last executing test programs:

2m21.422048456s ago: executing program 4 (id=205):
syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000280)='./file0\x00', 0x8100c1, &(0x7f00000000c0)=ANY=[], 0x4, 0x695, &(0x7f0000000540)="$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")
openat(0xffffffffffffff9c, &(0x7f0000001140)='./file1\x00', 0x8442, 0x5c)

2m21.028332606s ago: executing program 4 (id=209):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%ps    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)

2m20.788106482s ago: executing program 4 (id=210):
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000940)='.\x00', 0xaa)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000009c0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
dup3(r0, r1, 0x0)
readv(r1, &(0x7f0000000a00)=[{&(0x7f0000000a40)=""/48, 0x30}], 0x50)

2m20.438571708s ago: executing program 4 (id=211):
r0 = syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000200)='./file1\x00', 0x18410, &(0x7f0000000e40)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0], 0x3, 0x4b9, &(0x7f0000000e80)="$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")
r1 = openat(r0, &(0x7f0000000b00)='./file1\x00', 0x143042, 0x138)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x800, 0x3000005, 0x11, r1, 0x0)
r2 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000006c0)={0x22, 0x37, 0x1, {0x1, 0x8, 0x748, r2, 0x4, ',@\'\''}}, 0x22)

2m19.829766641s ago: executing program 4 (id=213):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x109d02, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x20040010)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000180)={0x70003, 0x0, {[0xffffffefffffffff, 0x0, 0x8, 0x4, 0x200000000003, 0x4, 0x5]}})
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$FUSE_INIT(r3, &(0x7f0000003b80)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x1c0, 0x80040, 0xff, 0x3, 0xb82d, 0xf, 0x0, 0x0, 0x20, 0xcd}}, 0x50)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m18.593223029s ago: executing program 4 (id=218):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = socket$inet6(0xa, 0x802, 0x0)
connect$inet6(r2, &(0x7f0000002ac0)={0xa, 0xfffd, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xd}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002cc0)=ANY=[@ANYBLOB="1800000000000000290080003600000034000000000000001400000000000000290000003e0000000200000000000000"], 0x30}}], 0x2, 0x888)
r3 = syz_create_resource$futex(&(0x7f0000000080)=0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002980)={0x11, 0x4, &(0x7f0000002a40)=ANY=[@ANYRES64=r3], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
futex(r3, 0x9, 0x1, 0x0, r3, 0x2)
r5 = syz_create_resource$futex(&(0x7f0000000140))
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_create_resource$futex(&(0x7f0000002b00))
futex$unlock_wake_list32(r6, 0x681, 0x7, &(0x7f0000002b40), 0x0, 0x9)
mkdirat(0xffffffffffffff9c, &(0x7f0000002d00)='./trace\x00', 0xd6)
mount(0x0, &(0x7f0000002d40)='./trace\x00', &(0x7f0000002d80)='tracefs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000002dc0)='./trace/current_tracer\x00', 0x1, 0x0)
write(r7, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000002e80)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYRESDEC=r4, @ANYRESOCT=r2], 0x7, 0x2bc, &(0x7f0000003000)="$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")
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000032c0)={0x1, &(0x7f0000003300)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
openat$nvram(0xffffffffffffff9c, &(0x7f0000003340), 0x101001, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)
futex(r3, 0x5, 0x0, 0x0, r5, 0x1)
open$dir(&(0x7f0000000900)='./file0\x00', 0x103b43, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', 0x0, 0x10)

2m17.852746206s ago: executing program 32 (id=218):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = socket$inet6(0xa, 0x802, 0x0)
connect$inet6(r2, &(0x7f0000002ac0)={0xa, 0xfffd, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xd}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002cc0)=ANY=[@ANYBLOB="1800000000000000290080003600000034000000000000001400000000000000290000003e0000000200000000000000"], 0x30}}], 0x2, 0x888)
r3 = syz_create_resource$futex(&(0x7f0000000080)=0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002980)={0x11, 0x4, &(0x7f0000002a40)=ANY=[@ANYRES64=r3], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
futex(r3, 0x9, 0x1, 0x0, r3, 0x2)
r5 = syz_create_resource$futex(&(0x7f0000000140))
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_create_resource$futex(&(0x7f0000002b00))
futex$unlock_wake_list32(r6, 0x681, 0x7, &(0x7f0000002b40), 0x0, 0x9)
mkdirat(0xffffffffffffff9c, &(0x7f0000002d00)='./trace\x00', 0xd6)
mount(0x0, &(0x7f0000002d40)='./trace\x00', &(0x7f0000002d80)='tracefs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000002dc0)='./trace/current_tracer\x00', 0x1, 0x0)
write(r7, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000002e80)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYRESDEC=r4, @ANYRESOCT=r2], 0x7, 0x2bc, &(0x7f0000003000)="$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")
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000032c0)={0x1, &(0x7f0000003300)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
openat$nvram(0xffffffffffffff9c, &(0x7f0000003340), 0x101001, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)
futex(r3, 0x5, 0x0, 0x0, r5, 0x1)
open$dir(&(0x7f0000000900)='./file0\x00', 0x103b43, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', 0x0, 0x10)

2m8.748407891s ago: executing program 1 (id=246):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x1d3)
mount$bpf(0x200000000000, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x4b800, &(0x7f00000006c0)={[{@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@usrjquota}, {@init_itable}, {@errors_continue}, {@block_validity}, {@nouser_xattr}]}, 0x1, 0x5fd, &(0x7f0000000740)="$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")

2m8.440309263s ago: executing program 1 (id=247):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$P9_ROPEN(r1, &(0x7f00000000c0)={0x18, 0x71, 0x2, {{0x1, 0x3, 0x1}, 0x5ee4}}, 0x18)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x800)
splice(r0, 0x0, r3, 0x0, 0x1e8640, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)

2m8.057855522s ago: executing program 1 (id=250):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x1, &(0x7f0000000100))
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x161)
mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f00000004c0)='100', 0x3)
getuid()
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d40), 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_lsm={0x6, 0x4, &(0x7f0000000e80)=@framed={{}, [@ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000ec0)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x66}, 0x94)
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000005c0)='./bus\x00', &(0x7f0000000680), 0x8, &(0x7f00000006c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})

2m3.112511076s ago: executing program 1 (id=266):
syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000200)='./file1\x00', 0x18410, &(0x7f0000000e40)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0], 0x3, 0x4b9, &(0x7f0000000e80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./file1\x00', 0x183042, 0x15)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x800, 0x3000005, 0x11, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0)
write$P9_RGETLOCK(r0, &(0x7f00000006c0)={0x22, 0x37, 0x1, {0x1, 0x8, 0x748, r1, 0x4, ',@\'\''}}, 0x22)

2m1.415004632s ago: executing program 1 (id=268):
r0 = dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0)
fcntl$getownex(r0, 0x10, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000c80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c40)={0x0, 0x120}, 0x1, 0x0, 0x0, 0x14008880}, 0x10)
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./proc\x00', 0x44, 0x0, 0xff, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0xa0001, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44090}, 0x900)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0xc0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
write(r4, &(0x7f0000000180)='1', 0x1)

2m0.484798508s ago: executing program 1 (id=276):
r0 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x6e24, @empty}, 0x10)
r1 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000a40), 0x4)
bind$inet(r1, &(0x7f0000000a80)={0x2, 0x6e24, @loopback}, 0x10)

1m59.879958311s ago: executing program 33 (id=276):
r0 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x6e24, @empty}, 0x10)
r1 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000a40), 0x4)
bind$inet(r1, &(0x7f0000000a80)={0x2, 0x6e24, @loopback}, 0x10)

1m23.088257499s ago: executing program 0 (id=388):
openat(0xffffffffffffff9c, &(0x7f0000002c80)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002cc0), 0x2, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='attr/current\x00')
preadv(r1, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000340)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000440), 0x318, 0x0)
recvmmsg(r3, &(0x7f0000000480), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0x4, &(0x7f00000005c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000000600)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000640)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000740), 0x1f2, 0x10, &(0x7f0000000780), 0xfffffe51}, 0x48)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000007c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000001800)=0x40)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001840)={0xe, {"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", 0x942}}, 0x1006)
getsockname(r5, &(0x7f0000002880)=@caif=@util, 0x0)
syz_mount_image$erofs(&(0x7f0000002900), &(0x7f0000002940)='./file0\x00', 0x18000c6, &(0x7f0000002980)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x0, 0x17d, &(0x7f00000029c0)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000002d00)='./file0\x00', &(0x7f0000002d40), 0x10000, &(0x7f0000002d80)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
utimensat(0xffffffffffffff9c, &(0x7f0000007080)='./file0\x00', &(0x7f00000070c0)={{}, {0x0, 0x3fffffff}}, 0x100)
mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x84, &(0x7f0000000100)=ANY=[@ANYBLOB=',noextend,fscon'])

1m21.555968999s ago: executing program 0 (id=389):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newsa={0x138, 0x10, 0x1, 0x70bd2d, 0x100, {{@in=@loopback, @in=@empty, 0x4e23, 0x4, 0x4e32, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in=@remote, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x31}, {0x0, 0x9, 0x6, 0x4000000ffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x1, 0xfd}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x170}, 0x1, 0x0, 0x0, 0x4c801}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./pipefs\x00', 0x1ff)
mount(0x0, &(0x7f00000003c0)='./pipefs\x00', &(0x7f0000000400)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./pipefs/gssd/clntXX/gssd\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000480)='./pipefs/gssd/clntXX/gssd\x00', 0x149c01, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

1m21.024076614s ago: executing program 0 (id=391):
io_setup(0x5, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace(0x8, r0)
waitid(0x1, r0, 0x0, 0x4, 0x0)

1m20.499982628s ago: executing program 0 (id=393):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl(r0, 0x8995, &(0x7f0000000140)='vet')

1m19.360201946s ago: executing program 0 (id=395):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4620, 0xfffffffb, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50)
r1 = syz_create_resource$futex(&(0x7f0000000080)=0x1)
futex(r1, 0x5, 0x1, 0x0, 0x0, 0x0)
listen(r0, 0x1)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x22000)
r2 = creat(&(0x7f0000001940)='./bus\x00', 0x0)
open(&(0x7f0000001980)='./bus\x00', 0x14507e, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
fallocate(r2, 0x0, 0x0, 0x1000f4)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='memory.swap.events\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={<r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x25, &(0x7f0000000fc0)=r3, 0x4)

1m18.985328875s ago: executing program 0 (id=397):
socket$inet6(0xa, 0x2, 0x10000000)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000600)={0xffffffffffffffff, r1, 0xe}, 0x14)
socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000580)='./tracefs\x00', &(0x7f0000000680)='tracefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./tracefs/instances/foo\x00', 0x1ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000700)='./tracefs/instances/foo\x00', 0x200)

1m2.813582194s ago: executing program 34 (id=397):
socket$inet6(0xa, 0x2, 0x10000000)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000600)={0xffffffffffffffff, r1, 0xe}, 0x14)
socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000580)='./tracefs\x00', &(0x7f0000000680)='tracefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./tracefs/instances/foo\x00', 0x1ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000700)='./tracefs/instances/foo\x00', 0x200)

59.424089415s ago: executing program 5 (id=440):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x100}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x1f, 0x15, &(0x7f0000001140)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa20000000000000702", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

57.656072729s ago: executing program 5 (id=444):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000000080000000001"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000ff0f00000000000000007a0af0ff00", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000004000000850000000200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r4}, &(0x7f0000000740), &(0x7f0000000780)=r1}, 0x20)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000007c0)=r5, 0x4)
sendmsg$inet(r3, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x4000080)

57.372442558s ago: executing program 5 (id=447):
socket$netlink(0x10, 0x3, 0x6)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc41a, &(0x7f0000000380)={[{@grpjquota}], [], 0x2c}, 0x1, 0x47c, &(0x7f0000000f00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r4 = dup(r3)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r5, 0x0, 0x32, 0x0, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x1})
syz_create_resource$futex(0x0)
ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000540)=@buf)
r6 = accept$alg(r4, 0x0, 0x0)
listen(r6, 0x8)

54.182125399s ago: executing program 5 (id=453):
syz_mount_image$squashfs(&(0x7f0000000300), &(0x7f0000000440)='./file1\x00', 0x81ccd8, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0], 0x1, 0x241, &(0x7f0000001600)="$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")
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001900), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000001940)='./file0\x00', &(0x7f0000001980), 0x0, &(0x7f00000019c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})

53.531915777s ago: executing program 5 (id=456):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000000080000000001"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000ff0f00000000000000007a0af0ff00", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000004000000850000000200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r4}, &(0x7f0000000740), &(0x7f0000000780)=r1}, 0x20)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000007c0)=r5, 0x4)
sendmsg$inet(r3, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x4000080)

52.239283511s ago: executing program 5 (id=460):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000240)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000500)={0x2, 0x4e23, @local}, 0x10)
write(r0, &(0x7f0000000540)="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", 0x2e7)
sendto$inet(r0, &(0x7f0000000900)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6cf74d2e3b", 0xfe2b, 0x10000485, 0x0, 0xfffffffffffffe91)

51.493042778s ago: executing program 35 (id=460):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000240)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000500)={0x2, 0x4e23, @local}, 0x10)
write(r0, &(0x7f0000000540)="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", 0x2e7)
sendto$inet(r0, &(0x7f0000000900)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6cf74d2e3b", 0xfe2b, 0x10000485, 0x0, 0xfffffffffffffe91)

50.067886826s ago: executing program 3 (id=465):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000000c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@mblk_io_submit}, {}, {@bh}, {@nombcache}, {@nodelalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb3, &(0x7f0000000bc0)="$eJzs3M1rXOUaAPDnnEw+2ubeSS+Xy+3dNBeRFtRpWkmxRbCVihsXgm6FhnRSQqYfJJGaNIuJ/gOirgU3glqULuy6GwW3brRuLS6EIrFRENHImY8kNjNJ2k5yQvr7wdvzvvOcmfd55tCe94U5DeCRNZj9kUYciIizSUSx8XoaET21Xl9EtX7e4sLc6K8Lc6NJLC298lMSSUTcXZgbbX5W0jjuawz6IuLr55P411tr552amZ0YqVTKk43xkekLl49Mzcw+NX5h5Hz5fPni0ePPDB8bPj50Yrhjtf72/akbv/z/xR+qv3/8x7Wf3/0wiVPR34itrqNTBmNw+TtZrRARI52eLCddjXpW15kUNnhTusVJAQDQVrpqDfefKEZXrCzeivHFN7kmBwAAAHTEUlfEEgAAALDLJfb/AAAAsMs1fwdwd2FutNny/UXC9rpzOiIG6vUvNlo9Uohq7dgX3RGx924Sqx9rTepve2iDEXH7uxOfZS226Dnk9VTnI+K/ra5/Uqt/oPYU99r604gY6sD8g/eMd1r9T/a0r/9UB+bPu34AHk03T9dvZGvvf+ny+ida3P8KLe5dDyLv+19z/be4Zv23Un9Xm/Xfy5uc4+pH719pF8vqf/bGC582WzZ/dnyoou7DnfmI/xVa1Z8s15+0qf/sJuco/nml3C6Wd/1LH0Qcitb1NyXr//9ER8bGK+WhnvZzzH81/Em7WN71Z9d/b5v6N7r+lzc5x2tnzlxvF9u4/vTHnuTVWq/5Fb8xMj09eTSiJ3lp7evHGg+0t9E8p/kZWf2HH1v/73+r+rMpqo3vIdsLzDeO2fjNe+Z87trVz9erP9v75Xn9zz3g9X97k3M8/uU7h9vFVu9/s5bNfzup74UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCmNiP5I0tJyP01LpYh9EfHv2JtWLk1NPzF26fWL57JYxEB0p2PjlfJQRBTr4yQbH631V8bH7hk/HRH7I+K94p7auDR6qXIu7+IBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYti8i+iNJSxGRRsRiMU1LpbyzAgAAADpuIO8EAAAAgC1n/w8AAAC7n/0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAW2z/wZu3koiontxTa5meRqw718yArZbmnQCQm668EwByU8g7ASA397nHt1yAXSjZIN7XNtLb8VwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2LkOHbh5K4mI6sk9tZbpacS6W77j4DZmB2ylNO8EgNx0rRcsbF8ewPYrRCwleScB5KL1Hh94lGy0BuhbOaf690jvluUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwM7TX2tJWoqItNZP01Ip4h8RMRDdydh4pTwUEf+MiG+L3b3ZuDfvpAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOi4qZnZiZFKpTypo6OTbyfZGWnUO3n/ywQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQB6mZmYnRiqV8uRU3pkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeZuamZ0YqVTKk5voXL+fk1d18q4RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID8/BUAAP//aaoNFw==")
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000079c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000007b40))

47.959976774s ago: executing program 3 (id=468):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x1, &(0x7f0000000100))
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x161)
mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f00000004c0)='100', 0x3)
getuid()
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d40), 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_lsm={0x6, 0x6, &(0x7f0000000e80)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000ec0)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x66}, 0x94)
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000005c0)='./bus\x00', &(0x7f0000000680), 0x8, &(0x7f00000006c0))

47.268176176s ago: executing program 3 (id=470):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230)
socket$nl_netfilter(0x10, 0x3, 0xc)
ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x410}], 0x2, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x6)
bind$inet(r2, &(0x7f0000000700)={0x2, 0x6bb, @loopback}, 0x10)
listen(r2, 0x1)
r3 = socket$inet_tcp(0x2, 0x1, 0x6)
bind$inet(r3, &(0x7f0000000740)={0x2, 0x3039, @loopback}, 0x10)
connect$inet(r3, &(0x7f0000000780)={0x2, 0x6bb, @loopback}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

46.817371432s ago: executing program 3 (id=472):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, 0x0)

46.288064267s ago: executing program 3 (id=474):
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x2, 0x6ca, &(0x7f0000000600)="$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")
removexattr(0x0, &(0x7f0000000e80)=@known='system.posix_acl_default\x00')

45.702036558s ago: executing program 3 (id=476):
openat(0xffffffffffffff9c, &(0x7f0000002c80)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002cc0), 0x2, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000440), 0x318, 0x0)
recvmmsg(r3, &(0x7f0000000480), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0x4, &(0x7f00000005c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000000600)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000640)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000740), 0x1f2, 0x10, &(0x7f0000000780), 0xfffffe51}, 0x48)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000007c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000001800)=0x40)
write$UHID_INPUT(r2, &(0x7f0000001840)={0xe, {"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", 0x942}}, 0x1006)
getsockname(r5, &(0x7f0000002880)=@caif=@util, 0x0)
syz_mount_image$erofs(&(0x7f0000002900), &(0x7f0000002940)='./file0\x00', 0x18000c6, &(0x7f0000002980)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x0, 0x17d, &(0x7f00000029c0)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000002d00)='./file0\x00', &(0x7f0000002d40), 0x10000, &(0x7f0000002d80)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
utimensat(0xffffffffffffff9c, &(0x7f0000007080)='./file0\x00', &(0x7f00000070c0)={{}, {0x0, 0x3fffffff}}, 0x100)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x84, &(0x7f0000000100)=ANY=[@ANYBLOB=',noextend,fscontext'])

30.449473027s ago: executing program 36 (id=476):
openat(0xffffffffffffff9c, &(0x7f0000002c80)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002cc0), 0x2, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000440), 0x318, 0x0)
recvmmsg(r3, &(0x7f0000000480), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0x4, &(0x7f00000005c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000000600)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000640)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000740), 0x1f2, 0x10, &(0x7f0000000780), 0xfffffe51}, 0x48)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000007c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000001800)=0x40)
write$UHID_INPUT(r2, &(0x7f0000001840)={0xe, {"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", 0x942}}, 0x1006)
getsockname(r5, &(0x7f0000002880)=@caif=@util, 0x0)
syz_mount_image$erofs(&(0x7f0000002900), &(0x7f0000002940)='./file0\x00', 0x18000c6, &(0x7f0000002980)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x0, 0x17d, &(0x7f00000029c0)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000002d00)='./file0\x00', &(0x7f0000002d40), 0x10000, &(0x7f0000002d80)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
utimensat(0xffffffffffffff9c, &(0x7f0000007080)='./file0\x00', &(0x7f00000070c0)={{}, {0x0, 0x3fffffff}}, 0x100)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x84, &(0x7f0000000100)=ANY=[@ANYBLOB=',noextend,fscontext'])

4.211972833s ago: executing program 6 (id=566):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000000080000000001"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000ff0f00000000000000007a0af0ff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000004000000850000000200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2}, &(0x7f0000000740), &(0x7f0000000780)=r1}, 0x20)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000007c0)=r3, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x4000080)

4.077779977s ago: executing program 6 (id=567):
r0 = io_uring_setup(0x136a, &(0x7f0000000400)={0x0, 0x4ea9, 0x0, 0x3, 0xa8d})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20a40, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
r4 = openat$kvm(0x0, &(0x7f00000003c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000480)={0x0, &(0x7f00000004c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1e, {0x0, "66ba3412eef4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x66})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = syz_create_resource$kvm_nested_state(&(0x7f0000000540)=@vmx={0x0, 0x0, 0x2080})
ioctl$KVM_GET_NESTED_STATE_res(r7, 0xc080aebe, r8)
ioctl$KVM_SET_NESTED_STATE_res(r3, 0x4080aebf, r8)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3.415526836s ago: executing program 6 (id=568):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mountinfo\x00')
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x28100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

2.969687792s ago: executing program 2 (id=569):
r0 = open(&(0x7f0000000040)='./file0\x00', 0x4c27e, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
writev(r0, &(0x7f0000003940)=[{0x0}, {&(0x7f0000002440)="457b2272089b", 0x6}], 0x2)

2.788047981s ago: executing program 2 (id=570):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0x8, @loopback, 0x4}}, 0x0, 0x0, 0x2, 0x0, "c5f37081326dd7522df6283901be8b18078b072cc2cce27a675619ed2697db7edc31f32d5569fa033509f3db509c9aad33269479cd3503f15b4291d3e07d92ac46029d5384c936377e56629c4b37cee1"}, 0xd8)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='veth0_macvtap\x00', 0x10)
r1 = fcntl$dupfd(r0, 0x0, r0)
sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$NFT_BATCH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x240088c8}, 0x4000000)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[], 0x7c70}, 0x1, 0x0, 0x0, 0x4004084}, 0x0)

