last executing test programs:

1m23.103989455s ago: executing program 0 (id=63):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r2, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0x401c5820, 0x20000007)

1m22.825107552s ago: executing program 0 (id=64):
r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000500)={0x1, 0x1}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)
syz_usb_connect(0x0, 0x164, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007af28810d30b69055b000000000109025201012000000009044000000e010000082406", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="f07286deff04a98e39efb75e59cb1cdee7608694"], 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040)={0x2, 0xfe}, 0x2)

1m18.933140075s ago: executing program 0 (id=76):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x1, 0x160bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2500}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x2c, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x10001}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0xe, 0x1, 0x0, 0x1, [{0x8, 0x12, 0x0, 0x0, 0x7}, {0x8, 0x96, 0x0, 0x0, 0x7cc6}]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x40)
sendmsg$nl_route_sched(r4, 0x0, 0x44998)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x8)
mount(0x0, 0x0, &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./ffs\x00', 0x1ff)
pipe2(&(0x7f0000000200)={0x0, <r6=>0x0}, 0x0)
write(r6, &(0x7f0000000240)='functionfs', 0xa)
read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1m15.082275087s ago: executing program 0 (id=82):
syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xff, 0x544, &(0x7f0000001000)="$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")
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x5040a, 0x7fff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
read$FUSE(r0, &(0x7f0000004080)={0x2020, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffc25, {0x3, 0x5, 0x0, {0x1, 0x8e, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x4009, 0x6, 0x0, r1, 0x0, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
chown(&(0x7f0000000100)='./file0\x00', 0x0, r1)

1m8.156001662s ago: executing program 0 (id=94):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x4, 0x8, 0xd}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20)

1m4.287851034s ago: executing program 0 (id=112):
r0 = socket(0xa, 0x3, 0xff)
sendmmsg$unix(r0, &(0x7f00000001c0)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000000180)="31c92990f8448924061effca885344e1d27f0cf076e90c9029da492c396ca48d263b9946dcb510fd", 0x28}], 0x1, 0x0, 0x0, 0x91}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4140}}], 0x2, 0x240088e0)

1m3.835199746s ago: executing program 32 (id=112):
r0 = socket(0xa, 0x3, 0xff)
sendmmsg$unix(r0, &(0x7f00000001c0)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000000180)="31c92990f8448924061effca885344e1d27f0cf076e90c9029da492c396ca48d263b9946dcb510fd", 0x28}], 0x1, 0x0, 0x0, 0x91}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4140}}], 0x2, 0x240088e0)

50.282109549s ago: executing program 4 (id=143):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000007000000090000000e"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000180), 0x7fff, r0}, 0x38)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)

45.859761055s ago: executing program 4 (id=148):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/power/state\x00', 0x2, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x7)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x4, 0x0, 'syz1\x00', 0x0})
readv(r1, &(0x7f0000000680)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1)
ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x8)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0})
dup3(0xffffffffffffffff, r2, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0})
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b2404"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0})
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder-control\x00', 0x2, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f00), 0x0, 0x90)

44.970673886s ago: executing program 4 (id=150):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
fsopen(0x0, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r4, &(0x7f0000000140)='off', 0x3)

43.467742012s ago: executing program 4 (id=151):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000340)={[{@errors_remount}, {@lazytime}, {@nogrpid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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")
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@errors_remount}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x186b}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
mkdir(&(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff)
symlink(&(0x7f0000000800)='./config/usb_gadget/g1/functions/geth.usb0\x00', &(0x7f0000000900)='./config/usb_gadget/g1/configs/c.1/geth.usb0\x00')
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)=ANY=[])

38.004121212s ago: executing program 4 (id=157):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={r0, 0x0, 0xa800, &(0x7f00000000c0)={@_ha_fsid={[0x88, 0x1]}, {0x4, 0x5, 0x4, 0x400}}, 0x3, 0x0, 0x0})
socketpair$unix(0x1, 0x3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x1b, &(0x7f0000000940)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e0d000310"], 0xf)

32.222189981s ago: executing program 4 (id=170):
r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xec19, 0x130c8, 0x6, 0x1de}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000))
r1 = epoll_create(0x2a1b)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x80000009})

32.204434581s ago: executing program 5 (id=114):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0)
read$FUSE(r0, &(0x7f000000a3c0)={0x2020}, 0xfda5)

31.114608087s ago: executing program 33 (id=170):
r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xec19, 0x130c8, 0x6, 0x1de}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000))
r1 = epoll_create(0x2a1b)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x80000009})

31.076254308s ago: executing program 5 (id=173):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@dioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resgid}, {@norecovery}, {@abort}, {@auto_da_alloc}, {@nouid32}, {@resgid, 0x32}]}, 0x1, 0x519, &(0x7f00000014c0)="$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")

30.381001465s ago: executing program 5 (id=176):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020)

29.811021728s ago: executing program 5 (id=177):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000)
semget$private(0x0, 0x4000000009, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000046000/0x3000)=nil, 0x3000, 0x8, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
fchmodat(0xffffffffffffff9c, 0x0, 0xfffffed3)

25.839958933s ago: executing program 5 (id=184):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)

25.584503209s ago: executing program 34 (id=184):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)

10.621428886s ago: executing program 2 (id=222):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x42, 0x0, 0x0)
msgctl$IPC_RMID(0x0, 0x0)
fsopen(0x0, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=<r0=>0x0)
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
openat$rtc(0xffffffffffffff9c, 0x0, 0x101400, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000000)=0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r4=>0x0})
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x100400c1, &(0x7f0000000200)={0x11, 0xf8, r4, 0x1, 0x87, 0x6, @broadcast}, 0x14)
socket$inet6_udp(0xa, 0x2, 0x0)
pipe(&(0x7f0000000240)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
writev(r6, &(0x7f0000000400)=[{&(0x7f0000000100)='|', 0x1}], 0x1)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r7, 0x0, r8, 0x0, 0x2, 0x6)
write$cgroup_pid(r8, &(0x7f0000000000), 0xffffff98)
splice(r5, 0x0, r8, 0x0, 0x80000000, 0x3)

8.724676592s ago: executing program 1 (id=226):
mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000)
getpgrp(0x0)
listen(0xffffffffffffffff, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
syz_usb_connect$uac2(0x3, 0x8f, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xdba, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x3, 0x1, 0x6, 0x10, 0x2, {0x8, 0xb, 0x1, 0x0, 0x1, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xff80, 0x7, 0x1d, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x304, 0x5, 0x4, 0x0, 0x1ff, 0x1c}, @source_unit={0x8, 0x24, 0xa, 0x4, 0x2, 0x95, 0x5, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc, 0x2, 0x9, {0x8, 0x25, 0x1, 0x80, 0x30, 0xad, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0xfa, 0xbc, {0x8, 0x25, 0x1, 0x2, 0xfa4024f26d164786, 0x81, 0x9}}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0})

7.505321041s ago: executing program 2 (id=228):
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'syztnl2\x00', <r0=>0x0, 0x4, 0x4, 0x8, 0x4, 0x1, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x40, 0xf518, 0x1c00000}})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={0xffffffffffffffff, r0, 0x25, 0xc, @val=@netfilter={0x2, 0x1, 0x1ff, 0xabcc1a5a4d199287}}, 0x20)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x4358}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xc}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x5}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.842794531s ago: executing program 2 (id=229):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x8000, 0x5a)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000b00)={0x2, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x6, @private=0xa010101}}}, 0x108)

5.767938953s ago: executing program 1 (id=230):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@main=@item_012={0x0, 0x0, 0xb}, @main=@item_4={0x3, 0x0, 0x8, "62966124"}, @global=@item_012={0x1, 0x1, 0x8, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "86"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)
ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000040)={0x1, 0x3, 0x8, 0x2, 0xfffffff7})

4.996157211s ago: executing program 3 (id=232):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @empty}, 0x10)

4.900626923s ago: executing program 3 (id=233):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x22)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1d, 0x4, 0x4, 0x5, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x48)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file0\x00', 0x2000400, &(0x7f00000004c0)=ANY=[], 0x6, 0x237, &(0x7f0000000fc0)="$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")

