last executing test programs:

3m15.47155886s ago: executing program 4 (id=2092):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
close(0x3)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x6b}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x2}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)

3m15.388136677s ago: executing program 4 (id=2094):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
close(0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x40)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x147}], 0x1}}], 0x1, 0x2090)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4)
sendmmsg(r3, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7ec449169ea58ebc3f3456774ea76202bc9969ea7026a8d7090c085a769e47294e4ea5b8ce3f6187e5ca87549e75b0b2980a21dc7b809da3f544d061ad96d06e0864906297353deefe8b52d519dd67f3f41dd7dd1cda0601b77e8415521d7dbb9893aeefbf94850960c84825a918b0", 0xd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000002240)="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", 0x744}], 0x1}}], 0x2, 0x0)

3m14.405083046s ago: executing program 4 (id=2099):
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000040001018110000", @ANYBLOB="3e4bb4e1741097cb51131e0f8b544eb140ce6f291936bd9f368181702b53664097ac57f99af024d864026d75bee2ea01ebe6d1c4825a3c63f148c14e9ee3b961787bdae9f525e6842ccca7214e25b365ba53de785741a21a5720699c93f5423b40d68b94bfcf0243689a853004faefd31d51b531ecc8ef086f585a6fec28cf4645c0bc95b1650a4ad66795ca3a36d89aac771778956b8a7f91750f3de8ac2b2a64e18b988806ca844d0e4601887d60fb27b34d479dc5506560ad542fc7126af0ddbb1a11da078c89616eba5b60fdbda5cc894140a8bb267de2e122ba593ffaaff43885ac0da663e2fef3d90ea1", @ANYBLOB="0000000000000000b7080000000200007b8af8fe00000000bf0500000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0)
r1 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40)
r2 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

3m13.855686504s ago: executing program 4 (id=2102):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000580)={[{@uni_xlate}, {@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0x48b}}, {@numtail}, {@uni_xlate}, {@shortname_lower}, {@utf8}, {@uni_xlateno}, {@rodir}, {@shortname_win95}, {}, {@shortname_winnt}, {@utf8}]}, 0x0, 0x2bf, &(0x7f0000002bc0)="$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")
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0x2940, 0x2, 0x10}, 0x18)

3m13.211960521s ago: executing program 4 (id=2104):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
close(0x3)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x6b}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x2}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)

3m12.543351033s ago: executing program 4 (id=2109):
r0 = socket(0x2, 0x3, 0x6)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1004a, &(0x7f0000000a80)={[{@test_dummy_encryption}, {@jqfmt_vfsold}, {@nogrpid}, {@debug}, {@discard}, {@jqfmt_vfsv1}, {@test_dummy_encryption}, {@nodioread_nolock}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, '\'!'}}, {@measure}, {@hash}]}, 0xf7, 0x44f, &(0x7f0000000540)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000f00)=0x6269, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
close(0x3)
syz_open_dev$sndctrl(0x0, 0x1, 0x242)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000a40))
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, 0x0, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
readv(r5, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000040)=""/210, 0xd2}], 0x2)
sendto$inet(r0, 0x0, 0x0, 0xdfedac7253303320, &(0x7f0000000600)={0x2, 0x0, @remote}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000160, 0x0, 0x0)

3m12.123654383s ago: executing program 32 (id=2109):
r0 = socket(0x2, 0x3, 0x6)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1004a, &(0x7f0000000a80)={[{@test_dummy_encryption}, {@jqfmt_vfsold}, {@nogrpid}, {@debug}, {@discard}, {@jqfmt_vfsv1}, {@test_dummy_encryption}, {@nodioread_nolock}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, '\'!'}}, {@measure}, {@hash}]}, 0xf7, 0x44f, &(0x7f0000000540)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000f00)=0x6269, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
close(0x3)
syz_open_dev$sndctrl(0x0, 0x1, 0x242)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000a40))
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, 0x0, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
readv(r5, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000040)=""/210, 0xd2}], 0x2)
sendto$inet(r0, 0x0, 0x0, 0xdfedac7253303320, &(0x7f0000000600)={0x2, 0x0, @remote}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000160, 0x0, 0x0)

35.768461638s ago: executing program 0 (id=3004):
syz_open_procfs(0x0, 0x0)
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40)
r1 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, 0x0, 0x28}, 0xfc40)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

35.563130872s ago: executing program 0 (id=3006):
syz_mount_image$hfsplus(&(0x7f0000000400), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000000)=ANY=[], 0x81, 0x710, &(0x7f00000019c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000480)=ANY=[], 0x32600)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)
write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8, 0x3a, '', 0x3a, 'cpuacct.usage_sys\x00', 0x3a, './file0'}, 0x39)

34.30910464s ago: executing program 0 (id=3009):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x3b, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
close(0x3)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r3, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000ff8800135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)

32.196886009s ago: executing program 0 (id=3017):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, 0x0, 0x0)
syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==")
syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18c0055, 0x0, 0x4, 0x0, &(0x7f0000000200))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$null(0xffffffffffffff9c, 0x0, 0x80, 0x0)
accept4(r4, 0x0, 0x0, 0x800)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/devices\x00', 0x0, 0x0)
read(r5, &(0x7f0000000000)=""/1024, 0x400)
mkdir(&(0x7f0000000140)='./control\x00', 0x111)
rmdir(&(0x7f00000000c0)='./control\x00')
symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00')
write(r0, &(0x7f0000000300)="46000000130001000242424242424242424242424242424242", 0x19)
write(r0, &(0x7f0000000400)="29000000010001", 0x7)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

30.162676063s ago: executing program 0 (id=3024):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
close(0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x6b}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x2}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc)

29.750944851s ago: executing program 0 (id=3032):
syz_open_procfs(0x0, 0x0)
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40)
r1 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

29.515177551s ago: executing program 33 (id=3032):
syz_open_procfs(0x0, 0x0)
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40)
r1 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

24.12319323s ago: executing program 1 (id=3069):
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180))
lseek(r0, 0x100000000, 0x0)

23.93190383s ago: executing program 1 (id=3070):
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0, 0xffffffffffffffff, 0x2000000}, 0xc)

23.93167663s ago: executing program 1 (id=3071):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
close_range(r0, 0xffffffffffffffff, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0)
clock_settime(0xfffffffb, &(0x7f0000000140))

23.239840138s ago: executing program 1 (id=3072):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000700)={'wg1\x00', <r2=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001200)={0x68, r1, 0x1, 0x70bd2a, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1ff, @loopback, 0xffffff01}}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004040}, 0x40000)

23.066892344s ago: executing program 1 (id=3075):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ptrace$pokeuser(0x6, r0, 0x9, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0)
read(r1, &(0x7f0000000180), 0x1000)
mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, 0xffffffffffffffff, 0x0)

22.960699007s ago: executing program 1 (id=3076):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f0000000100)={[{@i_version}, {@noauto_da_alloc}, {@oldalloc}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x614552, &(0x7f0000000140)=ANY=[], 0xfb, 0x122d, &(0x7f0000001280)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r1 = open(&(0x7f00000001c0)='./file2\x00', 0xe6c42, 0x20)
dup3(r1, r0, 0x0)
io_setup(0x2, &(0x7f0000000400)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000280)="1aff", 0x2, 0x2200}])

19.159525317s ago: executing program 5 (id=3091):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
close_range(r0, 0xffffffffffffffff, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0)
clock_settime(0xfffffffb, &(0x7f0000000140))

18.460732636s ago: executing program 5 (id=3094):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
close(0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x40)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x147}], 0x1}}], 0x1, 0x2090)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4)
sendmmsg(r3, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7ec449169ea58ebc3f3456774ea76202bc9969ea7026a8d7090c085a769e47294e4ea5b8ce3f6187e5ca87549e75b0b2980a21dc7b809da3f544d061ad96d06e0864906297353deefe8b52d519dd67f3f41dd7dd1cda0601b77e8415521d7dbb9893aeefbf94850960c84825a918b0", 0xd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000002240)="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", 0x744}], 0x1}}], 0x2, 0x0)

11.998231963s ago: executing program 5 (id=3108):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
dup3(r1, r0, 0x80000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRES64=r1], &(0x7f0000000200)=""/159, 0x3c, 0x9f, 0x1}, 0x28)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r2, 0x400448d4, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10)
sendto$inet(r3, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0)
r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r6, &(0x7f0000000280), 0x9)
r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000c40), 0x12)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_clone(0xa800, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, 0x0, 0x400c8c0)
r10 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_pid(r10, &(0x7f0000000240), 0x12)
ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r4, 0x40184150, 0x0)

11.07540074s ago: executing program 5 (id=3109):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, 0x0, 0x0)
syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0], 0xfe, 0x4b1, &(0x7f0000001d00)="$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")
syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18c0055, 0x0, 0x4, 0x0, &(0x7f0000000200))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$null(0xffffffffffffff9c, 0x0, 0x80, 0x0)
accept4(r4, 0x0, 0x0, 0x800)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/devices\x00', 0x0, 0x0)
read(r5, &(0x7f0000000000)=""/1024, 0x400)
mkdir(&(0x7f0000000140)='./control\x00', 0x111)
rmdir(&(0x7f00000000c0)='./control\x00')
symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00')
write(r0, &(0x7f0000000300)="46000000130001000242424242424242424242424242424242", 0x19)
write(r0, &(0x7f0000000400)="29000000010001", 0x7)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

9.893455172s ago: executing program 5 (id=3114):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00', @ANYBLOB="100029bd7000ffdbdf250e000000340041090800080006000000060002004e200000080007000800000005000d000100000008000600090000000800080009"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e64000000001800028014"], 0x48}}, 0x0)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
ioctl$MEMREAD(0xffffffffffffffff, 0xc0404d1a, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0x2, 0x4, 0x4bb}})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

5.315586287s ago: executing program 5 (id=3134):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x180401b, &(0x7f0000000100)={[{@nombcache}, {}, {@norecovery}, {@abort}, {@nombcache}]}, 0x28, 0x60b, &(0x7f00000020c0)="$eJzs3ctvFEcaAPCv2+MH9u7aoNXusofF0moF0i42NrBCUaTAHSHyuOXkYIMIBiPsKDFBipHIJVKUSw6Rcsoh5L9IkHLNIdcccskpQkKR5UOIUJio52Ha4xl7sD0zZub3k5rpqh53VQOfq7qmqieAnjWe/ZFGHI6Im0nEaO5YYbVycLz8vrXVO5eyLYli8fVfkrjzQbKSP1dSeR0p/XDE76ORfJ9GHOrbXO7i8u1rM/Pzc7cq6cml6zcnF5dvH796febK3JW5G9P/nz5z+tTpM1MndnV9+aLP33v73dGPLrz55edPkqmvfryQxNl4WnlDdl21Pzu4q5Kzv7PxKJY9zucXIuLMLs+9X/w6Wr6evKQ2g33rcuX/418i4u8xGn25f83R+PDVjlYOaKliEtU2Cug5yY7if2jvKwK0WbUfUL23r3cfvFna4l4J0A6PzpUHANZWk1hb7Y+IavwXymODMRRZ7vBasmGcJ4mI3Y3MlWVlfPfthXvZFg3G4YDWWLlbHeWubf+TUmyOxVApNbyWboj/NLdl+a/tsPzxmrT4h/ZZuRsR/6j0/wfiueJ/PBf/b+2wfPEPAAAAAAAAe+fBuYj4X735f+n6/J+BOvN/RiLi7B6Uv/3nf+nDyk6yB8UBOY/ORbxcd/7v+hzfsb5K6s+l+QD9yeWr83MnKmsGj0X/YJauXeKb5l6Pf3zos0bl5+f/ZVtWfnUuYOUMDws1C3FnZ5Zm9uLaodc9uhvxz9L83yOVnI3zf7L2P6nT/mdxfbPJMg795/7FRse2j3+gVYpfRByt2/4/624nWz+fY7LUH5is9go2+9f7n3zdqHzxD52Ttf/DW8f/YJJ/Xs9is2cu9xYGIuLkcqHY6F077f8PJG/0Vc+feW9maenWVMRAcn5z/nSzdYbuVo2Harxk8X/s31uP/633/3NxeCAiVpos829PR35qdEz7D52Txf/s1u3/2Mb2//l3pu+PfdOo/ItNtf+nSm36sUqO8T/I2/w8jmYDtCPVBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAXXBoRf4oknVjfT9OJiYiRiPhrDKfzC4tL/7288M6N2exY6fv/0+o3/Y6W00mWnirtP0tP16RPRsTBiPi070ApPXFpYX620xcPAAAAAAAAAAAAAAAAAAAA+8RIac1/cbB2/X/m575O1w5ouULlVbxD7yls+44nxbLa/OJgq+oEtMf28Q90q+bjv7+l9QDar3H8P35Sv98PdAv9f+hdO4x/HxdAF9D+Q69qckxvqNX1ADpB+w8AAAAAAF3l4JEHPyQRsfLSgdKWGagcM9kfulva6QoAHWMOL/SuwkI+lXSuIkDbuccHnrX8v9Vd7N949r8+AwAAAAAAAAAAAAC0y9HD1v9Dr9p6/b+5/dDNtlj/Xy/4PS4Aukjjr/7Q9kO3c48PbNfaW/8PAAAAAAAAAAAAAPvA0O1rM/Pzc7cWl1+8nVf2RzWeb2dlZl9UY093nrbmzP0RsT8usN071UdwdLAaHf69BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArPsjAAD//ycOL2c=")

5.06649354s ago: executing program 34 (id=3134):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x180401b, &(0x7f0000000100)={[{@nombcache}, {}, {@norecovery}, {@abort}, {@nombcache}]}, 0x28, 0x60b, &(0x7f00000020c0)="$eJzs3ctvFEcaAPCv2+MH9u7aoNXusofF0moF0i42NrBCUaTAHSHyuOXkYIMIBiPsKDFBipHIJVKUSw6Rcsoh5L9IkHLNIdcccskpQkKR5UOIUJio52Ha4xl7sD0zZub3k5rpqh53VQOfq7qmqieAnjWe/ZFGHI6Im0nEaO5YYbVycLz8vrXVO5eyLYli8fVfkrjzQbKSP1dSeR0p/XDE76ORfJ9GHOrbXO7i8u1rM/Pzc7cq6cml6zcnF5dvH796febK3JW5G9P/nz5z+tTpM1MndnV9+aLP33v73dGPLrz55edPkqmvfryQxNl4WnlDdl21Pzu4q5Kzv7PxKJY9zucXIuLMLs+9X/w6Wr6evKQ2g33rcuX/418i4u8xGn25f83R+PDVjlYOaKliEtU2Cug5yY7if2jvKwK0WbUfUL23r3cfvFna4l4J0A6PzpUHANZWk1hb7Y+IavwXymODMRRZ7vBasmGcJ4mI3Y3MlWVlfPfthXvZFg3G4YDWWLlbHeWubf+TUmyOxVApNbyWboj/NLdl+a/tsPzxmrT4h/ZZuRsR/6j0/wfiueJ/PBf/b+2wfPEPAAAAAAAAe+fBuYj4X735f+n6/J+BOvN/RiLi7B6Uv/3nf+nDyk6yB8UBOY/ORbxcd/7v+hzfsb5K6s+l+QD9yeWr83MnKmsGj0X/YJauXeKb5l6Pf3zos0bl5+f/ZVtWfnUuYOUMDws1C3FnZ5Zm9uLaodc9uhvxz9L83yOVnI3zf7L2P6nT/mdxfbPJMg795/7FRse2j3+gVYpfRByt2/4/624nWz+fY7LUH5is9go2+9f7n3zdqHzxD52Ttf/DW8f/YJJ/Xs9is2cu9xYGIuLkcqHY6F077f8PJG/0Vc+feW9maenWVMRAcn5z/nSzdYbuVo2Harxk8X/s31uP/633/3NxeCAiVpos829PR35qdEz7D52Txf/s1u3/2Mb2//l3pu+PfdOo/ItNtf+nSm36sUqO8T/I2/w8jmYDtCPVBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAXXBoRf4oknVjfT9OJiYiRiPhrDKfzC4tL/7288M6N2exY6fv/0+o3/Y6W00mWnirtP0tP16RPRsTBiPi070ApPXFpYX620xcPAAAAAAAAAAAAAAAAAAAA+8RIac1/cbB2/X/m575O1w5ouULlVbxD7yls+44nxbLa/OJgq+oEtMf28Q90q+bjv7+l9QDar3H8P35Sv98PdAv9f+hdO4x/HxdAF9D+Q69qckxvqNX1ADpB+w8AAAAAAF3l4JEHPyQRsfLSgdKWGagcM9kfulva6QoAHWMOL/SuwkI+lXSuIkDbuccHnrX8v9Vd7N949r8+AwAAAAAAAAAAAAC0y9HD1v9Dr9p6/b+5/dDNtlj/Xy/4PS4Aukjjr/7Q9kO3c48PbNfaW/8PAAAAAAAAAAAAAPvA0O1rM/Pzc7cWl1+8nVf2RzWeb2dlZl9UY093nrbmzP0RsT8usN071UdwdLAaHf69BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArPsjAAD//ycOL2c=")

