 00000000624d8000 CR4: 00000000003506e0
[  165.616145][ T4312] usb usb5-port1: debounce total 100ms stable 100ms status 0x100
[  165.624030][ T7291] DR0: 000000000000000b DR1: 0000000000000000 DR2: 0000000000000000
[  165.624052][ T7291] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  165.624062][ T7291] Call Trace:
[  165.624071][ T7291]  <TASK>
[  165.624080][ T7291]  write_ports+0xa26/0xb80
[  165.624106][ T7291]  ? write_versions+0xbb0/0xbb0
[  165.662578][ T4312] kcov: kcov_move_area: ffffc90012ad8000 1048576 <= ffffc90014adc000 644160
[  165.664974][ T7291]  ? __lock_acquire+0x7d40/0x7d40
[  165.699203][ T4312] kcov: kcov_remote_start: handle = 100000000000005, context: task
[  165.699227][ T4312] kcov: kcov_start: t = ffff88801eb58000, size = 1048576, area = ffffc90014adc000
[  165.704052][ T7291]  ? __might_fault+0xb3/0x110
[  165.720465][ T4312] hub 5-0:1.0: state 7 ports 1 chg 0000 evt 0002
[  165.725582][ T7291]  ? _copy_from_user+0x111/0x170
[  165.725611][ T7291]  ? simple_transaction_get+0x119/0x140
[  165.725633][ T7291]  nfsctl_transaction_write+0x105/0x150
[  165.737166][   T25] audit: type=1326 audit(1793720328.188:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.3.635" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb9c94b19 code=0x7fc00000
[  165.739476][ T7291]  ? nfsctl_transaction_read+0x1b0/0x1b0
[  165.739504][ T7291]  vfs_write+0x304/0xd70
[  165.753516][   T25] audit: type=1326 audit(1793720328.188:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.3.635" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb9c94b19 code=0x7fc00000
[  165.756254][ T7291]  ? file_end_write+0x250/0x250
[  165.756287][ T7291]  ? mutex_lock_nested+0x17/0x20
[  165.765737][    C0] kcov: kcov_remote_start: handle = 100000000000005, context: softirq
[  165.785657][ T7291]  ? __fdget_pos+0x2bf/0x370
[  165.791271][    C0] kcov: kcov_start: t = ffff88813fea1dc0, size = 262144, area = ffffc90002169000
[  165.795486][ T7291]  ? ksys_write+0x70/0x260
[  165.819826][    C0] kcov: kcov_move_area: ffffc90012ad8000 1048576 <= ffffc90002169000 26
[  165.824580][ T7291]  ksys_write+0x153/0x260
[  165.830069][ T4312] kcov: kcov_move_area: ffffc90012ad8000 1048576 <= ffffc90014adc000 192219
[  165.837612][ T7291]  ? __ia32_sys_read+0x80/0x80
[  165.847229][ T7253] kcov: kcov_task_exit: t = ffff888023701dc0, kcov->t = ffff888023701dc0
[  165.851282][ T7291]  ? lockdep_hardirqs_on+0x94/0x140
[  165.864903][ T4312] hub 5-0:1.0: hub_suspend
[  165.868297][ T7291]  do_syscall_64+0x4c/0xa0
[  165.868323][ T7291]  ? clear_bhb_loop+0x30/0x80
[  165.886899][    C0] kcov: kcov_remote_start: handle = 100000000000005, context: softirq
[  165.890125][ T7291]  ? clear_bhb_loop+0x30/0x80
[  165.895313][    C0] kcov: kcov_start: t = ffff88802a4c9dc0, size = 262144, area = ffffc90002169000
[  165.899733][ T7291]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  165.904172][    C0] kcov: kcov_move_area: ffffc90012ad8000 1048576 <= ffffc90002169000 19
[  165.908778][ T7291] RIP: 0033:0x7f1d14865b19
[  165.949516][ T7291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  165.969119][ T7291] RSP: 002b:00007f1d12abc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  165.977554][ T7291] RAX: ffffffffffffffda RBX: 00007f1d14aebfa0 RCX: 00007f1d14865b19