4.615917629s ago: executing program 3 (id=234):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r0, 0x540a, 0x0)
ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffffe01, 0x4ef, 0x1, 0x8001, 0xb1, "fe6735f4050000000000002000", 0x6, 0x10})
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000))

3.632090913s ago: executing program 3 (id=235):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0)
msgrcv(0x0, &(0x7f0000000400)={0x0, ""/144}, 0x98, 0x1, 0x2000)
msgsnd(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02041a7f8e00005670b60400e12ba5cde3fc00"], 0x8, 0x800)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x0, 0x7fff0000}]})

3.496636347s ago: executing program 3 (id=236):
gettid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="00bc7811e943bbb3bc31a70c81525069e4320000000000", @ANYRES64], 0x1, 0x1a1, &(0x7f0000000440)="$eJzs0bFrFEEUx/Hvm53b2whRT8UiggkYXPeI5HaDFlaHVYRbsLARPPS4rElwo1z2ChMSvEYCEs2/oIVoqYJWIgrWwUKw0Nikk1wRLMRCTvZuIvg3ZD7Nb99bdmfmzVzWyorAn92VJlX6HA7yCUEDozLoKTXIN6b+YXJjEFw09brJ5yZHsqXlW400TRbHLhQo/dcAfo4VS/Cvlb3kuGJIqCJfdleaDbkR06uyoGZiSjXKD3HqtIJHjOhhjl3Hoeevc0nREr8GhybbHpPZ0vLZ+YXGbDKb3I6iqfP3qFTO5ftPk8prJHggisesEkAxZihYpVDn/qY+wIQgwZzacqTcxa2zsemcOTXRRQU79BDe+12K37SLusJpvGv5gaY5KjzBiRmvcVihuTmfJpVp5LJ6JaH+rH8VFF7HcbzmnXRm7aqS3+6zqux4Em5T8EOicshUPhqO8IG1LTpmqGx/Z1Te5qvszVX3370w1QlO8tTlbqPdXgxd+Ch+TNSBqATD/d+pmPH8gnlnvjHB170Hy7Isy7Isy7Isax/4GwAA//+IG117")
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3)
r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xa001)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0xa44, 0x0, 0xa, 0x3, 0x6, 0x1, 0x0, 0x7cce8c743ee810df, 0x2e})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x7, 0x440000)
syz_clone3(&(0x7f00000002c0)={0x8500, 0x0, 0x0, 0x0, {}, 0x0, 0x2, 0x0, 0x0}, 0x58)
ioctl$HIDIOCGSTRING(r5, 0x81044804, &(0x7f0000000180))
socket(0x10, 0x803, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)

3.276986932s ago: executing program 2 (id=237):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x13, 0x0, 0x0)
ioctl$KVM_GET_TSC_KHZ_cpu(r2, 0xaea3)

2.055348501s ago: executing program 3 (id=238):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001540)=[@text64={0x40, 0x0}], 0x1, 0x16, &(0x7f0000001580), 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f0000000100)={[{@i_version}, {@noauto_da_alloc}, {@oldalloc}]}, 0x1, 0x3f7, &(0x7f0000003080)="$eJzs3U1vG0UfAPD/bt7atE+TSs+Bl4sFSERCJE3aApVAIuLCoT3RA0es2C1RnQYlRqJVxItA3EAC8QHgAHwEjnDgO8AZOEClCOVAys1o7V3HxHbapA6ukt9PGnlmZ+2Z9XjW68nsJIBjqxQRL0fESESci4ipfHuah3i/FbL9trc2lv7e2lhKotF47c8kknxb8VpJ/ngqf4GZNCL9KInHe5S7fuv2jXKtVl3L03P1lbfm1m/dfnZ5pXy9er16c+G58xcuXnzh0sLzAzvWzZXkk6e+ufzbZx9XPv/pj++ns/qezvM6j2NQSlFqvye7XRp0YUN2oiOejA6xIgAA7CnNr/1Hm9f/UzESOxdvU/Hpj0OtHAAAADAQjUbxCAAAABxdid/+AAAAcMQV8wC2tzaWijDE6Qj8xzYXI2K61f5389DKGW3f0zu26/7eQSpFxKsnrixkIQ7pPmwAAACA4+yHxdbCf93jf2k80rHfyYiYLNb2G6DSrnT3+E96Z8BF0mFzMeLFiLjbNf6XFrtMj+Sp/zWHCseSa8u16rmIOBMRMzE2kaXn9yjj3SdufNsvr3P878tfX5/Pys8ed/ZI74xO/Ps5lXK9/CDHzI7NDyIeG+3V/kl7zLdzncyDeGN5+6V+eVn7Z+1dhO725zA1vop4umf/31m5NNl7fda55vlgLj8rTHSX8cvprz/sV35n/89CVn7xtwAOX9b/J/du/+Y6ue31etf3X8Z3f135uV/evdu/9/l/PLnarOB4vu2dcr2+Nh8xnlzu3u7T1Fa8H8X7lbX/zJO9v/+L678k/+4/07E+9H688t7Zq/3y9P/hytq/sq/+v//Im5OPzvQr//76/4VmZYoXcf13b/fbQMOuJwAAAAAAAACDkTbn9iXpbDueprOzrXm+/4/JtLa6Xn/m2urbNyutOYDTMZYW8z+nOuaDzrduI2+nF3alz0fE2Yj4YupkMz27tFqrDPvgAQAA4Jg41ef3f+b3g9zsAQAAADycpoddAQAAAODQ+f0PAAAAR9qDrOtfq64V/yLogE8XETlYZCT/4D0s9Tl6kSGelAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIfwIAAP//keS8Nw==")
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x300, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1001000000, 0x0, 0x10043, 0x2000001, 0x3, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x2, 0xeef, 0x3, 0x0, 0x7], 0xeeee8000, 0x202})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x26000, 0xeeee0000, 0xb, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x0, 0x5, 0x5, 0xfc, 0x89}, {0x6000, 0x1, 0x0, 0x5, 0x3, 0x7, 0x1, 0x7, 0x8b, 0xa4, 0x5, 0x5}, {0x1, 0xf000, 0x9, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0xc000, 0x4, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x11, 0x1, 0x7}, {0x5000, 0x1, 0x0, 0x2, 0xe1, 0x15, 0x7, 0x3, 0x7, 0x81, 0x40, 0x70}, {0x1000, 0x4000, 0x0, 0x5, 0xcd, 0x7, 0x1, 0x92, 0x2, 0x4c, 0xa0, 0x9}, {0x8000000, 0x30}, {0x8000000, 0x7}, 0x80010000, 0x0, 0x0, 0x402105, 0x1000000000000, 0x1500, 0x3000, [0x9, 0x7, 0x5, 0x81]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df})
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x600)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000240)={0x80, 0x1000, 0x1, 0x1, 0x2, 0xb})
syz_usb_connect$midi(0x3, 0x33, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x21, 0x1, 0x1, 0x95, 0x40, 0x81, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x7f, [], [{{0x9, 0x5, 0x5, 0x2, 0x3ff, 0x2c, 0x2, 0x40, {0x6, 0x25, 0x1, 0x2, "ebee"}}}]}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r7 = inotify_init1(0x80000)
ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000480)={0x8, 0x0, 0x4, 0x1ace, 0x6, 0x0, [{0x0, 0x100000000, 0xffffffffffffa728, '\x00', 0x800}, {0xffff, 0x7fffffffffffffff, 0xffffffff, '\x00', 0x1104}, {0x3, 0x178b76d8, 0xfff, '\x00', 0x2c0b}, {0x1, 0x3, 0x0, '\x00', 0x80}, {0x2, 0x5, 0x40, '\x00', 0x600}, {0x8, 0x5, 0xfffffffffffffff8, '\x00', 0x883}]})
fsetxattr(r4, &(0x7f0000000280)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

1.982499883s ago: executing program 1 (id=239):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r2, &(0x7f0000000380)='100000', 0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r3, &(0x7f0000000280)='0', 0x1)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000f9a000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000c80000/0x2000)=nil, 0x0}, 0x68)
prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1608000004"], 0x50)
io_uring_enter(r4, 0x4095, 0x7721, 0x16, 0x0, 0x0)

