last executing test programs:

2m0.716133053s ago: executing program 3 (id=268):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x28, r1, 0xc4fc9e906872338b, 0x4, 0x25dfdc01, {{0x5}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x884}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0)

2m0.599512576s ago: executing program 3 (id=271):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
listen(r0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, 0x0, 0x0, 0xc, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f03985ac33e31d612d976a6efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8)
syz_emit_ethernet(0xde, &(0x7f0000000b40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0xa8, 0x6, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x2a, 0x80, 0x0, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0x91, 0x0, 0x0, "20abc2ae280b9cbfd94e5956542cf6190f183169b6c91b51619cf1a3d3e68d7fbd8f4fb66992e9b607e81685dde0e4f56bd8988849000d84bffbdcedb727249d9936e1be4711deb7faed933c58339e9b090b20dbe65409fcbcf53d9e5a2843187136c31916799e3abcce1f853b9ac39107392cdf694095d5e314279f5aca779afb9211147e37638b8dddc942b2ad"}]}}}}}}}}, 0x0)

2m0.527901627s ago: executing program 3 (id=273):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/ksmbd-control/debug\x00', 0x0, 0x0)
read(r0, &(0x7f0000000500)=""/100, 0x64)
close(r0)

2m0.498652598s ago: executing program 3 (id=274):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f00000008c0)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@quota}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@noinit_itable}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x47f, &(0x7f0000000300)="$eJzs3M1vFOUfAPDvTF94/7U/xBcQpIpG4ktLy4scvGg04aCJiR4wnmpbSKVQQ2sihGj1gEdD4t34XxhOejHqRROvejckxHAB9bJmdmZgWXbbLd12affzSab7PDNP93m+M/PsPjPP7gbQtYayP0nE9oj4PSIG8uzdBYbyh1s3Lk38fePSRBKVytt/JdVyN29cmiiLlv+3Lc9UKkV+U4N6L78XMT4zM3W+yI/Mn/1wZO7CxRenz46fnjo9dW7s+PEjh/f1Hxs72pY4s7hu7vlkdu/uE+9eeXPi5JX3f0rSyOOOujjaZSjfuw090+7KOmxHTTrprd2y/5c76UZnAp3UExHZ4eqr9v+B6Iktt7cNxOufd7RxwKqqVCqVRV6VFyrABpZEp1sAdEb5Rp9d/5bLGg09HgjXX8kvgLK4bxVLvqU30jyxv6/u+nZ7G+sfioiTC/98nS2xSvchAABqfZeNf15oNP5L45E80Z/9+V8xhzIYEf+PiJ0R8VBE7IqIhyOqZR+NiMeWWX/9DMm945/02n0H14Js/PdyMbd19/gvLYsM9hS5HdX4+5JT0zNTh4p9cjD6Np2aTqZGF6nj+9d++7LZttrxX7Zk9ZdjwaId13rrbtBNjs+PryTmWtc/i9jT2yj+JMppnCQidkfEnvusY/q53qbblo5/Ec2ftmWVbyKezY//QtTFX0qazk+OvnRs7OjI5piZOjRSnhX3+vnXy281q39F8bdBdvy3Njz/b8c/mGyOmLtw8Ux1vnZuWU+fdZ24/McXTa9piviz7tXK+X9iR3H+9yfvVFf0Fxs+Hp+fPz8a0Z+8ce/6sTvPVubL8ln8Bw807v87486eeDwi9kbEvoh4IrsoLNr+ZEQ8FREHFtkJP7769AdLxN/g+K/NXGkW/+RSxz9qj//yEz1nfri6dPybI6LZ8T9STR0s1rTy+tdqA1ey7wAAAGC9yD8Dn6TDt9NpOjycf4Z/V2xNZ2bn5p8/NfvRucl83nsw+tLyTtdAzf3Q0eLecJkfq8sfLu4bf9WzpZofnpidmex08NDltjXp/5k/ezrdOmDVtWEeDVin9H/oXvo/dKdE/4eupv9D92rU/z9tWnr421VtDLCmWn//v7rY95yAdaiF/r+QPzQfFQDrk+t/6F76P3Slpt+NT1f0lf81T/xb/J7hg9KejZ+I9IFoxsZP9Lb8YxbLSFQG8v6frdnUsEynX5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa478AAAD///u35Ec=")
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file2\x00', 0x20402, 0xb6)

2m0.089775229s ago: executing program 3 (id=275):
syz_mount_image$nilfs2(&(0x7f0000000a00), &(0x7f0000000080)='./file0\x00', 0x800408, &(0x7f0000000500)=ANY=[@ANYBLOB="00c1d143753d2c083ee422f83383b46202c4de2de291601c80052445e264d4679b97678c14da06e79245374cfb5a59ebaeff670caadb5694b952eb30672a383ac36fadcd60e27a35d7"], 0x1, 0xa0e, &(0x7f00000020c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x202ac1b, 0x0, 0x1, 0x0, &(0x7f00000007c0))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00')

1m58.612029276s ago: executing program 3 (id=290):
r0 = syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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")
r1 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x42, 0x81)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
sendfile(r1, r1, 0x0, 0xe3aa6ea)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80342, 0xcc)

1m58.45568133s ago: executing program 32 (id=290):
r0 = syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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")
r1 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x42, 0x81)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
sendfile(r1, r1, 0x0, 0xe3aa6ea)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80342, 0xcc)

1m21.744920626s ago: executing program 0 (id=598):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x90000005})
epoll_pwait(r1, &(0x7f0000000580)=[{}], 0x1, 0xfffeffff, 0x0, 0x0)

1m21.15495045s ago: executing program 0 (id=600):
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0xc)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1840b0, &(0x7f0000000080)={[{@uid={'uid', 0x3d, r1}}]})

1m21.145142201s ago: executing program 0 (id=601):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in=@dev={0xac, 0x14, 0x14, 0x42}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0xe599, 0x0, 0x0, 0x2}, {0x0, 0x100000000000000, 0x7, 0x0, 0xffffffff80000003, 0xffffffffffffffff, 0x0, 0x3}, {0xfffffffffffffffc, 0x6}, 0x1, 0x0, 0x1}, {{@in=@broadcast, 0x8004d8, 0x33}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x3, 0x3, 0x0, 0x400000}}, 0xe8)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)

1m21.119326531s ago: executing program 0 (id=602):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@test_dummy_encryption}, {@init_itable}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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")
mount$bind(0x0, 0x0, 0x0, 0x3a09007, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0)

1m20.836927518s ago: executing program 0 (id=606):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x70, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13c4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xffffffff}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x70}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r2, &(0x7f0000000b00)='INVITE sip:test@127.0.0.1 SIP/2.0\r\nCall-ID: test12345/', 0x36, 0x0, &(0x7f0000000c00)={0x2, 0x13c4, @loopback}, 0x10)

1m20.260181323s ago: executing program 0 (id=618):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x1000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m20.130422187s ago: executing program 33 (id=618):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x1000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m5.384045s ago: executing program 6 (id=765):
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x10, &(0x7f0000000080)=ANY=[], 0xff, 0x257, &(0x7f0000000240)="$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")
socket$inet6(0xa, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x91)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x133042, 0x19)

1m5.198651405s ago: executing program 6 (id=769):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffffe01, 0x9, 0xbf3ffe01, 0x8001, 0x2, "202b9809007d0000cd681ec267a000", 0x6, 0xd})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000001a00)={0xf, {"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", 0x1000}}, 0x1006)

1m4.997211911s ago: executing program 6 (id=773):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, 0x0)
ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0)

1m4.781263246s ago: executing program 6 (id=776):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x21008, 0x0, 0x1, 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000000)='./file0/file0\x00', 0x4)

1m4.656136119s ago: executing program 6 (id=777):
syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f00000001c0)='./file1\x00', 0x2000000, &(0x7f00000003c0)=ANY=[], 0x1, 0x184, &(0x7f0000000700)="$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")
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x33ed0000)
r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)

1m3.880170899s ago: executing program 6 (id=782):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r1)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000140)=@chain={'key_or_keyring:', r1})
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r0)

1m3.671664614s ago: executing program 34 (id=782):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r1)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000140)=@chain={'key_or_keyring:', r1})
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r0)

35.582165637s ago: executing program 1 (id=1083):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0)
r2 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001940)="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", 0x559, r1)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000001c0)='asymmetric\x00', &(0x7f00000000c0)=@chain={'key_or_keyring:', r2})
keyctl$KEYCTL_MOVE(0x1e, r2, r1, r0, 0x0)

35.556020468s ago: executing program 1 (id=1084):
r0 = syz_usb_connect(0x2, 0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f01900800000000070008060600000011090401"], 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_emit_ethernet(0x3e, 0x0, 0x0)

33.024018522s ago: executing program 1 (id=1110):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000007"], 0x48)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

32.938266194s ago: executing program 1 (id=1112):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a)
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0/file0\x00')

32.827048707s ago: executing program 1 (id=1113):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000000b80))

32.30814179s ago: executing program 1 (id=1115):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x2, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x6}, {0xa, 0x4e23, 0xf6, @private1}, r1, 0x4}}, 0x48)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1, 0xc61}}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

32.224533592s ago: executing program 35 (id=1115):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x2, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x6}, {0xa, 0x4e23, 0xf6, @private1}, r1, 0x4}}, 0x48)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1, 0xc61}}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

2.216823044s ago: executing program 5 (id=1380):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x10000, &(0x7f00000003c0)={[{@dots}, {@dots}, {@dots}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@nodots}, {@nodots}, {@fat=@nfs_stale_rw}, {@fat=@nfs_nostale_ro}, {@nodots}, {@nodots}, {@nodots}, {@fat=@nfs_nostale_ro}, {@fat=@fmask={'fmask', 0x3d, 0x10001}}, {@fat=@gid}, {@fat=@quiet}, {@fat=@usefree}, {@dots}, {@dots}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x200000000000}}, {@nodots}, {@nodots}, {@nodots}, {@fat=@nfs_stale_rw}], [{@dont_measure}, {@measure}, {@appraise_type}, {@context={'context', 0x3d, 'sysadm_u'}}, {@smackfsroot={'smackfsroot', 0x3d, 'uid'}}, {@fsname={'fsname', 0x3d, 'nfs=nostale_ro'}}, {@dont_appraise}, {@smackfshat={'smackfshat', 0x3d, 'quiet'}}, {@obj_user={'obj_user', 0x3d, 'nfs=stale_rw'}}, {@obj_role={'obj_role', 0x3d, 'gid'}}]}, 0x1, 0x1f7, &(0x7f0000000800)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000002240)='mounts\x00')
lseek(r0, 0x10001, 0x0)

1.97617023s ago: executing program 5 (id=1385):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000})

1.763535395s ago: executing program 7 (id=1388):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
getpriority(0xb6d5dc7981616295, 0x0)

1.611470809s ago: executing program 7 (id=1389):
syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000880)={[{@iocharset={'iocharset', 0x3d, 'cp862'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@utf8no}, {@utf8no}, {@shortname_mixed}, {@uni_xlateno}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '874'}}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@shortname_lower}, {@utf8}, {@rodir}, {@utf8no}, {@utf8no}]}, 0xfd, 0x2b2, &(0x7f00000005c0)="$eJzs3UFrY1UUAODz0jSJukgWrkTxLVy4GqbzC1KkA4NZKVmoCxVnBmQShCkUqmLsShAENy79BYLQnX/Cjf9AcCu4s4vClZe815fUJDXQtOp836an997z7rkvry1d5OSDl8dPHubx+OTzX6PTyaLRj36cZdGLRlS+jAX9bwMA+C87Syn+SDOb5GUR0dleWQDAFm389/906yUBAFv29jvvvrk/GBy8leeduD/+6mhY/GdffJ3N7z+Oj2MUj+JudOM8Il2YxfdTSpNmXujFa+PJ0bDIHL//c3n9/d8jpvl70Y3edGgx/8HgYC+fmcufFHU8X+7fL/LvRTdeXLL/g8HBvSX5MWzF6/HbN1lV/53oxi8fxScxiofTIur8L/by/I303Z+fvVeUV+Rnk6Nhe7qulnZu+KUBAAAAAAAAAAAAAAAAAAAAAOB/7E7ZO6cd0/49xVDZf2fnvPhmN/JKb7E/zyw/qy50qT/QJMX3VX+du3mep3Jhnd+Ml5rRvJ1TAwAAAAAAAAAAAAAAAAAAwL/L4fGnTz4cjR49vZag6gZQva1/8+ucTrP6cyOvxvqsdr1XowzXbBE71ZosYm09xSGu6bZcFTy3quYfftz0gp2r1+wWe3Wu8RTVyz03EtVItvweti8Wd6qH5KdqJKWUWvEPd2+tmkobPX6tpVPdje9G64VpMFmzJrJVhX39Sv1zWU5ll0/RWrjPC8FuGcylX3o2Nnqe//67ItOtAwAAAAAAAAAAAAAAAAAAtqp+0++SyZO1qY3U3lpZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCj6s//P26WQ/XIqmBSrly3pgxa8fTwFo8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAM+KvAAAA//9X6Fqp")
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
timer_create(0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x48)

1.348132746s ago: executing program 7 (id=1392):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x40, 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x761}], 0x1, 0x40000002, 0x0)

1.270160978s ago: executing program 4 (id=1394):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x2800091, &(0x7f00000082c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="333ed5fca4fdc9da41dc5525a31e2eabcdf2226f58d7bbdaa080715a87526444f694c24bc9dcde8d7b23b254e1004eca8b8da13ab3013dd83f54c309d8aa225fc6f134488184e57f6d604e614457290fd158133e36ecff45f77a818df131c24d37d26a6d12c3debf91a303efb00be5c781ee1406efd1e6e194a04db64a13f8c019f54bcb0fc4d3b629670d76e9512b4a630436da7310", @ANYRES32, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32], 0x15, 0x1bc, &(0x7f0000000380)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x4000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0)

1.208640819s ago: executing program 2 (id=1395):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r0, &(0x7f00000000c0), 0x10)
sendto$l2tp(r0, &(0x7f00000002c0)="e5786a0d000000000000003b", 0xc, 0x400c0c1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, 0x82004}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00000003c0)=0xc03, 0x4)
recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0)

1.1855585s ago: executing program 7 (id=1396):
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@grpquota}]}, 0x2, 0xbbf, &(0x7f0000000440)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x521ca1, 0x0, 0x80, 0x0, &(0x7f0000000080))
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x19a)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0)

1.038179134s ago: executing program 2 (id=1397):
setns(0xc9, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)={0x88, r1, 0xacf5e67dd0b583a1, 0x4000000, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5f, 0xe, {{{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="ec03f3b85ad3", {}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffffa1, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @val={0x4, 0x6, {0x1, 0x2, 0x2, 0x1000}}, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x81, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x61}}, @val={0x76, 0x6, {0xf, 0xf4, 0x22, 0x4}}}}]]}, 0x88}, 0x1, 0x0, 0x0, 0x8810}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0)

1.029787154s ago: executing program 8 (id=1398):
fsopen(&(0x7f0000000140)='cgroup\x00', 0x1)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES8=r0], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0)

905.664987ms ago: executing program 2 (id=1399):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0x8, 0x8001})

846.192959ms ago: executing program 8 (id=1400):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
dup3(r0, r1, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x1}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0xc800)

731.928491ms ago: executing program 5 (id=1401):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000240)='I', 0x1}], 0x1}}], 0x1, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
shutdown(r0, 0x1)
setsockopt(r0, 0x84, 0x82, &(0x7f00000002c0)="1a00000002000000", 0x8)

599.567945ms ago: executing program 8 (id=1402):
r0 = socket$inet(0x2, 0x80001, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x30, r2, 0x3, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x4d}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8d0, 0x50}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000000)

595.870025ms ago: executing program 4 (id=1403):
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/netfilter/nf_conntrack_buckets\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x8}}, 0x20)

524.174827ms ago: executing program 5 (id=1404):
r0 = fsopen(&(0x7f0000000600)='sysfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x1, 0xb)
setuid(0xee01)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='sysfs\x00', &(0x7f0000000140)="3d5453018a", 0x5)

479.970868ms ago: executing program 7 (id=1405):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8"], 0x48}}, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x800)

454.618938ms ago: executing program 8 (id=1406):
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r0, 0x407, 0x4000004)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff})
pipe2(&(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r1, 0x407, 0x100000)

410.849599ms ago: executing program 2 (id=1407):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x5d3, 0xfffffffffffffffd, 0xffffffffffffffff, 0xfffffffffffffffe}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}}, 0xb8}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'ip6_vti0\x00'}]}, 0x34}}, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @random="429e82211cf8", @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x28, 0x29, 0x1, @local, @mcast2, {[@dstopts={0x2b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9}]}, @fragment={0xb2, 0x0, 0x4, 0x0, 0x0, 0x11, 0x68}, @dstopts={0x73, 0x0, '\x00', [@padn]}]}}}}}, 0x0)

404.12749ms ago: executing program 4 (id=1408):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
readlinkat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', &(0x7f0000000240)=""/180, 0xb4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0)

