last executing test programs:

1m39.369529559s ago: executing program 2 (id=3110):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x800080, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRESOCT, @ANYBLOB="57763f8b80ccb54515aa467d89bbb893a63f49cae5772efb6bb2d1d03fd1742a12e8978807c6a53aae173e5c08461b1d2594eed5030000002e74086cd91724e5631fa9733e7a1e4017c3d4264edd910e", @ANYRESDEC], 0x1, 0x105ea, &(0x7f000000d000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109000, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)

1m37.987795423s ago: executing program 2 (id=3114):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'geneve0\x00', @random='\x00\x00\x00\x00\x00 '})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f0000000080), 0x0}, 0x20)

1m34.49226059s ago: executing program 2 (id=3129):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xfffffffc, 0xea, 0x440, 0x3, 0x32, 0x8}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffb, @loopback, 0x47}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x1)

1m34.349578164s ago: executing program 2 (id=3132):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[], 0x1, 0xc2d, &(0x7f00000001c0)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x44)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000002040)='./bus\x00', 0x0, 0x321001, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x47)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)
mkdir(&(0x7f0000001540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x142)

1m31.486275405s ago: executing program 2 (id=3144):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc, 0x1}}, {0x6, 0x2, [0x3]}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1d4}, 0x8c0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0)

1m27.26554709s ago: executing program 2 (id=3155):
syz_mount_image$minix(&(0x7f0000000100), &(0x7f00000066c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1810002, &(0x7f0000006800)=ANY=[@ANYBLOB="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", @ANYBLOB="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", @ANYRES8, @ANYRES8=0x0, @ANYBLOB="a77a47c7093995493790249b0bed32a055f763e24190111977519571ce7e7842f63886bbf71ffeb820eddf6133ab8ae88bcc3d9004d9c6dbe44fbdcf671794f90a6dc723010be2684f321bdcb0f3a28f37715ba81e0f3b27d1206de5d93037a11c2b5ce35f7ffda7b43c3c9888163a50b7db5daea67d670e8b86c032da653d273cfb7bf3df53e836bb96370c4c637ec105fd520968a03441384810ed179646174536425dd1f0073804e63a43a92c901534484b0a352baee33ac1638bff1e67ee4959717feb229b247c25ae4018f502bdb5e7", @ANYRES16, @ANYRESDEC, @ANYBLOB="2da97369bd5bd2a022e4fea628166430fb7a26dae38cd827ad7f8cff5d2246bdd2cc0e8101b9631aa9db6c88c4ea13a8fbc6a23601da47409ecba43e29d90521e4a37f2f57fa7ce2366b5b89b5b9529791fb53b47e83c2014cd5779926a7dd8a0de70a50b2baf658b32d6d108efa8d3b6101762c8308a5b3351fd14516c9c33e6c6bd15e956f84604a27325b8ebb315aff3e39aa98ba22dffb1b6a7c1acafedad4ef237de4595f77f679e98e9dcbf01dc5bcbd5c199b9e95c24b", @ANYBLOB="9651c56ad88578a25546d8301a976d6fc5e51f3814a125051a070f7f54437d1ce35d85809048bfebe5ac13dce749226f4eace102819832dc4feee07cbf025529706f80354fcaaaf34bc289d3892a62957f78a9c45fe4e6e8c1332d57018a296c8eca11a25d4a581b17f43b9f4480c9a839e10a15954d4c325da6384fa44e9bb79ff45d24a2a2e805fac936dd9af003a173aec97678f46c000b0eab44f2", @ANYBLOB="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", @ANYRES32], 0x1, 0x1d8, &(0x7f0000000580)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6)
chdir(&(0x7f0000000080)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x22043, 0x69)

1m26.82574654s ago: executing program 32 (id=3155):
syz_mount_image$minix(&(0x7f0000000100), &(0x7f00000066c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1810002, &(0x7f0000006800)=ANY=[@ANYBLOB="002ecbc55fe6d6100837adda58fa7d10ab54aee93b992510be054d731ab7da7e75676e729a84f3b6a90100db5e477dbfee9ea3db9e2cdf0af3e9f7718732aaccc2158ad1dc498162eb5e87e3ec955164b6a97fb2a48d7a569258274a727cb0c7227e8f51529264e568b34e6f7ee018b3562d8fdd26e1b83ab2b09862ea8ac241fca01893c02becc286b2b17bd8c515b3dd02562333f6a7273bc91c9841bf3cb673bc8942336c5cebffbb08f82ba108af50c8dabb9628fc8e59c207395f370146898f1f3400f50f5e0566363558fe2c744cbebda08fe49b2155b62fcbb938b0d78d5e36b5e6b7d1c01f8b6423066333a94bb51f311c1d70dc272c6528d8057273e9bffbc8747d7c8a65b368828d39c69fc42125281702192328142ebb5b396e66db522ca6f2ae2ca64ab0d9d3f0eeb890d6b5a376ab004afb2ccc83293222ce378ef0e8d88e873ee168d615985aaabc293ce789dd163747e965405c11730f23faf8053fb37e93d5a54cdce54c1ce09598258ec5892938c5a16cf0c548695c973b45a0bc95feff28efd824744057c5da581fe9215d1a9e358a9da84b4ceb0f586c2ddbabbe2347dd728b8e05ecf90b4c7c9861ce1af7709c9babcdc2bd2175a8496a48942dc2755a5ed6296745ec0810e42050e657b2c0965d423077136da0140277053c8ce91d0000000000000000000000f81a60f8321a29d95e555edc5822e904e5b3821224bb704efb9aea0f736fa06f46b1023fc644c7879a6315e96f6695f65fef95d6dbf22d80c068a20fc98bad02dbeb3c9f478063d2f2f8fd5e8af7a5d5937e5626c71efa3369e99787e78597c01acfa3b273102993abd03263ae4115a65254d32c517eddeb58bbc458d025fdc566906ac145a9db74f46d10805e6c7560f6740cf29445f6aec713655cdd27032c6413f342d8e76782bdc2d96870cf7e84d15838c48aa6af77086acec169846791fbb50b0f648adbc6f4058870827efcf4da44b43c62f3", @ANYBLOB="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", @ANYRES8, @ANYRES8=0x0, @ANYBLOB="a77a47c7093995493790249b0bed32a055f763e24190111977519571ce7e7842f63886bbf71ffeb820eddf6133ab8ae88bcc3d9004d9c6dbe44fbdcf671794f90a6dc723010be2684f321bdcb0f3a28f37715ba81e0f3b27d1206de5d93037a11c2b5ce35f7ffda7b43c3c9888163a50b7db5daea67d670e8b86c032da653d273cfb7bf3df53e836bb96370c4c637ec105fd520968a03441384810ed179646174536425dd1f0073804e63a43a92c901534484b0a352baee33ac1638bff1e67ee4959717feb229b247c25ae4018f502bdb5e7", @ANYRES16, @ANYRESDEC, @ANYBLOB="2da97369bd5bd2a022e4fea628166430fb7a26dae38cd827ad7f8cff5d2246bdd2cc0e8101b9631aa9db6c88c4ea13a8fbc6a23601da47409ecba43e29d90521e4a37f2f57fa7ce2366b5b89b5b9529791fb53b47e83c2014cd5779926a7dd8a0de70a50b2baf658b32d6d108efa8d3b6101762c8308a5b3351fd14516c9c33e6c6bd15e956f84604a27325b8ebb315aff3e39aa98ba22dffb1b6a7c1acafedad4ef237de4595f77f679e98e9dcbf01dc5bcbd5c199b9e95c24b", @ANYBLOB="9651c56ad88578a25546d8301a976d6fc5e51f3814a125051a070f7f54437d1ce35d85809048bfebe5ac13dce749226f4eace102819832dc4feee07cbf025529706f80354fcaaaf34bc289d3892a62957f78a9c45fe4e6e8c1332d57018a296c8eca11a25d4a581b17f43b9f4480c9a839e10a15954d4c325da6384fa44e9bb79ff45d24a2a2e805fac936dd9af003a173aec97678f46c000b0eab44f2", @ANYBLOB="0805c250a09347cb0bca3b9f8a8755b3945d3396e6eb14eb64426210d11830f13cb571b8967902d058a39cf86287f14c080fcb8d529bfcda2a3722d8dc8ebe2c29476750ec92bf56619454329e748b3549ba625812d4422958b334db652bd2b9492784354250a06d9b3f22846434889dbea72d8f13aa590030f83b62254e87e4230846ce6bd18bc79e73a1a1fa67571c3ba78979edf79dfc3410b95c51ce90bcca297c2a6995b236c39c5ec957cf8717fa28a560525b50a3a689d2bc34038bc078356614f0c584b2ae572c025c4d8414161f1100073f6fee746c008cefce574d1c1e0333b07febbd41add7375c604f3c34b6606013a8172cea655aa6580601b3668ac91df25f684745c94ad9ffc15548d32a8608c5acb60bc437052b2dd51eea8957d673499f6f685feefb2332976ce89829d1cd967d7dd29336387ff12a", @ANYRES32], 0x1, 0x1d8, &(0x7f0000000580)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6)
chdir(&(0x7f0000000080)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x22043, 0x69)

1m9.57239992s ago: executing program 5 (id=3156):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000002a00000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4)
sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

50.643566491s ago: executing program 5 (id=3156):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000002a00000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4)
sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

28.696181237s ago: executing program 5 (id=3156):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000002a00000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4)
sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

11.972494653s ago: executing program 4 (id=3452):
r0 = syz_mount_image$jfs(&(0x7f0000001cc0), &(0x7f0000001c80)='./file0\x00', 0x800000, &(0x7f00000005c0)=ANY=[], 0x1, 0x5e0b, &(0x7f0000001d00)="$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")
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r1 = open(&(0x7f0000000640)='./file1\x00', 0x105142, 0x0)
truncate(0x0, 0x8800000)
mknodat$loop(r0, 0x0, 0x4210, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file1\x00', 0x101042, 0x1d8)
sendfile(r1, r1, 0x0, 0x7a680000)

9.986317712s ago: executing program 4 (id=3459):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000040)={0x6, 0x30, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_uring_setup(0x2f35, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_getnexthop={0x20, 0x6a, 0x605, 0x70bd2c, 0x25dfdbfa, {}, [@NHA_MASTER={0xffffffffffffff1c, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0)
write(r8, &(0x7f0000000500)='-294967295 2000000000 0\n', 0x18)
r9 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0)
r10 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'geneve1\x00'}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@unspec=@state={{0x28}, {0xff}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x318)
read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020)
setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x9, 0x4)

7.554105922s ago: executing program 4 (id=3467):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000001c0)=0xa, 0x4)
recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb)

6.066550709s ago: executing program 4 (id=3473):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
add_key(0x0, 0x0, &(0x7f0000000200)="308205553082", 0x6, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404f1004000001010200010902200001010080320904000002000000000705810200020007050202"], 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb-serial/devices/ttyUSB0/vcc_mode\x00', 0x1, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
write(r0, &(0x7f0000000200)='3', 0x1)

5.945557352s ago: executing program 0 (id=3475):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x240}, 0xe)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x2, 0x8}, 0x2)
r1 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000480)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
write(r0, 0x0, 0x0)

5.704473258s ago: executing program 5 (id=3156):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000002a00000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4)
sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

4.889968789s ago: executing program 0 (id=3478):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002340), 0x8c02, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="660fee4500b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f3266b857000f20c035000000800f22c0", 0x53}], 0x1, 0x10, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe0000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x80000000, 0x3ff, 0x4, 0xffffff52, 0x362, 0x2, 0x6}, {0x80000008, 0x3, 0x3, 0x94, 0x1ef, 0x7, 0xfffffffb}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.416589351s ago: executing program 0 (id=3479):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x51, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.394734831s ago: executing program 3 (id=3480):
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x14e24, 0x1000}, 0x1c)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000001c0)="000013af49488ef5372943291891ea3573b90bd550069d334b21a9ff73160e635d438ed31387d37f4ae9538b960d6e6a702db32e123e82a102885356a7fb139ef81a1241937b", 0x46}, {&(0x7f00000008c0)="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", 0xfbb}, {0x0}], 0x3}}], 0x1, 0xc8040)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)
splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6)

4.129688188s ago: executing program 0 (id=3481):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7fffffff}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000540)="04", 0x1, 0x2404c081, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
syz_usb_connect(0x3, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902"], 0x0)
shutdown(r0, 0x1)

3.907269803s ago: executing program 4 (id=3482):
r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f00000001c0)={0x20, 0xe, 0xf, "cf0d416510d44a33a84085a068b520"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x4, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

3.724326887s ago: executing program 3 (id=3484):
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001000)='./dev\x00', &(0x7f0000001040)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./dev/mapper/control\x00', 0x2, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000c80), &(0x7f0000000080)='./file1\x00', 0xa08800, &(0x7f0000000900)=ANY=[], 0x41, 0x69b, &(0x7f0000000200)="$eJzs3ctvHHcdAPDvzK433iClTpu0ASHVakRBWCR+yAVzqeGAfIhQFQ4VEpdV4jRWNm5lu8itEJj3gQuH/gHl4AMSJyTukYrEiXLr1SdUCYlLTr4ZzezMPrLZza7jeGP6+Viz+5v5ze/1ndfOrqwJ4AtrbS6qDyKJtbkbu9n8wf5S82B/6VyR3YyILJ1GVFtvkWxGJJ9ErEZrii9nC4v1k0HtfLSxcvOzhweft+aqxZSvnw4rN5q9YorZiKgU7/2memeT6kj13RpY33CNTkPtEWYBu1oGDibtqM/eOMWf8rgFngdJ67rZZybifERMF58Dojg7pKfbu5M31lkOAAAAzqgXDuMwduPCpPsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZ0nx/P+kmNIyPRtJ+fz/WrEsivTNdMJ9fhoPJt0BAAAAAAAAADgBrx7GYezGhXL+qPXL/mv566X89UvxfmzHemzFtdiNRuzETmzFQkTMdFVU223s7GwtjFBy8bElF09jtAAAAAAAAADwf+tXsdb5/R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4HSUSl9ZZPl8r0TKTViJiOiFq23l7Ev8r0GZF0kqvt1IPJ9AUAAACObfoYeS8cxmHsxoVy/ijJ7/lfzu+Xp+P92Iyd2IidaMZ63C7uobO7/vRgf6l5sL90/2B/Ka/8J0ctrXq+99+xup7XGK3vHh7f8pV8jXrciY18ybW4lXfmdqR5ycyVoj/tqbeRX2Z9qr9ZGLFnt4v3rLE/9n6LcLLSnlY/fXKBmbzQVDsi80XfsoouDo/E47dOvZOsfq0ypKWFSNvf/Fwa0lI5pKQI+Y0nDyp3viwXEb97JOZv/vvPPx6xmmegHYk08kgsdu19Lw+PecTX//aXt+82N+/dvbM998x2o9Py6D6x1BWJV850JKpjrj+fR+Jye34tfhA/irmYjbdiKzbip9GInViP4swYjWJ/zl5nuqIU0Rep1Z65t57Uk1qxXVrH7ih9mo1zeaoRr+VlL8RGJPFu3I71eCP/W4yF+HYsx3KsdG3hywO3cD62/EybjnemvfqN6Bzqv+89HQ33j1FXHF/rspnF9WJXXLvPuTN5XveSTpReHOF6lIwXpepXikTWxq+fqy/gi0j8ofsqUUbipeGR+FN+bGw3N+9t3W28N6D+vUfmX5/qpH97kgM5tnKPzTbKizFdnEl6944s76X2WeZiz1W1Vvzi0spL+/Iu53lJUh6pPxx4pNaKz3D9NS3mea/051XKnl/pyuv5vBXv/vP0YwrAMZz/5vla/T/1T+sf139Tv1u/Mf39c98599VaTP196rvV+crraZr8NT6On3fu/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOPb/uDDe41mc33r8Yl0cNbJJpLiGVCD1qlGPUau8BdHR0en0OenH/Leidcckx/XCIny6VVPW8/bq8+6q+noe11PovJcxHmURCUiyiWV6GQVm2jYw0WBM+36zv33rm9/8OG3Nu433ll/Z31zanl5ZX5l+Y2l63c2muvzrddJ9xJ4FjqfBybdEwAAAAAAAAAAAGBU4/7PwKsx/n8adDU3O8GhAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGfU2lxUpyKJhflr89n8wf5SM5vKdGfNakSkaUTys4jkk4jVaE0x01VdMqidjzZWbn728ODzTl3Vcv10WLnR7BVTzEZEpXjvUztefbcG1TeypD3CLGBXy8DBpP0vAAD//xnpB0E=")
ioctl(r0, 0xc138fd03, &(0x7f0000003000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074")
write(0xffffffffffffffff, &(0x7f0000003138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00integrity\x00\x00\x00\x00\x00\x00\x007:0 0 4 J 0', 0x33)
ioctl(r0, 0xc138fd09, &(0x7f0000003000)="0400000000000000000000006c01000038010000010200"/42)

3.254838299s ago: executing program 1 (id=3488):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbbc, &(0x7f0000000c00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000005940)='.\x00', 0x0, 0x8)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000005980)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29)
mknod$loop(&(0x7f0000003080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
read$FUSE(r1, &(0x7f00000059c0)={0x2020, 0x0, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
fchown(r0, r2, r3)

3.064528314s ago: executing program 1 (id=3489):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe})
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r2 = syz_open_procfs(r0, &(0x7f00000003c0)='stat\x00')
pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4)

2.957010027s ago: executing program 3 (id=3490):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80800)
write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x800ffd, 0x8, '9P2000.u'}, 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x800f, 0x0, 0x7, 0x0, 0x0, 0x10, 0x3}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x2004402, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

2.861845719s ago: executing program 1 (id=3491):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0xde)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x80)
write(r0, &(0x7f0000000100)='+p', 0x2)
syz_mount_image$f2fs(&(0x7f0000000540), &(0x7f0000000500)='./debug/dynamic_debug/control/file0\x00', 0x10c2010, &(0x7f0000000540)=ANY=[], 0x0, 0x55bd, &(0x7f0000005c00)="$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")
r1 = syz_open_dev$mtd(&(0x7f00000001c0), 0x0, 0x2)
ioctl$MEMGETREGIONCOUNT(r1, 0x80044d07, &(0x7f0000000200))

2.597346436s ago: executing program 3 (id=3492):
setns(0xc9, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000400)={'syzkaller1\x00', @link_local})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d42cfffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a)

1.849064725s ago: executing program 3 (id=3493):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x150, 0x111, 0x4b4, 0x0, 0x700, 0x278, 0x278, 0x278, 0x278, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [0x0, 0x0, 0xff, 0xff000000], 'vlan0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4, 0xf}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @loopback}, [0x0, 0xff], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x24, 0xca, 'pptp\x00', {0x8001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x4, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

1.758192387s ago: executing program 3 (id=3494):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_fw={{0x7}, {0x50, 0x2, [@TCA_FW_ACT={0x4c, 0x4, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x3, 0x3, 0xfffffff9, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb3, 0x4}}]}, 0x84}, 0x1, 0x0, 0x0, 0x26044028}, 0x800)

1.542907142s ago: executing program 1 (id=3495):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000c, 0x12, r2, 0x0)
write$cgroup_int(r1, &(0x7f0000000440)=0x51e, 0x12)

1.377052936s ago: executing program 1 (id=3496):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
listen(r0, 0x5a)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x5, 0x42}]}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c)
sendmmsg$inet(r1, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000840)="1ca6fae6df80a5ab139abf930a5934fc36e94bf2b5d43fe51fe76a6ff34cac50a3f7a9a7b29907d6028d38dd3f", 0x2d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001a00)='O', 0x1}], 0x1}}], 0x2, 0x440c5)

814.78711ms ago: executing program 0 (id=3497):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000040)={0x6, 0x30, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_uring_setup(0x2f35, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_getnexthop={0x20, 0x6a, 0x605, 0x70bd2c, 0x25dfdbfa, {}, [@NHA_MASTER={0xffffffffffffff1c, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0)
write(r8, &(0x7f0000000500)='-294967295 2000000000 0\n', 0x18)
r9 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0)
r10 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'geneve1\x00'}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@unspec=@state={{0x28}, {0xff}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x318)
read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020)
setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x9, 0x4)

215.179405ms ago: executing program 1 (id=3498):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000040)={0x6, 0x30, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_uring_setup(0x2f35, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_getnexthop={0x18, 0x6a, 0x605, 0x70bd2c, 0x25dfdbfa}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x880)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0)
write(r8, &(0x7f0000000500)='-294967295 2000000000 0\n', 0x18)
socket$inet6(0xa, 0x3, 0x8000000003c)
read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020)
setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0)

111.455377ms ago: executing program 4 (id=3499):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x815, &(0x7f0000000180)={[{@data_err_ignore}, {@resgid}, {@abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nobarrier}]}, 0x9, 0x624, &(0x7f0000001340)="$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")
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe(0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
read(r4, &(0x7f0000000080)=""/1, 0x1)
r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xdabc3000)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff, 0x3a, 0x0, @val=@tcx}, 0x1c)