1.767368778s ago: executing program 1 (id=240):
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000200)='./bus\x00', 0x204898, &(0x7f0000000280)=ANY=[@ANYBLOB="73657373696f6e3d3078303030303030303030303030303034312c686964652c686964652c756e686964652c7362736563746f723d3078303030303030303030303030303030302c696f636861727365743d63703433372c6d6f64653d3078303030303030303030303030303030372c6e6f726f636b2c6e6f726f636b2c0084d2fd4bcb49c4c76f98627e35575a6dff7f0d11908433598c2a7760c6a96eedabfe8140c649c1d00f2e27eecd533294659b7321abeb2108ada842948bec541f252998a3c743dcef479cb8868401662d606d1d4310d4b9d2d6071c8ea3941c289d15076f2d56191ef2e1937ccb67805f46551d"], 0x1, 0x576, &(0x7f0000001e40)="$eJzs3V1v29Ydx/EfHbtVVSAo1iEIgiQ9TTbAAVKFkhoFQq846khmK5ECSRXOVRE0cmFEboekAxbfdLnJNmB7Ed3lsNewV7C3UgzY/bCBpOQ4th6SWH6o8/0YCY/IQ57/oQX+cSzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQI7fct2qo24QDjbNbH7rPfVevBzvfWiFbr3ziu1KTvZPpZIuF6su//LF5kvZfzd0tXh1VaVsUdLu+5c++OzD1ZXJ/nMCfi1/e8MjPXm6++jBaDR8vKxAzqBr787e1rFhkERBz+tYEySRaTYa7p2NdmLaQdcm95PU9owfWy+NYrPu3zLVZrNubOV+NAg7La9rJyvvfVJz3Yb5vNK3XpxE4Z3PK4m/EXS7QdjJftWZRlbnnvFb8RdBalLr9YzZ2h4N64s6kFWqvkql2qJKNbdWq1ZrtWrjbvPuPdddPbTCPUCHaizvTYufp6Vct4FlWBnnf3UVKNRAmzJTf3y1FCtSb8b2sVvjxa/v2Lnt7s//kyx/+cXmK8rz//Xi1fVZ+X9GLCf380RPtatHeqCRRhrq8Qm2vabT739HVqECJYoUqCcvX2PGa4yaaqghV19pQ20lMmorUFdWie4rUSqbv6N8xbLylCpSLKN1+bolo6qaaqouI6uK7ivSQKE6asnLj7Kl7fy812WcWTHuVarO7EZ58r4bqjant+R/HN1Sr9/AUfxvkv8BAAAAAMC55eR/fc/G/2u6lpfaQde6px0WAAAAAABYovyT/6vZYi0rXZPD+B8AAAAAgPPGye+xcySV9VFR2pKT3y7FHwEAAAAAADgn8s//r2eLfA6Uj+TsTZfC+B8AAAAAgHPiTwvn2E/67zr//LfieM151t/8lbOTz83r7Vwo9rtw8Ihp+4pzcXyQfNEoFqurvr3qlIpKe5Ng/jRebC2Kw3kRgLcXwB9eJ4APV/UXfSzpfUkPi7oPJ1uKVsrtoGsrftT9rCrPu7iS2s30d99u/1559/8c9i46JW2PhpWvvxs9zGN5lh3l2c54AsVD8yjOieX7fL6F/J6LqT1ey2/EGLdbdrS1PRq6+/u/Uuy+8nKLP1yc0+Zz3Shq3RjPeFt+uf+lrM1qZVbvx1FUj9jz57pZ1Lm5frNYTImitiiK2v4opp+Lo0dRXxRF/UhR/ONfB6sCwEnZWpCFHB3Ku29wrX2z7K7XzO7PtV7UWb+SXcS1euXwFf2CFl3R3SNmt7/vPQNhUnlWjs3a/euBrPpjtsOPM9tNujUnO4UXvt/5rS49ebr7yfbOg2+G3wy/rdXqDfdT171b01rejfFiTqQAgLfX/mfsOFPz/8Kn8Dif5qNqSR9PH1X/Yu8rBRV9re800kPdzu82yL9xMPWo5X1fQ7i9YNRaztNk8YSX23NGde/kdzlMjlubW/flGOon8JsAAODk3FiQh18l/99eMO5+OZdPGR1rWt3qCZ8JAADeHjb+ySmnf3TiOOh/VW02q166YU0c+V+YOGh1rAnC1Mb+hhd2rOnHURr5UTcrfBm0bGKSQb8fxalpR7HpR0mwmU8faMaPfk9szwvTwE/6Xesl1vhRmHp+alpB4pv+4DfdINmwcb5z0rd+0A58Lw2i0CTRIPZtxZjE2n0Vg5YN06AdZMXQ9OOg58Ul82XUHfSsadnEj4N+GhUHnLQVhO0o/kBSFFZO+2QDAHBGPHm6++jBaDR8fIyFqQ2XTryrAABgbEGWXuQ/Sw8IAAAAAAAAAAAAAAAAAAAAAAAcsry7/TrHfh8hhTNamEwFfcph/PdsnI2lFt6TdDqtL7x0/HDsFycAx+r/AQAA//+CzUyP")
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x2c)
llistxattr(&(0x7f0000000380)='./file2\x00', 0x0, 0x0)

1.524115594s ago: executing program 1 (id=241):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = epoll_create1(0x80000)
r2 = fcntl$dupfd(r0, 0x0, r0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x20000000})
r3 = getpid()
kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r0, &(0x7f0000000100)={r1, r2, 0x7})

1.23213197s ago: executing program 2 (id=242):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYBLOB="644a0ce3a7d8a6cecbfc1f5c56d41c137c743ababa2b36ff835b00594da92f6c67dcd82c7f067560f0ae9c45a55703b2f63abe7b95fedddb78ffce323c6f2687610150e9336739"], 0x1, 0x1b3, &(0x7f00000001c0)="$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")
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@ipv4_getroute={0x1c, 0x1a, 0x1, 0x70bd2a, 0x25dfdbfc, {0x2, 0x0, 0x20, 0x10, 0x0, 0x0, 0xff, 0x6, 0x1900}}, 0x1c}, 0x1, 0x0, 0x0, 0x24008011}, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x210b480, &(0x7f00000005c0)={[], [{@appraise}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@subj_role={'subj_role', 0x3d, 'oldalloc'}}, {@fsname={'fsname', 0x3d, 'uid>'}}, {@uid_gt}, {@euid_lt}, {@dont_hash}]}, 0x4, 0x795, &(0x7f0000001740)="$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")
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r4, @ANYBLOB="400055060a000200aaaaaaaaaa0c00570c000e8005000100"], 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x840)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

880.823769ms ago: executing program 1 (id=243):
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5cd000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setitimer(0x1, &(0x7f0000000280)={{}, {0x0, 0x2710}}, &(0x7f0000000300))
openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