348.148411ms ago: executing program 8 (id=1409):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)
mkdirat(r0, &(0x7f0000000000)='./tracing\x00', 0x29)
mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/trace_clock\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='counter', 0x7)

347.791391ms ago: executing program 5 (id=1410):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/kernel/core_pattern\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
write$cgroup_int(r0, &(0x7f0000000100)=0x100000000, 0x12)

251.782723ms ago: executing program 4 (id=1411):
r0 = syz_io_uring_setup(0x126b, &(0x7f0000000640)={0x0, 0x200072db, 0x0, 0x8001, 0x27f}, &(0x7f00000006c0), &(0x7f0000000540), &(0x7f0000000500))
mount(0x0, 0x0, 0x0, 0x4000, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
setrlimit(0x7, &(0x7f00000000c0)={0x5, 0x3ff})
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20)

214.334855ms ago: executing program 7 (id=1412):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
listen(r0, 0x1ff)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000100)="ab5c", 0x2, 0xe61e284085547095, &(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10)

204.159845ms ago: executing program 2 (id=1413):
ioctl$FE_SET_FRONTEND(0xffffffffffffffff, 0x40246f4c, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x2, 0x0)
write$FUSE_OPEN(r0, &(0x7f0000002680)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x20)

186.197605ms ago: executing program 5 (id=1414):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00006cb000/0x1000)=nil, 0x1000, 0x8003, &(0x7f0000000100)=0xd, 0x8, 0x0)
mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x4, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)

170.832745ms ago: executing program 8 (id=1415):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x4, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)

140.046826ms ago: executing program 4 (id=1416):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002c00028014000180080001000800ffee08000200ac1e00010c000280050001000000000006000340000100000800074000000001"], 0x6c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0)

101.991258ms ago: executing program 2 (id=1417):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)=@generic={0x0, r1}, 0x18)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x7, 0x10, 0x200, &(0x7f0000000e40)})

0s ago: executing program 4 (id=1418):
syz_mount_image$ocfs2(&(0x7f0000000100), &(0x7f00000044c0)='./file1\x00', 0x0, &(0x7f0000000240)={[{@data_ordered}, {@resv_level={'resv_level', 0x3d, 0x5}}, {@heartbeat_none}, {@acl}, {@barrier={'barrier', 0x3d, 0x1}}, {@err_cont}, {@coherency_buffered}, {@err_ro}, {@intr}, {@nouser_xattr}]}, 0x18, 0x447d, &(0x7f0000004500)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x1c3)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
ftruncate(r0, 0x2007ffb)
sendfile(r0, r0, 0x0, 0x1000000201005)

kernel console output (not intermixed with test programs):