[  165.985512][ T7291] RDX: 0000000000000005 RSI: 0000200000000240 RDI: 0000000000000003
[  165.993481][ T7291] RBP: 00007f1d148fdb70 R08: 0000000000000000 R09: 0000000000000000
[  166.001458][ T7291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  166.009425][ T7291] R13: 00007f1d14aec038 R14: 00007f1d14aebfa0 R15: 00007ffe5bd19e08
[  166.017393][ T7291]  </TASK>
[  166.020416][ T7291] Modules linked in:
[  166.024550][    C1] net_ratelimit: 76 callbacks suppressed
[  166.024562][    C1] wireguard: wg0: Sending keepalive packet to peer 61 ([::1]:20002/0%0)
[  166.025618][ T4312] usb usb5: bus auto-suspend, wakeup 1
[  166.044102][ T4312] usb usb5: dummy_bus_suspend
[  166.045196][    C1] wireguard: wg1: Receiving keepalive packet from peer 63 ([::1]:20001/0%0)
[  166.054050][ T7288] kcov: kcov_task_exit: t = ffff88802dba5940, kcov->t = ffff88802dba5940
[  166.072518][ T3561] kobject: 'loop7' (ffff8881408a2380): kobject_uevent_env
[  166.076467][ T7294] kernfs netdev_group: removing
[  166.079941][ T3561] kobject: 'loop7' (ffff8881408a2380): fill_kobj_path: path = '/devices/virtual/block/loop7'
[  166.085522][ T7294] kernfs type: removing
[  166.101626][    C0] nf_nat: Already setup manip DST for ct ffff888077879080 (status bits 0x188)
[  166.110590][    C0] nf_nat: Already setup manip SRC for ct ffff888077879080 (status bits 0x188)
[  166.119613][ T7287] nf_nat: Already setup manip SRC for ct ffff888077879080 (status bits 0x188)
[  166.129524][ T7287] nf_conntrack: new packet for ffff888077879080
[  166.134523][ T5991] bond1: (slave gretap1): Send learning packet: mac b2:dc:a4:a0:74:b2 vlan 0
[  166.135822][    C0] virtqueue callback for ffff888146bc8900 (ffffffff84455830)
[  166.151912][    C0] virtqueue interrupt with no work for ffff888146bc8800
[  166.158856][    C0] virtqueue interrupt with no work for ffff888146bc8700
[  166.183117][ T7291] ---[ end trace 428afe6f8b95b531 ]---
[  166.187026][ T7293] kcov: kcov_task_exit: t = ffff888027c55940, kcov->t = ffff888027c55940
[  166.190060][ T7291] RIP: 0010:svc_destroy+0x184/0x190
[  166.197086][ T7287] nf_nat: Already setup manip DST for ct ffff888077879080 (status bits 0x188)
[  166.197138][ T7287] nf_nat: Already setup manip SRC for ct ffff888077879080 (status bits 0x188)
[  166.204260][ T7291] Code: 5f 5d e9 8f 26 bb f8 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 24 ff ff ff 4c 89 ff e8 f6 ba bb f8 e9 17 ff ff ff e8 cc 72 76 f8 <0f> 0b e8 c5 72 76 f8 0f 0b 0f 1f 00 55 41 57 41 56 41 55 41 54 53
[  166.211919][    C0] nf_nat: Already setup manip DST for ct ffff888077879080 (status bits 0x188)
[  166.225991][ T7287] nf_nat: Already setup manip SRC for ct ffff888077879080 (status bits 0x188)
[  166.240006][    C0] nf_nat: Already setup manip SRC for ct ffff888077879080 (status bits 0x188)
[  166.249434][    C1] percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 0
[  166.275254][ T4709] kernfs backing_file: removing
[  166.280147][ T4709] kernfs offset: removing
[  166.285231][ T7291] RSP: 0018:ffffc90002ecfad0 EFLAGS: 00010283
[  166.289024][ T7287] nf_conntrack: new packet for ffff888077879080