2.467809604s ago: executing program 2 (id=571):
syz_open_dev$usbmon(&(0x7f0000000540), 0x1, 0x1eb081)
syz_open_dev$usbmon(&(0x7f0000000580), 0x0, 0x84200)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000000080)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c0036b573262ed88dfec7618c03371693a5173bd0bf12d29c0180500a87e3789adea802a90933b243ca225dacfc27597d6e1ce3d9fdc12409748ba4fbde6f1d76e116fd437b79bbcea7fdc682fd0b90334eed137d03ce386950f5e50ff2516eb2b500a9b99e04f2a41864e44cb46101a23835877342485260d4510fa3240a2c9756d388e5861cdeaf4c88bca74fe3ce71eef72c"], 0xfd, 0x2c2, &(0x7f0000000180)="$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")
utime(0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file1\x00', 0x10048, &(0x7f0000000540)=ANY=[], 0x67, 0xc54, &(0x7f0000000cc0)="$eJzs3U9onOl9B/DfMyOtRtp0o80m3qTNbgdSEqPUxv9iK7gEOVbUBhxviKzQPUWjP3aGlSUjyY03bYPakhZ6Cd1L6aWIJksLOfTU7TFKs4WEUighh+RQEDRZ9tCDDoHSll2F951npJEs27Nry5LXn88y+33nnd87ev6M3nkFfmYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIj47OcunDiZDroVAMDDdHn8SydOe/8HgMfKFX//AwAAAAAAAAAAAADAYZeiGkcixcBrG2myvN9Su9Scv3lrYnRs78P6U6SoRLWsL261k6dOn/nU2XPD7bz78Q/aR+KF8SsX6hd/dvzG4uzS0uxMfWK+Ob0wM9v1M7SOX7j+bo/fbagcgPr1l27OXL26VD91/PSOh28NvtH35JHB8+eOnR1u106Mjo2Nd9T09L7rn36bO63weCKq0YgUbw2+mRoRUYn7H4t7vHb2W3/ZiaGyExOjY2VH5pqN+eXiwVTJVZWIesdBI+0xeghzcV9GIlaK5hcNHiq6N36jsdiYmputf7GxuNxcbi7Mp0qrtUV/6lGJ4RSxGhHrfbc/XW9U4/lI8cqJjTQVEdX2OHyyXBh87/ZU9qGPXSjaWe+NWK08AnN2iPVFNS5Hil++fjSmizHLt/h4xBeKfC3i1SI/E5GKF8aZiF/s8Tri0dQT1fj3SLGQNtJMeT5on1cufbn++fmrCx217fPKI//+8DAd8nNTLaoxVZ7xN9K7v9gBAAAAAAAAAAAAAAAA4EHrj2p8O1L82XN/UK4rjnJd+vvPD7/vxd/tXDP+7D2ep6g9HhErle7W5PbmpcOpUvy3Dx2jK7Woxjfy+r8/OejGAAAAAAAAAAAAAAAAAAAAPNaq8WKk+Mqxo2k1Or9TvDl/rX6lMTXX+lbY9nf/tr8zfXNzc7OeWjmSczLnSs7VnGs513NGJR+fcyTnZM6VnKs513Ku54xqPj7nSM7JnCs5V3Ou5VzPGT35+JwjOSdzruRczbmWcz1nHJLv7gUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeC+pRDXejhTf+tpGihQRIxGT0cq1voNuHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQqKVqHI8Uay/WyvurlYgrEfH25uZmefvfzc3NiI1i+34ddF8BAAAAAAAAAAAAAAAAAADg0ErV+FikeOb/NlI9Im4NvtH35JHB8+eOnR2uRjVSUdJZ/8L4lQv1iwvXbyzOLi3NztQnLn7nnfy42qXm/M1bE6NjD7wjXem/vf3zzemFmdlun+Ae7e+vXVy48fJi89pXl/d8fKB2YWppebExvffD0R+ViMnOPUNlgydGx8pGzzUb8+WhqXKHBlYiRrrtDAAAAAAAAAAAAAAAAAAAAIfGQKrG5yLFz//zTGqvG+9prfn/tda96lbtq3+0/VkAc7uyrfPzA7rZTt02dKhceF+fGB0bG+/Y3dN7e2nRppSq8Wyk+MQrHy7Xw6cY2HNtfFH3VFF3/UyuG/yNom5lR1VtaGJ0rH55Yf7Yhbm5henGcmNqbrY+fqMxfdsHBzzVbYcAAAAAAAAAAAAAAAAAAABg20Cqxk8ixX//w3+k9vfO5/X/Pa17Hev/f6dcQl+qpZ25pVzb/1S5tr+1/f7zwwPPP3en/fux/r9oU0rV+Ob2xxVsrf+f3FVb1P1FpHjzuY+Wj6WoPFHUNdrdaT3j1ebc7Imi9m8jxW++1a6NsvZarn1mu/ZkUdsfKf56Y2ftV3PtB7drTxW1RyPFD/5r79oPbdeeLmp/Hin++e/r7dqBovYPc+2R7drj0wtzM/ca1mL+vxspvnP591K7z3ec/47Pf1jZlVtum/O7b3c//+127D3/gx37VvK8/nmkOP2TD5dzebf5Pxspvlv7aK5rjf1Ufvzp8v/b8/+JSPGzf9tZezXXfmC79mS33Tpoxfx/O1J8/29+utXnPP95ZLdnqHP+f71nZ269SvZt/u/++/90x77B3K7pdzgWj6Oll7/+UmNubnbxvjdqz0c8iOfpdqN4me77z8qfgRMPsV82bByGjXudOb7Xv/9nJ/Zb8f7/l5Hi/49UU/s6Jr//v691b/v673++sf3+f35Xbjmg9/8PdOw7n69aensiasvXb/Q+G1Fbevnrx5rXG9dmr83Onzp54tOfPnvyxMmzvU+0L+62t7oeu/eCYv5/FCl+/I8/3vo7Zuf1397X/wO7cssBzf8znX3acV3T9VA8lor5/7tI8fRnf7r19+bdrv/bf/8f/djO3Pr9O6D5/2DHvsHcruY7HAsAAAAAAAAAAIBHyUCqxl9Fit//099O7TVE3fz7v5ldueWA/v3XkY59Mw90XcOdN7oeZACAQ6S4/vtQpPje5g+31nLvvP6L32rXdl7/3clh+P5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB41KWoxh9HioHXNtJaX3G/pXapOX/z1sTo2N6H9adIUYlqWV/caidPnT7zqbPnhtt5qe9hduMj8cL4lQv1iwvXbyzOLi3NztQn5pvTCzOzXT/D/R6/21A5gPXrL92cuXp1qX7q+OkdD98afKPvySOD588dOzvcrp0YHRsb76jp6X3XP/026Q77n4hq/DBSvDX4Zvp+X0Ql7n8s7vHa2W/9ZSeGyk5MjI6VHZlrNuaXiwdTJVdVIuodB420x+ghzMV9GYlYKZpfNHio6N74jcZiY2putv7FxuJyc7m5MJ8qrdYW/alHJYZTxGpErO/xK9kb1fhmpHjlxEb6l76IanscPnl5/EsnTt+7PZV96GMXinbWeyNWK4/AnB1ifVGNf4oUv3z9aPygL6InWrf4eMQXinwt4tUiPxORihfGmYhfPNRTO/upJ6pxJlIspI30el9xPmifVy59uf75+asLHbXt88oj//7wMB3yc1MtqvGj8oy/kf519+/1wAE1CgAAAAAAAAAAAAAAAIByJe1qpPjKsaOpXB+8taa4OX+tfqUxNdda1tde+9deM725ublZT60cyTmZcyXnas61nOs5o5KPzzmSczLnSs7VnGs513NGNR+fcyTnZM6VnKtl9m21eD3vj558fM6RnJM5V3Ku5lzLuZ4zDsnaPQAAAAAAAAAAAAAAAAAA4L2lEtXyW9y/9bWNVC6VHomYjFau+Z7f97xfBQAA///sg2Mq")
prlimit64(0x0, 0xe, &(0x7f0000001940)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001980)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000019c0)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a00)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000001a40)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000001ac0), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000001b00), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001b40)=0x6)
read$FUSE(r0, &(0x7f0000001b80)={0x2020}, 0x2020)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x100, '\x00', 0x0, 0x0, 0x0, 0x4}, 0x50)
close(0x3)

2.369878494s ago: executing program 6 (id=572):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000004a40), 0x0)

1.967171686s ago: executing program 6 (id=573):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_create_resource$futex(&(0x7f00000001c0)=0x1)
futex(r2, 0x6, 0x0, &(0x7f0000000200)={0x77359400}, 0x0, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

1.477169636s ago: executing program 2 (id=574):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000000080000000001"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000ff0f00000000000000007a0af0ff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000004000000850000000200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2}, &(0x7f0000000740), &(0x7f0000000780)=r1}, 0x20)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000007c0)=r3, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x4000080)

1.075805318s ago: executing program 2 (id=575):
getpid()
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xa, &(0x7f00000007c0)=@framed={{0x18, 0x3}, [@initr0, @generic={0x65, 0x0, 0x0, 0x0, 0x2}, @initr0, @exit, @alu={0x4, 0x0, 0x0, 0x3}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0, <r1=>0xffffffffffffffff}, 0x0, &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000000c0)={r1, 0x0, &(0x7f0000000e00)=""/4096}, 0x20)

748.652582ms ago: executing program 2 (id=576):
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, <r0=>0x0}, 0x6)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r0, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r1, 0x20, &(0x7f00000007c0)={&(0x7f0000000800)=""/243, 0xfffffffffffffdb4, 0x0, 0x0}}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x2})
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {}, {0xc, 0xb}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x64}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000f40)={'syzkaller0\x00', @multicast})
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000f80)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendto$packet(r3, &(0x7f0000001000)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000001040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)