omes ready
[  148.033700][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  148.051722][ T6541] loop4: detected capacity change from 0 to 256
[  148.070456][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  148.115219][ T6288] device veth0_macvtap entered promiscuous mode
[  148.180713][ T6541] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  148.191351][ T6288] device veth1_macvtap entered promiscuous mode
[  148.212630][   T26] audit: type=1800 audit(36512341.560:5): pid=6543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.691" name="submit_queues" dev="configfs" ino=42242 res=0 errno=0
[  148.271426][ T6546] loop5: detected capacity change from 0 to 1024
[  148.326434][ T6288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.389066][ T6288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.427463][ T6288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.489184][ T6288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.528371][ T6288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.539425][ T6288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.549843][ T6288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.561076][ T6288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.587615][ T6288] batman_adv: batadv0: Interface activated: batadv_slave_0
[  148.603544][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  148.627512][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  148.648018][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  148.658825][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  148.677689][ T6288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.752409][ T6288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.795609][ T6288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.840830][ T6288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.866134][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.5.694'.
[  148.879023][ T6288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.915781][ T6288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.955385][ T6288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.962023][ T6569] loop1: detected capacity change from 0 to 512
[  148.988500][ T6288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.001919][ T6288] batman_adv: batadv0: Interface activated: batadv_slave_1
[  149.020078][ T6569] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.701: missing EA_INODE flag
[  149.042095][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  149.051540][ T6569] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.701: error while reading EA inode 12 err=-117
[  149.105170][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  149.131691][ T6288] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.140888][ T6569] EXT4-fs (loop1): 1 orphan inode deleted
[  149.146768][ T6569] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  149.159268][ T6288] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.174673][ T6288] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.186027][ T6288] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.296845][ T6576] loop4: detected capacity change from 0 to 128
[  149.355636][ T4265] Bluetooth: hci0: command 0x0419 tx timeout
[  149.525268][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.547966][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.570450][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  149.634041][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.669455][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.677104][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  149.903831][ T6592] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  149.936872][ T6595] Format for adding new device is "id port_count num_queues" (uint uint unit).
[  150.122997][ T6604] netlink: 'syz.6.710': attribute type 11 has an invalid length.
[  150.250573][ T6607] loop4: detected capacity change from 0 to 4096
[  150.387377][ T6607] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  150.422926][ T6615] loop6: detected capacity change from 0 to 256
[  150.469586][ T6607] NILFS (loop4): mounting unchecked fs
[  150.509490][ T6607] NILFS (loop4): recovery required for readonly filesystem
[  150.583531][ T4568] udevd[4568]: incorrect nilfs2 checksum on /dev/loop4
[  150.620759][ T6615] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xc8e61e97, utbl_chksum : 0xe619d30d)
[  150.639332][ T6607] NILFS (loop4): write access will be enabled during recovery
[  150.730059][ T6618] device veth0 entered promiscuous mode
[  150.770121][ T6607] NILFS (loop4): norecovery option specified, skipping roll-forward recovery
[  150.830860][ T6617] device veth0 left promiscuous mode
[  150.951197][ T6607] NILFS (loop4): couldn't remount because the filesystem is in an incomplete recovery state
[  151.089883][ T4568] udevd[4568]: incorrect nilfs2 checksum on /dev/loop4
[  151.162901][ T6612] loop5: detected capacity change from 0 to 131072
[  151.234296][ T6612] F2FS-fs (loop5): invalid crc value
[  151.303178][ T6586] loop1: detected capacity change from 0 to 32768
[  151.365515][ T6612] F2FS-fs (loop5): Found nat_bits in checkpoint
[  151.405107][ T6612] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2
[  151.426077][ T6612] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  151.458071][ T6586] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.705 (6586)
[  151.552598][ T6586] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  151.607036][ T6586] BTRFS info (device loop1): enabling disk space caching
[  151.675072][ T6586] BTRFS info (device loop1): force clearing of disk cache
[  151.725228][ T6644] netlink: 20 bytes leftover after parsing attributes in process `syz.2.723'.
[  151.729361][ T6586] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  151.816741][ T6586] BTRFS info (device loop1): use zstd compression, level 3
[  151.868392][ T6586] BTRFS info (device loop1): disk space caching is enabled
[  151.922236][ T6586] BTRFS info (device loop1): has skinny extents
[  151.985755][ T6656] loop2: detected capacity change from 0 to 256
[  152.119362][ T6656] exfat: Deprecated parameter 'namecase'
[  152.147545][ T6665] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  152.207211][ T6586] BTRFS info (device loop1): enabling ssd optimizations
[  152.224973][ T6586] BTRFS info (device loop1): clearing free space tree
[  152.261776][ T6656] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d)
[  152.274910][ T6586] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  152.352519][ T6586] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  152.652069][ T6692] device-mapper: ioctl: name not supplied when creating device
[  152.904133][ T6690] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input17
[  153.327726][ T6713] device macsec0 entered promiscuous mode
[  153.342665][ T6713] netlink: 4 bytes leftover after parsing attributes in process `syz.5.735'.
[  153.396201][ T6713] device veth1_macvtap left promiscuous mode
[  153.456229][ T6719] set_capacity_and_notify: 1 callbacks suppressed
[  153.456245][ T6719] loop1: detected capacity change from 0 to 2048
[  153.457138][ T6713] device macsec0 left promiscuous mode
[  153.542378][ T6719] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  153.587356][ T6719] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.737: No space for directory leaf checksum. Please run e2fsck -D.
[  153.605762][ T6719] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.737: Directory block failed checksum
[  153.626781][ T6719] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.737: No space for directory leaf checksum. Please run e2fsck -D.
[  153.644571][ T6719] EXT4-fs error (device loop1): __ext4_find_entry:1698: inode #2: comm syz.1.737: checksumming directory block 0
[  153.801120][ T6729] loop5: detected capacity change from 0 to 4096
[  153.848433][ T6738] ieee802154 phy0 wpan0: encryption failed: -22
[  154.012867][ T6729] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  154.206753][ T6755] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  154.514510][ T6768] FAULT_INJECTION: forcing a failure.
[  154.514510][ T6768] name failslab, interval 1, probability 0, space 0, times 0
[  154.568051][ T6768] CPU: 1 PID: 6768 Comm: syz.1.752 Not tainted syzkaller #0
[  154.575670][ T6768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  154.585882][ T6768] Call Trace:
[  154.589370][ T6768]  <TASK>
[  154.592630][ T6768]  dump_stack_lvl+0x188/0x250
[  154.597806][ T6768]  ? show_regs_print_info+0x20/0x20
[  154.603129][ T6768]  ? load_image+0x410/0x410
[  154.607964][ T6768]  ? __lock_acquire+0x7d40/0x7d40
[  154.613046][ T6768]  should_fail+0x383/0x4b0
[  154.617979][ T6768]  should_failslab+0x5/0x20
[  154.622644][ T6768]  slab_pre_alloc_hook+0x51/0xc0
[  154.627719][ T6768]  kmem_cache_alloc_trace+0x47/0x290
[  154.633141][ T6768]  ? sctp_endpoint_new+0x82/0xa00
[  154.638214][ T6768]  ? lockdep_softirqs_off+0x430/0x430
[  154.643782][ T6768]  sctp_endpoint_new+0x82/0xa00
[  154.648676][ T6768]  ? __raw_spin_lock_init+0x41/0x100
[  154.653994][ T6768]  sctp_init_sock+0x95b/0x11c0
[  154.658813][ T6768]  sctp_v6_init_sock+0x12/0x60
[  154.663713][ T6768]  inet6_create+0xd88/0x1130
[  154.668473][ T6768]  __sock_create+0x473/0x910
[  154.673127][ T6768]  __sys_socket+0xe2/0x170
[  154.678232][ T6768]  __x64_sys_socket+0x76/0x80
[  154.683180][ T6768]  do_syscall_64+0x4c/0xa0
[  154.687949][ T6768]  ? clear_bhb_loop+0x30/0x80
[  154.692769][ T6768]  ? clear_bhb_loop+0x30/0x80
[  154.698187][ T6768]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  154.704845][ T6768] RIP: 0033:0x7f4cc15841d9
[  154.709383][ T6768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  154.729577][ T6768] RSP: 002b:00007f4cbf7dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  154.738317][ T6768] RAX: ffffffffffffffda RBX: 00007f4cc180bfa0 RCX: 00007f4cc15841d9
[  154.747035][ T6768] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a
[  154.755653][ T6768] RBP: 00007f4cc161b888 R08: 0000000000000000 R09: 0000000000000000
[  154.764376][ T6768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  154.772470][ T6768] R13: 00007f4cc180c038 R14: 00007f4cc180bfa0 R15: 00007ffe6fc52178
[  154.780592][ T6768]  </TASK>
[  154.981574][ T6787] loop4: detected capacity change from 0 to 2048
[  155.054204][ T6787] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  155.079317][ T1110] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  155.185226][ T6798] loop6: detected capacity change from 0 to 16
[  155.243867][ T6798] erofs: (device loop6): mounted with root inode @ nid 36.
[  155.298175][ T6802] set match dimension is over the limit!
[  155.346545][ T6804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.767'.
[  155.449427][ T1110] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  155.670097][ T1110] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39
[  155.692630][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.723087][ T1110] usb 3-1: Product: syz
[  155.727627][ T1110] usb 3-1: Manufacturer: syz
[  155.745924][ T1110] usb 3-1: SerialNumber: syz
[  155.772736][ T1110] usb 3-1: config 0 descriptor??
[  155.811571][ T1110] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[  156.449984][ T6830] loop4: detected capacity change from 0 to 16
[  156.458147][ T6832] loop5: detected capacity change from 0 to 64
[  156.480950][ T6830] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  156.695372][ T1110] input: gspca_pac7302 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18
[  156.835863][ T6835] loop4: detected capacity change from 0 to 512
[  156.948749][ T1110] usb 3-1: USB disconnect, device number 6
[  156.991831][ T6835] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  157.652961][ T6844] chnl_net:caif_netlink_parms(): no params data found
[  157.674158][ T6865] loop2: detected capacity change from 0 to 128
[  157.963691][ T6875] loop2: detected capacity change from 0 to 512
[  157.999935][ T6844] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.999977][ T6844] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.001098][ T6844] device bridge_slave_0 entered promiscuous mode
[  158.004039][ T6844] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.004085][ T6844] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.005192][ T6844] device bridge_slave_1 entered promiscuous mode
[  158.012613][ T6875] EXT4-fs (loop2): Ignoring removed nobh option
[  158.021502][ T6875] EXT4-fs (loop2): orphan cleanup on readonly fs
[  158.022533][ T6875] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:984: inode #11: comm syz.2.796: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  158.029984][ T6875] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.2.796: ea_inode dec ref err=-117
[  158.030375][ T6875] EXT4-fs (loop2): 1 orphan inode deleted
[  158.030397][ T6875] EXT4-fs (loop2): mounted filesystem without journal. Opts: acl,min_batch_time=0x000000000000000f,init_itable,nobh,lazytime,acl,init_itable=0x0000000000000002,,errors=continue. Quota mode: none.
[  158.199587][ T6844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  158.293437][ T6844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  158.386128][ T6844] team0: Port device team_slave_0 added
[  158.420319][ T6844] team0: Port device team_slave_1 added
[  158.455852][ T6847] loop5: detected capacity change from 0 to 32768
[  158.476439][ T6844] batman_adv: batadv0: Adding interface: batadv_slave_0
[  158.476458][ T6844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.476484][ T6844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  158.478271][ T6844] batman_adv: batadv0: Adding interface: batadv_slave_1
[  158.478286][ T6844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.478312][ T6844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  158.681956][ T6844] device hsr_slave_0 entered promiscuous mode
[  158.688083][ T6844] device hsr_slave_1 entered promiscuous mode
[  158.689823][ T6844] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  158.689852][ T6844] Cannot create hsr debugfs directory
[  158.780547][ T4399] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.845201][ T4399] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.919518][ T4399] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.014186][ T4399] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.121308][ T6893] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96
[  159.189480][ T1110] Bluetooth: hci0: command 0x0409 tx timeout
[  159.253778][ T6900] loop4: detected capacity change from 0 to 512
[  159.356443][ T6844] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  159.386584][ T4661] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  159.412665][ T6900] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback.
[  159.424461][ T6844] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  159.488292][ T6900] EXT4-fs error (device loop4): ext4_get_first_dir_block:3607: inode #12: block 32: comm syz.4.804: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  159.488531][ T6844] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  159.526198][ T6900] EXT4-fs (loop4): Remounting filesystem read-only
[  159.533778][ T6900] EXT4-fs error (device loop4): ext4_get_first_dir_block:3610: inode #12: comm syz.4.804: directory missing '.'
[  159.550155][ T6900] EXT4-fs (loop4): Remounting filesystem read-only
[  159.560046][ T6908] netlink: 35 bytes leftover after parsing attributes in process `syz.5.806'.
[  159.570684][ T6908] netlink: 16 bytes leftover after parsing attributes in process `syz.5.806'.
[  159.582598][ T6844] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  159.829489][ T4661] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  159.875934][ T4661] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  159.877820][ T6844] 8021q: adding VLAN 0 to HW filter on device bond0
[  159.913111][ T4661] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  159.943774][ T4661] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.969737][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  159.998309][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  159.999814][ T6891] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  160.023838][ T6844] 8021q: adding VLAN 0 to HW filter on device team0
[  160.067617][ T6933] loop2: detected capacity change from 0 to 512
[  160.087202][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  160.109925][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  160.118753][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.125910][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.264968][ T6933] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  160.268362][ T4265] usb 2-1: USB disconnect, device number 8
[  160.326701][ T6931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.814'.
[  160.551308][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  160.583798][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  160.641410][ T6921] loop5: detected capacity change from 0 to 32768
[  160.644583][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  160.656466][ T6944] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  160.670917][    C1] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  160.687696][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.694968][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.721458][ T6948] loop2: detected capacity change from 0 to 512
[  160.737672][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  160.777422][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  160.802778][ T6948] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  160.820660][ T6921] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  160.848184][ T6948] EXT4-fs (loop2): 1 truncate cleaned up
[  160.859708][ T6948] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  160.882203][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  160.925550][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  160.935241][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  160.945016][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  160.964564][ T6844] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  160.975717][ T6844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  160.997584][ T5137] ocfs2: Unmounting device (7,5) on (node local)
[  161.013600][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  161.025532][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  161.071209][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  161.124113][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  161.167804][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  161.202840][ T6965] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  161.259337][ T4233] Bluetooth: hci0: command 0x041b tx timeout
[  161.383538][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  161.639068][ T4399] device hsr_slave_0 left promiscuous mode
[  161.679424][ T4399] device hsr_slave_1 left promiscuous mode
[  161.690201][ T4399] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  161.697664][ T4399] batman_adv: batadv0: Removing interface: batadv_slave_0
[  161.750773][ T4399] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  161.774087][ T4399] batman_adv: batadv0: Removing interface: batadv_slave_1
[  161.783541][ T6993] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  161.848939][ T4399] device bridge_slave_1 left promiscuous mode
[  161.857310][ T4399] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.883446][ T4399] device bridge_slave_0 left promiscuous mode
[  161.904811][ T4399] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.950358][ T4399] device veth1_macvtap left promiscuous mode
[  161.969324][ T4399] device veth0_macvtap left promiscuous mode
[  161.986061][ T4399] device veth1_vlan left promiscuous mode
[  162.003779][ T4399] device veth0_vlan left promiscuous mode
[  162.562305][ T6990] loop4: detected capacity change from 0 to 40427
[  162.605840][ T4399] team0 (unregistering): Port device team_slave_1 removed
[  162.637384][ T4399] team0 (unregistering): Port device team_slave_0 removed
[  162.681240][ T6990] F2FS-fs (loop4): invalid crc value
[  162.711989][ T4399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  162.736382][ T6990] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  162.764809][ T4568] udevd[4568]: symlink '../../loop4' '/dev/disk/by-diskseq/312.tmp-b7:4' failed: Read-only file system
[  162.778297][ T4399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  162.795159][ T4568] udevd[4568]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system
[  162.869911][ T7012] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input19
[  162.927881][ T6990] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  163.013342][ T4568] udevd[4568]: symlink '../../loop4' '/dev/disk/by-diskseq/312.tmp-b7:4' failed: Read-only file system
[  163.058787][ T4568] udevd[4568]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system
[  163.093333][ T4399] bond0 (unregistering): Released all slaves