0s ago: executing program 0 (id=3500):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = socket$kcm(0x21, 0x2, 0xa)
syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000640)='./mnt\x00', 0x840, &(0x7f0000000680)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f00000006c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000940)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000009c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000a40)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000ac0), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000b00), 0x10106, 0x2, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000b40)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000b80)=0x20, 0x4)
write$binfmt_misc(r4, &(0x7f0000000bc0), 0x6)
sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x110, 0xd, "aa"}], 0x18}, 0x0)
r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
splice(r0, &(0x7f0000000540)=0x7, r5, &(0x7f00000005c0)=0x7, 0x200, 0xc)
syz_emit_ethernet(0x6a, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x4)
write(r6, &(0x7f0000000100)='3', 0x1)
setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./sys/class/video4linux/video0/dev_debug\x00', &(0x7f0000000200), &(0x7f0000000240)='./sys/class/video4linux/video0/dev_debug\x00', 0x29, 0x1)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r7 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x6}, {}, {0xa, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb70b, 0x58f}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000001c0)={0x0, 0x3, 0x8, r6, 0x0, &(0x7f0000000180)={0x9b090b, 0xf64, '\x00', @value64=0x10001}})

kernel console output (not intermixed with test programs):

.878316][T13980] usb 4-1: config 0 has no interface number 0
[  905.884429][T13980] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  905.897579][T13981] usb 1-1: config 0 descriptor??
[  905.903469][T13980] usb 4-1: config 0 interface 85 has no altsetting 0
[  905.941676][T13981] hub 1-1:0.0: USB hub found
[  906.029865][T14521] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  906.067131][T14521] ntfs3: loop4: Failed to load $Extend.
[  906.086769][T13980] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  906.114619][T13980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  906.132150][T13980] usb 4-1: Product: syz
[  906.141347][T13980] usb 4-1: Manufacturer: syz
[  906.150760][T13980] usb 4-1: SerialNumber: syz
[  906.167950][T13980] usb 4-1: config 0 descriptor??
[  906.178531][T13981] hub 1-1:0.0: 1 port detected
[  906.492559][T14537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3044'.
[  906.516079][T14537] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  906.694469][T14505] udc-core: couldn't find an available UDC or it's busy
[  906.764852][T14505] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  907.055954][T10151] hub 1-1:0.0: activate --> -90
[  907.077438][T14539] loop4: detected capacity change from 0 to 128
[  907.119295][T14539] EXT4-fs (loop4): Test dummy encryption mode enabled
[  907.218424][T13980] appletouch 4-1:0.85: Geyser mode initialized.
[  907.228336][T13980] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input43
[  907.242020][T14539] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  907.265634][T14549] tipc: Started in network mode
[  907.271236][T14539] ext4 filesystem being mounted at /559/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  907.300027][T14549] tipc: Node identity ac1414aa, cluster identity 4711
[  907.308079][T14549] tipc: New replicast peer: 172.20.20.40
[  907.332705][T14549] tipc: Enabled bearer <udp:syz2>, priority 10
[  907.349231][T14551] loop2: detected capacity change from 0 to 1024
[  907.481334][T14551] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,bsddf,quota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,lazytime,,errors=continue. Quota mode: writeback.
[  907.540264][T13980] usb 4-1: USB disconnect, device number 24
[  907.642915][T13981] usb 1-1: USB disconnect, device number 27
[  908.044958][T13980] appletouch 4-1:0.85: input: appletouch disconnected
[  908.387901][T14564] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  908.442495][T14564] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  908.455784][ T4265] tipc: Node number set to 2886997162
[  908.557529][T14574] loop2: detected capacity change from 0 to 512
[  908.599776][T14576] syz.4.3059 (14576) used obsolete PPPIOCDETACH ioctl
[  908.604305][T14578] device syzkaller1 entered promiscuous mode
[  908.663861][T14574] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  908.837713][T14592] loop3: detected capacity change from 0 to 64
[  908.880855][T14592] overlayfs: upper fs needs to support d_type.
[  908.911012][T14592] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  908.931996][T14592] overlayfs: failed to set xattr on upper
[  908.937748][T14592] overlayfs: ...falling back to index=off,metacopy=off.
[  909.742870][ T4352] attempt to access beyond end of device
[  909.742870][ T4352] loop3: rw=1, want=268435470, limit=64
[  909.802904][ T4352] Buffer I/O error on dev loop3, logical block 134217734, lost async page write
[  909.885004][ T4196] Trying to free block not in datazone
[  909.887887][T14591] loop4: detected capacity change from 0 to 32768
[  910.083728][ T3559]  loop0: p1 < > p4
[  910.083728][ T3559]  p4: <netbsd: >
[  910.114450][ T3559] loop0: p4 size 722688 extends beyond EOD, truncated
[  910.403389][ T8118] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  910.785165][ T8118] usb 4-1: Using ep0 maxpacket: 32
[  910.922855][T13981] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  911.025764][ T8118] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  911.047868][ T8118] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  911.071837][ T8118] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  911.082471][T14621] device syzkaller1 entered promiscuous mode
[  911.093682][ T8118] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  911.110171][ T8118] usb 4-1: config 0 descriptor??
[  911.152565][T14623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3076'.
[  911.162769][ T8118] hub 4-1:0.0: USB hub found
[  911.306800][ T3559]  loop0: p1 < > p4
[  911.306800][ T3559]  p4: <netbsd: >
[  911.332638][ T3559] loop0: p4 size 722688 extends beyond EOD, truncated
[  911.399955][ T8118] hub 4-1:0.0: 1 port detected
[  911.446277][T13981] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  911.671233][T13981] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  911.720608][T13981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  911.878967][T13981] usb 3-1: Product: syz
[  911.955235][T13981] usb 3-1: Manufacturer: syz
[  912.036913][T13981] usb 3-1: SerialNumber: syz
[  912.338956][ T3559]  loop0: p1 < > p4
[  912.338956][ T3559]  p4: <netbsd: >
[  912.361601][ T3559] loop0: p4 size 722688 extends beyond EOD, truncated
[  912.386395][T14638] overlayfs: failed to resolve './file0': -2
[  912.431302][ T8118] hub 4-1:0.0: activate --> -90
[  912.461895][T13981] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  912.900436][T13981] usb 4-1: USB disconnect, device number 25
[  913.555273][ T6633] usb 1-1: new full-speed USB device number 28 using dummy_hcd
[  913.574393][T14663] loop4: detected capacity change from 0 to 128
[  913.624473][T14663] EXT4-fs (loop4): Test dummy encryption mode enabled
[  913.680363][T14663] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  913.717864][T14663] ext4 filesystem being mounted at /571/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  913.834217][T14665] loop3: detected capacity change from 0 to 40427
[  913.894753][T14665] F2FS-fs (loop3): invalid crc value
[  913.913724][ T8118] usb 3-1: USB disconnect, device number 19
[  913.917723][T14665] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  913.938547][ T8118] usblp0: removed
[  914.043244][ T6633] usb 1-1: not running at top speed; connect to a high speed hub
[  914.194823][ T6633] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  914.289289][ T6633] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  914.614315][ T6633] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  914.672283][ T6633] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected
[  914.683738][ T6633] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81
[  914.691830][ T6633] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1
[  914.718010][ T6633] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84
[  914.726009][T14665] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  914.742908][T14680] APIC base relocation is unsupported by KVM
[  914.753359][ T6633] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2
[  914.796178][ T6633] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  914.808914][ T6633] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88
[  914.855236][ T6633] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6
[  914.886547][ T6633] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  914.893679][T14688] loop2: detected capacity change from 0 to 2048
[  915.113617][T14690] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  915.315034][ T6633] usb 1-1: USB disconnect, device number 28
[  915.538640][ T6633] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  915.754216][ T6633] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  915.798637][ T6633] keyspan 1-1:1.0: device disconnected
[  915.993057][T14685] loop4: detected capacity change from 0 to 40427
[  916.012271][T14685] F2FS-fs (loop4): Corrupted extension count (327717 + 1 > 64)
[  916.015341][T14698] overlayfs: failed to resolve './file0': -2
[  916.037514][T14697] loop2: detected capacity change from 0 to 512
[  916.057771][T14685] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  916.098756][T14685] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff
[  916.150913][T14685] F2FS-fs (loop4): invalid crc value
[  916.151095][T14697] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000010000,noinit_itable,nombcache,dioread_lock,errors=remount-ro,nodiscard,block_validity,. Quota mode: writeback.
[  916.238710][T14697] ext4 filesystem being mounted at /575/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  916.260555][T14697] EXT4-fs (loop2): shut down requested (1)
[  916.268846][T14685] F2FS-fs (loop4): Found nat_bits in checkpoint
[  916.531137][T14685] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  916.551062][T14685] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  916.674611][T13981] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  916.956114][T13981] usb 1-1: Using ep0 maxpacket: 32
[  917.086629][T13981] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  917.334776][T14713] loop3: detected capacity change from 0 to 32768
[  917.366939][T14713] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.3101 (14713)
[  917.387779][T14685] F2FS-fs (loop4) : inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2b6/0x550
[  917.401441][T13981] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  917.410516][T13981] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  917.426679][T13981] usb 1-1: Product: syz
[  917.441856][T13981] usb 1-1: Manufacturer: syz
[  917.453087][T14685] attempt to access beyond end of device
[  917.453087][T14685] loop4: rw=2049, want=78816, limit=40427
[  917.481953][T13981] usb 1-1: SerialNumber: syz
[  917.515385][T13981] usb 1-1: config 0 descriptor??
[  917.541329][T14709] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  917.563391][T13981] hub 1-1:0.0: bad descriptor, ignoring hub
[  917.569330][T13981] hub: probe of 1-1:0.0 failed with error -5
[  917.651064][ T4197] attempt to access beyond end of device
[  917.651064][ T4197] loop4: rw=2049, want=45104, limit=40427
[  917.985632][T13981] usb 1-1: USB disconnect, device number 29
[  918.223347][T14719] loop2: detected capacity change from 0 to 131072
[  918.233734][T14713] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  918.242989][T14713] BTRFS info (device loop3): setting nodatasum
[  918.287005][T14713] BTRFS info (device loop3): disabling tree log
[  918.296137][T14719] F2FS-fs (loop2): invalid crc value
[  918.316920][T14719] F2FS-fs (loop2): Found nat_bits in checkpoint
[  918.328503][T14713] BTRFS info (device loop3): max_inline at 0
[  918.373171][T14713] BTRFS info (device loop3): using free space tree
[  918.373255][T14719] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  918.413833][T14713] BTRFS info (device loop3): has skinny extents
[  918.451530][   T25] audit: type=1800 audit(1792112447.142:39): pid=14719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3110" name="file1" dev="loop2" ino=7 res=0 errno=0
[  918.743908][ T3559]  loop0: p1 < > p4
[  918.743908][ T3559]  p4: <netbsd: >
[  918.778334][ T3559] loop0: p4 size 722688 extends beyond EOD, truncated
[  919.047066][T14713] BTRFS info (device loop3): enabling ssd optimizations
[  919.817566][T14767] netlink: 'syz.0.3120': attribute type 1 has an invalid length.
[  920.512817][   T25] audit: type=1804 audit(1792112449.044:40): pid=14766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3101" name="/newroot/609/file1/bus" dev="loop3" ino=263 res=1 errno=0
[  920.552575][T14774] loop4: detected capacity change from 0 to 1024
[  920.577428][T14774] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  920.594801][T14767] 8021q: adding VLAN 0 to HW filter on device bond1
[  920.627669][T14774] EXT4-fs (loop4): barriers disabled
[  920.649611][T14774] JBD2: no valid journal superblock found
[  920.698038][T14774] EXT4-fs (loop4): error loading journal
[  920.881510][T14771] 8021q: adding VLAN 0 to HW filter on device bond1
[  920.912219][T14771] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[  920.948943][T14771] bond1: (slave wireguard0): Error -95 calling set_mac_address
[  922.099205][T14786] loop4: detected capacity change from 0 to 512
[  922.178181][T14786] EXT4-fs (loop4): Ignoring removed nobh option
[  922.214237][ T3559]  loop0: p1 < > p4
[  922.214237][ T3559]  p4: <netbsd: >
[  922.241102][ T3559] loop0: p4 size 722688 extends beyond EOD, truncated
[  922.272929][T14786] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nobh,,errors=continue. Quota mode: none.
[  922.302545][ T3559]  loop0: p1 < > p4
[  922.302545][ T3559]  p4: <netbsd: >
[  922.314231][ T3559] loop0: p4 size 722688 extends beyond EOD, truncated
[  922.398068][T14806] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0
[  922.420266][T14812] loop2: detected capacity change from 0 to 2048
[  922.427741][T14798] affs: No valid root block on device nullb0
[  922.460569][ T3559]  loop0: p1 < > p4
[  922.460569][ T3559]  p4: <netbsd: >
[  922.494738][T14812] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  922.508342][ T3559] loop0: p4 size 722688 extends beyond EOD, truncated
[  922.591098][T14810] loop3: detected capacity change from 0 to 1024
[  922.653400][T14817] loop4: detected capacity change from 0 to 1024
[  922.681259][T14810] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  922.889186][T14810] EXT4-fs (loop3): barriers disabled
[  922.925584][T14817] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  923.088122][T14810] JBD2: no valid journal superblock found
[  923.206784][T14817] EXT4-fs (loop4): barriers disabled
[  923.233249][T14810] EXT4-fs (loop3): error loading journal
[  923.270963][T14817] JBD2: no valid journal superblock found
[  923.277014][T14817] EXT4-fs (loop4): error loading journal
[  924.926970][T14846] FAULT_INJECTION: forcing a failure.
[  924.926970][T14846] name failslab, interval 1, probability 0, space 0, times 0
[  924.981005][T14846] CPU: 1 PID: 14846 Comm: syz.3.3142 Not tainted syzkaller #0
[  924.988507][T14846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  924.998575][T14846] Call Trace:
[  925.001862][T14846]  <TASK>
[  925.004798][T14846]  dump_stack_lvl+0x188/0x250
[  925.009493][T14846]  ? show_regs_print_info+0x20/0x20
[  925.014697][T14846]  ? load_image+0x410/0x410
[  925.019226][T14846]  ? __might_sleep+0xf0/0xf0
[  925.023830][T14846]  ? __lock_acquire+0x7d40/0x7d40
[  925.028868][T14846]  should_fail+0x383/0x4b0
[  925.033308][T14846]  should_failslab+0x5/0x20
[  925.037818][T14846]  slab_pre_alloc_hook+0x51/0xc0
[  925.042762][T14846]  ? security_inode_alloc+0x30/0x110
[  925.048052][T14846]  kmem_cache_alloc+0x3d/0x280
[  925.052832][T14846]  security_inode_alloc+0x30/0x110
[  925.056323][ T3559]  loop0: p1 < > p4
[  925.056323][ T3559]  p4: <netbsd: >
[  925.057950][T14846]  inode_init_always+0x8e5/0xc90
[  925.057980][T14846]  new_inode_pseudo+0x8e/0x210
[  925.066155][ T4194] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh
[  925.070168][T14846]  do_accept+0x196/0x6f0
[  925.070194][T14846]  ? alloc_fd+0x59e/0x650
[  925.070216][T14846]  ? __ia32_sys_listen+0x60/0x60
[  925.070243][T14846]  ? _raw_spin_unlock+0x24/0x40
[  925.070263][T14846]  ? alloc_fd+0x59e/0x650
[  925.070286][T14846]  __sys_accept4+0x103/0x170
[  925.070305][T14846]  __x64_sys_accept+0x79/0x90
[  925.080961][ T4194] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh
[  925.084314][T14846]  do_syscall_64+0x4c/0xa0
[  925.084340][T14846]  ? clear_bhb_loop+0x30/0x80
[  925.093299][ T3559] loop0: p4 size 722688 extends beyond EOD, 
[  925.097782][T14846]  ? clear_bhb_loop+0x30/0x80
[  925.097812][T14846]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  925.121400][ T3559] truncated
[  925.124363][T14846] RIP: 0033:0x7f1c946f3559
[  925.124386][T14846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  925.124400][T14846] RSP: 002b:00007f1c9294b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b
[  925.124418][T14846] RAX: ffffffffffffffda RBX: 00007f1c9497afa0 RCX: 00007f1c946f3559
[  925.124431][T14846] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  925.124441][T14846] RBP: 00007f1c9478a8b0 R08: 0000000000000000 R09: 0000000000000000
[  925.209357][T14846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  925.217336][T14846] R13: 00007f1c9497b038 R14: 00007f1c9497afa0 R15: 00007ffcc01b6688
[  925.225332][T14846]  </TASK>
[  925.263831][ T3559]  loop0: p1 < > p4
[  925.263831][ T3559]  p4: <netbsd: >
[  925.276229][ T3559] loop0: p4 size 722688 extends beyond EOD, truncated
[  926.457676][T14858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3146'.
[  927.478387][T14858] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  927.766998][T14862] loop4: detected capacity change from 0 to 128
[  927.806275][T14862] EXT4-fs (loop4): Test dummy encryption mode enabled
[  927.827012][ T3559]  loop0: p1 < > p4
[  927.827012][ T3559]  p4: <netbsd: >
[  927.836871][ T3559] loop0: p4 size 722688 extends beyond EOD, truncated
[  927.883531][T14862] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  927.890779][T14870] loop3: detected capacity change from 0 to 128
[  927.915045][T14862] ext4 filesystem being mounted at /580/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  927.947796][T14870] EXT4-fs (loop3): Test dummy encryption mode enabled
[  928.037532][T14870] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  928.073315][T14870] ext4 filesystem being mounted at /617/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  929.476310][T14877] raw_sendmsg: syz.0.3153 forgot to set AF_INET. Fix it!
[  929.518951][T14883] ipt_CLUSTERIP: Please specify destination IP
[  930.317557][T14888] rxe_eth0 speed is unknown, defaulting to 1000
[  930.535689][T14888] lo speed is unknown, defaulting to 1000
[  930.791585][T14888] chnl_net:caif_netlink_parms(): no params data found
[  930.970029][T14899] loop3: detected capacity change from 0 to 4096
[  931.135120][T14907] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  931.438713][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  931.445676][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  931.496333][T14888] bridge0: port 1(bridge_slave_0) entered blocking state
[  931.512029][T14888] bridge0: port 1(bridge_slave_0) entered disabled state
[  931.529834][T14888] device bridge_slave_0 entered promiscuous mode
[  931.552750][T14888] bridge0: port 2(bridge_slave_1) entered blocking state
[  931.568713][T14888] bridge0: port 2(bridge_slave_1) entered disabled state
[  931.586757][T14888] device bridge_slave_1 entered promiscuous mode
[  931.662821][T14888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  931.778834][T14888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  932.033913][T14919] loop3: detected capacity change from 0 to 128
[  932.050062][T14888] team0: Port device team_slave_0 added
[  932.702670][T13980] Bluetooth: hci2: command 0x0409 tx timeout
[  932.778599][T14888] team0: Port device team_slave_1 added
[  932.790002][T14919] EXT4-fs (loop3): Test dummy encryption mode enabled
[  932.883435][T14888] batman_adv: batadv0: Adding interface: batadv_slave_0
[  932.891753][T14919] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  932.900603][T14888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  932.984481][T14888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  932.999251][T14888] batman_adv: batadv0: Adding interface: batadv_slave_1
[  932.999949][T14919] ext4 filesystem being mounted at /620/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  933.006212][T14888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  933.006238][T14888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  933.098896][T14888] device hsr_slave_0 entered promiscuous mode
[  933.135208][T14888] device hsr_slave_1 entered promiscuous mode