0s ago: executing program 6 (id=577):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000)
r1 = syz_open_dev$hidraw(&(0x7f0000000300), 0x0, 0xbb42)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mysys\x00', 0x17f)
mount(0x0, &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f00000004c0)='./file0\x00', 0x11, &(0x7f0000002400)={[{@nombcache}, {@debug}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@grpid}, {@test_dummy_encryption_v1}]}, 0x6, 0x61b, &(0x7f0000000540)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x4000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
syz_clone3(&(0x7f0000002380)={0xa349a00, 0x0, 0x0, 0xfffffffffffffffd, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$HIDIOCGFEATURE(r1, 0xc0404807, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000003c0)={0xa, {0x1, 0x3, 0xff}}, 0x5)
sendmsg$SEG6_CMD_GET_TUNSRC(r2, 0x0, 0x200058c5)
syz_mount_image$exfat(&(0x7f0000000b80), &(0x7f0000000bc0)='./file0\x00', 0x208008de, &(0x7f0000000c00)=ANY=[], 0x1, 0x1503, &(0x7f0000000c40)="$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")
openat$sysfs(0xffffffffffffff9c, 0x0, 0x109482, 0x132)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000002180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000002280)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002300), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002380), 0x10106, 0x2, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.79' (ED25519) to the list of known hosts.
[   86.302374][ T4263] cgroup: Unknown subsys name 'net'
[   86.406348][ T4263] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   87.716596][ T4263] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   89.620229][ T4287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   89.641030][ T4291] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   89.644202][ T4288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   89.649219][ T4291] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   89.659039][ T4288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   89.663990][ T4291] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   89.671100][ T4288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   89.678465][ T4291] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   89.686106][ T4288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   89.692003][ T4291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   89.699473][ T4288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   89.705527][ T4291] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   89.720057][ T4288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   89.727987][ T4288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   89.728106][ T4292] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   89.736277][ T4288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   89.749932][ T4288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   89.758250][ T4288] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   89.765532][ T4288] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   89.773083][ T4288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   89.778439][ T4291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   89.780714][ T4288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   89.788250][ T4293] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   89.803096][ T4292] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   89.805291][ T4293] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   89.811811][ T4292] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   89.825706][ T4293] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   89.834473][ T4288] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   89.841825][ T4292] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   89.853108][ T4292] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   89.927556][ T4285] rxe_eth0 speed is unknown, defaulting to 1000
[   89.936175][ T4276] rdma_rxe: rxe_register_device failed with error -23
[   89.944995][ T4276] rdma_rxe: failed to add rxe_eth0
[   89.945589][ T4277] rdma_rxe: rxe_register_device failed with error -23
[   89.962123][ T4289] rdma_rxe: rxe_register_device failed with error -23
[   89.965516][ T4277] rdma_rxe: failed to add rxe_eth0
[   89.969038][ T4289] rdma_rxe: failed to add rxe_eth0
[   89.980400][ T4285] rxe_eth0 speed is unknown, defaulting to 1000
[   89.980979][ T4281] rdma_rxe: rxe_register_device failed with error -23
[   89.990689][ T4285] rxe_eth0 speed is unknown, defaulting to 1000
[   90.011426][ T4281] rdma_rxe: failed to add rxe_eth0
[   90.182026][ T4285] infiniband rxe0: set active
[   90.187675][ T4285] infiniband rxe0: added rxe_eth0
[   90.198259][ T4265] rxe_eth0 speed is unknown, defaulting to 1000
[   90.272919][ T4285] RDS/IB: rxe0: added
[   90.278791][ T4285] smc: adding ib device rxe0 with port count 1
[   90.285722][ T4285] smc:    ib device rxe0 port 1 has pnetid 
[   90.324712][  T128] rxe_eth0 speed is unknown, defaulting to 1000
[   90.332515][ T4285] rxe_eth0 speed is unknown, defaulting to 1000
[   90.455625][ T4277] chnl_net:caif_netlink_parms(): no params data found
[   90.610332][ T4289] chnl_net:caif_netlink_parms(): no params data found
[   90.670048][ T4285] rxe_eth0 speed is unknown, defaulting to 1000
[   90.678286][ T4281] chnl_net:caif_netlink_parms(): no params data found
[   90.725567][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.741074][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.749647][ T4277] device bridge_slave_0 entered promiscuous mode
[   90.778886][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.788177][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.797201][ T4277] device bridge_slave_1 entered promiscuous mode
[   90.818942][ T4285] rxe_eth0 speed is unknown, defaulting to 1000
[   90.874481][ T4276] chnl_net:caif_netlink_parms(): no params data found
[   90.887717][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.917452][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.972857][ T4289] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.980099][ T4289] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.001753][ T4289] device bridge_slave_0 entered promiscuous mode
[   91.026989][ T4289] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.040764][ T4289] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.049521][ T4289] device bridge_slave_1 entered promiscuous mode
[   91.080870][ T4285] rxe_eth0 speed is unknown, defaulting to 1000
[   91.090058][ T4277] team0: Port device team_slave_0 added
[   91.113085][ T4277] team0: Port device team_slave_1 added
[   91.126444][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.150966][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.159193][ T4281] device bridge_slave_0 entered promiscuous mode
[   91.211387][ T4289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.245567][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.253176][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.265859][ T4281] device bridge_slave_1 entered promiscuous mode
[   91.286373][ T4289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.304149][ T4285] rxe_eth0 speed is unknown, defaulting to 1000
[   91.323995][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.338742][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.365999][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.422164][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.431987][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.438946][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.465718][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.482462][ T4265] rxe_eth0 speed is unknown, defaulting to 1000
[   91.499318][ T4289] team0: Port device team_slave_0 added
[   91.509955][ T4289] team0: Port device team_slave_1 added
[   91.519160][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.556051][ T4281] team0: Port device team_slave_0 added
[   91.570102][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.577365][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.585121][ T4276] device bridge_slave_0 entered promiscuous mode
[   91.599716][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.607300][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.615056][ T4276] device bridge_slave_1 entered promiscuous mode
[   91.628239][ T4281] team0: Port device team_slave_1 added
[   91.647372][ T4289] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.654659][ T4289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.681952][ T4289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.715881][ T4289] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.723014][ T4289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.749475][ T4289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.777888][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.802124][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.809115][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.831643][ T4293] Bluetooth: hci0: command 0x0409 tx timeout
[   91.839893][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.866196][ T4277] device hsr_slave_0 entered promiscuous mode
[   91.875900][ T4277] device hsr_slave_1 entered promiscuous mode
[   91.887480][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.909188][ T4289] device hsr_slave_0 entered promiscuous mode
[   91.916101][ T4289] device hsr_slave_1 entered promiscuous mode
[   91.921281][ T4287] Bluetooth: hci3: command 0x0409 tx timeout
[   91.922378][ T4293] Bluetooth: hci4: command 0x0409 tx timeout
[   91.928368][ T4287] Bluetooth: hci2: command 0x0409 tx timeout
[   91.934642][ T4293] Bluetooth: hci1: command 0x0409 tx timeout
[   91.947326][ T4289] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.955638][ T4289] Cannot create hsr debugfs directory
[   91.961780][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.968858][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.995957][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.054701][ T4276] team0: Port device team_slave_0 added
[   92.087869][ T4276] team0: Port device team_slave_1 added
[   92.147314][ T4281] device hsr_slave_0 entered promiscuous mode
[   92.154711][ T4281] device hsr_slave_1 entered promiscuous mode
[   92.163195][ T4281] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   92.171148][ T4281] Cannot create hsr debugfs directory
[   92.206764][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.219172][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.249470][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.295553][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.302873][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.335250][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.464535][ T4276] device hsr_slave_0 entered promiscuous mode
[   92.471648][ T4276] device hsr_slave_1 entered promiscuous mode
[   92.479026][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   92.487390][ T4276] Cannot create hsr debugfs directory
[   92.722979][ T4285] chnl_net:caif_netlink_parms(): no params data found
[   92.865229][ T4289] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   92.880315][ T4289] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   92.896421][ T4289] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   92.919681][ T4289] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   92.930797][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.938243][ T4285] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.949434][ T4285] device bridge_slave_0 entered promiscuous mode
[   92.968526][ T3936] infiniband rxe0: set active
[   92.974469][ T4285] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.982968][ T4285] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.991672][ T4285] device bridge_slave_1 entered promiscuous mode
[   92.999341][ T4265] rxe_eth0 speed is unknown, defaulting to 1000
[   93.059665][ T4285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.089328][ T4285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.099414][ T4277] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   93.135932][ T4277] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   93.147289][ T4277] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   93.168789][ T4285] team0: Port device team_slave_0 added
[   93.177929][ T4277] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   93.203930][ T4285] team0: Port device team_slave_1 added
[   93.240361][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.248200][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.277378][ T4285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.290743][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.297795][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.324845][ T4285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.340061][ T4281] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   93.380134][ T4281] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   93.422130][ T4285] device hsr_slave_0 entered promiscuous mode
[   93.429091][ T4285] device hsr_slave_1 entered promiscuous mode
[   93.437877][ T4285] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   93.453118][ T4285] Cannot create hsr debugfs directory
[   93.466471][ T4281] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   93.483241][ T4281] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   93.556741][ T4289] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.585847][ T4276] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   93.618595][ T4276] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   93.644615][ T4276] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   93.657262][ T4276] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   93.702333][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   93.716715][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   93.733617][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.771214][ T4277] 8021q: adding VLAN 0 to HW filter on device team0
[   93.781003][ T4289] 8021q: adding VLAN 0 to HW filter on device team0
[   93.794510][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   93.803939][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   93.830988][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   93.842569][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   93.852870][ T4310] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.860290][ T4310] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.869391][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   93.879465][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   93.890258][ T4310] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.898579][ T4310] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.911500][ T4284] Bluetooth: hci0: command 0x041b tx timeout
[   93.942320][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   93.955143][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   93.964947][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   93.975676][ T4310] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.982904][ T4310] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.990727][ T4284] Bluetooth: hci1: command 0x041b tx timeout
[   93.998624][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   94.007635][ T4284] Bluetooth: hci2: command 0x041b tx timeout
[   94.007668][ T4293] Bluetooth: hci4: command 0x041b tx timeout
[   94.013822][ T4287] Bluetooth: hci3: command 0x041b tx timeout
[   94.021023][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   94.034502][ T4310] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.042075][ T4310] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.050413][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   94.061892][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   94.071791][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   94.107515][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   94.118990][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   94.139172][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   94.154708][ T4285] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   94.169100][ T4285] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   94.179064][ T4285] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   94.189809][ T4285] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   94.200141][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   94.209948][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   94.219744][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   94.238532][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.273904][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   94.285546][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   94.295382][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   94.305537][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   94.315124][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   94.325437][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   94.335206][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   94.344136][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   94.352952][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   94.378031][ T4277] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   94.388851][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   94.409600][ T4281] 8021q: adding VLAN 0 to HW filter on device team0
[   94.417776][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   94.426772][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   94.436603][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   94.446541][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   94.455293][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   94.463827][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   94.472442][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   94.480504][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   94.493874][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   94.527511][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   94.541058][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   94.555057][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.562245][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.607530][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.643183][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   94.662323][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   94.677357][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   94.699302][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.706501][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.722207][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   94.763437][ T4276] 8021q: adding VLAN 0 to HW filter on device team0
[   94.770414][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   94.788254][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   94.797071][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   94.805754][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   94.816133][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   94.825438][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   94.834915][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   94.858818][ T4281] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   94.877007][ T4281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   94.901255][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   94.910118][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   94.924974][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   94.935981][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   94.945718][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   94.956393][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   94.969321][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   94.978758][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.985956][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.001682][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   95.009715][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   95.050169][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   95.074983][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   95.091555][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.098698][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.121298][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   95.132055][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   95.171404][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   95.185041][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   95.197522][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   95.208127][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   95.217229][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   95.226227][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   95.235304][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   95.243701][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   95.252540][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   95.269017][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   95.278147][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   95.290355][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   95.299324][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   95.313415][ T4285] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.325919][ T4289] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.347799][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   95.360688][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.375316][ T4285] 8021q: adding VLAN 0 to HW filter on device team0
[   95.407000][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   95.421014][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   95.429131][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   95.446535][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   95.458715][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.465899][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.507991][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   95.517310][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   95.527568][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   95.552350][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   95.571610][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   95.580287][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.587536][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.603047][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   95.634326][ T4289] device veth0_vlan entered promiscuous mode
[   95.651230][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   95.660088][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   95.677057][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   95.688210][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   95.703473][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   95.714555][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   95.772761][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   95.783010][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   95.791702][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   95.800349][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   95.809717][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   95.818591][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   95.827249][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   95.839985][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   95.850529][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   95.859886][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   95.868249][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   95.878626][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   95.890448][ T4289] device veth1_vlan entered promiscuous mode
[   95.907706][ T4277] device veth0_vlan entered promiscuous mode
[   95.919221][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.947032][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   95.956537][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   95.965351][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   95.973664][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   95.987678][ T4277] device veth1_vlan entered promiscuous mode
[   95.994932][ T4284] Bluetooth: hci0: command 0x040f tx timeout
[   96.007791][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.039710][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   96.048725][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   96.058469][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   96.068112][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   96.077034][ T4284] Bluetooth: hci4: command 0x040f tx timeout
[   96.083294][ T4284] Bluetooth: hci2: command 0x040f tx timeout
[   96.083723][ T4293] Bluetooth: hci3: command 0x040f tx timeout
[   96.089313][ T4284] Bluetooth: hci1: command 0x040f tx timeout
[   96.103548][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   96.112909][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   96.133435][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   96.149182][ T4289] device veth0_macvtap entered promiscuous mode
[   96.187240][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   96.198671][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   96.213019][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   96.222112][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   96.232192][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   96.242540][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   96.250513][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   96.276594][ T4289] device veth1_macvtap entered promiscuous mode
[   96.295388][ T4281] device veth0_vlan entered promiscuous mode
[   96.307087][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   96.316545][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   96.325748][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   96.334849][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   96.345776][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   96.355222][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   96.364225][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   96.382965][ T4277] device veth0_macvtap entered promiscuous mode
[   96.408063][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.435189][ T4281] device veth1_vlan entered promiscuous mode
[   96.444502][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   96.461504][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   96.470509][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   96.481587][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   96.490265][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   96.500086][ T4276] device veth0_vlan entered promiscuous mode
[   96.515218][ T4277] device veth1_macvtap entered promiscuous mode
[   96.526290][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   96.536635][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   96.566766][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.581520][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.595352][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.614110][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.626480][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   96.635666][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   96.646448][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   96.655386][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   96.664310][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   96.676327][ T4276] device veth1_vlan entered promiscuous mode
[   96.689116][ T4289] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.698582][ T4289] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.711557][ T4289] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.720294][ T4289] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.732806][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.743860][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.757109][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.766003][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   96.775221][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   96.784245][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   96.805477][ T4281] device veth0_macvtap entered promiscuous mode
[   96.838581][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   96.848105][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   96.857252][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   96.866711][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   96.882327][ T4281] device veth1_macvtap entered promiscuous mode
[   96.891293][ T4277] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.900209][ T4277] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.910160][ T4277] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.919221][ T4277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.934477][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   96.946503][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   96.962253][ T4285] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.977348][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   96.986804][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   97.009566][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.026299][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.038193][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.050220][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.063639][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.088927][ T4276] device veth0_macvtap entered promiscuous mode
[   97.104072][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   97.133231][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   97.144456][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   97.169640][ T4276] device veth1_macvtap entered promiscuous mode