[  166.292301][ T7291] RAX: ffffffff8902bac4 RBX: ffff8880611e0050 RCX: 0000000000080000
[  166.297644][ T7287] nf_nat: Already setup manip DST for ct ffff888077879080 (status bits 0x188)
[  166.297690][ T7287] nf_nat: Already setup manip SRC for ct ffff888077879080 (status bits 0x188)
[  166.323726][    C1] wireguard: wg0: Sending keepalive packet to peer 1 ([::1]:20002/0%0)
[  166.334515][ T4284] Added buffer head 0 to ffff888146bc8900
[  166.337789][ T7294] kernfs dev_id: removing
[  166.351849][ T7294] kernfs dev_port: removing
[  166.356437][ T4709] kernfs sizelimit: removing
[  166.362503][ T4709] kernfs autoclear: removing
[  166.367303][ T4709] kernfs partscan: removing
[  166.367318][ T7291] RDX: ffffc90003af2000 RSI: 000000000001ee9c RDI: 000000000001ee9d
[  166.373467][ T4709] kernfs dio: removing
[  166.384049][ T7291] RBP: ffffc90002ecfc78 R08: ffffffff910472a7 R09: 1ffffffff2208e54
[  166.392227][ T7294] kernfs iflink: removing
[  166.392285][    C0] wireguard: wg1: Receiving keepalive packet from peer 3 ([::1]:20001/0%0)
[  166.397915][    C1] wireguard: wg0: Sending keepalive packet to peer 43 (127.0.0.1:20002)
[  166.413684][    C1] wireguard: wg0: Sending keepalive packet to peer 49 ([::1]:20002/0%0)
[  166.417359][ T7287] nf_nat: Already setup manip SRC for ct ffff888077879080 (status bits 0x188)
[  166.422100][    C1] wireguard: wg0: Sending keepalive packet to peer 25 ([::1]:20002/0%0)
[  166.431502][ T7291] R10: dffffc0000000000 R11: fffffbfff2208e55 R12: dffffc0000000000
[  166.442738][ T5014] nf_conntrack: normal packet for ffff888077879b00
[  166.448414][    C0] nf_nat: Already setup manip DST for ct ffff888077879080 (status bits 0x188)
[  166.453921][ T5014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  166.462775][    C0] nf_nat: Already setup manip SRC for ct ffff888077879080 (status bits 0x188)
[  166.471168][ T4709] kernfs loop: removing
[  166.485052][ T7287] nf_conntrack: new packet for ffff888077879080
[  166.487156][    C1] wireguard: wg1: Receiving keepalive packet from peer 51 ([::1]:20001/0%0)
[  166.492408][ T7291] R13: dffffc0000000000 R14: ffff8880611e0068 R15: 0000000000000001
[  166.506842][    C1] wireguard: wg1: Receiving keepalive packet from peer 27 ([::1]:20001/0%0)
[  166.508357][ T7287] nf_nat: Already setup manip DST for ct ffff888077879080 (status bits 0x188)
[  166.524902][ T4709] kobject: 'loop7' (ffff8881408a2380): kobject_uevent_env
[  166.532648][ T7294] kernfs ifindex: removing
[  166.532771][ T4709] kobject: 'loop7' (ffff8881408a2380): fill_kobj_path: path = '/devices/virtual/block/loop7'
[  166.537547][ T7294] kernfs name_assign_type: removing
[  166.550152][ T4709] kobject: 'loop7' (ffff8881408a2380): kobject_uevent_env
[  166.556180][ T7287] nf_nat: Already setup manip SRC for ct ffff888077879080 (status bits 0x188)
[  166.561406][ T4709] kobject: 'loop7' (ffff8881408a2380): fill_kobj_path: path = '/devices/virtual/block/loop7'
[  166.571780][ T7291] FS:  00007f1d12abc6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  166.584754][ T7294] kernfs addr_assign_type: removing
[  166.588875][ T4284] nf_conntrack: normal packet for ffff8880789ce600
[  166.602533][    C0] nf_nat: Already setup manip DST for ct ffff888077879080 (status bits 0x188)