4.83194976s ago: executing program 2 (id=3138):
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c)
sendmmsg$inet6(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="200000000000000029000000370000000c00000000000000000100050200060024000000000000002900000032000000fc0100"/61, @ANYRES32], 0x48}}], 0x2, 0x4000000)

4.803584016s ago: executing program 2 (id=3139):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8002}]})
close_range(r0, 0xffffffffffffffff, 0x0)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x40081, 0x0)
clock_settime(0xfffffffb, &(0x7f0000000140))

4.766387334s ago: executing program 2 (id=3140):
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000000), 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r3, &(0x7f0000000000)='3', 0x4e)
bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a00000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setregid(0x0, 0xee00)
r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r5, 0xee01, 0x0)
keyctl$describe(0x6, r5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc)
getdents64(r3, &(0x7f0000000100)=""/250, 0xfa)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e20, @broadcast}}}, 0x88)
unshare(0x6020400)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000340)={'pcl818\x00', [0x100, 0x5, 0x13600, 0x6, 0x2, 0x10005, 0xfd, 0x3, 0x80008, 0x5, 0x2, 0x1, 0x7, 0x800, 0x8000006, 0xfd, 0x0, 0x80000000, 0x3, 0x7fffffff, 0xb740, 0xca9e, 0x9, 0x20001e58, 0x8, 0xf39e, 0x7, 0x1539b804, 0x9, 0x1, 0x2]})
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x0, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200000000622c, 0x0)

2.792614815s ago: executing program 2 (id=3145):
socket$inet_tcp(0x2, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ptrace$pokeuser(0x6, r0, 0x4, 0x400)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r3 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000200)={0x100, r4}, 0x0)

2.377374143s ago: executing program 6 (id=3149):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8002}]})
close_range(r0, 0xffffffffffffffff, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0)
clock_settime(0xfffffffb, 0x0)

2.263731847s ago: executing program 6 (id=3151):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./file0\x00', 0x1008413, &(0x7f0000000940)={[{@resgid}, {@barrier}, {@errors_remount}, {@noblock_validity}]}, 0x0, 0x526, &(0x7f0000001300)="$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")
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r0=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x8)
getdents64(0xffffffffffffffff, &(0x7f0000002d40)=""/224, 0xe0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
link(0x0, 0x0)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000002440)="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", 0x301, r1)
r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000780)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r2, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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")
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xf5, 0xfe, 0x7fff7ffc}]})
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
close_range(r3, 0xffffffffffffffff, 0x0)

1.846834626s ago: executing program 2 (id=3155):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
dup3(r1, r0, 0x80000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRES64=r1], &(0x7f0000000200)=""/159, 0x3c, 0x9f, 0x1}, 0x28)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r2, 0x400448d4, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10)
sendto$inet(r3, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0)
syz_open_dev$sndpcmp(0x0, 0x0, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r5, &(0x7f0000000280), 0x9)
r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000c40), 0x12)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_clone(0xa800, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, 0x0, 0x400c8c0)
r9 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12)

1.655970837s ago: executing program 3 (id=3157):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x20000000, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x5, &(0x7f0000000840)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xca}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x10}}, {@inlinecrypt}]}, 0x0, 0x59b, &(0x7f0000000bc0)="$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")
clock_gettime(0x0, 0x0)
ioprio_set$pid(0x2, r0, 0x2000)

1.413680748s ago: executing program 3 (id=3158):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00', @ANYBLOB="100029bd7000ffdbdf250e000000340041090800080006000000060002004e200000080007000800000005000d000100000008000600090000000800080009"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e64000000001800028014"], 0x48}}, 0x0)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
ioctl$MEMREAD(0xffffffffffffffff, 0xc0404d1a, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0x2, 0x4, 0x4bb}})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1.338148254s ago: executing program 3 (id=3159):
r0 = epoll_create1(0x0)
syz_clone3(&(0x7f0000000080)={0x901400, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x2001})
epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x700, 0x0, 0x0)

1.059310504s ago: executing program 6 (id=3160):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0)
landlock_restrict_self(r0, 0x0)
mknodat(r1, &(0x7f0000000000)='./file0\x00', 0x80, 0x8)

1.010916764s ago: executing program 3 (id=3161):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e000000340041090800080006000000060002004e200000080007000800000005000d000100"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280"], 0x48}}, 0x0)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0x5b95b610, 0x701c83)
ioctl$MEMREAD(r4, 0xc0404d1a, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0x2, 0x4, 0x4bb}})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

978.569971ms ago: executing program 2 (id=3162):
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sysfs$3(0x3)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000440)={[{@data_err_ignore}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@noquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x200004}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}, {@nodelalloc}]}, 0x1, 0x48d, &(0x7f0000000c80)="$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")

808.612327ms ago: executing program 6 (id=3163):
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd\x00')
getdents64(r0, 0x0, 0x0)

808.286638ms ago: executing program 3 (id=3164):
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000000), 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r3, &(0x7f0000000000)='3', 0x4e)
bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a00000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setregid(0x0, 0xee00)
r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r5, 0xee01, 0x0)
keyctl$describe(0x6, r5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc)
getdents64(r3, &(0x7f0000000100)=""/250, 0xfa)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e20, @broadcast}}}, 0x88)
unshare(0x6020400)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000340)={'pcl818\x00', [0x100, 0x5, 0x13600, 0x6, 0x2, 0x10005, 0xfd, 0x3, 0x80008, 0x5, 0x2, 0x1, 0x7, 0x800, 0x8000006, 0xfd, 0x0, 0x80000000, 0x3, 0x7fffffff, 0xb740, 0xca9e, 0x9, 0x20001e58, 0x8, 0xf39e, 0x7, 0x1539b804, 0x9, 0x1, 0x2]})
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x0, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200000000622c, 0x0)

447.956744ms ago: executing program 6 (id=3165):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ptrace$pokeuser(0x6, r0, 0x9, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0)
read(r1, 0x0, 0x0)
mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, 0xffffffffffffffff, 0x0)

34.748952ms ago: executing program 3 (id=3166):
socket$inet_tcp(0x2, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r3 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000200)={0x100, r4}, 0x0)

0s ago: executing program 6 (id=3167):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000440), 0x3, 0x1c1800)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ed)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
getpgid(0x0)
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='shortad,partition=00000000000000000005,noadinicb,uid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYBLOB=',volume=0000000000000006,\x00\x00\x00\x00\x00'], 0x1, 0x489, &(0x7f0000000580)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
fsync(r1)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
r5 = fanotify_init(0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000280)={r5})
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000480)={0x9, [0xe2, 0x77, 0x5], [{0x7, 0xb57, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x5, 0x0, 0x1, 0x1, 0x1}, {0x4, 0x5, 0x1, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x4, 0x2, 0x1, 0x1, 0x1, 0x1}, {0x73, 0x2}, {0x3d06, 0x10, 0x1, 0x1}, {0x3, 0xcd11, 0x1, 0x1}, {0x7, 0x7ff, 0x0, 0x0, 0x1}, {0xffff8001, 0xffff8000, 0x0, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1, 0x1}], 0xcc9})
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x2008800, &(0x7f0000000000)=ANY=[@ANYBLOB="cc0939bf731a4d725864582e9cc12556165edd546b6a600a72dc71cd0647f861f0ed8a58cddcd27e68df670fcb0db18dd027af549518866c8b71297736fd2550ec5d42201dab6565114794624f3dae565850da64351de67682996169fe1eb5fa64dfe510ffcf0e971807e14efdc9caa1ed3ffed9313b3818d62b320da169743a49996eaf884752988e"], 0x1, 0x5de, &(0x7f0000002a80)="$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")
fcntl$setsig(r0, 0xa, 0xe)

kernel console output (not intermixed with test programs):