[   97.190919][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.205456][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.217289][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.229650][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.242807][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.280013][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   97.297395][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   97.308709][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   97.333894][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.345519][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.358812][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.370464][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.382679][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.393759][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.405397][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.432880][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   97.448086][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   97.459466][ T4281] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.475501][ T4281] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.486108][ T4281] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.497656][ T4281] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.510232][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.522158][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.532908][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.544271][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.554566][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.565719][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.577272][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.592539][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.612552][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   97.623716][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.624156][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   97.640091][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   97.657806][ T4276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.669312][ T4276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.682075][ T4276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.691877][ T4276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.742420][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   97.757625][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   97.776484][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.789551][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.799915][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   97.820369][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   97.829679][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   97.860778][ T4372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.870121][ T4372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.879762][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   97.888414][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   97.898824][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   97.936642][ T4285] device veth0_vlan entered promiscuous mode
[   97.994066][ T4285] device veth1_vlan entered promiscuous mode
[   98.000890][ T4372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.008842][ T4372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.051161][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.059493][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.069544][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   98.078208][ T4293] Bluetooth: hci0: command 0x0419 tx timeout
[   98.086236][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   98.112884][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   98.158260][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   98.159639][ T4284] Bluetooth: hci3: command 0x0419 tx timeout
[   98.172338][ T4293] Bluetooth: hci2: command 0x0419 tx timeout
[   98.178387][ T4293] Bluetooth: hci1: command 0x0419 tx timeout
[   98.184792][ T4282] Bluetooth: hci4: command 0x0419 tx timeout
[   98.217256][ T4285] device veth0_macvtap entered promiscuous mode
[   98.223656][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.262694][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.273370][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   98.295502][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   98.315138][ T4401] loop2: detected capacity change from 0 to 16
[   98.334468][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   98.355657][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   98.367426][ T4401] erofs: (device loop2): mounted with root inode @ nid 36.
[   98.393432][ T4285] device veth1_macvtap entered promiscuous mode
[   98.410978][ T4372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.419115][ T4372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.463652][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.484975][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.505382][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.516325][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.529910][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.554270][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.564540][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.580111][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.594707][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.609389][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.645028][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.678832][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   98.688905][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   98.704941][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   98.715306][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   98.726605][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   98.758384][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.770205][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.786005][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.810143][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.822088][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.832878][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.843223][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.854773][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.879238][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.898132][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   98.911819][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   98.925122][ T4285] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.946429][ T4285] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.958882][ T4285] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.973076][ T4285] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.186815][ T4372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.200884][ T4372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.219206][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   99.260249][ T4414] loop0: detected capacity change from 0 to 164
[   99.281611][ T4298] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   99.376081][ T4372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.393376][ T4372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.404169][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   99.435927][ T4422] loop3: detected capacity change from 0 to 128
[   99.625062][ T4298] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   99.639940][ T4298] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  100.096745][ T4298] usb 2-1: config 0 interface 0 has no altsetting 0
[  100.226893][ T4298] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  100.348363][ T4298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.524649][ T4434] loop4: detected capacity change from 0 to 512
[  100.671882][ T4434] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  100.735019][ T4434] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  100.849010][ T4298] usb 2-1: config 0 descriptor??
[  100.889072][ T4434] EXT4-fs (loop4): 1 truncate cleaned up
[  100.921910][ T4434] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  100.923315][ T4442] loop2: detected capacity change from 0 to 256
[  101.049642][ T4442] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  101.793774][ T4298] sony 0003:054C:0268.0001: collection stack underflow
[  101.801234][ T4298] sony 0003:054C:0268.0001: item 0 2 0 12 parsing failed
[  101.809034][ T4298] sony 0003:054C:0268.0001: parse failed
[  101.814907][ T4298] sony: probe of 0003:054C:0268.0001 failed with error -22
[  101.941821][ T4285] EXT4-fs (loop4): unmounting filesystem.
[  101.953651][ T4452] loop0: detected capacity change from 0 to 2048
[  102.005202][ T4452] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  102.076538][ T4452] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  102.106050][ T4298] usb 2-1: USB disconnect, device number 2
[  102.127243][ T4458] loop4: detected capacity change from 0 to 512
[  102.222933][ T4458] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0082]
[  102.242416][ T4458] System zones: 0-2, 18-18, 34-34
[  102.304457][ T4458] EXT4-fs (loop4): 1 orphan inode deleted
[  102.323836][   T58] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  102.356823][   T58] EXT4-fs error (device loop4): ext4_release_dquot:6884: comm kworker/u4:4: Failed to release dquot type 1
[  102.375194][ T4458] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  102.404380][ T4458] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  102.566341][ T4285] EXT4-fs (loop4): unmounting filesystem.
[  102.650051][ T4471] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  102.718963][ T4276] EXT4-fs (loop0): unmounting filesystem.
[  102.936049][ T4484] FAULT_INJECTION: forcing a failure.
[  102.936049][ T4484] name failslab, interval 1, probability 0, space 0, times 1
[  102.949522][ T4484] CPU: 0 PID: 4484 Comm: syz.0.28 Not tainted syzkaller #0
[  102.956764][ T4484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  102.967030][ T4484] Call Trace:
[  102.970314][ T4484]  <TASK>
[  102.973250][ T4484]  dump_stack_lvl+0x188/0x24e
[  102.978034][ T4484]  ? show_regs_print_info+0x12/0x12
[  102.983356][ T4484]  ? load_image+0x410/0x410
[  102.988187][ T4484]  ? __might_sleep+0xd0/0xd0
[  102.992903][ T4484]  ? __lock_acquire+0x7ea0/0x7ea0
[  102.998094][ T4484]  should_fail_ex+0x390/0x4c0
[  103.002794][ T4484]  should_failslab+0x5/0x20
[  103.007388][ T4484]  slab_pre_alloc_hook+0x59/0x300
[  103.012455][ T4484]  ? __lock_acquire+0x7ea0/0x7ea0
[  103.017609][ T4484]  ? security_sk_alloc+0x47/0x130
[  103.022734][ T4484]  __kmem_cache_alloc_node+0x4f/0x270
[  103.028112][ T4484]  ? security_sk_alloc+0x47/0x130
[  103.033216][ T4484]  __kmalloc+0xa3/0x240
[  103.037602][ T4484]  security_sk_alloc+0x47/0x130
[  103.042616][ T4484]  sk_prot_alloc+0x101/0x210
[  103.049507][ T4484]  sk_alloc+0x36/0x330
[  103.053788][ T4484]  unix_create1+0xb3/0x710
[  103.058395][ T4484]  unix_create+0x139/0x1f0
[  103.063056][ T4484]  __sock_create+0x49a/0x940
[  103.067671][ T4484]  __sys_socketpair+0x232/0x540
[  103.073136][ T4484]  __x64_sys_socketpair+0x97/0xb0
[  103.078843][ T4484]  do_syscall_64+0x4c/0xa0
[  103.083757][ T4484]  ? clear_bhb_loop+0x60/0xb0
[  103.088597][ T4484]  ? clear_bhb_loop+0x60/0xb0
[  103.093297][ T4484]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  103.099199][ T4484] RIP: 0033:0x7fd48d39f559
[  103.104005][ T4484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  103.124159][ T4484] RSP: 002b:00007fd48e32f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  103.132665][ T4484] RAX: ffffffffffffffda RBX: 00007fd48d625fa0 RCX: 00007fd48d39f559
[  103.140642][ T4484] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
[  103.148960][ T4484] RBP: 00007fd48d436b20 R08: 0000000000000000 R09: 0000000000000000
[  103.156941][ T4484] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000
[  103.164918][ T4484] R13: 00007fd48d626038 R14: 00007fd48d625fa0 R15: 00007ffc3fdd9458
[  103.172909][ T4484]  </TASK>
[  103.219636][ T4486] loop3: detected capacity change from 0 to 512
[  103.256837][ T4486] =======================================================
[  103.256837][ T4486] WARNING: The mand mount option has been deprecated and
[  103.256837][ T4486]          and is ignored by this kernel. Remove the mand
[  103.256837][ T4486]          option from the mount to silence this warning.
[  103.256837][ T4486] =======================================================
[  103.295469][   T27] cfg80211: failed to load regulatory.db
[  103.347013][ T4486] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  103.356665][ T4486] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  103.783989][ T4471] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input5
[  103.856846][ T4486] EXT4-fs error (device loop3): ext4_do_update_inode:5312: inode #2: comm syz.3.29: corrupted inode contents
[  103.921226][   T22] rxe_eth0 speed is unknown, defaulting to 1000
[  104.048288][ T4486] EXT4-fs (loop3): Remounting filesystem read-only
[  104.057142][ T4486] EXT4-fs error (device loop3): ext4_dirty_inode:6199: inode #2: comm syz.3.29: mark_inode_dirty error
[  104.084634][ T4486] EXT4-fs (loop3): Remounting filesystem read-only
[  104.116339][ T4486] EXT4-fs error (device loop3): ext4_do_update_inode:5312: inode #2: comm syz.3.29: corrupted inode contents
[  104.153405][ T4486] EXT4-fs (loop3): Remounting filesystem read-only
[  104.179810][ T4488] EXT4-fs error (device loop3): ext4_do_update_inode:5312: inode #2: comm syz.3.29: corrupted inode contents
[  104.276726][ T4488] EXT4-fs (loop3): Remounting filesystem read-only
[  104.295969][ T4488] EXT4-fs error (device loop3): ext4_dirty_inode:6199: inode #2: comm syz.3.29: mark_inode_dirty error
[  104.318659][ T4504] loop4: detected capacity change from 0 to 8
[  104.347836][ T4488] EXT4-fs (loop3): Remounting filesystem read-only
[  104.399064][ T4488] EXT4-fs error (device loop3): ext4_do_update_inode:5312: inode #2: comm syz.3.29: corrupted inode contents
[  104.428266][ T4381] smpboot: CPU 1 is now offline
[  104.525116][ T4505] rxe_eth0 speed is unknown, defaulting to 1000
[  104.544980][ T4488] EXT4-fs (loop3): Remounting filesystem read-only
[  104.597750][ T4488] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.29: mark_inode_dirty error
[  104.670199][ T4488] EXT4-fs (loop3): Remounting filesystem read-only
[  104.714615][ T4488] EXT4-fs error (device loop3): ext4_do_update_inode:5312: inode #2: comm syz.3.29: corrupted inode contents
[  104.793061][ T4381] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  104.821803][ T4488] EXT4-fs (loop3): Remounting filesystem read-only
[  104.853853][ T4488] EXT4-fs error (device loop3): ext4_dirty_inode:6199: inode #2: comm syz.3.29: mark_inode_dirty error
[  104.925422][ T4488] EXT4-fs (loop3): Remounting filesystem read-only
[  105.022881][ T4381] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=b9.98
[  105.095796][ T4381] usb 2-1: New USB device strings: Mfr=210, Product=1, SerialNumber=177
[  105.149911][ T4381] usb 2-1: Product: syz
[  105.173922][ T4381] usb 2-1: Manufacturer: syz
[  105.202179][ T4381] usb 2-1: SerialNumber: syz
[  105.254258][ T4381] usb 2-1: config 0 descriptor??
[  105.313326][ T4381] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  105.383303][ T4381] ftdi_sio ttyUSB0: unknown device type: 0xb998
[  105.438938][ T4524] loop0: detected capacity change from 0 to 1024
[  105.499151][ T4508] loop1: detected capacity change from 0 to 8
[  106.882538][    T7] usb 2-1: USB disconnect, device number 3
[  106.943819][    T7] ftdi_sio 2-1:0.0: device disconnected
[  107.047413][ T4535] netlink: 104 bytes leftover after parsing attributes in process `syz.3.39'.
[  107.305718][ T4298] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  107.545982][ T4298] usb 5-1: not running at top speed; connect to a high speed hub
[  107.613436][ T4298] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  107.645598][ T4546] loop2: detected capacity change from 0 to 1024
[  107.693040][ T4298] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  107.713004][ T4546] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  107.738360][ T4549] loop1: detected capacity change from 0 to 128
[  107.795183][ T4298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.837176][ T4549] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  107.865823][ T4546] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  107.934750][ T4298] usb 5-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  107.978230][ T4546] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[  108.012269][ T4298] usb 5-1: No streaming interface found for terminal 2.
[  108.052476][ T4546] System zones: 0-1, 3-36
[  108.116364][ T4546] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  108.158162][ T4298] usb 5-1: USB disconnect, device number 2
[  108.308403][   T26] audit: type=1800 audit(1793405807.066:2): pid=4546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.44" name="bus" dev="loop2" ino=18 res=0 errno=0
[  108.520742][   T26] audit: type=1800 audit(1793405807.096:3): pid=4546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.44" name="bus" dev="loop2" ino=18 res=0 errno=0
[  108.955995][    T7] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  109.052668][ T4575] FAULT_INJECTION: forcing a failure.
[  109.052668][ T4575] name failslab, interval 1, probability 0, space 0, times 0
[  109.149782][ T4575] CPU: 0 PID: 4575 Comm: syz.3.52 Not tainted syzkaller #0
[  109.157323][ T4575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  109.167817][ T4575] Call Trace:
[  109.171366][ T4575]  <TASK>
[  109.174382][ T4575]  dump_stack_lvl+0x188/0x24e
[  109.179387][ T4575]  ? show_regs_print_info+0x12/0x12
[  109.184780][ T4575]  ? load_image+0x410/0x410
[  109.189526][ T4575]  ? __might_sleep+0xd0/0xd0
[  109.194322][ T4575]  ? __lock_acquire+0x7ea0/0x7ea0
[  109.199910][ T4575]  ? mark_lock+0x94/0x320
[  109.204364][ T4575]  should_fail_ex+0x390/0x4c0
[  109.209317][ T4575]  should_failslab+0x5/0x20
[  109.214103][ T4575]  slab_pre_alloc_hook+0x59/0x300
[  109.220595][ T4575]  kmem_cache_alloc+0x56/0x2f0
[  109.225807][ T4575]  ? alloc_vfsmnt+0x24/0x450
[  109.230442][ T4575]  alloc_vfsmnt+0x24/0x450
[  109.234890][ T4575]  clone_mnt+0x6b/0xcd0
[  109.239072][ T4575]  ? is_subdir+0x27/0x250
[  109.243588][ T4575]  clone_private_mount+0x286/0x310
[  109.248894][ T4575]  ovl_fill_super+0x27e7/0x42f0
[  109.253781][ T4575]  ? ovl_mount+0x30/0x30
[  109.258048][ T4575]  ? free_anon_bdev+0x20/0x20
[  109.262737][ T4575]  ? ovl_mount+0x30/0x30
[  109.267285][ T4575]  mount_nodev+0x52/0xe0
[  109.273217][ T4575]  legacy_get_tree+0xe6/0x180
[  109.278797][ T4575]  ? virtio_fs_zero_page_range+0x130/0x130
[  109.285101][ T4575]  vfs_get_tree+0x88/0x270
[  109.289550][ T4575]  do_new_mount+0x247/0xa50
[  109.294084][ T4575]  __se_sys_mount+0x2e3/0x3d0
[  109.298802][ T4575]  ? __x64_sys_mount+0xc0/0xc0
[  109.303844][ T4575]  ? lockdep_hardirqs_on+0x94/0x140
[  109.309068][ T4575]  ? __x64_sys_mount+0x1c/0xc0
[  109.314115][ T4575]  do_syscall_64+0x4c/0xa0
[  109.318819][ T4575]  ? clear_bhb_loop+0x60/0xb0
[  109.323774][ T4575]  ? clear_bhb_loop+0x60/0xb0
[  109.329191][ T4575]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  109.335817][ T4575] RIP: 0033:0x7ffa4379f559
[  109.340628][ T4575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  109.361385][ T4575] RSP: 002b:00007ffa44646028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  109.370171][ T4575] RAX: ffffffffffffffda RBX: 00007ffa43a25fa0 RCX: 00007ffa4379f559
[  109.378269][ T4575] RDX: 0000200000000680 RSI: 00002000000005c0 RDI: 0000000000000000
[  109.386639][ T4575] RBP: 00007ffa43836b20 R08: 00002000000006c0 R09: 0000000000000000
[  109.394817][ T4575] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000
[  109.402797][ T4575] R13: 00007ffa43a26038 R14: 00007ffa43a25fa0 R15: 00007ffef90204e8
[  109.411002][ T4575]  </TASK>
[  109.444000][ T4578] syz.4.51 (4578) used greatest stack depth: 17760 bytes left
[  109.463157][    T7] usb 1-1: not running at top speed; connect to a high speed hub
[  109.488103][    T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  109.544806][    T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  109.601967][    T7] usb 1-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[  109.783004][    T7] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00
[  110.017303][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.053290][    T7] usb 1-1: Product: syz
[  110.068198][    T7] usb 1-1: Manufacturer: syz
[  110.096084][    T7] usb 1-1: SerialNumber: syz
[  110.122444][    T7] keyspan 1-1:1.0: Keyspan 4 port adapter converter detected
[  110.169799][    T7] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88
[  110.214595][    T7] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  110.264836][    T7] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  110.285916][    T7] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  110.300495][    T7] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  110.353117][    T7] usb 1-1: USB disconnect, device number 2
[  110.441592][    T7] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  110.466540][    T7] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  110.491513][    T7] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  110.506512][    T7] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  110.518938][    T7] keyspan 1-1:1.0: device disconnected
[  110.657746][ T4575] overlayfs: failed to clone lowerpath
[  110.679623][ T4277] EXT4-fs (loop2): unmounting filesystem.
[  110.759067][ T4601] loop4: detected capacity change from 0 to 1024
[  110.916647][   T58] hfsplus: b-tree write err: -5, ino 25
[  110.947145][   T58] hfsplus: b-tree write err: -5, ino 4
[  110.989640][   T58] hfsplus: b-tree write err: -5, ino 2
[  112.229392][ T4614] loop0: detected capacity change from 0 to 16
[  112.285316][ T4614] erofs: (device loop0): mounted with root inode @ nid 36.
[  112.528559][ T4620] loop4: detected capacity change from 0 to 1024
[  112.547607][ T4621] loop2: detected capacity change from 0 to 8
[  112.613651][ T4620] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  112.671271][ T4621] SQUASHFS error: Unable to read directory block [631:26]
[  112.693209][ T4620] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869)
[  112.792100][ T4620] EXT4-fs (loop4): invalid journal inode
[  112.798864][ T4620] EXT4-fs (loop4): can't get journal size
[  112.908357][ T4620] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  114.333752][ T4637] loop3: detected capacity change from 0 to 1024
[  114.395294][ T4637] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  114.473574][ T4285] EXT4-fs (loop4): unmounting filesystem.
[  114.484014][ T4643] loop0: detected capacity change from 0 to 512
[  114.580659][ T4637] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  114.625330][ T4643] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  114.673833][ T4637] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[  114.701903][ T4643] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.74: invalid indirect mapped block 256 (level 1)
[  114.739539][ T4637] System zones: 0-1, 3-36
[  114.760453][ T4637] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  114.787401][ T4643] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.74: invalid indirect mapped block 2683928664 (level 1)
[  114.835929][   T26] audit: type=1800 audit(1793405813.596:4): pid=4637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.72" name="bus" dev="loop3" ino=18 res=0 errno=0
[  114.880006][ T4643] EXT4-fs (loop0): 1 truncate cleaned up
[  114.935477][ T4655] FAULT_INJECTION: forcing a failure.
[  114.935477][ T4655] name failslab, interval 1, probability 0, space 0, times 0
[  114.950704][    T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  116.032398][ T4643] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  116.069786][   T26] audit: type=1800 audit(1793405813.626:5): pid=4637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.72" name="bus" dev="loop3" ino=18 res=0 errno=0
[  116.120142][ T4655] CPU: 0 PID: 4655 Comm: syz.4.79 Not tainted syzkaller #0
[  116.127392][ T4655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  116.137726][ T4655] Call Trace:
[  116.141250][ T4655]  <TASK>
[  116.144398][ T4655]  dump_stack_lvl+0x188/0x24e
[  116.149662][ T4655]  ? show_regs_print_info+0x12/0x12
[  116.154957][ T4655]  ? load_image+0x410/0x410
[  116.159574][ T4655]  ? __might_sleep+0xd0/0xd0
[  116.164629][ T4655]  ? __lock_acquire+0x7ea0/0x7ea0
[  116.169779][ T4655]  should_fail_ex+0x390/0x4c0
[  116.175122][ T4655]  should_failslab+0x5/0x20
[  116.179847][ T4655]  slab_pre_alloc_hook+0x59/0x300
[  116.185019][ T4655]  ? __up_read+0x2b4/0x6b0
[  116.189479][ T4655]  ? ovl_alloc_entry+0x20/0x80
[  116.194432][ T4655]  __kmem_cache_alloc_node+0x4f/0x270
[  116.199933][ T4655]  ? ovl_alloc_entry+0x20/0x80
[  116.204828][ T4655]  __kmalloc+0xa3/0x240
[  116.209180][ T4655]  ovl_alloc_entry+0x20/0x80
[  116.213881][ T4655]  ovl_fill_super+0x319e/0x42f0
[  116.218791][ T4655]  ? ovl_mount+0x30/0x30
[  116.223156][ T4655]  ? free_anon_bdev+0x20/0x20
[  116.228039][ T4655]  ? ovl_mount+0x30/0x30
[  116.232602][ T4655]  mount_nodev+0x52/0xe0
[  116.236961][ T4655]  legacy_get_tree+0xe6/0x180
[  116.241665][ T4655]  ? virtio_fs_zero_page_range+0x130/0x130
[  116.247754][ T4655]  vfs_get_tree+0x88/0x270
[  116.252288][ T4655]  do_new_mount+0x247/0xa50
[  116.256896][ T4655]  __se_sys_mount+0x2e3/0x3d0
[  116.262116][ T4655]  ? __x64_sys_mount+0xc0/0xc0
[  116.266990][ T4655]  ? lockdep_hardirqs_on+0x94/0x140
[  116.272648][ T4655]  ? __x64_sys_mount+0x1c/0xc0
[  116.278415][ T4655]  do_syscall_64+0x4c/0xa0
[  116.283471][ T4655]  ? clear_bhb_loop+0x60/0xb0
[  116.288694][ T4655]  ? clear_bhb_loop+0x60/0xb0
[  116.294373][ T4655]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  116.301005][ T4655] RIP: 0033:0x7fbb4559f559
[  116.305531][ T4655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  116.326142][ T4655] RSP: 002b:00007fbb464f0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  116.336086][ T4655] RAX: ffffffffffffffda RBX: 00007fbb45825fa0 RCX: 00007fbb4559f559
[  116.345297][ T4655] RDX: 0000200000000680 RSI: 00002000000005c0 RDI: 0000000000000000
[  116.353555][ T4655] RBP: 00007fbb45636b20 R08: 00002000000006c0 R09: 0000000000000000
[  116.361626][ T4655] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000
[  116.369806][ T4655] R13: 00007fbb45826038 R14: 00007fbb45825fa0 R15: 00007ffedbcbf558
[  116.377989][ T4655]  </TASK>
[  116.450396][ T4289] EXT4-fs (loop3): unmounting filesystem.
[  116.524285][    T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.788798][ T4660] usb usb8: usbfs: process 4660 (syz.0.74) did not claim interface 0 before use
[  116.801315][ T4646] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0
[  116.858590][    T7] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  116.889346][ T4663] loop3: detected capacity change from 0 to 128
[  116.943743][ T4276] EXT4-fs (loop0): unmounting filesystem.
[  116.954344][    T7] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  116.979254][ T4663] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  117.001255][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.027110][    T7] usb 2-1: Product: syz
[  117.049314][    T7] usb 2-1: Manufacturer: syz
[  117.063775][    T7] usb 2-1: SerialNumber: syz
[  117.552453][ T4673] loop2: detected capacity change from 0 to 128
[  117.593888][ T4673] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  118.594069][ T4676] sched: RT throttling activated
[  118.721680][ T4676] loop3: detected capacity change from 0 to 16
[  118.780796][ T4676] erofs: (device loop3): mounted with root inode @ nid 36.
[  118.815500][    T7] cdc_ncm 2-1:1.0: bind() failure
[  118.889183][    T7] cdc_ncm: probe of 2-1:1.1 failed with error -71
[  118.935709][    T7] cdc_mbim: probe of 2-1:1.1 failed with error -71
[  119.026360][    T7] usbtest: probe of 2-1:1.1 failed with error -71
[  119.078041][    T7] usb 2-1: USB disconnect, device number 4
[  119.133119][ T4429] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  119.326381][ T4688] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2812553464 (22500427712 ns) > initial count (17799498648 ns). Using initial count to start timer.
[  119.550382][ T4696] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  119.762580][ T4695] Mass Storage Function, version: 2009/09/11
[  119.769345][ T4695] LUN: removable file: (no medium)
[  120.338551][   T26] audit: type=1326 audit(1793405819.096:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.4.97" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb4559f559 code=0x0
[  121.382120][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.391915][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.584233][ T4740] FAULT_INJECTION: forcing a failure.
[  121.584233][ T4740] name failslab, interval 1, probability 0, space 0, times 0
[  121.693538][ T4740] CPU: 0 PID: 4740 Comm: syz.2.107 Not tainted syzkaller #0
[  121.701437][ T4740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  121.712330][ T4740] Call Trace:
[  121.715884][ T4740]  <TASK>
[  121.719014][ T4740]  dump_stack_lvl+0x188/0x24e
[  121.723756][ T4740]  ? show_regs_print_info+0x12/0x12
[  121.729083][ T4740]  ? load_image+0x410/0x410
[  121.733637][ T4740]  ? __might_sleep+0xd0/0xd0
[  121.739455][ T4740]  ? __lock_acquire+0x7ea0/0x7ea0
[  121.744877][ T4740]  ? __stack_depot_save+0x35/0x480
[  121.751281][ T4740]  should_fail_ex+0x390/0x4c0
[  121.756998][ T4740]  should_failslab+0x5/0x20
[  121.761740][ T4740]  slab_pre_alloc_hook+0x59/0x300
[  121.766969][ T4740]  ? ovl_encode_real_fh+0xd5/0x340
[  121.772312][ T4740]  __kmem_cache_alloc_node+0x4f/0x270
[  121.777973][ T4740]  ? ovl_encode_real_fh+0xd5/0x340
[  121.784311][ T4740]  kmalloc_trace+0x26/0xe0
[  121.789765][ T4740]  ovl_encode_real_fh+0xd5/0x340
[  121.794841][ T4740]  ? ovl_set_attr+0x4b0/0x4b0
[  121.800247][ T4740]  ? rcu_read_lock_any_held+0xb0/0x130
[  121.806286][ T4740]  ? rcu_read_lock_bh_held+0xf0/0xf0
[  121.811608][ T4740]  ovl_verify_set_fh+0x3e/0x410
[  121.816557][ T4740]  ovl_get_indexdir+0x170/0x610
[  121.822197][ T4740]  ? ovl_get_workdir+0x1630/0x1630
[  121.827440][ T4740]  ? ovl_fill_super+0x3310/0x42f0
[  121.832512][ T4740]  ? __kmem_cache_free+0xb6/0x200
[  121.838711][ T4740]  ovl_fill_super+0x348a/0x42f0
[  121.844049][ T4740]  ? ovl_mount+0x30/0x30
[  121.848434][ T4740]  ? free_anon_bdev+0x20/0x20
[  121.853164][ T4740]  ? ovl_mount+0x30/0x30
[  121.857628][ T4740]  mount_nodev+0x52/0xe0
[  121.862543][ T4740]  legacy_get_tree+0xe6/0x180
[  121.867278][ T4740]  ? virtio_fs_zero_page_range+0x130/0x130
[  121.873929][ T4740]  vfs_get_tree+0x88/0x270
[  121.879105][ T4740]  do_new_mount+0x247/0xa50
[  121.883636][ T4740]  __se_sys_mount+0x2e3/0x3d0
[  121.888339][ T4740]  ? __x64_sys_mount+0xc0/0xc0
[  121.893413][ T4740]  ? lockdep_hardirqs_on+0x94/0x140
[  121.898918][ T4740]  ? __x64_sys_mount+0x1c/0xc0
[  121.903872][ T4740]  do_syscall_64+0x4c/0xa0
[  121.908409][ T4740]  ? clear_bhb_loop+0x60/0xb0
[  121.913674][ T4740]  ? clear_bhb_loop+0x60/0xb0
[  121.918691][ T4740]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  121.925254][ T4740] RIP: 0033:0x7f480419f559
[  121.931055][ T4740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  121.951369][ T4740] RSP: 002b:00007f480513d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  121.960996][ T4740] RAX: ffffffffffffffda RBX: 00007f4804425fa0 RCX: 00007f480419f559
[  121.969601][ T4740] RDX: 0000200000000680 RSI: 00002000000005c0 RDI: 0000000000000000