[  163.157503][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  163.167495][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  163.192696][ T4192] attempt to access beyond end of device
[  163.192696][ T4192] loop4: rw=2049, want=45104, limit=40427
[  163.223683][ T6844] 8021q: adding VLAN 0 to HW filter on device batadv0
[  163.339688][ T4233] Bluetooth: hci0: command 0x040f tx timeout
[  163.395873][ T7037] type: 2297912225 invalid
[  163.575653][ T4568] udevd[4568]: symlink '../../loop4' '/dev/disk/by-diskseq/312.tmp-b7:4' failed: Read-only file system
[  163.605389][ T7048] loop5: detected capacity change from 0 to 256
[  163.668207][ T4568] udevd[4568]: symlink '../../loop4' '/dev/disk/by-diskseq/312.tmp-b7:4' failed: Read-only file system
[  163.795346][ T7048] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  163.822692][ T4569] udevd[4569]: symlink '../../loop5' '/dev/disk/by-diskseq/314.tmp-b7:5' failed: Read-only file system
[  163.937371][ T4568] udevd[4568]: symlink '../../loop5' '/dev/disk/by-diskseq/314.tmp-b7:5' failed: Read-only file system
[  163.959296][ T7048] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  164.076932][ T7048] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  164.146960][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  164.199480][   T26] audit: type=1800 audit(36512357.550:6): pid=7048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.846" name="/" dev="loop5" ino=1048709 res=0 errno=0
[  164.199905][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  164.241094][ T7071] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input20
[  164.288822][ T7074] loop2: detected capacity change from 0 to 512
[  164.320248][ T4568] udevd[4568]: setting mode of /dev/input/mouse1 to 020660 failed: Read-only file system
[  164.364837][ T4568] udevd[4568]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: Read-only file system
[  164.386476][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  164.436185][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  164.533844][ T6844] device veth0_vlan entered promiscuous mode
[  164.550458][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  164.619047][ T7074] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  164.635168][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  164.649009][ T6844] device veth1_vlan entered promiscuous mode
[  164.775087][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  164.799903][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  164.836325][ T6844] device veth0_macvtap entered promiscuous mode
[  164.880599][ T6844] device veth1_macvtap entered promiscuous mode
[  164.924497][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.935458][ T4652] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  164.979289][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.014195][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.014219][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.014241][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.014256][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.014274][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.014288][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.015740][ T6844] batman_adv: batadv0: Interface activated: batadv_slave_0
[  165.016357][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  165.017075][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  165.017669][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  165.018282][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  165.047895][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.047919][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.047930][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.047943][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.047956][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.047969][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.047981][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.048004][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.049368][ T4233] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  165.054592][ T6844] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.054745][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  165.055447][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  165.067064][ T6844] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.067104][ T6844] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.067132][ T6844] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.067159][ T6844] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.209811][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.209837][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.210086][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  165.325807][ T4652] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  165.432067][ T4231] Bluetooth: hci0: command 0x0419 tx timeout
[  165.491359][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.555886][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.571409][ T4652] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  165.585356][ T4652] usb 6-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  165.609690][ T4233] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  165.629181][ T4233] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  165.654028][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  165.741740][ T4233] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  165.769456][ T4652] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  165.777526][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  165.789766][ T4652] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.818689][ T4233] usb 5-1: SerialNumber: syz
[  165.859468][ T4652] usb 6-1: Product: syz
[  165.879491][ T4652] usb 6-1: Manufacturer: syz
[  165.895905][ T7114] loop2: detected capacity change from 0 to 512
[  165.898294][ T4652] usb 6-1: SerialNumber: syz
[  165.945447][ T7114] EXT4-fs (loop2): Ignoring removed oldalloc option
[  166.003042][ T7114] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none.
[  166.152632][ T4233] usb 5-1: 0:2 : does not exist
[  166.209919][ T4652] snd-usb-caiaq 6-1:1.0: invalid EPs
[  166.215962][ T4652] usb 6-1: unable to init card! (ret=-22)
[  166.219699][ T4233] usb 5-1: USB disconnect, device number 9
[  166.253525][ T4652] snd-usb-caiaq: probe of 6-1:1.0 failed with error -22
[  166.425830][ T4652] usb 6-1: USB disconnect, device number 5
[  167.135645][ T7168] loop2: detected capacity change from 0 to 2048
[  167.253720][ T7181] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  167.294071][ T7168] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  167.419860][ T7189] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  167.666174][ T7163] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  167.722167][ T7163] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 578 with error 28
[  167.749916][ T7163] EXT4-fs (loop2): This should not happen!! Data will be lost
[  167.749916][ T7163] 
[  167.786085][ T7163] EXT4-fs (loop2): Total free blocks count 0
[  167.810740][ T7163] EXT4-fs (loop2): Free/Dirty block details
[  167.841542][ T7212] device bond0 entered promiscuous mode
[  167.853131][ T7163] EXT4-fs (loop2): free_blocks=4096
[  167.859394][ T7212] device bond_slave_0 entered promiscuous mode
[  167.865835][ T7212] device bond_slave_1 entered promiscuous mode
[  167.868779][ T7163] EXT4-fs (loop2): dirty_blocks=592
[  167.892098][ T7163] EXT4-fs (loop2): Block reservation details
[  167.907326][ T7212] device batadv0 entered promiscuous mode
[  167.916006][ T7163] EXT4-fs (loop2): i_reserved_data_blocks=37
[  167.947233][ T7212] 8021q: adding VLAN 0 to HW filter on device hsr1
[  167.979359][ T7212] device bond0 left promiscuous mode
[  168.008270][ T7212] device bond_slave_0 left promiscuous mode
[  168.015168][ T7212] device bond_slave_1 left promiscuous mode
[  168.040038][ T7212] device batadv0 left promiscuous mode
[  168.334547][ T7225] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  168.374186][    C0] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  168.411424][ T7232] netlink: 4 bytes leftover after parsing attributes in process `syz.5.895'.
[  168.563352][ T7232] team0: Port device team_slave_1 removed
[  168.642029][ T7246] input: syz1 as /devices/virtual/input/input21
[  168.853506][ T7255] WARNING! power/level is deprecated; use power/control instead
[  168.935554][ T7261] loop5: detected capacity change from 0 to 1024
[  169.117540][ T7271] loop2: detected capacity change from 0 to 64
[  169.248276][ T7261] EXT4-fs (loop5): failed to open journal device unknown-block(0,7) -6
[  169.300527][ T7275] netlink: 16 bytes leftover after parsing attributes in process `syz.7.910'.
[  169.596334][ T7240] loop4: detected capacity change from 0 to 32768
[  169.907274][ T7240] XFS (loop4): Mounting V5 Filesystem
[  170.103352][ T7240] XFS (loop4): Ending clean mount
[  170.208938][ T7240] XFS (loop4): Quotacheck needed: Please wait.
[  170.347678][ T7240] XFS (loop4): Quotacheck: Done.
[  170.435041][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.921'.
[  170.469860][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.921'.
[  170.504546][ T7300] loop7: detected capacity change from 0 to 40427
[  170.570667][ T7300] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  170.572003][ T2288] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  170.578666][ T7300] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  170.667902][ T4192] XFS (loop4): Unmounting Filesystem
[  170.680431][ T7300] F2FS-fs (loop7): invalid crc value
[  170.791221][ T7300] F2FS-fs (loop7): Found nat_bits in checkpoint
[  170.994323][ T7300] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  171.008395][ T7300] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  171.042532][ T2288] usb 2-1: config 1 has an invalid interface number: 3 but max is 0
[  171.059204][ T2288] usb 2-1: config 1 has no interface number 0
[  171.279477][ T2288] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  171.309688][ T2288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.343375][ T2288] usb 2-1: Product: syz
[  171.347951][ T2288] usb 2-1: Manufacturer: syz
[  171.370232][ T2288] usb 2-1: SerialNumber: syz
[  171.514920][ T7350] loop4: detected capacity change from 0 to 16
[  171.636108][ T7350] erofs: (device loop4): mounted with root inode @ nid 36.
[  171.729585][ T2288] usb 2-1: 3:0 : does not exist
[  171.735338][ T2288] usb 2-1: 3:0 : does not exist
[  171.819492][ T2288] usb 2-1: USB disconnect, device number 9
[  171.855322][ T4568] udevd[4568]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  172.244529][ T7384] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.252986][ T2288] kernel write not supported for file /tomoyo/domain_policy (pid: 2288 comm: kworker/1:3)
[  172.468199][ T7396] device syzkaller1 entered promiscuous mode
[  172.477428][ T4203] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  172.488477][ T4203] CPU: 1 PID: 4203 Comm: kworker/u5:7 Not tainted syzkaller #0
[  172.496159][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  172.506426][ T4203] Workqueue: hci2 hci_rx_work
[  172.511247][ T4203] Call Trace:
[  172.514555][ T4203]  <TASK>
[  172.517598][ T4203]  dump_stack_lvl+0x188/0x250
[  172.522318][ T4203]  ? show_regs_print_info+0x20/0x20
[  172.527573][ T4203]  ? load_image+0x410/0x410
[  172.532143][ T4203]  sysfs_create_dir_ns+0x26a/0x290
[  172.537294][ T4203]  ? sysfs_warn_dup+0xa0/0xa0
[  172.542233][ T4203]  ? kthread+0x42e/0x520
[  172.546784][ T4203]  ? do_raw_spin_unlock+0x11d/0x230
[  172.548393][ T7402] loop4: detected capacity change from 0 to 512
[  172.552139][ T4203]  kobject_add_internal+0x5ba/0xcd0
[  172.552225][ T4203]  kobject_add+0x160/0x230
[  172.552250][ T4203]  ? kobject_init+0x1c0/0x1c0
[  172.552272][ T4203]  ? __raw_spin_lock_init+0x41/0x100
[  172.552291][ T4203]  ? klist_children_get+0x50/0x50
[  172.552313][ T4203]  ? get_device_parent+0x121/0x3e0
[  172.552337][ T4203]  device_add+0x470/0x1050
[  172.552355][ T4203]  ? device_initialize+0x2a5/0x4d0
[  172.552378][ T4203]  hci_conn_add_sysfs+0xd1/0x1e0
[  172.552405][ T4203]  le_conn_complete_evt+0xc55/0x14d0
[  172.552437][ T4203]  ? cs_le_create_conn+0x5e0/0x5e0
[  172.552474][ T4203]  ? __mutex_trylock_common+0x15c/0x260
[  172.552503][ T4203]  hci_le_meta_evt+0x285/0x3ca0
[  172.552524][ T4203]  ? hci_event_packet+0x363/0x1310
[  172.552547][ T4203]  ? __lock_acquire+0x7d40/0x7d40
[  172.637619][ T4203]  ? hci_remote_host_features_evt+0x240/0x240
[  172.643721][ T4203]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  172.649385][ T4203]  ? mark_lock+0x94/0x320
[  172.653762][ T4203]  ? mutex_unlock+0x10/0x10
[  172.658308][ T4203]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  172.664500][ T4203]  ? lock_chain_count+0x20/0x20
[  172.669674][ T4203]  ? __rwlock_init+0x140/0x140
[  172.674568][ T4203]  hci_event_packet+0xe0b/0x1310
[  172.679577][ T4203]  ? _raw_spin_unlock+0x40/0x40
[  172.684466][ T4203]  ? rcu_lock_release+0x20/0x20
[  172.689741][ T4203]  ? hci_send_to_monitor+0x9c/0x4a0
[  172.694971][ T4203]  hci_rx_work+0x255/0xa10
[  172.699428][ T4203]  process_one_work+0x867/0xff0
[  172.704523][ T4203]  ? worker_detach_from_pool+0x240/0x240
[  172.710206][ T4203]  ? lockdep_hardirqs_off+0x70/0x100
[  172.715699][ T4203]  ? _raw_spin_lock_irq+0xb7/0xf0
[  172.721278][ T4203]  ? _raw_spin_lock_irqsave+0x100/0x100
[  172.727129][ T4203]  ? wq_worker_running+0x97/0x170
[  172.732292][ T4203]  worker_thread+0xad7/0x12a0
[  172.737278][ T4203]  kthread+0x42e/0x520
[  172.742338][ T4203]  ? rcu_lock_release+0x20/0x20
[  172.747235][ T4203]  ? kthread_blkcg+0xd0/0xd0
[  172.752057][ T4203]  ret_from_fork+0x1f/0x30
[  172.756596][ T4203]  </TASK>
[  172.763979][ T4203] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  172.780326][ T4203] Bluetooth: hci2: failed to register connection device
[  172.955267][ T7402] EXT4-fs (loop4): 1 orphan inode deleted
[  172.978319][ T7402] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  173.236339][ T7416] device syzkaller1 entered promiscuous mode
[  173.355430][ T7424] netlink: 48 bytes leftover after parsing attributes in process `syz.7.948'.
[  173.587882][ T7440] loop7: detected capacity change from 0 to 256
[  173.626564][ T7440] exfat: Deprecated parameter 'utf8'
[  173.670208][ T7440] exfat: Deprecated parameter 'utf8'
[  173.675641][ T7440] exfat: Deprecated parameter 'namecase'
[  173.723572][ T7440] exfat: Deprecated parameter 'namecase'
[  173.774797][ T7440] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  173.899315][ T2288] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  174.309365][ T2288] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  174.339430][ T2288] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  174.439459][ T2288] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  174.469384][ T2288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  174.497888][ T2288] usb 3-1: SerialNumber: syz
[  174.617977][ T7498] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(0.0.0), cmd(9)
[  174.752992][ T7505] loop7: detected capacity change from 0 to 2048
[  174.812084][ T2288] usb 3-1: 0:2 : does not exist
[  174.843038][ T7514] loop5: detected capacity change from 0 to 1024
[  174.853295][ T7505] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  174.871215][ T2288] usb 3-1: USB disconnect, device number 7
[  175.032959][ T7504] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  175.109094][ T7504] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28
[  175.166335][ T7504] EXT4-fs (loop7): This should not happen!! Data will be lost
[  175.166335][ T7504] 
[  175.178116][ T4568] udevd[4568]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  175.217309][ T7504] EXT4-fs (loop7): Total free blocks count 0
[  175.218426][ T1158] hfsplus: b-tree write err: -5, ino 25
[  175.243911][ T7504] EXT4-fs (loop7): Free/Dirty block details
[  175.246555][ T1158] hfsplus: b-tree write err: -5, ino 4
[  175.270190][ T7504] EXT4-fs (loop7): free_blocks=4096
[  175.275409][ T1158] hfsplus: b-tree write err: -5, ino 2
[  175.278699][ T7504] EXT4-fs (loop7): dirty_blocks=512
[  175.305152][ T1158] hfsplus: b-tree write err: -5, ino 26
[  175.308503][ T7504] EXT4-fs (loop7): Block reservation details
[  175.320067][ T7504] EXT4-fs (loop7): i_reserved_data_blocks=32
[  175.578625][ T7544] bridge0: port 3(veth0) entered blocking state
[  175.644822][ T7544] bridge0: port 3(veth0) entered disabled state
[  175.680580][ T7544] device veth0 entered promiscuous mode
[  175.700005][ T7544] bridge0: port 3(veth0) entered blocking state
[  175.706701][ T7544] bridge0: port 3(veth0) entered forwarding state
[  175.813172][ T7551] loop2: detected capacity change from 0 to 256
[  176.064690][ T7558] loop5: detected capacity change from 0 to 2048
[  176.140579][ T7562] tipc: Started in network mode
[  176.176073][ T7562] tipc: Node identity 1000001, cluster identity 4369
[  176.182129][ T7558] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none.
[  176.215090][ T7562] tipc: Node number set to 16777217
[  176.224461][ T7560] loop4: detected capacity change from 0 to 8192
[  176.246142][ T7531] loop1: detected capacity change from 0 to 40427
[  176.248851][ T7566] tipc: New replicast peer: 127.0.0.1
[  176.275119][ T7566] tipc: Enabled bearer <udp:syz0>, priority 10
[  176.322689][ T7560] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  176.351933][ T7531] F2FS-fs (loop1): invalid crc value
[  176.379044][ T7531] F2FS-fs (loop1): Found nat_bits in checkpoint
[  176.439742][ T7560] REISERFS (device loop4): using journaled data mode
[  176.502659][ T7560] reiserfs: using flush barriers
[  176.547610][ T7531] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  176.602046][ T7560] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  176.618136][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.5.995'.
[  176.667406][ T7581] netlink: 12 bytes leftover after parsing attributes in process `syz.5.995'.
[  176.690488][ T7560] REISERFS (device loop4): checking transaction log (loop4)
[  176.710240][ T7581] netlink: 4 bytes leftover after parsing attributes in process `syz.5.995'.
[  176.731850][ T7587] loop7: detected capacity change from 0 to 1024
[  176.746599][ T7581] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  176.756868][ T7581] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  176.766184][ T7581] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  176.775635][ T7581] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  176.791584][ T7560] REISERFS (device loop4): Using r5 hash to sort names
[  176.796735][ T7531] attempt to access beyond end of device
[  176.796735][ T7531] loop1: rw=2049, want=45104, limit=40427
[  176.800142][ T7560] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  176.853067][ T7590] loop2: detected capacity change from 0 to 256
[  176.884475][ T7587] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  176.932899][ T7590] exfat: Deprecated parameter 'utf8'
[  176.938269][ T7590] exfat: Deprecated parameter 'namecase'
[  176.962876][ T7560] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  177.004568][ T5382] attempt to access beyond end of device
[  177.004568][ T5382] loop1: rw=2049, want=45120, limit=40427
[  177.029592][ T7590] exfat: Deprecated parameter 'namecase'
[  177.035736][ T7590] exfat: Deprecated parameter 'utf8'
[  177.071306][ T7590] exfat: Deprecated parameter 'namecase'
[  177.107235][ T7590] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0ab4ecf1, utbl_chksum : 0xe619d30d)
[  177.263801][ T7606] tipc: Started in network mode
[  177.269071][ T7606] tipc: Node identity 1000001, cluster identity 4369
[  177.280171][ T7606] tipc: Node number set to 16777217
[  177.294253][ T7606] tipc: New replicast peer: 127.0.0.1
[  177.304160][ T7606] tipc: Enabled bearer <udp:syz0>, priority 10
[  177.538777][ T7613] loop7: detected capacity change from 0 to 1024
[  177.605588][ T7613] EXT4-fs (loop7): Ignoring removed orlov option
[  177.694367][ T7620] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1008'.
[  177.719953][ T7613] EXT4-fs (loop7): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none.
[  177.767451][ T7618] loop5: detected capacity change from 0 to 2048
[  177.904555][ T7618] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  177.959437][ T4661] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  177.985208][ T7631] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf168f48e, utbl_chksum : 0xe619d30d)
[  178.517772][ T4661] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  178.549294][ T4661] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.557344][ T4661] usb 5-1: Product: syz
[  178.569344][ T4233] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  178.602572][ T4661] usb 5-1: Manufacturer: syz
[  178.617454][ T4661] usb 5-1: SerialNumber: syz
[  178.962898][ T2288] Bluetooth: hci2: command 0x0406 tx timeout