0s ago: executing program 2 (id=244):
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2200050, &(0x7f0000000040)=ANY=[], 0x1, 0x1522, &(0x7f00000002c0)="$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")
r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2)
r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2)
ftruncate(r3, 0xffff)
fcntl$addseals(r3, 0x409, 0x7)
r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000140)={r3, 0x0, 0x0, 0x4000})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000f, 0x11, r4, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

s too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.585697][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.611644][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.619047][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.646199][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.663672][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.671139][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.697898][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.713785][ T4188] device hsr_slave_0 entered promiscuous mode
[   64.721059][ T4188] device hsr_slave_1 entered promiscuous mode
[   64.727995][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.735642][ T4188] Cannot create hsr debugfs directory
[   64.806197][   T21] Bluetooth: hci1: command 0x0409 tx timeout
[   64.815452][ T1326] Bluetooth: hci0: command 0x0409 tx timeout
[   64.820525][   T21] Bluetooth: hci2: command 0x0409 tx timeout
[   64.828570][   T21] Bluetooth: hci3: command 0x0409 tx timeout
[   64.834945][   T21] Bluetooth: hci4: command 0x0409 tx timeout
[   64.839919][ T4197] device hsr_slave_0 entered promiscuous mode
[   64.848408][ T4197] device hsr_slave_1 entered promiscuous mode
[   64.856004][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.864080][ T4197] Cannot create hsr debugfs directory
[   64.901131][ T4194] device hsr_slave_0 entered promiscuous mode
[   64.909348][ T4194] device hsr_slave_1 entered promiscuous mode
[   64.917683][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.925975][ T4194] Cannot create hsr debugfs directory
[   65.210167][ T4196] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.221674][ T4196] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.232962][ T4196] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.246351][ T4196] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.304762][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   65.314808][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   65.332293][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   65.343117][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   65.402049][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.411333][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.422208][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.444985][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.549768][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.563489][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.583647][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.602673][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.613488][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.634783][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.653115][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   65.663431][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.672297][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   65.680502][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.697540][ T4196] 8021q: adding VLAN 0 to HW filter on device team0
[   65.708954][ T4189] 8021q: adding VLAN 0 to HW filter on device team0
[   65.719570][ T4197] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   65.730475][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.747847][ T4197] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   65.760151][ T4197] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   65.779458][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   65.789021][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   65.799323][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.807075][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.817708][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   65.825807][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.833800][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   65.843115][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   65.856232][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.863595][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.871854][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   65.881149][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   65.889723][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.897302][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.906268][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   65.914495][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   65.924142][ T4188] 8021q: adding VLAN 0 to HW filter on device team0
[   65.932246][ T4197] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   65.958680][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   65.968959][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   65.977914][ T3077] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.985226][ T3077] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.994770][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   66.003705][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   66.012893][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   66.023345][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   66.032669][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   66.042448][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   66.052287][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   66.074584][ T4196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   66.088065][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.110419][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   66.119777][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   66.128753][ T3077] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.136278][ T3077] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.147341][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   66.156200][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   66.164901][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   66.174600][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   66.183289][ T3077] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.190601][ T3077] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.199950][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   66.208824][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   66.219296][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   66.228007][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   66.238224][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   66.247564][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   66.263651][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   66.273078][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   66.332678][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   66.352559][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   66.365736][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   66.374615][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   66.384176][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   66.393797][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   66.402945][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   66.412628][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   66.421624][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   66.430497][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   66.439672][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   66.448737][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   66.457578][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   66.466361][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   66.481200][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.493105][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   66.521352][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   66.550235][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   66.588571][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   66.601885][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   66.633022][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   66.678368][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   66.686928][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   66.709241][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.738099][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.766330][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   66.777617][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   66.796913][ T4194] 8021q: adding VLAN 0 to HW filter on device team0
[   66.838351][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   66.847947][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   66.862328][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.879164][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.893760][ T2288] Bluetooth: hci1: command 0x041b tx timeout
[   66.895392][ T4235] Bluetooth: hci4: command 0x041b tx timeout
[   66.901882][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.921898][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   66.930788][ T4235] Bluetooth: hci3: command 0x041b tx timeout
[   66.931959][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   66.937279][ T4235] Bluetooth: hci2: command 0x041b tx timeout
[   66.951595][ T4235] Bluetooth: hci0: command 0x041b tx timeout
[   66.952201][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.965080][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.007271][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.014459][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   67.023185][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   67.033172][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   67.042474][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   67.051468][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   67.059819][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   67.069824][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   67.078898][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.086131][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.103521][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   67.113132][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.128694][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.147407][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.158444][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.167433][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   67.177218][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.186780][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   67.196849][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   67.206900][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.216202][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.228180][ T4188] device veth0_vlan entered promiscuous mode
[   67.240727][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   67.249583][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   67.262210][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   67.272167][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   67.282860][ T4196] device veth0_vlan entered promiscuous mode
[   67.301916][ T4196] device veth1_vlan entered promiscuous mode
[   67.311882][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   67.329170][ T4188] device veth1_vlan entered promiscuous mode
[   67.340018][ T4197] 8021q: adding VLAN 0 to HW filter on device team0