[  166.611494][    C0] nf_nat: Already setup manip SRC for ct ffff888077879080 (status bits 0x188)
[  166.612685][ T7294] kernfs addr_len: removing
[  166.620960][ T7287] nf_nat: Already setup manip SRC for ct ffff888077879080 (status bits 0x188)
[  166.635586][ T4284] nf_conntrack: normal packet for ffff888077879980
[  166.642829][ T7287] nf_conntrack: new packet for ffff888077879080
[  166.644939][ T7291] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  166.649680][ T4178] inotify_handle_inode_event: group=ffff8881447ec000 mark=ffff8880199edaf0 mask=8000
[  166.668268][ T7294] kernfs link_mode: removing
[  166.668342][ T7287] nf_nat: Already setup manip DST for ct ffff888077879080 (status bits 0x188)
[  166.675977][ T7294] kernfs address: removing
[  166.682196][ T4178] fsnotify_insert_event: group=ffff8881447ec000 event=ffff8880593777c0
[  166.696391][ T7291] CR2: 00007fff1cc92c00 CR3: 00000000624d8000 CR4: 00000000003506f0
[  166.696502][ T7287] nf_nat: Already setup manip SRC for ct ffff888077879080 (status bits 0x188)
[  166.717704][ T3561] get_one_event: group=ffff8881447ec000 event=ffff8880593777c0
[  166.721753][    C0] nf_nat: Already setup manip DST for ct ffff888077879080 (status bits 0x188)
[  166.725548][ T3561] fsnotify_remove_first_event: group=ffff8881447ec000 event=ffff8880593777c0
[  166.734244][    C0] nf_nat: Already setup manip SRC for ct ffff888077879080 (status bits 0x188)
[  166.743963][ T7294] kernfs broadcast: removing
[  166.752316][ T7287] nf_nat: Already setup manip SRC for ct ffff888077879080 (status bits 0x188)
[  166.765547][ T7291] DR0: 000000000000000b DR1: 0000000000000000 DR2: 0000000000000000
[  166.766552][ T7287] nf_conntrack: new packet for ffff888077879080
[  166.782821][ T7287] nf_nat: Already setup manip DST for ct ffff888077879080 (status bits 0x188)
[  166.783670][ T3561] inotify_read: group=ffff8881447ec000 kevent=ffff8880593777c0
[  166.792228][ T7287] nf_nat: Already setup manip SRC for ct ffff888077879080 (status bits 0x188)
[  166.800936][ T7291] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  166.810397][    C0] nf_nat: Already setup manip DST for ct ffff888077879080 (status bits 0x188)
[  166.819984][ T3561] copy_event_to_user: group=ffff8881447ec000 event=ffff8880593777c0
[  166.825430][    C0] nf_nat: Already setup manip SRC for ct ffff888077879080 (status bits 0x188)
[  166.841883][ T7294] kernfs speed: removing
[  166.843407][ T7287] nf_nat: Already setup manip SRC for ct ffff888077879080 (status bits 0x188)
[  166.853205][ T7294] kernfs duplex: removing
[  166.856244][ T7287] nf_conntrack: new packet for ffff888077879080
[  166.866772][ T7294] kernfs dormant: removing
[  166.867326][ T7287] nf_nat: Already setup manip DST for ct ffff888077879080 (status bits 0x188)
[  166.871271][ T3561] inotify_read: group=ffff8881447ec000 kevent=0000000000000000
[  166.880346][ T7287] nf_nat: Already setup manip SRC for ct ffff888077879080 (status bits 0x188)
[  166.893775][ T7291] Kernel panic - not syncing: Fatal exception
[  166.901353][    C0] nf_nat: Already setup manip DST for ct ffff888077879080 (status bits 0x188)
[  166.902855][ T7291] Kernel Offset: disabled
[  166.915983][ T7291] Rebooting in 86400 seconds..