[  933.147228][T14888] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  933.167658][T14888] Cannot create hsr debugfs directory
[  934.401817][T14952] loop3: detected capacity change from 0 to 1024
[  934.469725][T14952] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  934.516424][T14952] EXT4-fs (loop3): barriers disabled
[  934.521798][T14952] JBD2: no valid journal superblock found
[  934.529647][T14888] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  934.547819][T14952] EXT4-fs (loop3): error loading journal
[  934.595961][T14888] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  934.608244][T14888] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  934.626800][T14888] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  935.906069][ T4262] Bluetooth: hci2: command 0x041b tx timeout
[  936.003487][T14948] loop4: detected capacity change from 0 to 32768
[  936.012020][T14888] 8021q: adding VLAN 0 to HW filter on device bond0
[  936.029206][T14888] 8021q: adding VLAN 0 to HW filter on device team0
[  936.654800][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  936.676062][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  936.685588][T14948] XFS (loop4): Mounting V5 Filesystem
[  936.779666][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  936.816798][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  936.826176][ T4352] bridge0: port 1(bridge_slave_0) entered blocking state
[  936.833309][ T4352] bridge0: port 1(bridge_slave_0) entered forwarding state
[  936.851646][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  936.859882][T14948] XFS (loop4): Ending clean mount
[  936.871097][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  936.871600][T14983] loop3: detected capacity change from 0 to 128
[  936.880066][ T4352] bridge0: port 2(bridge_slave_1) entered blocking state
[  936.892866][ T4352] bridge0: port 2(bridge_slave_1) entered forwarding state
[  936.902942][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  936.912632][T14948] XFS (loop4): Quotacheck needed: Please wait.
[  936.919118][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  936.935148][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  936.971148][T14983] EXT4-fs (loop3): Test dummy encryption mode enabled
[  936.981367][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  937.009937][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  937.036635][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  937.062451][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  937.074228][T14948] XFS (loop4): Quotacheck: Done.
[  937.078760][T14983] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  937.103126][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  937.121772][T14888] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  937.122220][T14983] ext4 filesystem being mounted at /622/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  937.134999][T14888] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  937.318948][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  937.335069][ T4197] XFS (loop4): Unmounting Filesystem
[  937.340927][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  937.356644][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  937.368753][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  937.378576][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  937.839216][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  937.851925][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  937.888725][T14888] 8021q: adding VLAN 0 to HW filter on device batadv0
[  938.142572][T15007] loop3: detected capacity change from 0 to 512
[  938.203118][ T7067] Bluetooth: hci2: command 0x040f tx timeout
[  938.442307][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  938.565186][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  938.618077][T14888] device veth0_vlan entered promiscuous mode
[  938.625016][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  938.643039][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  938.885653][T14888] device veth1_vlan entered promiscuous mode
[  938.983337][T14888] device veth0_macvtap entered promiscuous mode
[  939.031094][T14888] device veth1_macvtap entered promiscuous mode
[  939.139930][T15022] netlink: 'syz.0.3189': attribute type 21 has an invalid length.
[  939.147839][T15022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3189'.
[  939.167652][T15022] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  939.176699][T15022] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  939.185567][T15022] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  939.194676][T15022] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  939.243276][T15026] loop3: detected capacity change from 0 to 1024
[  939.256666][T15022] netlink: 'syz.0.3189': attribute type 21 has an invalid length.
[  939.275380][T15026] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  939.279450][T15022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3189'.
[  939.304541][T15026] EXT4-fs (loop3): barriers disabled
[  939.313445][T15026] JBD2: no valid journal superblock found
[  939.324274][T15026] EXT4-fs (loop3): error loading journal
[  939.404128][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  939.437526][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  939.526344][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  939.630264][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  939.639289][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  940.288996][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  940.301932][T15019] loop4: detected capacity change from 0 to 32768
[  940.309373][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  940.318463][T14888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  940.330844][T14888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  940.344617][T14888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  940.355400][T14888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  940.365277][T14888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  940.376138][T14888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  940.386008][T14888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  940.396981][T14888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  940.406851][T14888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  940.419601][T14888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  940.430789][ T7067] Bluetooth: hci2: command 0x0419 tx timeout
[  940.431895][T14888] batman_adv: batadv0: Interface activated: batadv_slave_0
[  940.471178][T14888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  940.481831][ T4261] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  940.485935][T14888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  940.512946][T15036] loop3: detected capacity change from 0 to 128
[  940.520003][T14888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  940.535282][T14888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  940.550448][T14888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  940.562505][T14888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  940.572963][T14888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  940.584095][T14888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  940.594215][T14888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  940.594470][T15019] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  940.605278][T14888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  940.661140][T14888] batman_adv: batadv0: Interface activated: batadv_slave_1
[  940.670644][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  940.695273][T15036] EXT4-fs (loop3): Test dummy encryption mode enabled
[  940.695913][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  940.711546][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  940.720963][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  940.730895][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  940.746088][ T4197] ocfs2: Unmounting device (7,4) on (node local)
[  940.773705][T15040] netlink: 'syz.1.3194': attribute type 1 has an invalid length.
[  940.783344][T15036] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  940.803772][T15036] ext4 filesystem being mounted at /626/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  940.872038][T15040] 8021q: adding VLAN 0 to HW filter on device bond1
[  940.894828][ T4261] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  940.903322][ T4261] usb 1-1: config 0 has no interface number 0
[  940.917054][ T4261] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  940.935177][T14888] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  940.949711][T15047] loop4: detected capacity change from 0 to 128
[  940.965332][T14888] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  940.974942][T14888] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  940.984380][T14888] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  940.993386][ T4261] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  941.006160][ T4261] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  941.020515][ T4261] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  941.587055][ T4261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  941.600915][T15047] EXT4-fs (loop4): Test dummy encryption mode enabled
[  941.612182][ T4261] usb 1-1: config 0 descriptor??
[  941.662247][T15047] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  941.730185][T15047] ext4 filesystem being mounted at /589/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  942.567840][ T4261] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0042.001F/input/input44
[  942.662771][ T4261] uclogic 0003:28BD:0042.001F: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.0-1/input1
[  942.816792][T13980] usb 1-1: USB disconnect, device number 30
[  943.520930][T15068] fido_id[15068]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  943.587548][T15075] FAULT_INJECTION: forcing a failure.
[  943.587548][T15075] name failslab, interval 1, probability 0, space 0, times 0
[  943.622191][T15075] CPU: 0 PID: 15075 Comm: syz.3.3202 Not tainted syzkaller #0
[  943.629775][T15075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  943.639837][T15075] Call Trace:
[  943.643124][T15075]  <TASK>
[  943.646060][T15075]  dump_stack_lvl+0x188/0x250
[  943.650745][T15075]  ? show_regs_print_info+0x20/0x20
[  943.655946][T15075]  ? load_image+0x410/0x410
[  943.660456][T15075]  ? __lock_acquire+0x7d40/0x7d40
[  943.665488][T15075]  ? __might_fault+0xb7/0x110
[  943.670175][T15075]  should_fail+0x383/0x4b0
[  943.674603][T15075]  should_failslab+0x5/0x20
[  943.679113][T15075]  slab_pre_alloc_hook+0x51/0xc0
[  943.684060][T15075]  ? __se_sys_add_key+0x1c0/0x410
[  943.689173][T15075]  __kmalloc_track_caller+0x69/0x330
[  943.694464][T15075]  ? __se_sys_add_key+0x1c0/0x410
[  943.699507][T15075]  ? strnlen_user+0x150/0x250
[  943.704194][T15075]  strndup_user+0x71/0x150
[  943.708623][T15075]  __se_sys_add_key+0x1c0/0x410
[  943.713484][T15075]  ? __x64_sys_add_key+0xc0/0xc0
[  943.718437][T15075]  ? lockdep_hardirqs_on+0x94/0x140
[  943.723640][T15075]  ? __x64_sys_add_key+0x1c/0xc0
[  943.728584][T15075]  do_syscall_64+0x4c/0xa0
[  943.733003][T15075]  ? clear_bhb_loop+0x30/0x80
[  943.737691][T15075]  ? clear_bhb_loop+0x30/0x80
[  943.742383][T15075]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  943.748286][T15075] RIP: 0033:0x7f1c946f3559
[  943.752705][T15075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  943.772313][T15075] RSP: 002b:00007f1c9294b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  943.780738][T15075] RAX: ffffffffffffffda RBX: 00007f1c9497afa0 RCX: 00007f1c946f3559
[  943.788721][T15075] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000000
[  943.796704][T15075] RBP: 00007f1c9478a8b0 R08: ffffffffffffffff R09: 0000000000000000
[  943.804685][T15075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  943.812666][T15075] R13: 00007f1c9497b038 R14: 00007f1c9497afa0 R15: 00007ffcc01b6688
[  943.820654][T15075]  </TASK>
[  944.089628][T15087] loop3: detected capacity change from 0 to 128
[  944.129054][T15089] loop4: detected capacity change from 0 to 128
[  944.165893][ T6302] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  944.181204][T15089] EXT4-fs (loop4): Test dummy encryption mode enabled
[  944.193217][T15089] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  944.210037][T15089] ext4 filesystem being mounted at /590/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  944.246889][T15087] EXT4-fs (loop3): Test dummy encryption mode enabled
[  944.311455][T15087] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  944.382776][T15087] ext4 filesystem being mounted at /632/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  944.403847][T15096] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  944.436663][ T6302] usb 2-1: Using ep0 maxpacket: 8
[  945.693443][ T6302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  945.704626][ T6302] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  945.713674][ T6302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  945.724932][ T6302] usb 2-1: config 0 descriptor??
[  945.748012][ T3559]  loop0: p1 < > p4
[  945.748012][ T3559]  p4: <netbsd: >
[  945.763601][ T3559] loop0: p4 size 722688 extends beyond EOD, truncated
[  946.740502][ T6302] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  946.858549][T15109] loop3: detected capacity change from 0 to 128
[  946.965974][T15109] EXT4-fs (loop3): Test dummy encryption mode enabled
[  946.982752][T15109] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  946.999455][T15109] ext4 filesystem being mounted at /633/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  947.301321][ T4313] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  947.474863][ T6637] usb 2-1: USB disconnect, device number 29
[  947.691462][ T6302] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  947.749540][T15133] loop4: detected capacity change from 0 to 128
[  947.770284][T15133] EXT4-fs (loop4): Test dummy encryption mode enabled
[  947.781940][T15133] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  947.800761][T15133] ext4 filesystem being mounted at /596/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  947.874628][T15137] netlink: 'syz.3.3220': attribute type 1 has an invalid length.
[  948.039614][T15137] 8021q: adding VLAN 0 to HW filter on device bond1
[  948.102872][ T6302] usb 1-1: Using ep0 maxpacket: 8
[  948.356118][T15138] bond1: (slave geneve2): making interface the new active one
[  948.378327][T15138] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  948.401900][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  948.411643][ T6302] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  948.455246][ T6302] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  948.501281][T15141] rxe_eth0 speed is unknown, defaulting to 1000
[  948.508996][ T6302] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  948.544026][T15150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3224'.
[  948.553299][ T6302] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  948.559015][T15152] FAULT_INJECTION: forcing a failure.
[  948.559015][T15152] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  948.563220][ T6302] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  948.563264][ T6302] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  948.563283][ T6302] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  948.590945][T15152] CPU: 1 PID: 15152 Comm: syz.3.3226 Not tainted syzkaller #0
[  948.615266][T15152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  948.625327][T15152] Call Trace:
[  948.628615][T15152]  <TASK>
[  948.631551][T15152]  dump_stack_lvl+0x188/0x250
[  948.636244][T15152]  ? show_regs_print_info+0x20/0x20
[  948.641457][T15152]  ? load_image+0x410/0x410
[  948.645975][T15152]  ? __lock_acquire+0x7d40/0x7d40
[  948.651015][T15152]  ? vb2_core_reqbufs+0x8e4/0xf30
[  948.656112][T15152]  ? v4l2_m2m_ioctl_reqbufs+0xd9/0x1c0
[  948.661657][T15152]  should_fail+0x383/0x4b0
[  948.666088][T15152]  prepare_alloc_pages+0x1e3/0x5b0
[  948.671213][T15152]  __alloc_pages+0x11b/0x480
[  948.675818][T15152]  ? zone_statistics+0x170/0x170
[  948.680787][T15152]  __vmalloc_node_range+0x4b1/0x8b0
[  948.686007][T15152]  vmalloc_user+0x70/0x80
[  948.690343][T15152]  ? vb2_vmalloc_alloc+0xec/0x330
[  948.695377][T15152]  vb2_vmalloc_alloc+0xec/0x330
[  948.700239][T15152]  ? vb2_common_vm_close+0x140/0x140
[  948.705530][T15152]  __vb2_queue_alloc+0x737/0x1390
[  948.710583][T15152]  vb2_core_reqbufs+0x8e4/0xf30
[  948.715455][T15152]  ? vb2_verify_memory_type+0x570/0x570
[  948.721020][T15152]  ? vb2_reqbufs+0x2fc/0x520
[  948.725635][T15152]  v4l2_m2m_ioctl_reqbufs+0xd9/0x1c0
[  948.730935][T15152]  __video_do_ioctl+0xa10/0xe40
[  948.735884][T15152]  ? __lock_acquire+0x7d40/0x7d40
[  948.740912][T15152]  ? video_ioctl2+0x30/0x30
[  948.745414][T15152]  ? __might_fault+0xb3/0x110
[  948.750080][T15152]  ? _copy_from_user+0x111/0x170
[  948.755075][T15152]  video_usercopy+0x930/0xf10
[  948.759748][T15152]  ? video_ioctl2+0x30/0x30
[  948.764235][T15152]  ? v4l_printk_ioctl+0x130/0x130
[  948.769258][T15152]  v4l2_ioctl+0x183/0x1d0
[  948.773582][T15152]  ? v4l2_poll+0x2b0/0x2b0
[  948.777979][T15152]  __se_sys_ioctl+0xfa/0x170
[  948.782552][T15152]  do_syscall_64+0x4c/0xa0
[  948.786950][T15152]  ? clear_bhb_loop+0x30/0x80
[  948.791609][T15152]  ? clear_bhb_loop+0x30/0x80
[  948.796269][T15152]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  948.802147][T15152] RIP: 0033:0x7f1c946f3559
[  948.806560][T15152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  948.826167][T15152] RSP: 002b:00007f1c9294b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  948.834572][T15152] RAX: ffffffffffffffda RBX: 00007f1c9497afa0 RCX: 00007f1c946f3559
[  948.842525][T15152] RDX: 00002000000002c0 RSI: 00000000c0145608 RDI: 0000000000000004
[  948.850479][T15152] RBP: 00007f1c9478a8b0 R08: 0000000000000000 R09: 0000000000000000
[  948.858435][T15152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  948.866389][T15152] R13: 00007f1c9497b038 R14: 00007f1c9497afa0 R15: 00007ffcc01b6688
[  948.874363][T15152]  </TASK>
[  948.916868][T15141] lo speed is unknown, defaulting to 1000
[  948.926233][T15156] FAULT_INJECTION: forcing a failure.
[  948.926233][T15156] name failslab, interval 1, probability 0, space 0, times 0
[  948.951228][T15156] CPU: 0 PID: 15156 Comm: syz.1.3227 Not tainted syzkaller #0
[  948.958724][T15156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  948.968878][T15156] Call Trace:
[  948.972164][T15156]  <TASK>
[  948.975097][T15156]  dump_stack_lvl+0x188/0x250
[  948.979787][T15156]  ? show_regs_print_info+0x20/0x20
[  948.985001][T15156]  ? load_image+0x410/0x410
[  948.989528][T15156]  ? __lock_acquire+0x7d40/0x7d40
[  948.994584][T15156]  should_fail+0x383/0x4b0
[  948.999001][T15156]  should_failslab+0x5/0x20
[  949.003514][T15156]  slab_pre_alloc_hook+0x51/0xc0
[  949.008453][T15156]  __kmalloc+0x6b/0x340
[  949.012611][T15156]  ? apply_wqattrs_prepare+0xb3/0xad0
[  949.018092][T15156]  apply_wqattrs_prepare+0xb3/0xad0
[  949.023405][T15156]  ? mutex_lock_io_nested+0x60/0x60
[  949.028631][T15156]  apply_workqueue_attrs+0xd0/0x170
[  949.033825][T15156]  alloc_workqueue+0xf1e/0x1450
[  949.038669][T15156]  ? vsnprintf+0x1b22/0x1c20
[  949.043283][T15156]  ? snprintf+0xe5/0x140
[  949.047518][T15156]  ? apply_workqueue_attrs+0x170/0x170
[  949.052987][T15156]  nci_register_device+0x3fc/0x9f0
[  949.058160][T15156]  ? nci_free_device+0x90/0x90
[  949.062923][T15156]  ? nci_hci_allocate+0x1dd/0x2a0
[  949.067937][T15156]  ? nci_allocate_device+0x241/0x350
[  949.073209][T15156]  virtual_ncidev_open+0x55/0xc0
[  949.078213][T15156]  ? virtual_ncidev_ioctl+0x90/0x90
[  949.083393][T15156]  misc_open+0x31f/0x390
[  949.087680][T15156]  chrdev_open+0x585/0x5f0
[  949.092089][T15156]  ? cd_forget+0x160/0x160
[  949.096513][T15156]  ? fsnotify_perm+0x3a7/0x560
[  949.101278][T15156]  ? cd_forget+0x160/0x160
[  949.105686][T15156]  do_dentry_open+0x7f7/0xf90
[  949.110346][T15156]  ? vfs_open+0x2b/0x80
[  949.114491][T15156]  path_openat+0x2718/0x2fb0
[  949.119080][T15156]  ? __kasan_slab_alloc+0xa9/0xc0
[  949.124097][T15156]  ? do_filp_open+0x400/0x400
[  949.128771][T15156]  do_filp_open+0x1df/0x400
[  949.133270][T15156]  ? vfs_tmpfile+0x300/0x300
[  949.137862][T15156]  ? _raw_spin_unlock+0x24/0x40
[  949.142699][T15156]  ? alloc_fd+0x59e/0x650
[  949.147016][T15156]  do_sys_openat2+0x14b/0x500
[  949.151680][T15156]  ? __lock_acquire+0x7d40/0x7d40
[  949.156690][T15156]  ? do_sys_open+0xe0/0xe0
[  949.161093][T15156]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  949.167062][T15156]  ? lock_chain_count+0x20/0x20
[  949.171912][T15156]  __x64_sys_openat+0x135/0x160
[  949.176755][T15156]  do_syscall_64+0x4c/0xa0
[  949.181182][T15156]  ? clear_bhb_loop+0x30/0x80
[  949.185855][T15156]  ? clear_bhb_loop+0x30/0x80
[  949.190522][T15156]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  949.196406][T15156] RIP: 0033:0x7fafcbcfd559
[  949.200814][T15156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  949.220407][T15156] RSP: 002b:00007fafc9f55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  949.228820][T15156] RAX: ffffffffffffffda RBX: 00007fafcbf84fa0 RCX: 00007fafcbcfd559
[  949.236777][T15156] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  949.244731][T15156] RBP: 00007fafcbd948b0 R08: 0000000000000000 R09: 0000000000000000