[  178.979501][ T4233] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  179.000216][ T4233] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  179.005021][ T7661] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1020'.
[  179.018997][ T4233] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  179.060050][ T4233] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[  179.076340][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.149732][ T7638] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  179.157032][ T7638] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  179.212131][ T4233] pl2303 2-1:1.0: pl2303 converter detected
[  179.240323][ T4233] usb 2-1: pl2303 converter now attached to ttyUSB0
[  179.290515][ T4661] usb 5-1: USB disconnect, device number 10
[  179.372587][ T7667] EXT4-fs (loop7): Test dummy encryption mode enabled
[  179.390617][ T7667] EXT4-fs (loop7): bad block size 16384
[  179.400000][ T7670] netlink: 212916 bytes leftover after parsing attributes in process `syz.2.1023'.
[  179.552580][ T7638] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0007]: -110
[  179.599295][ T7638] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32
[  179.651236][ T4262] udevd[4262]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  179.670560][ T7638] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32
[  179.691425][ T7682] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  179.709336][ T7638] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [000a]: -32
[  179.749646][ T7638] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32
[  180.077774][ T7706] program syz.4.1032 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  180.099443][ T7638] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32
[  180.219453][ T7638] pl2303 ttyUSB0: error sending break = -32
[  180.251457][ T4233] usb 2-1: USB disconnect, device number 10
[  180.288251][ T4233] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  180.330788][ T4233] pl2303 2-1:1.0: device disconnected
[  180.360005][ T7725] set_capacity_and_notify: 5 callbacks suppressed
[  180.360021][ T7725] loop4: detected capacity change from 0 to 512
[  180.489533][ T1107] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  180.589062][ T7740] smc: net device vlan1 applied user defined pnetid SYZ2
[  180.864552][ T1107] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  180.889414][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.895635][ T7760] loop1: detected capacity change from 0 to 2048
[  180.914428][ T1107] usb 3-1: config 0 descriptor??
[  180.961392][ T1107] cp210x 3-1:0.0: cp210x converter detected
[  180.985221][ T7760] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  181.176110][ T7780] loop5: detected capacity change from 0 to 512
[  181.343305][ T7780] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  181.409486][ T1107] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[  181.672181][ T1107] usb 3-1: cp210x converter now attached to ttyUSB0
[  181.858986][ T7813] loop5: detected capacity change from 0 to 128
[  181.872524][ T4233] usb 3-1: USB disconnect, device number 8
[  181.883575][ T7778] loop1: detected capacity change from 0 to 32768
[  181.907167][ T4233] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  181.940600][ T7813] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  181.958055][ T4233] cp210x 3-1:0.0: device disconnected
[  181.996593][ T4231] Bluetooth: hci0: command 0x0c1a tx timeout
[  182.034706][ T7778] XFS (loop1): Mounting V5 Filesystem
[  182.120365][ T7778] XFS (loop1): Ending clean mount
[  182.155893][ T7813] FAT-fs (loop5): error, corrupted directory (invalid i_start)
[  182.168217][ T7778] XFS (loop1): Quotacheck needed: Please wait.
[  182.179679][ T7813] FAT-fs (loop5): Filesystem has been set read-only
[  182.251053][ T7778] XFS (loop1): Quotacheck: Done.
[  182.272775][ T5137] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  182.394162][ T5382] XFS (loop1): Unmounting Filesystem
[  182.517509][ T7840] loop2: detected capacity change from 0 to 1024
[  182.587036][ T7840] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  182.633702][ T7840] EXT4-fs (loop2): invalid journal inode
[  182.639603][ T7840] EXT4-fs (loop2): can't get journal size
[  182.641464][ T4233] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  182.658606][ T7840] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,sysvgroups,norecovery,abort,nombcache,,errors=continue. Quota mode: writeback.
[  182.865491][ T7847] loop1: detected capacity change from 0 to 512
[  182.999745][ T7847] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  183.065205][ T7847] EXT4-fs warning (device loop1): __ext4_ioctl:888: Setting inode version is not supported with metadata_csum enabled.
[  183.079295][ T4233] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  183.092882][ T4233] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  183.098574][ T7858] loop2: detected capacity change from 0 to 1024
[  183.110836][ T4233] usb 6-1: config 220 has no interface number 2
[  183.117865][ T4233] usb 6-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 1023
[  183.128881][ T4233] usb 6-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  183.142637][ T4233] usb 6-1: config 220 interface 0 has no altsetting 0
[  183.150091][ T4233] usb 6-1: config 220 interface 76 has no altsetting 0
[  183.158696][ T4233] usb 6-1: config 220 interface 1 has no altsetting 0
[  183.289901][ T7858] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,block_validity,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback.
[  183.399635][ T4233] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  183.399669][ T4233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.399691][ T4233] usb 6-1: Product: syz
[  183.399707][ T4233] usb 6-1: Manufacturer: syz
[  183.399723][ T4233] usb 6-1: SerialNumber: syz
[  183.483713][ T7858] EXT4-fs (loop2): Online defrag not supported with bigalloc
[  183.785522][ T4233] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  183.795076][ T4233] usb 6-1: No valid video chain found.
[  183.812871][ T4233] usb 6-1: selecting invalid altsetting 0
[  183.931470][ T7883] loop1: detected capacity change from 0 to 32768
[  183.941627][ T4233] usb 6-1: selecting invalid altsetting 0
[  183.947395][ T4233] usbtest: probe of 6-1:220.1 failed with error -22
[  183.956786][ T4233] usb 6-1: USB disconnect, device number 6
[  184.008944][ T7883] JBD2: Ignoring recovery information on journal
[  184.019268][ T1110] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  184.045105][ T7883] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  184.070793][ T2288] Bluetooth: hci0: command 0x0406 tx timeout
[  184.149359][ T4231] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  184.257394][ T5382] ocfs2: Unmounting device (7,1) on (node local)
[  184.347082][ T7901] loop5: detected capacity change from 0 to 128
[  184.409476][ T4231] usb 3-1: Using ep0 maxpacket: 8
[  184.504502][ T7903] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  184.535268][ T7903] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  184.579425][ T4231] usb 3-1: config 0 has an invalid interface number: 143 but max is 0
[  184.588793][ T4231] usb 3-1: config 0 has no interface number 0
[  184.596529][ T4231] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[  184.607022][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.625186][ T4231] usb 3-1: config 0 descriptor??
[  184.651284][ T7908] hugetlbfs: Bad value '0x00000000ffffffff' for mount option 'gid'
[  184.651284][ T7908] 
[  184.659457][ T1110] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  184.689781][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.714920][ T1110] usb 5-1: Product: syz
[  184.726203][ T1110] usb 5-1: Manufacturer: syz
[  184.731970][ T1110] usb 5-1: SerialNumber: syz
[  184.839765][ T4231] viperboard 3-1:0.143: version 0.00 found at bus 003 address 009
[  184.885508][ T4231] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100
[  184.894923][ T4231] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5
[  184.897687][ T7891] ucsi_ccg 0-0008: failed to get FW build information
[  185.035835][ T7891] ucsi_ccg 0-0008: ucsi_ccg_init failed - -110
[  185.049427][ T7891] ucsi_ccg: probe of 0-0008 failed with error -110
[  185.061657][ T7891] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08
[  185.089451][ T4231] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  185.106757][ T4661] usb 3-1: USB disconnect, device number 9
[  185.219529][ T1110] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  185.299331][ T4233] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  185.479478][ T1110] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -71
[  185.492241][ T1110] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  185.502048][ T4231] usb 6-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice= 0.00
[  185.514477][ T1110] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  185.523417][ T4231] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.533257][ T1110] lan78xx: probe of 5-1:1.0 failed with error -71
[  185.541175][ T4231] usb 6-1: config 0 descriptor??
[  185.559852][ T1110] usb 5-1: USB disconnect, device number 11
[  185.591092][ T4231] gspca_main: STV06xx-2.14.0 probing 046d:0840
[  185.679458][ T4233] usb 2-1: config 150 has an invalid interface number: 204 but max is 2
[  185.688265][ T4233] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3
[  185.698205][ T4233] usb 2-1: config 150 has no interface number 0
[  185.705237][ T4233] usb 2-1: config 150 interface 204 has no altsetting 0
[  185.892755][ T4233] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  185.905099][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.916756][ T7932] set_capacity_and_notify: 1 callbacks suppressed
[  185.916774][ T7932] loop2: detected capacity change from 0 to 256
[  185.919927][ T4233] usb 2-1: Product: syz
[  185.933962][ T4233] usb 2-1: Manufacturer: syz
[  185.944505][ T4233] usb 2-1: SerialNumber: syz
[  185.949487][ T7932] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  185.975542][ T7932] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  185.995871][ T7932] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xda9016d0, utbl_chksum : 0xe619d30d)
[  186.045236][ T4231] gspca_stv06xx: I2C: Read error writing address: -71
[  186.108140][ T7936] loop4: detected capacity change from 0 to 1024
[  186.132024][ T4231] usb 6-1: USB disconnect, device number 7
[  186.231876][ T4233] xr_serial 2-1:150.204: skipping garbage
[  186.248297][ T4233] xr_serial 2-1:150.204: xr_serial converter detected
[  186.271606][ T7938] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  186.300258][ T7938] CIFS: Attempting to mount \\127.0.0.1\test
[  186.539716][ T4265] Bluetooth: hci2: command 0x0406 tx timeout
[  186.550036][ T1110] Bluetooth: hci4: command 0x0406 tx timeout
[  186.753867][ T7962] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input22
[  186.885675][ T7957] loop4: detected capacity change from 0 to 32768
[  186.959776][ T7957] (syz.4.1099,7957,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  186.976294][ T7957] (syz.4.1099,7957,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  186.979364][ T4233] xr_serial ttyUSB0: Failed to set reg 0x0d: -71
[  186.998541][ T4233] xr_serial: probe of ttyUSB0 failed with error -71
[  187.009807][ T7957] JBD2: Ignoring recovery information on journal
[  187.011115][ T4233] usb 2-1: USB disconnect, device number 11
[  187.048212][ T4233] xr_serial 2-1:150.204: device disconnected
[  187.078957][ T7957] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  187.081692][ T7938] CIFS: VFS: cifs_mount failed w/return code = -112
[  187.243413][ T7977] netlink: 'syz.2.1104': attribute type 8 has an invalid length.
[  187.268311][ T7977] netlink: 'syz.2.1104': attribute type 4 has an invalid length.
[  187.284885][ T7977] netlink: 'syz.2.1104': attribute type 7 has an invalid length.
[  187.302315][ T7977] netlink: 197204 bytes leftover after parsing attributes in process `syz.2.1104'.
[  187.339048][ T4192] ocfs2: Unmounting device (7,4) on (node local)
[  187.571130][ T7991] Bluetooth: hci0: load_link_keys: too big key_count value 59392
[  187.819540][ T4233] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  188.076597][ T7983] loop4: detected capacity change from 0 to 40427
[  188.129721][ T7983] F2FS-fs (loop4): Corrupted extension count (33554469 + 1 > 64)
[  188.161241][ T7983] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  188.183325][ T7983] F2FS-fs (loop4): invalid crc value
[  188.199643][ T7983] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  188.229965][ T4233] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  188.255724][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.284898][ T1158] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.297780][ T7983] F2FS-fs (loop4): recover fsync data on readonly fs
[  188.303377][ T4233] usb 3-1: config 0 descriptor??
[  188.325238][ T7983] F2FS-fs (loop4): Try to recover 2th superblock, ret: -30
[  188.333739][ T7983] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  188.349359][ T2288] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  188.371402][ T4233] gspca_main: cpia1-2.14.0 probing 0813:0001
[  188.381384][ T7983] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=470000, run fsck to fix.
[  188.398340][ T1158] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.488454][ T1158] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.615434][ T1158] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.629927][ T2288] usb 6-1: Using ep0 maxpacket: 16
[  188.779619][ T2288] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  188.809321][ T4233] cpia1 3-1:0.0: unexpected state after lo power cmd: 00
[  188.832681][ T2288] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  188.849824][ T8013] input: syz0 as /devices/virtual/input/input23
[  188.875074][ T8005] chnl_net:caif_netlink_parms(): no params data found
[  189.034485][ T2288] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  189.043023][ T8018] loop4: detected capacity change from 0 to 512
[  189.059522][ T2288] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.069703][ T8018] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  189.074040][ T2288] usb 6-1: Product: syz
[  189.101882][ T2288] usb 6-1: Manufacturer: syz
[  189.107257][ T2288] usb 6-1: SerialNumber: syz
[  189.201737][ T8005] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.208883][ T8005] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.219556][ T4233] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0)
[  189.248004][ T8005] device bridge_slave_0 entered promiscuous mode
[  189.284980][ T8005] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.292810][ T8005] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.334093][ T8005] device bridge_slave_1 entered promiscuous mode
[  189.384951][ T8005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  189.399573][ T8005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  189.438161][ T4661] usb 3-1: USB disconnect, device number 10
[  189.473305][ T2288] usb 6-1: 0:2 : does not exist
[  189.494445][ T8005] team0: Port device team_slave_0 added
[  189.501372][ T2288] usb 6-1: USB disconnect, device number 8
[  189.517598][ T8005] team0: Port device team_slave_1 added
[  189.518888][ T4436] udevd[4436]: setting owner of /dev/bus/usb/006/008 to uid=0, gid=0 failed: No such file or directory
[  189.558161][ T8005] batman_adv: batadv0: Adding interface: batadv_slave_0
[  189.569436][ T8005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.619840][ T8005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  189.633384][ T8005] batman_adv: batadv0: Adding interface: batadv_slave_1
[  189.641227][ T8005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.668203][ T8005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  189.773836][ T4568] udevd[4568]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  189.797945][ T8005] device hsr_slave_0 entered promiscuous mode
[  189.821851][ T8005] device hsr_slave_1 entered promiscuous mode
[  189.828898][ T8005] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  189.841906][ T8005] Cannot create hsr debugfs directory
[  189.893670][ T8045] loop4: detected capacity change from 0 to 128
[  190.191597][ T8058] loop4: detected capacity change from 0 to 128
[  190.308170][ T8058] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  190.341981][ T1158] device hsr_slave_0 left promiscuous mode
[  190.376708][ T1158] device hsr_slave_1 left promiscuous mode
[  190.386569][ T8063] overlayfs: failed to verify origin (/syz5, ino=147, err=-116)
[  190.396069][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  190.404637][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0
[  190.412619][ T8063] overlayfs: failed to verify upper root origin
[  190.422147][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  190.434744][ T8058] FAT-fs (loop4): error, corrupted directory (invalid i_start)
[  190.440896][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1
[  190.468288][ T1158] device bridge_slave_1 left promiscuous mode
[  190.469334][ T8058] FAT-fs (loop4): Filesystem has been set read-only
[  190.489697][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.524611][ T1158] device bridge_slave_0 left promiscuous mode
[  190.534718][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.561562][ T1158] device veth1_macvtap left promiscuous mode
[  190.580912][ T1158] device veth0_macvtap left promiscuous mode
[  190.587993][ T4192] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  190.597912][ T1158] device veth1_vlan left promiscuous mode
[  190.598054][ T1158] device veth0_vlan left promiscuous mode
[  190.619462][ T1107] Bluetooth: hci1: command 0x0409 tx timeout
[  190.854839][ T8078] loop2: detected capacity change from 0 to 4096
[  191.035377][ T8078] ntfs3: loop2: failed to convert "0080" to cp852
[  191.066105][ T8078] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  191.127687][ T8078] ntfs3: loop2: failed to convert name for inode 1e.
[  191.232955][ T1158] team0 (unregistering): Port device team_slave_1 removed
[  191.275282][ T1158] team0 (unregistering): Port device team_slave_0 removed
[  191.311867][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  191.342266][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  191.436892][ T1158] bond0 (unregistering): Released all slaves
[  191.562439][ T8005] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  191.625608][ T8005] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  191.670781][ T8005] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  191.705138][ T8005] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  191.744130][ T8108] Context (ID=0x0) not attached to queue pair (handle=0x4d6:0x0)
[  191.792321][ T8106] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  191.969033][ T8005] 8021q: adding VLAN 0 to HW filter on device bond0
[  192.017857][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  192.031852][ T4233] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  192.045387][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  192.078777][ T8005] 8021q: adding VLAN 0 to HW filter on device team0
[  192.108738][ T8119] device syzkaller1 entered promiscuous mode
[  192.143811][ T4233] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  192.201145][ T8117] loop2: detected capacity change from 0 to 4096
[  192.303991][ T8117] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[  192.325237][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  192.334760][ T8117] EXT4-fs (loop2): Unrecognized mount option "seclabel" or missing value
[  192.341522][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  192.378098][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.385390][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  192.427435][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  192.441425][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  192.450894][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.458458][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  192.481198][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  192.492261][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  192.510991][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  192.570662][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  192.610792][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  192.640154][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  192.679916][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  192.711860][ T4233] Bluetooth: hci1: command 0x041b tx timeout
[  192.761626][ T8005] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  192.806388][ T8005] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  192.844509][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  192.858582][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  192.875421][ T4661] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  192.886333][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  192.907414][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  192.921328][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  192.930247][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  193.079932][ T8156] loop5: detected capacity change from 0 to 512