[  121.979185][ T4740] RBP: 00007f4804236b20 R08: 00002000000006c0 R09: 0000000000000000
[  121.987931][ T4740] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000
[  121.996461][ T4740] R13: 00007f4804426038 R14: 00007f4804425fa0 R15: 00007ffc3209eb58
[  122.005585][ T4740]  </TASK>
[  122.407201][ T4715] device bridge_slave_0 left promiscuous mode
[  122.437799][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.736437][ T4715] device bridge_slave_1 left promiscuous mode
[  123.753916][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.814528][ T4715] bond0: (slave bond_slave_0): Releasing backup interface
[  123.852994][ T4715] bond0: (slave bond_slave_1): Releasing backup interface
[  124.153054][ T4715] team0: Port device team_slave_0 removed
[  124.192481][ T4715] team0: Port device team_slave_1 removed
[  124.214050][ T4715] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.239049][ T4715] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.266265][ T4715] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.293265][ T4715] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.500058][ T4740] overlayfs: failed to verify origin (newroot/23, ino=142, err=-12)
[  124.526585][ T4740] overlayfs: failed to verify upper root origin
[  124.756400][ T4755] loop2: detected capacity change from 0 to 512
[  124.780457][ T4756] loop1: detected capacity change from 0 to 1024
[  124.815105][ T4755] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  124.843497][ T4756] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  124.868946][ T4715] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.888689][ T4755] UDF-fs: Scanning with blocksize 512 failed
[  124.911234][ T4715] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.931316][ T4756] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  124.944962][ T4755] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  124.957956][ T4715] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.970019][ T4755] UDF-fs: Scanning with blocksize 1024 failed
[  124.979125][ T4756] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[  124.992529][ T4715] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.004634][ T4755] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  125.017951][ T4756] System zones: 0-1, 3-36
[  125.047367][ T4755] UDF-fs: Scanning with blocksize 2048 failed
[  125.066903][ T4756] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  125.096178][ T4755] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  125.128143][   T26] audit: type=1800 audit(1793405823.886:7): pid=4756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.112" name="bus" dev="loop1" ino=18 res=0 errno=0
[  125.196961][ T4755] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  125.258076][   T26] audit: type=1800 audit(1793405823.916:8): pid=4756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.112" name="bus" dev="loop1" ino=18 res=0 errno=0
[  125.337308][ T4737] device bridge0 entered promiscuous mode
[  125.382642][ T4281] EXT4-fs (loop1): unmounting filesystem.
[  125.765289][ T4763] loop4: detected capacity change from 0 to 512
[  126.135169][ T4763] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  126.183930][ T4763] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  126.292015][ T4763] EXT4-fs error (device loop4): ext4_do_update_inode:5312: inode #2: comm syz.4.114: corrupted inode contents
[  126.348420][ T4783] fuse: Unknown parameter 'user_i00000000000000000000'
[  126.386751][ T4763] EXT4-fs (loop4): Remounting filesystem read-only
[  126.407913][   T26] audit: type=1326 audit(1793405825.166:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4782 comm="syz.1.118" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f326859f559 code=0x0
[  126.441132][ T4786] loop0: detected capacity change from 0 to 512
[  126.531819][ T4763] EXT4-fs error (device loop4): ext4_dirty_inode:6199: inode #2: comm syz.4.114: mark_inode_dirty error
[  126.594124][ T4786] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  126.611539][ T4763] EXT4-fs (loop4): Remounting filesystem read-only
[  126.649933][ T4763] EXT4-fs error (device loop4): ext4_do_update_inode:5312: inode #2: comm syz.4.114: corrupted inode contents
[  126.673754][ T4786] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  126.690272][ T4793] FAULT_INJECTION: forcing a failure.
[  126.690272][ T4793] name failslab, interval 1, probability 0, space 0, times 0
[  126.718093][ T4763] EXT4-fs (loop4): Remounting filesystem read-only
[  126.735228][ T4793] CPU: 0 PID: 4793 Comm: syz.3.121 Not tainted syzkaller #0
[  126.743025][ T4793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  126.753860][ T4793] Call Trace:
[  126.758612][ T4793]  <TASK>
[  126.762365][ T4793]  dump_stack_lvl+0x188/0x24e
[  126.767365][ T4793]  ? show_regs_print_info+0x12/0x12
[  126.772878][ T4793]  ? load_image+0x410/0x410
[  126.777835][ T4793]  ? __might_sleep+0xd0/0xd0
[  126.782723][ T4793]  ? __lock_acquire+0x7ea0/0x7ea0
[  126.788179][ T4793]  should_fail_ex+0x390/0x4c0
[  126.793622][ T4793]  should_failslab+0x5/0x20
[  126.798595][ T4793]  slab_pre_alloc_hook+0x59/0x300
[  126.804186][ T4793]  ? __up_read+0x2b4/0x6b0
[  126.809763][ T4793]  ? ovl_alloc_entry+0x20/0x80
[  126.814659][ T4793]  __kmem_cache_alloc_node+0x4f/0x270
[  126.820106][ T4793]  ? ovl_alloc_entry+0x20/0x80
[  126.825010][ T4793]  __kmalloc+0xa3/0x240
[  126.829831][ T4793]  ovl_alloc_entry+0x20/0x80
[  126.834924][ T4793]  ovl_fill_super+0x319e/0x42f0
[  126.839915][ T4793]  ? ovl_mount+0x30/0x30
[  126.844563][ T4793]  ? free_anon_bdev+0x20/0x20
[  126.849612][ T4793]  ? ovl_mount+0x30/0x30
[  126.853895][ T4793]  mount_nodev+0x52/0xe0
[  126.858324][ T4793]  legacy_get_tree+0xe6/0x180
[  126.863371][ T4793]  ? virtio_fs_zero_page_range+0x130/0x130
[  126.869368][ T4793]  vfs_get_tree+0x88/0x270
[  126.873809][ T4793]  do_new_mount+0x247/0xa50
[  126.879120][ T4793]  __se_sys_mount+0x2e3/0x3d0
[  126.883826][ T4793]  ? __x64_sys_mount+0xc0/0xc0
[  126.888897][ T4793]  ? lockdep_hardirqs_on+0x94/0x140
[  126.894235][ T4793]  ? __x64_sys_mount+0x1c/0xc0
[  126.899295][ T4793]  do_syscall_64+0x4c/0xa0
[  126.904177][ T4793]  ? clear_bhb_loop+0x60/0xb0
[  126.908974][ T4793]  ? clear_bhb_loop+0x60/0xb0
[  126.913855][ T4793]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  126.920393][ T4793] RIP: 0033:0x7ffa4379f559
[  126.925064][ T4793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  126.947765][ T4793] RSP: 002b:00007ffa44646028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  126.957033][ T4793] RAX: ffffffffffffffda RBX: 00007ffa43a25fa0 RCX: 00007ffa4379f559
[  126.967686][ T4793] RDX: 0000200000000680 RSI: 00002000000005c0 RDI: 0000000000000000
[  126.976136][ T4793] RBP: 00007ffa43836b20 R08: 00002000000006c0 R09: 0000000000000000
[  126.984516][ T4793] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000
[  126.994225][ T4793] R13: 00007ffa43a26038 R14: 00007ffa43a25fa0 R15: 00007ffef90204e8
[  127.002578][ T4793]  </TASK>
[  127.046593][ T4785] EXT4-fs error (device loop4): ext4_do_update_inode:5312: inode #2: comm syz.4.114: corrupted inode contents
[  127.105715][ T4785] EXT4-fs (loop4): Remounting filesystem read-only
[  127.134173][ T4785] EXT4-fs error (device loop4): ext4_dirty_inode:6199: inode #2: comm syz.4.114: mark_inode_dirty error
[  127.154000][ T4276] EXT4-fs (loop0): unmounting filesystem.
[  127.455182][ T4785] EXT4-fs (loop4): Remounting filesystem read-only
[  127.496060][ T4785] EXT4-fs error (device loop4): ext4_do_update_inode:5312: inode #2: comm syz.4.114: corrupted inode contents
[  127.550023][ T4785] EXT4-fs (loop4): Remounting filesystem read-only
[  127.578483][ T4785] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.114: mark_inode_dirty error
[  127.608724][ T4801] loop1: detected capacity change from 0 to 1024
[  127.627475][ T4785] EXT4-fs (loop4): Remounting filesystem read-only
[  127.660323][ T4801] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  127.686869][ T4785] EXT4-fs error (device loop4): ext4_do_update_inode:5312: inode #2: comm syz.4.114: corrupted inode contents
[  127.726525][ T4801] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  127.745839][ T4785] EXT4-fs (loop4): Remounting filesystem read-only
[  127.772241][ T4801] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[  127.785403][ T4785] EXT4-fs error (device loop4): ext4_dirty_inode:6199: inode #2: comm syz.4.114: mark_inode_dirty error
[  127.812441][ T4801] System zones: 0-1, 3-36
[  127.824916][ T4785] EXT4-fs (loop4): Remounting filesystem read-only
[  127.839656][ T4801] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  127.897795][   T26] audit: type=1800 audit(1793405826.656:10): pid=4801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.124" name="bus" dev="loop1" ino=18 res=0 errno=0
[  128.070047][   T26] audit: type=1800 audit(1793405826.696:11): pid=4801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.124" name="bus" dev="loop1" ino=18 res=0 errno=0
[  128.211367][ T4281] EXT4-fs (loop1): unmounting filesystem.
[  130.663752][ T4823] loop2: detected capacity change from 0 to 16
[  130.675903][ T4823] erofs: (device loop2): mounted with root inode @ nid 36.
[  130.719984][ T4443] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  130.756026][ T4820] loop0: detected capacity change from 0 to 4096
[  130.836525][ T4820] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  130.985039][ T4820] EXT4-fs (loop0): shut down requested (0)
[  132.108984][ T4276] EXT4-fs (loop0): unmounting filesystem.
[  132.334750][   T26] audit: type=1326 audit(1793405831.096:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.3.138" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa4379f559 code=0x0
[  132.413815][ T4847] loop0: detected capacity change from 0 to 512
[  132.490739][ T4847] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  132.569633][ T4847] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  132.635585][ T4847] EXT4-fs error (device loop0): ext4_do_update_inode:5312: inode #2: comm syz.0.140: corrupted inode contents
[  132.689414][ T4847] EXT4-fs (loop0): Remounting filesystem read-only
[  132.719146][ T4847] EXT4-fs error (device loop0): ext4_dirty_inode:6199: inode #2: comm syz.0.140: mark_inode_dirty error
[  132.789250][ T4847] EXT4-fs (loop0): Remounting filesystem read-only
[  132.830061][ T4847] EXT4-fs error (device loop0): ext4_do_update_inode:5312: inode #2: comm syz.0.140: corrupted inode contents
[  132.886171][ T4847] EXT4-fs (loop0): Remounting filesystem read-only
[  132.928242][ T4851] EXT4-fs error (device loop0): ext4_do_update_inode:5312: inode #2: comm syz.0.140: corrupted inode contents
[  133.005395][ T4851] EXT4-fs (loop0): Remounting filesystem read-only
[  133.033937][ T4851] EXT4-fs error (device loop0): ext4_dirty_inode:6199: inode #2: comm syz.0.140: mark_inode_dirty error
[  133.092110][ T4851] EXT4-fs (loop0): Remounting filesystem read-only
[  133.117798][ T4851] EXT4-fs error (device loop0): ext4_do_update_inode:5312: inode #2: comm syz.0.140: corrupted inode contents
[  133.166387][ T4851] EXT4-fs (loop0): Remounting filesystem read-only
[  133.200621][ T4851] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.140: mark_inode_dirty error
[  133.253748][ T4851] EXT4-fs (loop0): Remounting filesystem read-only
[  133.281275][ T4851] EXT4-fs error (device loop0): ext4_do_update_inode:5312: inode #2: comm syz.0.140: corrupted inode contents
[  133.354787][ T4851] EXT4-fs (loop0): Remounting filesystem read-only
[  133.409234][ T4851] EXT4-fs error (device loop0): ext4_dirty_inode:6199: inode #2: comm syz.0.140: mark_inode_dirty error
[  133.496426][ T4851] EXT4-fs (loop0): Remounting filesystem read-only
[  133.532362][ T4860] loop2: detected capacity change from 0 to 1024
[  133.847817][ T4866] loop3: detected capacity change from 0 to 256
[  134.006102][ T4869] loop0: detected capacity change from 0 to 512
[  134.116271][ T4871] FAULT_INJECTION: forcing a failure.
[  134.116271][ T4871] name failslab, interval 1, probability 0, space 0, times 0
[  134.135579][ T4866] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  134.153052][ T4869] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  134.244839][ T4869] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[  134.268149][ T4871] CPU: 0 PID: 4871 Comm: syz.2.148 Not tainted syzkaller #0
[  134.275828][ T4871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  134.286240][ T4871] Call Trace:
[  134.289548][ T4871]  <TASK>
[  134.292704][ T4871]  dump_stack_lvl+0x188/0x24e
[  134.298340][ T4871]  ? show_regs_print_info+0x12/0x12
[  134.303855][ T4871]  ? load_image+0x410/0x410
[  134.308411][ T4871]  ? __might_sleep+0xd0/0xd0
[  134.313425][ T4871]  ? __lock_acquire+0x7ea0/0x7ea0
[  134.318617][ T4871]  should_fail_ex+0x390/0x4c0
[  134.323544][ T4871]  should_failslab+0x5/0x20
[  134.328094][ T4871]  slab_pre_alloc_hook+0x59/0x300
[  134.335761][ T4871]  kmem_cache_alloc_lru+0x49/0x2e0
[  134.341120][ T4871]  ? ovl_alloc_inode+0x28/0x90
[  134.346544][ T4871]  ? ovl_lookup_inode+0x130/0x130
[  134.351860][ T4871]  ovl_alloc_inode+0x28/0x90
[  134.356896][ T4871]  ? ovl_d_real+0x490/0x490
[  134.361717][ T4871]  iget5_locked+0x9e/0x260
[  134.366245][ T4871]  ? ovl_get_trap_inode+0x190/0x190
[  134.371528][ T4871]  ovl_get_trap_inode+0x87/0x190
[  134.376596][ T4871]  ovl_get_indexdir+0x2f0/0x610
[  134.381485][ T4871]  ? ovl_get_workdir+0x1630/0x1630
[  134.386951][ T4871]  ? ovl_fill_super+0x3310/0x42f0
[  134.392215][ T4871]  ? __kmem_cache_free+0xb6/0x200
[  134.397466][ T4871]  ovl_fill_super+0x348a/0x42f0
[  134.402466][ T4871]  ? ovl_mount+0x30/0x30
[  134.407159][ T4871]  ? free_anon_bdev+0x20/0x20
[  134.411861][ T4871]  ? ovl_mount+0x30/0x30
[  134.416271][ T4871]  mount_nodev+0x52/0xe0
[  134.420693][ T4871]  legacy_get_tree+0xe6/0x180
[  134.425510][ T4871]  ? virtio_fs_zero_page_range+0x130/0x130
[  134.433120][ T4871]  vfs_get_tree+0x88/0x270
[  134.437764][ T4871]  do_new_mount+0x247/0xa50
[  134.443028][ T4871]  __se_sys_mount+0x2e3/0x3d0
[  134.449028][ T4871]  ? __x64_sys_mount+0xc0/0xc0
[  134.454157][ T4871]  ? lockdep_hardirqs_on+0x94/0x140
[  134.460515][ T4871]  ? __x64_sys_mount+0x1c/0xc0
[  134.465305][ T4871]  do_syscall_64+0x4c/0xa0
[  134.470263][ T4871]  ? clear_bhb_loop+0x60/0xb0
[  134.474973][ T4871]  ? clear_bhb_loop+0x60/0xb0
[  134.479690][ T4871]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  134.485792][ T4871] RIP: 0033:0x7f480419f559
[  134.490667][ T4871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  134.510727][ T4871] RSP: 002b:00007f480513d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  134.519426][ T4871] RAX: ffffffffffffffda RBX: 00007f4804425fa0 RCX: 00007f480419f559
[  134.528022][ T4871] RDX: 0000200000000680 RSI: 00002000000005c0 RDI: 0000000000000000
[  134.536081][ T4871] RBP: 00007f4804236b20 R08: 00002000000006c0 R09: 0000000000000000
[  134.544327][ T4871] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000
[  134.552580][ T4871] R13: 00007f4804426038 R14: 00007f4804425fa0 R15: 00007ffc3209eb58
[  134.561016][ T4871]  </TASK>
[  134.610795][ T4869] EXT4-fs error (device loop0): ext4_iget_extra_inode:4766: inode #15: comm syz.0.147: corrupted in-inode xattr
[  134.638470][ T4881] loop1: detected capacity change from 0 to 8
[  134.706035][ T4869] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.147: couldn't read orphan inode 15 (err -117)
[  134.789815][ T4869] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  135.251609][ T4276] EXT4-fs (loop0): unmounting filesystem.
[  135.291634][   T26] audit: type=1326 audit(1793405834.056:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4885 comm="syz.1.153" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f326859f559 code=0x0
[  136.583163][ T4896] loop0: detected capacity change from 0 to 512
[  136.590148][ T4896] FAT-fs (loop0): Unrecognized mount option "shortname=mix%d" or missing value
[  136.660162][ T4443] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  137.202346][ T4902] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001
[  137.497382][ T4904] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error!
[  137.505195][ T4904] udc dummy_udc.0: failed to start g1: -19
[  137.513082][ T4904] UDC core: g1: couldn't find an available UDC or it's busy
[  137.532879][   T26] audit: type=1800 audit(1793405836.256:14): pid=4904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.157" name="c_chmask" dev="configfs" ino=37058 res=0 errno=0
[  137.686940][   T26] audit: type=1800 audit(1793405836.256:15): pid=4904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.157" name="UDC" dev="configfs" ino=37060 res=0 errno=0
[  138.287059][ T4910] loop0: detected capacity change from 0 to 1024
[  138.668875][ T4921] device syzkaller0 entered promiscuous mode
[  138.883957][ T4922] loop2: detected capacity change from 0 to 512
[  138.902552][ T4928] Bluetooth: MGMT ver 1.22
[  138.947508][ T4922] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  139.055533][ T4922] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  139.115502][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  139.122660][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  139.235407][ T4922] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.161: bg 0: block 248: padding at end of block bitmap is not set
[  139.278053][ T4934] fuse: Unknown parameter '0x0000000000000004'
[  139.357624][ T4922] Quota error (device loop2): write_blk: dquota write failed
[  139.403189][ T4922] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  139.477720][ T4922] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.161: Failed to acquire dquot type 1
[  139.504318][ T4942] FAULT_INJECTION: forcing a failure.
[  139.504318][ T4942] name failslab, interval 1, probability 0, space 0, times 0
[  139.575922][ T4942] CPU: 0 PID: 4942 Comm: syz.4.171 Not tainted syzkaller #0
[  139.583342][ T4942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  139.593415][ T4942] Call Trace:
[  139.596715][ T4942]  <TASK>
[  139.599641][ T4942]  dump_stack_lvl+0x188/0x24e
[  139.604477][ T4942]  ? show_regs_print_info+0x12/0x12
[  139.609707][ T4942]  ? load_image+0x410/0x410
[  139.614236][ T4942]  ? __might_sleep+0xd0/0xd0
[  139.618820][ T4942]  ? __lock_acquire+0x7ea0/0x7ea0
[  139.623862][ T4942]  should_fail_ex+0x390/0x4c0
[  139.628653][ T4942]  should_failslab+0x5/0x20
[  139.634172][ T4942]  slab_pre_alloc_hook+0x59/0x300
[  139.639673][ T4942]  ? __up_read+0x2b4/0x6b0
[  139.644102][ T4942]  ? ovl_alloc_entry+0x20/0x80
[  139.649134][ T4942]  __kmem_cache_alloc_node+0x4f/0x270
[  139.655569][ T4942]  ? ovl_alloc_entry+0x20/0x80
[  139.660907][ T4942]  __kmalloc+0xa3/0x240
[  139.665073][ T4942]  ovl_alloc_entry+0x20/0x80
[  139.669779][ T4942]  ovl_fill_super+0x319e/0x42f0
[  139.674832][ T4942]  ? ovl_mount+0x30/0x30
[  139.679201][ T4942]  ? free_anon_bdev+0x20/0x20
[  139.683992][ T4942]  ? ovl_mount+0x30/0x30
[  139.688349][ T4942]  mount_nodev+0x52/0xe0
[  139.692730][ T4942]  legacy_get_tree+0xe6/0x180
[  139.697597][ T4942]  ? virtio_fs_zero_page_range+0x130/0x130
[  139.703418][ T4942]  vfs_get_tree+0x88/0x270
[  139.707876][ T4942]  do_new_mount+0x247/0xa50
[  139.712839][ T4942]  __se_sys_mount+0x2e3/0x3d0
[  139.717568][ T4942]  ? __x64_sys_mount+0xc0/0xc0
[  139.723203][ T4942]  ? lockdep_hardirqs_on+0x94/0x140
[  139.728398][ T4942]  ? __x64_sys_mount+0x1c/0xc0
[  139.733389][ T4942]  do_syscall_64+0x4c/0xa0
[  139.737998][ T4942]  ? clear_bhb_loop+0x60/0xb0
[  139.742779][ T4942]  ? clear_bhb_loop+0x60/0xb0
[  139.747559][ T4942]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  139.753551][ T4942] RIP: 0033:0x7fbb4559f559
[  139.757985][ T4942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  139.778559][ T4942] RSP: 002b:00007fbb464f0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  139.787258][ T4942] RAX: ffffffffffffffda RBX: 00007fbb45825fa0 RCX: 00007fbb4559f559
[  139.795412][ T4942] RDX: 0000200000000680 RSI: 00002000000005c0 RDI: 0000000000000000
[  139.803628][ T4942] RBP: 00007fbb45636b20 R08: 00002000000006c0 R09: 0000000000000000
[  139.811802][ T4942] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000
[  139.820046][ T4942] R13: 00007fbb45826038 R14: 00007fbb45825fa0 R15: 00007ffedbcbf558
[  139.828034][ T4942]  </TASK>
[  139.857974][ T4922] EXT4-fs (loop2): 1 truncate cleaned up
[  139.956769][  T128] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  139.986537][ T4922] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  141.106961][ T4949] loop0: detected capacity change from 0 to 16
[  141.137204][ T4949] erofs: (device loop0): mounted with root inode @ nid 36.
[  141.174995][ T4443] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  141.187548][  T128] usb 4-1: too many endpoints for config 0 interface 0 altsetting 5: 66, using maximum allowed: 30
[  141.233148][  T128] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  141.283205][  T128] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  141.321858][  T128] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 66
[  141.409067][  T128] usb 4-1: config 0 interface 0 has no altsetting 0
[  141.430788][  T128] usb 4-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00
[  141.450324][  T128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.488690][  T128] usb 4-1: config 0 descriptor??
[  141.511446][ T4277] EXT4-fs (loop2): unmounting filesystem.
[  141.631762][ T4953] loop0: detected capacity change from 0 to 1024
[  141.675795][ T4953] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  141.724547][ T4955] device syzkaller1 entered promiscuous mode
[  141.743236][ T4953] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  141.797027][ T4953] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[  141.833525][ T4953] System zones: 0-1, 3-36
[  141.854238][ T4953] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  141.909124][   T26] audit: type=1800 audit(1793405840.666:16): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.176" name="bus" dev="loop0" ino=18 res=0 errno=0
[  142.035887][   T26] audit: type=1800 audit(1793405840.696:17): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.176" name="bus" dev="loop0" ino=18 res=0 errno=0
[  142.118264][ T4276] EXT4-fs (loop0): unmounting filesystem.
[  142.265009][ T4961] loop0: detected capacity change from 0 to 1024
[  142.333514][ T4961] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 2: comm syz.0.178: lblock 2 mapped to illegal pblock 2 (length 1)
[  142.350652][   T14] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  142.429577][ T4961] Quota error (device loop0): qtree_write_dquot: dquota write failed
[  142.490035][ T4961] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 48: comm syz.0.178: lblock 0 mapped to illegal pblock 48 (length 1)
[  142.556574][ T4961] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  142.571888][   T14] usb 3-1: unable to get BOS descriptor or descriptor too short
[  142.591634][   T14] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  142.608736][ T4969] fuse: Unknown parameter '0x0000000000000004'
[  142.617967][ T4961] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.178: Failed to acquire dquot type 0
[  142.637737][   T14] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  142.656929][ T4961] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5985: Corrupt filesystem
[  142.659339][   T26] audit: type=1326 audit(1793405841.416:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4966 comm="syz.1.180" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f326859f559 code=0x0
[  142.703617][ T4961] EXT4-fs error (device loop0): ext4_evict_inode:281: inode #11: comm syz.0.178: mark_inode_dirty error
[  142.728637][   T14] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  142.776260][  T128] usbhid 4-1:0.0: can't add hid device: -71
[  142.794385][ T4961] EXT4-fs warning (device loop0): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[  142.809680][  T128] usbhid: probe of 4-1:0.0 failed with error -71
[  142.817909][   T14] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  142.859196][  T128] usb 4-1: USB disconnect, device number 2
[  142.878027][ T4961] EXT4-fs (loop0): 1 orphan inode deleted
[  142.898966][   T14] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  142.926279][ T4961] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  142.959583][   T14] usb 3-1: config 1 interface 1 has no altsetting 0
[  142.968374][ T4976] loop3: detected capacity change from 0 to 2048
[  142.983251][ T4977] device syzkaller0 entered promiscuous mode
[  143.003446][ T4961] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 1: comm syz.0.178: lblock 1 mapped to illegal pblock 1 (length 1)
[  143.028281][   T14] usb 3-1: string descriptor 0 read error: -22
[  143.043405][ T4976] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  143.069642][   T14] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  143.114547][ T4961] Quota error (device loop0): find_next_id: Can't read quota tree block 1
[  143.127053][   T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.171992][ T4372] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  143.300229][ T4372] Quota error (device loop0): remove_tree: Can't read quota data block 1
[  143.352972][ T4372] EXT4-fs error (device loop0): ext4_release_dquot:6884: comm kworker/u4:6: Failed to release dquot type 0
[  143.449296][ T4276] EXT4-fs (loop0): unmounting filesystem.
[  143.480328][ T4276] EXT4-fs error (device loop0): __ext4_get_inode_loc:4523: comm syz-executor: Invalid inode table block 1 in block_group 0
[  143.574762][ T4276] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5985: Corrupt filesystem
[  143.596276][ T4982] ip_tables: iptables: counters copy to user failed while replacing table
[  143.621608][ T4276] EXT4-fs error (device loop0): ext4_quota_off:7142: inode #3: comm syz-executor: mark_inode_dirty error
[  143.651093][ T4982] netlink: 32 bytes leftover after parsing attributes in process `syz.1.186'.
[  143.792734][ T4987] loop3: detected capacity change from 0 to 128
[  143.866597][ T4987] FAT-fs (loop3): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1)
[  144.011504][ T4993] FAULT_INJECTION: forcing a failure.
[  144.011504][ T4993] name failslab, interval 1, probability 0, space 0, times 0
[  144.048523][   T14] usb 3-1: 2:0: failed to get current value for ch 1 (-71)
[  144.226238][ T4993] CPU: 0 PID: 4993 Comm: syz.1.189 Not tainted syzkaller #0
[  144.234185][ T4993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  144.246018][ T4993] Call Trace:
[  144.249326][ T4993]  <TASK>
[  144.252304][ T4993]  dump_stack_lvl+0x188/0x24e
[  144.257293][ T4993]  ? show_regs_print_info+0x12/0x12
[  144.262694][ T4993]  ? load_image+0x410/0x410
[  144.267263][ T4993]  ? __might_sleep+0xd0/0xd0
[  144.274242][ T4993]  ? __lock_acquire+0x7ea0/0x7ea0
[  144.279470][ T4993]  ? mark_lock+0x94/0x320
[  144.284674][ T4993]  should_fail_ex+0x390/0x4c0
[  144.289725][ T4993]  should_failslab+0x5/0x20
[  144.294236][ T4993]  slab_pre_alloc_hook+0x59/0x300
[  144.299371][ T4993]  kmem_cache_alloc+0x56/0x2f0
[  144.304521][ T4993]  ? alloc_vfsmnt+0x24/0x450
[  144.309427][ T4993]  alloc_vfsmnt+0x24/0x450
[  144.314069][ T4993]  clone_mnt+0x6b/0xcd0
[  144.318241][ T4993]  ? is_subdir+0x27/0x250
[  144.322588][ T4993]  clone_private_mount+0x286/0x310
[  144.327910][ T4993]  ovl_fill_super+0x27e7/0x42f0
[  144.332831][ T4993]  ? ovl_mount+0x30/0x30
[  144.337096][ T4993]  ? free_anon_bdev+0x20/0x20
[  144.341769][ T4993]  ? ovl_mount+0x30/0x30
[  144.346025][ T4993]  mount_nodev+0x52/0xe0
[  144.350400][ T4993]  legacy_get_tree+0xe6/0x180
[  144.355102][ T4993]  ? virtio_fs_zero_page_range+0x130/0x130
[  144.361112][ T4993]  vfs_get_tree+0x88/0x270
[  144.365533][ T4993]  do_new_mount+0x247/0xa50
[  144.370053][ T4993]  __se_sys_mount+0x2e3/0x3d0
[  144.374768][ T4993]  ? __x64_sys_mount+0xc0/0xc0
[  144.379554][ T4993]  ? lockdep_hardirqs_on+0x94/0x140
[  144.384776][ T4993]  ? __x64_sys_mount+0x1c/0xc0
[  144.389568][ T4993]  do_syscall_64+0x4c/0xa0
[  144.394000][ T4993]  ? clear_bhb_loop+0x60/0xb0
[  144.398854][ T4993]  ? clear_bhb_loop+0x60/0xb0
[  144.403553][ T4993]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  144.409462][ T4993] RIP: 0033:0x7f326859f559
[  144.413906][ T4993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  144.433724][ T4993] RSP: 002b:00007f3269477028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  144.442960][ T4993] RAX: ffffffffffffffda RBX: 00007f3268825fa0 RCX: 00007f326859f559
[  144.450967][ T4993] RDX: 0000200000000680 RSI: 00002000000005c0 RDI: 0000000000000000
[  144.459409][ T4993] RBP: 00007f3268636b20 R08: 00002000000006c0 R09: 0000000000000000
[  144.467659][ T4993] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000
[  144.476013][ T4993] R13: 00007f3268826038 R14: 00007f3268825fa0 R15: 00007fff22361e18
[  144.484392][ T4993]  </TASK>
[  144.544083][   T14] usb 3-1: USB disconnect, device number 2
[  144.717217][ T4993] overlayfs: failed to clone lowerpath
[  145.012473][ T5008] loop1: detected capacity change from 0 to 1024
[  145.098932][ T5008] ext3: Bad value for 'auto_da_alloc'
[  145.431170][ T5020] loop1: detected capacity change from 0 to 512
[  146.129729][ T5020] EXT4-fs (loop1): Test dummy encryption mode enabled
[  146.155215][ T5020] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  146.192754][ T5030] device syzkaller0 entered promiscuous mode
[  146.210162][ T5020] EXT4-fs (loop1): 1 truncate cleaned up
[  146.230244][ T5020] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  146.249757][ T5033] netlink: 20 bytes leftover after parsing attributes in process `syz.0.201'.
[  146.487221][ T5039] loop4: detected capacity change from 0 to 1024
[  146.546570][ T5039] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  146.628369][ T5037] loop0: detected capacity change from 0 to 1756
[  146.638668][ T5039] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  146.718373][ T5039] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[  146.759328][ T5020] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  146.774058][ T5039] System zones: 0-1, 3-36
[  146.828622][ T5039] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  146.919381][   T26] audit: type=1800 audit(1793405845.676:19): pid=5039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.202" name="bus" dev="loop4" ino=18 res=0 errno=0
[  146.978342][ T5037] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  147.024636][ T4281] EXT4-fs (loop1): unmounting filesystem.
[  147.163771][   T26] audit: type=1800 audit(1793405845.716:20): pid=5039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.202" name="bus" dev="loop4" ino=18 res=0 errno=0
[  147.216163][ T5037] UDF-fs: Scanning with blocksize 512 failed
[  147.259839][ T4285] EXT4-fs (loop4): unmounting filesystem.
[  147.407336][ T5037] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  147.460013][ T5052] loop4: detected capacity change from 0 to 1024
[  147.500435][ T5037] UDF-fs: Scanning with blocksize 1024 failed