[   67.351465][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   67.360975][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   67.415518][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   67.424515][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   67.434268][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   67.442874][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.452547][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   67.461864][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   67.472104][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.480165][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.489049][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   67.498968][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   67.507708][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.515103][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.523857][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   67.534697][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.542847][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.551384][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   67.567175][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   67.578631][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.602418][ T4196] device veth0_macvtap entered promiscuous mode
[   67.618875][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   67.627946][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   67.638222][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   67.647755][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   67.656420][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.664885][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.674324][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   67.683802][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   67.692572][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.701443][ T4189] device veth0_vlan entered promiscuous mode
[   67.722109][ T4196] device veth1_macvtap entered promiscuous mode
[   67.744985][ T4188] device veth0_macvtap entered promiscuous mode
[   67.770558][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.780668][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   67.796623][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   67.808485][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.822345][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.842253][ T4189] device veth1_vlan entered promiscuous mode
[   67.852847][ T4188] device veth1_macvtap entered promiscuous mode
[   67.860632][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   67.870554][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   67.879813][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.888875][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.898161][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   67.908616][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   67.917785][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   67.926785][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   67.948070][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.960418][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   67.976528][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   67.988763][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   67.998138][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   68.011222][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.038354][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.046870][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.056738][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.066481][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   68.074077][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   68.083586][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   68.093550][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.111299][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.122389][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.135596][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.144257][ T4189] device veth0_macvtap entered promiscuous mode
[   68.154981][ T4189] device veth1_macvtap entered promiscuous mode
[   68.192713][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   68.202454][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   68.213221][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.223490][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.234827][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.257660][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.268878][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.302214][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.314894][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.329372][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.340073][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.349108][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.358920][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.367907][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.379047][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   68.388731][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   68.397599][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.417635][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.429176][ T4196] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.438225][ T4196] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.447887][ T4196] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.457359][ T4196] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.485573][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.496527][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.507199][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.518154][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.529505][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.540733][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   68.548578][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   68.556597][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.566310][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.577987][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   68.586655][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   68.600310][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.625982][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.638964][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.650945][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.661822][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.674133][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.684407][ T4194] device veth0_vlan entered promiscuous mode
[   68.692345][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   68.701906][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   68.710604][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.720920][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.740947][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.752281][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.762895][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.772071][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.810217][ T4194] device veth1_vlan entered promiscuous mode
[   68.962230][ T3077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.976039][ T3077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.976392][ T4237] Bluetooth: hci0: command 0x040f tx timeout
[   69.003177][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   69.011751][ T4237] Bluetooth: hci2: command 0x040f tx timeout
[   69.018567][ T4237] Bluetooth: hci3: command 0x040f tx timeout
[   69.025836][ T4237] Bluetooth: hci4: command 0x040f tx timeout
[   69.032472][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   69.032734][ T4237] Bluetooth: hci1: command 0x040f tx timeout
[   69.048886][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.062509][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   69.073330][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   69.092050][ T4194] device veth0_macvtap entered promiscuous mode
[   69.121537][ T4194] device veth1_macvtap entered promiscuous mode
[   69.128185][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.137986][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.161724][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.166343][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   69.170100][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.182878][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   69.193609][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.204072][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.227789][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.243749][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.254073][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.266299][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.276791][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.288321][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.300751][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.329334][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.342304][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   69.351753][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   69.362119][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   69.374827][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.389713][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.399954][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.411372][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.421767][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.432893][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.444159][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.472390][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   69.481988][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.493098][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.494909][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.511425][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.513952][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.529702][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.539106][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.552107][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.560895][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.573802][ T4197] device veth0_vlan entered promiscuous mode
[   69.587963][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.597858][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.607984][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   69.616767][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   69.630263][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   69.638736][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   69.661701][ T4197] device veth1_vlan entered promiscuous mode
[   69.674012][ T3077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.690170][ T3077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.720038][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   69.729146][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   69.739136][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.792411][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   69.814116][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   69.827309][ T4197] device veth0_macvtap entered promiscuous mode
[   69.844873][ T4197] device veth1_macvtap entered promiscuous mode
[   69.865624][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.873593][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.944804][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   69.978029][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   69.993285][ T4268] FAULT_INJECTION: forcing a failure.
[   69.993285][ T4268] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   70.006169][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.039792][ T4268] CPU: 0 PID: 4268 Comm: syz.1.2 Not tainted syzkaller #0
[   70.044508][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.046997][ T4268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   70.047029][ T4268] Call Trace:
[   70.047039][ T4268]  <TASK>
[   70.047048][ T4268]  dump_stack_lvl+0x188/0x250
[   70.047081][ T4268]  ? show_regs_print_info+0x20/0x20
[   70.047103][ T4268]  ? load_image+0x410/0x410