[  193.139717][ T4661] usb 5-1: Using ep0 maxpacket: 16
[  193.199669][ T8156] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  193.228336][ T8156] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  193.259410][ T4661] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  193.287205][ T8156] EXT4-fs (loop5): 1 truncate cleaned up
[  193.293361][ T8156] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,nomblk_io_submit,,errors=continue. Quota mode: none.
[  193.294086][ T4661] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  193.379097][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  193.387203][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  193.416499][ T8005] 8021q: adding VLAN 0 to HW filter on device batadv0
[  193.449474][ T4661] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  193.486426][ T4661] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  193.525522][ T4661] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.558753][ T4661] usb 5-1: config 0 descriptor??
[  193.658007][ T8171] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  193.697382][ T8171] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  193.951367][ T8185] loop5: detected capacity change from 0 to 64
[  194.055433][ T4661] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000A/input/input24
[  194.100730][ T8158] loop2: detected capacity change from 0 to 32768
[  194.168131][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  194.171783][ T4661] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  194.196058][ T4436]  loop2: p1 p3 < >
[  194.211931][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  194.232406][ T8158]  loop2: p1 p3 < >
[  194.281510][ T8191] device syz_tun entered promiscuous mode
[  194.398512][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  194.400202][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  194.400937][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  194.401427][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  194.412360][ T8005] device veth0_vlan entered promiscuous mode
[  194.443910][ T8005] device veth1_vlan entered promiscuous mode
[  194.569033][ T4661] usb 5-1: USB disconnect, device number 12
[  194.620491][ T8005] device veth0_macvtap entered promiscuous mode
[  194.629786][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  194.638068][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  194.671723][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  194.701577][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  194.707989][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[  194.730605][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  194.753397][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  194.776368][ T8207] loop5: detected capacity change from 0 to 1024
[  194.784038][ T2288] Bluetooth: hci1: command 0x040f tx timeout
[  194.801342][ T8005] device veth1_macvtap entered promiscuous mode
[  194.913675][ T8207] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv0,max_dir_size_kb=0x0000000000000004,noquota,delalloc,noblock_validity,nodioread_nolock,errors=remount-ro,. Quota mode: none.
[  194.950094][ T8005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.059233][ T8005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.108120][ T8207] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #15: comm syz.5.1162: lblock 0 mapped to illegal pblock 0 (length 3)
[  195.129396][ T8005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.168164][ T8005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.173188][ T8207] EXT4-fs (loop5): Remounting filesystem read-only
[  195.209082][ T8005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.273252][ T8005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.316994][ T8005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.352771][ T8005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.407779][ T8005] batman_adv: batadv0: Interface activated: batadv_slave_0
[  195.432651][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  195.451207][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  195.519969][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  195.566075][ T8005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.618512][ T8005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.653963][ T8225] loop4: detected capacity change from 0 to 4096
[  195.696707][ T8225] NILFS (loop4): invalid segment: Checksum error in segment payload
[  195.706269][ T8005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.739208][ T8225] NILFS (loop4): trying rollback from an earlier position
[  195.750362][ T8005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.783750][ T8005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.812753][ T8225] NILFS (loop4): recovery complete
[  195.839185][ T8005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.855505][ T8226] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  195.869241][ T8005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.919201][ T8005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.955122][ T8225] NILFS (loop4): error -2 preparing GC: cannot delete virtual blocks from DAT file
[  195.971810][ T8005] batman_adv: batadv0: Interface activated: batadv_slave_1
[  196.019899][ T8005] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  196.019948][ T8005] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  196.019976][ T8005] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  196.020004][ T8005] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  196.024308][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  196.024862][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  196.197191][ T8226] NILFS (loop4): writing node/leaf block does not appear in b-tree (ino=3) at key=0, level=0
[  196.197333][ T8226] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=3)
[  196.206387][ T8226] Remounting filesystem read-only
[  196.218124][ T3053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.218149][ T3053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.218368][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  196.229629][ T4192] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  196.478686][ T8239] using random self ethernet address
[  196.499936][ T8212] loop7: detected capacity change from 0 to 32768
[  196.507121][ T8239] using random host ethernet address
[  196.628809][ T8212] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  196.655485][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.673842][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.695961][ T8212] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  196.697904][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  196.822043][ T4569] udevd[4569]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  196.863234][ T4568] udevd[4568]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  196.874150][ T2288] Bluetooth: hci1: command 0x0419 tx timeout
[  196.932511][ T8212] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  196.962267][ T1107] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  196.978188][ T1107] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  197.150527][ T1107] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 172ms
[  197.212269][ T1107] gfs2: fsid=syz:syz.0: jid=0: Done
[  197.230945][ T8212] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  198.187492][ T8256] loop5: detected capacity change from 0 to 32768
[  198.281768][ T8256] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1184 (8256)
[  198.372185][ T8256] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  198.430199][ T8256] BTRFS info (device loop5): setting nodatacow, compression disabled
[  198.477606][ T8291] loop2: detected capacity change from 0 to 512
[  198.504355][ T8256] BTRFS info (device loop5): setting datasum, datacow enabled
[  198.514999][ T8256] BTRFS info (device loop5): force clearing of disk cache
[  198.519394][ T2288] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  198.522925][ T8256] BTRFS info (device loop5): enabling ssd optimizations
[  198.538760][ T8256] BTRFS info (device loop5): using spread ssd allocation scheme
[  198.549914][ T8256] BTRFS info (device loop5): turning on sync discard
[  198.586429][ T8256] BTRFS info (device loop5): turning off barriers
[  198.608122][ T8256] BTRFS info (device loop5): setting nodatacow, compression disabled
[  198.652590][ T8291] EXT4-fs (loop2): Ignoring removed bh option
[  198.661032][ T8296] FAULT_INJECTION: forcing a failure.
[  198.661032][ T8296] name failslab, interval 1, probability 0, space 0, times 0
[  198.684367][ T8256] BTRFS info (device loop5): not using ssd optimizations
[  198.709449][ T8256] BTRFS info (device loop5): not using spread ssd allocation scheme
[  198.736641][ T8296] CPU: 0 PID: 8296 Comm: syz.8.1186 Not tainted syzkaller #0
[  198.744601][ T8296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  198.755208][ T8296] Call Trace:
[  198.758521][ T8296]  <TASK>
[  198.761474][ T8296]  dump_stack_lvl+0x188/0x250
[  198.766365][ T8296]  ? show_regs_print_info+0x20/0x20
[  198.771599][ T8296]  ? load_image+0x410/0x410
[  198.776209][ T8296]  ? __might_sleep+0xf0/0xf0
[  198.780985][ T8296]  ? __lock_acquire+0x7d40/0x7d40
[  198.786138][ T8296]  should_fail+0x383/0x4b0
[  198.790872][ T8296]  should_failslab+0x5/0x20
[  198.795692][ T8296]  slab_pre_alloc_hook+0x51/0xc0
[  198.801011][ T8296]  kmem_cache_alloc_trace+0x47/0x290
[  198.806894][ T8296]  ? call_usermodehelper_setup+0x8a/0x260
[  198.812654][ T8296]  call_usermodehelper_setup+0x8a/0x260
[  198.818341][ T8296]  ? __request_module+0x980/0x980
[  198.823405][ T8296]  __request_module+0x3ea/0x980
[  198.826969][ T8256] BTRFS info (device loop5): using free space tree
[  198.828486][ T8296]  ? lockdep_hardirqs_on+0x94/0x140
[  198.835287][ T8256] BTRFS info (device loop5): has skinny extents
[  198.840433][ T8296]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  198.840468][ T8296]  ? umd_cleanup+0x110/0x110
[  198.840485][ T8296]  ? __wake_up_common+0x5b/0x4d0
[  198.840517][ T8296]  ? remove_wait_queue+0x120/0x120
[  198.840538][ T8296]  ? _raw_read_unlock+0x40/0x40
[  198.840559][ T8296]  ? __lock_acquire+0x7d40/0x7d40
[  198.840582][ T8296]  netlink_create+0x1b5/0x510
[  198.840608][ T8296]  __sock_create+0x473/0x910
[  198.840637][ T8296]  __sys_socket+0xe2/0x170
[  198.840662][ T8296]  __x64_sys_socket+0x76/0x80
[  198.840684][ T8296]  do_syscall_64+0x4c/0xa0
[  198.840701][ T8296]  ? clear_bhb_loop+0x30/0x80
[  198.840720][ T8296]  ? clear_bhb_loop+0x30/0x80
[  198.840741][ T8296]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  198.840761][ T8296] RIP: 0033:0x7f0a3b5fb1d9
[  198.840780][ T8296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  198.840796][ T8296] RSP: 002b:00007f0a39853028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  198.840820][ T8296] RAX: ffffffffffffffda RBX: 00007f0a3b882fa0 RCX: 00007f0a3b5fb1d9
[  198.840835][ T8296] RDX: 000000000000001f RSI: 0000000000000003 RDI: 0000000000000010
[  198.914886][ T8301] loop7: detected capacity change from 0 to 4096
[  198.920019][ T8296] RBP: 00007f0a3b692888 R08: 0000000000000000 R09: 0000000000000000
[  198.920039][ T8296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  198.920050][ T8296] R13: 00007f0a3b883038 R14: 00007f0a3b882fa0 R15: 00007ffed3103708
[  198.920079][ T8296]  </TASK>
[  198.941536][ T8291] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  198.962016][ T8301] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512)
[  199.037897][ T8291] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  199.060034][ T2288] usb 5-1: not running at top speed; connect to a high speed hub
[  199.092758][ T8291] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1183: Corrupt directory, running e2fsck is recommended
[  199.152721][ T8291] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  199.169424][ T2288] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  199.180076][ T2288] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  199.202766][ T2288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.215296][ T8291] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.1183: corrupted in-inode xattr
[  199.236690][ T8291] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.1183: couldn't read orphan inode 15 (err -117)
[  199.302083][ T2288] usb 5-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  199.316241][ T2288] usb 5-1: No streaming interface found for terminal 2.
[  199.329705][ T8291] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,grpquota,jqfmt=vfsold,nolazytime,grpjquota=.errors=continue,resuid=0x0000000000000000,bh,noload,,,errors=continue. Quota mode: writeback.
[  199.408352][ T8291] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  199.460276][ T8336] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  199.495640][ T8336] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  199.514392][ T8256] BTRFS info (device loop5): clearing free space tree
[  199.544081][ T8256] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  199.587564][ T8291] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  199.588277][ T8256] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  199.601552][ T5422] usb 5-1: USB disconnect, device number 13
[  199.619642][ T8336] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1183: Corrupt directory, running e2fsck is recommended
[  199.703727][ T8291] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1183: Corrupt directory, running e2fsck is recommended
[  199.729959][ T8256] BTRFS info (device loop5): creating free space tree
[  199.758994][ T8256] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  199.777093][ T8345] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  199.790068][ T8256] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  199.801111][ T8345] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  199.818550][ T8345] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1183: Corrupt directory, running e2fsck is recommended
[  199.862803][ T8350] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  199.959412][ T2288] usb 9-1: new full-speed USB device number 2 using dummy_hcd
[  200.021686][ T8359] loop7: detected capacity change from 0 to 1024
[  200.439557][ T2288] usb 9-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  200.471158][ T2288] usb 9-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  200.513198][ T2288] usb 9-1: config 0 interface 0 has no altsetting 0
[  200.536669][ T2288] usb 9-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  200.574659][ T2288] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.617606][ T2288] usb 9-1: config 0 descriptor??
[  200.659557][ T8344] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  200.872508][ T4233] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  201.122927][ T2288] dragonrise 0003:0079:0006.000B: unknown main item tag 0x7
[  201.141190][ T2288] dragonrise 0003:0079:0006.000B: unknown global tag 0xc
[  201.158962][ T2288] dragonrise 0003:0079:0006.000B: item 0 2 1 12 parsing failed
[  201.167800][ T2288] dragonrise 0003:0079:0006.000B: parse failed
[  201.175484][ T2288] dragonrise: probe of 0003:0079:0006.000B failed with error -22
[  201.249494][ T4231] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  201.274098][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1206'.
[  201.295545][ T4233] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11
[  201.317085][ T4233] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  201.350785][ T4233] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  201.355651][ T4194] usb 9-1: USB disconnect, device number 2
[  201.392081][ T4233] usb 5-1: config 1 interface 0 has no altsetting 0
[  201.416853][ T4233] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  201.446935][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.472464][ T8425] loop7: detected capacity change from 0 to 164
[  201.516286][ T4233] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  201.709395][ T4231] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  201.728614][ T4231] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  201.752627][ T4231] usb 3-1: config 0 interface 0 has no altsetting 0
[  201.762785][ T4233] scsi host1: usb-storage 5-1:1.0
[  201.776229][ T4231] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00
[  201.795959][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.798748][ T8440] input: syz0 as /devices/virtual/input/input25
[  201.866861][ T4231] usb 3-1: config 0 descriptor??
[  201.872807][ T8442] loop7: detected capacity change from 0 to 1024
[  201.964513][ T4654] usb 5-1: USB disconnect, device number 14
[  202.003466][ T8442] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  202.068832][ T8453] FAULT_INJECTION: forcing a failure.
[  202.068832][ T8453] name failslab, interval 1, probability 0, space 0, times 0
[  202.073877][ T8442] EXT4-fs error (device loop7): ext4_map_blocks:741: inode #15: block 3: comm syz.7.1212: lblock 3 mapped to illegal pblock 3 (length 3)
[  202.103420][ T8453] CPU: 1 PID: 8453 Comm: syz.8.1214 Not tainted syzkaller #0
[  202.110855][ T8453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  202.115374][ T8442] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  202.121551][ T8453] Call Trace:
[  202.121564][ T8453]  <TASK>
[  202.121571][ T8453]  dump_stack_lvl+0x188/0x250
[  202.121602][ T8453]  ? show_regs_print_info+0x20/0x20
[  202.121623][ T8453]  ? load_image+0x410/0x410
[  202.121644][ T8453]  ? __might_sleep+0xf0/0xf0
[  202.121664][ T8453]  ? __lock_acquire+0x7d40/0x7d40
[  202.121692][ T8453]  should_fail+0x383/0x4b0
[  202.121721][ T8453]  should_failslab+0x5/0x20
[  202.121739][ T8453]  slab_pre_alloc_hook+0x51/0xc0
[  202.121758][ T8453]  ? __se_sys_userfaultfd+0xc2/0x380
[  202.121780][ T8453]  kmem_cache_alloc+0x3d/0x280
[  202.121802][ T8453]  __se_sys_userfaultfd+0xc2/0x380
[  202.121827][ T8453]  do_syscall_64+0x4c/0xa0
[  202.121846][ T8453]  ? clear_bhb_loop+0x30/0x80
[  202.121868][ T8453]  ? clear_bhb_loop+0x30/0x80
[  202.121891][ T8453]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  202.121913][ T8453] RIP: 0033:0x7f0a3b5fb1d9
[  202.121932][ T8453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  202.121950][ T8453] RSP: 002b:00007f0a39853028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143
[  202.121973][ T8453] RAX: ffffffffffffffda RBX: 00007f0a3b882fa0 RCX: 00007f0a3b5fb1d9
[  202.255151][ T8453] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000801
[  202.263139][ T8453] RBP: 00007f0a3b692888 R08: 0000000000000000 R09: 0000000000000000
[  202.271129][ T8453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  202.279129][ T8453] R13: 00007f0a3b883038 R14: 00007f0a3b882fa0 R15: 00007ffed3103708
[  202.287128][ T8453]  </TASK>
[  202.298862][ T8442] EXT4-fs (loop7): This should not happen!! Data will be lost
[  202.298862][ T8442] 
[  202.301651][ T8456] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1212: bg 0: block 112: padding at end of block bitmap is not set
[  202.337954][ T8456] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 8 with error 28
[  202.389465][ T8456] EXT4-fs (loop7): This should not happen!! Data will be lost
[  202.389465][ T8456] 
[  202.423630][ T8456] EXT4-fs (loop7): Total free blocks count 0
[  202.435827][ T8456] EXT4-fs (loop7): Free/Dirty block details
[  202.448433][ T8456] EXT4-fs (loop7): free_blocks=0
[  202.454149][ T8456] EXT4-fs (loop7): dirty_blocks=64
[  202.466276][ T8456] EXT4-fs (loop7): Block reservation details
[  202.475651][ T8456] EXT4-fs (loop7): i_reserved_data_blocks=4
[  202.593412][ T8132] EXT4-fs error (device loop7): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:8: lblock 8 mapped to illegal pblock 8 (length 8)
[  202.683720][ T8469] device team_slave_0 entered promiscuous mode
[  202.690585][ T8469] device team_slave_1 entered promiscuous mode
[  202.724769][ T8469] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  202.797476][ T8474] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  202.919498][ T4231] sony 0003:054C:09CC.000C: Retrying DualShock 4 get calibration report (0x02) request
[  202.937483][ T8483] FAULT_INJECTION: forcing a failure.
[  202.937483][ T8483] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  202.978060][ T8483] CPU: 1 PID: 8483 Comm: syz.7.1221 Not tainted syzkaller #0
[  202.985510][ T8483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  202.996790][ T8483] Call Trace:
[  203.000123][ T8483]  <TASK>
[  203.003189][ T8483]  dump_stack_lvl+0x188/0x250
[  203.007916][ T8483]  ? show_regs_print_info+0x20/0x20
[  203.013353][ T8483]  ? load_image+0x410/0x410
[  203.017917][ T8483]  ? __lock_acquire+0x7d40/0x7d40