es=1 errno=0
[  633.746085][T11436] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  633.813476][T11436] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  633.868077][T11436] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  633.945925][T11436] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  634.050551][T11684] loop1: detected capacity change from 0 to 512
[  634.159662][T11684] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  634.255521][T11694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2195'.
[  634.273242][T11684] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  634.335564][T11436] 8021q: adding VLAN 0 to HW filter on device bond0
[  634.391514][T11684] EXT4-fs (loop1): 1 truncate cleaned up
[  634.397207][T11684] EXT4-fs (loop1): mounted filesystem without journal. Opts: acl,errors=remount-ro,. Quota mode: none.
[  634.471489][T11592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  634.479515][T11592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  634.641357][T11436] 8021q: adding VLAN 0 to HW filter on device team0
[  634.672248][T11592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  634.683359][T11592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  634.692449][T11592] bridge0: port 1(bridge_slave_0) entered blocking state
[  634.699564][T11592] bridge0: port 1(bridge_slave_0) entered forwarding state
[  635.355529][   T25] audit: type=1800 audit(1790555803.384:31): pid=11684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2191" name="file1" dev="loop1" ino=15 res=0 errno=0
[  635.393493][T11592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  635.452093][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  635.488474][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  635.533236][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state
[  635.540374][ T4267] bridge0: port 2(bridge_slave_1) entered forwarding state
[  635.597362][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  635.629679][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  635.749791][T11436] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  635.772274][T11720] loop0: detected capacity change from 0 to 8192
[  635.818232][T11436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  635.852481][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  635.870327][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  635.889242][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  635.908975][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  635.943706][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  635.977857][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  635.986364][ T4176]  loop0: p1 p2 p4
[  635.990112][ T4176] loop0: partition table partially beyond EOD, truncated
[  635.998063][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  636.008176][ T4176] loop0: p1 start 51379968 is beyond EOD, truncated
[  636.015545][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  636.024760][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  636.032808][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  636.109293][ T4176] loop0: p4 start 33554440 is beyond EOD, truncated
[  636.744650][T11720]  loop0: p1 p2 p4
[  636.748446][T11720] loop0: partition table partially beyond EOD, truncated
[  636.790605][T11720] loop0: p1 start 51379968 is beyond EOD, truncated
[  636.811539][T11720] loop0: p4 start 33554440 is beyond EOD, truncated
[  636.991129][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  636.998694][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  637.044161][T11436] 8021q: adding VLAN 0 to HW filter on device batadv0
[  637.105357][T11768] loop0: detected capacity change from 0 to 512
[  637.273293][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  637.401765][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  637.402578][T11768] EXT4-fs (loop0): Test dummy encryption mode enabled
[  637.430984][T11768] EXT4-fs (loop0): Test dummy encryption mode enabled
[  637.457690][T11768] EXT4-fs (loop0): Unrecognized mount option "smackfstransmute=ext4" or missing value
[  637.749436][T11592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  637.811085][T11592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  637.892084][T11592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  637.920365][T11592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  637.966007][T11592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  638.027451][T11592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  638.047465][T11436] device veth0_vlan entered promiscuous mode
[  638.073540][T11436] device veth1_vlan entered promiscuous mode
[  638.178093][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  638.188077][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  638.227985][T11436] device veth0_macvtap entered promiscuous mode
[  638.253424][T11436] device veth1_macvtap entered promiscuous mode
[  638.286184][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  638.316686][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.357095][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  638.385031][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.406743][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  638.429509][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.470425][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  638.490389][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.506993][T11436] batman_adv: batadv0: Interface activated: batadv_slave_0
[  638.527911][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  638.545695][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  638.567365][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  638.585934][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  638.616184][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  638.648362][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.668038][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  638.695405][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.725616][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  638.761892][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.786272][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  638.810468][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.853531][T11436] batman_adv: batadv0: Interface activated: batadv_slave_1
[  638.877331][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  638.915280][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  638.955068][T11436] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  638.983905][T11436] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  639.007777][T11436] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  639.058054][T11436] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  639.469980][ T4265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  639.759509][ T4265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  639.884727][T11592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  640.009859][ T4333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  640.052096][ T4333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  640.064926][T11854] netlink: 'syz.1.2243': attribute type 1 has an invalid length.
[  640.100573][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  641.459457][T11907] xt_TCPMSS: Only works on TCP SYN packets
[  641.678766][T11918] befs: (nbd5): No write support. Marking filesystem read-only
[  641.687947][ T1092] block nbd5: Attempted send on invalid socket
[  641.695144][ T1092] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  641.706554][T11918] befs: (nbd5): unable to read superblock
[  642.705561][T11933] fuse: Bad value for 'fd'
[  642.713965][T11929] loop0: detected capacity change from 0 to 1024
[  642.805384][T11935] fuse: Bad value for 'fd'
[  643.474722][T11938] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2269'.
[  643.554515][T11943] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4200] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11943]
[  643.560483][T11938] device eql entered promiscuous mode
[  644.478104][T11955] loop0: detected capacity change from 0 to 512
[  644.638413][T11955] EXT4-fs (loop0): 1 truncate cleaned up
[  644.655120][T11955] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none.
[  648.069322][T12034] befs: (nbd0): No write support. Marking filesystem read-only
[  648.080553][ T1092] block nbd0: Attempted send on invalid socket
[  648.087044][ T1092] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  648.099036][T12034] befs: (nbd0): unable to read superblock
[  648.367432][T12048] netlink: 'syz.3.2295': attribute type 1 has an invalid length.
[  655.298695][T12176] loop0: detected capacity change from 0 to 1024
[  655.416010][T12176] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  655.792813][T12192] loop1: detected capacity change from 0 to 164
[  655.795570][T12193] loop0: detected capacity change from 0 to 128
[  657.350396][ T4227] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  658.480432][ T4227] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  658.950374][ T4227] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024
[  658.988409][ T4227] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  659.029090][ T4227] usb 1-1: config 0 interface 0 has no altsetting 0
[  659.060564][ T4227] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00
[  659.069639][ T4227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  659.137274][ T4227] usb 1-1: config 0 descriptor??
[  659.180492][T12220] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  659.210368][T12241] loop5: detected capacity change from 0 to 164
[  659.337201][T12241] Unsupported NM flag settings (240)
[  659.540696][T12258] ipt_CLUSTERIP: bad local_nodes[1] 8220
[  659.664493][ T4227] greenasia 0003:0E8F:0012.0003: unbalanced collection at end of report description
[  659.684526][ T4227] greenasia 0003:0E8F:0012.0003: parse failed
[  659.719108][ T4227] greenasia: probe of 0003:0E8F:0012.0003 failed with error -22
[  659.907790][    T7] usb 1-1: USB disconnect, device number 16
[  660.816662][T12323] fuse: Bad value for 'fd'
[  661.407171][T12329] loop5: detected capacity change from 0 to 164
[  661.761915][T12343] loop0: detected capacity change from 0 to 2048
[  661.906901][T12353] loop5: detected capacity change from 0 to 512
[  661.935887][T12343] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  661.978544][T12343] ext4 filesystem being mounted at /464/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  662.103880][T12353] EXT4-fs (loop5): 1 truncate cleaned up
[  662.144789][T12353] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none.
[  662.163375][T12362] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.2376: Invalid inode table block 1326710684 in block_group 0
[  663.167642][T12407] loop0: detected capacity change from 0 to 164
[  663.591526][ T4230] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  664.025498][ T4230] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  664.046871][ T4230] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024
[  664.076900][ T4230] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  664.116404][ T4230] usb 2-1: config 0 interface 0 has no altsetting 0
[  664.138274][ T4230] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00
[  664.173768][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  664.195793][ T4230] usb 2-1: config 0 descriptor??
[  664.221078][T12424] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  664.601229][T12476] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4200] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[12476]
[  664.698081][ T4230] greenasia 0003:0E8F:0012.0004: unbalanced collection at end of report description
[  664.718239][ T4230] greenasia 0003:0E8F:0012.0004: parse failed
[  664.738185][ T4230] greenasia: probe of 0003:0E8F:0012.0004 failed with error -22
[  664.955606][ T4230] usb 2-1: USB disconnect, device number 17
[  665.092731][T12502] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[12502]
[  665.613869][T12517] fuse: Bad value for 'fd'
[  665.810258][ T4228] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  666.170466][ T4228] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  666.186014][ T4228] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  666.212808][ T4228] usb 6-1: New USB device found, idVendor=0a5c, idProduct=21e1, bcdDevice= 1.00
[  666.231105][ T4228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  666.454846][T12567] FAULT_INJECTION: forcing a failure.
[  666.454846][T12567] name failslab, interval 1, probability 0, space 0, times 0
[  666.495583][T12567] CPU: 0 PID: 12567 Comm: syz.1.2446 Not tainted syzkaller #0
[  666.498222][ T4272] usb 6-1: USB disconnect, device number 2
[  666.503086][T12567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  666.503102][T12567] Call Trace:
[  666.503110][T12567]  <TASK>
[  666.503118][T12567]  dump_stack_lvl+0x188/0x250
[  666.503144][T12567]  ? show_regs_print_info+0x20/0x20
[  666.503161][T12567]  ? load_image+0x410/0x410
[  666.503181][T12567]  ? __lock_acquire+0x7b50/0x7b50
[  666.503209][T12567]  should_fail+0x383/0x4b0
[  666.503230][T12567]  should_failslab+0x5/0x20
[  666.503245][T12567]  slab_pre_alloc_hook+0x51/0xc0
[  666.503265][T12567]  __kmalloc+0x6b/0x340
[  666.562789][T12567]  ? kstrdup_quotable+0x1a1/0x560
[  666.567843][T12567]  kstrdup_quotable+0x1a1/0x560
[  666.572710][T12567]  ? string_escape_mem+0xb80/0xb80
[  666.577830][T12567]  ? mmput+0x5e/0x70
[  666.581732][T12567]  ? get_cmdline+0x258/0x290
[  666.586333][T12567]  kstrdup_quotable_cmdline+0x1a4/0x1f0
[  666.591976][T12567]  __report_access+0x72/0x300
[  666.596687][T12567]  ? lockdep_hardirqs_on+0x94/0x140
[  666.601902][T12567]  task_work_run+0x125/0x1a0
[  666.606509][T12567]  exit_to_user_mode_loop+0x10f/0x130
[  666.611901][T12567]  exit_to_user_mode_prepare+0xee/0x180
[  666.617449][T12567]  syscall_exit_to_user_mode+0x16/0x40
[  666.622913][T12567]  do_syscall_64+0x58/0xa0
[  666.627332][T12567]  ? clear_bhb_loop+0x30/0x80
[  666.632016][T12567]  ? clear_bhb_loop+0x30/0x80
[  666.636697][T12567]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  666.642599][T12567] RIP: 0033:0x7fc07bfd9159
[  666.647022][T12567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  666.666634][T12567] RSP: 002b:00007fc07a231028 EFLAGS: 00000246 ORIG_RAX: 0000000000000065
[  666.675061][T12567] RAX: ffffffffffffffff RBX: 00007fc07c260fa0 RCX: 00007fc07bfd9159
[  666.683047][T12567] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000010
[  666.691030][T12567] RBP: 00007fc07c07006b R08: 0000000000000000 R09: 0000000000000000
[  666.699019][T12567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  666.707002][T12567] R13: 00007fc07c261038 R14: 00007fc07c260fa0 R15: 00007ffde5f58ee8
[  666.715003][T12567]  </TASK>
[  666.750447][T12567] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4198] was attempted by "(null)"[12567]
[  668.133770][T12612] befs: (nbd1): No write support. Marking filesystem read-only
[  668.143154][  T150] block nbd1: Attempted send on invalid socket
[  668.149748][  T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  668.164101][T12612] befs: (nbd1): unable to read superblock
[  669.046557][T12623] loop1: detected capacity change from 0 to 512
[  669.110387][T12623] EXT4-fs (loop1): Test dummy encryption mode enabled
[  669.150370][T12623] EXT4-fs (loop1): Test dummy encryption mode enabled
[  669.157196][T12623] EXT4-fs (loop1): Unrecognized mount option "smackfstransmute=ext4" or missing value
[  669.699743][T12643] loop1: detected capacity change from 0 to 1024
[  670.389317][T12623] hfsplus: inconsistency in B*Tree (1,0,1,0,2)
[  670.396339][T12623] hfsplus: xattr search failed
[  670.402833][T12623] hfsplus: can't free extent
[  670.614864][T12651] FAULT_INJECTION: forcing a failure.
[  670.614864][T12651] name failslab, interval 1, probability 0, space 0, times 0
[  670.642595][T12651] CPU: 1 PID: 12651 Comm: syz.0.2468 Not tainted syzkaller #0
[  670.650101][T12651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  670.660167][T12651] Call Trace:
[  670.663467][T12651]  <TASK>
[  670.666405][T12651]  dump_stack_lvl+0x188/0x250
[  670.671112][T12651]  ? show_regs_print_info+0x20/0x20
[  670.676323][T12651]  ? load_image+0x410/0x410
[  670.680837][T12651]  ? __lock_acquire+0x7b50/0x7b50
[  670.685884][T12651]  should_fail+0x383/0x4b0
[  670.690333][T12651]  should_failslab+0x5/0x20
[  670.694850][T12651]  slab_pre_alloc_hook+0x51/0xc0
[  670.699881][T12651]  __kmalloc+0x6b/0x340
[  670.704041][T12651]  ? kstrdup_quotable+0x1a1/0x560
[  670.709081][T12651]  kstrdup_quotable+0x1a1/0x560
[  670.713955][T12651]  ? string_escape_mem+0xb80/0xb80
[  670.719083][T12651]  ? mmput+0x5e/0x70
[  670.722994][T12651]  ? get_cmdline+0x258/0x290
[  670.727606][T12651]  kstrdup_quotable_cmdline+0x1a4/0x1f0
[  670.733243][T12651]  __report_access+0x72/0x300
[  670.737931][T12651]  ? lockdep_hardirqs_on+0x94/0x140
[  670.743149][T12651]  task_work_run+0x125/0x1a0
[  670.747768][T12651]  exit_to_user_mode_loop+0x10f/0x130
[  670.753157][T12651]  exit_to_user_mode_prepare+0xee/0x180
[  670.758712][T12651]  syscall_exit_to_user_mode+0x16/0x40
[  670.764270][T12651]  do_syscall_64+0x58/0xa0
[  670.768788][T12651]  ? clear_bhb_loop+0x30/0x80
[  670.773477][T12651]  ? clear_bhb_loop+0x30/0x80
[  670.778182][T12651]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  670.784085][T12651] RIP: 0033:0x7f9ff7f19159
[  670.788519][T12651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  670.808140][T12651] RSP: 002b:00007f9ff6171028 EFLAGS: 00000246 ORIG_RAX: 0000000000000065
[  670.816571][T12651] RAX: ffffffffffffffff RBX: 00007f9ff81a0fa0 RCX: 00007f9ff7f19159
[  670.824649][T12651] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000010
[  670.832642][T12651] RBP: 00007f9ff7fb006b R08: 0000000000000000 R09: 0000000000000000
[  670.840630][T12651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  670.848610][T12651] R13: 00007f9ff81a1038 R14: 00007f9ff81a0fa0 R15: 00007ffc7144de28
[  670.856861][T12651]  </TASK>
[  670.960244][T12651] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4194] was attempted by "(null)"[12651]
[  671.138672][T12663] loop1: detected capacity change from 0 to 164
[  671.293274][T12663] Unsupported NM flag settings (240)
[  671.473653][T12672] befs: (nbd5): No write support. Marking filesystem read-only
[  671.482829][  T150] block nbd5: Attempted send on invalid socket
[  671.489347][  T150] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  671.501211][T12672] befs: (nbd5): unable to read superblock
[  672.447362][T12694] loop5: detected capacity change from 0 to 512
[  672.557801][T12694] EXT4-fs (loop5): Test dummy encryption mode enabled
[  672.596973][T12694] EXT4-fs (loop5): Test dummy encryption mode enabled
[  672.625703][T12694] EXT4-fs (loop5): Unrecognized mount option "smackfstransmute=ext4" or missing value
[  672.714185][T12706] fuse: Bad value for 'fd'
[  673.925807][T12718] loop5: detected capacity change from 0 to 1024
[  674.151751][T12694] hfsplus: inconsistency in B*Tree (1,0,1,0,2)
[  674.158004][T12694] hfsplus: xattr search failed
[  674.163027][T12694] hfsplus: can't free extent
[  674.613812][T12737] loop0: detected capacity change from 0 to 164
[  674.705571][T12737] Unsupported NM flag settings (240)
[  674.753310][T12737] Unsupported NM flag settings (240)
[  675.206888][T12772] fuse: Bad value for 'fd'
[  675.475514][T12774] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2499'.
[  675.786021][T12774] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2499'.
[  676.632700][T12801] loop1: detected capacity change from 0 to 512
[  676.734669][T12801] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  676.748112][T12801] ext4 filesystem being mounted at /479/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  677.059978][T12816] fuse: Bad value for 'fd'
[  677.922521][T12834] loop5: detected capacity change from 0 to 512