[   70.047128][ T4268]  ? __lock_acquire+0x7b50/0x7b50
[   70.047153][ T4268]  should_fail+0x383/0x4b0
[   70.047177][ T4268]  _copy_to_user+0x2e/0x130
[   70.047209][ T4268]  simple_read_from_buffer+0xe3/0x150
[   70.047237][ T4268]  proc_fail_nth_read+0x1a6/0x220
[   70.047263][ T4268]  ? proc_fault_inject_write+0x310/0x310
[   70.047289][ T4268]  ? fsnotify_perm+0x254/0x560
[   70.069294][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.071622][ T4268]  ? proc_fault_inject_write+0x310/0x310
[   70.071655][ T4268]  vfs_read+0x2ff/0xd50
[   70.078378][ T4273] FAULT_INJECTION: forcing a failure.
[   70.078378][ T4273] name failslab, interval 1, probability 0, space 0, times 1
[   70.079649][ T4268]  ? __lock_acquire+0x7b50/0x7b50
[   70.079683][ T4268]  ? kernel_read+0x1e0/0x1e0
[   70.086522][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.089412][ T4268]  ? mutex_lock_nested+0x17/0x20
[   70.089440][ T4268]  ? __fdget_pos+0x2bf/0x370
[   70.089457][ T4268]  ? ksys_read+0x70/0x260
[   70.089478][ T4268]  ksys_read+0x153/0x260
[   70.089500][ T4268]  ? vfs_write+0xd70/0xd70
[   70.089523][ T4268]  ? lockdep_hardirqs_on+0x94/0x140
[   70.089548][ T4268]  do_syscall_64+0x4c/0xa0
[   70.089565][ T4268]  ? clear_bhb_loop+0x30/0x80
[   70.089584][ T4268]  ? clear_bhb_loop+0x30/0x80
[   70.089613][ T4268]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   70.089634][ T4268] RIP: 0033:0x7f070fe3c90e
[   70.089654][ T4268] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   70.089671][ T4268] RSP: 002b:00007f070e0d3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   70.089696][ T4268] RAX: ffffffffffffffda RBX: 00007f070e0d46c0 RCX: 00007f070fe3c90e
[   70.089712][ T4268] RDX: 000000000000000f RSI: 00007f070e0d40a0 RDI: 0000000000000004
[   70.089725][ T4268] RBP: 00007f070e0d4090 R08: 0000000000000000 R09: 0000000000000000
[   70.089738][ T4268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   70.089751][ T4268] R13: 00007f0710104038 R14: 00007f0710103fa0 R15: 00007ffdcea264c8
[   70.089783][ T4268]  </TASK>
[   70.141651][ T4273] CPU: 0 PID: 4273 Comm: syz.0.1 Not tainted syzkaller #0
[   70.148364][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.161419][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   70.161439][ T4273] Call Trace:
[   70.161448][ T4273]  <TASK>
[   70.161457][ T4273]  dump_stack_lvl+0x188/0x250
[   70.161489][ T4273]  ? show_regs_print_info+0x20/0x20
[   70.161511][ T4273]  ? load_image+0x410/0x410
[   70.161536][ T4273]  ? __might_sleep+0xf0/0xf0
[   70.161557][ T4273]  ? __lock_acquire+0x7b50/0x7b50
[   70.161598][ T4273]  should_fail+0x383/0x4b0
[   70.168618][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.171334][ T4273]  should_failslab+0x5/0x20
[   70.171361][ T4273]  slab_pre_alloc_hook+0x51/0xc0
[   70.182269][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.186938][ T4273]  __kmalloc+0x6b/0x340
[   70.186962][ T4273]  ? tomoyo_realpath_from_path+0xed/0x5e0
[   70.186991][ T4273]  tomoyo_realpath_from_path+0xed/0x5e0
[   70.187027][ T4273]  tomoyo_path_number_perm+0x251/0x6b0
[   70.187050][ T4273]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[   70.187071][ T4273]  ? ksys_write+0x1d4/0x260
[   70.193577][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.196326][ T4273]  security_file_ioctl+0x6c/0xa0
[   70.196358][ T4273]  __se_sys_ioctl+0x48/0x170
[   70.196381][ T4273]  do_syscall_64+0x4c/0xa0
[   70.201352][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.205461][ T4273]  ? clear_bhb_loop+0x30/0x80
[   70.205484][ T4273]  ? clear_bhb_loop+0x30/0x80
[   70.205506][ T4273]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   70.205526][ T4273] RIP: 0033:0x7ff7e75be0d9
[   70.205546][ T4273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   70.205562][ T4273] RSP: 002b:00007ff7e57f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   70.205586][ T4273] RAX: ffffffffffffffda RBX: 00007ff7e7846090 RCX: 00007ff7e75be0d9
[   70.212839][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.215761][ T4273] RDX: 00002000000001c0 RSI: 00000000c0844123 RDI: 0000000000000006
[   70.215780][ T4273] RBP: 00007ff7e57f5090 R08: 0000000000000000 R09: 0000000000000000
[   70.215792][ T4273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   70.215804][ T4273] R13: 00007ff7e7846128 R14: 00007ff7e7846090 R15: 00007ffdeddec1e8
[   70.215835][ T4273]  </TASK>
[   70.247466][ T4273] ERROR: Out of memory at tomoyo_realpath_from_path.
[   70.307492][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.438263][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   70.458094][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.493164][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   70.630579][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   70.651672][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.663450][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.677911][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.689183][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.700326][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.712804][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.723457][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.746657][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.766817][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.813939][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   70.842125][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   70.888344][ T4197] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.897764][ T4278] loop1: detected capacity change from 0 to 32768
[   70.930575][ T4197] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.943640][ T4197] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.955897][ T4197] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.962311][ T4285] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   71.046218][   T13] Bluetooth: hci4: command 0x0419 tx timeout
[   71.052608][   T13] Bluetooth: hci3: command 0x0419 tx timeout
[   71.060405][ T4285] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8'.
[   71.073326][   T13] Bluetooth: hci2: command 0x0419 tx timeout
[   71.103384][ T4278] JBD2: Ignoring recovery information on journal
[   71.126785][   T13] Bluetooth: hci0: command 0x0419 tx timeout
[   71.140102][ T4237] Bluetooth: hci1: command 0x0419 tx timeout
[   71.191968][ T4278] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   71.439420][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.483840][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.507429][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   71.565789][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.574990][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.588169][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.609271][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[   71.617273][ T1433] ieee802154 phy1 wpan1: encryption failed: -22
[   71.645657][   T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   71.700486][ T4286] loop2: detected capacity change from 0 to 32768
[   71.762389][ T4286] XFS (loop2): Mounting V5 Filesystem
[   71.764462][ T4304] jffs2: notice: (4304) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   71.820464][ T4286] XFS (loop2): Ending clean mount
[   71.843319][ T4286] XFS (loop2): Quotacheck needed: Please wait.
[   71.885390][   T23] usb 2-1: Using ep0 maxpacket: 8
[   71.930647][ T4310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10'.
[   71.941285][ T4310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10'.
[   71.996078][ T4286] XFS (loop2): Quotacheck: Done.
[   72.005937][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11
[   72.030048][   T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   72.071366][   T23] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[   72.096206][ T4314] binder: BINDER_SET_CONTEXT_MGR already set
[   72.102595][ T4314] binder: 4311:4314 ioctl 4018620d 200000001000 returned -16
[   72.110693][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.145891][   T23] usb 2-1: config 0 descriptor??
[   72.161195][ T4312] process 'syz.0.11' launched '/dev/fd/5' with NULL argv: empty string added
[   72.532764][   T26] audit: type=1800 audit(1786849565.572:2): pid=4320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4430 res=0 errno=0
[   72.618975][ T4278] udc-core: couldn't find an available UDC or it's busy
[   72.633258][ T4278] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   72.672588][ T4318] loop0: detected capacity change from 0 to 32768
[   72.676125][   T23] uclogic 0003:28BD:0071.0001: interface is invalid, ignoring
[   72.697563][ T4318] =======================================================
[   72.697563][ T4318] WARNING: The mand mount option has been deprecated and
[   72.697563][ T4318]          and is ignored by this kernel. Remove the mand
[   72.697563][ T4318]          option from the mount to silence this warning.
[   72.697563][ T4318] =======================================================
[   72.764126][ T4318] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[   72.780426][ T4318] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   73.012655][ T4319] xfs: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaablkio.bfq.group_wait_time'
[   73.647716][ T4318] syz.0.12 (4318) used greatest stack depth: 18304 bytes left
[   73.743155][ T4341] loop4: detected capacity change from 0 to 164
[   73.804770][ T4341] rock: directory entry would overflow storage
[   73.812004][ T4341] rock: sig=0x4543, size=28, remaining=18
[   74.565066][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   74.585055][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   74.595042][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!!
[   74.615056][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   74.625059][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   74.635055][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   74.645049][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   74.655048][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   74.665047][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   74.675059][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   76.067251][ T4196] ocfs2: Unmounting device (7,0) on (node local)
[   76.155175][ T4263] usb 2-1: USB disconnect, device number 2
[   76.200748][ T4194] XFS (loop2): Unmounting Filesystem
[   76.278459][ T4188] ocfs2: Unmounting device (7,1) on (node local)
[   76.630448][ T4356] loop0: detected capacity change from 0 to 2048
[   76.700306][ T4359] loop4: detected capacity change from 0 to 512
[   76.765662][ T4356] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   76.823694][ T4356] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   76.870744][ T4359] EXT4-fs (loop4): 1 truncate cleaned up
[   76.910160][ T4359] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none.
[   77.807422][ T4365] Cannot find add_set index 3 as target
[   79.148261][ T4361] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set
[   79.148944][ T4359] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.26: bg 0: block 465: padding at end of block bitmap is not set
[   79.297305][ T4361] EXT4-fs (loop4): Remounting filesystem read-only
[   79.325277][ T4359] EXT4-fs (loop4): Remounting filesystem read-only
[   79.521420][ T4374] loop0: detected capacity change from 0 to 8
[   79.548907][ T4372] using random self ethernet address
[   79.579341][ T4372] using random host ethernet address
[   79.842660][ T4380] kernel profiling enabled (shift: 9)
[   80.042693][ T4388] loop3: detected capacity change from 0 to 512
[   80.183429][ T4392] loop0: detected capacity change from 0 to 2048
[   80.243813][ T4388] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   80.296735][ T4388] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   80.368279][ T4392] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   80.395384][ T4392] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   80.425148][   T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   80.444958][ T4388] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz.3.34: Directory block failed checksum
[   80.559092][ T4400] ODEBUG: Out of memory. ODEBUG disabled