[  203.023354][ T8483]  should_fail+0x383/0x4b0
[  203.028044][ T8483]  prepare_alloc_pages+0x1e3/0x5b0
[  203.033211][ T8483]  __alloc_pages+0x11b/0x480
[  203.037888][ T8483]  ? zone_statistics+0x170/0x170
[  203.042878][ T8483]  ? count_memcg_event_mm+0x324/0x370
[  203.048380][ T8483]  ? remove_device_exclusive_entry+0xac0/0xac0
[  203.054679][ T8483]  alloc_pages_vma+0x2bc/0x790
[  203.059502][ T8483]  handle_mm_fault+0x23be/0x4440
[  203.064501][ T8483]  ? get_page+0xe0/0xe0
[  203.068721][ T8483]  ? vmacache_find+0x238/0x590
[  203.073527][ T8483]  ? find_vma+0xd2/0x230
[  203.077811][ T8483]  do_user_addr_fault+0x494/0xc90
[  203.083062][ T8483]  exc_page_fault+0x60/0x100
[  203.087869][ T8483]  ? clear_bhb_loop+0x30/0x80
[  203.092599][ T8483]  asm_exc_page_fault+0x22/0x30
[  203.097600][ T8483] RIP: 0033:0x7fb403f8174b
[  203.102171][ T8483] Code: 00 00 00 48 8d 3d 1d b1 1a 00 48 89 c1 31 c0 e8 bb 2d ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 51 b1 1a 00 48 89 34 24 48 8b 14 24 48 8b
[  203.122258][ T8483] RSP: 002b:00007fb402316fa0 EFLAGS: 00010206
[  203.128371][ T8483] RAX: 0000000000000000 RBX: 00007fb404347fa0 RCX: 0000000000000000
[  203.136393][ T8483] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000
[  203.144584][ T8483] RBP: 00007fb404157888 R08: 0000000000000000 R09: 0000000000000000
[  203.153039][ T8483] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  203.161229][ T8483] R13: 00007fb404348038 R14: 00007fb404347fa0 R15: 00007ffc9e9b15e8
[  203.169328][ T8483]  </TASK>
[  203.183379][ T4231] sony 0003:054C:09CC.000C: Failed to get calibration data from Dualshock 4
[  203.212865][ T4231] sony 0003:054C:09CC.000C: hidraw0: USB HID vb6.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.2-1/input0
[  203.225918][ T8488] 8021q: adding VLAN 0 to HW filter on device bond1
[  203.239957][ T8488] bridge0: port 4(bond1) entered blocking state
[  203.246477][ T8488] bridge0: port 4(bond1) entered disabled state
[  203.253315][ T4231] sony 0003:054C:09CC.000C: failed to claim input
[  203.277299][ T4231] usb 3-1: USB disconnect, device number 11
[  203.288589][ T8488] device bond1 entered promiscuous mode
[  203.302271][ T8488] bridge0: port 4(bond1) entered blocking state
[  203.308792][ T8488] bridge0: port 4(bond1) entered forwarding state
[  203.376668][ T8483] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  203.397717][ T8505] fido_id[8505]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  203.584213][ T8512] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1227'.
[  203.834531][  T154] bridge0: port 4(bond1) entered disabled state
[  203.979362][ T4231] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  204.005706][ T8539] loop4: detected capacity change from 0 to 128
[  204.074857][ T8539] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  204.121142][ T8539] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  204.235494][ T8513] loop8: detected capacity change from 0 to 32768
[  204.251977][ T4231] usb 6-1: Using ep0 maxpacket: 32
[  204.346092][ T8513] XFS (loop8): Mounting V5 Filesystem
[  204.399723][ T4231] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  204.420838][ T4231] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  204.451716][ T4231] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.489799][ T4654] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  204.498354][ T8513] XFS (loop8): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  204.498878][ T4231] usb 6-1: config 0 descriptor??
[  204.536436][ T8513] XFS (loop8): Starting recovery (logdev: internal)
[  204.576611][ T8565] loop4: detected capacity change from 0 to 256
[  204.587883][ T8513] XFS (loop8): Ending recovery (logdev: internal)
[  204.600561][ T4231] hub 6-1:0.0: USB hub found
[  204.606614][ T8513] XFS (loop8): AG 0: Corrupt btree 5 pointer at level 1 index 0.
[  204.616673][ T8513] XFS (loop8): Failed to initialize disk quotas.
[  204.676135][ T8005] XFS (loop8): Unmounting Filesystem
[  204.729188][ T4654] usb 3-1: Using ep0 maxpacket: 16
[  204.825207][ T4231] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  204.871577][ T4654] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  204.885875][ T4654] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.897006][ T4654] usb 3-1: config 0 descriptor??
[  204.942495][ T4654] gspca_main: sonixj-2.14.0 probing 0471:0327
[  205.302022][ T4231] hid-generic 0003:046D:C31C.000D: item fetching failed at offset 0/1
[  205.318656][ T4231] hid-generic: probe of 0003:046D:C31C.000D failed with error -22
[  205.412053][ T8575] loop4: detected capacity change from 0 to 40427
[  205.455602][ T8592] FAULT_INJECTION: forcing a failure.
[  205.455602][ T8592] name failslab, interval 1, probability 0, space 0, times 0
[  205.471246][ T8592] CPU: 1 PID: 8592 Comm: syz.8.1247 Not tainted syzkaller #0
[  205.479000][ T8592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  205.480249][ T8575] F2FS-fs (loop4): invalid crc value
[  205.489285][ T8592] Call Trace:
[  205.489302][ T8592]  <TASK>
[  205.489312][ T8592]  dump_stack_lvl+0x188/0x250
[  205.489343][ T8592]  ? show_regs_print_info+0x20/0x20
[  205.489363][ T8592]  ? load_image+0x410/0x410
[  205.489391][ T8592]  ? rcu_lock_release+0x5/0x20
[  205.489418][ T8592]  should_fail+0x383/0x4b0
[  205.525705][ T8592]  should_failslab+0x5/0x20
[  205.530265][ T8592]  slab_pre_alloc_hook+0x51/0xc0
[  205.535519][ T8592]  kmem_cache_alloc_trace+0x47/0x290
[  205.541055][ T8592]  ? proc_self_get_link+0xe1/0x170
[  205.546213][ T8592]  proc_self_get_link+0xe1/0x170
[  205.551203][ T8592]  ? proc_setup_self+0x2d0/0x2d0
[  205.556364][ T8592]  pick_link+0x701/0xdc0
[  205.560914][ T8592]  step_into+0xac6/0xcd0
[  205.565210][ T8592]  ? set_root+0x3a0/0x3a0
[  205.569584][ T8592]  ? walk_component+0x1b6/0x460
[  205.574584][ T8592]  link_path_walk+0x688/0xde0
[  205.579778][ T8592]  ? handle_lookup_down+0x130/0x130
[  205.585388][ T8592]  path_openat+0x28e/0x2fb0
[  205.590588][ T8592]  ? __kasan_slab_alloc+0xa9/0xc0
[  205.595894][ T8592]  ? do_filp_open+0x400/0x400
[  205.601149][ T8592]  do_filp_open+0x1df/0x400
[  205.605982][ T8592]  ? vfs_tmpfile+0x300/0x300
[  205.611347][ T8592]  ? _raw_spin_unlock+0x24/0x40
[  205.617983][ T8592]  ? alloc_fd+0x59e/0x650
[  205.622499][ T8592]  do_sys_openat2+0x14b/0x500
[  205.627346][ T8592]  ? __lock_acquire+0x7d40/0x7d40
[  205.632436][ T8592]  ? do_sys_open+0xe0/0xe0
[  205.637072][ T8592]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  205.643217][ T8592]  ? lock_chain_count+0x20/0x20
[  205.648259][ T8592]  __x64_sys_openat+0x135/0x160
[  205.653167][ T8592]  do_syscall_64+0x4c/0xa0
[  205.657849][ T8592]  ? clear_bhb_loop+0x30/0x80
[  205.662689][ T8592]  ? clear_bhb_loop+0x30/0x80
[  205.667451][ T8592]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  205.673396][ T8592] RIP: 0033:0x7f0a3b5bba0e
[  205.677863][ T8592] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  205.697804][ T8592] RSP: 002b:00007f0a39852ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  205.706665][ T8592] RAX: ffffffffffffffda RBX: 00007f0a398536c0 RCX: 00007f0a3b5bba0e
[  205.714822][ T8592] RDX: 0000000000000002 RSI: 00007f0a39852f90 RDI: ffffffffffffff9c
[  205.722841][ T8592] RBP: 00007f0a3b692888 R08: 0000000000000000 R09: 0000000000000000
[  205.730948][ T8592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  205.739051][ T8592] R13: 00007f0a3b883038 R14: 00007f0a3b882fa0 R15: 00007ffed3103708
[  205.747439][ T8592]  </TASK>
[  205.782152][ T8575] F2FS-fs (loop4): Found nat_bits in checkpoint
[  205.899002][ T8575] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0
[  205.900327][ T1110] usb 6-1: USB disconnect, device number 9
[  205.943719][ T8575] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  206.019641][ T8575] attempt to access beyond end of device
[  206.019641][ T8575] loop4: rw=2049, want=45104, limit=40427
[  206.049348][ T4654] gspca_sonixj: reg_w1 err -71
[  206.079581][ T4654] sonixj: probe of 3-1:0.0 failed with error -71
[  206.104136][ T4654] usb 3-1: USB disconnect, device number 12
[  206.769306][ T4654] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  206.861821][ T8634] loop2: detected capacity change from 0 to 40427
[  206.911134][ T8634] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  206.920834][ T8634] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  206.931213][ T8634] F2FS-fs (loop2): invalid crc value
[  206.940582][ T8634] F2FS-fs (loop2): Found nat_bits in checkpoint
[  206.988443][ T8634] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  206.996102][ T8634] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  207.019427][ T4654] usb 6-1: Using ep0 maxpacket: 32
[  207.115471][   T26] audit: type=1804 audit(36512400.460:7): pid=8634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1256" name="/newroot/291/file0/file0" dev="loop2" ino=10 res=1 errno=0
[  207.139167][   T26] audit: type=1800 audit(36512400.460:8): pid=8634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1256" name="file0" dev="loop2" ino=10 res=0 errno=0
[  207.149456][ T4654] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  207.188667][ T4654] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  207.208299][ T4654] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  207.234690][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  207.245607][ T4654] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  207.252072][ T8651] loop8: detected capacity change from 0 to 2048
[  207.265864][ T4654] usb 6-1: config 0 interface 0 has no altsetting 0
[  207.352376][ T8651] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found!
[  207.407908][ T8651] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  207.420451][ T8655] loop7: detected capacity change from 0 to 1164
[  207.459919][ T4654] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  207.498847][ T4654] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  207.537889][ T4654] usb 6-1: Product: syz
[  207.543878][ T4654] usb 6-1: Manufacturer: syz
[  207.550071][ T4654] usb 6-1: SerialNumber: syz
[  207.570632][ T4654] usb 6-1: config 0 descriptor??
[  207.647414][ T4654] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  207.648136][ T8664] vxcan1: tx address claim with different name
[  207.809731][ T4654] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  207.920628][ T8628] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  207.945204][ T4231] usb 6-1: USB disconnect, device number 10
[  207.986525][ T4231] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  208.171917][ T8681] loop7: detected capacity change from 0 to 4096
[  208.264647][ T8681] EXT4-fs (loop7): Ignoring removed nobh option
[  208.286123][ T8681] EXT4-fs (loop7): Test dummy encryption mode enabled
[  208.297557][ T8681] EXT4-fs (loop7): Ignoring removed bh option
[  208.335506][ T8681] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,nobh,nodioread_nolock,test_dummy_encryption,lazytime,nojournal_checksum,minixdf,bh,,errors=continue. Quota mode: writeback.
[  208.656333][ T8686] loop4: detected capacity change from 0 to 32768
[  208.778677][ T8716] Illegal XDP return value 4294967274, expect packet loss!
[  208.834178][ T8686] XFS (loop4): Mounting V5 Filesystem
[  208.938628][ T8686] XFS (loop4): Ending clean mount
[  209.151666][ T8736] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22)
[  209.282493][ T8726] loop2: detected capacity change from 0 to 32768
[  209.315883][ T4192] XFS (loop4): Unmounting Filesystem
[  209.442139][ T8726] XFS (loop2): Mounting V5 Filesystem
[  209.661147][ T8726] XFS (loop2): Ending clean mount
[  209.777705][ T8768] loop7: detected capacity change from 0 to 256
[  209.812922][ T8761] loop8: detected capacity change from 0 to 4096
[  209.858616][ T4189] XFS (loop2): Unmounting Filesystem
[  210.255051][ T8778] loop8: detected capacity change from 0 to 512
[  210.342287][ T8782] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1310'.
[  210.424734][ T8778] EXT4-fs (loop8): external journal device major/minor numbers have changed
[  210.448191][   T26] audit: type=1326 audit(36512403.790:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8783 comm="syz.4.1313" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b96f2f1d9 code=0x0
[  210.645966][ T8778] EXT4-fs (loop8): failed to open journal device unknown-block(238,156) -6
[  210.758791][ T8800] ip_tables: iptables: counters copy to user failed while replacing table
[  210.871302][ T8802] loop2: detected capacity change from 0 to 1024
[  210.910854][ T8802] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[  210.931143][ T8802] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  210.954609][ T8808] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  210.971779][ T8802] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[  210.989020][ T8802] System zones: 0-1, 3-36
[  211.019782][ T8802] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,acl,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  211.079369][ T8802] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback.
[  211.174052][ T8816] loop7: detected capacity change from 0 to 128
[  211.358476][ T8816] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  211.428787][ T8816] hpfs: filesystem error: improperly stopped
[  211.459190][ T8816] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  211.469255][ T8816] hpfs: You really don't want any checks? You are crazy...
[  211.476588][ T8816] hpfs: Code page index out of array
[  211.519325][ T8816] hpfs: code page support is disabled
[  211.526328][ T8816] hpfs: hpfs_map_4sectors(): unaligned read
[  211.561754][ T8816] hpfs: hpfs_map_4sectors(): unaligned read
[  211.567879][ T8816] hpfs: filesystem error: unable to find root dir
[  211.821523][ T8833] loop7: detected capacity change from 0 to 128
[  211.916879][ T8833] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2
[  212.105154][ T8817] loop8: detected capacity change from 0 to 32768
[  212.209269][ T4231] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  212.227635][ T8817] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 scanned by syz.8.1321 (8817)
[  212.280189][ T8817] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm
[  212.310762][ T8817] BTRFS info (device loop8): setting nodatacow, compression disabled
[  212.339437][ T8817] BTRFS info (device loop8): setting datasum, datacow enabled
[  212.357862][ T8817] BTRFS info (device loop8): force clearing of disk cache
[  212.377767][ T8822] loop4: detected capacity change from 0 to 40427
[  212.394811][ T8817] BTRFS info (device loop8): turning on sync discard
[  212.414918][ T8817] BTRFS warning (device loop8): excessive commit interval 43283
[  212.427511][ T8817] BTRFS info (device loop8): enabling ssd optimizations
[  212.436323][ T8817] BTRFS info (device loop8): using spread ssd allocation scheme
[  212.444460][ T8817] BTRFS info (device loop8): not using ssd optimizations
[  212.459274][ T8817] BTRFS info (device loop8): not using spread ssd allocation scheme
[  212.475366][ T8817] BTRFS info (device loop8): using free space tree
[  212.489179][ T8817] BTRFS info (device loop8): has skinny extents
[  212.529417][ T4231] usb 6-1: Using ep0 maxpacket: 16
[  212.559298][ T8822] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1ffff
[  212.587249][ T8822] F2FS-fs (loop4): invalid crc value
[  212.625808][ T8824] loop2: detected capacity change from 0 to 40427
[  212.641571][ T8822] F2FS-fs (loop4): Found nat_bits in checkpoint
[  212.669647][ T4231] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  212.700081][ T4231] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  212.755603][ T8824] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  212.798327][ T8824] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  212.858822][ T8824] F2FS-fs (loop2): invalid crc value
[  212.882283][ T8817] BTRFS info (device loop8): clearing free space tree
[  212.886574][ T8822] F2FS-fs (loop4): Start checkpoint disabled!
[  212.892726][ T8817] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  212.937539][ T8824] F2FS-fs (loop2): Found nat_bits in checkpoint
[  212.969749][ T4231] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  212.988563][ T8822] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  212.995541][ T8817] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  213.027553][ T4231] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.051290][ T4231] usb 6-1: Product: syz
[  213.055697][ T4231] usb 6-1: Manufacturer: syz
[  213.075605][ T4231] usb 6-1: SerialNumber: syz
[  213.107432][ T8817] BTRFS info (device loop8): creating free space tree
[  213.137745][ T8817] BTRFS info (device loop8): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  213.170364][ T8817] BTRFS info (device loop8): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  213.188640][ T8824] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  213.206182][ T8824] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  213.253448][ T8882] EXT4-fs (loop7): Ignoring removed bh option
[  213.288438][ T8882] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  213.392515][ T8882] EXT4-fs (loop7): 1 truncate cleaned up
[  213.409250][ T8882] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,mb_optimize_scan=0x0000000000000000,bh,noload,data_err=ignore,usrjquota=,min_batch_time=0x000000000000ccff,,errors=continue. Quota mode: none.
[  213.429031][ T8817] BTRFS info (device loop8): disk added /dev/nullb0
[  213.479559][ T4231] usb 6-1: 0:2 : does not exist
[  213.506124][ T4231] usb 6-1: USB disconnect, device number 11
[  213.535847][ T8882] EXT4-fs warning (device loop7): ext4_block_to_path:107: block 1129335124 > max in inode 18
[  213.792978][ T4568] udevd[4568]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  214.631786][ T8132] attempt to access beyond end of device
[  214.631786][ T8132] loop4: rw=2049, want=40976, limit=40427
[  214.852273][ T8939] device syzkaller1 entered promiscuous mode
[  215.418156][ T8956] set_capacity_and_notify: 1 callbacks suppressed
[  215.418173][ T8956] loop8: detected capacity change from 0 to 4096
[  215.448074][ T8958] loop7: detected capacity change from 0 to 4096
[  215.486581][ T8956] EXT4-fs (loop8): Test dummy encryption mode enabled
[  215.527726][ T8956] EXT4-fs (loop8): Test dummy encryption mode enabled
[  215.549420][ T8958] ntfs3: loop7: Failed to load $Extend.
[  215.582515][ T8956] EXT4-fs (loop8): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,usrquota,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback.
[  215.599591][ T4658] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  215.828875][ T8920] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  216.013794][ T8977] loop7: detected capacity change from 0 to 4096
[  216.026308][ T8974] loop2: detected capacity change from 0 to 8192
[  216.052887][ T8977] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512)
[  216.116276][ T8974] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  216.125682][ T8920] usb 6-1: Using ep0 maxpacket: 16
[  216.143135][ T8974] REISERFS (device loop2): using ordered data mode
[  216.152237][ T8974] reiserfs: using flush barriers
[  216.169049][ T8974] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  216.188000][ T8974] REISERFS (device loop2): checking transaction log (loop2)
[  216.259645][ T4658] usb 5-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  216.260276][ T8977] ntfs3: loop7: Mark volume as dirty due to NTFS errors
[  216.274886][ T4658] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.278500][ T8920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  216.286442][ T4658] usb 5-1: Product: syz
[  216.311039][ T4658] usb 5-1: Manufacturer: syz
[  216.323676][ T4658] usb 5-1: SerialNumber: syz
[  216.363253][ T8920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  216.373171][ T4655] usb 9-1: new full-speed USB device number 3 using dummy_hcd
[  216.400868][ T4658] ums-karma 5-1:1.0: USB Mass Storage device detected
[  216.403911][ T8920] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  216.447487][ T4658] ums-karma 5-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller)
[  216.447487][ T4658]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  216.466381][ T8920] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  216.485294][ T8920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.505077][ T8920] usb 6-1: config 0 descriptor??
[  216.547257][ T8974] REISERFS (device loop2): Using tea hash to sort names
[  216.557497][ T8974] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  216.611380][ T3053] ntfs3: loop7: ino=5, directory corrupted
[  216.618554][ T3053] ntfs3: loop7: ino=1e, Internal error
[  216.643322][ T3053] ntfs3: loop7: ntfs3_write_inode r=1e failed, -22.
[  216.699478][ T4655] usb 9-1: not running at top speed; connect to a high speed hub
[  216.819996][ T4655] usb 9-1: config 1 has an invalid descriptor of length 66, skipping remainder of the config