[  949.252683][T15156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  949.260637][T15156] R13: 00007fafcbf85038 R14: 00007fafcbf84fa0 R15: 00007ffca8e8c5a8
[  949.268606][T15156]  </TASK>
[  949.289572][ T6302] usb 1-1: usb_control_msg returned -32
[  949.295693][ T6302] usbtmc 1-1:16.0: can't read capabilities
[  949.424340][T15141] chnl_net:caif_netlink_parms(): no params data found
[  949.448811][ T7067] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  949.494916][ T4313] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  949.523378][T15141] bridge0: port 1(bridge_slave_0) entered blocking state
[  949.530959][T15141] bridge0: port 1(bridge_slave_0) entered disabled state
[  949.538976][T15141] device bridge_slave_0 entered promiscuous mode
[  949.548170][T15141] bridge0: port 2(bridge_slave_1) entered blocking state
[  949.555963][T15141] bridge0: port 2(bridge_slave_1) entered disabled state
[  949.564279][T15141] device bridge_slave_1 entered promiscuous mode
[  949.577385][ T4313] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  949.601142][T15141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  949.612820][T15141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  949.635742][ T4313] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  949.661122][T15141] team0: Port device team_slave_0 added
[  949.669538][T15141] team0: Port device team_slave_1 added
[  949.684786][T15141] batman_adv: batadv0: Adding interface: batadv_slave_0
[  949.691886][T15141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  949.718396][T15141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  949.733528][ T6637] usb 2-1: new full-speed USB device number 30 using dummy_hcd
[  949.742943][T15141] batman_adv: batadv0: Adding interface: batadv_slave_1
[  949.757617][T15141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  949.787172][T15141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  949.834033][T15141] device hsr_slave_0 entered promiscuous mode
[  949.840730][T15141] device hsr_slave_1 entered promiscuous mode
[  949.848078][T15141] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  949.855988][ T7067] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  949.857989][T15141] Cannot create hsr debugfs directory
[  949.865219][ T7067] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  949.879295][T15169] usbtmc 1-1:16.0: usb_control_msg returned -71
[  950.074639][   T26] usb 1-1: USB disconnect, device number 31
[  950.146077][ T7067] cdc_acm 5-1:1.0: ttyACM0: USB ACM device
[  950.178590][ T6637] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 37408, setting to 64
[  950.402374][ T6637] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  950.412036][ T6637] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  950.426796][ T6637] usb 2-1: Product: syz
[  950.446409][ T6637] usb 2-1: Manufacturer: syz
[  950.455970][ T6637] usb 2-1: SerialNumber: syz
[  950.480904][ T7053] Bluetooth: hci2: command 0x0409 tx timeout
[  950.503116][T15164] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  950.677651][T15200] overlayfs: upper fs does not support file handles, falling back to index=off.
[  950.705446][ T3559]  loop0: p1 < > p4
[  950.705446][ T3559]  p4: <netbsd: >
[  950.715126][ T3559] loop0: p4 size 722688 extends beyond EOD, truncated
[  950.931769][T15211] loop3: detected capacity change from 0 to 128
[  951.023235][T15211] EXT4-fs (loop3): Test dummy encryption mode enabled
[  951.092286][T15213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3234'.
[  951.114075][T15213] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  951.229144][ T7053] usb 5-1: USB disconnect, device number 36
[  951.469232][T15211] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  951.586347][ T6637] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  951.655565][T15211] ext4 filesystem being mounted at /639/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  951.875558][ T4313] device hsr_slave_0 left promiscuous mode
[  951.884555][ T4313] device hsr_slave_1 left promiscuous mode
[  951.894154][ T4313] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  951.903611][ T4313] batman_adv: batadv0: Removing interface: batadv_slave_0
[  951.926818][ T4313] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  951.935163][ T4313] batman_adv: batadv0: Removing interface: batadv_slave_1
[  951.981360][ T4313] device bridge_slave_1 left promiscuous mode
[  952.138054][ T4313] bridge0: port 2(bridge_slave_1) entered disabled state
[  952.249478][ T4313] device bridge_slave_0 left promiscuous mode
[  952.283275][ T4313] bridge0: port 1(bridge_slave_0) entered disabled state
[  952.381470][ T4313] device veth1_macvtap left promiscuous mode
[  952.389277][ T4313] device veth0_macvtap left promiscuous mode
[  952.395495][ T4313] device veth1_vlan left promiscuous mode
[  952.401865][ T4313] device veth0_vlan left promiscuous mode
[  952.661990][T15221] loop4: detected capacity change from 0 to 32768
[  952.668809][ T6637] usb 2-1: USB disconnect, device number 30
[  952.695013][ T6637] usblp0: removed
[  952.730701][T15221]  loop4: p1 p3 < >
[  952.735071][T13980] Bluetooth: hci2: command 0x041b tx timeout
[  953.011793][ T4313] team0 (unregistering): Port device team_slave_1 removed
[  953.036721][ T4313] team0 (unregistering): Port device team_slave_0 removed
[  953.054794][ T4313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  953.075611][ T4313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  953.181897][ T4313] bond0 (unregistering): Released all slaves
[  953.457531][ T4397] udevd[4397]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  953.469658][T15141] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  953.496787][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  953.621377][T15141] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  953.656755][T15141] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  954.144611][T15141] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  954.293694][T15260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3247'.
[  954.313804][T15260] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  954.870159][T15263] FAULT_INJECTION: forcing a failure.
[  954.870159][T15263] name failslab, interval 1, probability 0, space 0, times 0
[  954.898539][T15263] CPU: 1 PID: 15263 Comm: syz.1.3249 Not tainted syzkaller #0
[  954.906047][T15263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  954.916110][T15263] Call Trace:
[  954.919532][T15263]  <TASK>
[  954.922475][T15263]  dump_stack_lvl+0x188/0x250
[  954.927165][T15263]  ? show_regs_print_info+0x20/0x20
[  954.932366][T15263]  ? load_image+0x410/0x410
[  954.936885][T15263]  ? __might_sleep+0xf0/0xf0
[  954.941484][T15263]  ? __lock_acquire+0x7d40/0x7d40
[  954.946519][T15263]  ? rcu_is_watching+0x11/0xa0
[  954.951300][T15263]  should_fail+0x383/0x4b0
[  954.955730][T15263]  should_failslab+0x5/0x20
[  954.960254][T15263]  slab_pre_alloc_hook+0x51/0xc0
[  954.965203][T15263]  ? __pmd_alloc+0x116/0x750
[  954.969806][T15263]  kmem_cache_alloc+0x3d/0x280
[  954.974594][T15263]  __pmd_alloc+0x116/0x750
[  954.979038][T15263]  ? __pud_alloc+0x140/0x140
[  954.983645][T15263]  ? count_memcg_event_mm+0x324/0x370
[  954.987040][ T7053] Bluetooth: hci2: command 0x040f tx timeout
[  954.989024][T15263]  ? remove_device_exclusive_entry+0xac0/0xac0
[  954.995736][T15141] 8021q: adding VLAN 0 to HW filter on device bond0
[  955.001159][T15263]  ? __lock_acquire+0x13b3/0x7d40
[  955.001197][T15263]  handle_mm_fault+0xbd3/0x4440
[  955.001228][T15263]  ? get_page+0xe0/0xe0
[  955.001253][T15263]  ? vmacache_find+0x4e3/0x590
[  955.001269][T15263]  ? vmacache_update+0xa0/0x100
[  955.001289][T15263]  ? find_vma+0x1df/0x230
[  955.001307][T15263]  do_user_addr_fault+0x494/0xc90
[  955.001368][T15263]  exc_page_fault+0x60/0x100
[  955.001392][T15263]  asm_exc_page_fault+0x22/0x30
[  955.001410][T15263] RIP: 0010:copy_user_generic_unrolled+0xa0/0xc0
[  955.039996][T15141] 8021q: adding VLAN 0 to HW filter on device team0
[  955.042067][T15263] Code: 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a 06 <88> 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 01 ca c3 90 90 90 90
[  955.042084][T15263] RSP: 0018:ffffc9000350fca0 EFLAGS: 00050202
[  955.042100][T15263] RAX: ffffffff83e93b00 RBX: 0000000000000004 RCX: 0000000000000004
[  955.042112][T15263] RDX: 0000000000000004 RSI: ffffc9000350fda0 RDI: 0000000000000000
[  955.042124][T15263] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  955.042134][T15263] R10: dffffc0000000000 R11: fffff520006a1fb4 R12: 00007ffffffff000
[  955.042147][T15263] R13: 0000000000000004 R14: ffffc9000350fda0 R15: 0000000000000000
[  955.091477][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  955.099789][T15263]  ? _copy_from_user+0x170/0x170
[  955.099821][T15263]  _copy_to_user+0xf0/0x130
[  955.099839][T15263]  do_timer_create+0xc42/0x1250
[  955.128410][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  955.131724][T15263]  ? __ia32_sys_clock_nanosleep_time32+0xa0/0xa0
[  955.150108][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  955.153150][T15263]  ? __context_tracking_exit+0x4c/0x80
[  955.180167][T15263]  __x64_sys_timer_create+0x149/0x1c0
[  955.185560][T15263]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  955.191552][T15263]  ? posix_timer_event+0xf0/0xf0
[  955.196501][T15263]  ? lock_chain_count+0x20/0x20
[  955.201358][T15263]  ? lockdep_hardirqs_on+0x94/0x140
[  955.206595][T15263]  do_syscall_64+0x4c/0xa0
[  955.211017][T15263]  ? clear_bhb_loop+0x30/0x80
[  955.215687][T15263]  ? clear_bhb_loop+0x30/0x80
[  955.220356][T15263]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  955.226241][T15263] RIP: 0033:0x7fafcbcfd559
[  955.230646][T15263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  955.250238][T15263] RSP: 002b:00007fafc9f55028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de
[  955.258641][T15263] RAX: ffffffffffffffda RBX: 00007fafcbf84fa0 RCX: 00007fafcbcfd559
[  955.266595][T15263] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  955.274547][T15263] RBP: 00007fafcbd948b0 R08: 0000000000000000 R09: 0000000000000000
[  955.282500][T15263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  955.290455][T15263] R13: 00007fafcbf85038 R14: 00007fafcbf84fa0 R15: 00007ffca8e8c5a8
[  955.298422][T15263]  </TASK>
[  955.331979][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  955.342289][ T4438] bridge0: port 1(bridge_slave_0) entered blocking state
[  955.349428][ T4438] bridge0: port 1(bridge_slave_0) entered forwarding state
[  955.379702][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  955.399067][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  955.407690][ T4438] bridge0: port 2(bridge_slave_1) entered blocking state
[  955.414860][ T4438] bridge0: port 2(bridge_slave_1) entered forwarding state
[  955.436150][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  955.436380][ T3559]  loop0: p1 < > p4
[  955.436380][ T3559]  p4: <netbsd: >
[  955.451691][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  955.463232][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  955.474835][ T3559] loop0: p4 size 722688 extends beyond EOD, truncated
[  955.480793][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  955.494630][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  955.509302][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  955.525661][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  955.536008][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  955.599665][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  955.628561][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  955.689450][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  955.768839][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  955.794180][T15141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  956.065806][T15301] loop3: detected capacity change from 0 to 128
[  956.112724][T15301] EXT4-fs (loop3): Test dummy encryption mode enabled
[  956.185236][T15301] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  956.236831][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  956.265916][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  956.280754][T15301] ext4 filesystem being mounted at /646/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  956.295686][T15141] 8021q: adding VLAN 0 to HW filter on device batadv0
[  956.310691][T15310] loop4: detected capacity change from 0 to 128
[  957.397343][ T6302] Bluetooth: hci2: command 0x0419 tx timeout
[  957.749123][T15316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3261'.
[  958.097168][T15314] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  958.147380][T15310] EXT4-fs (loop4): Test dummy encryption mode enabled
[  958.211385][T15310] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  958.266471][T15310] ext4 filesystem being mounted at /604/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  958.538635][ T3559]  loop0: p1 < > p4
[  958.538635][ T3559]  p4: <netbsd: >
[  958.602776][ T3559] loop0: p4 size 722688 extends beyond EOD, truncated
[  959.133529][T15334] loop3: detected capacity change from 0 to 128
[  959.218525][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  959.241238][T15334] EXT4-fs (loop3): Test dummy encryption mode enabled
[  959.274030][T15334] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  959.277539][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  959.311163][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  959.337724][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  959.357664][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  959.399113][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  959.423962][T15334] ext4 filesystem being mounted at /648/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  959.480226][T15141] device veth0_vlan entered promiscuous mode
[  959.489864][ T3559]  loop0: p1 < > p4
[  959.489864][ T3559]  p4: <netbsd: >
[  959.494810][T15141] device veth1_vlan entered promiscuous mode
[  959.524570][T15141] device veth0_macvtap entered promiscuous mode
[  959.534525][T15141] device veth1_macvtap entered promiscuous mode
[  959.676788][ T3559] loop0: p4 size 722688 extends beyond EOD, truncated
[  960.571417][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  960.618737][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  960.632358][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  961.243674][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  961.299940][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  961.341482][T15141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  961.375583][T15141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  961.404548][T15141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  961.433747][T15141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  961.488279][T15141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  961.503994][T15141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  961.540248][T15141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  961.564344][T15141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  961.566805][T15362] loop4: detected capacity change from 0 to 256
[  961.581204][T15141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  961.595001][T15141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  961.613665][T15141] batman_adv: batadv0: Interface activated: batadv_slave_0
[  961.624091][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  961.640523][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  961.686095][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  961.768516][T15360] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  961.838803][T15141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  961.865136][T15141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  961.886363][T15141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  961.907745][T15366] syz.3.3276 sent an empty control message without MSG_MORE.
[  961.926737][T15141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  961.952789][T15141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  962.066619][T15141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  962.125045][T15141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  962.135587][T15141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  962.164316][T15141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  962.439956][T15141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  962.517061][T15141] batman_adv: batadv0: Interface activated: batadv_slave_1
[  962.679888][T15141] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  962.736836][T15141] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  962.774265][T15141] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  962.803530][T15141] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  962.831009][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  962.846461][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  962.870440][T15380] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3280'.
[  962.895221][T15380] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3280'.
[  962.970505][T15384] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3280'.
[  962.994337][T15384] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3280'.
[  963.044269][T15387] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  963.072400][T15388] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  963.546985][T15410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3285'.
[  963.569989][T15410] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  963.896608][T15411] FAULT_INJECTION: forcing a failure.
[  963.896608][T15411] name failslab, interval 1, probability 0, space 0, times 0
[  964.090601][T15411] CPU: 0 PID: 15411 Comm: syz.0.3289 Not tainted syzkaller #0
[  964.098105][T15411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  964.108216][T15411] Call Trace:
[  964.111507][T15411]  <TASK>
[  964.114456][T15411]  dump_stack_lvl+0x188/0x250
[  964.119152][T15411]  ? show_regs_print_info+0x20/0x20
[  964.124371][T15411]  ? load_image+0x410/0x410
[  964.128902][T15411]  should_fail+0x383/0x4b0
[  964.133428][T15411]  should_failslab+0x5/0x20
[  964.138633][T15411]  slab_pre_alloc_hook+0x51/0xc0
[  964.143589][T15411]  kmem_cache_alloc_trace+0x47/0x290
[  964.150625][T15411]  ? tipc_group_create+0x97/0x4e0
[  964.155755][T15411]  tipc_group_create+0x97/0x4e0
[  964.160631][T15411]  tipc_sk_join+0x256/0x6a0
[  964.165163][T15411]  ? __tipc_sendstream+0x1280/0x1280
[  964.170473][T15411]  tipc_setsockopt+0x6b8/0x960
[  964.175278][T15411]  ? tipc_shutdown+0x4d0/0x4d0
[  964.180052][T15411]  ? aa_sock_opt_perm+0x74/0x100
[  964.184996][T15411]  ? bpf_lsm_socket_setsockopt+0x5/0x10
[  964.190533][T15411]  ? security_socket_setsockopt+0x7a/0xa0
[  964.196234][T15411]  ? tipc_shutdown+0x4d0/0x4d0
[  964.200986][T15411]  __sys_setsockopt+0x2bf/0x3d0
[  964.205824][T15411]  __x64_sys_setsockopt+0xb1/0xc0
[  964.210829][T15411]  do_syscall_64+0x4c/0xa0
[  964.215225][T15411]  ? clear_bhb_loop+0x30/0x80
[  964.219888][T15411]  ? clear_bhb_loop+0x30/0x80
[  964.224575][T15411]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  964.230463][T15411] RIP: 0033:0x7fdbf1205559
[  964.234885][T15411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  964.254469][T15411] RSP: 002b:00007fdbef45d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  964.262868][T15411] RAX: ffffffffffffffda RBX: 00007fdbf148cfa0 RCX: 00007fdbf1205559
[  964.270825][T15411] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003
[  964.278799][T15411] RBP: 00007fdbf129c8b0 R08: 0000000000000010 R09: 0000000000000000
[  964.286755][T15411] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[  964.294710][T15411] R13: 00007fdbf148d038 R14: 00007fdbf148cfa0 R15: 00007ffed8671d28
[  964.302675][T15411]  </TASK>
[  964.386595][T13980] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  964.492640][T15416] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  964.575055][T15417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3290'.
[  964.603706][T15417] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  965.007771][T15419] device ip6gre1 entered promiscuous mode
[  965.376860][T13980] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  965.398547][T13980] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  965.436657][T15434] kvm: emulating exchange as write
[  965.580721][T13980] usb 4-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00
[  965.589962][T13980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  965.598087][T13980] usb 4-1: Product: syz
[  965.602591][T13980] usb 4-1: Manufacturer: syz
[  965.607267][T13980] usb 4-1: SerialNumber: syz
[  965.692477][ T8118] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  965.748037][ T3559]  loop0: p1 < > p4
[  965.748037][ T3559]  p4: <netbsd: >
[  965.756102][ T3559] loop0: p4 size 722688 extends beyond EOD, truncated
[  965.870222][ T3559]  loop0: p1 < > p4
[  965.870222][ T3559]  p4: <netbsd: >
[  965.913263][ T3559] loop0: p4 size 722688 extends beyond EOD, truncated
[  966.880939][ T8118] usb 2-1: config 0 has no interfaces?
[  966.886498][ T8118] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  966.905225][  T144] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  966.912765][ T8118] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  966.946606][ T8118] usb 2-1: config 0 descriptor??