[   80.899495][ T4405] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.37: bg 0: block 345: padding at end of block bitmap is not set
[   80.955205][   T21] usb 5-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   80.984920][   T21] usb 5-1: config 1 interface 0 has no altsetting 0
[   81.165274][ T4405] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117
[   81.285937][   T21] usb 5-1: string descriptor 0 read error: -22
[   81.295124][   T21] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.40
[   81.345245][   T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.406387][ T4405] EXT4-fs (loop0): This should not happen!! Data will be lost
[   81.406387][ T4405] 
[   81.735238][   T21] usbhid 5-1:1.0: can't add hid device: -71
[   81.744515][   T21] usbhid: probe of 5-1:1.0 failed with error -71
[   81.760404][   T21] usb 5-1: USB disconnect, device number 2
[   82.077184][   T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   82.244090][ T4439] loop3: detected capacity change from 0 to 16
[   82.303361][ T4439] erofs: (device loop3): mounted with root inode @ nid 36.
[   82.325434][   T23] usb 3-1: Using ep0 maxpacket: 16
[   83.735374][   T23] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.809149][   T23] usb 3-1: config 0 interface 0 has no altsetting 0
[   83.855141][   T23] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[   83.895135][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.001683][   T23] usb 3-1: config 0 descriptor??
[   84.098642][ T4458] ip_tables: iptables: counters copy to user failed while replacing table
[   84.617041][   T23] hid-generic 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0
[   84.944350][ T4455] loop3: detected capacity change from 0 to 4096
[   85.081560][ T4455] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[   85.100537][ T4455] ntfs3: loop3: Failed to load $Extend.
[   85.100576][ T4469] loop1: detected capacity change from 0 to 1024
[   85.140860][ T4469] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[   85.192948][ T4469] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[   85.247554][ T4469] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   85.316205][ T4469] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[   85.329809][ T4266] usb 3-1: USB disconnect, device number 2
[   85.334922][ T4469] System zones: 0-1, 3-36
[   85.367823][ T4469] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[   85.420515][ T4469] capability: warning: `syz.1.61' uses deprecated v2 capabilities in a way that may be insecure
[   86.210431][ T4482] loop4: detected capacity change from 0 to 1024
[   86.944469][ T4482] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #3: block 1: comm syz.4.56: lblock 1 mapped to illegal pblock 1 (length 1)
[   86.959967][ T4482] Quota error (device loop4): write_blk: dquota write failed
[   86.967777][ T4482] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[   86.977969][ T4482] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.56: Failed to acquire dquot type 0
[   86.992094][ T1107] cfg80211: failed to load regulatory.db
[   87.035106][    T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   87.043171][ T4482] EXT4-fs error (device loop4): ext4_free_blocks:6231: comm syz.4.56: Freeing blocks not in datazone - block = 0, count = 4096
[   87.065889][ T4482] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.56: Invalid inode bitmap blk 0 in block_group 0
[   87.080269][ T4482] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem
[   87.090575][ T4482] EXT4-fs (loop4): 1 orphan inode deleted
[   87.096407][ T4482] EXT4-fs (loop4): mounted filesystem without journal. Opts: €�; nodioread_nolock,nodelalloc,data_err=ignore,max_batch_time=0x0000000000000009,nodiscard,init_itable=0x0000000000000001,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[   87.222680][ T4295] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1)
[   87.296547][ T4295] Quota error (device loop4): remove_tree: Can't read quota data block 1
[   87.356761][ T4295] EXT4-fs error (device loop4): ext4_release_dquot:6272: comm kworker/u4:6: Failed to release dquot type 0
[   87.369662][    T7] usb 1-1: Using ep0 maxpacket: 16
[   87.525294][    T7] usb 1-1: config 32 has an invalid interface number: 64 but max is 0
[   87.552828][ T4499] loop1: detected capacity change from 0 to 16
[   87.553352][    T7] usb 1-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config
[   87.603369][    T7] usb 1-1: config 32 has no interface number 0
[   87.629689][    T7] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b
[   87.644853][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.649880][ T4503] loop3: detected capacity change from 0 to 256
[   87.660166][ T4499] erofs: (device loop1): mounted with root inode @ nid 36.
[   87.777520][    T7] usb 1-1: Found UVC 0.00 device <unnamed> (0bd3:0569)
[   87.784907][    T7] usb 1-1: No valid video chain found.
[   87.870435][ T4503] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[   88.010055][ T4237] usb 1-1: USB disconnect, device number 2
[   89.369256][ T4511] loop3: detected capacity change from 0 to 1024
[   89.390241][ T4512] loop1: detected capacity change from 0 to 2048
[   89.626115][ T4512] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,,errors=continue. Quota mode: none.
[   89.676216][ T4511] hfsplus: walked past end of dir
[   89.682018][ T4512] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.803188][ T4512] fs-verity: sha512 using implementation "sha512-avx2"
[   91.951326][ T4535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'.
[   91.960299][ T4535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'.
[   91.970479][ T4535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'.
[   91.983613][ T4535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'.
[   91.993019][ T4535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'.
[   92.005318][ T4535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'.
[   92.014189][ T4535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'.
[   92.026303][ T4535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'.
[   92.035370][ T4535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'.
[   92.046360][ T4535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'.
[   92.068095][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   92.087620][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   92.097307][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   92.984610][ T4538] loop4: detected capacity change from 0 to 128
[   93.029671][ T4538] FAT-fs (loop4): Unrecognized mount option "184467440737095516150x000000000000000000000000000000000000" or missing value
[   97.212991][ T4555] loop4: detected capacity change from 0 to 512
[   98.579019][ T4559] loop0: detected capacity change from 0 to 164
[  100.138844][ T4196] iso9660: Corrupted directory entry in block 2 of inode 1920
[  100.966547][ T4590] loop4: detected capacity change from 0 to 512
[  101.255438][ T4590] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  101.275938][ T4590] EXT4-fs (loop4): inline encryption not supported
[  101.630643][ T4590] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  101.680319][ T4196] ISOFS: unable to read i-node block
[  101.725793][ T4196] ISOFS: unable to read i-node block
[  103.100310][ T4590] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  103.277904][ T4590] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.89: bg 0: block 248: padding at end of block bitmap is not set
[  103.375482][ T4590] Quota error (device loop4): write_blk: dquota write failed
[  103.414279][ T4590] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  103.465584][ T4590] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.89: Failed to acquire dquot type 1
[  103.595325][ T4590] EXT4-fs (loop4): 1 truncate cleaned up
[  103.621713][ T4590] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,inlinecrypt,grpquota,,errors=continue. Quota mode: writeback.
[  103.722454][   T26] audit: type=1326 audit(1786849596.762:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4622 comm="syz.2.105" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c5675c0d9 code=0x7ffc0000
[  103.825060][   T26] audit: type=1326 audit(1786849596.772:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4622 comm="syz.2.105" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9c5675c0d9 code=0x7ffc0000
[  103.865528][   T26] audit: type=1326 audit(1786849596.772:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4622 comm="syz.2.105" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c5675c0d9 code=0x7ffc0000
[  103.914254][   T26] audit: type=1326 audit(1786849596.772:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4622 comm="syz.2.105" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f9c5675c0d9 code=0x7ffc0000
[  104.075063][   T26] audit: type=1326 audit(1786849596.772:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4622 comm="syz.2.105" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c5675c0d9 code=0x7ffc0000
[  104.106165][ T4205] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  104.116750][ T4205] CPU: 1 PID: 4205 Comm: kworker/u5:8 Not tainted syzkaller #0
[  104.124604][ T4205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  104.135265][ T4205] Workqueue: hci3 hci_rx_work
[  104.140195][ T4205] Call Trace:
[  104.143602][ T4205]  <TASK>
[  104.147106][ T4205]  dump_stack_lvl+0x188/0x250
[  104.151903][ T4205]  ? show_regs_print_info+0x20/0x20
[  104.157137][ T4205]  ? load_image+0x410/0x410
[  104.162132][ T4205]  sysfs_create_dir_ns+0x26a/0x290
[  104.167293][ T4205]  ? sysfs_warn_dup+0xa0/0xa0
[  104.172227][ T4205]  ? kthread+0x42e/0x520
[  104.176794][ T4205]  ? do_raw_spin_unlock+0x11d/0x230
[  104.182053][ T4205]  kobject_add_internal+0x5ba/0xcd0
[  104.187287][ T4205]  kobject_add+0x160/0x230
[  104.191976][ T4205]  ? kobject_init+0x1c0/0x1c0
[  104.196792][ T4205]  ? __raw_spin_lock_init+0x41/0x100
[  104.199580][ T4410] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.202201][ T4205]  ? klist_children_get+0x50/0x50
[  104.217952][ T4205]  ? get_device_parent+0x121/0x3e0
[  104.223351][ T4205]  device_add+0x470/0x1050
[  104.227814][ T4205]  ? device_initialize+0x2a5/0x4d0
[  104.232977][ T4205]  hci_conn_add_sysfs+0xd1/0x1e0
[  104.237965][ T4205]  le_conn_complete_evt+0xc2e/0x14d0
[  104.243302][ T4205]  ? cs_le_create_conn+0x5e0/0x5e0
[  104.248494][ T4205]  ? __mutex_trylock_common+0x15c/0x260
[  104.254365][ T4205]  hci_le_meta_evt+0x285/0x3ca0
[  104.259252][ T4205]  ? hci_event_packet+0x363/0x1310
[  104.264396][ T4205]  ? __lock_acquire+0x7b50/0x7b50
[  104.269769][ T4205]  ? hci_remote_host_features_evt+0x240/0x240
[  104.275973][ T4205]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  104.281696][ T4205]  ? mark_lock+0x94/0x320
[  104.286244][ T4205]  ? mutex_unlock+0x10/0x10
[  104.290971][ T4205]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  104.297011][ T4205]  ? lock_chain_count+0x20/0x20
[  104.301905][ T4205]  ? __rwlock_init+0x140/0x140
[  104.306806][ T4205]  hci_event_packet+0xe0b/0x1310
[  104.311888][ T4205]  ? _raw_spin_unlock+0x40/0x40
[  104.316781][ T4205]  ? rcu_lock_release+0x20/0x20
[  104.321680][ T4205]  ? hci_send_to_monitor+0x9c/0x4a0
[  104.327059][ T4205]  hci_rx_work+0x255/0xa10
[  104.331699][ T4205]  process_one_work+0x867/0xff0
[  104.336606][ T4205]  ? worker_detach_from_pool+0x240/0x240
[  104.344994][ T4205]  ? lockdep_hardirqs_off+0x70/0x100
[  104.350345][ T4205]  ? _raw_spin_lock_irq+0xb7/0xf0
[  104.355438][ T4205]  ? _raw_spin_lock_irqsave+0x100/0x100
[  104.361022][ T4205]  ? wq_worker_running+0x97/0x170
[  104.366212][ T4205]  worker_thread+0xad7/0x12a0
[  104.371040][ T4205]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  104.376986][ T4205]  kthread+0x42e/0x520
[  104.381081][ T4205]  ? rcu_lock_release+0x20/0x20
[  104.385955][ T4205]  ? kthread_blkcg+0xd0/0xd0
[  104.390582][ T4205]  ret_from_fork+0x1f/0x30
[  104.395190][ T4205]  </TASK>
[  104.400940][ T4205] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  104.414327][ T4205] Bluetooth: hci3: failed to register connection device
[  104.581252][ T4410] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.734629][ T4410] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.818907][ T4657] loop3: detected capacity change from 0 to 256