[  147.602140][ T5037] UDF-fs: warning (device loop0): udf_fill_super: No partition found (2)
[  147.641049][ T4298] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  147.839057][ T5064] loop2: detected capacity change from 0 to 512
[  147.874921][ T4298] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  147.922628][ T5064] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.208: inode has both inline data and extents flags
[  147.949185][ T4298] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  147.997176][ T4298] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  148.029806][ T5064] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.208: couldn't read orphan inode 15 (err -117)
[  148.053872][ T4298] usb 2-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01
[  148.093407][ T4298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.108943][ T5064] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  148.150115][ T5050] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  148.356435][ T5072] loop4: detected capacity change from 0 to 128
[  148.428227][ T5072] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  148.678838][ T5074] loop3: detected capacity change from 0 to 2048
[  148.774324][ T5074] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  148.790614][    C0] net_ratelimit: 5 callbacks suppressed
[  148.847238][  T128] usb 2-1: USB disconnect, device number 5
[  148.855355][ T4284] Bluetooth: hci5: Reading Intel version command failed (-19)
[  148.960718][ T5074] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  149.172529][ T4285] UDF-fs: error (device loop4): udf_read_inode: (ino 114) failed !bh
[  149.236500][ T4285] UDF-fs: error (device loop4): udf_read_inode: (ino 114) failed !bh
[  150.466029][ T5086] Zero length message leads to an empty skb
[  150.606305][ T5088] device syzkaller0 entered promiscuous mode
[  150.936874][ T5094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.220'.
[  151.043527][ T5094] netlink: 16 bytes leftover after parsing attributes in process `syz.0.220'.
[  152.493340][ T5101] loop0: detected capacity change from 0 to 16
[  152.532267][ T5101] erofs: (device loop0): mounted with root inode @ nid 36.
[  152.732035][ T4277] EXT4-fs (loop2): unmounting filesystem.
[  152.796833][ T5104] FAULT_INJECTION: forcing a failure.
[  152.796833][ T5104] name failslab, interval 1, probability 0, space 0, times 0
[  152.928856][ T5104] CPU: 0 PID: 5104 Comm: syz.3.224 Not tainted syzkaller #0
[  152.936855][ T5104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  152.948774][ T5104] Call Trace:
[  152.952333][ T5104]  <TASK>
[  152.956566][ T5104]  dump_stack_lvl+0x188/0x24e
[  152.961361][ T5104]  ? show_regs_print_info+0x12/0x12
[  152.966683][ T5104]  ? load_image+0x410/0x410
[  152.971519][ T5104]  ? __might_sleep+0xd0/0xd0
[  152.976564][ T5104]  ? __lock_acquire+0x7ea0/0x7ea0
[  152.981787][ T5104]  should_fail_ex+0x390/0x4c0
[  152.986587][ T5104]  should_failslab+0x5/0x20
[  152.991792][ T5104]  slab_pre_alloc_hook+0x59/0x300
[  152.996958][ T5104]  ? __up_read+0x2b4/0x6b0
[  153.001416][ T5104]  ? ovl_alloc_entry+0x20/0x80
[  153.006385][ T5104]  __kmem_cache_alloc_node+0x4f/0x270
[  153.011808][ T5104]  ? ovl_alloc_entry+0x20/0x80
[  153.016605][ T5104]  __kmalloc+0xa3/0x240
[  153.020771][ T5104]  ovl_alloc_entry+0x20/0x80
[  153.025650][ T5104]  ovl_fill_super+0x319e/0x42f0
[  153.030706][ T5104]  ? ovl_mount+0x30/0x30
[  153.035677][ T5104]  ? free_anon_bdev+0x20/0x20
[  153.040796][ T5104]  ? ovl_mount+0x30/0x30
[  153.045425][ T5104]  mount_nodev+0x52/0xe0
[  153.049704][ T5104]  legacy_get_tree+0xe6/0x180
[  153.054671][ T5104]  ? virtio_fs_zero_page_range+0x130/0x130
[  153.060524][ T5104]  vfs_get_tree+0x88/0x270
[  153.064996][ T5104]  do_new_mount+0x247/0xa50
[  153.069629][ T5104]  __se_sys_mount+0x2e3/0x3d0
[  153.074403][ T5104]  ? __x64_sys_mount+0xc0/0xc0
[  153.080222][ T5104]  ? lockdep_hardirqs_on+0x94/0x140
[  153.085517][ T5104]  ? __x64_sys_mount+0x1c/0xc0
[  153.090304][ T5104]  do_syscall_64+0x4c/0xa0
[  153.094957][ T5104]  ? clear_bhb_loop+0x60/0xb0
[  153.100382][ T5104]  ? clear_bhb_loop+0x60/0xb0
[  153.105296][ T5104]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  153.111765][ T5104] RIP: 0033:0x7ffa4379f559
[  153.116360][ T5104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  153.136501][ T5104] RSP: 002b:00007ffa44646028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  153.145109][ T5104] RAX: ffffffffffffffda RBX: 00007ffa43a25fa0 RCX: 00007ffa4379f559
[  153.153468][ T5104] RDX: 0000200000000680 RSI: 00002000000005c0 RDI: 0000000000000000
[  153.162353][ T5104] RBP: 00007ffa43836b20 R08: 00002000000006c0 R09: 0000000000000000
[  153.171029][ T5104] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000
[  153.179482][ T5104] R13: 00007ffa43a26038 R14: 00007ffa43a25fa0 R15: 00007ffef90204e8
[  153.187500][ T5104]  </TASK>
[  153.205103][ T5108] loop1: detected capacity change from 0 to 1024
[  153.268983][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  153.283889][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  153.299836][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  153.320231][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  153.336985][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  153.346178][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  153.609743][ T5109] rxe_eth0 speed is unknown, defaulting to 1000
[  153.737071][ T5118] loop1: detected capacity change from 0 to 512
[  153.809074][ T5118] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  153.851601][ T5118] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  153.915899][ T5118] EXT4-fs error (device loop1): ext4_do_update_inode:5312: inode #2: comm syz.1.229: corrupted inode contents
[  153.988922][ T5118] EXT4-fs (loop1): Remounting filesystem read-only
[  154.030467][ T5118] EXT4-fs error (device loop1): ext4_dirty_inode:6199: inode #2: comm syz.1.229: mark_inode_dirty error
[  154.114664][ T5118] EXT4-fs (loop1): Remounting filesystem read-only
[  154.164732][ T5118] EXT4-fs error (device loop1): ext4_do_update_inode:5312: inode #2: comm syz.1.229: corrupted inode contents
[  154.249929][ T5118] EXT4-fs (loop1): Remounting filesystem read-only
[  154.295508][ T5118] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.229: mark_inode_dirty error
[  154.393668][ T5118] EXT4-fs (loop1): Remounting filesystem read-only
[  154.527751][ T5123] loop2: detected capacity change from 0 to 4096
[  154.570059][ T4281] EXT4-fs (loop1): unmounting filesystem.
[  154.630779][    C0] net_ratelimit: 48 callbacks suppressed
[  154.679845][ T5123] EXT4-fs (loop2): bad block size 65536
[  154.786863][ T5109] chnl_net:caif_netlink_parms(): no params data found
[  155.383133][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.430716][ T4284] Bluetooth: hci3: command 0x0409 tx timeout
[  155.442033][ T5109] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.506065][ T5109] device bridge_slave_0 entered promiscuous mode
[  155.552529][ T5141] syz.3.234: attempt to access beyond end of device
[  155.552529][ T5141] loop3: rw=2048, sector=0, nr_sectors = 8 limit=0
[  155.597759][ T5136] device syzkaller0 entered promiscuous mode
[  156.872072][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.879640][ T5109] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.923329][ T5141] SQUASHFS error: Failed to read block 0x0: -5
[  156.967615][ T5109] device bridge_slave_1 entered promiscuous mode
[  157.006920][ T5141] unable to read squashfs_super_block
[  158.109752][ T5149] loop0: detected capacity change from 0 to 16
[  158.124410][ T4284] Bluetooth: hci3: command 0x041b tx timeout
[  158.150953][ T5149] erofs: (device loop0): mounted with root inode @ nid 36.
[  158.488511][ T5109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  158.579814][ T5109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  158.843908][ T5160] loop3: detected capacity change from 0 to 512
[  158.860671][ T4394] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  158.904012][ T5109] team0: Port device team_slave_0 added
[  158.984458][ T5160] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  159.002640][ T5109] team0: Port device team_slave_1 added
[  159.074687][ T4394] usb 3-1: config 12 has an invalid interface number: 84 but max is 0
[  159.093510][ T5160] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  159.144599][ T4394] usb 3-1: config 12 has no interface number 0
[  159.188477][ T4394] usb 3-1: config 12 interface 84 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0
[  159.333912][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_0
[  159.353235][ T5160] EXT4-fs error (device loop3): ext4_do_update_inode:5312: inode #2: comm syz.3.240: corrupted inode contents
[  159.563927][ T5172] loop0: detected capacity change from 0 to 128
[  159.590153][ T5172] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[  159.614189][ T4394] usb 3-1: config 12 interface 84 has no altsetting 0
[  159.639717][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.679983][ T4394] usb 3-1: New USB device found, idVendor=1b3d, idProduct=0111, bcdDevice= d.9c
[  159.698421][ T5160] EXT4-fs (loop3): Remounting filesystem read-only
[  159.725692][ T5160] EXT4-fs error (device loop3): ext4_dirty_inode:6199: inode #2: comm syz.3.240: mark_inode_dirty error
[  159.741934][ T4394] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.796795][ T5160] EXT4-fs (loop3): Remounting filesystem read-only
[  159.830584][    C0] net_ratelimit: 35 callbacks suppressed
[  159.846310][ T4394] ftdi_sio 3-1:12.84: FTDI USB Serial Device converter detected
[  159.864234][ T5109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  159.876795][ T5160] EXT4-fs error (device loop3): ext4_do_update_inode:5312: inode #2: comm syz.3.240: corrupted inode contents
[  159.899788][ T4394] ftdi_sio ttyUSB0: unknown device type: 0xd9c
[  159.928347][ T5160] EXT4-fs (loop3): Remounting filesystem read-only
[  159.992588][ T5160] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.240: mark_inode_dirty error
[  160.086560][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_1
[  160.102619][ T5160] EXT4-fs (loop3): Remounting filesystem read-only
[  160.119196][    T7] usb 3-1: USB disconnect, device number 3
[  160.135355][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  160.164548][ T4284] Bluetooth: hci3: command 0x040f tx timeout
[  160.195642][    T7] ftdi_sio 3-1:12.84: device disconnected
[  160.295817][ T5109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  160.313533][ T4289] EXT4-fs (loop3): unmounting filesystem.
[  161.773334][ T5186] loop3: detected capacity change from 0 to 16
[  161.805117][ T5186] erofs: (device loop3): mounted with root inode @ nid 36.
[  161.885027][ T5185] FAULT_INJECTION: forcing a failure.
[  161.885027][ T5185] name failslab, interval 1, probability 0, space 0, times 0
[  162.265305][ T4284] Bluetooth: hci3: command 0x0419 tx timeout
[  162.279805][ T5109] device hsr_slave_0 entered promiscuous mode
[  162.323079][ T5185] CPU: 0 PID: 5185 Comm: syz.1.250 Not tainted syzkaller #0
[  162.331659][ T5185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  162.343472][ T5185] Call Trace:
[  162.347299][ T5185]  <TASK>
[  162.350478][ T5185]  dump_stack_lvl+0x188/0x24e
[  162.355776][ T5185]  ? show_regs_print_info+0x12/0x12
[  162.361979][ T5185]  ? load_image+0x410/0x410
[  162.367132][ T5185]  ? __lock_acquire+0x7ea0/0x7ea0
[  162.372725][ T5185]  should_fail_ex+0x390/0x4c0
[  162.377648][ T5185]  should_failslab+0x5/0x20
[  162.383090][ T5185]  slab_pre_alloc_hook+0x59/0x300
[  162.388285][ T5185]  ? __stack_depot_save+0x35/0x480
[  162.393561][ T5185]  ? kvmalloc_node+0x6c/0x180
[  162.398285][ T5185]  __kmem_cache_alloc_node+0x4f/0x270
[  162.403705][ T5185]  ? kvmalloc_node+0x6c/0x180
[  162.408466][ T5185]  __kmalloc_node+0xa2/0x240
[  162.413345][ T5185]  ? aa_get_newest_label+0xf9/0x5b0
[  162.418609][ T5185]  kvmalloc_node+0x6c/0x180
[  162.423397][ T5185]  simple_xattr_set+0xb4/0x520
[  162.428696][ T5185]  shmem_xattr_handler_set+0x47/0xe0
[  162.434383][ T5185]  ? shmem_xattr_handler_get+0x50/0x50
[  162.440294][ T5185]  __vfs_setxattr+0x3d8/0x410
[  162.445174][ T5185]  __vfs_setxattr_noperm+0x126/0x5e0
[  162.450472][ T5185]  vfs_setxattr+0x167/0x2e0
[  162.455107][ T5185]  ? xattr_permission+0x510/0x510
[  162.460258][ T5185]  ? ovl_get_fh+0x350/0x650
[  162.465036][ T5185]  ovl_verify_set_fh+0x1a8/0x410
[  162.470535][ T5185]  ovl_get_indexdir+0x170/0x610
[  162.475430][ T5185]  ? ovl_get_workdir+0x1630/0x1630
[  162.480589][ T5185]  ? ovl_fill_super+0x3310/0x42f0
[  162.485728][ T5185]  ? __kmem_cache_free+0xb6/0x200
[  162.492001][ T5185]  ovl_fill_super+0x348a/0x42f0
[  162.497171][ T5185]  ? ovl_mount+0x30/0x30
[  162.501636][ T5185]  ? free_anon_bdev+0x20/0x20
[  162.507101][ T5185]  ? ovl_mount+0x30/0x30
[  162.511613][ T5185]  mount_nodev+0x52/0xe0
[  162.515936][ T5185]  legacy_get_tree+0xe6/0x180
[  162.520818][ T5185]  ? virtio_fs_zero_page_range+0x130/0x130
[  162.527570][ T5185]  vfs_get_tree+0x88/0x270
[  162.532726][ T5185]  do_new_mount+0x247/0xa50
[  162.537686][ T5185]  __se_sys_mount+0x2e3/0x3d0
[  162.543028][ T5185]  ? __x64_sys_mount+0xc0/0xc0
[  162.547876][ T5185]  ? lockdep_hardirqs_on+0x94/0x140
[  162.553280][ T5185]  ? __x64_sys_mount+0x1c/0xc0
[  162.558355][ T5185]  do_syscall_64+0x4c/0xa0
[  162.562889][ T5185]  ? clear_bhb_loop+0x60/0xb0
[  162.567606][ T5185]  ? clear_bhb_loop+0x60/0xb0
[  162.572394][ T5185]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  162.578497][ T5185] RIP: 0033:0x7f326859f559
[  162.586109][ T5185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  162.606087][ T5185] RSP: 002b:00007f3269477028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  162.614543][ T5185] RAX: ffffffffffffffda RBX: 00007f3268825fa0 RCX: 00007f326859f559
[  162.624086][ T5185] RDX: 0000200000000680 RSI: 00002000000005c0 RDI: 0000000000000000
[  162.632089][ T5185] RBP: 00007f3268636b20 R08: 00002000000006c0 R09: 0000000000000000
[  162.641093][ T5185] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000
[  162.649638][ T5185] R13: 00007f3268826038 R14: 00007f3268825fa0 R15: 00007fff22361e18
[  162.658047][ T5185]  </TASK>
[  162.709105][ T5109] device hsr_slave_1 entered promiscuous mode
[  162.746365][ T5109] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  162.841080][ T5109] Cannot create hsr debugfs directory
[  163.117638][ T5200] loop2: detected capacity change from 0 to 1024
[  163.207693][ T5200] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  163.326446][ T5200] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  163.427710][ T5200] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[  163.518715][ T5200] System zones: 0-1, 3-36
[  163.587016][ T5200] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  163.763262][   T26] audit: type=1800 audit(1793405862.526:21): pid=5208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.255" name="bus" dev="loop2" ino=18 res=0 errno=0
[  164.047094][ T5210] loop0: detected capacity change from 0 to 512
[  164.088162][ T4277] EXT4-fs (loop2): unmounting filesystem.
[  164.195211][ T5210] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  164.213167][ T5109] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  164.288315][ T5210] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  164.340360][ T5109] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  164.424455][ T5210] EXT4-fs error (device loop0): ext4_do_update_inode:5312: inode #2: comm syz.0.257: corrupted inode contents
[  164.451407][ T5109] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  164.508961][ T5214] loop2: detected capacity change from 0 to 1024
[  164.517540][ T5210] EXT4-fs (loop0): Remounting filesystem read-only
[  164.530455][ T5109] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  164.559867][ T5210] EXT4-fs error (device loop0): ext4_dirty_inode:6199: inode #2: comm syz.0.257: mark_inode_dirty error
[  164.658259][ T5210] EXT4-fs (loop0): Remounting filesystem read-only
[  164.702440][ T5210] EXT4-fs error (device loop0): ext4_do_update_inode:5312: inode #2: comm syz.0.257: corrupted inode contents
[  164.817295][ T5210] EXT4-fs (loop0): Remounting filesystem read-only
[  164.855195][ T5210] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.257: mark_inode_dirty error
[  164.921763][ T5210] EXT4-fs (loop0): Remounting filesystem read-only
[  164.943705][ T5109] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.022739][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  165.030699][    C0] net_ratelimit: 30 callbacks suppressed
[  165.064884][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  165.098803][ T4276] EXT4-fs (loop0): unmounting filesystem.
[  165.116073][ T5109] 8021q: adding VLAN 0 to HW filter on device team0
[  165.196831][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  165.236240][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  165.281348][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.288589][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.337920][ T5185] overlayfs: failed to verify origin (newroot/51, ino=299, err=-12)
[  165.386607][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  165.407205][ T5185] overlayfs: failed to verify upper root origin
[  165.421269][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  165.465922][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  165.518518][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.525946][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.615834][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  165.668881][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  165.686195][ T5234] loop1: detected capacity change from 0 to 128
[  165.735091][ T5234] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  165.766801][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  165.846307][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  165.906556][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  165.965199][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  166.047030][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  166.089866][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  167.128716][ T5239] loop2: detected capacity change from 0 to 16
[  167.168406][ T5239] erofs: (device loop2): mounted with root inode @ nid 36.
[  167.264105][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  167.314665][ T4281] UDF-fs: error (device loop1): udf_read_inode: (ino 114) failed !bh
[  167.389183][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  167.444833][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  167.454824][ T4281] UDF-fs: error (device loop1): udf_read_inode: (ino 114) failed !bh
[  167.502055][ T5109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  167.707675][ T5250] loop3: detected capacity change from 0 to 512
[  167.840509][ T5250] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  167.865760][ T5248] device syzkaller0 entered promiscuous mode
[  167.895200][ T5250] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  167.996605][ T5250] EXT4-fs error (device loop3): ext4_do_update_inode:5312: inode #2: comm syz.3.272: corrupted inode contents
[  168.075035][ T5250] EXT4-fs (loop3): Remounting filesystem read-only
[  168.101173][ T5250] EXT4-fs error (device loop3): ext4_dirty_inode:6199: inode #2: comm syz.3.272: mark_inode_dirty error
[  168.186522][ T5250] EXT4-fs (loop3): Remounting filesystem read-only
[  168.226069][ T5259] FAULT_INJECTION: forcing a failure.
[  168.226069][ T5259] name failslab, interval 1, probability 0, space 0, times 0
[  168.255911][ T5250] EXT4-fs error (device loop3): ext4_do_update_inode:5312: inode #2: comm syz.3.272: corrupted inode contents
[  168.311986][ T5250] EXT4-fs (loop3): Remounting filesystem read-only
[  168.319699][ T5259] CPU: 0 PID: 5259 Comm: syz.0.275 Not tainted syzkaller #0
[  168.328031][ T5259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  168.339405][ T5259] Call Trace:
[  168.342912][ T5259]  <TASK>
[  168.346919][ T5259]  dump_stack_lvl+0x188/0x24e
[  168.351902][ T5259]  ? show_regs_print_info+0x12/0x12
[  168.357225][ T5259]  ? load_image+0x410/0x410
[  168.361811][ T5259]  ? __lock_acquire+0x7ea0/0x7ea0
[  168.367005][ T5259]  ? ida_alloc_range+0x7ca/0x860
[  168.371971][ T5259]  should_fail_ex+0x390/0x4c0
[  168.376684][ T5259]  should_failslab+0x5/0x20
[  168.381194][ T5259]  slab_pre_alloc_hook+0x59/0x300
[  168.387040][ T5259]  ? alloc_vfsmnt+0x9d/0x450
[  168.391651][ T5259]  __kmem_cache_alloc_node+0x4f/0x270
[  168.397149][ T5259]  ? alloc_vfsmnt+0x9d/0x450
[  168.401760][ T5259]  __kmalloc_node_track_caller+0xa0/0x240
[  168.407501][ T5259]  kstrdup_const+0x56/0x90
[  168.412137][ T5259]  alloc_vfsmnt+0x9d/0x450
[  168.416583][ T5259]  clone_mnt+0x6b/0xcd0
[  168.420833][ T5259]  ? is_subdir+0x27/0x250
[  168.425159][ T5259]  clone_private_mount+0x286/0x310
[  168.430524][ T5259]  ovl_fill_super+0x27e7/0x42f0
[  168.435602][ T5259]  ? ovl_mount+0x30/0x30
[  168.439889][ T5259]  ? free_anon_bdev+0x20/0x20
[  168.444677][ T5259]  ? ovl_mount+0x30/0x30
[  168.449025][ T5259]  mount_nodev+0x52/0xe0
[  168.453389][ T5259]  legacy_get_tree+0xe6/0x180
[  168.458104][ T5259]  ? virtio_fs_zero_page_range+0x130/0x130
[  168.463912][ T5259]  vfs_get_tree+0x88/0x270
[  168.468448][ T5259]  do_new_mount+0x247/0xa50
[  168.473049][ T5259]  __se_sys_mount+0x2e3/0x3d0
[  168.477872][ T5259]  ? __x64_sys_mount+0xc0/0xc0
[  168.482640][ T5259]  ? lockdep_hardirqs_on+0x94/0x140
[  168.487829][ T5259]  ? __x64_sys_mount+0x1c/0xc0
[  168.492597][ T5259]  do_syscall_64+0x4c/0xa0
[  168.497024][ T5259]  ? clear_bhb_loop+0x60/0xb0
[  168.501687][ T5259]  ? clear_bhb_loop+0x60/0xb0
[  168.506356][ T5259]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  168.512413][ T5259] RIP: 0033:0x7fd48d39f559
[  168.516845][ T5259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  168.536556][ T5259] RSP: 002b:00007fd48e32f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  168.545070][ T5259] RAX: ffffffffffffffda RBX: 00007fd48d625fa0 RCX: 00007fd48d39f559
[  168.553083][ T5259] RDX: 0000200000000680 RSI: 00002000000005c0 RDI: 0000000000000000
[  168.561074][ T5259] RBP: 00007fd48d436b20 R08: 00002000000006c0 R09: 0000000000000000
[  168.569336][ T5259] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000
[  168.577335][ T5259] R13: 00007fd48d626038 R14: 00007fd48d625fa0 R15: 00007ffc3fdd9458
[  168.585488][ T5259]  </TASK>
[  168.614188][ T5250] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.272: mark_inode_dirty error
[  168.661018][ T5250] EXT4-fs (loop3): Remounting filesystem read-only
[  169.101073][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  169.115211][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  169.124874][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  169.138924][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  169.149743][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  169.158975][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  169.325613][ T4289] EXT4-fs (loop3): unmounting filesystem.
[  169.337625][ T5259] overlayfs: failed to clone lowerpath
[  170.230615][    C0] net_ratelimit: 40 callbacks suppressed
[  172.130985][ T4287] Bluetooth: hci2: command 0x0409 tx timeout
[  173.249461][ T5283] loop0: detected capacity change from 0 to 1024
[  173.306451][ T5283] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  173.376667][   T26] audit: type=1804 audit(1793405872.136:22): pid=5283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.286" name="/newroot/69/file1/bus" dev="loop0" ino=18 res=1 errno=0
[  174.129828][ T4276] EXT4-fs (loop0): unmounting filesystem.
[  174.151094][ T4287] Bluetooth: hci2: command 0x041b tx timeout
[  174.525258][ T4298] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  174.736168][ T4298] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  174.755534][ T4298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.776357][ T4298] usb 1-1: config 0 descriptor??
[  174.800274][ T4298] cp210x 1-1:0.0: cp210x converter detected
[  175.274279][    C0] net_ratelimit: 38 callbacks suppressed
[  175.426833][ T4298] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71
[  175.454837][ T4298] cp210x 1-1:0.0: GPIO initialisation failed: -71
[  175.475818][ T4298] usb 1-1: cp210x converter now attached to ttyUSB0
[  175.497129][ T4298] usb 1-1: USB disconnect, device number 3
[  175.519932][ T4298] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  175.541810][ T4298] cp210x 1-1:0.0: device disconnected
[  175.819972][ T5269] netlink: 'syz.3.280': attribute type 228 has an invalid length.
[  176.055271][   T58] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.231948][ T4287] Bluetooth: hci2: command 0x040f tx timeout
[  176.249981][ T5261] rxe_eth0 speed is unknown, defaulting to 1000
[  176.416149][   T58] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.523688][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  176.570253][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  176.725193][   T58] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.740680][ T4394] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  176.814154][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.899164][   T58] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.952026][ T4394] usb 4-1: Using ep0 maxpacket: 16
[  176.969861][ T4394] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  177.014508][ T4394] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  177.039160][ T4394] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  177.101304][ T4394] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[  177.165239][ T4394] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  177.232855][ T4381] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  177.249032][ T4394] usb 4-1: SerialNumber: syz
[  177.331889][ T4394] usb 4-1: 0:2 : does not exist
[  177.460746][ T4381] usb 1-1: Using ep0 maxpacket: 16
[  177.507875][ T4381] usb 1-1: unable to get BOS descriptor or descriptor too short
[  177.621814][ T4394] usb 4-1: USB disconnect, device number 3
[  177.629859][ T4381] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  177.789939][ T4381] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  177.879023][ T4381] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.945634][ T4381] usb 1-1: Product: syz
[  178.000718][ T4381] usb 1-1: Manufacturer: syz
[  178.036294][ T4381] usb 1-1: SerialNumber: syz
[  178.311301][ T4287] Bluetooth: hci2: command 0x0419 tx timeout
[  178.324556][ T4381] usb 1-1: Audio class v2/v3 interfaces need an interface association
[  178.392333][ T4381] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[  178.537633][ T4381] usb 1-1: 2:1 : can't get High Capability descriptor
[  178.762265][ T5332] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  178.762265][ T5332] The task syz.3.297 (5332) triggered the difference, watch for misbehavior.
[  178.848796][    T7] usb 1-1: USB disconnect, device number 4
[  178.903548][ T5261] chnl_net:caif_netlink_parms(): no params data found
[  179.029798][ T5323] device syzkaller0 entered promiscuous mode
[  179.907481][ T5355] loop3: detected capacity change from 0 to 1024
[  179.979074][ T5355] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  180.050119][   T26] audit: type=1800 audit(1793405878.806:23): pid=5355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.303" name="file1" dev="loop3" ino=15 res=0 errno=0
[  180.081282][ T5360] loop0: detected capacity change from 0 to 2048
[  180.126925][ T5360] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  180.185127][ T5360] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  180.323476][ T4289] EXT4-fs (loop3): unmounting filesystem.
[  181.672727][    C0] net_ratelimit: 42 callbacks suppressed
[  181.853988][ T5373] capability: warning: `syz.0.306' uses deprecated v2 capabilities in a way that may be insecure
[  183.755894][ T4287] Bluetooth: hci0: command 0x0c20 tx timeout
[  183.847139][ T5410] loop3: detected capacity change from 0 to 16
[  183.864036][ T5410] erofs: (device loop3): mounted with root inode @ nid 36.
[  183.909621][ T5284] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  184.916303][ T4298] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  185.126537][ T4298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  185.178273][ T4298] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[  185.189750][ T4298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.205679][ T4298] usb 4-1: Product: syz
[  185.209918][ T4298] usb 4-1: Manufacturer: syz
[  185.215016][ T4298] usb 4-1: SerialNumber: syz
[  185.231267][ T4298] usb 4-1: config 0 descriptor??
[  185.254182][ T4298] hub 4-1:0.0: bad descriptor, ignoring hub
[  185.264846][ T4298] hub: probe of 4-1:0.0 failed with error -5
[  185.285809][ T4298] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6
[  185.642429][ T5387] device syzkaller0 entered promiscuous mode
[  185.755879][    T7] usb 4-1: USB disconnect, device number 4
[  185.807418][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  185.830096][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  186.099169][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  186.125305][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  186.168981][ T5109] device veth0_vlan entered promiscuous mode
[  186.309607][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  186.365283][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  186.572000][ T5109] device veth1_vlan entered promiscuous mode
[  186.870658][    C0] net_ratelimit: 47 callbacks suppressed
[  187.186711][ T5436] loop0: detected capacity change from 0 to 512
[  187.194891][ T5436] FAT-fs (loop0): Unrecognized mount option "00000000000000000000004�" or missing value
[  187.265370][ T5414] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  187.293703][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  187.331322][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  187.525150][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  187.867356][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  187.935826][ T5261] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.969702][ T5261] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.035154][ T5261] device bridge_slave_0 entered promiscuous mode
[  188.526202][ T5109] device veth0_macvtap entered promiscuous mode
[  188.593913][ T5261] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.629974][ T5261] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.677383][ T5261] device bridge_slave_1 entered promiscuous mode
[  188.718022][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  188.764662][ T5469] loop2: detected capacity change from 0 to 16
[  188.783410][ T5469] erofs: (device loop2): mounted with root inode @ nid 36.
[  188.924689][ T5109] device veth1_macvtap entered promiscuous mode