[  677.964773][T12834] EXT4-fs (loop5): Ignoring removed mblk_io_submit option
[  677.992142][T12834] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  678.050602][T12834] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802e028, mo2=0002]
[  678.064313][T12834] System zones: 1-12
[  678.077628][T12834] EXT4-fs (loop5): orphan cleanup on readonly fs
[  678.095568][T12834] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2515: bg 0: block 361: padding at end of block bitmap is not set
[  678.124652][T12834] EXT4-fs (loop5): Remounting filesystem read-only
[  678.131273][T12834] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  678.155756][T12834] EXT4-fs (loop5): Remounting filesystem read-only
[  678.162550][T12834] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #11: comm syz.5.2515: attempt to clear invalid blocks 33619980 len 1
[  678.190535][T12834] EXT4-fs (loop5): Remounting filesystem read-only
[  678.260520][T12834] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2515: invalid indirect mapped block 1811939328 (level 0)
[  678.325025][T12834] EXT4-fs (loop5): Remounting filesystem read-only
[  678.348832][T12834] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2515: invalid indirect mapped block 2 (level 2)
[  678.364333][T12834] EXT4-fs (loop5): Remounting filesystem read-only
[  678.435794][T12834] EXT4-fs (loop5): 1 truncate cleaned up
[  678.490374][T12849] fuse: Bad value for 'fd'
[  678.501307][T12834] EXT4-fs (loop5): mounted filesystem without journal. Opts: resuid=0x0000000000000000,sysvgroups,discard,errors=remount-ro,mblk_io_submit. Quota mode: none.
[  679.087393][T12834] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #2: block 5: comm syz.5.2515: lblock 0 mapped to illegal pblock 5 (length 1)
[  679.130438][T12834] EXT4-fs warning (device loop5): dx_probe:823: inode #2: lblock 0: comm syz.5.2515: error -117 reading directory block
[  679.181272][T12834] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #2: block 5: comm syz.5.2515: lblock 0 mapped to illegal pblock 5 (length 1)
[  679.226694][T12834] EXT4-fs warning (device loop5): dx_probe:823: inode #2: lblock 0: comm syz.5.2515: error -117 reading directory block
[  680.144364][T12890] fuse: Bad value for 'fd'
[  680.837433][T12894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2541'.
[  681.323175][T12923] loop1: detected capacity change from 0 to 164
[  681.433573][T12925] fuse: Bad value for 'fd'
[  683.254320][T12963] loop1: detected capacity change from 0 to 1024
[  683.365827][T12963] hfsplus: xattr searching failed
[  683.384947][   T25] audit: type=1800 audit(1790555851.424:32): pid=12963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2566" name="file1" dev="loop1" ino=3 res=0 errno=0
[  683.444686][ T1270] hfsplus: b-tree write err: -5, ino 3
[  684.686359][T12982] befs: (nbd5): No write support. Marking filesystem read-only
[  684.978134][  T150] block nbd5: Attempted send on invalid socket
[  684.984603][  T150] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  684.998599][T12981] loop0: detected capacity change from 0 to 512
[  685.030103][T12982] befs: (nbd5): unable to read superblock
[  685.073590][T12981] EXT4-fs (loop0): Ignoring removed nobh option
[  685.114890][T12981] EXT4-fs (loop0): Ignoring removed bh option
[  685.208697][T12981] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #3: comm syz.0.2574: corrupted inode contents
[  685.251340][T12981] EXT4-fs error (device loop0): ext4_dirty_inode:6087: inode #3: comm syz.0.2574: mark_inode_dirty error
[  685.277629][T12981] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #3: comm syz.0.2574: corrupted inode contents
[  685.344011][T12981] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.2574: mark_inode_dirty error
[  685.593192][T12981] Quota error (device loop0): write_blk: dquota write failed
[  685.612615][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  685.619119][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  685.642104][T12981] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  685.717768][T12981] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.2574: Failed to acquire dquot type 0
[  685.848027][T12981] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #16: comm syz.0.2574: corrupted inode contents
[  685.950816][T12981] EXT4-fs error (device loop0): ext4_dirty_inode:6087: inode #16: comm syz.0.2574: mark_inode_dirty error
[  686.033609][T12981] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #16: comm syz.0.2574: corrupted inode contents
[  686.101861][T12981] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.2574: mark_inode_dirty error
[  686.180473][T12981] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #16: comm syz.0.2574: corrupted inode contents
[  686.264459][T13018] loop5: detected capacity change from 0 to 512
[  686.283148][T12981] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  686.318651][T13018] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled
[  686.330483][T12981] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #16: comm syz.0.2574: corrupted inode contents
[  686.407688][T12981] EXT4-fs error (device loop0): ext4_truncate:4286: inode #16: comm syz.0.2574: mark_inode_dirty error
[  686.420447][T12981] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  686.442537][T13018] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2585: bg 0: block 393: padding at end of block bitmap is not set
[  686.464019][T13018] EXT4-fs (loop5): Remounting filesystem read-only
[  686.472056][T13018] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  686.480499][T12981] EXT4-fs (loop0): 1 truncate cleaned up
[  686.529977][T12981] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,nobh,sb=0x7fffffffffffffff,discard,bh,,errors=continue. Quota mode: writeback.
[  686.549654][T13018] EXT4-fs (loop5): Remounting filesystem read-only
[  686.573114][T13018] EXT4-fs (loop5): 2 truncates cleaned up
[  686.578882][T13018] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv0,errors=remount-ro,noquota,. Quota mode: writeback.
[  687.592752][T13029] befs: (nbd1): No write support. Marking filesystem read-only
[  687.786966][ T1092] block nbd1: Attempted send on invalid socket
[  687.793293][ T1092] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  687.804434][T13029] befs: (nbd1): unable to read superblock
[  687.847530][T12981] ext4 filesystem being mounted at /493/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  689.087253][T13050] loop5: detected capacity change from 0 to 256
[  690.513175][T13068] fuse: Bad value for 'fd'
[  691.418405][T13079] befs: (nbd0): No write support. Marking filesystem read-only
[  691.427589][ T1092] block nbd0: Attempted send on invalid socket
[  691.434327][ T1092] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  691.445727][T13079] befs: (nbd0): unable to read superblock
[  692.216324][T13089] loop1: detected capacity change from 0 to 2048
[  693.219130][T13115] fuse: Bad value for 'fd'
[  693.832667][T13089]  loop1: unable to read partition table
[  693.857478][T13089] loop1: partition table beyond EOD, truncated
[  693.911151][T13089] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
[  694.362534][ T3559]  loop1: unable to read partition table
[  694.394104][ T3559] loop1: partition table beyond EOD, truncated
[  694.934153][T13147] loop0: detected capacity change from 0 to 128
[  695.044879][T13147] EXT4-fs (loop0): Test dummy encryption mode enabled
[  695.121210][T13147] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  695.604238][T13147] ext4 filesystem being mounted at /503/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  696.415805][T13171] fuse: Bad value for 'fd'
[  697.169019][T13196] loop1: detected capacity change from 0 to 1024
[  698.547520][T13225] befs: (nbd5): No write support. Marking filesystem read-only
[  698.558841][  T150] block nbd5: Attempted send on invalid socket
[  698.565334][  T150] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  698.580010][T13225] befs: (nbd5): unable to read superblock
[  699.993785][T13224] chnl_net:caif_netlink_parms(): no params data found
[  700.218836][T13242] loop1: detected capacity change from 0 to 256
[  700.723215][ T1286] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  700.767075][ T1286] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  700.810102][ T2299] Bluetooth: hci5: command 0x0409 tx timeout
[  700.920306][ T1286] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  700.931718][ T1286] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  700.950873][T13224] bridge0: port 1(bridge_slave_0) entered blocking state
[  700.959458][T13224] bridge0: port 1(bridge_slave_0) entered disabled state
[  700.974864][T13224] device bridge_slave_0 entered promiscuous mode
[  700.995546][T13224] bridge0: port 2(bridge_slave_1) entered blocking state
[  701.028713][T13224] bridge0: port 2(bridge_slave_1) entered disabled state
[  701.040623][T13268] befs: (nbd0): No write support. Marking filesystem read-only
[  701.050587][  T150] block nbd0: Attempted send on invalid socket
[  701.057058][  T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  701.069193][T13268] befs: (nbd0): unable to read superblock
[  701.148371][T13224] device bridge_slave_1 entered promiscuous mode
[  701.290237][ T7721] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  701.342958][ T1286] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  701.418236][ T1286] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  701.570067][ T7721] usb 2-1: Using ep0 maxpacket: 32
[  701.710092][ T7721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  701.757260][ T7721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  701.808214][ T7721] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  701.850186][ T7721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.895293][ T7721] usb 2-1: config 0 descriptor??
[  701.952008][ T7721] hub 2-1:0.0: USB hub found
[  701.981861][ T1286] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  702.010122][ T1286] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  702.092175][T13274] loop5: detected capacity change from 0 to 1024
[  702.110205][T13224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  702.124924][T13224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  702.174971][ T7721] hub 2-1:0.0: 1 port detected
[  702.204293][T13224] team0: Port device team_slave_0 added
[  702.254801][T13224] team0: Port device team_slave_1 added
[  702.311168][T13224] batman_adv: batadv0: Adding interface: batadv_slave_0
[  702.318311][T13224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  702.347164][T13224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  702.503487][T13224] batman_adv: batadv0: Adding interface: batadv_slave_1
[  702.561032][T13224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  702.733680][T13224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  702.830160][ T4230] hub 2-1:0.0: activate --> -90
[  702.910169][ T4272] Bluetooth: hci5: command 0x041b tx timeout
[  703.294755][ T4227] usb 2-1: USB disconnect, device number 18
[  703.604214][T13224] device hsr_slave_0 entered promiscuous mode
[  703.641470][T13224] device hsr_slave_1 entered promiscuous mode
[  703.682449][T13224] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  703.725559][T13224] Cannot create hsr debugfs directory
[  704.124739][T13316] befs: (nbd1): No write support. Marking filesystem read-only
[  704.133727][ T1092] block nbd1: Attempted send on invalid socket
[  704.140572][ T1092] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  704.152115][T13316] befs: (nbd1): unable to read superblock
[  704.970430][ T4272] Bluetooth: hci5: command 0x040f tx timeout
[  706.415671][T13224] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  706.459025][ T1286] device hsr_slave_0 left promiscuous mode
[  706.477499][ T1286] device hsr_slave_1 left promiscuous mode
[  706.504568][ T1286] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  706.526387][ T1286] batman_adv: batadv0: Removing interface: batadv_slave_0
[  706.553687][ T1286] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  706.577931][ T1286] batman_adv: batadv0: Removing interface: batadv_slave_1
[  706.601323][ T1286] device bridge_slave_1 left promiscuous mode
[  706.626489][ T1286] bridge0: port 2(bridge_slave_1) entered disabled state
[  706.650658][ T1286] device bridge_slave_0 left promiscuous mode
[  706.671303][ T1286] bridge0: port 1(bridge_slave_0) entered disabled state
[  706.726977][ T1286] device veth1_macvtap left promiscuous mode
[  706.743888][ T1286] device veth0_macvtap left promiscuous mode
[  706.764648][ T1286] device veth1_vlan left promiscuous mode
[  706.800013][ T1286] device veth0_vlan left promiscuous mode
[  707.050193][ T4229] Bluetooth: hci5: command 0x0419 tx timeout
[  707.168135][ T1286] bond0 (unregistering): (slave vxlan0): Releasing backup interface
[  707.547475][ T1286] team0 (unregistering): Port device team_slave_1 removed
[  707.611192][ T1286] team0 (unregistering): Port device team_slave_0 removed
[  707.630286][ T1286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  707.656123][ T1286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  708.519592][ T1286] bond0 (unregistering): Released all slaves
[  709.187309][T13224] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  709.316048][T13224] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  709.357100][T13224] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  709.638788][T13395] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  710.232518][T13224] 8021q: adding VLAN 0 to HW filter on device bond0
[  710.293909][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  710.320655][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  710.343687][T13224] 8021q: adding VLAN 0 to HW filter on device team0
[  710.393769][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  710.430606][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  710.490507][ T4426] bridge0: port 1(bridge_slave_0) entered blocking state
[  710.497675][ T4426] bridge0: port 1(bridge_slave_0) entered forwarding state
[  710.580733][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  710.617435][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  710.739421][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  710.892136][ T4426] bridge0: port 2(bridge_slave_1) entered blocking state
[  710.899292][ T4426] bridge0: port 2(bridge_slave_1) entered forwarding state
[  711.200140][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  711.385262][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  711.412201][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  711.492287][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  711.580786][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  711.667713][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  711.738672][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  711.779081][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  711.826170][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  711.864960][T13224] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  711.891572][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  711.916297][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  711.994178][T13442] befs: (nbd1): No write support. Marking filesystem read-only
[  712.003408][ T1092] block nbd1: Attempted send on invalid socket
[  712.009774][ T1092] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  712.021023][T13442] befs: (nbd1): unable to read superblock
[  712.974692][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  713.000275][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  713.012647][T13458] loop1: detected capacity change from 0 to 164
[  713.037554][T13224] 8021q: adding VLAN 0 to HW filter on device batadv0
[  713.081964][T13458] Unsupported NM flag settings (240)
[  713.167906][T13224] device veth0_vlan entered promiscuous mode
[  713.197543][T13224] device veth1_vlan entered promiscuous mode
[  713.246362][  T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  713.265595][  T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  713.645709][  T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  713.939517][  T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  714.010946][  T445] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  714.055384][  T445] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  714.161772][  T445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  714.197986][  T445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  714.250818][  T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  714.269353][  T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  714.300494][T13224] device veth0_macvtap entered promiscuous mode
[  714.320388][T13224] device veth1_macvtap entered promiscuous mode
[  714.427166][T13224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  714.483751][T13224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  714.520114][T13224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  714.572384][T13224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  714.599964][T13224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  714.617460][T13224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  714.640053][T13224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  714.663035][T13224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  714.697342][T13224] batman_adv: batadv0: Interface activated: batadv_slave_0
[  714.726184][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  714.766396][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  714.796799][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  714.827723][T13224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  714.854371][T13224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  714.883946][T13224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  714.911099][T13224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  714.944474][T13224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  714.988670][T13224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  715.025890][T13224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  715.049152][T13224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  715.080095][ T4272] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  715.098664][T13224] batman_adv: batadv0: Interface activated: batadv_slave_1
[  715.142173][T13224] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  715.180028][T13224] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  715.209392][T13224] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  715.239773][T13224] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  715.267949][  T445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  715.300715][  T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  715.340180][ T4272] usb 6-1: Using ep0 maxpacket: 32
[  715.460251][ T4272] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  715.471925][ T4426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  715.492838][ T4272] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  715.523671][ T4426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  715.546222][  T445] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  715.564033][T12773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  715.596834][T12773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  715.618886][  T445] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  715.650183][ T4272] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  715.687192][ T4272] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  715.720001][ T4272] usb 6-1: Product: syz
[  715.878553][ T4272] usb 6-1: Manufacturer: syz
[  716.005190][T13519] fuse: Bad value for 'fd'
[  716.049011][ T4272] hub 6-1:4.0: USB hub found
[  716.330828][ T4272] hub 6-1:4.0: 2 ports detected
[  717.068297][T13532] loop0: detected capacity change from 0 to 2048
[  717.220406][ T4272] usb 6-1: USB disconnect, device number 3