[  967.086408][T13980] usb 4-1: cannot find UAC_HEADER
[  967.146026][T13980] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[  967.182863][T13980] usb 4-1: USB disconnect, device number 26
[  967.206307][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  967.281476][ T6637] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  967.295368][  T144] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  967.357875][T15468] rxe_eth0 speed is unknown, defaulting to 1000
[  967.388907][T15465] loop4: detected capacity change from 0 to 32768
[  967.397502][  T144] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  967.446350][T15465] 
[  967.446350][T15465]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  967.446350][T15465] 
[  967.485375][   T25] audit: type=1800 audit(1792112492.406:41): pid=15465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3310" name="file1" dev="loop4" ino=4 res=0 errno=0
[  967.488006][T15465] ERROR: (device loop4): diWrite: ixpxd invalid
[  967.488006][T15465] 
[  967.524893][  T144] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  967.571112][T15465] ERROR: (device loop4): txCommit: 
[  967.571112][T15465] 
[  967.578755][T15468] lo speed is unknown, defaulting to 1000
[  967.585083][ T6637] usb 1-1: Using ep0 maxpacket: 32
[  967.645012][ T4197] 
[  967.645012][ T4197]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  967.645012][ T4197] 
[  967.675612][ T4197] 
[  967.675612][ T4197]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  967.675612][ T4197] 
[  967.747358][ T6637] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  967.848056][T15467] loop3: detected capacity change from 0 to 32768
[  967.969850][ T6637] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  967.980742][ T6637] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  967.989893][ T6637] usb 1-1: Product: syz
[  967.994110][ T6637] usb 1-1: Manufacturer: syz
[  968.010109][ T6637] usb 1-1: SerialNumber: syz
[  968.015790][T15467] XFS (loop3): Mounting V5 Filesystem
[  968.016582][ T6637] usb 1-1: config 0 descriptor??
[  968.024785][T15468] chnl_net:caif_netlink_parms(): no params data found
[  968.044764][T15462] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  968.074836][ T6637] hub 1-1:0.0: bad descriptor, ignoring hub
[  968.080816][ T6637] hub: probe of 1-1:0.0 failed with error -5
[  968.118290][T15468] bridge0: port 1(bridge_slave_0) entered blocking state
[  968.132213][T15468] bridge0: port 1(bridge_slave_0) entered disabled state
[  968.141479][T15468] device bridge_slave_0 entered promiscuous mode
[  968.162157][T15468] bridge0: port 2(bridge_slave_1) entered blocking state
[  968.163684][T15467] XFS (loop3): Ending clean mount
[  968.198005][T15468] bridge0: port 2(bridge_slave_1) entered disabled state
[  968.211879][T15468] device bridge_slave_1 entered promiscuous mode
[  968.827068][ T4196] XFS (loop3): Unmounting Filesystem
[  968.842038][T15468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  968.857936][T15468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  968.890007][T15468] team0: Port device team_slave_0 added
[  968.898861][T15468] team0: Port device team_slave_1 added
[  968.907918][ T4261] usb 2-1: USB disconnect, device number 31
[  968.952357][T13980] Bluetooth: hci1: command 0x0406 tx timeout
[  969.038114][T15505] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  969.134714][T15468] batman_adv: batadv0: Adding interface: batadv_slave_0
[  969.155263][T15468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  969.286107][T15468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  969.348799][T15468] batman_adv: batadv0: Adding interface: batadv_slave_1
[  969.356138][T15468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  969.388135][T15468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  969.624355][T15519] loop4: detected capacity change from 0 to 1024
[  969.683098][T15519] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  969.694105][ T7067] Bluetooth: hci2: command 0x0409 tx timeout
[  969.793111][T15519] EXT4-fs (loop4): barriers disabled
[  969.824452][T15519] JBD2: no valid journal superblock found
[  969.876638][T15519] EXT4-fs (loop4): error loading journal
[  969.887180][T15468] device hsr_slave_0 entered promiscuous mode
[  969.904939][T15468] device hsr_slave_1 entered promiscuous mode
[  969.936717][T15526] loop3: detected capacity change from 0 to 128
[  969.964009][T15468] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  969.976488][T15468] Cannot create hsr debugfs directory
[  970.070224][T15526] EXT4-fs (loop3): Test dummy encryption mode enabled
[  971.095170][ T7067] usb 1-1: USB disconnect, device number 32
[  971.139847][T15526] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  971.248955][T15526] ext4 filesystem being mounted at /655/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  971.295753][T15542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3322'.
[  971.363647][T15542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3322'.
[  972.092414][ T6302] Bluetooth: hci2: command 0x041b tx timeout
[  972.101838][ T3559]  loop0: p1 < > p4
[  972.101838][ T3559]  p4: <netbsd: >
[  972.180910][ T3559] loop0: p4 size 722688 extends beyond EOD, truncated
[  972.909070][  T144] device hsr_slave_0 left promiscuous mode
[  972.931664][  T144] device hsr_slave_1 left promiscuous mode
[  972.990023][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  972.997473][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  973.044505][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  973.054776][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  973.066310][  T144] device bridge_slave_1 left promiscuous mode
[  973.072541][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  973.072929][T15587] loop4: detected capacity change from 0 to 1024
[  973.133273][  T144] device bridge_slave_0 left promiscuous mode
[  973.153567][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  973.175450][T15587] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  973.228660][T15587] EXT4-fs (loop4): barriers disabled
[  973.241439][T15587] JBD2: no valid journal superblock found
[  973.258240][T15587] EXT4-fs (loop4): error loading journal
[  973.280746][  T144] device veth1_macvtap left promiscuous mode
[  973.324833][  T144] device veth0_macvtap left promiscuous mode
[  973.365959][  T144] device veth1_vlan left promiscuous mode
[  973.923469][  T144] device veth0_vlan left promiscuous mode
[  974.448460][ T4261] Bluetooth: hci2: command 0x040f tx timeout
[  974.516801][ T6302] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  974.578637][  T144] team0 (unregistering): Port device team_slave_1 removed
[  974.598038][  T144] team0 (unregistering): Port device team_slave_0 removed
[  974.613779][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  974.629411][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  974.695393][  T144] bond0 (unregistering): Released all slaves
[  974.776894][ T6302] usb 4-1: Using ep0 maxpacket: 16
[  974.809785][T15607] device ip6gre1 entered promiscuous mode
[  975.026089][ T6302] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  975.041907][ T6302] usb 4-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  975.055434][ T6302] usb 4-1: config 0 interface 0 has no altsetting 0
[  975.221568][ T6302] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[  975.230700][ T6302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  976.233872][T15617] loop4: detected capacity change from 0 to 128
[  976.245387][ T6302] usb 4-1: config 0 descriptor??
[  976.308619][T15468] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  976.530979][T15468] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  976.547954][T15617] EXT4-fs (loop4): Test dummy encryption mode enabled
[  976.556459][ T3559]  loop0: p1 < > p4
[  976.556459][ T3559]  p4: <netbsd: >
[  976.570514][T15468] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  976.599466][ T3559] loop0: p4 size 722688 extends beyond EOD, truncated
[  976.612334][T15617] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  976.650033][T15468] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  976.657077][T13980] Bluetooth: hci2: command 0x0419 tx timeout
[  976.727711][T15617] ext4 filesystem being mounted at /626/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  976.825033][ T6302] logitech-djreceiver 0003:046D:C53A.0020: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.3-1/input0
[  976.997940][T15642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3346'.
[  977.951962][ T7067] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  978.455668][T15468] 8021q: adding VLAN 0 to HW filter on device bond0
[  978.483641][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  978.496326][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  978.533042][T15468] 8021q: adding VLAN 0 to HW filter on device team0
[  978.543172][ T6302] usb 4-1: USB disconnect, device number 27
[  978.637370][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  978.646115][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  978.663961][ T4313] bridge0: port 1(bridge_slave_0) entered blocking state
[  978.671107][ T4313] bridge0: port 1(bridge_slave_0) entered forwarding state
[  978.762821][ T7067] usb 2-1: Using ep0 maxpacket: 8
[  978.766204][T15652] fido_id[15652]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  978.788217][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  978.804608][T15654] device syzkaller0 entered promiscuous mode
[  978.815659][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  978.876302][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  978.901461][ T4352] bridge0: port 2(bridge_slave_1) entered blocking state
[  978.907737][ T7067] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  978.908641][ T4352] bridge0: port 2(bridge_slave_1) entered forwarding state
[  978.926421][T15659] loop4: detected capacity change from 0 to 1024
[  978.933014][ T7067] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  978.986564][ T7067] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  978.998334][T15659] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  979.010494][ T7067] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  979.020901][T15659] EXT4-fs (loop4): barriers disabled
[  979.026592][T15659] JBD2: no valid journal superblock found
[  979.032324][T15659] EXT4-fs (loop4): error loading journal
[  979.039136][ T7067] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  979.053301][ T7067] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  979.064841][ T7067] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  979.238273][T15651] device syzkaller0 left promiscuous mode
[  979.276358][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  979.294862][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  979.341451][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  980.079114][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  980.084637][ T7067] usb 2-1: usb_control_msg returned -71
[  980.091695][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  980.095216][ T7067] usbtmc 2-1:16.0: can't read capabilities
[  980.101956][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  980.135162][T15468] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  980.163296][T15468] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  980.242723][ T7067] usb 2-1: USB disconnect, device number 32
[  980.284248][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  980.310541][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  980.341108][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  980.361966][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  980.413693][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  980.459459][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  981.585875][T15709] loop2: detected capacity change from 0 to 7
[  981.655945][ T4176] Dev loop2: unable to read RDB block 7
[  981.661769][ T4176]  loop2: AHDI p1 p2 p3
[  981.695618][ T4176] loop2: partition table partially beyond EOD, truncated
[  981.770681][T15716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3359'.
[  981.796837][T15716] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  981.829170][ T4176] loop2: p1 start 1601398130 is beyond EOD, truncated
[  981.972026][ T4176] loop2: p2 start 1702059890 is beyond EOD, truncated
[  982.337776][T15709] Dev loop2: unable to read RDB block 7
[  982.348897][T15709]  loop2: AHDI p1 p2 p3
[  982.370654][T15709] loop2: partition table partially beyond EOD, truncated
[  982.418370][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  982.435569][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  982.452934][T15709] loop2: p1 start 1601398130 is beyond EOD, truncated
[  982.544245][T15468] 8021q: adding VLAN 0 to HW filter on device batadv0
[  982.554911][T15709] loop2: p2 start 1702059890 is beyond EOD, truncated
[  982.635589][ T3559]  loop0: p1 < > p4
[  982.635589][ T3559]  p4: <netbsd: >
[  982.672326][ T3559] loop0: p4 size 722688 extends beyond EOD, truncated
[  982.791872][T15730] netlink: 'syz.0.3363': attribute type 1 has an invalid length.
[  982.818731][T15731] loop4: detected capacity change from 0 to 1024
[  982.845601][T15730] netlink: 'syz.0.3363': attribute type 4 has an invalid length.
[  982.862892][T15730] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3363'.
[  982.896760][T15731] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  982.946192][T15733] netlink: 'syz.0.3363': attribute type 1 has an invalid length.
[  982.954011][T15733] netlink: 'syz.0.3363': attribute type 4 has an invalid length.
[  982.958198][T15731] EXT4-fs (loop4): barriers disabled
[  982.967978][ T6633] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  982.995771][T15733] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3363'.
[  983.022663][T15731] JBD2: no valid journal superblock found
[  983.028470][T15731] EXT4-fs (loop4): error loading journal
[  983.391283][T15752] xt_hashlimit: size too large, truncated to 1048576
[  984.106949][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  984.183109][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  984.193184][ T6633] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  984.204785][ T6633] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  984.215531][ T6633] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  984.224656][ T6633] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  984.234618][ T6633] usb 4-1: config 0 descriptor??
[  984.352727][T11136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  984.374294][T11136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  984.412998][T11136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  984.435081][T11136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  984.480889][T15468] device veth0_vlan entered promiscuous mode
[  984.501737][T15468] device veth1_vlan entered promiscuous mode
[  984.575743][T15468] device veth0_macvtap entered promiscuous mode
[  984.597100][T11136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  984.616495][T11136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  984.644932][ T4265] usb 5-1: new low-speed USB device number 37 using dummy_hcd
[  984.675205][T11136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  984.700132][T11136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  984.731109][T11136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  984.758694][T15468] device veth1_macvtap entered promiscuous mode
[  984.788645][ T6633] hid-steam 0003:28DE:1142.0021: unknown main item tag 0x0
[  984.789419][T15468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  984.819218][ T6633] hid-steam 0003:28DE:1142.0021: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0
[  984.837194][T15468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  984.861764][T15468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  984.864661][ T6633] hid-steam 0003:28DE:1142.0022: unknown main item tag 0x0
[  984.882960][T15468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  984.903976][T15468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  984.926698][T15468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  984.926791][ T6633] hid-steam 0003:28DE:1142.0022: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0
[  984.944904][T15468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  984.991791][T15468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  985.029851][T15468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  985.045751][T15468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  985.056198][ T6633] hid-steam 0003:28DE:1142.0021: Steam wireless receiver connected
[  985.089810][T15468] batman_adv: batadv0: Interface activated: batadv_slave_0
[  985.098103][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  985.127121][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  985.143116][ T4265] usb 5-1: unable to get BOS descriptor or descriptor too short
[  985.155514][T15468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  985.186268][T15468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  985.218148][T15468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  985.246775][T15468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  985.258565][T15468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  985.276095][T15468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  985.289911][ T4265] usb 5-1: config 142 has an invalid interface number: 251 but max is 0
[  985.303255][T15468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  985.317801][ T4265] usb 5-1: config 142 has no interface number 0
[  985.324163][ T4265] usb 5-1: config 142 interface 251 altsetting 11 has an invalid endpoint with address 0x9F, skipping
[  985.340860][T15468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  985.354564][T15468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  985.370086][ T4265] usb 5-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt
[  985.384283][T15468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  985.398268][ T4265] usb 5-1: config 142 interface 251 has no altsetting 0
[  985.434104][T15468] batman_adv: batadv0: Interface activated: batadv_slave_1
[  985.443178][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  985.458048][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  985.494465][T15468] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  985.511271][T15468] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  985.532574][T15468] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  985.552462][T15468] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  985.578770][T13980] usb 4-1: USB disconnect, device number 28
[  985.675662][T13980] hid-steam 0003:28DE:1142.0021: Steam wireless receiver disconnected
[  985.695482][ T4265] usb 5-1: string descriptor 0 read error: -22
[  985.704953][ T4265] usb 5-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80
[  985.744159][ T4265] usb 5-1: New USB device strings: Mfr=1, Product=224, SerialNumber=3
[  985.814785][T15757] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  985.829596][T15757] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  985.870211][ T4265] cypress_m8 5-1:142.251: HID->COM RS232 Adapter converter detected
[  985.882917][ T4265] cyphidcom ttyUSB0: required endpoint is missing
[  986.025132][T15770] CacheFiles: Failed to register: -30
[  986.138930][ T6633] usb 5-1: USB disconnect, device number 37
[  986.150944][ T6633] cypress_m8 5-1:142.251: device disconnected
[  986.223031][T15774] loop3: detected capacity change from 0 to 128
[  986.264581][T15774] EXT4-fs (loop3): Test dummy encryption mode enabled
[  986.300981][T15774] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  986.317233][T15774] ext4 filesystem being mounted at /666/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  987.612699][ T6637] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  987.652161][T15795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3380'.
[  987.680099][T15795] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  987.937682][ T6637] usb 2-1: Using ep0 maxpacket: 32
[  988.086796][ T6637] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  988.146633][T15799] fuse: Bad value for 'fd'
[  988.180875][ T6637] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  988.216474][ T6637] usb 2-1: config 0 descriptor??
[  988.253617][ T1167] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  988.365505][ T6637] gspca_main: sunplus-2.14.0 probing 041e:400b
[  988.414282][T15808] loop3: detected capacity change from 0 to 128
[  988.453750][T15808] EXT4-fs (loop3): Test dummy encryption mode enabled
[  988.500471][T15808] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  988.574057][T15808] ext4 filesystem being mounted at /668/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  988.630241][T15812] rxe_eth0 speed is unknown, defaulting to 1000
[  988.820762][T15812] lo speed is unknown, defaulting to 1000
[  989.108565][ T6637] gspca_sunplus: reg_r err -71
[  989.123037][ T6637] sunplus: probe of 2-1:0.0 failed with error -71
[  989.269295][ T6637] usb 2-1: USB disconnect, device number 33
[  989.416276][ T1167] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  989.514060][T15832] loop4: detected capacity change from 0 to 128
[  989.544246][T15812] chnl_net:caif_netlink_parms(): no params data found
[  989.569895][T15832] EXT4-fs (loop4): Test dummy encryption mode enabled