[  189.398304][ T5261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  189.561127][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  189.648489][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.695235][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  189.744697][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.789473][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  189.834836][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.867014][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  189.898914][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.974744][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_0
[  190.012505][ T5261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  190.099197][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  190.213941][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  190.447909][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.541078][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.635119][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.719366][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.795905][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.860489][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.894760][ T5503] loop2: detected capacity change from 0 to 2048
[  190.930130][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.974975][ T5503] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  191.018303][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.065110][ T5503] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  191.126260][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1
[  191.186951][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  191.261437][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  191.348840][ T5507] loop3: detected capacity change from 0 to 512
[  191.440389][   T58] device hsr_slave_0 left promiscuous mode
[  191.547681][ T5507] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  191.591306][ T5507] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  191.626528][   T58] device hsr_slave_1 left promiscuous mode
[  191.654523][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  191.712406][ T5507] EXT4-fs error (device loop3): ext4_do_update_inode:5312: inode #2: comm syz.3.345: corrupted inode contents
[  191.730963][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[  191.771391][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  191.779288][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[  191.821660][ T5507] EXT4-fs (loop3): Remounting filesystem read-only
[  191.845145][ T5507] EXT4-fs error (device loop3): ext4_dirty_inode:6199: inode #2: comm syz.3.345: mark_inode_dirty error
[  191.876651][   T58] device bridge_slave_1 left promiscuous mode
[  191.897089][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.909110][ T5507] EXT4-fs (loop3): Remounting filesystem read-only
[  191.933593][ T5507] EXT4-fs error (device loop3): ext4_do_update_inode:5312: inode #2: comm syz.3.345: corrupted inode contents
[  192.730445][    C0] net_ratelimit: 41 callbacks suppressed
[  192.778769][   T58] device bridge_slave_0 left promiscuous mode
[  192.815354][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.824558][ T5507] EXT4-fs (loop3): Remounting filesystem read-only
[  192.854926][ T5507] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.345: mark_inode_dirty error
[  192.945038][ T5507] EXT4-fs (loop3): Remounting filesystem read-only
[  192.965592][   T58] device veth1_macvtap left promiscuous mode
[  193.010742][   T58] device veth0_macvtap left promiscuous mode
[  193.044573][   T58] device veth1_vlan left promiscuous mode
[  193.059225][ T4289] EXT4-fs (loop3): unmounting filesystem.
[  193.091250][   T58] device veth0_vlan left promiscuous mode
[  193.677046][ T5538] loop2: detected capacity change from 0 to 2048
[  193.837410][ T5538]  loop2: unable to read partition table
[  193.857850][ T5538] loop2: partition table beyond EOD, truncated
[  193.877541][ T5538] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
[  194.016606][ T3641]  loop2: unable to read partition table
[  195.950890][ T3641] loop2: partition table beyond EOD, truncated
[  197.238490][ T5543] loop0: detected capacity change from 0 to 512
[  197.246126][ T5543] FAT-fs (loop0): Unrecognized mount option "shortname=mix%d" or missing value
[  197.884435][ T5284] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  198.310655][    C0] net_ratelimit: 37 callbacks suppressed
[  200.064525][ T5548] loop0: detected capacity change from 0 to 512
[  200.072357][ T5284] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  200.209186][ T5548] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  200.278800][ T5548] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  200.363593][ T5548] EXT4-fs error (device loop0): ext4_do_update_inode:5312: inode #2: comm syz.0.361: corrupted inode contents
[  200.458915][ T5548] EXT4-fs (loop0): Remounting filesystem read-only
[  200.496236][ T5548] EXT4-fs error (device loop0): ext4_dirty_inode:6199: inode #2: comm syz.0.361: mark_inode_dirty error
[  200.560281][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  200.568701][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  200.591808][ T5548] EXT4-fs (loop0): Remounting filesystem read-only
[  200.636937][ T5548] EXT4-fs error (device loop0): ext4_do_update_inode:5312: inode #2: comm syz.0.361: corrupted inode contents
[  200.722832][ T5548] EXT4-fs (loop0): Remounting filesystem read-only
[  200.753789][ T5548] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.361: mark_inode_dirty error
[  200.808965][ T5548] EXT4-fs (loop0): Remounting filesystem read-only
[  200.917508][ T4276] EXT4-fs (loop0): unmounting filesystem.
[  201.506333][ T5572] loop3: detected capacity change from 0 to 16
[  201.522906][ T5572] erofs: (device loop3): mounted with root inode @ nid 36.
[  201.544384][ T5414] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  202.010013][   T58] team0 (unregistering): Port device team_slave_1 removed
[  202.238907][   T58] team0 (unregistering): Port device team_slave_0 removed
[  202.366489][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  202.562705][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  202.576247][ T5582] loop3: detected capacity change from 0 to 2048
[  202.628897][ T5582] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  202.699826][ T5582] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  202.924322][ T5588] loop0: detected capacity change from 0 to 512
[  203.008315][ T5588] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  203.074043][ T5588] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  203.157583][ T5588] EXT4-fs error (device loop0): ext4_do_update_inode:5312: inode #2: comm syz.0.375: corrupted inode contents
[  203.184807][ T5588] EXT4-fs (loop0): Remounting filesystem read-only
[  203.218481][ T5588] EXT4-fs error (device loop0): ext4_dirty_inode:6199: inode #2: comm syz.0.375: mark_inode_dirty error
[  203.260314][ T5588] EXT4-fs (loop0): Remounting filesystem read-only
[  203.307083][ T5588] EXT4-fs error (device loop0): ext4_do_update_inode:5312: inode #2: comm syz.0.375: corrupted inode contents
[  203.350560][    C0] net_ratelimit: 30 callbacks suppressed
[  203.360184][ T5588] EXT4-fs (loop0): Remounting filesystem read-only
[  203.404530][ T5588] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.375: mark_inode_dirty error
[  203.478303][ T5588] EXT4-fs (loop0): Remounting filesystem read-only
[  203.579032][ T4276] EXT4-fs (loop0): unmounting filesystem.
[  203.768262][ T5600] netlink: 20 bytes leftover after parsing attributes in process `syz.0.378'.
[  204.018627][ T5607] loop0: detected capacity change from 0 to 1024
[  204.345488][   T58] bond0 (unregistering): Released all slaves
[  204.510258][ T5109] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  204.537072][ T5109] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  204.559214][ T5109] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  204.583558][ T5109] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  204.636908][ T5261] team0: Port device team_slave_0 added
[  204.735989][ T5261] team0: Port device team_slave_1 added
[  204.770435][ T5616] loop0: detected capacity change from 0 to 2048
[  205.006281][ T5616] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  205.099566][ T5261] batman_adv: batadv0: Adding interface: batadv_slave_0
[  205.156962][ T5616] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  205.167141][ T5621] loop2: detected capacity change from 0 to 512
[  205.189112][ T5261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.320876][ T5621] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  205.397939][ T5621] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  205.465798][ T5261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  205.553669][ T5621] EXT4-fs error (device loop2): ext4_do_update_inode:5312: inode #2: comm syz.2.386: corrupted inode contents
[  205.595085][ T5261] batman_adv: batadv0: Adding interface: batadv_slave_1
[  205.617581][ T4310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.655772][    T7] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  205.673076][ T4310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.706186][ T5261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.734980][ T5621] EXT4-fs (loop2): Remounting filesystem read-only
[  205.756349][ T5621] EXT4-fs error (device loop2): ext4_dirty_inode:6199: inode #2: comm syz.2.386: mark_inode_dirty error
[  205.789401][    T7] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  205.856834][ T5621] EXT4-fs (loop2): Remounting filesystem read-only
[  206.862749][ T5637] loop0: detected capacity change from 0 to 16
[  206.901974][ T5637] erofs: (device loop0): mounted with root inode @ nid 36.
[  206.952327][ T5621] EXT4-fs error (device loop2): ext4_do_update_inode:5312: inode #2: comm syz.2.386: corrupted inode contents
[  206.967492][ T5261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  207.059277][ T5621] EXT4-fs (loop2): Remounting filesystem read-only
[  207.121110][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  207.199783][ T5621] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.386: mark_inode_dirty error
[  207.350479][ T5621] EXT4-fs (loop2): Remounting filesystem read-only
[  207.397164][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.452066][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.539799][ T5261] device hsr_slave_0 entered promiscuous mode
[  207.596011][ T4277] EXT4-fs (loop2): unmounting filesystem.
[  207.651789][ T5261] device hsr_slave_1 entered promiscuous mode
[  207.708750][ T5261] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  207.794216][ T5261] Cannot create hsr debugfs directory
[  207.840780][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  208.137813][ T5631] loop3: detected capacity change from 0 to 1024
[  208.262176][ T5631] EXT4-fs: test_dummy_encryption requires encrypt feature
[  208.348023][ T5658] loop5: detected capacity change from 0 to 512
[  208.465809][ T5658] EXT4-fs: Ignoring removed orlov option
[  208.551149][    C0] net_ratelimit: 66 callbacks suppressed
[  208.559527][ T5658] EXT4-fs: Ignoring removed bh option
[  208.660260][ T5658] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  208.751140][ T5658] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  208.813134][ T5631] x86/PAT: syz.3.387:5631 freeing invalid memtype [mem 0xfe004000-0xfe004fff]
[  208.857824][ T5658] EXT4-fs (loop5): orphan cleanup on readonly fs
[  208.949566][ T5658] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6).
[  209.058075][ T5658] EXT4-fs warning (device loop5): ext4_enable_quotas:7100: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  209.246874][ T5658] EXT4-fs (loop5): Cannot turn on quotas: error -117
[  209.317371][ T5658] EXT4-fs error (device loop5): mb_free_blocks:1853: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  209.485589][ T5261] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  209.510365][ T5658] EXT4-fs (loop5): Remounting filesystem read-only
[  209.572515][ T5658] EXT4-fs (loop5): 1 truncate cleaned up
[  209.591565][ T5261] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  209.636331][ T5658] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  209.697693][ T5261] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  209.800833][  T128] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  209.836909][ T5261] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  209.890889][ T5109] EXT4-fs (loop5): unmounting filesystem.
[  210.032004][  T128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  210.131268][  T128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  210.233328][ T5685] loop5: detected capacity change from 0 to 512
[  210.241957][  T128] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  210.363387][ T5685] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  210.390769][  T128] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  210.445820][ T5261] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.486534][ T5685] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  210.498340][  T128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.550047][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  210.579475][  T128] usb 3-1: config 0 descriptor??
[  210.599858][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  210.628256][ T5685] EXT4-fs error (device loop5): ext4_do_update_inode:5312: inode #2: comm syz.5.398: corrupted inode contents
[  210.702185][ T5261] 8021q: adding VLAN 0 to HW filter on device team0
[  210.781927][ T5685] EXT4-fs (loop5): Remounting filesystem read-only
[  210.829741][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  210.846128][ T5685] EXT4-fs error (device loop5): ext4_dirty_inode:6199: inode #2: comm syz.5.398: mark_inode_dirty error
[  210.889253][ T5693] loop3: detected capacity change from 0 to 2048
[  210.896815][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  210.959107][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.967270][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.981014][ T5685] EXT4-fs (loop5): Remounting filesystem read-only
[  211.029741][ T5693] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  211.072417][  T128] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[  211.090107][ T5685] EXT4-fs error (device loop5): ext4_do_update_inode:5312: inode #2: comm syz.5.398: corrupted inode contents
[  211.164989][ T5693] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  211.183125][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  211.208757][ T5685] EXT4-fs (loop5): Remounting filesystem read-only
[  211.242841][  T128] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  211.277235][ T5685] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.398: mark_inode_dirty error
[  211.326190][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  211.435064][ T5685] EXT4-fs (loop5): Remounting filesystem read-only
[  211.458581][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.465821][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  211.624249][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  211.725737][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  211.746510][ T5109] EXT4-fs (loop5): unmounting filesystem.
[  211.852671][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  212.021448][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  212.130668][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  212.204808][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  212.289409][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  212.463711][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  212.511153][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  212.520790][   T14] usb 3-1: reset full-speed USB device number 4 using dummy_hcd
[  212.613876][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  212.669949][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  212.758228][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  212.809234][ T5261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  212.870654][ T4284] Bluetooth: hci1: command 0x0406 tx timeout
[  212.876776][ T4284] Bluetooth: hci0: command 0x0406 tx timeout
[  213.428099][ T4362] usb 3-1: USB disconnect, device number 4
[  213.670593][    C0] net_ratelimit: 46 callbacks suppressed
[  215.257351][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  215.302134][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  215.457907][ T5261] 8021q: adding VLAN 0 to HW filter on device batadv0
[  215.536332][ T5740] loop5: detected capacity change from 0 to 164
[  215.635423][ T5740] rock: corrupted directory entry. extent=458780 out of volume (nzones=41)
[  215.763584][ T5740] rock: corrupted directory entry. extent=458780 out of volume (nzones=41)
[  216.224244][ T5752] loop5: detected capacity change from 0 to 512
[  216.380918][ T5724] futex_wake_op: syz.3.407 tries to shift op by -1; fix this program
[  216.410955][ T5752] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  216.473427][ T5724] futex_wake_op: syz.3.407 tries to shift op by -1; fix this program
[  216.485635][ T5752] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  216.656645][ T5752] EXT4-fs error (device loop5): ext4_do_update_inode:5312: inode #2: comm syz.5.410: corrupted inode contents
[  216.791500][ T5752] EXT4-fs (loop5): Remounting filesystem read-only
[  216.816458][ T5752] EXT4-fs error (device loop5): ext4_dirty_inode:6199: inode #2: comm syz.5.410: mark_inode_dirty error
[  216.960947][ T5752] EXT4-fs (loop5): Remounting filesystem read-only
[  216.968197][ T5752] EXT4-fs error (device loop5): ext4_do_update_inode:5312: inode #2: comm syz.5.410: corrupted inode contents
[  217.156179][ T5752] EXT4-fs (loop5): Remounting filesystem read-only
[  217.214304][ T5752] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.410: mark_inode_dirty error
[  217.226942][   T26] audit: type=1326 audit(1793406172.046:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.3.411" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa4379f559 code=0x0
[  217.275388][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  217.316407][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  217.338808][ T5752] EXT4-fs (loop5): Remounting filesystem read-only
[  217.485155][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  217.543240][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  217.588771][ T5109] EXT4-fs (loop5): unmounting filesystem.
[  217.624730][ T5261] device veth0_vlan entered promiscuous mode
[  217.699990][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  217.748095][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  217.824226][ T5261] device veth1_vlan entered promiscuous mode
[  218.043488][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  218.117541][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  218.200300][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  218.319638][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  218.401859][ T5261] device veth0_macvtap entered promiscuous mode
[  218.470127][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  218.527344][ T5261] device veth1_macvtap entered promiscuous mode
[  218.663758][ T5261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  218.840858][ T5261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.921316][ T5261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.005556][ T5261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.064720][ T5261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.111128][    C0] net_ratelimit: 43 callbacks suppressed
[  219.156955][ T5261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.229092][ T5261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.316523][ T5261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.394729][ T5261] batman_adv: batadv0: Interface activated: batadv_slave_0
[  219.460822][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  219.538753][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  220.767062][ T5261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  220.838450][ T5261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.100625][ T5261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  222.212090][ T5261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.249808][ T5811] loop2: detected capacity change from 0 to 512
[  222.295343][ T5261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  222.357713][ T5811] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  222.405197][ T5261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.430118][ T5811] ext4 filesystem being mounted at /84/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  222.515310][ T5261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  222.583455][ T5261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.667667][ T5261] batman_adv: batadv0: Interface activated: batadv_slave_1
[  222.762338][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  222.846265][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  222.898202][ T5261] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  222.990148][ T5261] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  223.040400][ T5261] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  223.100820][ T5261] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  223.158663][ T4277] EXT4-fs (loop2): unmounting filesystem.
[  223.804074][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.882118][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.897887][ T5833] overlayfs: missing 'lowerdir'
[  224.025992][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  224.102156][ T4429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  224.119319][ T5832] rxe_eth0 speed is unknown, defaulting to 1000
[  224.167777][ T4429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  224.231946][    C0] net_ratelimit: 69 callbacks suppressed
[  224.271658][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  224.722355][ T5844] Bluetooth: hci0: unsupported parameter 5134
[  224.728648][ T5844] Bluetooth: hci0: unsupported parameter 8192
[  225.874502][ T5844] Bluetooth: hci0: unsupported parameter 5134
[  226.113506][ T5844] Bluetooth: hci0: unsupported parameter 8192
[  226.388486][ T5858] loop6: detected capacity change from 0 to 512
[  226.408655][ T5858] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  226.591012][ T5858] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #16: comm syz.6.431: invalid indirect mapped block 32768 (level 2)
[  226.608920][ T5858] EXT4-fs (loop6): 1 orphan inode deleted
[  226.615277][ T5858] EXT4-fs (loop6): 1 truncate cleaned up
[  226.621580][ T5858] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  226.681587][ T5858] rxe_eth0 speed is unknown, defaulting to 1000
[  226.690841][ T5861] netlink: 'syz.6.431': attribute type 7 has an invalid length.
[  226.698485][ T5861] netlink: 'syz.6.431': attribute type 5 has an invalid length.
[  226.707102][ T5861] netlink: 17 bytes leftover after parsing attributes in process `syz.6.431'.
[  226.716898][ T5861] EXT4-fs error (device loop6): ext4_lookup:1860: inode #15: comm syz.6.431: iget: bad extra_isize 46 (inode size 256)
[  226.967802][ T5261] EXT4-fs (loop6): unmounting filesystem.
[  226.998720][ T5865] loop2: detected capacity change from 0 to 128
[  227.159706][ T5865] FAT-fs (loop2): Directory bread(block 32) failed
[  227.256379][ T5865] FAT-fs (loop2): Directory bread(block 33) failed
[  227.364834][ T5865] FAT-fs (loop2): Directory bread(block 34) failed
[  227.472879][ T5865] FAT-fs (loop2): Directory bread(block 35) failed
[  227.479661][ T5865] FAT-fs (loop2): Directory bread(block 36) failed
[  227.499812][ T5875] loop5: detected capacity change from 0 to 2048
[  227.607425][ T5865] FAT-fs (loop2): Directory bread(block 37) failed
[  227.636506][ T5881] overlayfs: missing 'lowerdir'
[  227.701362][ T5865] FAT-fs (loop2): Directory bread(block 38) failed
[  227.727203][ T5875] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  227.818222][ T5865] FAT-fs (loop2): Directory bread(block 39) failed
[  227.894780][ T5865] FAT-fs (loop2): Directory bread(block 40) failed
[  227.933014][ T5875] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.435: bg 0: block 240: padding at end of block bitmap is not set
[  227.978921][ T5865] FAT-fs (loop2): Directory bread(block 41) failed
[  228.107547][ T4287] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  228.127199][ T4282] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  228.136401][ T4287] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  228.156844][ T4282] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  228.171037][ T4282] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  228.178413][ T4282] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  228.244384][ T5892] loop3: detected capacity change from 0 to 512
[  228.261853][ T5875] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[  228.383644][ T5892] FAT-fs (loop3): Unrecognized mount option "��֛�6GJ
R�������.�zQ\wFMx�7D7U �d~���zGcx�E��b4��'���IG�(��;�e�7+ʞ:�!Y
/Q����:|ֿ�'�W��Mf��_��Z���8{��V�@�	Ay��v7�۾���?3�/R��5�?�: !l��\z�{0�o���-���a18446744073709551615" or missing value
[  228.502129][ T5875] EXT4-fs (loop5): This should not happen!! Data will be lost
[  228.502129][ T5875] 
[  228.560278][ T5886] rxe_eth0 speed is unknown, defaulting to 1000
[  228.608610][ T5875] EXT4-fs (loop5): Total free blocks count 0
[  228.659714][ T5875] EXT4-fs (loop5): Free/Dirty block details
[  228.763972][ T5875] EXT4-fs (loop5): free_blocks=0
[  228.769078][ T5875] EXT4-fs (loop5): dirty_blocks=16
[  228.897168][ T5875] EXT4-fs (loop5): Block reservation details
[  228.932420][ T5896] capability: warning: `syz.6.438' uses 32-bit capabilities (legacy support in use)
[  229.007352][ T5875] EXT4-fs (loop5): i_reserved_data_blocks=1
[  229.294058][ T5109] EXT4-fs (loop5): unmounting filesystem.
[  229.351600][   T58] net_ratelimit: 67 callbacks suppressed
[  230.585438][ T4284] Bluetooth: hci5: command 0x0409 tx timeout
[  231.036012][ T5904] device bridge1 entered promiscuous mode
[  231.382232][ T5922] overlayfs: missing 'lowerdir'
[  231.496652][ T5928] loop5: detected capacity change from 0 to 512
[  231.680654][ T5928] EXT4-fs error (device loop5): __ext4_iget:5135: inode #2: block 131072: comm syz.5.447: invalid block
[  231.820706][ T5928] EXT4-fs (loop5): get root inode failed
[  232.620868][ T5928] EXT4-fs (loop5): mount failed
[  232.630970][ T4284] Bluetooth: hci5: command 0x041b tx timeout
[  234.404200][    C0] net_ratelimit: 41 callbacks suppressed
[  234.656543][ T5947] loop5: detected capacity change from 0 to 8
[  234.710855][ T4284] Bluetooth: hci5: command 0x040f tx timeout
[  235.125464][ T5109] SQUASHFS error: Unable to read directory block [631:72]
[  235.176062][ T5886] chnl_net:caif_netlink_parms(): no params data found
[  235.234688][ T5109] SQUASHFS error: Unable to read inode 0x0
[  235.306587][ T5109] SQUASHFS error: Unable to read inode 0x0
[  236.003541][ T5964] overlayfs: missing 'lowerdir'
[  236.812186][ T4284] Bluetooth: hci5: command 0x0419 tx timeout
[  236.834073][ T5886] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.900625][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.936660][ T5886] device bridge_slave_0 entered promiscuous mode
[  237.176457][ T5886] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.259784][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.459547][ T5886] device bridge_slave_1 entered promiscuous mode
[  238.675341][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.6.462'.
[  238.907411][ T5986] loop3: detected capacity change from 0 to 4096
[  239.013007][ T5886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  239.098913][ T5986] EXT4-fs: Ignoring removed mblk_io_submit option
[  239.173335][ T5986] EXT4-fs: Ignoring removed bh option
[  239.317612][ T5986] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  239.492466][ T5886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  239.510700][    C0] net_ratelimit: 50 callbacks suppressed
[  240.738191][ T4289] EXT4-fs (loop3): unmounting filesystem.
[  240.995658][ T4287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  241.008372][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  241.027585][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  241.041979][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  241.051533][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  241.059113][ T4282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  241.134271][ T5886] team0: Port device team_slave_0 added
[  241.192330][ T6006] overlayfs: missing 'lowerdir'
[  241.432280][ T5886] team0: Port device team_slave_1 added
[  241.647939][ T6001] rxe_eth0 speed is unknown, defaulting to 1000
[  241.958350][ T6016] loop2: detected capacity change from 0 to 128
[  242.077460][ T6016] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  242.183758][ T6016] ext4 filesystem being mounted at /90/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  242.436893][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_0
[  242.483073][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  242.521491][ T6028] loop3: detected capacity change from 0 to 164
[  242.545832][ T4277] EXT4-fs (loop2): unmounting filesystem.
[  242.673347][ T6028] rock: corrupted directory entry. extent=458780 out of volume (nzones=41)
[  242.854645][ T5886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  243.042399][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_1
[  243.049380][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  243.110718][ T4284] Bluetooth: hci3: command 0x0409 tx timeout
[  243.324849][ T5886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  243.449544][ T6040] overlayfs: missing 'lowerdir'
[  243.572386][ T6041] loop3: detected capacity change from 0 to 16
[  243.585254][ T6041] erofs: (device loop3): mounted with root inode @ nid 36.
[  244.263467][ T6049] fuse: blksize only supported for fuseblk
[  245.223747][    C0] net_ratelimit: 63 callbacks suppressed
[  245.226072][ T4284] Bluetooth: hci3: command 0x041b tx timeout
[  245.451700][ T5886] device hsr_slave_0 entered promiscuous mode
[  245.594528][ T5886] device hsr_slave_1 entered promiscuous mode
[  245.820611][ T4362] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  246.001987][ T4362] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  246.002066][ T4362] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  246.008953][ T4362] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40
[  246.008965][ T4362] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=18
[  246.008977][ T4362] usb 3-1: Product: syz
[  246.008985][ T4362] usb 3-1: Manufacturer: syz
[  246.008993][ T4362] usb 3-1: SerialNumber: syz
[  246.318070][ T4362] usb 3-1: USB disconnect, device number 5
[  246.454262][ T5886] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  246.454308][ T5886] Cannot create hsr debugfs directory
[  246.624752][ T4429] device hsr_slave_0 left promiscuous mode
[  246.625142][ T4429] device hsr_slave_1 left promiscuous mode