[  717.347546][T13532]  loop0: unable to read partition table
[  717.376874][T13532] loop0: partition table beyond EOD, truncated
[  717.416639][T13532] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
[  717.630274][ T3559]  loop0: unable to read partition table
[  717.653607][ T3559] loop0: partition table beyond EOD, truncated
[  718.187386][T13535] chnl_net:caif_netlink_parms(): no params data found
[  718.255519][ T1286] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  718.380261][T13549] kernel profiling enabled (shift: 23)
[  718.418054][ T1286] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  718.872702][T13555] loop5: detected capacity change from 0 to 164
[  718.885077][ T1286] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  718.980349][T13555] Unsupported NM flag settings (240)
[  719.026933][T13535] bridge0: port 1(bridge_slave_0) entered blocking state
[  719.125249][T13535] bridge0: port 1(bridge_slave_0) entered disabled state
[  719.164839][T13559] befs: (nbd5): No write support. Marking filesystem read-only
[  719.173844][ T1092] block nbd5: Attempted send on invalid socket
[  719.180521][ T1092] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  719.191907][T13559] befs: (nbd5): unable to read superblock
[  719.298345][T13535] device bridge_slave_0 entered promiscuous mode
[  719.614719][ T1286] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  719.770120][ T4272] Bluetooth: hci4: command 0x0409 tx timeout
[  719.917090][T13535] bridge0: port 2(bridge_slave_1) entered blocking state
[  719.949400][T13535] bridge0: port 2(bridge_slave_1) entered disabled state
[  719.980819][T13535] device bridge_slave_1 entered promiscuous mode
[  720.146170][T13535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  720.221254][T13535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  720.268727][T13574] loop5: detected capacity change from 0 to 2048
[  720.560407][T13582] binder_alloc: binder_alloc_mmap_handler: 13575 200000ffe000-200001000000 already mapped failed -16
[  720.772323][T13535] team0: Port device team_slave_0 added
[  721.077174][T13535] team0: Port device team_slave_1 added
[  721.322312][T13535] batman_adv: batadv0: Adding interface: batadv_slave_0
[  721.335285][T13535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  721.357799][T13574]  loop5: unable to read partition table
[  721.379087][T13574] loop5: partition table beyond EOD, truncated
[  721.401748][T13535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  721.408101][T13574] loop_reread_partitions: partition scan of loop5 () failed (rc=-5)
[  721.429780][T13590] loop1: detected capacity change from 0 to 164
[  721.443049][T13535] batman_adv: batadv0: Adding interface: batadv_slave_1
[  721.475259][T13535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  721.542105][T13590] Unsupported NM flag settings (240)
[  721.576269][T13535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  721.637645][ T3559]  loop5: unable to read partition table
[  721.657617][ T3559] loop5: partition table beyond EOD, truncated
[  721.717936][T13535] device hsr_slave_0 entered promiscuous mode
[  721.749389][T13535] device hsr_slave_1 entered promiscuous mode
[  721.766692][T13535] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  721.786896][T13535] Cannot create hsr debugfs directory
[  721.849961][ T4229] Bluetooth: hci4: command 0x041b tx timeout
[  722.594771][ T4232] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  722.700989][ T1286] device hsr_slave_0 left promiscuous mode
[  722.720126][ T1286] device hsr_slave_1 left promiscuous mode
[  722.748023][ T1286] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  722.803544][ T1286] batman_adv: batadv0: Removing interface: batadv_slave_0
[  722.811713][ T1286] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  722.819148][ T1286] batman_adv: batadv0: Removing interface: batadv_slave_1
[  722.887581][T13622] befs: (nbd3): No write support. Marking filesystem read-only
[  722.897383][  T150] block nbd3: Attempted send on invalid socket
[  722.904432][  T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  722.916035][T13622] befs: (nbd3): unable to read superblock
[  723.000231][ T4232] usb 1-1: Dual-Role OTG device on HNP port
[  723.030075][ T4232] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 5.15
[  723.052972][ T1286] device bridge_slave_1 left promiscuous mode
[  723.118263][ T1286] bridge0: port 2(bridge_slave_1) entered disabled state
[  723.128495][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  723.413643][ T4232] gspca_main: spca501-2.14.0 probing 0000:0000
[  723.507642][ T1286] device bridge_slave_0 left promiscuous mode
[  723.526819][ T1286] bridge0: port 1(bridge_slave_0) entered disabled state
[  723.536806][ T4232] gspca_spca501: reg write: error -32
[  723.586977][ T4232] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05
[  723.669607][ T4232] spca501: probe of 1-1:1.0 failed with error -22
[  723.693425][ T1286] device veth1_macvtap left promiscuous mode
[  723.699488][ T1286] device veth0_macvtap left promiscuous mode
[  723.705654][ T1286] device veth1_vlan left promiscuous mode
[  723.711822][ T1286] device veth0_vlan left promiscuous mode
[  723.929902][ T9877] Bluetooth: hci4: command 0x040f tx timeout
[  724.135901][ T1286] team0 (unregistering): Port device team_slave_1 removed
[  724.187726][ T1286] team0 (unregistering): Port device team_slave_0 removed
[  724.217665][ T1286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  724.279041][ T1286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  724.390880][T13632] loop1: detected capacity change from 0 to 512
[  724.486566][T13632] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  724.557689][T13632] EXT4-fs (loop1): 1 truncate cleaned up
[  724.569646][T13632] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nodelalloc,quota,quota,,errors=continue. Quota mode: writeback.
[  724.631835][ T1286] bond0 (unregistering): Released all slaves
[  725.004829][T13650] binder_alloc: binder_alloc_mmap_handler: 13641 200000ffe000-200001000000 already mapped failed -16
[  725.274565][T13535] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  725.647480][T13653] loop1: detected capacity change from 0 to 164
[  725.668979][T13535] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  725.704966][T13535] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  725.758867][T13652] Unsupported NM flag settings (240)
[  725.946558][T13535] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  726.043400][T13668] befs: (nbd3): No write support. Marking filesystem read-only
[  726.546634][ T9877] Bluetooth: hci4: command 0x0419 tx timeout
[  726.842645][  T150] block nbd3: Attempted send on invalid socket
[  726.848828][  T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  726.861866][T13668] befs: (nbd3): unable to read superblock
[  727.196737][T13677] fuse: Bad value for 'fd'
[  727.904511][T13535] 8021q: adding VLAN 0 to HW filter on device bond0
[  727.983037][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  728.002923][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  728.098342][T13535] 8021q: adding VLAN 0 to HW filter on device team0
[  728.252148][  T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  728.404692][  T445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  728.693566][  T445] bridge0: port 1(bridge_slave_0) entered blocking state
[  728.700734][  T445] bridge0: port 1(bridge_slave_0) entered forwarding state
[  728.787078][  T445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  728.830308][  T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  728.880856][  T445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  728.890906][  T445] bridge0: port 2(bridge_slave_1) entered blocking state
[  728.898013][  T445] bridge0: port 2(bridge_slave_1) entered forwarding state
[  728.918583][  T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  728.959069][  T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  729.023614][  T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  729.090043][  T445] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  729.098672][  T445] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  729.153873][  T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  729.193309][  T445] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  729.273768][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  729.328225][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  729.534297][T13535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  729.635103][T13711] binder_alloc: binder_alloc_mmap_handler: 13706 200000ffe000-200001000000 already mapped failed -16
[  729.885004][T13535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  730.091692][  T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  730.177453][  T445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  730.666943][T13731] loop5: detected capacity change from 0 to 164
[  730.737070][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  730.753833][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  730.765328][T13731] Unsupported NM flag settings (240)
[  730.803737][T13535] 8021q: adding VLAN 0 to HW filter on device batadv0
[  730.909520][T11592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  730.937910][T11592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  731.003457][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  731.030576][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  731.074543][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  731.140777][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  731.153051][T13535] device veth0_vlan entered promiscuous mode
[  731.317559][T13535] device veth1_vlan entered promiscuous mode
[  731.399446][T13535] device veth0_macvtap entered promiscuous mode
[  731.487504][T13743] fuse: Bad value for 'fd'
[  731.513921][T13535] device veth1_macvtap entered promiscuous mode
[  731.685584][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  731.768773][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  731.957318][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  732.110742][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  732.168558][T13535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  732.252069][T13535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  732.297616][T13535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  732.329218][T13535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  732.368632][T13535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  732.415910][T13535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  732.459317][T13535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  732.508799][T13535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  732.558651][T13535] batman_adv: batadv0: Interface activated: batadv_slave_0
[  732.583323][T13535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  732.604098][T13535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  732.624967][T13535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  732.660129][T13535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  732.695221][T13767] loop1: detected capacity change from 0 to 512
[  732.701921][T13535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  732.719826][T13535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  732.761945][T13535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  732.779822][T13535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  732.801518][T13767] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  732.814094][T13535] batman_adv: batadv0: Interface activated: batadv_slave_1
[  732.825862][T13767] ext4 filesystem being mounted at /542/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  732.853422][T13535] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  732.952143][T13535] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  732.996802][T13535] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  733.020045][T13535] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  733.041692][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  733.065570][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  733.092662][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  733.111499][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  733.315919][ T4427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  733.344215][ T4427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  733.377905][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  733.428317][ T4427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  733.450257][T13783] loop0: detected capacity change from 0 to 164
[  733.458283][ T4427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  733.485447][T11592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  733.795672][T13790] /dev/loop0: Can't open blockdev
[  734.011257][T13795] fuse: Bad value for 'fd'
[  735.188501][T13819] loop0: detected capacity change from 0 to 512
[  735.283448][T13819] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  735.300306][T13819] ext4 filesystem being mounted at /533/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  736.206357][T13832] loop3: detected capacity change from 0 to 164
[  736.785361][T13847] fuse: Bad value for 'fd'
[  737.587597][T13849] loop0: detected capacity change from 0 to 2048
[  737.756297][T13858] loop3: detected capacity change from 0 to 512
[  737.843716][ T4176]  loop0: unable to read partition table
[  737.851942][ T4176] loop0: partition table beyond EOD, truncated
[  737.892898][T13858] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  737.953917][T13858] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  738.298703][T13849]  loop0: unable to read partition table
[  738.330248][T13849] loop0: partition table beyond EOD, truncated
[  738.345229][T13849] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
[  738.554548][ T3559]  loop0: unable to read partition table
[  738.586875][ T3559] loop0: partition table beyond EOD, truncated
[  738.851958][T13886] loop0: detected capacity change from 0 to 1024
[  738.951082][T13888] befs: (nbd5): No write support. Marking filesystem read-only
[  738.960228][  T150] block nbd5: Attempted send on invalid socket
[  738.966497][  T150] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  738.977943][T13888] befs: (nbd5): unable to read superblock
[  739.063235][T13886] hfsplus: invalid length 32517 has been corrected to 255
[  739.790369][ T4263] hfsplus: b-tree write err: -5, ino 20
[  739.933755][T13902] loop3: detected capacity change from 0 to 256
[  739.938905][T13900] loop0: detected capacity change from 0 to 1024
[  739.982323][T13900] EXT4-fs (loop0): Ignoring removed bh option
[  740.072702][T13902] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[  740.109061][T13908] loop5: detected capacity change from 0 to 512
[  740.221755][T13900] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback.
[  740.456859][T13915] fuse: Bad value for 'fd'
[  741.417639][   T25] audit: type=1800 audit(1790555909.445:33): pid=13916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2822" name="file1" dev="loop3" ino=1048636 res=0 errno=0
[  741.559686][T13908] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  741.629707][T13908] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  741.767899][T13933] loop3: detected capacity change from 0 to 2048
[  741.974658][T13947] loop1: detected capacity change from 0 to 1024
[  742.083725][T13947] hfsplus: invalid length 32517 has been corrected to 255
[  742.125004][ T4178]  loop3: unable to read partition table
[  742.175621][ T4178] loop3: partition table beyond EOD, truncated
[  742.323751][T13952] befs: (nbd5): No write support. Marking filesystem read-only
[  743.181342][ T1092] block nbd5: Attempted send on invalid socket
[  743.187539][ T1092] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  743.199941][T13952] befs: (nbd5): unable to read superblock
[  743.300514][T13947] hfsplus: b-tree write err: -5, ino 20
[  743.421629][T13933]  loop3: unable to read partition table
[  743.444281][T13933] loop3: partition table beyond EOD, truncated
[  743.460045][T13933] loop_reread_partitions: partition scan of loop3 () failed (rc=-5)
[  743.677387][T12773] hfsplus: b-tree write err: -5, ino 20
[  743.788828][T13971] fuse: Bad value for 'fd'
[  744.372020][ T4228] Bluetooth: hci0: command 0x0406 tx timeout
[  744.617818][ T3559]  loop3: unable to read partition table
[  744.823654][ T3559] loop3: partition table beyond EOD, truncated
[  745.817178][T14002] loop5: detected capacity change from 0 to 1024
[  745.936960][T14002] hfsplus: invalid length 32517 has been corrected to 255
[  746.040065][T14007] binder: 14006:14007 ioctl c018620c 200000000600 returned -1
[  746.078536][T14002] hfsplus: b-tree write err: -5, ino 20
[  746.146920][ T1286] hfsplus: b-tree write err: -5, ino 20
[  746.185059][ T7729] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  746.372691][T14016] fuse: Bad value for 'fd'
[  747.061411][T14015] loop5: detected capacity change from 0 to 2048
[  747.068144][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  747.075580][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  747.142948][ T7729] usb 2-1: Using ep0 maxpacket: 32
[  747.539913][ T4230] Bluetooth: hci0: command 0x0c24 tx timeout
[  747.619352][ T4176]  loop5: unable to read partition table
[  747.630036][ T7729] usb 2-1: config 0 interface 0 altsetting 14 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  747.642824][ T4176] loop5: partition table beyond EOD, truncated
[  747.647760][ T7729] usb 2-1: config 0 interface 0 has no altsetting 0
[  747.687317][ T7729] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  747.713824][ T7729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  747.747982][ T7729] usb 2-1: config 0 descriptor??
[  747.768173][T14015]  loop5: unable to read partition table
[  747.776537][T14015] loop5: partition table beyond EOD, truncated
[  747.807441][T14015] loop_reread_partitions: partition scan of loop5 () failed (rc=-5)
[  747.838072][T14045] loop0: detected capacity change from 0 to 1024
[  747.976431][ T1286] hfsplus: b-tree write err: -5, ino 25
[  747.988649][ T1286] hfsplus: b-tree write err: -5, ino 4
[  748.015963][ T1286] hfsplus: b-tree write err: -5, ino 2
[  748.041921][ T1286] hfsplus: b-tree write err: -5, ino 26
[  748.083114][ T3559]  loop5: unable to read partition table
[  748.089483][ T3559] loop5: partition table beyond EOD, truncated
[  748.296957][T14052] befs: (nbd5): No write support. Marking filesystem read-only
[  748.306011][  T150] block nbd5: Attempted send on invalid socket
[  748.312502][  T150] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  748.324503][T14052] befs: (nbd5): unable to read superblock
[  748.461734][ T7729] logitech 0003:046D:C20E.0005: rdesc size test failed for formula gp
[  749.075208][ T7729] logitech 0003:046D:C20E.0005: hidraw0: USB HID v0.03 Device [HID 046d:c20e] on usb-dummy_hcd.1-1/input0
[  749.162026][T14059] fuse: Bad value for 'fd'
[  749.188181][ T7729] usb 2-1: USB disconnect, device number 19
[  749.762713][T14070] EXT4-fs error (device sda1): ext4_lookup:1860: inode #1109: comm fido_id: iget: checksum invalid
[  749.934633][T14084] loop0: detected capacity change from 0 to 2048
[  750.112216][T14091] loop3: detected capacity change from 0 to 1024
[  750.334438][T14091] EXT4-fs (loop3): Ignoring removed bh option
[  750.369303][T14091] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  750.470132][T14102] fuse: Bad value for 'fd'
[  751.129033][ T4178]  loop0: unable to read partition table
[  751.166833][ T4178] loop0: partition table beyond EOD, truncated
[  751.222988][T14109] befs: (nbd2): No write support. Marking filesystem read-only
[  751.232087][ T1092] block nbd2: Attempted send on invalid socket
[  751.238378][ T1092] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  751.250425][T14109] befs: (nbd2): unable to read superblock