[  989.584052][   T21] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  989.594424][T15832] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  989.619584][T15832] ext4 filesystem being mounted at /641/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  989.634488][ T1167] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  989.809492][ T1167] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  990.848557][ T4261] Bluetooth: hci2: command 0x0409 tx timeout
[  990.907771][T15812] bridge0: port 1(bridge_slave_0) entered blocking state
[  990.970486][T15812] bridge0: port 1(bridge_slave_0) entered disabled state
[  990.980675][T15812] device bridge_slave_0 entered promiscuous mode
[  991.025556][T15812] bridge0: port 2(bridge_slave_1) entered blocking state
[  991.036831][T15812] bridge0: port 2(bridge_slave_1) entered disabled state
[  991.052882][T15812] device bridge_slave_1 entered promiscuous mode
[  991.068193][   T21] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  991.082665][   T21] usb 1-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01
[  991.119655][   T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  991.169276][T15860] loop3: detected capacity change from 0 to 2048
[  991.215818][T15812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  991.282108][T15812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  991.339892][T15860] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none.
[  991.378978][T15812] team0: Port device team_slave_0 added
[  991.392221][T15812] team0: Port device team_slave_1 added
[  991.468377][T15860] Invalid argument reading file caps for ./file0
[  991.522679][ T4265] usb 1-1: USB disconnect, device number 33
[  991.525546][T15812] batman_adv: batadv0: Adding interface: batadv_slave_0
[  991.601904][T15812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  991.708715][T15812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  991.710550][T15880] loop3: detected capacity change from 0 to 128
[  991.732455][T15812] batman_adv: batadv0: Adding interface: batadv_slave_1
[  991.751167][T15812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  991.783253][T15880] EXT4-fs (loop3): Test dummy encryption mode enabled
[  991.826285][T15880] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  991.863341][T15812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  991.922905][T15880] ext4 filesystem being mounted at /673/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  992.135794][T15812] device hsr_slave_0 entered promiscuous mode
[  992.450975][T15812] device hsr_slave_1 entered promiscuous mode
[  992.481315][T15812] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  992.504010][T15812] Cannot create hsr debugfs directory
[  992.784940][T15916] FAULT_INJECTION: forcing a failure.
[  992.784940][T15916] name failslab, interval 1, probability 0, space 0, times 0
[  992.806851][T15916] CPU: 0 PID: 15916 Comm: syz.3.3417 Not tainted syzkaller #0
[  992.814356][T15916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  992.824424][T15916] Call Trace:
[  992.827725][T15916]  <TASK>
[  992.830750][T15916]  dump_stack_lvl+0x188/0x250
[  992.835453][T15916]  ? show_regs_print_info+0x20/0x20
[  992.840666][T15916]  ? load_image+0x410/0x410
[  992.845196][T15916]  ? __might_sleep+0xf0/0xf0
[  992.849803][T15916]  ? __lock_acquire+0x7d40/0x7d40
[  992.854847][T15916]  should_fail+0x383/0x4b0
[  992.859634][T15916]  should_failslab+0x5/0x20
[  992.864150][T15916]  slab_pre_alloc_hook+0x51/0xc0
[  992.869100][T15916]  kmem_cache_alloc_trace+0x47/0x290
[  992.874392][T15916]  ? __list_lru_init+0x535/0xac0
[  992.879344][T15916]  __list_lru_init+0x535/0xac0
[  992.884148][T15916]  alloc_super+0x787/0x970
[  992.888583][T15916]  sget+0x1ce/0x450
[  992.892497][T15916]  ? free_anon_bdev+0x20/0x20
[  992.897182][T15916]  ? ovl_mount+0x30/0x30
[  992.901522][T15916]  mount_nodev+0x2c/0xe0
[  992.905783][T15916]  legacy_get_tree+0xe6/0x180
[  992.910477][T15916]  ? virtio_fs_zero_page_range+0x120/0x120
[  992.916305][T15916]  vfs_get_tree+0x88/0x270
[  992.920743][T15916]  do_new_mount+0x247/0xa40
[  992.925272][T15916]  __se_sys_mount+0x2e3/0x3d0
[  992.929964][T15916]  ? __x64_sys_mount+0xc0/0xc0
[  992.934747][T15916]  ? lockdep_hardirqs_on+0x94/0x140
[  992.939956][T15916]  ? __x64_sys_mount+0x1c/0xc0
[  992.944736][T15916]  do_syscall_64+0x4c/0xa0
[  992.949173][T15916]  ? clear_bhb_loop+0x30/0x80
[  992.953872][T15916]  ? clear_bhb_loop+0x30/0x80
[  992.958564][T15916]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  992.964991][T15916] RIP: 0033:0x7f1c946f3559
[  992.969420][T15916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  992.989044][T15916] RSP: 002b:00007f1c9294b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  992.998098][T15916] RAX: ffffffffffffffda RBX: 00007f1c9497afa0 RCX: 00007f1c946f3559
[  993.006085][T15916] RDX: 00002000000007c0 RSI: 0000200000000780 RDI: 0000000000000000
[  993.014075][T15916] RBP: 00007f1c9478a8b0 R08: 0000200000000800 R09: 0000000000000000
[  993.022110][T15916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  993.030192][T15916] R13: 00007f1c9497b038 R14: 00007f1c9497afa0 R15: 00007ffcc01b6688
[  993.038205][T15916]  </TASK>
[  993.115655][ T4261] Bluetooth: hci2: command 0x041b tx timeout
[  993.334437][ T3559]  loop0: p1 < > p4
[  993.334437][ T3559]  p4: <netbsd: >
[  993.365610][ T3559] loop0: p4 size 722688 extends beyond EOD, truncated
[  995.069355][T15812] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  995.124055][T15959] loop4: detected capacity change from 0 to 128
[  995.154670][T15812] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  995.244895][T15959] EXT4-fs (loop4): Test dummy encryption mode enabled
[  995.283949][T15812] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  995.307826][T15944] loop3: detected capacity change from 0 to 32768
[  995.368162][T13980] Bluetooth: hci2: command 0x040f tx timeout
[  995.433206][T15944] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 scanned by syz.3.3424 (15944)
[  995.450910][T15959] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  995.473832][T15812] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  995.503232][T15944] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  995.522242][T15959] ext4 filesystem being mounted at /652/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  995.564564][T15944] BTRFS info (device loop3): using free space tree
[  995.582155][T15944] BTRFS info (device loop3): has skinny extents
[  995.743246][ T1167] device hsr_slave_0 left promiscuous mode
[  995.750365][ T1167] device hsr_slave_1 left promiscuous mode
[  995.756847][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  995.764782][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_0
[  995.781587][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  995.835502][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_1
[  996.052338][ T1167] device bridge_slave_1 left promiscuous mode
[  996.058573][ T1167] bridge0: port 2(bridge_slave_1) entered disabled state
[  996.166302][ T1167] device bridge_slave_0 left promiscuous mode
[  996.180634][ T1167] bridge0: port 1(bridge_slave_0) entered disabled state
[  996.188377][T15944] BTRFS info (device loop3): enabling ssd optimizations
[  996.242567][T15993] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  996.380423][ T1167] device veth1_macvtap left promiscuous mode
[  996.410569][ T3559]  loop0: p1 < > p4
[  996.410569][ T3559]  p4: <netbsd: >
[  996.422847][ T1167] device veth0_macvtap left promiscuous mode
[  996.455620][ T3559] loop0: p4 size 722688 extends beyond EOD, truncated
[  996.462237][ T1167] device veth1_vlan left promiscuous mode
[  996.468313][ T1167] device veth0_vlan left promiscuous mode
[  997.432896][ T1167] team0 (unregistering): Port device team_slave_1 removed
[  997.468572][ T1167] team0 (unregistering): Port device team_slave_0 removed
[  997.486862][ T1167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  997.531189][ T1167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  997.621179][T13978] Bluetooth: hci2: command 0x0419 tx timeout
[  997.767865][T16008] loop3: detected capacity change from 0 to 128
[  997.909540][T16008] EXT4-fs (loop3): Test dummy encryption mode enabled
[  997.958248][T16008] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  997.976994][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  997.983411][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  997.995399][ T1167] bond0 (unregistering): Released all slaves
[  997.998831][T16008] ext4 filesystem being mounted at /679/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  999.171310][T16022] loop4: detected capacity change from 0 to 128
[  999.235463][T15812] 8021q: adding VLAN 0 to HW filter on device bond0
[  999.263797][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  999.272508][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  999.325918][T15812] 8021q: adding VLAN 0 to HW filter on device team0
[  999.377672][T16022] EXT4-fs (loop4): Test dummy encryption mode enabled
[  999.499085][T16031] loop3: detected capacity change from 0 to 128
[ 1000.178077][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1000.198596][T16022] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[ 1000.249144][ T3559]  loop0: p1 < > p4
[ 1000.249144][ T3559]  p4: <netbsd: >
[ 1000.258094][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1000.267983][ T4954] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1000.275098][ T4954] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1000.328146][T15812] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1000.377157][ T3559] loop0: p4 size 722688 extends beyond EOD, truncated
[ 1000.383098][T16022] ext4 filesystem being mounted at /653/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1000.384259][T16031] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1000.422808][T16031] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[ 1000.574025][T15812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1000.597997][T16031] ext4 filesystem being mounted at /680/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1001.071107][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1001.091926][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1001.420263][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1001.437500][ T4401] net_ratelimit: 31 callbacks suppressed
[ 1001.575346][ T4954] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1001.582479][ T4954] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1001.596669][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1001.605745][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1001.616300][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1001.675281][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1001.743954][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1001.779122][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1001.789171][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1001.797829][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1001.818431][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1001.835525][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1002.558861][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1002.660488][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1002.750674][T16070] loop4: detected capacity change from 0 to 128
[ 1002.810705][ T3559]  loop0: p1 < > p4
[ 1002.810705][ T3559]  p4: <netbsd: >
[ 1002.842428][ T3559] loop0: p4 size 722688 extends beyond EOD, truncated
[ 1003.118726][T16070] EXT4-fs (loop4): Test dummy encryption mode enabled
[ 1003.146114][ T8118] usb 4-1: new full-speed USB device number 29 using dummy_hcd
[ 1003.526736][T16070] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[ 1003.625441][T16070] ext4 filesystem being mounted at /654/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1003.678696][ T8118] usb 4-1: config 1 has an invalid interface number: 1 but max is 0
[ 1003.686761][ T8118] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1003.755534][T15812] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1003.836794][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1003.854550][ T8118] usb 4-1: config 1 has no interface number 0
[ 1003.860898][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1003.868828][ T8118] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10
[ 1003.881578][ T8118] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1004.977895][ T6637] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[ 1005.020172][ T8118] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40
[ 1005.045327][ T8118] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1005.090022][ T8118] usb 4-1: Product: syz
[ 1005.094247][ T8118] usb 4-1: Manufacturer: syz
[ 1005.145271][ T8118] usb 4-1: SerialNumber: syz
[ 1005.270088][ T6637] usb 1-1: Using ep0 maxpacket: 8
[ 1005.402560][ T6637] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 1005.411909][ T6637] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1005.449458][ T6637] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1005.470538][ T6637] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1005.504223][ T6637] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1005.539380][ T6637] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1005.560329][ T6637] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1005.660217][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1005.702937][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1005.726164][ T8118] snd-usb-audio: probe of 4-1:1.1 failed with error -90
[ 1005.751189][ T8118] usb 4-1: USB disconnect, device number 29
[ 1005.783463][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1005.845233][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1005.899090][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1005.908119][ T6637] usb 1-1: GET_CAPABILITIES returned 0
[ 1005.913833][ T6637] usbtmc 1-1:16.0: can't read capabilities
[ 1005.929022][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1005.986323][T15812] device veth0_vlan entered promiscuous mode
[ 1006.070952][T15812] device veth1_vlan entered promiscuous mode
[ 1006.225983][T15812] device veth0_macvtap entered promiscuous mode
[ 1006.314687][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1006.341666][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1006.397228][T16109] loop4: detected capacity change from 0 to 32768
[ 1006.419375][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1006.436120][T16125] loop3: detected capacity change from 0 to 1024
[ 1006.472808][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1006.481781][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1006.496634][T15812] device veth1_macvtap entered promiscuous mode
[ 1006.516402][   T26] usb 1-1: USB disconnect, device number 34
[ 1006.525450][T16087] usbtmc 1-1:16.0: usb_control_msg returned -71
[ 1006.551401][T16125] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[ 1006.602878][   T25] audit: type=1800 audit(1792112528.522:42): pid=16109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3452" name="file1" dev="loop4" ino=4 res=0 errno=0
[ 1006.671887][T16125] EXT4-fs (loop3): barriers disabled
[ 1006.683732][T16125] JBD2: no valid journal superblock found
[ 1006.726738][T15812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1006.743932][T16125] EXT4-fs (loop3): error loading journal
[ 1006.805240][T15812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1006.844042][T15812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1006.880055][T15812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1006.913403][T15812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1006.935243][T15812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1006.967572][T15812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1006.980451][ T4501] net_ratelimit: 36 callbacks suppressed
[ 1007.006195][T15812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1007.037672][T15812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1007.063464][T15812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1007.104288][T15812] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1007.170421][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1007.188067][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1007.247213][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1007.409138][T15812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1007.434940][T15812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1007.487458][T15812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1008.268831][T15812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1008.328085][T15812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1008.483963][T15812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1008.545590][T15812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1008.598459][T15812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1008.680990][T15812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1008.814722][T15812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1008.844762][T15812] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1008.870951][T15812] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1008.897499][T15812] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1008.917414][T15812] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1008.929971][T15812] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1009.103127][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1009.196261][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1009.419907][T16185] overlayfs: "xino" feature enabled using 2 upper inode bits.
[ 1009.419995][T16184] gadgetfs: bound to dummy_udc driver
[ 1009.544227][ T3559]  loop0: p1 < > p4
[ 1009.544227][ T3559]  p4: <netbsd: >
[ 1009.676108][ T3559] loop0: p4 size 722688 extends beyond EOD, truncated
[ 1010.959897][T16206] loop3: detected capacity change from 0 to 1024
[ 1010.987925][T13978] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[ 1011.107103][ T4265] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[ 1011.400207][T13978] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1011.410321][T13978] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1011.447210][ T1167] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1011.515306][ T1167] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1011.540532][T13978] usb 5-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00
[ 1011.550289][T13978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1011.558473][T13978] usb 5-1: Product: syz
[ 1011.562737][T13978] usb 5-1: Manufacturer: syz
[ 1011.572210][ T1167] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1011.583604][ T4265] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[ 1011.609890][T13978] iuu_phoenix 5-1:1.0: iuu_phoenix converter detected
[ 1011.626108][T13978] usb 5-1: iuu_phoenix converter now attached to ttyUSB0
[ 1011.653505][ T1167] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1011.769294][ T4265] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40
[ 1011.787393][ T4265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1011.826377][ T4265] usb 2-1: Product: syz
[ 1011.838721][ T4265] usb 2-1: Manufacturer: syz
[ 1011.875743][ T4265] usb 2-1: SerialNumber: syz
[ 1011.990993][T16197] iuu_phoenix ttyUSB0: vcc_mode_store - vcc_mode 0 is invalid
[ 1012.059541][   T26] usb 5-1: USB disconnect, device number 38
[ 1012.087164][T16211] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[ 1012.100078][T16211] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[ 1012.119562][T16217] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[ 1012.131392][T16217] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[ 1012.165967][   T26] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0
[ 1012.213193][   T26] iuu_phoenix 5-1:1.0: device disconnected
[ 1012.331594][ T4265] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1012.439214][    C0] net_ratelimit: 79 callbacks suppressed
[ 1012.464181][ T4265] usb 2-1: USB disconnect, device number 34
[ 1012.689597][T16223] rxe_eth0 speed is unknown, defaulting to 1000
[ 1012.882280][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1013.016087][T16249] loop3: detected capacity change from 0 to 1024
[ 1013.024139][   T26] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[ 1013.095592][T16223] lo speed is unknown, defaulting to 1000
[ 1013.229478][T16256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3486'.
[ 1013.239165][   T21] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[ 1013.490899][   T26] usb 1-1: config 0 has no interfaces?
[ 1013.496488][   T26] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1013.529212][   T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1013.550336][   T26] usb 1-1: config 0 descriptor??
[ 1013.574727][T16249] device-mapper: table: 248:1: integrity: The device is not initialized
[ 1013.598848][T16249] device-mapper: ioctl: error adding target to table
[ 1013.691053][   T21] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[ 1013.710079][   T21] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[ 1013.779634][   T21] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00
[ 1013.792751][   T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1013.883394][   T21] usb 5-1: probing VID:PID(0424:012C)   
[ 1013.890362][   T21] usb 5-1: vub300 testing BULK IN EndPoint(0) 81
[ 1013.905554][T16223] chnl_net:caif_netlink_parms(): no params data found