[  247.865352][ T4287] Bluetooth: hci3: command 0x040f tx timeout
[  247.882251][ T6057] udevd[6057]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  248.170263][ T6067] loop2: detected capacity change from 0 to 164
[  248.189361][ T6067] rock: corrupted directory entry. extent=458780 out of volume (nzones=41)
[  248.588345][ T6073] FAULT_INJECTION: forcing a failure.
[  248.588345][ T6073] name failslab, interval 1, probability 0, space 0, times 0
[  248.588361][ T6073] CPU: 0 PID: 6073 Comm: syz.2.487 Not tainted syzkaller #0
[  248.588372][ T6073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  248.588379][ T6073] Call Trace:
[  248.588384][ T6073]  <TASK>
[  248.588389][ T6073]  dump_stack_lvl+0x188/0x24e
[  248.588419][ T6073]  ? show_regs_print_info+0x12/0x12
[  248.588436][ T6073]  ? load_image+0x410/0x410
[  248.588453][ T6073]  ? __lock_acquire+0x7ea0/0x7ea0
[  248.588474][ T6073]  should_fail_ex+0x390/0x4c0
[  248.588490][ T6073]  should_failslab+0x5/0x20
[  248.588500][ T6073]  slab_pre_alloc_hook+0x59/0x300
[  248.588515][ T6073]  kmem_cache_alloc+0x56/0x2f0
[  248.588525][ T6073]  ? security_inode_alloc+0x30/0x110
[  248.588543][ T6073]  security_inode_alloc+0x30/0x110
[  248.588558][ T6073]  inode_init_always+0x910/0xc90
[  248.588571][ T6073]  ? ovl_lookup_inode+0x130/0x130
[  248.588584][ T6073]  iget5_locked+0xd1/0x260
[  248.588595][ T6073]  ? ovl_get_trap_inode+0x190/0x190
[  248.588609][ T6073]  ovl_get_trap_inode+0x87/0x190
[  248.588622][ T6073]  ovl_fill_super+0x278c/0x42f0
[  248.588645][ T6073]  ? ovl_mount+0x30/0x30
[  248.588668][ T6073]  ? free_anon_bdev+0x20/0x20
[  248.588679][ T6073]  ? ovl_mount+0x30/0x30
[  248.588688][ T6073]  mount_nodev+0x52/0xe0
[  248.588700][ T6073]  legacy_get_tree+0xe6/0x180
[  248.588712][ T6073]  ? virtio_fs_zero_page_range+0x130/0x130
[  248.588723][ T6073]  vfs_get_tree+0x88/0x270
[  248.588735][ T6073]  do_new_mount+0x247/0xa50
[  248.588751][ T6073]  __se_sys_mount+0x2e3/0x3d0
[  248.588765][ T6073]  ? __x64_sys_mount+0xc0/0xc0
[  248.588778][ T6073]  ? lockdep_hardirqs_on+0x94/0x140
[  248.588788][ T6073]  ? __x64_sys_mount+0x1c/0xc0
[  248.588800][ T6073]  do_syscall_64+0x4c/0xa0
[  248.588812][ T6073]  ? clear_bhb_loop+0x60/0xb0
[  248.588825][ T6073]  ? clear_bhb_loop+0x60/0xb0
[  248.588838][ T6073]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  248.588851][ T6073] RIP: 0033:0x7f480419f559
[  248.588862][ T6073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
** 149 printk messages dropped **
[  250.671208][    C0] net_ratelimit: 70 callbacks suppressed
[  250.672641][ T4284] Bluetooth: hci3: command 0x0419 tx timeout
[  250.951649][ T6092] syz.6.491 sent an empty control message without MSG_MORE.
[  251.037846][ T6097] loop6: detected capacity change from 0 to 256
[  251.063151][ T6097] exfat: Unknown parameter 'g �
�f�['
[  253.400770][ T4353] usb 7-1: new low-speed USB device number 2 using dummy_hcd
[  253.565973][ T6115] loop2: detected capacity change from 0 to 16
[  253.589627][ T4353] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[  253.589641][ T4353] usb 7-1: config 179 has no interface number 0
[  253.589668][ T4353] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  253.589682][ T4353] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  253.589695][ T4353] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  253.589708][ T4353] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8
[  253.589722][ T4353] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  253.589755][ T4353] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  253.589768][ T4353] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.594449][ T6110] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  253.599245][ T4353] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  253.608847][ T6115] erofs: (device loop2): mounted with root inode @ nid 36.
[  253.611001][ T4353] xpad: probe of 7-1:179.65 failed with error -5
[  254.774773][ T6116] netlink: 32 bytes leftover after parsing attributes in process `syz.2.496'.
[  254.831550][ T4353] usb 7-1: USB disconnect, device number 2
[  255.682062][ T4353] net_ratelimit: 48 callbacks suppressed
[  257.039553][ T6128] loop6: detected capacity change from 0 to 1024
[  257.060175][ T6128] EXT4-fs: Ignoring removed nobh option
[  257.103435][ T6128] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002]
[  257.104857][ T6128] System zones: 0-1, 3-12
[  257.131968][ T6128] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  257.146405][ T6128] EXT4-fs error (device loop6): ext4_read_inline_dir:1628: inode #12: block 7: comm syz.6.501: path /22/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  257.176464][ T6128] EXT4-fs (loop6): Remounting filesystem read-only
[  257.176868][ T6128] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2805: Unable to expand inode 12. Delete some EAs or run e2fsck.
[  257.201239][ T6128] EXT4-fs error (device loop6): ext4_read_inline_dir:1628: inode #12: block 7: comm syz.6.501: path /22/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  257.201841][ T6128] EXT4-fs (loop6): Remounting filesystem read-only
[  257.304867][ T5261] EXT4-fs (loop6): unmounting filesystem.
[  257.444632][ T4362] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  257.635480][ T4362] usb 3-1: unable to get BOS descriptor or descriptor too short
[  257.635938][ T4362] usb 3-1: not running at top speed; connect to a high speed hub
[  257.636826][ T4362] usb 3-1: config 1 has an invalid descriptor of length 44, skipping remainder of the config
[  257.638244][ T4362] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00
[  257.638264][ T4362] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  257.638274][ T4362] usb 3-1: Product: syz
[  257.638282][ T4362] usb 3-1: Manufacturer: syz
[  257.647982][ T4362] usb 3-1: Found UVC 1.00 device syz (8086:0ad2)
[  257.648013][ T4362] usb 3-1: No streaming interface found for terminal 2.
[  257.673192][ T4362] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input7
[  257.927287][ T4362] usb 3-1: USB disconnect, device number 6
[  258.766525][ T6150] loop6: detected capacity change from 0 to 256
[  258.859673][ T6150] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  259.036403][ T4287] Bluetooth: hci4: command 0x0406 tx timeout
[  259.068956][ T6150] exFAT-fs (loop6): hint_cluster is invalid (17)
[  260.298618][ T4287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  260.305924][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  260.307343][ T4287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  260.308204][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  260.308962][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  260.309252][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  260.450190][    T7] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  260.467684][    T7] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  260.662146][ T6164] loop2: detected capacity change from 0 to 512
[  260.710525][    C0] net_ratelimit: 50 callbacks suppressed
[  260.737815][ T6164] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
** 31 printk messages dropped **
[  261.086879][ T4429] bond0 (unregistering): Released all slaves
** 1216 printk messages dropped **
[  261.992562][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  261.992595][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  262.098731][ T6156] rxe_eth0 speed is unknown, defaulting to 1000
[  262.390739][ T4284] Bluetooth: hci0: command 0x0409 tx timeout
[  262.638951][ T6001] chnl_net:caif_netlink_parms(): no params data found
[  263.938945][ T6192] Bluetooth: MGMT ver 1.22
[  264.470589][ T4284] Bluetooth: hci0: command 0x041b tx timeout
[  264.663364][ T6205] loop2: detected capacity change from 0 to 2048
[  264.707202][ T6207] loop6: detected capacity change from 0 to 1024
[  264.788865][ T5886] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  264.815018][ T6205] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  265.544377][ T6205] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  265.578308][ T6001] bridge0: port 1(bridge_slave_0) entered blocking state
[  265.620867][ T6001] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.628995][ T6001] device bridge_slave_0 entered promiscuous mode
[  265.778754][ T5886] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  265.830619][    C0] net_ratelimit: 76 callbacks suppressed
[  266.098929][ T6001] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.154608][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.205375][ T6001] device bridge_slave_1 entered promiscuous mode
[  266.271639][ T5886] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  266.398739][ T5886] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  266.550728][ T4284] Bluetooth: hci0: command 0x040f tx timeout
[  266.646734][ T4429] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.775428][ T6156] chnl_net:caif_netlink_parms(): no params data found
[  267.170316][ T4429] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.299754][ T6001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  268.407813][ T4362] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  268.483015][ T4362] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  268.630701][ T4284] Bluetooth: hci0: command 0x0419 tx timeout
[  268.682785][ T4429] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.798922][ T6242] loop2: detected capacity change from 0 to 8
[  268.822237][ T6001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  269.039962][ T6242] SQUASHFS error: Unable to read directory block [1d0:0]
[  269.103571][ T4429] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.383736][ T6237] loop6: detected capacity change from 0 to 1024
[  269.467186][ T6001] team0: Port device team_slave_0 added
[  269.502964][ T6237] EXT4-fs: test_dummy_encryption requires encrypt feature
[  269.697350][ T5886] 8021q: adding VLAN 0 to HW filter on device bond0
[  269.801498][ T6001] team0: Port device team_slave_1 added
[  269.952683][ T5886] 8021q: adding VLAN 0 to HW filter on device team0
[  270.021926][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  270.055849][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  270.622715][ T4429] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.710757][ T4284] Bluetooth: hci0: command 0x0c20 tx timeout
[  270.814887][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  270.875688][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  270.935109][ T6272] loop6: detected capacity change from 0 to 512
[  270.951653][   T58] net_ratelimit: 50 callbacks suppressed
[  270.961097][ T4430] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.968437][ T4430] bridge0: port 1(bridge_slave_0) entered forwarding state
[  271.040209][ T6272] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  271.078921][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  271.104269][ T6272] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  271.138535][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  271.197469][ T6272] EXT4-fs error (device loop6): ext4_do_update_inode:5312: inode #2: comm syz.6.535: corrupted inode contents
[  271.210181][ T4430] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.217511][ T4430] bridge0: port 2(bridge_slave_1) entered forwarding state
[  271.292079][ T6272] EXT4-fs (loop6): Remounting filesystem read-only
[  271.308625][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  271.341001][ T6272] EXT4-fs error (device loop6): ext4_dirty_inode:6199: inode #2: comm syz.6.535: mark_inode_dirty error
[  271.373803][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
Stopping sshd: [  271.424913][ T6272] EXT4-fs (loop6): Remounting filesystem read-only
[  271.434399][ T6001] batman_adv: batadv0: Adding interface: batadv_slave_0
[  271.466301][ T6001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  271.506479][ T6272] EXT4-fs error (device loop6): ext4_do_update_inode:5312: inode #2: comm syz.6.535: corrupted inode contents
[  271.572247][ T6272] EXT4-fs (loop6): Remounting filesystem read-only
[  271.611726][ T6280] EXT4-fs error (device loop6): ext4_do_update_inode:5312: inode #2: comm syz.6.535: corrupted inode contents
[  271.654600][ T6001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
stopped /usr/sbin/sshd (pid 4035)
OK
[  271.727166][ T6280] EXT4-fs (loop6): Remounting filesystem read-only
[  271.749935][ T6156] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.772721][ T6280] EXT4-fs error (device loop6): ext4_dirty_inode:6199: inode #2: comm syz.6.535: mark_inode_dirty error
[  271.800820][ T6156] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.835406][ T6156] device bridge_slave_0 entered promiscuous mode
[  271.864777][ T6280] EXT4-fs (loop6): Remounting filesystem read-only
Stopping crond: [  271.939707][ T6280] EXT4-fs error (device loop6): ext4_do_update_inode:5312: inode #2: comm syz.6.535: corrupted inode contents
[  271.967655][ T4429] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.016479][ T6280] EXT4-fs (loop6): Remounting filesystem read-only
[  272.056931][ T6280] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #2: comm syz.6.535: mark_inode_dirty error
[  272.095337][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  272.116086][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  272.143681][ T6280] EXT4-fs (loop6): Remounting filesystem read-only
[  272.178576][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  272.187769][ T6280] EXT4-fs error (device loop6): ext4_do_update_inode:5312: inode #2: comm syz.6.535: corrupted inode contents
stopped /usr/sbin/crond (pid 4016)
OK
[  272.215615][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  272.235840][ T6280] EXT4-fs (loop6): Remounting filesystem read-only
[  272.252310][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  272.271431][ T6280] EXT4-fs error (device loop6): ext4_dirty_inode:6199: inode #2: comm syz.6.535: mark_inode_dirty error
[  272.296107][ T6001] batman_adv: batadv0: Adding interface: batadv_slave_1
[  272.315345][ T6001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  272.360929][ T6280] EXT4-fs (loop6): Remounting filesystem read-only
[  272.526841][ T6001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  272.637275][ T6156] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.664163][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.736295][ T6156] device bridge_slave_1 entered promiscuous mode
Stopping dhcpcd...
[  272.905725][ T4429] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.003368][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  273.029298][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  273.087332][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
stopped /sbin/dhcpcd (pid 3935)
[  273.276157][ T4429] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.403224][ T5886] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  273.471064][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  273.543415][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  273.575447][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
Stopping network: [  274.936824][ T6156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  274.974784][ T6320] loop2: detected capacity change from 0 to 512
[  275.063854][ T6001] device hsr_slave_0 entered promiscuous mode
[  275.197299][ T6001] device hsr_slave_1 entered promiscuous mode
[  275.225595][ T6320] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  275.301619][ T6320] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  275.343593][ T6001] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  275.396528][ T6001] Cannot create hsr debugfs directory
[  275.426413][ T6320] EXT4-fs error (device loop2): ext4_do_update_inode:5312: inode #2: comm syz.2.545: corrupted inode contents
[  275.527577][ T6156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  275.613716][ T6320] EXT4-fs (loop2): Remounting filesystem read-only
[  275.687107][ T6320] EXT4-fs error (device loop2): ext4_dirty_inode:6199: inode #2: comm syz.2.545: mark_inode_dirty error
[  275.738074][ T6334] loop6: detected capacity change from 0 to 2048
[  275.891531][ T6320] EXT4-fs (loop2): Remounting filesystem read-only
[  275.898472][ T6320] EXT4-fs error (device loop2): ext4_do_update_inode:5312: inode #2: comm syz.2.545: corrupted inode contents
[  275.947549][ T6334] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  276.075325][ T6156] team0: Port device team_slave_0 added
[  276.086226][    T9] net_ratelimit: 51 callbacks suppressed
[  276.108332][ T6334] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  276.143772][ T6320] EXT4-fs (loop2): Remounting filesystem read-only
[  276.195931][ T6156] team0: Port device team_slave_1 added
[  276.230376][ T6333] EXT4-fs error (device loop2): ext4_do_update_inode:5312: inode #2: comm syz.2.545: corrupted inode contents
[  276.412613][ T6333] EXT4-fs (loop2): Remounting filesystem read-only
[  276.465636][ T6333] EXT4-fs error (device loop2): ext4_dirty_inode:6199: inode #2: comm syz.2.545: mark_inode_dirty error
[  276.581354][ T6333] EXT4-fs (loop2): Remounting filesystem read-only
[  276.657080][ T6333] EXT4-fs error (device loop2): ext4_do_update_inode:5312: inode #2: comm syz.2.545: corrupted inode contents
[  276.766984][ T6333] EXT4-fs (loop2): Remounting filesystem read-only
[  276.812235][ T6333] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.545: mark_inode_dirty error
[  276.902658][ T6333] EXT4-fs (loop2): Remounting filesystem read-only
[  276.945491][ T6333] EXT4-fs error (device loop2): ext4_do_update_inode:5312: inode #2: comm syz.2.545: corrupted inode contents
[  277.024082][ T6333] EXT4-fs (loop2): Remounting filesystem read-only
[  277.101960][ T6333] EXT4-fs error (device loop2): ext4_dirty_inode:6199: inode #2: comm syz.2.545: mark_inode_dirty error
[  277.190934][ T6333] EXT4-fs (loop2): Remounting filesystem read-only
[  277.314164][ T5886] 8021q: adding VLAN 0 to HW filter on device batadv0
[  277.387229][ T6156] batman_adv: batadv0: Adding interface: batadv_slave_0
[  277.474476][ T6156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  277.616951][ T6156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  277.780384][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  277.806334][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  278.058811][ T6156] batman_adv: batadv0: Adding interface: batadv_slave_1
[  278.086667][ T6156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  278.260186][ T6156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  278.589211][ T6360] -1: renamed from syzkaller0
[  278.706885][ T6374] device syzkaller0 entered promiscuous mode
OK
Stopping iptables: OK
[  279.896056][ T6156] device hsr_slave_0 entered promiscuous mode
[  279.957783][ T6156] device hsr_slave_1 entered promiscuous mode
Stopping system message bus: [  279.989298][ T6400] loop2: detected capacity change from 0 to 512
[  280.005502][ T6156] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  280.035899][ T6156] Cannot create hsr debugfs directory
[  280.106618][ T6400] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  280.173201][ T6400] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  280.276313][ T6400] EXT4-fs error (device loop2): ext4_do_update_inode:5312: inode #2: comm syz.2.559: corrupted inode contents
[  280.416471][ T6400] EXT4-fs (loop2): Remounting filesystem read-only
[  280.476773][ T6400] EXT4-fs error (device loop2): ext4_dirty_inode:6199: inode #2: comm syz.2.559: mark_inode_dirty error
[  280.566465][ T6400] EXT4-fs (loop2): Remounting filesystem read-only
[  280.625326][ T6400] EXT4-fs error (device loop2): ext4_do_update_inode:5312: inode #2: comm syz.2.559: corrupted inode contents
[  280.681844][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  280.738861][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  280.749316][ T6400] EXT4-fs (loop2): Remounting filesystem read-only
[  280.777338][ T6408] EXT4-fs error (device loop2): ext4_do_update_inode:5312: inode #2: comm syz.2.559: corrupted inode contents
[  280.805553][ T5886] device veth0_vlan entered promiscuous mode
[  280.908666][ T6408] EXT4-fs (loop2): Remounting filesystem read-only
[  280.949716][ T6408] EXT4-fs error (device loop2): ext4_dirty_inode:6199: inode #2: comm syz.2.559: mark_inode_dirty error
[  281.020421][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  281.057504][ T6408] EXT4-fs (loop2): Remounting filesystem read-only
[  281.076813][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  281.100006][ T6408] EXT4-fs error (device loop2): ext4_do_update_inode:5312: inode #2: comm syz.2.559: corrupted inode contents
[  281.157679][ T5886] device veth1_vlan entered promiscuous mode
[  281.181860][ T6408] EXT4-fs (loop2): Remounting filesystem read-only
[  281.191233][    T9] net_ratelimit: 45 callbacks suppressed
[  281.240348][ T6408] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.559: mark_inode_dirty error
done
[  281.361946][ T6408] EXT4-fs (loop2): Remounting filesystem read-only
[  281.393586][ T6408] EXT4-fs error (device loop2): ext4_do_update_inode:5312: inode #2: comm syz.2.559: corrupted inode contents
[  281.459216][ T6408] EXT4-fs (loop2): Remounting filesystem read-only
[  281.500755][ T6408] EXT4-fs error (device loop2): ext4_dirty_inode:6199: inode #2: comm syz.2.559: mark_inode_dirty error
[  281.568856][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  281.616507][ T6408] EXT4-fs (loop2): Remounting filesystem read-only
[  281.625368][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  281.674610][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  281.734954][ T6415] pimreg: tun_chr_ioctl cmd 1074025673
[  281.762840][ T6001] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  281.997957][ T6001] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  282.035959][ T6423] loop2: detected capacity change from 0 to 128
[  282.105214][ T5886] device veth0_macvtap entered promiscuous mode
[  282.792832][ T6001] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  282.913173][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  282.960702][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  283.017693][ T5886] device veth1_macvtap entered promiscuous mode
[  283.164127][ T6001] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  283.289311][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  283.346130][ T5886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.447844][ T5886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.524723][ T5886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.596216][ T5886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.673281][ T5886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.751181][ T5886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
killall: can't kill pid 5284: No such process
killall: can't kill pid 5414: No such process
killall: can't kill pid 6057: No such process
[  283.866362][ T5886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.955559][ T5886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.031877][ T5886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  284.111120][ T5886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.205007][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_0
Stopping klogd: [  284.616901][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  284.664728][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  284.707089][ T6448] device syzkaller0 entered promiscuous mode
[  284.743662][ T5886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
OK
[  284.788759][ T5886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.847472][ T5886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  284.885527][ T5886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.926559][ T5886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
Stopping acpid: [  284.970370][ T5886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.995410][ T5886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  285.029576][ T5886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.064041][ T5886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  285.085457][ T5886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.119383][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_1
[  285.307246][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  285.330127][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  285.367574][   T26] audit: type=1326 audit(1793406240.186:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6470 comm="syz.6.568" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad8639f559 code=0x0
[  285.474076][ T5886] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  285.495978][ T5886] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  285.546791][ T5886] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  285.596337][ T5886] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  286.216645][ T6001] 8021q: adding VLAN 0 to HW filter on device bond0
[  286.230703][    C0] net_ratelimit: 49 callbacks suppressed
OK
[  286.430730][ T6487] loop2: detected capacity change from 0 to 128
[  286.556738][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  286.610219][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  286.674002][ T6001] 8021q: adding VLAN 0 to HW filter on device team0
Stopping syslogd: [  287.042515][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  287.111657][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  287.266646][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.273999][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
stopped /sbin/syslogd (pid 3623)
OK
[  287.528924][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  287.592001][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  287.685276][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  287.717756][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  287.727272][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  287.740393][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  287.749742][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  287.757924][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  287.765986][ T4287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  287.838885][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.846100][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  287.967701][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  288.021700][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  288.090196][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  288.166618][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  288.238954][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  288.331472][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  288.405562][ T6001] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  288.500571][ T6001] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
umount: can't remount debugfs read-only
[  288.694461][ T4429] device hsr_slave_0 left promiscuous mode
[  288.726256][ T4362] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
umount: can't remount sysfs read-only
umount: devtmpfs busy - remounted read-only
[  288.776149][ T4362] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
umount: can't remount /dev/root read-only
The system is going down NOW!
Connection to 10.128.1.79 closed by remote host.
Sent SIGTERM to all processes
[  288.964998][ T4429] device hsr_slave_1 left promiscuous mode
[  289.010762][ T4429] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  289.018559][ T4429] batman_adv: batadv0: Removing interface: batadv_slave_0
[  289.072347][ T4429] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  289.079906][ T4429] batman_adv: batadv0: Removing interface: batadv_slave_1
[  289.124024][ T4429] device bridge_slave_1 left promiscuous mode
[  289.130336][ T4429] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.194264][ T4429] device bridge_slave_0 left promiscuous mode
[  289.200516][ T4429] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.263935][ T4429] device hsr_slave_0 left promiscuous mode
[  289.294548][ T4429] device hsr_slave_1 left promiscuous mode
[  289.312917][ T4429] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  289.340065][ T4429] batman_adv: batadv0: Removing interface: batadv_slave_0
[  289.360438][ T4429] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  289.372958][ T4429] batman_adv: batadv0: Removing interface: batadv_slave_1
[  289.401397][ T4429] device bridge_slave_1 left promiscuous mode
[  289.407661][ T4429] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.421685][ T4429] device bridge_slave_0 left promiscuous mode
[  289.429049][ T4429] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.473848][ T4429] device veth1_macvtap left promiscuous mode
[  289.480311][ T4429] device veth0_macvtap left promiscuous mode
[  289.490879][ T4429] device veth1_vlan left promiscuous mode
[  289.496656][ T4429] device veth0_vlan left promiscuous mode
[  289.508178][ T4429] device veth1_macvtap left promiscuous mode
[  289.518654][ T4429] device veth0_macvtap left promiscuous mode
[  289.529429][ T4429] device veth1_vlan left promiscuous mode
[  289.535773][ T4429] device veth0_vlan left promiscuous mode
[  289.832658][ T4284] Bluetooth: hci4: command 0x0409 tx timeout
Sent SIGKILL to all processes
Requesting system poweroff
[  290.397344][ T4429] team0 (unregistering): Port device team_slave_1 removed
[  290.454050][ T4429] team0 (unregistering): Port device team_slave_0 removed
[  290.514711][ T4429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  290.578719][ T4429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  291.000253][ T4429] bond0 (unregistering): Released all slaves
[  291.086880][ T6527] kvm: exiting hardware virtualization
[  291.095753][ T6527] smc: removing ib device rxe0
[  291.430533][    C0] net_ratelimit: 63 callbacks suppressed
[  291.665917][ T4429] team0 (unregistering): Port device team_slave_1 removed
[  291.717391][ T4429] team0 (unregistering): Port device team_slave_0 removed
[  291.766509][ T4429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  291.820342][ T4429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  291.917057][ T4284] Bluetooth: hci4: command 0x041b tx timeout
[  292.228780][ T4429] bond0 (unregistering): Released all slaves
[  292.308730][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  292.344886][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  292.374362][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  292.395504][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  292.422265][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  292.471347][ T6524] device syzkaller0 entered promiscuous mode
[  292.534128][ T6527] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[  292.851267][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  292.918304][ T6527] ACPI: PM: Preparing to enter system sleep state S5
[  292.972296][ T6527] reboot: Power down
serialport: VM disconnected.