[  751.784132][T14112] loop1: detected capacity change from 0 to 1024
[  751.975771][ T4176] EXT4-fs error (device sda1): ext4_lookup:1860: inode #1257: comm udevd: iget: checksum invalid
[  752.022813][T14121] EXT4-fs error (device sda1): ext4_lookup:1860: inode #1257: comm udevd: iget: checksum invalid
[  752.037427][T14121] udevd[14121]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Bad message
[  752.178710][T14084]  loop0: unable to read partition table
[  752.205004][T14084] loop0: partition table beyond EOD, truncated
[  752.239386][T14084] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
[  752.519065][ T3559]  loop0: unable to read partition table
[  752.548820][ T3559] loop0: partition table beyond EOD, truncated
[  752.897616][T14153] fuse: Bad value for 'fd'
[  753.876832][T14161] loop0: detected capacity change from 0 to 1024
[  754.021132][T14161] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,barrier=0x0000000000001ab8,norecovery,debug_want_extra_isize=0x0000000000000080,user_xattr,nogrpid,noauto_da_alloc,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: none.
[  754.292118][T14179] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2899'.
[  754.640201][ T4176] EXT4-fs error (device sda1): ext4_lookup:1860: inode #1257: comm udevd: iget: checksum invalid
[  754.751022][T14191] EXT4-fs error (device sda1): ext4_lookup:1860: inode #1257: comm udevd: iget: checksum invalid
[  754.907330][T14197] fuse: Bad value for 'fd'
[  755.045171][T14196] FAULT_INJECTION: forcing a failure.
[  755.045171][T14196] name failslab, interval 1, probability 0, space 0, times 0
[  755.093683][T14191] udevd[14191]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Bad message
[  755.312776][T14196] CPU: 0 PID: 14196 Comm: syz.1.2911 Not tainted syzkaller #0
[  755.320315][T14196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  755.330452][T14196] Call Trace:
[  755.333739][T14196]  <TASK>
[  755.336672][T14196]  dump_stack_lvl+0x188/0x250
[  755.341390][T14196]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  755.347110][T14196]  ? show_regs_print_info+0x20/0x20
[  755.352317][T14196]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  755.357964][T14196]  should_fail+0x383/0x4b0
[  755.362483][T14196]  should_failslab+0x5/0x20
[  755.367037][T14196]  slab_pre_alloc_hook+0x51/0xc0
[  755.372019][T14196]  __kmalloc+0x6b/0x340
[  755.376183][T14196]  ? fib6_info_alloc+0x2e/0xe0
[  755.381019][T14196]  fib6_info_alloc+0x2e/0xe0
[  755.385615][T14196]  ip6_route_info_create+0x455/0x1220
[  755.391084][T14196]  addrconf_f6i_alloc+0x1ec/0x430
[  755.396137][T14196]  ? ip6_route_del+0x14f0/0x14f0
[  755.401222][T14196]  ipv6_add_addr+0x45f/0xe10
[  755.405840][T14196]  ? ipv6_count_addresses+0x170/0x170
[  755.411237][T14196]  inet6_addr_add+0x437/0x9b0
[  755.415939][T14196]  addrconf_add_ifaddr+0x156/0x1b0
[  755.421048][T14196]  ? finish_lock_switch+0x12d/0x290
[  755.426379][T14196]  ? addrconf_set_dstaddr+0x320/0x320
[  755.431757][T14196]  ? finish_task_switch+0x12f/0x650
[  755.437019][T14196]  inet6_ioctl+0x16b/0x280
[  755.441485][T14196]  ? inet6_getname+0x670/0x670
[  755.446235][T14196]  ? tomoyo_path_number_perm+0x5f7/0x6b0
[  755.451911][T14196]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  755.457364][T14196]  sock_do_ioctl+0xfb/0x320
[  755.461918][T14196]  ? sock_show_fdinfo+0xb0/0xb0
[  755.466755][T14196]  ? preempt_schedule_irq+0xe6/0x160
[  755.472034][T14196]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  755.478065][T14196]  ? lock_chain_count+0x20/0x20
[  755.482903][T14196]  sock_ioctl+0x48a/0x700
[  755.487221][T14196]  ? sock_poll+0x420/0x420
[  755.491622][T14196]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  755.497247][T14196]  ? sock_poll+0x420/0x420
[  755.501656][T14196]  ? sock_poll+0x420/0x420
[  755.506061][T14196]  __se_sys_ioctl+0xfa/0x170
[  755.510662][T14196]  do_syscall_64+0x4c/0xa0
[  755.515081][T14196]  ? clear_bhb_loop+0x30/0x80
[  755.519743][T14196]  ? clear_bhb_loop+0x30/0x80
[  755.524406][T14196]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  755.530299][T14196] RIP: 0033:0x7fc07bfd9159
[  755.534706][T14196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  755.554295][T14196] RSP: 002b:00007fc07a231028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  755.562699][T14196] RAX: ffffffffffffffda RBX: 00007fc07c260fa0 RCX: 00007fc07bfd9159
[  755.570742][T14196] RDX: 0000200000000040 RSI: 0000000000008916 RDI: 0000000000000005
[  755.578698][T14196] RBP: 00007fc07c07006b R08: 0000000000000000 R09: 0000000000000000
[  755.586657][T14196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  755.594613][T14196] R13: 00007fc07c261038 R14: 00007fc07c260fa0 R15: 00007ffde5f58ee8
[  755.602588][T14196]  </TASK>
[  755.744177][T14199] loop0: detected capacity change from 0 to 512
[  755.863987][T14199] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  756.032887][T14199] FAT-fs (loop0): Directory bread(block 1056) failed
[  756.039643][T14199] FAT-fs (loop0): Directory bread(block 1057) failed
[  756.079845][T14199] FAT-fs (loop0): Directory bread(block 1058) failed
[  756.086610][T14199] FAT-fs (loop0): Directory bread(block 1059) failed
[  756.220954][T14199] FAT-fs (loop0): Directory bread(block 1060) failed
[  756.298508][T14199] FAT-fs (loop0): Directory bread(block 1061) failed
[  756.458215][T14199] FAT-fs (loop0): Directory bread(block 1062) failed
[  756.582614][T14199] FAT-fs (loop0): Directory bread(block 1063) failed
[  756.715695][T14199] FAT-fs (loop0): Directory bread(block 1064) failed
[  756.799858][T14199] FAT-fs (loop0): Directory bread(block 1065) failed
[  756.825228][T14216] netlink: 'syz.2.2917': attribute type 32 has an invalid length.
[  756.987219][T14220] udc-core: couldn't find an available UDC or it's busy
[  757.004692][T14220] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  757.009239][ T4176] EXT4-fs error (device sda1): ext4_lookup:1860: inode #1257: comm udevd: iget: checksum invalid
[  757.086127][T14225] EXT4-fs error (device sda1): ext4_lookup:1860: inode #1257: comm udevd: iget: checksum invalid
[  757.101571][T14224] loop3: detected capacity change from 0 to 2048
[  757.128041][T14225] udevd[14225]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Bad message
[  757.279427][ T7729] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  757.335615][T14233] loop2: detected capacity change from 0 to 2048
[  757.421481][T14234] fuse: Bad value for 'fd'
[  757.540597][ T4178]  loop3: unable to read partition table
[  757.559810][ T7729] usb 2-1: Using ep0 maxpacket: 32
[  757.575831][ T4178] loop3: partition table beyond EOD, truncated
[  757.690475][ T7729] usb 2-1: config index 0 descriptor too short (expected 539, got 27)
[  757.718728][ T7729] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  758.052703][T14224]  loop3: unable to read partition table
[  758.065609][T14224] loop3: partition table beyond EOD, truncated
[  758.072887][T14224] loop_reread_partitions: partition scan of loop3 () failed (rc=-5)
[  758.083459][T14233] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  758.100036][ T7729] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  758.119318][ T7729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  758.130431][ T7729] usb 2-1: Product: syz
[  758.134637][ T7729] usb 2-1: Manufacturer: syz
[  758.139316][ T7729] usb 2-1: SerialNumber: syz
[  758.149150][T14233] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  758.155704][ T7729] usb 2-1: config 0 descriptor??
[  758.273092][ T3559]  loop3: unable to read partition table
[  758.289226][ T3559] loop3: partition table beyond EOD, truncated
[  758.341821][ T7729] hub 2-1:0.0: bad descriptor, ignoring hub
[  758.347765][ T7729] hub: probe of 2-1:0.0 failed with error -5
[  758.353910][   T25] audit: type=1800 audit(1790555926.375:34): pid=14233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2925" name="file1" dev="loop2" ino=1346 res=0 errno=0
[  758.377833][ T7729] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11
[  758.391787][ T7729] usbtouchscreen 2-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22
[  761.257596][ T7729] usbtouchscreen: probe of 2-1:0.0 failed with error -22
[  761.299960][ T7729] usb 2-1: USB disconnect, device number 20
[  761.470836][T14261] loop3: detected capacity change from 0 to 8192
[  761.777275][T14272] fuse: Bad value for 'fd'
[  761.811249][T14273] befs: (nbd1): No write support. Marking filesystem read-only
[  762.484061][T14261]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  762.512448][T14261] loop3: partition table partially beyond EOD, truncated
[  762.573689][T14261] loop3: p1 start 100663296 is beyond EOD, truncated
[  762.661100][  T150] block nbd1: Attempted send on invalid socket
[  762.667288][  T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  762.678933][T14273] befs: (nbd1): unable to read superblock
[  762.697599][ T4229] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  762.820098][T14261] loop3: p2 size 3141337092 extends beyond EOD, truncated
[  762.857011][T14261] loop3: p4 start 65535 is beyond EOD, truncated
[  762.917873][T14280] fuse: Bad value for 'fd'
[  763.280721][ T2299] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  763.381009][T14261] loop3: p5 size 3141337092 extends beyond EOD, truncated
[  763.440640][ T4229] usb 4-1: config 0 has no interfaces?
[  763.590232][ T2299] usb 6-1: Using ep0 maxpacket: 32
[  763.600575][ T4229] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  763.619952][T14261] loop3: p6 start 65535 is beyond EOD, truncated
[  763.622952][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  763.637485][ T4229] usb 4-1: Manufacturer: syz
[  763.642371][ T4229] usb 4-1: SerialNumber: syz
[  763.668577][ T4229] usb 4-1: config 0 descriptor??
[  763.709939][ T2299] usb 6-1: config 0 interface 0 altsetting 14 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  763.723014][ T2299] usb 6-1: config 0 interface 0 has no altsetting 0
[  763.729734][ T2299] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  763.739025][ T2299] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  763.761831][ T2299] usb 6-1: config 0 descriptor??
[  763.934311][ T7729] usb 4-1: USB disconnect, device number 15
[  764.177986][T14292] FAULT_INJECTION: forcing a failure.
[  764.177986][T14292] name failslab, interval 1, probability 0, space 0, times 0
[  764.240195][T14292] CPU: 0 PID: 14292 Comm: syz.2.2941 Not tainted syzkaller #0
[  764.247705][T14292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  764.257854][T14292] Call Trace:
[  764.261151][T14292]  <TASK>
[  764.264080][T14292]  dump_stack_lvl+0x188/0x250
[  764.268775][T14292]  ? show_regs_print_info+0x20/0x20
[  764.273974][T14292]  ? load_image+0x410/0x410
[  764.278480][T14292]  ? __might_sleep+0xf0/0xf0
[  764.283069][T14292]  ? __lock_acquire+0x7b50/0x7b50
[  764.288145][T14292]  ? rcu_lock_release+0x9/0x20
[  764.292916][T14292]  should_fail+0x383/0x4b0
[  764.297358][T14292]  should_failslab+0x5/0x20
[  764.301868][T14292]  slab_pre_alloc_hook+0x51/0xc0
[  764.306810][T14292]  __kmalloc+0x6b/0x340
[  764.311051][T14292]  ? fib6_info_alloc+0x2e/0xe0
[  764.315829][T14292]  fib6_info_alloc+0x2e/0xe0
[  764.320424][T14292]  ip6_route_info_create+0x455/0x1220
[  764.325811][T14292]  addrconf_f6i_alloc+0x1ec/0x430
[  764.330847][T14292]  ? ip6_route_del+0x14f0/0x14f0
[  764.335814][T14292]  ipv6_add_addr+0x45f/0xe10
[  764.340405][T14292]  ? ipv6_count_addresses+0x170/0x170
[  764.345919][T14292]  ? mutex_lock_io_nested+0x60/0x60
[  764.351139][T14292]  inet6_addr_add+0x437/0x9b0
[  764.355849][T14292]  addrconf_add_ifaddr+0x156/0x1b0
[  764.360990][T14292]  ? addrconf_set_dstaddr+0x320/0x320
[  764.366376][T14292]  ? __lock_acquire+0x7b50/0x7b50
[  764.371414][T14292]  inet6_ioctl+0x16b/0x280
[  764.375843][T14292]  ? inet6_getname+0x670/0x670
[  764.380606][T14292]  ? tomoyo_path_number_perm+0x5f7/0x6b0
[  764.386247][T14292]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  764.391724][T14292]  sock_do_ioctl+0xfb/0x320
[  764.396245][T14292]  ? sock_show_fdinfo+0xb0/0xb0
[  764.401114][T14292]  sock_ioctl+0x48a/0x700
[  764.405450][T14292]  ? sock_poll+0x420/0x420
[  764.409877][T14292]  ? bpf_lsm_file_ioctl+0x5/0x10
[  764.414923][T14292]  ? security_file_ioctl+0x7c/0xa0
[  764.420088][T14292]  ? sock_poll+0x420/0x420
[  764.424512][T14292]  __se_sys_ioctl+0xfa/0x170
[  764.429108][T14292]  do_syscall_64+0x4c/0xa0
[  764.433610][T14292]  ? clear_bhb_loop+0x30/0x80
[  764.438295][T14292]  ? clear_bhb_loop+0x30/0x80
[  764.442974][T14292]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  764.448870][T14292] RIP: 0033:0x7ff1a0bad159
[  764.453293][T14292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  764.455376][ T2299] logitech 0003:046D:C20E.0006: rdesc size test failed for formula gp
[  764.472900][T14292] RSP: 002b:00007ff19ee05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  764.472930][T14292] RAX: ffffffffffffffda RBX: 00007ff1a0e34fa0 RCX: 00007ff1a0bad159
[  764.472941][T14292] RDX: 0000200000000040 RSI: 0000000000008916 RDI: 0000000000000005
[  764.472951][T14292] RBP: 00007ff1a0c4406b R08: 0000000000000000 R09: 0000000000000000
[  764.472961][T14292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  764.472971][T14292] R13: 00007ff1a0e35038 R14: 00007ff1a0e34fa0 R15: 00007fff54c9ffb8
[  764.472996][T14292]  </TASK>
[  764.621447][ T2299] logitech 0003:046D:C20E.0006: hidraw0: USB HID v0.03 Device [HID 046d:c20e] on usb-dummy_hcd.5-1/input0
[  764.636307][ T2299] usb 6-1: USB disconnect, device number 4
[  764.782617][T14299] EXT4-fs error (device sda1): ext4_lookup:1860: inode #1109: comm fido_id: iget: checksum invalid
[  765.203058][T14315] fuse: Bad value for 'fd'
[  765.816625][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  765.855647][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[  765.869115][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  765.975817][T14325] befs: (nbd0): No write support. Marking filesystem read-only
[  765.984781][ T1092] block nbd0: Attempted send on invalid socket
[  765.991695][ T1092] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  766.002997][T14325] befs: (nbd0): unable to read superblock
[  766.612572][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  766.628813][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  766.641609][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[  766.760963][T14331] FAULT_INJECTION: forcing a failure.
[  766.760963][T14331] name failslab, interval 1, probability 0, space 0, times 0
[  766.850903][T14331] CPU: 1 PID: 14331 Comm: syz.3.2958 Not tainted syzkaller #0
[  766.858417][T14331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  766.868490][T14331] Call Trace:
[  766.871779][T14331]  <TASK>
[  766.874718][T14331]  dump_stack_lvl+0x188/0x250
[  766.879414][T14331]  ? show_regs_print_info+0x20/0x20
[  766.884636][T14331]  ? load_image+0x410/0x410
[  766.889158][T14331]  ? __might_sleep+0xf0/0xf0
[  766.893762][T14331]  ? __lock_acquire+0x7b50/0x7b50
[  766.898795][T14331]  ? __up_read+0x2b4/0x6b0
[  766.903224][T14331]  should_fail+0x383/0x4b0
[  766.907654][T14331]  should_failslab+0x5/0x20
[  766.912200][T14331]  slab_pre_alloc_hook+0x51/0xc0
[  766.917152][T14331]  kmem_cache_alloc_trace+0x47/0x290
[  766.922442][T14331]  ? ipv6_add_addr+0x42b/0xe10
[  766.927199][T14331]  ipv6_add_addr+0x42b/0xe10
[  766.931777][T14331]  ? ipv6_count_addresses+0x170/0x170
[  766.937137][T14331]  ? mutex_lock_io_nested+0x60/0x60
[  766.942320][T14331]  inet6_addr_add+0x437/0x9b0
[  766.946990][T14331]  addrconf_add_ifaddr+0x156/0x1b0
[  766.952081][T14331]  ? addrconf_set_dstaddr+0x320/0x320
[  766.957437][T14331]  ? __lock_acquire+0x7b50/0x7b50
[  766.962446][T14331]  inet6_ioctl+0x16b/0x280
[  766.966872][T14331]  ? inet6_getname+0x670/0x670
[  766.971616][T14331]  ? tomoyo_path_number_perm+0x5f7/0x6b0
[  766.977247][T14331]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  766.982713][T14331]  sock_do_ioctl+0xfb/0x320
[  766.987219][T14331]  ? sock_show_fdinfo+0xb0/0xb0
[  766.992060][T14331]  sock_ioctl+0x48a/0x700
[  766.996375][T14331]  ? sock_poll+0x420/0x420
[  767.000782][T14331]  ? bpf_lsm_file_ioctl+0x5/0x10
[  767.005808][T14331]  ? security_file_ioctl+0x7c/0xa0
[  767.010967][T14331]  ? sock_poll+0x420/0x420
[  767.015389][T14331]  __se_sys_ioctl+0xfa/0x170
[  767.019987][T14331]  do_syscall_64+0x4c/0xa0
[  767.024386][T14331]  ? clear_bhb_loop+0x30/0x80
[  767.029042][T14331]  ? clear_bhb_loop+0x30/0x80
[  767.033697][T14331]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  767.039579][T14331] RIP: 0033:0x7fc0ff0e3159
[  767.043982][T14331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  767.063577][T14331] RSP: 002b:00007fc0fd33b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  767.071979][T14331] RAX: ffffffffffffffda RBX: 00007fc0ff36afa0 RCX: 00007fc0ff0e3159
[  767.079944][T14331] RDX: 0000200000000040 RSI: 0000000000008916 RDI: 0000000000000005
[  767.087930][T14331] RBP: 00007fc0ff17a06b R08: 0000000000000000 R09: 0000000000000000
[  767.095898][T14331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  767.103886][T14331] R13: 00007fc0ff36b038 R14: 00007fc0ff36afa0 R15: 00007ffe7f764a98
[  767.111863][T14331]  </TASK>
[  767.577629][T14350] loop0: detected capacity change from 0 to 1024
[  767.733036][T14350] EXT4-fs (loop0): Ignoring removed bh option
[  767.930543][T14350] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback.
[  768.030979][T14365] fuse: Bad value for 'fd'
[  769.094247][T14373] loop0: detected capacity change from 0 to 1024
[  769.246360][T14381] loop5: detected capacity change from 0 to 1024
[  770.091143][T14389] FAULT_INJECTION: forcing a failure.
[  770.091143][T14389] name failslab, interval 1, probability 0, space 0, times 0
[  770.135100][T14389] CPU: 0 PID: 14389 Comm: syz.0.2974 Not tainted syzkaller #0
[  770.142614][T14389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  770.152683][T14389] Call Trace:
[  770.155977][T14389]  <TASK>
[  770.158930][T14389]  dump_stack_lvl+0x188/0x250
[  770.163626][T14389]  ? show_regs_print_info+0x20/0x20
[  770.168836][T14389]  ? load_image+0x410/0x410
[  770.173450][T14389]  ? __might_sleep+0xf0/0xf0
[  770.178056][T14389]  ? __lock_acquire+0x7b50/0x7b50
[  770.183284][T14389]  ? __up_read+0x2b4/0x6b0
[  770.187723][T14389]  should_fail+0x383/0x4b0
[  770.192160][T14389]  should_failslab+0x5/0x20
[  770.196682][T14389]  slab_pre_alloc_hook+0x51/0xc0
[  770.201636][T14389]  kmem_cache_alloc_trace+0x47/0x290
[  770.206932][T14389]  ? ipv6_add_addr+0x42b/0xe10
[  770.211719][T14389]  ipv6_add_addr+0x42b/0xe10
[  770.216383][T14389]  ? ipv6_count_addresses+0x170/0x170
[  770.221861][T14389]  ? mutex_lock_io_nested+0x60/0x60
[  770.227083][T14389]  inet6_addr_add+0x437/0x9b0
[  770.231792][T14389]  addrconf_add_ifaddr+0x156/0x1b0
[  770.236926][T14389]  ? addrconf_set_dstaddr+0x320/0x320
[  770.242339][T14389]  ? __lock_acquire+0x7b50/0x7b50
[  770.247397][T14389]  inet6_ioctl+0x16b/0x280
[  770.251834][T14389]  ? inet6_getname+0x670/0x670
[  770.256609][T14389]  ? tomoyo_path_number_perm+0x5f7/0x6b0
[  770.262260][T14389]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  770.267742][T14389]  sock_do_ioctl+0xfb/0x320
[  770.272260][T14389]  ? sock_show_fdinfo+0xb0/0xb0
[  770.277139][T14389]  sock_ioctl+0x48a/0x700
[  770.281483][T14389]  ? sock_poll+0x420/0x420
[  770.285918][T14389]  ? bpf_lsm_file_ioctl+0x5/0x10
[  770.290861][T14389]  ? security_file_ioctl+0x7c/0xa0
[  770.296067][T14389]  ? sock_poll+0x420/0x420
[  770.300490][T14389]  __se_sys_ioctl+0xfa/0x170
[  770.305092][T14389]  do_syscall_64+0x4c/0xa0
[  770.309518][T14389]  ? clear_bhb_loop+0x30/0x80
[  770.314205][T14389]  ? clear_bhb_loop+0x30/0x80
[  770.318918][T14389]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  770.324817][T14389] RIP: 0033:0x7f9ff7f19159
[  770.329240][T14389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  770.348854][T14389] RSP: 002b:00007f9ff6171028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  770.357307][T14389] RAX: ffffffffffffffda RBX: 00007f9ff81a0fa0 RCX: 00007f9ff7f19159