[ 1013.985141][   T21] usb 5-1: vub300 testing BULK OUT EndPoint(1) 02
[ 1014.010466][   T21] usb 5-1: vub300 testing BULK IN EndPoint(2) 83
[ 1014.020659][   T21] usb 5-1: vub300 testing BULK OUT EndPoint(3) 04
[ 1014.027148][   T21] usb 5-1: vub300 LARGE packets using EndPoints 02 81 04 83
[ 1014.356812][   T21] usb 5-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets
[ 1014.525717][T16223] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1014.539540][T16223] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1014.593001][T16223] device bridge_slave_0 entered promiscuous mode
[ 1014.599779][   T21] usb 5-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted
[ 1014.637325][   T26] Bluetooth: hci2: command 0x0409 tx timeout
[ 1014.651289][T16223] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1014.658404][T16223] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1014.709441][T16223] device bridge_slave_1 entered promiscuous mode
[ 1014.800208][ T1167] device hsr_slave_0 left promiscuous mode
[ 1014.833612][ T1167] device hsr_slave_1 left promiscuous mode
[ 1014.845760][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1014.854059][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1014.887243][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1014.898143][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1014.911744][ T1167] device bridge_slave_1 left promiscuous mode
[ 1014.932462][ T1167] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1014.964197][ T1167] device bridge_slave_0 left promiscuous mode
[ 1014.978982][ T1167] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1015.026068][ T1167] device veth1_macvtap left promiscuous mode
[ 1015.033325][ T1167] device veth0_macvtap left promiscuous mode
[ 1015.050072][ T1167] device veth1_vlan left promiscuous mode
[ 1015.062331][ T1167] device veth0_vlan left promiscuous mode
[ 1015.689319][ T1167] team0 (unregistering): Port device team_slave_1 removed
[ 1015.713793][ T1167] team0 (unregistering): Port device team_slave_0 removed
[ 1015.737939][ T1167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1015.769543][ T1167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1015.812673][   T21] usb 5-1: USB disconnect, device number 39
[ 1015.824384][ T4265] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-19
[ 1015.869903][T13983] usb 1-1: USB disconnect, device number 35
[ 1015.952354][   T21] USB vub300 remote SDIO host controller[0] now disconnected
[ 1016.093066][ T1167] bond0 (unregistering): Released all slaves
[ 1016.482716][T16223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1016.771205][ T3559]  loop0: p1 < > p4
[ 1016.771205][ T3559]  p4: <netbsd: >
[ 1016.778737][T16335] loop4: detected capacity change from 0 to 1024
[ 1016.785672][    C1] kobject: '5-1' (ffff88805eb550a8): kobject_cleanup, parent 0000000000000000
[ 1016.785795][    C1] kobject: '5-1' (ffff88805eb550a8): calling ktype release
[ 1016.785899][    C1] kobject: '5-1': free name
[ 1016.785933][    C1] 
[ 1016.785938][    C1] ================================
[ 1016.785944][    C1] WARNING: inconsistent lock state
[ 1016.785964][    C1] syzkaller #0 Not tainted
[ 1016.785974][    C1] --------------------------------
[ 1016.785979][    C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage.
[ 1016.785988][    C1] syz.4.3499/16335 [HC0[0]:SC1[1]:HE1:SE0] takes:
[ 1016.786006][    C1] ffff88802b55c710 ((work_completion)(&(&host->detect)->work)){+.?.}-{0:0}, at: __flush_work+0xfa/0x210
[ 1016.786054][    C1] {SOFTIRQ-ON-W} state was registered at:
[ 1016.786074][    C1]   lock_acquire+0x19f/0x400
[ 1016.786095][    C1]   process_one_work+0x7ba/0xff0
[ 1016.786112][    C1]   worker_thread+0xad7/0x12a0
[ 1016.786127][    C1]   kthread+0x42e/0x520
[ 1016.786141][    C1]   ret_from_fork+0x1f/0x30
[ 1016.786180][    C1] irq event stamp: 2984
[ 1016.786187][    C1] hardirqs last  enabled at (2984): [<ffffffff814e2c8a>] __cancel_work_timer+0x36a/0x560
[ 1016.786210][    C1] hardirqs last disabled at (2983): [<ffffffff814dff2b>] try_to_grab_pending+0xfb/0x820
[ 1016.786231][    C1] softirqs last  enabled at (2856): [<ffffffff8149447b>] __irq_exit_rcu+0x13b/0x230
[ 1016.786252][    C1] softirqs last disabled at (2899): [<ffffffff8149447b>] __irq_exit_rcu+0x13b/0x230
[ 1016.786272][    C1] 
[ 1016.786272][    C1] other info that might help us debug this:
[ 1016.786277][    C1]  Possible unsafe locking scenario:
[ 1016.786277][    C1] 
[ 1016.786282][    C1]        CPU0
[ 1016.786286][    C1]        ----
[ 1016.786289][    C1]   lock((work_completion)(&(&host->detect)->work));
[ 1016.786303][    C1]   <Interrupt>
[ 1016.786307][    C1]     lock((work_completion)(&(&host->detect)->work));
[ 1016.786319][    C1] 
[ 1016.786319][    C1]  *** DEADLOCK ***
[ 1016.786319][    C1] 
[ 1016.786323][    C1] 3 locks held by syz.4.3499/16335:
[ 1016.786334][    C1]  #0: ffff8881473de468 (&lo->lo_mutex){+.+.}-{3:3}, at: loop_configure+0x1ec/0x1480
[ 1016.786460][    C1]  #1: ffffffff8d113ae0 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0xa7/0x150
[ 1016.786500][    C1]  #2: ffffc90000dd0bc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xca/0x540
[ 1016.786576][    C1] 
[ 1016.786576][    C1] stack backtrace:
[ 1016.786583][    C1] CPU: 1 PID: 16335 Comm: syz.4.3499 Not tainted syzkaller #0
[ 1016.786600][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1016.786611][    C1] Call Trace:
[ 1016.786617][    C1]  <IRQ>
[ 1016.786624][    C1]  dump_stack_lvl+0x188/0x250
[ 1016.786644][    C1]  ? show_regs_print_info+0x20/0x20
[ 1016.786664][    C1]  ? unwind_get_return_address+0x49/0x80
[ 1016.786686][    C1]  valid_state+0x13b/0x1d0
[ 1016.786703][    C1]  mark_lock_irq+0xa9/0x900
[ 1016.786719][    C1]  ? stack_trace_save+0xa6/0xf0
[ 1016.786734][    C1]  ? save_trace+0xad0/0xad0
[ 1016.786748][    C1]  ? __lock_acquire+0x13b3/0x7d40
[ 1016.786770][    C1]  ? save_trace+0x5a/0xad0
[ 1016.786785][    C1]  ? __lock_acquire+0x13b3/0x7d40
[ 1016.786806][    C1]  mark_lock+0x208/0x320
[ 1016.786822][    C1]  __lock_acquire+0xd77/0x7d40
[ 1016.786844][    C1]  ? verify_lock_unused+0x140/0x140
[ 1016.786864][    C1]  ? mark_lock+0x94/0x320
[ 1016.786880][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1016.786901][    C1]  ? verify_lock_unused+0x140/0x140
[ 1016.786920][    C1]  ? __rwlock_init+0x140/0x140
[ 1016.786941][    C1]  ? debug_object_assert_init+0x1e8/0x2f0
[ 1016.786964][    C1]  lock_acquire+0x19f/0x400
[ 1016.786983][    C1]  ? __flush_work+0xfa/0x210
[ 1016.787003][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1016.787023][    C1]  ? read_lock_is_recursive+0x10/0x10
[ 1016.787043][    C1]  ? kobject_put+0x25c/0x450
[ 1016.787067][    C1]  ? call_timer_fn+0x17b/0x540
[ 1016.787084][    C1]  ? __run_timers+0x56c/0x810
[ 1016.787101][    C1]  ? run_timer_softirq+0x63/0xf0
[ 1016.787122][    C1]  __flush_work+0x116/0x210
[ 1016.787138][    C1]  ? __flush_work+0xfa/0x210
[ 1016.787155][    C1]  ? flush_work+0x20/0x20
[ 1016.787170][    C1]  ? __timer_delete+0x6c/0x220
[ 1016.787188][    C1]  ? mark_lock+0x94/0x320
[ 1016.787204][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1016.787224][    C1]  ? lock_chain_count+0x20/0x20
[ 1016.787242][    C1]  ? kasan_quarantine_put+0x39/0x210
[ 1016.787260][    C1]  ? kasan_quarantine_put+0xd4/0x210
[ 1016.787277][    C1]  ? __cancel_work_timer+0x36a/0x560
[ 1016.787295][    C1]  __cancel_work_timer+0x3f4/0x560
[ 1016.787311][    C1]  ? slab_free_freelist_hook+0xec/0x170
[ 1016.787331][    C1]  ? cancel_work_sync+0x20/0x20
[ 1016.787346][    C1]  ? kobject_put+0x25c/0x450
[ 1016.787361][    C1]  ? kfree+0xef/0x2a0
[ 1016.787378][    C1]  ? kobject_put+0x41d/0x450
[ 1016.787395][    C1]  ? kref_get+0x70/0x70
[ 1016.787449][    C1]  mmc_free_host+0x15/0x30
[ 1016.787492][    C1]  call_timer_fn+0x17b/0x540
[ 1016.787510][    C1]  ? kref_get+0x70/0x70
[ 1016.787527][    C1]  ? __run_timers+0x810/0x810
[ 1016.787547][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1016.787563][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[ 1016.787583][    C1]  ? kref_get+0x70/0x70
[ 1016.787600][    C1]  __run_timers+0x56c/0x810
[ 1016.787623][    C1]  ? detach_timer+0x2b0/0x2b0
[ 1016.787640][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1016.787662][    C1]  ? sched_clock_cpu+0x15/0x3c0
[ 1016.787708][    C1]  ? seqcount_lockdep_reader_access+0x177/0x1d0
[ 1016.787727][    C1]  run_timer_softirq+0x63/0xf0
[ 1016.787746][    C1]  handle_softirqs+0x336/0x830
[ 1016.787765][    C1]  ? __irq_exit_rcu+0x13b/0x230
[ 1016.787782][    C1]  ? do_softirq+0x210/0x210
[ 1016.787797][    C1]  ? hrtimer_interrupt+0x6a2/0x8b0
[ 1016.787818][    C1]  ? irqtime_account_irq+0xb2/0x1b0
[ 1016.787838][    C1]  __irq_exit_rcu+0x13b/0x230
[ 1016.787855][    C1]  ? irq_exit_rcu+0x20/0x20
[ 1016.787875][    C1]  irq_exit_rcu+0x5/0x20
[ 1016.787891][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[ 1016.787911][    C1]  </IRQ>
[ 1016.787918][    C1]  <TASK>
[ 1016.787924][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1016.787944][    C1] RIP: 0010:console_unlock+0xc90/0x10f0
[ 1016.787963][    C1] Code: 75 11 e8 33 e5 18 00 4d 85 e4 75 16 e8 29 e5 18 00 eb 15 e8 22 e5 18 00 e8 8d d8 61 08 4d 85 e4 74 ea e8 13 e5 18 00 fb 31 ff <89> de e8 69 e8 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 f7
[ 1016.787977][    C1] RSP: 0018:ffffc90002ebee00 EFLAGS: 00000246
[ 1016.787992][    C1] RAX: ffffffff81603e4d RBX: 0000000000000000 RCX: 0000000000080000
[ 1016.788004][    C1] RDX: ffffc9000d691000 RSI: 00000000000214d0 RDI: 0000000000000000
[ 1016.788015][    C1] RBP: ffffc90002ebf070 R08: ffffffff910150c7 R09: 1ffffffff2202a18
[ 1016.788028][    C1] R10: dffffc0000000000 R11: fffffbfff2202a19 R12: 0000000000000200
[ 1016.788041][    C1] R13: 0000000000000046 R14: 0000000000000000 R15: dffffc0000000000
[ 1016.788063][    C1]  ? console_unlock+0xc8d/0x10f0
[ 1016.788082][    C1]  ? read_lock_is_recursive+0x10/0x10
[ 1016.788104][    C1]  ? console_trylock_spinning+0x370/0x370
[ 1016.788120][    C1]  ? __down_trylock_console_sem+0xf2/0x1f0
[ 1016.788138][    C1]  ? __down_trylock_console_sem+0x19f/0x1f0
[ 1016.788154][    C1]  ? vprintk_emit+0xa7/0x150
[ 1016.788170][    C1]  ? printk_parse_prefix+0x310/0x310
[ 1016.788184][    C1]  ? vprintk_emit+0xa7/0x150
[ 1016.788199][    C1]  ? console_trylock+0x70/0x70
[ 1016.788214][    C1]  ? mark_lock+0x94/0x320
[ 1016.788230][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1016.788253][    C1]  ? vprintk_emit+0x150/0x150
[ 1016.788270][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1016.788289][    C1]  ? _raw_spin_unlock+0x40/0x40
[ 1016.788307][    C1]  vprintk_emit+0xc0/0x150
[ 1016.788324][    C1]  _printk+0xda/0x130
[ 1016.788342][    C1]  ? load_image+0x410/0x410
[ 1016.788360][    C1]  ? do_raw_spin_unlock+0x11d/0x230
[ 1016.788378][    C1]  set_capacity_and_notify+0x363/0x390
[ 1016.788433][    C1]  ? set_capacity+0xa0/0xa0
[ 1016.788449][    C1]  ? sysfs_create_group+0x20/0x20
[ 1016.788469][    C1]  loop_set_size+0x44/0xa0
[ 1016.788485][    C1]  loop_configure+0xf88/0x1480
[ 1016.788510][    C1]  lo_ioctl+0x2e1/0x20e0
[ 1016.788529][    C1]  ? __lock_acquire+0x12df/0x7d40
[ 1016.788550][    C1]  ? lo_release+0x1f0/0x1f0
[ 1016.788574][    C1]  ? __lock_acquire+0x13b3/0x7d40
[ 1016.788595][    C1]  ? mark_lock+0x94/0x320
[ 1016.788609][    C1]  ? verify_lock_unused+0x140/0x140
[ 1016.788630][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1016.788667][    C1]  ? rcu_lock_release+0x5/0x20
[ 1016.788717][    C1]  ? __lock_acquire+0x7d40/0x7d40
[ 1016.788737][    C1]  ? unwind_next_frame+0x11ec/0x1cf0
[ 1016.788758][    C1]  ? 0xffffffffa0028000
[ 1016.788770][    C1]  ? is_bpf_text_address+0x254/0x270
[ 1016.788788][    C1]  ? __kernel_text_address+0x9a/0x100
[ 1016.788808][    C1]  ? unwind_get_return_address+0x49/0x80
[ 1016.788828][    C1]  ? stack_trace_save+0xf0/0xf0
[ 1016.788845][    C1]  ? arch_stack_walk+0xf2/0x140
[ 1016.788903][    C1]  ? kfree+0xef/0x2a0
[ 1016.788919][    C1]  ? stack_trace_save+0xa6/0xf0
[ 1016.788935][    C1]  ? stack_trace_snprint+0xe0/0xe0
[ 1016.788950][    C1]  ? slab_free_freelist_hook+0xec/0x170
[ 1016.788968][    C1]  ? security_file_ioctl+0x6c/0xa0
[ 1016.788986][    C1]  ? __se_sys_ioctl+0x48/0x170
[ 1016.789000][    C1]  ? do_syscall_64+0x4c/0xa0
[ 1016.789017][    C1]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1016.789037][    C1]  ? kfree+0xef/0x2a0
[ 1016.789053][    C1]  ? kasan_set_track+0x62/0x70
[ 1016.789128][    C1]  ? kasan_set_track+0x4b/0x70
[ 1016.789143][    C1]  ? kasan_set_free_info+0x1f/0x40
[ 1016.789159][    C1]  ? ____kasan_slab_free+0xd5/0x110
[ 1016.789182][    C1]  ? slab_free_freelist_hook+0xec/0x170
[ 1016.789197][    C1]  ? kfree+0xef/0x2a0
[ 1016.789209][    C1]  ? tomoyo_path_number_perm+0x55c/0x6b0
[ 1016.789227][    C1]  ? security_file_ioctl+0x6c/0xa0
[ 1016.789243][    C1]  ? __se_sys_ioctl+0x48/0x170
[ 1016.789257][    C1]  ? do_syscall_64+0x4c/0xa0
[ 1016.789273][    C1]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1016.789299][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1016.789321][    C1]  ? lock_chain_count+0x20/0x20
[ 1016.789339][    C1]  ? do_vfs_ioctl+0x1d5e/0x1f40
[ 1016.789365][    C1]  ? blkdev_common_ioctl+0x6b9/0x1ed0
[ 1016.789383][    C1]  ? tomoyo_path_number_perm+0x5f7/0x6b0
[ 1016.789401][    C1]  ? blkdev_bszset+0x200/0x200
[ 1016.789429][    C1]  ? lo_release+0x1f0/0x1f0
[ 1016.789449][    C1]  blkdev_ioctl+0x347/0x6f0
[ 1016.789466][    C1]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[ 1016.789486][    C1]  ? blkdev_iopoll+0x100/0x100
[ 1016.789505][    C1]  block_ioctl+0xac/0xf0
[ 1016.789524][    C1]  __se_sys_ioctl+0xfa/0x170
[ 1016.789566][    C1]  do_syscall_64+0x4c/0xa0
[ 1016.789583][    C1]  ? clear_bhb_loop+0x30/0x80
[ 1016.789601][    C1]  ? clear_bhb_loop+0x30/0x80
[ 1016.789624][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1016.789644][    C1] RIP: 0033:0x7f4f7ec151eb
[ 1016.789661][    C1] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[ 1016.789676][    C1] RSP: 002b:00007f4f7ce6cdb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1016.789696][    C1] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f7ec151eb
[ 1016.789710][    C1] RDX: 0000000000000003 RSI: 0000000000004c00 RDI: 0000000000000004
[ 1016.789721][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1016.789732][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1016.789742][    C1] R13: 00007f4f7ce6cee0 R14: 00007f4f7ce6cea0 R15: 00007f4f74a4d000
[ 1016.789759][    C1]  </TASK>
[ 1016.789782][    C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:3031
[ 1016.789794][    C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 16335, name: syz.4.3499
[ 1016.789809][    C1] INFO: lockdep is turned off.
[ 1016.789813][    C1] Preemption disabled at:
[ 1016.789819][    C1] [<ffffffff81602da2>] vprintk_emit+0xa2/0x150
[ 1016.789838][    C1] CPU: 1 PID: 16335 Comm: syz.4.3499 Not tainted syzkaller #0
[ 1016.789855][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1016.789864][    C1] Call Trace:
[ 1016.789870][    C1]  <IRQ>
[ 1016.789876][    C1]  dump_stack_lvl+0x188/0x250
[ 1016.789893][    C1]  ? lock_chain_count+0x20/0x20
[ 1016.789911][    C1]  ? show_regs_print_info+0x20/0x20
[ 1016.789928][    C1]  ? load_image+0x410/0x410
[ 1016.789946][    C1]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1016.789967][    C1]  ___might_sleep+0x493/0x610
[ 1016.789985][    C1]  ? vprintk_emit+0xa2/0x150
[ 1016.790000][    C1]  ? __might_sleep+0xf0/0xf0
[ 1016.790014][    C1]  ? lock_release+0xb5/0x8a0
[ 1016.790033][    C1]  ? __flush_work+0x11a/0x210
[ 1016.790049][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1016.790067][    C1]  ? __lock_acquire+0x7d40/0x7d40
[ 1016.790085][    C1]  ? kobject_put+0x25c/0x450
[ 1016.790101][    C1]  start_flush_work+0x2e/0x830
[ 1016.790121][    C1]  __flush_work+0x148/0x210
[ 1016.790138][    C1]  ? flush_work+0x20/0x20
[ 1016.790159][    C1]  ? lock_chain_count+0x20/0x20
[ 1016.790177][    C1]  ? kasan_quarantine_put+0x39/0x210
[ 1016.790193][    C1]  ? kasan_quarantine_put+0xd4/0x210
[ 1016.790210][    C1]  ? __cancel_work_timer+0x36a/0x560
[ 1016.790227][    C1]  __cancel_work_timer+0x3f4/0x560
[ 1016.790243][    C1]  ? slab_free_freelist_hook+0xec/0x170
[ 1016.790261][    C1]  ? cancel_work_sync+0x20/0x20
[ 1016.790277][    C1]  ? kobject_put+0x25c/0x450
[ 1016.790291][    C1]  ? kfree+0xef/0x2a0
[ 1016.790308][    C1]  ? kobject_put+0x41d/0x450
[ 1016.790326][    C1]  ? kref_get+0x70/0x70
[ 1016.790343][    C1]  mmc_free_host+0x15/0x30
[ 1016.790361][    C1]  call_timer_fn+0x17b/0x540
[ 1016.790381][    C1]  ? kref_get+0x70/0x70
[ 1016.790398][    C1]  ? __run_timers+0x810/0x810
[ 1016.790420][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1016.790439][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[ 1016.790457][    C1]  ? kref_get+0x70/0x70
[ 1016.790475][    C1]  __run_timers+0x56c/0x810
[ 1016.790498][    C1]  ? detach_timer+0x2b0/0x2b0
[ 1016.790514][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1016.790536][    C1]  ? sched_clock_cpu+0x15/0x3c0
[ 1016.790561][    C1]  ? seqcount_lockdep_reader_access+0x177/0x1d0
[ 1016.790580][    C1]  run_timer_softirq+0x63/0xf0
[ 1016.790598][    C1]  handle_softirqs+0x336/0x830
[ 1016.790617][    C1]  ? __irq_exit_rcu+0x13b/0x230
[ 1016.790634][    C1]  ? do_softirq+0x210/0x210
[ 1016.790649][    C1]  ? hrtimer_interrupt+0x6a2/0x8b0
[ 1016.790669][    C1]  ? irqtime_account_irq+0xb2/0x1b0
[ 1016.790687][    C1]  __irq_exit_rcu+0x13b/0x230
[ 1016.790703][    C1]  ? irq_exit_rcu+0x20/0x20
[ 1016.790722][    C1]  irq_exit_rcu+0x5/0x20
[ 1016.790737][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[ 1016.790757][    C1]  </IRQ>
[ 1016.790763][    C1]  <TASK>
[ 1016.790772][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1016.790792][    C1] RIP: 0010:console_unlock+0xc90/0x10f0
[ 1016.790810][    C1] Code: 75 11 e8 33 e5 18 00 4d 85 e4 75 16 e8 29 e5 18 00 eb 15 e8 22 e5 18 00 e8 8d d8 61 08 4d 85 e4 74 ea e8 13 e5 18 00 fb 31 ff <89> de e8 69 e8 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 f7
[ 1016.790824][    C1] RSP: 0018:ffffc90002ebee00 EFLAGS: 00000246
[ 1016.790839][    C1] RAX: ffffffff81603e4d RBX: 0000000000000000 RCX: 0000000000080000
[ 1016.790852][    C1] RDX: ffffc9000d691000 RSI: 00000000000214d0 RDI: 0000000000000000
[ 1016.790864][    C1] RBP: ffffc90002ebf070 R08: ffffffff910150c7 R09: 1ffffffff2202a18
[ 1016.790877][    C1] R10: dffffc0000000000 R11: fffffbfff2202a19 R12: 0000000000000200
[ 1016.790890][    C1] R13: 0000000000000046 R14: 0000000000000000 R15: dffffc0000000000
[ 1016.790904][    C1]  ? console_unlock+0xc8d/0x10f0
[ 1016.790923][    C1]  ? read_lock_is_recursive+0x10/0x10
[ 1016.790945][    C1]  ? console_trylock_spinning+0x370/0x370
[ 1016.790961][    C1]  ? __down_trylock_console_sem+0xf2/0x1f0
[ 1016.790979][    C1]  ? __down_trylock_console_sem+0x19f/0x1f0
[ 1016.790996][    C1]  ? vprintk_emit+0xa7/0x150
[ 1016.791010][    C1]  ? printk_parse_prefix+0x310/0x310
[ 1016.791026][    C1]  ? vprintk_emit+0xa7/0x150
[ 1016.791040][    C1]  ? console_trylock+0x70/0x70
[ 1016.791053][    C1]  ? mark_lock+0x94/0x320
[ 1016.791069][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1016.791092][    C1]  ? vprintk_emit+0x150/0x150
[ 1016.791109][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1016.791128][    C1]  ? _raw_spin_unlock+0x40/0x40
[ 1016.791146][    C1]  vprintk_emit+0xc0/0x150
[ 1016.791163][    C1]  _printk+0xda/0x130
[ 1016.791180][    C1]  ? load_image+0x410/0x410
[ 1016.791198][    C1]  ? do_raw_spin_unlock+0x11d/0x230
[ 1016.791216][    C1]  set_capacity_and_notify+0x363/0x390
[ 1016.791235][    C1]  ? set_capacity+0xa0/0xa0
[ 1016.791252][    C1]  ? sysfs_create_group+0x20/0x20
[ 1016.791271][    C1]  loop_set_size+0x44/0xa0
[ 1016.791287][    C1]  loop_configure+0xf88/0x1480
[ 1016.791313][    C1]  lo_ioctl+0x2e1/0x20e0
[ 1016.791333][    C1]  ? __lock_acquire+0x12df/0x7d40
[ 1016.791355][    C1]  ? lo_release+0x1f0/0x1f0
[ 1016.791373][    C1]  ? __lock_acquire+0x13b3/0x7d40
[ 1016.791395][    C1]  ? mark_lock+0x94/0x320
[ 1016.791411][    C1]  ? verify_lock_unused+0x140/0x140
[ 1016.791431][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1016.791461][    C1]  ? rcu_lock_release+0x5/0x20
[ 1016.791480][    C1]  ? __lock_acquire+0x7d40/0x7d40
[ 1016.791499][    C1]  ? unwind_next_frame+0x11ec/0x1cf0
[ 1016.791520][    C1]  ? 0xffffffffa0028000
[ 1016.791533][    C1]  ? is_bpf_text_address+0x254/0x270
[ 1016.791560][    C1]  ? __kernel_text_address+0x9a/0x100
[ 1016.791580][    C1]  ? unwind_get_return_address+0x49/0x80
[ 1016.791598][    C1]  ? stack_trace_save+0xf0/0xf0
[ 1016.791614][    C1]  ? arch_stack_walk+0xf2/0x140
[ 1016.791635][    C1]  ? kfree+0xef/0x2a0
[ 1016.791651][    C1]  ? stack_trace_save+0xa6/0xf0
[ 1016.791667][    C1]  ? stack_trace_snprint+0xe0/0xe0
[ 1016.791682][    C1]  ? slab_free_freelist_hook+0xec/0x170
[ 1016.791700][    C1]  ? security_file_ioctl+0x6c/0xa0
[ 1016.791718][    C1]  ? __se_sys_ioctl+0x48/0x170
[ 1016.791732][    C1]  ? do_syscall_64+0x4c/0xa0
[ 1016.791749][    C1]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1016.791769][    C1]  ? kfree+0xef/0x2a0
[ 1016.791784][    C1]  ? kasan_set_track+0x62/0x70
[ 1016.791801][    C1]  ? kasan_set_track+0x4b/0x70
[ 1016.791816][    C1]  ? kasan_set_free_info+0x1f/0x40
[ 1016.791834][    C1]  ? ____kasan_slab_free+0xd5/0x110
[ 1016.791851][    C1]  ? slab_free_freelist_hook+0xec/0x170
[ 1016.791867][    C1]  ? kfree+0xef/0x2a0