[  216.841574][ T4655] usb 9-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[  216.863500][ T4655] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.885622][ T4658] ums-karma: probe of 5-1:1.0 failed with error -5
[  216.901007][ T4658] usb 5-1: USB disconnect, device number 15
[  216.932460][ T4655] usb 9-1: Found UVC 1.00 device <unnamed> (0000:0000)
[  216.964532][ T4655] usb 9-1: No streaming interface found for terminal 6.
[  217.018119][ T8920] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000E/input/input27
[  217.157640][ T8920] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  217.162395][ T4658] usb 9-1: USB disconnect, device number 3
[  217.361534][ T4654] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  217.370112][ T4656] usb 6-1: USB disconnect, device number 12
[  217.619461][ T4654] usb 3-1: Using ep0 maxpacket: 16
[  217.740037][ T4654] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  217.766866][ T4654] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  217.799433][ T4654] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  217.835950][ T4654] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  217.915276][ T4654] usb 3-1: config 0 interface 0 has no altsetting 0
[  217.943493][ T4654] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[  217.973352][ T4654] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.986331][ T9056] sd 0:0:1:0: PR command failed: 2
[  217.995435][ T9056] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  218.013520][ T4654] usb 3-1: config 0 descriptor??
[  218.018910][ T9056] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  218.202705][ T9068] loop5: detected capacity change from 0 to 2048
[  218.501659][ T9079] program syz.4.1382 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  218.517788][ T9082] loop5: detected capacity change from 0 to 256
[  218.523543][ T4654] logitech-djreceiver 0003:046D:C53A.000F: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.2-1/input0
[  218.567498][ T9083] device syzkaller1 entered promiscuous mode
[  218.781634][   T21] usb 3-1: USB disconnect, device number 13
[  218.818875][ T9094] loop4: detected capacity change from 0 to 128
[  218.916244][ T9094] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8)
[  218.923988][ T9090] fido_id[9090]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  218.935371][ T9094] FAT-fs (loop4): Filesystem has been set read-only
[  218.966869][ T9094] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522)
[  219.032808][ T9101] loop7: detected capacity change from 0 to 256
[  219.177678][   T26] audit: type=1800 audit(36512412.520:10): pid=9101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1389" name="bus" dev="loop7" ino=1048770 res=0 errno=0
[  219.376653][ T9115] loop4: detected capacity change from 0 to 16
[  219.454780][ T9115] erofs: (device loop4): mounted with root inode @ nid 36.
[  219.545080][ T9115] attempt to access beyond end of device
[  219.545080][ T9115] loop4: rw=524288, want=34359738368, limit=16
[  219.596183][ T9121] loop7: detected capacity change from 0 to 4096
[  219.615109][ T9115] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 24575 of nid 89
[  219.629327][ T9115] erofs: (device loop4): z_erofs_readahead: readahead error at page 5 @ nid 89
[  219.638323][ T9115] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 20479 of nid 89
[  219.696330][ T9121] EXT4-fs (loop7): Test dummy encryption mode enabled
[  219.747269][ T9121] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback.
[  219.749301][ T9115] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 89
[  219.772325][ T9115] attempt to access beyond end of device
[  219.772325][ T9115] loop4: rw=524288, want=56, limit=16
[  219.787747][ T9115] attempt to access beyond end of device
[  219.787747][ T9115] loop4: rw=0, want=34359738368, limit=16
[  219.802278][   T26] audit: type=1800 audit(36512413.150:11): pid=9115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1394" name="file2" dev="loop4" ino=89 res=0 errno=0
[  220.233641][ T9152] device ip6_vti0 entered promiscuous mode
[  220.506786][ T9179] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  220.572735][ T9180] ==================================================================
[  220.572840][ T9180] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1ba8/0x25d0
[  220.572870][ T9180] Write of size 4 at addr ffffc900045d1fc0 by task syz.2.1417/9180
[  220.572886][ T9180] 
[  220.572892][ T9180] CPU: 1 PID: 9180 Comm: syz.2.1417 Not tainted syzkaller #0
[  220.572910][ T9180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  220.572921][ T9180] Call Trace:
[  220.572928][ T9180]  <TASK>
[  220.572936][ T9180]  dump_stack_lvl+0x188/0x250
[  220.572960][ T9180]  ? show_regs_print_info+0x20/0x20
[  220.572981][ T9180]  ? load_image+0x410/0x410
[  220.572997][ T9180]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  220.573019][ T9180]  ? drm_fb_helper_setcmap+0x2974/0x2b30
[  220.573042][ T9180]  print_address_description+0x60/0x2d0
[  220.573062][ T9180]  ? sys_imageblit+0x1ba8/0x25d0
[  220.573081][ T9180]  kasan_report+0xdf/0x130
[  220.573104][ T9180]  ? sys_imageblit+0x1ba8/0x25d0
[  220.573130][ T9180]  sys_imageblit+0x1ba8/0x25d0
[  220.573166][ T9180]  ? sys_copyarea+0x2530/0x2530
[  220.573197][ T9180]  ? __lock_acquire+0x7d40/0x7d40
[  220.573223][ T9180]  drm_fb_helper_sys_imageblit+0x2e/0x510
[  220.573255][ T9180]  ? drm_fbdev_fb_imageblit+0x184/0x200
[  220.573281][ T9180]  cw_putcs+0x15ef/0x18a0
[  220.573303][ T9180]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  220.573358][ T9180]  ? cw_clear+0x250/0x250
[  220.573388][ T9180]  ? drm_fb_helper_set_suspend_unlocked+0x190/0x190
[  220.573419][ T9180]  fbcon_putcs+0x2c8/0x450
[  220.573442][ T9180]  ? cw_clear+0x250/0x250
[  220.573463][ T9180]  do_update_region+0x4e5/0x640
[  220.573496][ T9180]  ? hide_cursor+0x320/0x320
[  220.573518][ T9180]  ? fbcon_set_palette+0x54a/0x660
[  220.573542][ T9180]  redraw_screen+0xa2c/0x1000
[  220.573561][ T9180]  ? _raw_spin_unlock+0x40/0x40
[  220.573587][ T9180]  ? clear_buffer_attributes+0x320/0x320
[  220.573613][ T9180]  ? tty_do_resize+0xeb/0x160
[  220.573638][ T9180]  vc_do_resize+0x122c/0x17b0
[  220.573683][ T9180]  ? lock_chain_count+0x20/0x20
[  220.573705][ T9180]  ? vc_resize+0x50/0x50
[  220.573728][ T9180]  ? __phys_addr+0xb6/0x170
[  220.573745][ T9180]  ? __kasan_kmalloc_large+0x86/0xa0
[  220.573766][ T9180]  ? crc32_le_base+0x59e/0xd60
[  220.573791][ T9180]  fbcon_do_set_font+0xc6e/0x1cd0
[  220.573833][ T9180]  ? fbcon_blank+0xa70/0xa70
[  220.573851][ T9180]  con_font_op+0xace/0xdc0
[  220.573877][ T9180]  ? reset_palette+0xdc0/0xdc0
[  220.573900][ T9180]  ? __might_fault+0xb7/0x110
[  220.573923][ T9180]  ? __lock_acquire+0x7d40/0x7d40
[  220.573953][ T9180]  ? __might_fault+0xb3/0x110
[  220.573974][ T9180]  ? _copy_from_user+0x111/0x170
[  220.573995][ T9180]  vt_ioctl+0x1618/0x1ca0
[  220.574018][ T9180]  ? __vt_event_wait+0x260/0x260
[  220.574054][ T9180]  ? tty_jobctrl_ioctl+0x164/0xae0
[  220.574079][ T9180]  tty_ioctl+0x848/0xc30
[  220.574098][ T9180]  ? security_file_ioctl+0x7c/0xa0
[  220.574118][ T9180]  ? tty_get_icount+0xa0/0xa0
[  220.574139][ T9180]  __se_sys_ioctl+0xfa/0x170
[  220.574160][ T9180]  do_syscall_64+0x4c/0xa0
[  220.574181][ T9180]  ? clear_bhb_loop+0x30/0x80
[  220.574200][ T9180]  ? clear_bhb_loop+0x30/0x80
[  220.574222][ T9180]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  220.574242][ T9180] RIP: 0033:0x7f9b8d51a1d9
[  220.574271][ T9180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  220.574289][ T9180] RSP: 002b:00007f9b8b772028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  220.574313][ T9180] RAX: ffffffffffffffda RBX: 00007f9b8d7a1fa0 RCX: 00007f9b8d51a1d9
[  220.574328][ T9180] RDX: 0000200000000000 RSI: 0000000000004b72 RDI: 0000000000000004
[  220.574343][ T9180] RBP: 00007f9b8d5b1888 R08: 0000000000000000 R09: 0000000000000000
[  220.574356][ T9180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  220.574370][ T9180] R13: 00007f9b8d7a2038 R14: 00007f9b8d7a1fa0 R15: 00007ffcca3010f8
[  220.574401][ T9180]  </TASK>
[  220.574409][ T9180] 
[  220.574415][ T9180] 
[  220.574420][ T9180] Memory state around the buggy address:
[  220.574430][ T9180]  ffffc900045d1e80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  220.574444][ T9180]  ffffc900045d1f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  220.574458][ T9180] >ffffc900045d1f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  220.574468][ T9180]                                            ^
[  220.574480][ T9180]  ffffc900045d2000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  220.574494][ T9180]  ffffc900045d2080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  220.574503][ T9180] ==================================================================
[  220.574511][ T9180] Disabling lock debugging due to kernel taint
[  220.586004][ T9180] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  220.586020][ T9180] CPU: 1 PID: 9180 Comm: syz.2.1417 Tainted: G    B             syzkaller #0
[  220.586042][ T9180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  220.586053][ T9180] Call Trace:
[  220.586060][ T9180]  <TASK>
[  220.586067][ T9180]  dump_stack_lvl+0x188/0x250
[  220.586092][ T9180]  ? show_regs_print_info+0x20/0x20
[  220.586111][ T9180]  ? load_image+0x410/0x410
[  220.586131][ T9180]  panic+0x2f8/0x850
[  220.586157][ T9180]  ? bpf_jit_dump+0xd0/0xd0
[  220.586175][ T9180]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  220.586195][ T9180]  ? _raw_spin_unlock+0x40/0x40
[  220.586215][ T9180]  ? sys_imageblit+0x1ba8/0x25d0
[  220.586234][ T9180]  check_panic_on_warn+0x80/0xa0
[  220.586261][ T9180]  ? sys_imageblit+0x1ba8/0x25d0
[  220.586280][ T9180]  end_report+0x6d/0xf0
[  220.586299][ T9180]  kasan_report+0x102/0x130
[  220.586318][ T9180]  ? sys_imageblit+0x1ba8/0x25d0
[  220.586339][ T9180]  sys_imageblit+0x1ba8/0x25d0
[  220.586365][ T9180]  ? sys_copyarea+0x2530/0x2530
[  220.586389][ T9180]  ? __lock_acquire+0x7d40/0x7d40
[  220.586413][ T9180]  drm_fb_helper_sys_imageblit+0x2e/0x510
[  220.586434][ T9180]  ? drm_fbdev_fb_imageblit+0x184/0x200
[  220.586453][ T9180]  cw_putcs+0x15ef/0x18a0
[  220.586471][ T9180]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  220.586496][ T9180]  ? cw_clear+0x250/0x250
[  220.586515][ T9180]  ? drm_fb_helper_set_suspend_unlocked+0x190/0x190
[  220.586534][ T9180]  fbcon_putcs+0x2c8/0x450
[  220.586551][ T9180]  ? cw_clear+0x250/0x250
[  220.586567][ T9180]  do_update_region+0x4e5/0x640
[  220.586589][ T9180]  ? hide_cursor+0x320/0x320
[  220.586609][ T9180]  ? fbcon_set_palette+0x54a/0x660
[  220.586630][ T9180]  redraw_screen+0xa2c/0x1000
[  220.586649][ T9180]  ? _raw_spin_unlock+0x40/0x40
[  220.586671][ T9180]  ? clear_buffer_attributes+0x320/0x320
[  220.586693][ T9180]  ? tty_do_resize+0xeb/0x160
[  220.586715][ T9180]  vc_do_resize+0x122c/0x17b0
[  220.586744][ T9180]  ? lock_chain_count+0x20/0x20
[  220.586772][ T9180]  ? vc_resize+0x50/0x50
[  220.586793][ T9180]  ? __phys_addr+0xb6/0x170
[  220.586810][ T9180]  ? __kasan_kmalloc_large+0x86/0xa0
[  220.586831][ T9180]  ? crc32_le_base+0x59e/0xd60
[  220.586854][ T9180]  fbcon_do_set_font+0xc6e/0x1cd0
[  220.586883][ T9180]  ? fbcon_blank+0xa70/0xa70
[  220.586900][ T9180]  con_font_op+0xace/0xdc0
[  220.586923][ T9180]  ? reset_palette+0xdc0/0xdc0
[  220.586944][ T9180]  ? __might_fault+0xb7/0x110
[  220.586964][ T9180]  ? __lock_acquire+0x7d40/0x7d40
[  220.586989][ T9180]  ? __might_fault+0xb3/0x110
[  220.587009][ T9180]  ? _copy_from_user+0x111/0x170
[  220.587030][ T9180]  vt_ioctl+0x1618/0x1ca0
[  220.587049][ T9180]  ? __vt_event_wait+0x260/0x260
[  220.587072][ T9180]  ? tty_jobctrl_ioctl+0x164/0xae0
[  220.587094][ T9180]  tty_ioctl+0x848/0xc30
[  220.587114][ T9180]  ? security_file_ioctl+0x7c/0xa0
[  220.587135][ T9180]  ? tty_get_icount+0xa0/0xa0
[  220.587155][ T9180]  __se_sys_ioctl+0xfa/0x170
[  220.587174][ T9180]  do_syscall_64+0x4c/0xa0
[  220.587193][ T9180]  ? clear_bhb_loop+0x30/0x80
[  220.587213][ T9180]  ? clear_bhb_loop+0x30/0x80
[  220.587234][ T9180]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  220.587266][ T9180] RIP: 0033:0x7f9b8d51a1d9
[  220.587284][ T9180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  220.587301][ T9180] RSP: 002b:00007f9b8b772028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  220.587324][ T9180] RAX: ffffffffffffffda RBX: 00007f9b8d7a1fa0 RCX: 00007f9b8d51a1d9
[  220.587340][ T9180] RDX: 0000200000000000 RSI: 0000000000004b72 RDI: 0000000000000004
[  220.587354][ T9180] RBP: 00007f9b8d5b1888 R08: 0000000000000000 R09: 0000000000000000
[  220.587367][ T9180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  220.587380][ T9180] R13: 00007f9b8d7a2038 R14: 00007f9b8d7a1fa0 R15: 00007ffcca3010f8
[  220.587402][ T9180]  </TASK>
[  220.587759][ T9180] Kernel Offset: disabled
[  220.588270][ T9180] BUG: unable to handle page fault for address: ffffc900045d1fc0
[  220.588279][ T9180] #PF: supervisor write access in kernel mode
[  220.588286][ T9180] #PF: error_code(0x0002) - not-present page
[  220.588292][ T9180] PGD 17800067 P4D 17800067 PUD 179d4067 PMD 2010a067 PTE 0
[  220.588315][ T9180] Oops: 0002 [#1] PREEMPT SMP KASAN
[  220.588325][ T9180] CPU: 1 PID: 9180 Comm: syz.2.1417 Tainted: G    B             syzkaller #0
[  220.588337][ T9180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  220.588343][ T9180] RIP: 0010:sys_imageblit+0x1891/0x25d0
[  220.588357][ T9180] Code: 46 ff c1 e8 07 21 d0 8b 9c 84 c0 00 00 00 4c 8b 7c 24 30 4b 8d 3c 37 48 89 f8 48 c1 e8 03 0f b6 04 08 84 c0 0f 85 f8 02 00 00 <43> 89 1c 37 0f b6 46 ff c1 e8 06 21 d0 8b 9c 84 c0 00 00 00 4b 8d
[  220.588366][ T9180] RSP: 0018:ffffc90002ede640 EFLAGS: 00010082
[  220.588375][ T9180] RAX: 0000000000000000 RBX: 0000000000000000 RCX: dffffc0000000000
[  220.588383][ T9180] RDX: 0000000000000001 RSI: ffff8881475a4e19 RDI: ffffc900045d1fc0
[  220.588391][ T9180] RBP: ffffc90002ede7a8 R08: ffff888023f5bb80 R09: 0000000000000003
[  220.588398][ T9180] R10: 0000000000000004 R11: 0000000000000002 R12: 0000000000000010
[  220.588405][ T9180] R13: 1ffff11028eb49c3 R14: 0000000000000000 R15: ffffc900045d1fc0
[  220.588413][ T9180] FS:  00007f9b8b7726c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  220.588423][ T9180] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  220.588431][ T9180] CR2: ffffc900045d1fc0 CR3: 0000000067eb9000 CR4: 00000000003506e0
[  220.588442][ T9180] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  220.588449][ T9180] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  220.588456][ T9180] Call Trace:
[  220.588460][ T9180]  <TASK>
[  220.588468][ T9180]  ? sys_copyarea+0x2530/0x2530
[  220.588481][ T9180]  ? fb_set_var+0x448/0xfb0
[  220.588494][ T9180]  drm_fb_helper_sys_imageblit+0x2e/0x510
[  220.588506][ T9180]  ? drm_fbdev_fb_imageblit+0x184/0x200
[  220.588517][ T9180]  cw_putcs+0x15ef/0x18a0
[  220.588534][ T9180]  ? cw_clear+0x250/0x250
[  220.588546][ T9180]  ? drm_fb_helper_set_suspend_unlocked+0x190/0x190
[  220.588558][ T9180]  fbcon_putcs+0x2c8/0x450
[  220.588569][ T9180]  ? cw_clear+0x250/0x250
[  220.588579][ T9180]  do_update_region+0x4e5/0x640
[  220.588592][ T9180]  ? hide_cursor+0x320/0x320
[  220.588602][ T9180]  ? fbcon_set_palette+0x54a/0x660
[  220.588614][ T9180]  redraw_screen+0xa2c/0x1000
[  220.588624][ T9180]  ? drm_fb_helper_blank+0x4d/0x120
[  220.588635][ T9180]  ? fb_blank+0x137/0x1b0
[  220.588647][ T9180]  ? clear_buffer_attributes+0x320/0x320
[  220.588658][ T9180]  ? fbcon_cursor+0x396/0x570
[  220.588669][ T9180]  fbcon_blank+0x761/0xa70
[  220.588678][ T9180]  ? _raw_spin_unlock+0x24/0x40
[  220.588688][ T9180]  ? __printk_safe_exit+0x5/0x10
[  220.588700][ T9180]  ? fbcon_switch+0x2040/0x2040
[  220.588710][ T9180]  ? irq_work_queue+0xbf/0x140
[  220.588723][ T9180]  ? rcu_is_watching+0x11/0xa0
[  220.588734][ T9180]  ? rcu_is_watching+0x11/0xa0
[  220.588743][ T9180]  ? lock_release+0xb5/0x8a0
[  220.588758][ T9180]  do_unblank_screen+0x312/0x8b0
[  220.588770][ T9180]  ? __lock_acquire+0x7d40/0x7d40
[  220.588782][ T9180]  ? give_up_console+0x20/0x20
[  220.588794][ T9180]  panic+0x390/0x850
[  220.588805][ T9180]  ? bpf_jit_dump+0xd0/0xd0
[  220.588814][ T9180]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  220.588825][ T9180]  ? _raw_spin_unlock+0x40/0x40
[  220.588836][ T9180]  ? sys_imageblit+0x1ba8/0x25d0
[  220.588846][ T9180]  check_panic_on_warn+0x80/0xa0
[  220.588857][ T9180]  ? sys_imageblit+0x1ba8/0x25d0
[  220.588867][ T9180]  end_report+0x6d/0xf0
[  220.588878][ T9180]  kasan_report+0x102/0x130
[  220.588889][ T9180]  ? sys_imageblit+0x1ba8/0x25d0
[  220.588900][ T9180]  sys_imageblit+0x1ba8/0x25d0
[  220.588913][ T9180]  ? sys_copyarea+0x2530/0x2530
[  220.588925][ T9180]  ? __lock_acquire+0x7d40/0x7d40
[  220.588937][ T9180]  drm_fb_helper_sys_imageblit+0x2e/0x510
[  220.588947][ T9180]  ? drm_fbdev_fb_imageblit+0x184/0x200
[  220.588959][ T9180]  cw_putcs+0x15ef/0x18a0
[  220.588969][ T9180]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  220.588986][ T9180]  ? cw_clear+0x250/0x250
[  220.588998][ T9180]  ? drm_fb_helper_set_suspend_unlocked+0x190/0x190
[  220.589011][ T9180]  fbcon_putcs+0x2c8/0x450
[  220.589021][ T9180]  ? cw_clear+0x250/0x250
[  220.589031][ T9180]  do_update_region+0x4e5/0x640
[  220.589044][ T9180]  ? hide_cursor+0x320/0x320
[  220.589054][ T9180]  ? fbcon_set_palette+0x54a/0x660
[  220.589065][ T9180]  redraw_screen+0xa2c/0x1000
[  220.589076][ T9180]  ? _raw_spin_unlock+0x40/0x40
[  220.589087][ T9180]  ? clear_buffer_attributes+0x320/0x320
[  220.589101][ T9180]  ? tty_do_resize+0xeb/0x160
[  220.589113][ T9180]  vc_do_resize+0x122c/0x17b0
[  220.589128][ T9180]  ? lock_chain_count+0x20/0x20
[  220.589139][ T9180]  ? vc_resize+0x50/0x50
[  220.589150][ T9180]  ? __phys_addr+0xb6/0x170
[  220.589159][ T9180]  ? __kasan_kmalloc_large+0x86/0xa0
[  220.589170][ T9180]  ? crc32_le_base+0x59e/0xd60
[  220.589181][ T9180]  fbcon_do_set_font+0xc6e/0x1cd0
[  220.589196][ T9180]  ? fbcon_blank+0xa70/0xa70
[  220.589206][ T9180]  con_font_op+0xace/0xdc0
[  220.589217][ T9180]  ? reset_palette+0xdc0/0xdc0
[  220.589229][ T9180]  ? __might_fault+0xb7/0x110
[  220.589239][ T9180]  ? __lock_acquire+0x7d40/0x7d40
[  220.589259][ T9180]  ? __might_fault+0xb3/0x110
[  220.589269][ T9180]  ? _copy_from_user+0x111/0x170
[  220.589278][ T9180]  vt_ioctl+0x1618/0x1ca0
[  220.589289][ T9180]  ? __vt_event_wait+0x260/0x260
[  220.589301][ T9180]  ? tty_jobctrl_ioctl+0x164/0xae0
[  220.589313][ T9180]  tty_ioctl+0x848/0xc30
[  220.589323][ T9180]  ? security_file_ioctl+0x7c/0xa0
[  220.589334][ T9180]  ? tty_get_icount+0xa0/0xa0
[  220.589344][ T9180]  __se_sys_ioctl+0xfa/0x170
[  220.589355][ T9180]  do_syscall_64+0x4c/0xa0
[  220.589366][ T9180]  ? clear_bhb_loop+0x30/0x80
[  220.589377][ T9180]  ? clear_bhb_loop+0x30/0x80
[  220.589388][ T9180]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  220.589399][ T9180] RIP: 0033:0x7f9b8d51a1d9
[  220.589409][ T9180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  220.589418][ T9180] RSP: 002b:00007f9b8b772028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  220.589429][ T9180] RAX: ffffffffffffffda RBX: 00007f9b8d7a1fa0 RCX: 00007f9b8d51a1d9
[  220.589437][ T9180] RDX: 0000200000000000 RSI: 0000000000004b72 RDI: 0000000000000004
[  220.589444][ T9180] RBP: 00007f9b8d5b1888 R08: 0000000000000000 R09: 0000000000000000
[  220.589454][ T9180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  220.589461][ T9180] R13: 00007f9b8d7a2038 R14: 00007f9b8d7a1fa0 R15: 00007ffcca3010f8
[  220.589472][ T9180]  </TASK>
[  220.589476][ T9180] Modules linked in:
[  220.589482][ T9180] CR2: ffffc900045d1fc0
[  220.589489][ T9180] ---[ end trace 296be56f63a57f29 ]---
[  220.589495][ T9180] RIP: 0010:sys_imageblit+0x1891/0x25d0
[  220.589507][ T9180] Code: 46 ff c1 e8 07 21 d0 8b 9c 84 c0 00 00 00 4c 8b 7c 24 30 4b 8d 3c 37 48 89 f8 48 c1 e8 03 0f b6 04 08 84 c0 0f 85 f8 02 00 00 <43> 89 1c 37 0f b6 46 ff c1 e8 06 21 d0 8b 9c 84 c0 00 00 00 4b 8d
[  220.589515][ T9180] RSP: 0018:ffffc90002ede640 EFLAGS: 00010082
[  220.589524][ T9180] RAX: 0000000000000000 RBX: 0000000000000000 RCX: dffffc0000000000
[  220.589531][ T9180] RDX: 0000000000000001 RSI: ffff8881475a4e19 RDI: ffffc900045d1fc0
[  220.589539][ T9180] RBP: ffffc90002ede7a8 R08: ffff888023f5bb80 R09: 0000000000000003
[  220.589546][ T9180] R10: 0000000000000004 R11: 0000000000000002 R12: 0000000000000010
[  220.589553][ T9180] R13: 1ffff11028eb49c3 R14: 0000000000000000 R15: ffffc900045d1fc0
[  220.589560][ T9180] FS:  00007f9b8b7726c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  220.589570][ T9180] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  220.589578][ T9180] CR2: ffffc900045d1fc0 CR3: 0000000067eb9000 CR4: 00000000003506e0
[  220.589589][ T9180] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  220.589596][ T9180] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  220.589604][ T9180] Kernel panic - not syncing: Fatal exception
[  220.589647][ T9180] Kernel Offset: disabled
[  222.249502][ T9180] Rebooting in 86400 seconds..