[  770.365293][T14389] RDX: 0000200000000040 RSI: 0000000000008916 RDI: 0000000000000005
[  770.373278][T14389] RBP: 00007f9ff7fb006b R08: 0000000000000000 R09: 0000000000000000
[  770.381265][T14389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  770.389245][T14389] R13: 00007f9ff81a1038 R14: 00007f9ff81a0fa0 R15: 00007ffc7144de28
[  770.397239][T14389]  </TASK>
[  770.678710][T14402] loop5: detected capacity change from 0 to 1024
[  770.745921][T14402] EXT4-fs (loop5): Ignoring removed bh option
[  770.836724][T14402] EXT4-fs (loop5): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback.
[  771.561943][T14413] fuse: Bad value for 'fd'
[  772.455275][T14429] loop0: detected capacity change from 0 to 128
[  773.893707][T14450] loop3: detected capacity change from 0 to 2048
[  774.223386][T14461] fuse: Bad value for 'fd'
[  774.893651][T14429] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  774.958563][T14464] syz.5.2998 (14464) used obsolete PPPIOCDETACH ioctl
[  775.028606][ T4263] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  775.131441][T14450]  loop3: unable to read partition table
[  775.145706][T14450] loop3: partition table beyond EOD, truncated
[  775.174533][T14450] loop_reread_partitions: partition scan of loop3 () failed (rc=-5)
[  775.354876][ T3559]  loop3: unable to read partition table
[  775.387297][ T3559] loop3: partition table beyond EOD, truncated
[  775.395004][T14482] loop0: detected capacity change from 0 to 2048
[  775.839763][T14482] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  776.376954][T14496] loop0: detected capacity change from 0 to 1024
[  776.721258][T14500] fuse: Bad value for 'fd'
[  777.726483][T14511] befs: (nbd5): No write support. Marking filesystem read-only
[  777.736252][  T150] block nbd5: Attempted send on invalid socket
[  777.743881][  T150] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  777.757302][T14511] befs: (nbd5): unable to read superblock
[  778.666757][T14522] loop1: detected capacity change from 0 to 1024
[  778.827190][T14522] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[  778.887473][T14522] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  779.645235][T14522] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[  779.663823][T14522] System zones: 0-1, 3-36
[  779.718842][T14522] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,acl,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  779.753179][T14534] loop0: detected capacity change from 0 to 128
[  779.856837][T14522] Invalid ELF header magic: != ELF
[  779.900681][   T25] audit: type=1800 audit(1790555947.895:35): pid=14522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3012" name="bus" dev="loop1" ino=18 res=0 errno=0
[  779.940085][T14534] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  780.024477][T14544] fuse: Bad value for 'fd'
[  781.523144][T14556] loop2: detected capacity change from 0 to 1024
[  781.542243][T14560] loop3: detected capacity change from 0 to 8
[  781.736883][T14560] SQUASHFS error: Failed to read block 0x26067d: -5
[  781.763586][ T4194] UDF-fs: error (device loop0): udf_read_inode: (ino 114) failed !bh
[  781.773103][ T4194] UDF-fs: error (device loop0): udf_read_inode: (ino 114) failed !bh
[  781.795109][T14560] SQUASHFS error: Unable to read metadata cache entry [26067d]
[  781.838393][T14560] SQUASHFS error: Unable to read directory block [26067d:1fff]
[  782.034479][T14575] loop1: detected capacity change from 0 to 1024
[  782.664735][T14599] loop1: detected capacity change from 0 to 8
[  782.740040][T14599] SQUASHFS error: Failed to read block 0x26067d: -5
[  782.777183][T14599] SQUASHFS error: Unable to read metadata cache entry [26067d]
[  782.822578][T14599] SQUASHFS error: Unable to read directory block [26067d:1fff]
[  783.286345][T14602] chnl_net:caif_netlink_parms(): no params data found
[  783.355149][T14602] bridge0: port 1(bridge_slave_0) entered blocking state
[  783.363169][T14602] bridge0: port 1(bridge_slave_0) entered disabled state
[  783.371622][T14602] device bridge_slave_0 entered promiscuous mode
[  783.387480][T14602] bridge0: port 2(bridge_slave_1) entered blocking state
[  783.395821][T14602] bridge0: port 2(bridge_slave_1) entered disabled state
[  783.410519][T14602] device bridge_slave_1 entered promiscuous mode
[  783.441078][T14602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  783.453055][T14602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  783.480858][T14602] team0: Port device team_slave_0 added
[  783.490541][T14602] team0: Port device team_slave_1 added
[  783.499674][ T4232] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  783.519225][T14602] batman_adv: batadv0: Adding interface: batadv_slave_0
[  783.526445][T14602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  783.553644][T14602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  783.566578][T14602] batman_adv: batadv0: Adding interface: batadv_slave_1
[  783.573955][T14602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  783.602192][T14618] loop5: detected capacity change from 0 to 128
[  783.614791][T14620] loop3: detected capacity change from 0 to 1024
[  783.618616][T14602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  783.655270][T14618] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  783.728408][T14602] device hsr_slave_0 entered promiscuous mode
[  783.741873][T14618] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  783.759800][T14618] ext2 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  783.771966][T14602] device hsr_slave_1 entered promiscuous mode
[  783.778632][T14602] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  783.825998][T14602] Cannot create hsr debugfs directory
[  783.919822][ T4232] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  783.944387][ T4232] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  783.955158][ T4232] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  783.968399][ T4232] usb 2-1: New USB device found, idVendor=056a, idProduct=00d8, bcdDevice= 0.00
[  783.978490][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  783.994511][ T4232] usb 2-1: config 0 descriptor??
[  784.083610][T14602] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  784.125289][T14602] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  784.144870][T14602] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  784.174499][T14602] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  784.235388][T14602] bridge0: port 2(bridge_slave_1) entered blocking state
[  784.242573][T14602] bridge0: port 2(bridge_slave_1) entered forwarding state
[  784.250027][T14602] bridge0: port 1(bridge_slave_0) entered blocking state
[  784.257188][T14602] bridge0: port 1(bridge_slave_0) entered forwarding state
[  784.320855][T11593] bridge0: port 1(bridge_slave_0) entered disabled state
[  784.329486][T11593] bridge0: port 2(bridge_slave_1) entered disabled state
[  784.424221][T14602] 8021q: adding VLAN 0 to HW filter on device bond0
[  784.456960][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  784.475144][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  784.503257][ T4232] wacom 0003:056A:00D8.0007: Unknown device_type for 'HID 056a:00d8'. Assuming pen.
[  784.523739][ T4232] wacom 0003:056A:00D8.0007: hidraw0: USB HID v0.00 Joystick [HID 056a:00d8] on usb-dummy_hcd.1-1/input0
[  784.525692][T14602] 8021q: adding VLAN 0 to HW filter on device team0
[  784.539299][T14641] loop5: detected capacity change from 0 to 1024
[  784.563998][ T4232] input: Wacom Bamboo Comic 2FG Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00D8.0007/input/input12
[  784.602881][T14641] EXT4-fs (loop5): Ignoring removed bh option
[  784.609721][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  784.628759][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  784.649251][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state
[  784.656409][ T4265] bridge0: port 1(bridge_slave_0) entered forwarding state
[  784.676832][T14641] EXT4-fs (loop5): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback.
[  784.729870][ T4232] usb 2-1: USB disconnect, device number 21
[  784.741303][T11593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  784.819823][ T7729] Bluetooth: hci1: command 0x0409 tx timeout
[  784.868360][T11593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  784.915087][T14645] EXT4-fs error (device sda1): ext4_lookup:1860: inode #1109: comm fido_id: iget: checksum invalid
[  784.933338][T11593] bridge0: port 2(bridge_slave_1) entered blocking state
[  784.940492][T11593] bridge0: port 2(bridge_slave_1) entered forwarding state
[  784.955160][T11593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  785.460123][T14602] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  785.541145][T14602] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  785.619958][T11593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  785.628825][T11593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  785.700572][T14653] loop5: detected capacity change from 0 to 8
[  785.739780][T11593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  785.776638][T11593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  785.808743][T11593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  785.822549][T14653] SQUASHFS error: Failed to read block 0x26067d: -5
[  785.840773][T14653] SQUASHFS error: Unable to read metadata cache entry [26067d]
[  785.845479][T11593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  785.873879][T14653] SQUASHFS error: Unable to read directory block [26067d:1fff]
[  785.877047][T11593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  785.907610][T11593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  785.928592][T11593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  785.948800][T11593] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  785.960391][T11593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  786.227989][T14676] loop2: detected capacity change from 0 to 1024
[  786.273928][T14676] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[  786.304321][T14680] loop1: detected capacity change from 0 to 1024
[  786.310070][T14676] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  786.339946][T14676] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[  786.348182][T12773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  786.356209][T12773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  786.363653][T14676] System zones: 0-1, 3-36
[  786.373515][T14602] 8021q: adding VLAN 0 to HW filter on device batadv0
[  786.389805][ T4230] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  786.392736][T14680] EXT4-fs (loop1): Ignoring removed bh option
[  786.429958][T14676] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,acl,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  786.513286][T14680] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback.
[  786.560763][   T25] audit: type=1800 audit(1790555954.605:36): pid=14676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3060" name="bus" dev="loop2" ino=18 res=0 errno=0
[  786.588399][T14676] Invalid ELF header magic: != ELF
[  787.352034][ T4280] Bluetooth: hci1: command 0x041b tx timeout
[  787.371400][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  787.391438][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  787.439807][ T4230] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  787.463715][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  787.467314][ T4230] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  787.480405][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  787.504326][ T4230] usb 6-1: config 0 descriptor??
[  787.521588][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  787.545506][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  787.566189][T14602] device veth0_vlan entered promiscuous mode
[  787.586473][T14602] device veth1_vlan entered promiscuous mode
[  787.657034][T14602] device veth0_macvtap entered promiscuous mode
[  787.684404][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  787.704821][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  787.788939][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  787.828712][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  787.901238][T14602] device veth1_macvtap entered promiscuous mode
[  787.917195][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  787.999037][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  788.364479][T14602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  788.509942][T14602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  788.581026][T14602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  788.615909][T14602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  788.627067][T14602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  788.637640][T14602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  788.651232][T14602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  788.662209][T14602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  788.672313][T14602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  788.682778][T14602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  788.694872][T14602] batman_adv: batadv0: Interface activated: batadv_slave_0
[  788.704886][  T445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  788.735632][  T445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  788.756317][T14602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  788.776860][T14602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  788.789898][T14602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  788.800699][T14602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  788.810950][T14602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  788.833539][T14602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  788.861510][T14602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  788.886568][T14602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  788.915100][T14602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  788.944091][T14731] loop1: detected capacity change from 0 to 512
[  788.951640][T14602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  788.986491][T14602] batman_adv: batadv0: Interface activated: batadv_slave_1
[  789.005927][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  789.037498][T14731] EXT4-fs (loop1): Ignoring removed oldalloc option
[  789.057798][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  789.081197][T14602] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  789.102608][T14602] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  789.112376][ T4230] usb 6-1: Cannot set autoneg
[  789.117233][ T4230] MOSCHIP usb-ethernet driver: probe of 6-1:0.0 failed with error -71
[  789.134675][T14731] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none.
[  789.154660][T14602] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  789.175787][ T4230] usb 6-1: USB disconnect, device number 5
[  789.208267][T14602] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  789.325946][ T4263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  789.341892][ T4263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  789.364083][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  789.372416][ T7721] Bluetooth: hci1: command 0x040f tx timeout
[  789.397347][ T4427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  789.458481][ T4427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  789.483735][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  789.487343][   T25] audit: type=1800 audit(1790555957.525:37): pid=14731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3076" name="file2" dev="loop1" ino=16 res=0 errno=0
[  790.574770][T14750] loop6: detected capacity change from 0 to 8
[  791.445330][ T1270] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  791.456795][ T7721] Bluetooth: hci1: command 0x0419 tx timeout
[  791.633940][ T1270] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  791.771832][T14767] befs: (nbd5): No write support. Marking filesystem read-only
[  791.781335][  T150] block nbd5: Attempted send on invalid socket
[  791.787747][  T150] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  791.799333][T14767] befs: (nbd5): unable to read superblock
[  792.337797][ T1270] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  792.493883][ T1270] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  793.631182][T14756] Bluetooth: hci2: command 0x0409 tx timeout
[  793.692157][T14803] loop2: detected capacity change from 0 to 128
[  793.694772][T14759] chnl_net:caif_netlink_parms(): no params data found
[  793.778722][T14803] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  795.676410][T14759] bridge0: port 1(bridge_slave_0) entered blocking state
[  795.718204][T14756] Bluetooth: hci2: command 0x041b tx timeout
[  795.730284][T14759] bridge0: port 1(bridge_slave_0) entered disabled state
[  795.734384][T14821] loop3: detected capacity change from 0 to 164
[  795.742554][T14759] device bridge_slave_0 entered promiscuous mode
[  795.761528][T14759] bridge0: port 2(bridge_slave_1) entered blocking state
[  795.770430][T14759] bridge0: port 2(bridge_slave_1) entered disabled state
[  795.778684][T14759] device bridge_slave_1 entered promiscuous mode
[  795.808328][T14759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  795.903391][T14759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  796.112591][T14759] team0: Port device team_slave_0 added
[  796.328303][T14835] befs: (nbd6): No write support. Marking filesystem read-only
[  797.020888][ T1092] block nbd6: Attempted send on invalid socket
[  797.027076][ T1092] blk_update_request: I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  797.038186][T14835] befs: (nbd6): unable to read superblock
[  797.116484][T13224] rock: directory entry would overflow storage
[  797.126679][T13224] rock: sig=0x4f50, size=4, remaining=3
[  797.140591][T13224] iso9660: Corrupted directory entry in block 5 of inode 1792
[  797.203097][T13224] iso9660: Corrupted directory entry in block 5 of inode 1792
[  797.214550][T14759] team0: Port device team_slave_1 added
[  797.275426][T14759] batman_adv: batadv0: Adding interface: batadv_slave_0
[  797.283249][T14759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  797.427414][T14759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  797.520222][T14759] batman_adv: batadv0: Adding interface: batadv_slave_1
[  797.527248][T14759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  797.640534][T14759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  797.779690][T14445] Bluetooth: hci2: command 0x040f tx timeout
[  797.833711][T14759] device hsr_slave_0 entered promiscuous mode
[  797.870235][T14759] device hsr_slave_1 entered promiscuous mode
[  797.891652][T14759] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  797.915568][T14759] Cannot create hsr debugfs directory
[  798.904510][T14866] loop3: detected capacity change from 0 to 512
[  799.007913][T14866] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  799.076104][T14866] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  799.110979][T14866] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  799.149096][T14872] fuse: Unknown parameter '0xffffffffffffffff'
[  799.423015][T14866] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  799.529161][T14866] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e02c, mo2=0000]
[  799.745356][T14866] EXT4-fs (loop3): orphan cleanup on readonly fs
[  799.859692][T14441] Bluetooth: hci2: command 0x0419 tx timeout
[  799.879770][T14866] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3106: bg 0: block 34: padding at end of block bitmap is not set
[  799.929238][T14866] EXT4-fs (loop3): Remounting filesystem read-only
[  799.938922][T14866] Quota error (device loop3): write_blk: dquota write failed