[ 1016.791882][    C1]  ? tomoyo_path_number_perm+0x55c/0x6b0
[ 1016.791900][    C1]  ? security_file_ioctl+0x6c/0xa0
[ 1016.791917][    C1]  ? __se_sys_ioctl+0x48/0x170
[ 1016.791931][    C1]  ? do_syscall_64+0x4c/0xa0
[ 1016.791947][    C1]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1016.791975][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1016.791997][    C1]  ? lock_chain_count+0x20/0x20
[ 1016.792015][    C1]  ? do_vfs_ioctl+0x1d5e/0x1f40
[ 1016.792040][    C1]  ? blkdev_common_ioctl+0x6b9/0x1ed0
[ 1016.792057][    C1]  ? tomoyo_path_number_perm+0x5f7/0x6b0
[ 1016.792077][    C1]  ? blkdev_bszset+0x200/0x200
[ 1016.792104][    C1]  ? lo_release+0x1f0/0x1f0
[ 1016.792122][    C1]  blkdev_ioctl+0x347/0x6f0
[ 1016.792140][    C1]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[ 1016.792159][    C1]  ? blkdev_iopoll+0x100/0x100
[ 1016.792178][    C1]  block_ioctl+0xac/0xf0
[ 1016.792197][    C1]  __se_sys_ioctl+0xfa/0x170
[ 1016.792213][    C1]  do_syscall_64+0x4c/0xa0
[ 1016.792230][    C1]  ? clear_bhb_loop+0x30/0x80
[ 1016.792248][    C1]  ? clear_bhb_loop+0x30/0x80
[ 1016.792267][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1016.792286][    C1] RIP: 0033:0x7f4f7ec151eb
[ 1016.792300][    C1] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[ 1016.792315][    C1] RSP: 002b:00007f4f7ce6cdb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1016.792335][    C1] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f7ec151eb
[ 1016.792348][    C1] RDX: 0000000000000003 RSI: 0000000000004c00 RDI: 0000000000000004
[ 1016.792359][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1016.792371][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1016.792382][    C1] R13: 00007f4f7ce6cee0 R14: 00007f4f7ce6cea0 R15: 00007f4f74a4d000
[ 1016.792402][    C1]  </TASK>
[ 1016.792429][    C1] kobject: 'mmc0' (ffff88802b55c008): kobject_cleanup, parent 0000000000000000
[ 1016.792448][    C1] kobject: 'mmc0' (ffff88802b55c008): calling ktype release
[ 1016.792468][    C1] ODEBUG: object ffffc90000dd09a0 is NOT on stack ffffc90002eb8000, but annotated.
[ 1016.792569][ T3559] kobject: 'loop0' (ffff888017cfc6c0): kobject_uevent_env
[ 1016.792600][ T3559] kobject: 'loop0' (ffff888017cfc6c0): fill_kobj_path: path = '/devices/virtual/block/loop0'
[ 1016.792773][ T3559] device: 'loop0p1': device_add
[ 1016.792786][ T3559] kobject: 'loop0p1' (ffff88805306de40): kobject_add_internal: parent: 'loop0', set: 'devices'
[ 1016.792836][ T3559] block loop0p1: No ACPI support
[ 1016.792853][    C1] ------------[ cut here ]------------
[ 1016.792865][    C1] WARNING: CPU: 1 PID: 16335 at lib/debugobjects.c:561 __debug_object_init+0x4c0/0xc80
[ 1016.792898][    C1] Modules linked in:
[ 1016.792909][    C1] CPU: 1 PID: 16335 Comm: syz.4.3499 Tainted: G        W         syzkaller #0
[ 1016.792927][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1016.792937][    C1] RIP: 0010:__debug_object_init+0x4c0/0xc80
[ 1016.792959][    C1] Code: 16 d2 54 13 48 c7 c1 40 53 7a 8a 48 c7 c7 a0 53 7a 8a 84 c0 48 0f 45 f9 4c 89 ee e8 ca ee c9 05 48 be 00 00 00 00 00 fc ff df <0f> 0b e9 4d fd ff ff 83 3d 42 d1 54 13 00 4c 89 6c 24 28 0f 84 23
[ 1016.792978][    C1] RSP: 0018:ffffc90000dd07e0 EFLAGS: 00010046
[ 1016.792992][    C1] RAX: 0000000000000050 RBX: 0000000000000001 RCX: 0ad8586cedeffd00
[ 1016.793005][    C1] RDX: 0000000000000100 RSI: dffffc0000000000 RDI: 0000000000000000
[ 1016.793017][    C1] RBP: ffffc90000dd0950 R08: ffffffff8d1139a3 R09: 1ffffffff1a22734
[ 1016.793031][    C1] R10: dffffc0000000000 R11: fffffbfff1a22735 R12: f8f8f8f8f8f8f8f8
[ 1016.793043][    C1] R13: ffffc90000dd09a0 R14: ffff88802cd0d960 R15: ffff88804fd292a0
[ 1016.793099][    C1] FS:  00007f4f7ce6d6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1016.793117][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1016.793130][    C1] CR2: 00007fafc9f33ff8 CR3: 000000007cebf000 CR4: 00000000003506e0
[ 1016.793148][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1016.793159][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1016.793167][ T3559] PM: Adding info for No Bus:loop0p1
[ 1016.793172][    C1] Call Trace:
[ 1016.793180][    C1]  <IRQ>
[ 1016.793189][    C1]  ? lockdep_softirqs_off+0x430/0x430
[ 1016.793211][    C1]  ? ___might_sleep+0xd5/0x610
[ 1016.793226][    C1]  ? debug_object_init+0x10/0x10
[ 1016.793243][    C1]  ? lockdep_softirqs_off+0x430/0x430
[ 1016.793259][    C1]  ? rcu_is_watching+0x11/0xa0
[ 1016.793274][    C1]  ? __might_sleep+0xf0/0xf0
[ 1016.793288][    C1]  ? lock_release+0xb5/0x8a0
[ 1016.793308][    C1]  ? __init_swait_queue_head+0xa4/0x140
[ 1016.793329][    C1]  __synchronize_srcu+0x229/0x350
[ 1016.793412][    C1]  ? synchronize_srcu_expedited+0x20/0x20
[ 1016.793435][    C1]  ? _raw_spin_unlock+0x40/0x40
[ 1016.793453][    C1]  ? ktime_get_mono_fast_ns+0x199/0x1b0
[ 1016.793471][    C1]  ? synchronize_srcu+0x18f/0x1b0
[ 1016.793487][    C1]  wakeup_source_unregister+0x112/0x190
[ 1016.793539][    C1]  mmc_host_classdev_release+0x43/0xf0
[ 1016.793558][    C1]  ? mmc_free_host+0x30/0x30
[ 1016.793573][    C1]  device_release+0x92/0x1c0
[ 1016.793590][    C1]  kobject_put+0x217/0x450
[ 1016.793606][    C1]  ? kref_get+0x70/0x70
[ 1016.793622][    C1]  call_timer_fn+0x17b/0x540
[ 1016.793641][    C1]  ? kref_get+0x70/0x70
[ 1016.793657][    C1]  ? __run_timers+0x810/0x810
[ 1016.793678][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1016.793695][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[ 1016.793714][    C1]  ? kref_get+0x70/0x70
[ 1016.793731][    C1]  __run_timers+0x56c/0x810
[ 1016.793754][    C1]  ? detach_timer+0x2b0/0x2b0
[ 1016.793771][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1016.793793][    C1]  ? sched_clock_cpu+0x15/0x3c0
[ 1016.793817][    C1]  ? seqcount_lockdep_reader_access+0x177/0x1d0
[ 1016.793835][    C1]  run_timer_softirq+0x63/0xf0
[ 1016.793853][    C1]  handle_softirqs+0x336/0x830
[ 1016.793871][    C1]  ? __irq_exit_rcu+0x13b/0x230
[ 1016.793889][    C1]  ? do_softirq+0x210/0x210
[ 1016.793904][    C1]  ? hrtimer_interrupt+0x6a2/0x8b0
[ 1016.793924][    C1]  ? irqtime_account_irq+0xb2/0x1b0
[ 1016.793943][    C1]  __irq_exit_rcu+0x13b/0x230
[ 1016.793959][    C1]  ? irq_exit_rcu+0x20/0x20
[ 1016.793979][    C1]  irq_exit_rcu+0x5/0x20
[ 1016.793994][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[ 1016.794013][    C1]  </IRQ>
[ 1016.794019][    C1]  <TASK>
[ 1016.794025][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1016.794045][    C1] RIP: 0010:console_unlock+0xc90/0x10f0
[ 1016.794063][    C1] Code: 75 11 e8 33 e5 18 00 4d 85 e4 75 16 e8 29 e5 18 00 eb 15 e8 22 e5 18 00 e8 8d d8 61 08 4d 85 e4 74 ea e8 13 e5 18 00 fb 31 ff <89> de e8 69 e8 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 f7
[ 1016.794119][    C1] RSP: 0018:ffffc90002ebee00 EFLAGS: 00000246
[ 1016.794130][    C1] RAX: ffffffff81603e4d RBX: 0000000000000000 RCX: 0000000000080000
[ 1016.794137][    C1] RDX: ffffc9000d691000 RSI: 00000000000214d0 RDI: 0000000000000000
[ 1016.794148][    C1] RBP: ffffc90002ebf070 R08: ffffffff910150c7 R09: 1ffffffff2202a18
[ 1016.794160][    C1] R10: dffffc0000000000 R11: fffffbfff2202a19 R12: 0000000000000200
[ 1016.794170][    C1] R13: 0000000000000046 R14: 0000000000000000 R15: dffffc0000000000
[ 1016.794183][    C1]  ? console_unlock+0xc8d/0x10f0
[ 1016.794203][    C1]  ? read_lock_is_recursive+0x10/0x10
[ 1016.794223][    C1]  ? console_trylock_spinning+0x370/0x370
[ 1016.794238][    C1]  ? __down_trylock_console_sem+0xf2/0x1f0
[ 1016.794255][    C1]  ? __down_trylock_console_sem+0x19f/0x1f0
[ 1016.794271][    C1]  ? vprintk_emit+0xa7/0x150
[ 1016.794286][    C1]  ? printk_parse_prefix+0x310/0x310
[ 1016.794301][    C1]  ? vprintk_emit+0xa7/0x150
[ 1016.794316][    C1]  ? console_trylock+0x70/0x70
[ 1016.794331][    C1]  ? mark_lock+0x94/0x320
[ 1016.794347][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1016.794369][    C1]  ? vprintk_emit+0x150/0x150
[ 1016.794387][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1016.794406][    C1]  ? _raw_spin_unlock+0x40/0x40
[ 1016.794424][    C1]  vprintk_emit+0xc0/0x150
[ 1016.794439][    C1]  _printk+0xda/0x130
[ 1016.794457][    C1]  ? load_image+0x410/0x410
[ 1016.794475][    C1]  ? do_raw_spin_unlock+0x11d/0x230
[ 1016.794493][    C1]  set_capacity_and_notify+0x363/0x390
[ 1016.794511][    C1]  ? set_capacity+0xa0/0xa0
[ 1016.794527][    C1]  ? sysfs_create_group+0x20/0x20
[ 1016.794556][    C1]  loop_set_size+0x44/0xa0
[ 1016.794571][    C1]  loop_configure+0xf88/0x1480
[ 1016.794597][    C1]  lo_ioctl+0x2e1/0x20e0
[ 1016.794617][    C1]  ? __lock_acquire+0x12df/0x7d40
[ 1016.794638][    C1]  ? lo_release+0x1f0/0x1f0
[ 1016.794656][    C1]  ? __lock_acquire+0x13b3/0x7d40
[ 1016.794678][    C1]  ? mark_lock+0x94/0x320
[ 1016.794693][    C1]  ? verify_lock_unused+0x140/0x140
[ 1016.794715][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1016.794746][    C1]  ? rcu_lock_release+0x5/0x20
[ 1016.794766][    C1]  ? __lock_acquire+0x7d40/0x7d40
[ 1016.794786][    C1]  ? unwind_next_frame+0x11ec/0x1cf0
[ 1016.794807][    C1]  ? 0xffffffffa0028000
[ 1016.794819][    C1]  ? is_bpf_text_address+0x254/0x270
[ 1016.794837][    C1]  ? __kernel_text_address+0x9a/0x100
[ 1016.794857][    C1]  ? unwind_get_return_address+0x49/0x80
[ 1016.794876][    C1]  ? stack_trace_save+0xf0/0xf0
[ 1016.794891][    C1]  ? arch_stack_walk+0xf2/0x140
[ 1016.794912][    C1]  ? kfree+0xef/0x2a0
[ 1016.794928][    C1]  ? stack_trace_save+0xa6/0xf0
[ 1016.794943][    C1]  ? stack_trace_snprint+0xe0/0xe0
[ 1016.794958][    C1]  ? slab_free_freelist_hook+0xec/0x170
[ 1016.794976][    C1]  ? security_file_ioctl+0x6c/0xa0
[ 1016.794993][    C1]  ? __se_sys_ioctl+0x48/0x170
[ 1016.795008][    C1]  ? do_syscall_64+0x4c/0xa0
[ 1016.795024][    C1]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1016.795048][    C1]  ? kfree+0xef/0x2a0
[ 1016.795062][    C1]  ? kasan_set_track+0x62/0x70
[ 1016.795078][    C1]  ? kasan_set_track+0x4b/0x70
[ 1016.795094][    C1]  ? kasan_set_free_info+0x1f/0x40
[ 1016.795113][    C1]  ? ____kasan_slab_free+0xd5/0x110
[ 1016.795129][    C1]  ? slab_free_freelist_hook+0xec/0x170
[ 1016.795144][    C1]  ? kfree+0xef/0x2a0
[ 1016.795157][    C1]  ? tomoyo_path_number_perm+0x55c/0x6b0
[ 1016.795175][    C1]  ? security_file_ioctl+0x6c/0xa0
[ 1016.795192][    C1]  ? __se_sys_ioctl+0x48/0x170
[ 1016.795206][    C1]  ? do_syscall_64+0x4c/0xa0
[ 1016.795223][    C1]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1016.795251][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1016.795272][    C1]  ? lock_chain_count+0x20/0x20
[ 1016.795291][    C1]  ? do_vfs_ioctl+0x1d5e/0x1f40
[ 1016.795316][    C1]  ? blkdev_common_ioctl+0x6b9/0x1ed0
[ 1016.795333][    C1]  ? tomoyo_path_number_perm+0x5f7/0x6b0
[ 1016.795353][    C1]  ? blkdev_bszset+0x200/0x200
[ 1016.795380][    C1]  ? lo_release+0x1f0/0x1f0
[ 1016.795397][    C1]  blkdev_ioctl+0x347/0x6f0
[ 1016.795414][    C1]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[ 1016.795433][    C1]  ? blkdev_iopoll+0x100/0x100
[ 1016.795451][    C1]  block_ioctl+0xac/0xf0
[ 1016.795470][    C1]  __se_sys_ioctl+0xfa/0x170
[ 1016.795487][    C1]  do_syscall_64+0x4c/0xa0
[ 1016.795503][    C1]  ? clear_bhb_loop+0x30/0x80
[ 1016.795521][    C1]  ? clear_bhb_loop+0x30/0x80
[ 1016.795558][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1016.795578][    C1] RIP: 0033:0x7f4f7ec151eb
[ 1016.795593][    C1] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[ 1016.795608][    C1] RSP: 002b:00007f4f7ce6cdb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1016.795626][    C1] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f7ec151eb
[ 1016.795639][    C1] RDX: 0000000000000003 RSI: 0000000000004c00 RDI: 0000000000000004
[ 1016.795650][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1016.795660][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1016.795671][    C1] R13: 00007f4f7ce6cee0 R14: 00007f4f7ce6cea0 R15: 00007f4f74a4d000
[ 1016.795691][    C1]  </TASK>
[ 1016.795707][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1016.795718][    C1] CPU: 1 PID: 16335 Comm: syz.4.3499 Tainted: G        W         syzkaller #0
[ 1016.795737][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1016.795747][    C1] Call Trace:
[ 1016.795753][    C1]  <IRQ>
[ 1016.795759][    C1]  dump_stack_lvl+0x188/0x250
[ 1016.795778][    C1]  ? show_regs_print_info+0x20/0x20
[ 1016.795795][    C1]  ? load_image+0x410/0x410
[ 1016.795816][    C1]  panic+0x2f8/0x850
[ 1016.795832][    C1]  ? bpf_jit_dump+0xd0/0xd0
[ 1016.795852][    C1]  ? __debug_object_init+0x4c0/0xc80
[ 1016.795872][    C1]  __warn+0x248/0x2b0
[ 1016.795886][    C1]  ? __debug_object_init+0x4c0/0xc80
[ 1016.795906][    C1]  report_bug+0x1b9/0x2e0
[ 1016.795926][    C1]  handle_bug+0x3a/0x70
[ 1016.795943][    C1]  exc_invalid_op+0x16/0x40
[ 1016.795960][    C1]  asm_exc_invalid_op+0x16/0x20
[ 1016.795978][    C1] RIP: 0010:__debug_object_init+0x4c0/0xc80
[ 1016.795997][    C1] Code: 16 d2 54 13 48 c7 c1 40 53 7a 8a 48 c7 c7 a0 53 7a 8a 84 c0 48 0f 45 f9 4c 89 ee e8 ca ee c9 05 48 be 00 00 00 00 00 fc ff df <0f> 0b e9 4d fd ff ff 83 3d 42 d1 54 13 00 4c 89 6c 24 28 0f 84 23
[ 1016.796011][    C1] RSP: 0018:ffffc90000dd07e0 EFLAGS: 00010046
[ 1016.796027][    C1] RAX: 0000000000000050 RBX: 0000000000000001 RCX: 0ad8586cedeffd00
[ 1016.796038][    C1] RDX: 0000000000000100 RSI: dffffc0000000000 RDI: 0000000000000000
[ 1016.796048][    C1] RBP: ffffc90000dd0950 R08: ffffffff8d1139a3 R09: 1ffffffff1a22734
[ 1016.796061][    C1] R10: dffffc0000000000 R11: fffffbfff1a22735 R12: f8f8f8f8f8f8f8f8
[ 1016.796074][    C1] R13: ffffc90000dd09a0 R14: ffff88802cd0d960 R15: ffff88804fd292a0
[ 1016.796096][    C1]  ? lockdep_softirqs_off+0x430/0x430
[ 1016.796115][    C1]  ? ___might_sleep+0xd5/0x610
[ 1016.796132][    C1]  ? debug_object_init+0x10/0x10
[ 1016.796150][    C1]  ? lockdep_softirqs_off+0x430/0x430
[ 1016.796168][    C1]  ? rcu_is_watching+0x11/0xa0
[ 1016.796184][    C1]  ? __might_sleep+0xf0/0xf0
[ 1016.796199][    C1]  ? lock_release+0xb5/0x8a0
[ 1016.796220][    C1]  ? __init_swait_queue_head+0xa4/0x140
[ 1016.796241][    C1]  __synchronize_srcu+0x229/0x350
[ 1016.796263][    C1]  ? synchronize_srcu_expedited+0x20/0x20
[ 1016.796286][    C1]  ? _raw_spin_unlock+0x40/0x40
[ 1016.796302][    C1]  ? ktime_get_mono_fast_ns+0x199/0x1b0
[ 1016.796319][    C1]  ? synchronize_srcu+0x18f/0x1b0
[ 1016.796336][    C1]  wakeup_source_unregister+0x112/0x190
[ 1016.796358][    C1]  mmc_host_classdev_release+0x43/0xf0
[ 1016.796378][    C1]  ? mmc_free_host+0x30/0x30
[ 1016.796394][    C1]  device_release+0x92/0x1c0
[ 1016.796412][    C1]  kobject_put+0x217/0x450
[ 1016.796429][    C1]  ? kref_get+0x70/0x70
[ 1016.796446][    C1]  call_timer_fn+0x17b/0x540
[ 1016.796464][    C1]  ? kref_get+0x70/0x70
[ 1016.796481][    C1]  ? __run_timers+0x810/0x810
[ 1016.796502][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1016.796518][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[ 1016.796544][    C1]  ? kref_get+0x70/0x70
[ 1016.796562][    C1]  __run_timers+0x56c/0x810
[ 1016.796585][    C1]  ? detach_timer+0x2b0/0x2b0
[ 1016.796602][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1016.796625][    C1]  ? sched_clock_cpu+0x15/0x3c0
[ 1016.796643][    C1]  ? seqcount_lockdep_reader_access+0x177/0x1d0
[ 1016.796663][    C1]  run_timer_softirq+0x63/0xf0
[ 1016.796682][    C1]  handle_softirqs+0x336/0x830
[ 1016.796702][    C1]  ? __irq_exit_rcu+0x13b/0x230
[ 1016.796720][    C1]  ? do_softirq+0x210/0x210
[ 1016.796736][    C1]  ? hrtimer_interrupt+0x6a2/0x8b0
[ 1016.796757][    C1]  ? irqtime_account_irq+0xb2/0x1b0
[ 1016.796776][    C1]  __irq_exit_rcu+0x13b/0x230
[ 1016.796792][    C1]  ? irq_exit_rcu+0x20/0x20
[ 1016.796812][    C1]  irq_exit_rcu+0x5/0x20
[ 1016.796826][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[ 1016.796846][    C1]  </IRQ>
[ 1016.796851][    C1]  <TASK>
[ 1016.796857][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1016.796877][    C1] RIP: 0010:console_unlock+0xc90/0x10f0
[ 1016.796894][    C1] Code: 75 11 e8 33 e5 18 00 4d 85 e4 75 16 e8 29 e5 18 00 eb 15 e8 22 e5 18 00 e8 8d d8 61 08 4d 85 e4 74 ea e8 13 e5 18 00 fb 31 ff <89> de e8 69 e8 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 f7
[ 1016.796908][    C1] RSP: 0018:ffffc90002ebee00 EFLAGS: 00000246
[ 1016.796923][    C1] RAX: ffffffff81603e4d RBX: 0000000000000000 RCX: 0000000000080000
[ 1016.796935][    C1] RDX: ffffc9000d691000 RSI: 00000000000214d0 RDI: 0000000000000000
[ 1016.796946][    C1] RBP: ffffc90002ebf070 R08: ffffffff910150c7 R09: 1ffffffff2202a18
[ 1016.796960][    C1] R10: dffffc0000000000 R11: fffffbfff2202a19 R12: 0000000000000200
[ 1016.796972][    C1] R13: 0000000000000046 R14: 0000000000000000 R15: dffffc0000000000
[ 1016.796986][    C1]  ? console_unlock+0xc8d/0x10f0
[ 1016.797005][    C1]  ? read_lock_is_recursive+0x10/0x10
[ 1016.797027][    C1]  ? console_trylock_spinning+0x370/0x370
[ 1016.797043][    C1]  ? __down_trylock_console_sem+0xf2/0x1f0
[ 1016.797060][    C1]  ? __down_trylock_console_sem+0x19f/0x1f0
[ 1016.797077][    C1]  ? vprintk_emit+0xa7/0x150
[ 1016.797092][    C1]  ? printk_parse_prefix+0x310/0x310
[ 1016.797108][    C1]  ? vprintk_emit+0xa7/0x150
[ 1016.797123][    C1]  ? console_trylock+0x70/0x70
[ 1016.797137][    C1]  ? mark_lock+0x94/0x320
[ 1016.797153][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1016.797176][    C1]  ? vprintk_emit+0x150/0x150
[ 1016.797193][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1016.797212][    C1]  ? _raw_spin_unlock+0x40/0x40
[ 1016.797230][    C1]  vprintk_emit+0xc0/0x150
[ 1016.797246][    C1]  _printk+0xda/0x130
[ 1016.797263][    C1]  ? load_image+0x410/0x410
[ 1016.797281][    C1]  ? do_raw_spin_unlock+0x11d/0x230
[ 1016.797299][    C1]  set_capacity_and_notify+0x363/0x390
[ 1016.797318][    C1]  ? set_capacity+0xa0/0xa0
[ 1016.797333][    C1]  ? sysfs_create_group+0x20/0x20
[ 1016.797352][    C1]  loop_set_size+0x44/0xa0
[ 1016.797367][    C1]  loop_configure+0xf88/0x1480
[ 1016.797392][    C1]  lo_ioctl+0x2e1/0x20e0
[ 1016.797412][    C1]  ? __lock_acquire+0x12df/0x7d40
[ 1016.797432][    C1]  ? lo_release+0x1f0/0x1f0
[ 1016.797449][    C1]  ? __lock_acquire+0x13b3/0x7d40
[ 1016.797469][    C1]  ? mark_lock+0x94/0x320
[ 1016.797484][    C1]  ? verify_lock_unused+0x140/0x140
[ 1016.797504][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1016.797534][    C1]  ? rcu_lock_release+0x5/0x20
[ 1016.797563][    C1]  ? __lock_acquire+0x7d40/0x7d40
[ 1016.797584][    C1]  ? unwind_next_frame+0x11ec/0x1cf0
[ 1016.797604][    C1]  ? 0xffffffffa0028000
[ 1016.797616][    C1]  ? is_bpf_text_address+0x254/0x270
[ 1016.797633][    C1]  ? __kernel_text_address+0x9a/0x100
[ 1016.797653][    C1]  ? unwind_get_return_address+0x49/0x80
[ 1016.797671][    C1]  ? stack_trace_save+0xf0/0xf0
[ 1016.797686][    C1]  ? arch_stack_walk+0xf2/0x140
[ 1016.797707][    C1]  ? kfree+0xef/0x2a0
[ 1016.797722][    C1]  ? stack_trace_save+0xa6/0xf0
[ 1016.797738][    C1]  ? stack_trace_snprint+0xe0/0xe0
[ 1016.797753][    C1]  ? slab_free_freelist_hook+0xec/0x170
[ 1016.797772][    C1]  ? security_file_ioctl+0x6c/0xa0
[ 1016.797789][    C1]  ? __se_sys_ioctl+0x48/0x170
[ 1016.797808][    C1]  ? do_syscall_64+0x4c/0xa0
[ 1016.797824][    C1]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1016.797845][    C1]  ? kfree+0xef/0x2a0
[ 1016.797861][    C1]  ? kasan_set_track+0x62/0x70
[ 1016.797878][    C1]  ? kasan_set_track+0x4b/0x70
[ 1016.797895][    C1]  ? kasan_set_free_info+0x1f/0x40
[ 1016.797915][    C1]  ? ____kasan_slab_free+0xd5/0x110
[ 1016.797933][    C1]  ? slab_free_freelist_hook+0xec/0x170
[ 1016.797951][    C1]  ? kfree+0xef/0x2a0
[ 1016.797966][    C1]  ? tomoyo_path_number_perm+0x55c/0x6b0
[ 1016.797985][    C1]  ? security_file_ioctl+0x6c/0xa0
[ 1016.798002][    C1]  ? __se_sys_ioctl+0x48/0x170
[ 1016.798017][    C1]  ? do_syscall_64+0x4c/0xa0
[ 1016.798033][    C1]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1016.798099][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1016.798123][    C1]  ? lock_chain_count+0x20/0x20
[ 1016.798140][    C1]  ? do_vfs_ioctl+0x1d5e/0x1f40
[ 1016.798164][    C1]  ? blkdev_common_ioctl+0x6b9/0x1ed0
[ 1016.798182][    C1]  ? tomoyo_path_number_perm+0x5f7/0x6b0
[ 1016.798203][    C1]  ? blkdev_bszset+0x200/0x200
[ 1016.798230][    C1]  ? lo_release+0x1f0/0x1f0
[ 1016.798249][    C1]  blkdev_ioctl+0x347/0x6f0
[ 1016.798266][    C1]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[ 1016.798286][    C1]  ? blkdev_iopoll+0x100/0x100
[ 1016.798306][    C1]  block_ioctl+0xac/0xf0
[ 1016.798325][    C1]  __se_sys_ioctl+0xfa/0x170
[ 1016.798342][    C1]  do_syscall_64+0x4c/0xa0
[ 1016.798359][    C1]  ? clear_bhb_loop+0x30/0x80
[ 1016.798376][    C1]  ? clear_bhb_loop+0x30/0x80
[ 1016.798394][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1016.798412][    C1] RIP: 0033:0x7f4f7ec151eb
[ 1016.798429][    C1] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[ 1016.798444][    C1] RSP: 002b:00007f4f7ce6cdb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1016.798465][    C1] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f7ec151eb
[ 1016.798478][    C1] RDX: 0000000000000003 RSI: 0000000000004c00 RDI: 0000000000000004
[ 1016.798489][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1016.798500][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1016.798511][    C1] R13: 00007f4f7ce6cee0 R14: 00007f4f7ce6cea0 R15: 00007f4f74a4d000
[ 1016.798529][    C1]  </TASK>
[ 1016.798859][    C1] Kernel Offset: disabled
[ 1020.552063][    C1] Rebooting in 86400 seconds..