[  800.014279][T14866] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  800.072357][T14866] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.3106: Failed to acquire dquot type 1
[  800.104457][T14866] EXT4-fs (loop3): Remounting filesystem read-only
[  800.182143][T14887] fuse: Unknown parameter '0xffffffffffffffff'
[  800.315179][T14866] EXT4-fs (loop3): 1 truncate cleaned up
[  800.381442][T14866] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,barrier,errors=remount-ro,noblock_validity,. Quota mode: writeback.
[  800.803117][T14892] loop5: detected capacity change from 0 to 128
[  800.860067][T14892] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  801.978135][T11436] UDF-fs: error (device loop5): udf_read_inode: (ino 114) failed !bh
[  802.002611][ T1270] device hsr_slave_0 left promiscuous mode
[  802.020044][T11436] UDF-fs: error (device loop5): udf_read_inode: (ino 114) failed !bh
[  802.071904][T14907] befs: (nbd6): No write support. Marking filesystem read-only
[  802.079754][  T150] block nbd6: Attempted send on invalid socket
[  802.085937][  T150] blk_update_request: I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  802.097059][T14907] befs: (nbd6): unable to read superblock
[  802.224100][ T1270] device hsr_slave_1 left promiscuous mode
[  802.379776][ T1270] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  802.387276][ T1270] batman_adv: batadv0: Removing interface: batadv_slave_0
[  802.649339][ T1270] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  802.806560][ T1270] batman_adv: batadv0: Removing interface: batadv_slave_1
[  803.152990][ T1270] device bridge_slave_1 left promiscuous mode
[  803.159942][ T1270] bridge0: port 2(bridge_slave_1) entered disabled state
[  803.178597][ T1270] device bridge_slave_0 left promiscuous mode
[  803.185214][ T1270] bridge0: port 1(bridge_slave_0) entered disabled state
[  803.202078][ T1270] device veth1_macvtap left promiscuous mode
[  803.208159][ T1270] device veth0_macvtap left promiscuous mode
[  803.216603][ T1270] device veth1_vlan left promiscuous mode
[  803.222688][ T1270] device veth0_vlan left promiscuous mode
[  804.254953][T14925] loop2: detected capacity change from 0 to 1024
[  804.308631][T14925] EXT4-fs (loop2): Ignoring removed bh option
[  804.360533][ T1270] team0 (unregistering): Port device team_slave_1 removed
[  804.408224][T14928] fuse: Unknown parameter '0xffffffffffffffff'
[  804.554238][ T1270] team0 (unregistering): Port device team_slave_0 removed
[  804.665729][T14925] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback.
[  804.850656][ T1270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  805.069177][ T1270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  805.305019][ T1270] bond0 (unregistering): Released all slaves
[  806.308512][T14958] loop2: detected capacity change from 0 to 512
[  806.308957][T14960] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  806.431410][T14958] EXT4-fs (loop2): 1 truncate cleaned up
[  806.437194][T14958] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none.
[  806.607238][T14759] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  806.635836][T14759] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  806.681324][T14759] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  806.733003][T14759] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  806.797847][T14980] loop6: detected capacity change from 0 to 1024
[  806.935657][T14980] EXT4-fs (loop6): Ignoring removed bh option
[  806.999827][T14980] EXT4-fs (loop6): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback.
[  807.093636][T14759] 8021q: adding VLAN 0 to HW filter on device bond0
[  807.165249][T14996] befs: (nbd2): No write support. Marking filesystem read-only
[  807.173993][ T1092] block nbd2: Attempted send on invalid socket
[  807.180711][ T1092] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  807.192054][T14996] befs: (nbd2): unable to read superblock
[  807.538443][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  808.027835][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  808.048475][T14759] 8021q: adding VLAN 0 to HW filter on device team0
[  808.194739][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  808.225944][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  808.574389][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  808.586150][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  808.911900][ T4427] bridge0: port 1(bridge_slave_0) entered blocking state
[  808.919119][ T4427] bridge0: port 1(bridge_slave_0) entered forwarding state
[  808.945914][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  808.966448][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  809.004937][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  809.016390][ T4427] bridge0: port 2(bridge_slave_1) entered blocking state
[  809.023543][ T4427] bridge0: port 2(bridge_slave_1) entered forwarding state
[  809.057341][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  809.080965][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  809.100144][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  809.127923][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  809.164267][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  809.230552][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  809.302675][T14759] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  809.350232][T14759] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  809.365524][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  809.383799][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  809.415222][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  809.443830][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  809.477195][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  809.514169][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  809.678628][T15037] loop6: detected capacity change from 0 to 512
[  809.843862][T15004] chnl_net:caif_netlink_parms(): no params data found
[  809.854974][T15037] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  809.899636][T15037] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  809.909405][T15037] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  809.938413][T11592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  810.020139][T11592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  810.032035][T14759] 8021q: adding VLAN 0 to HW filter on device batadv0
[  810.114643][T15037] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  810.126063][T15037] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e02c, mo2=0000]
[  810.165924][T15037] EXT4-fs (loop6): orphan cleanup on readonly fs
[  810.183661][T15037] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.3151: bg 0: block 34: padding at end of block bitmap is not set
[  810.216385][T14757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  810.227165][T15037] EXT4-fs (loop6): Remounting filesystem read-only
[  810.240914][T15037] Quota error (device loop6): write_blk: dquota write failed
[  810.251732][T14757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  810.267041][T15037] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota
[  810.280227][T15037] EXT4-fs error (device loop6): ext4_acquire_dquot:6236: comm syz.6.3151: Failed to acquire dquot type 1
[  810.309019][T14757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  810.325108][T14757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  810.343064][T15037] EXT4-fs (loop6): Remounting filesystem read-only
[  810.355455][T14757] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  810.366856][T15037] EXT4-fs (loop6): 1 truncate cleaned up
[  810.373684][T14757] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  810.377583][T15037] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x0000000000000000,barrier,errors=remount-ro,noblock_validity,. Quota mode: writeback.
[  810.400171][T15004] bridge0: port 1(bridge_slave_0) entered blocking state
[  810.416987][T15004] bridge0: port 1(bridge_slave_0) entered disabled state
[  810.434072][T15004] device bridge_slave_0 entered promiscuous mode
[  810.459952][T14759] device veth0_vlan entered promiscuous mode
[  810.471766][T15004] bridge0: port 2(bridge_slave_1) entered blocking state
[  810.489212][T15004] bridge0: port 2(bridge_slave_1) entered disabled state
[  810.509129][T15004] device bridge_slave_1 entered promiscuous mode
[  810.525728][T14759] device veth1_vlan entered promiscuous mode
[  810.581670][T15004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  810.605396][T14759] device veth0_macvtap entered promiscuous mode
[  810.627055][T11592] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  810.642248][T11592] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  810.714191][T11592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  810.750574][T11592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  810.792119][T15004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  810.821256][T14759] device veth1_macvtap entered promiscuous mode
[  810.840915][T11592] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  810.864559][T11592] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  811.069134][ T4232] Bluetooth: hci0: command 0x0409 tx timeout
[  811.075806][T14759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  811.087248][T14759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  811.097983][T14759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  811.109590][T14759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  811.195368][T15096] loop2: detected capacity change from 0 to 512
[  811.300951][T14759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  811.502560][T14759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  811.688250][T14759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  811.726185][T14759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  811.736298][T14759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  811.747473][T14759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  811.762198][T14759] batman_adv: batadv0: Interface activated: batadv_slave_0
[  811.787334][T15004] team0: Port device team_slave_0 added
[  811.846420][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  811.855984][T15096] ------------[ cut here ]------------
[  811.862222][T15096] EA inode 11 i_nlink=0
[  811.862417][T15096] WARNING: CPU: 1 PID: 15096 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x4fe/0x560
[  811.876877][T15096] Modules linked in:
[  811.880807][T15096] CPU: 1 PID: 15096 Comm: syz.2.3162 Not tainted syzkaller #0
[  811.888270][T15096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  811.898398][T15096] RIP: 0010:ext4_xattr_inode_update_ref+0x4fe/0x560
[  811.905032][T15096] Code: 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 15 fe a1 ff 49 8b 34 24 48 c7 c7 00 9a 3d 8a 44 89 fa e8 72 ff 99 07 <0f> 0b 49 bd 00 00 00 00 00 fc ff df 4c 8b 74 24 08 4c 8b 64 24 10
[  811.924715][T15096] RSP: 0000:ffffc90002f6f400 EFLAGS: 00010246
[  811.930826][T15096] RAX: b291e7b24ea1b100 RBX: ffff888022e03670 RCX: 0000000000080000
[  811.938814][T15096] RDX: ffffc9000f89e000 RSI: 000000000000c45a RDI: 000000000000c45b
[  811.942760][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  811.946858][T15096] RBP: ffffc90002f6f4f0 R08: ffff8880b912795b R09: 1ffff11017224f2b
[  811.958174][T14759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  811.962980][T15096] R10: dffffc0000000000 R11: ffffed1017224f2c R12: ffff888022e034b8
[  811.963003][T15096] R13: dffffc0000000000 R14: ffff888022e03478 R15: 0000000000000000
[  811.963018][T15096] FS:  00007ff19edc36c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  811.963037][T15096] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  811.963055][T15096] CR2: 0000001b2e324000 CR3: 000000004689d000 CR4: 00000000003506e0
[  811.963073][T15096] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  811.963086][T15096] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  811.963100][T15096] Call Trace:
[  811.963108][T15096]  <TASK>
[  811.963127][T15096]  ? ext4_xattr_block_csum+0x560/0x560
[  811.963159][T15096]  ? __ext4_journal_ensure_credits+0x2c/0x450
[  811.982429][T14759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  811.989677][T15096]  ext4_xattr_inode_dec_ref_all+0x94c/0xf90
[  811.989788][T15096]  ? errseq_check+0x3c/0x70
[  811.989845][T15096]  ? ext4_xattr_delete_inode+0xca0/0xca0
[  811.989871][T15096]  ? __ext4_journal_ensure_credits+0x450/0x450
[  811.989897][T15096]  ? ext4_get_inode_loc+0xf6/0x120
[  812.007152][T14759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  812.015457][T15096]  ext4_xattr_delete_inode+0xada/0xca0
[  812.015503][T15096]  ? ext4_expand_extra_isize_ea+0x18c0/0x18c0
[  812.015534][T15096]  ext4_evict_inode+0xc0c/0x1050
[  812.015560][T15096]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  812.015582][T15096]  ? do_raw_spin_unlock+0x11d/0x230
[  812.124699][T15096]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  812.130643][T15096]  evict+0x4b6/0x8b0
[  812.134640][T15096]  ? proc_nr_inodes+0x320/0x320
[  812.139539][T15096]  ? do_raw_spin_unlock+0x11d/0x230
[  812.144745][T15096]  ? _raw_spin_unlock+0x24/0x40
[  812.149634][T15096]  ? iput+0x6ea/0x880
[  812.153635][T15096]  ext4_orphan_cleanup+0xc96/0x14f0
[  812.159539][T15096]  ? _raw_write_unlock+0x24/0x40
[  812.172125][T15096]  ? ext4_orphan_del+0xc90/0xc90
[  812.177199][T15096]  ? errseq_check_and_advance+0x62/0x120
[  812.178821][T14759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  812.182892][T15096]  ext4_fill_super+0x8c65/0x93f0
[  812.182920][T15096]  ? format_decode+0x8b1/0x1330
[  812.199303][T14759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  812.202618][T15096]  ? ext4_mount+0x40/0x40
[  812.217339][T15096]  ? set_blocksize+0x1f1/0x360
[  812.219362][T14759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  812.222246][T15096]  ? sb_set_blocksize+0xa5/0xe0
[  812.237124][T15096]  mount_bdev+0x28a/0x3c0
[  812.241696][T15096]  ? ext4_mount+0x40/0x40
[  812.248566][T15096]  legacy_get_tree+0xe6/0x180
[  812.253503][T15096]  ? ext4_errno_to_code+0x160/0x160
[  812.258798][T15096]  vfs_get_tree+0x88/0x270
[  812.263330][T15096]  do_new_mount+0x247/0xa40
[  812.267962][T15096]  __se_sys_mount+0x2e3/0x3d0
[  812.272755][T15096]  ? __x64_sys_mount+0xc0/0xc0
[  812.277633][T15096]  ? lockdep_hardirqs_on+0x94/0x140
[  812.283015][T15096]  ? __x64_sys_mount+0x1c/0xc0
[  812.311991][T15096]  do_syscall_64+0x4c/0xa0
[  812.316474][T15096]  ? clear_bhb_loop+0x30/0x80
[  812.321205][T15096]  ? clear_bhb_loop+0x30/0x80
[  812.325892][T15096]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  812.331829][T15096] RIP: 0033:0x7ff1a0bae3ca
[  812.336250][T15096] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  812.355900][T15096] RSP: 002b:00007ff19edc2e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  812.364360][T15096] RAX: ffffffffffffffda RBX: 00007ff19edc2ee0 RCX: 00007ff1a0bae3ca
[  812.372361][T15096] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007ff19edc2ea0
[  812.380365][T15096] RBP: 0000200000000180 R08: 00007ff19edc2ee0 R09: 0000000000000000
[  812.388345][T15096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000
[  812.396354][T15096] R13: 00007ff19edc2ea0 R14: 000000000000048d R15: 000000000000002c
[  812.404380][T15096]  </TASK>
[  812.407435][T15096] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  812.414705][T15096] CPU: 1 PID: 15096 Comm: syz.2.3162 Not tainted syzkaller #0
[  812.422157][T15096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  812.432209][T15096] Call Trace:
[  812.435500][T15096]  <TASK>
[  812.438432][T15096]  dump_stack_lvl+0x188/0x250
[  812.443122][T15096]  ? show_regs_print_info+0x20/0x20
[  812.448322][T15096]  ? load_image+0x410/0x410
[  812.452837][T15096]  panic+0x2f8/0x850
[  812.456904][T15096]  ? bpf_jit_dump+0xd0/0xd0
[  812.461421][T15096]  ? ext4_xattr_inode_update_ref+0x4fe/0x560
[  812.467409][T15096]  __warn+0x248/0x2b0
[  812.471397][T15096]  ? ext4_xattr_inode_update_ref+0x4fe/0x560
[  812.477386][T15096]  report_bug+0x1b9/0x2e0
[  812.481810][T15096]  handle_bug+0x3a/0x70
[  812.486068][T15096]  exc_invalid_op+0x16/0x40
[  812.490569][T15096]  asm_exc_invalid_op+0x16/0x20
[  812.495426][T15096] RIP: 0010:ext4_xattr_inode_update_ref+0x4fe/0x560
[  812.502014][T15096] Code: 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 15 fe a1 ff 49 8b 34 24 48 c7 c7 00 9a 3d 8a 44 89 fa e8 72 ff 99 07 <0f> 0b 49 bd 00 00 00 00 00 fc ff df 4c 8b 74 24 08 4c 8b 64 24 10
[  812.521621][T15096] RSP: 0000:ffffc90002f6f400 EFLAGS: 00010246
[  812.527698][T15096] RAX: b291e7b24ea1b100 RBX: ffff888022e03670 RCX: 0000000000080000
[  812.535678][T15096] RDX: ffffc9000f89e000 RSI: 000000000000c45a RDI: 000000000000c45b
[  812.543670][T15096] RBP: ffffc90002f6f4f0 R08: ffff8880b912795b R09: 1ffff11017224f2b
[  812.551680][T15096] R10: dffffc0000000000 R11: ffffed1017224f2c R12: ffff888022e034b8
[  812.559656][T15096] R13: dffffc0000000000 R14: ffff888022e03478 R15: 0000000000000000
[  812.567649][T15096]  ? ext4_xattr_block_csum+0x560/0x560
[  812.573114][T15096]  ? __ext4_journal_ensure_credits+0x2c/0x450
[  812.579264][T15096]  ext4_xattr_inode_dec_ref_all+0x94c/0xf90
[  812.585161][T15096]  ? errseq_check+0x3c/0x70
[  812.589653][T15096]  ? ext4_xattr_delete_inode+0xca0/0xca0
[  812.595274][T15096]  ? __ext4_journal_ensure_credits+0x450/0x450
[  812.601416][T15096]  ? ext4_get_inode_loc+0xf6/0x120
[  812.606519][T15096]  ext4_xattr_delete_inode+0xada/0xca0
[  812.611974][T15096]  ? ext4_expand_extra_isize_ea+0x18c0/0x18c0
[  812.618041][T15096]  ext4_evict_inode+0xc0c/0x1050
[  812.622972][T15096]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  812.628859][T15096]  ? do_raw_spin_unlock+0x11d/0x230
[  812.634068][T15096]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  812.639946][T15096]  evict+0x4b6/0x8b0
[  812.643859][T15096]  ? proc_nr_inodes+0x320/0x320
[  812.648697][T15096]  ? do_raw_spin_unlock+0x11d/0x230
[  812.653889][T15096]  ? _raw_spin_unlock+0x24/0x40
[  812.658756][T15096]  ? iput+0x6ea/0x880
[  812.662730][T15096]  ext4_orphan_cleanup+0xc96/0x14f0
[  812.667923][T15096]  ? _raw_write_unlock+0x24/0x40
[  812.672846][T15096]  ? ext4_orphan_del+0xc90/0xc90
[  812.677789][T15096]  ? errseq_check_and_advance+0x62/0x120
[  812.683409][T15096]  ext4_fill_super+0x8c65/0x93f0
[  812.688336][T15096]  ? format_decode+0x8b1/0x1330
[  812.693193][T15096]  ? ext4_mount+0x40/0x40
[  812.697510][T15096]  ? set_blocksize+0x1f1/0x360
[  812.702285][T15096]  ? sb_set_blocksize+0xa5/0xe0
[  812.707123][T15096]  mount_bdev+0x28a/0x3c0
[  812.711436][T15096]  ? ext4_mount+0x40/0x40
[  812.715753][T15096]  legacy_get_tree+0xe6/0x180
[  812.720422][T15096]  ? ext4_errno_to_code+0x160/0x160
[  812.725618][T15096]  vfs_get_tree+0x88/0x270
[  812.730021][T15096]  do_new_mount+0x247/0xa40
[  812.734515][T15096]  __se_sys_mount+0x2e3/0x3d0
[  812.739180][T15096]  ? __x64_sys_mount+0xc0/0xc0
[  812.743938][T15096]  ? lockdep_hardirqs_on+0x94/0x140
[  812.749120][T15096]  ? __x64_sys_mount+0x1c/0xc0
[  812.753878][T15096]  do_syscall_64+0x4c/0xa0
[  812.758277][T15096]  ? clear_bhb_loop+0x30/0x80
[  812.763110][T15096]  ? clear_bhb_loop+0x30/0x80
[  812.767777][T15096]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  812.773655][T15096] RIP: 0033:0x7ff1a0bae3ca
[  812.778058][T15096] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  812.797687][T15096] RSP: 002b:00007ff19edc2e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  812.806103][T15096] RAX: ffffffffffffffda RBX: 00007ff19edc2ee0 RCX: 00007ff1a0bae3ca
[  812.814064][T15096] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007ff19edc2ea0
[  812.822023][T15096] RBP: 0000200000000180 R08: 00007ff19edc2ee0 R09: 0000000000000000
[  812.829981][T15096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000
[  812.837936][T15096] R13: 00007ff19edc2ea0 R14: 000000000000048d R15: 000000000000002c
[  812.845905][T15096]  </TASK>
[  812.849119][T15096] Kernel Offset: disabled
[  812.853936][T15096] Rebooting in 86400 seconds..