[  104.950047][ T4410] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.868112][ T4263] Bluetooth: hci1: command 0x0409 tx timeout
[  107.019653][ T4651] chnl_net:caif_netlink_parms(): no params data found
[  107.166996][ T4678] loop3: detected capacity change from 0 to 512
[  107.187624][ T4679] loop2: detected capacity change from 0 to 128
[  107.219842][ T4678] EXT4-fs (loop3): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  108.065067][ T4679] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  108.573553][ T4651] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.585160][ T4651] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.624109][ T4651] device bridge_slave_0 entered promiscuous mode
[  108.690608][ T4651] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.552294][ T1107] Bluetooth: hci1: command 0x041b tx timeout
[  109.685141][ T4651] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.693209][ T4651] device bridge_slave_1 entered promiscuous mode
[  109.792684][ T4651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.855162][ T4651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.951649][ T4651] team0: Port device team_slave_0 added
[  109.997769][ T4651] team0: Port device team_slave_1 added
[  110.084045][ T4651] batman_adv: batadv0: Adding interface: batadv_slave_0
[  110.174151][ T4651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.262354][ T4713] loop4: detected capacity change from 0 to 1024
[  110.312509][ T4651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  110.342971][ T4713] hfsplus: invalid length 32517 has been corrected to 255
[  110.453445][ T4651] batman_adv: batadv0: Adding interface: batadv_slave_1
[  110.462309][   T26] audit: type=1800 audit(1786849603.502:8): pid=4713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.129" name="file1" dev="loop4" ino=20 res=0 errno=0
[  110.467020][ T4651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.525072][   T26] audit: type=1326 audit(1786849603.552:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.3.125" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f8b43fce52c code=0x7ffc0000
[  110.566472][ T4688] hfsplus: b-tree write err: -5, ino 20
[  110.566896][   T26] audit: type=1326 audit(1786849603.552:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.3.125" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8b43fce58e code=0x7ffc0000
[  110.611072][   T26] audit: type=1326 audit(1786849603.552:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.3.125" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8b44011d6b code=0x7ffc0000
[  110.625038][ T4651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  110.735463][   T26] audit: type=1326 audit(1786849603.552:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.3.125" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f8b440120d9 code=0x7ffc0000
[  110.817293][   T26] audit: type=1326 audit(1786849603.552:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.3.125" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b440120d9 code=0x7ffc0000
[  110.892367][ T4651] device hsr_slave_0 entered promiscuous mode
[  110.904738][ T4726] loop2: detected capacity change from 0 to 2048
[  110.911806][   T26] audit: type=1326 audit(1786849603.552:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.3.125" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b440120d9 code=0x7ffc0000
[  110.936495][   T26] audit: type=1326 audit(1786849603.572:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.3.125" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b440120d9 code=0x7ffc0000
[  110.939442][ T4651] device hsr_slave_1 entered promiscuous mode
[  110.961278][   T26] audit: type=1326 audit(1786849603.572:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.3.125" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b440120d9 code=0x7ffc0000
[  110.961320][   T26] audit: type=1326 audit(1786849603.572:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.3.125" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b440120d9 code=0x7ffc0000
[  111.006519][ T4729] loop3: detected capacity change from 0 to 256
[  111.024246][ T4651] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  111.033522][ T4651] Cannot create hsr debugfs directory
[  111.065754][ T4726] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  111.372684][ T4736] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  111.429757][ T4694] chnl_net:caif_netlink_parms(): no params data found
[  111.444125][ T4737] loop3: detected capacity change from 0 to 256
[  111.480964][ T4737] exfat: Bad value for 'uid'
[  111.605746][ T4266] Bluetooth: hci1: command 0x040f tx timeout
[  111.612288][ T4266] Bluetooth: hci3: command 0x0406 tx timeout
[  111.685942][ T4266] Bluetooth: hci2: command 0x0409 tx timeout
[  113.109845][ T4753] loop3: detected capacity change from 0 to 512
[  113.182674][ T4410] device hsr_slave_0 left promiscuous mode
[  113.213974][ T4753] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  113.240931][ T4410] device hsr_slave_1 left promiscuous mode
[  113.265807][ T4410] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.315197][ T4410] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.350706][ T4410] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.365547][ T4410] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.416553][ T4410] device bridge_slave_1 left promiscuous mode
[  113.426850][ T4410] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.490279][ T4410] device bridge_slave_0 left promiscuous mode
[  113.505282][ T4410] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.626280][ T4410] device veth1_macvtap left promiscuous mode
[  113.635656][ T4410] device veth0_macvtap left promiscuous mode
[  113.641981][ T4410] device veth1_vlan left promiscuous mode
[  113.666862][ T4410] device veth0_vlan left promiscuous mode
[  113.685467][ T1107] Bluetooth: hci1: command 0x0419 tx timeout
[  114.907033][ T1107] Bluetooth: hci2: command 0x041b tx timeout
[  115.075437][ T4235] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  115.205130][    T7] usb 4-1: new low-speed USB device number 2 using dummy_hcd
[  115.350876][ T4410] team0 (unregistering): Port device team_slave_1 removed
[  115.364078][ T4410] team0 (unregistering): Port device team_slave_0 removed
[  115.365087][ T4235] usb 3-1: Using ep0 maxpacket: 16
[  115.381553][ T4410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  115.396075][ T4410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  115.435288][   T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  115.463202][ T4410] bond0 (unregistering): Released all slaves
[  115.542278][ T4694] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.550368][ T4235] usb 3-1: unable to get BOS descriptor or descriptor too short
[  115.555144][ T4694] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.567143][ T4694] device bridge_slave_0 entered promiscuous mode
[  115.604829][    T7] usb 4-1: config 1 has an invalid interface number: 172 but max is 0
[  115.608747][ T4694] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.625465][    T7] usb 4-1: config 1 has no interface number 0
[  115.625760][ T4694] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.631718][    T7] usb 4-1: config 1 interface 172 has no altsetting 0
[  115.647949][ T4694] device bridge_slave_1 entered promiscuous mode
[  115.656772][ T4235] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  115.674863][ T4694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  115.694829][ T4235] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  115.695248][   T21] usb 5-1: Using ep0 maxpacket: 32
[  115.710589][ T4694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.715460][ T4235] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  115.765627][ T1107] Bluetooth: hci1: command 0x0406 tx timeout
[  115.799201][ T4694] team0: Port device team_slave_0 added
[  115.806992][ T4651] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  115.839546][ T4694] team0: Port device team_slave_1 added
[  115.861818][ T4651] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  115.895318][   T21] usb 5-1: unable to get BOS descriptor or descriptor too short
[  115.905346][    T7] usb 4-1: string descriptor 0 read error: -22
[  115.907003][ T4651] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  115.911916][ T4235] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  115.931880][ T4694] batman_adv: batadv0: Adding interface: batadv_slave_0
[  115.935098][    T7] usb 4-1: New USB device found, idVendor=0421, idProduct=01f5, bcdDevice=57.a1
[  115.950332][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.950411][ T4694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.958692][    T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.959693][ T4235] usb 3-1: Product: syz
[  115.997440][ T4694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  116.013406][ T4235] usb 3-1: Manufacturer: syz
[  116.020242][   T21] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  116.034718][   T21] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  116.038712][ T4235] usb 3-1: SerialNumber: syz
[  116.046194][ T4651] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  116.081822][    T7] usb 4-1: bad CDC descriptors
[  116.082931][ T4694] batman_adv: batadv0: Adding interface: batadv_slave_1
[  116.090986][    T7] usb 4-1: bad CDC descriptors
[  116.104418][    T7] cdc_acm 4-1:1.172: Zero length descriptor references
[  116.107675][ T4694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.115374][    T7] cdc_acm: probe of 4-1:1.172 failed with error -22
[  116.186326][ T4694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  116.235652][   T21] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  116.262302][   T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.264631][ T4237] usb 4-1: USB disconnect, device number 2
[  116.281525][   T21] usb 5-1: Product: syz
[  116.287726][ T4694] device hsr_slave_0 entered promiscuous mode
[  116.295965][   T21] usb 5-1: Manufacturer: syz
[  116.305331][   T21] usb 5-1: SerialNumber: syz
[  116.315831][ T4694] device hsr_slave_1 entered promiscuous mode
[  116.326547][ T4694] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  116.334325][ T4694] Cannot create hsr debugfs directory
[  116.410313][ T4235] usb 3-1: Audio class v2/v3 interfaces need an interface association
[  116.436816][ T4235] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[  116.448531][ T4235] usb 3-1: 1:2 : does not exist
[  116.547270][ T4235] usb 3-1: USB disconnect, device number 3
[  116.553070][ T4651] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.609086][ T4262] udevd[4262]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  116.655416][   T21] usb 5-1: unit 0 not found!
[  116.682060][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  116.699143][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  116.716325][   T21] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  116.737345][ T4651] 8021q: adding VLAN 0 to HW filter on device team0
[  116.845572][   T21] usb 5-1: unit 0 not found!
[  116.851058][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  116.864191][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  116.905561][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.913436][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.968219][   T23] Bluetooth: hci2: command 0x040f tx timeout
[  117.033576][   T21] snd-usb-audio: probe of 5-1:1.1 failed with error -22
[  117.050531][ T4694] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.058734][   T21] usb 5-1: USB disconnect, device number 3
[  118.088646][ T4792] udevd[4792]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  118.095223][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  118.128131][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  118.165655][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  118.205347][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.212557][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.242888][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  118.277033][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  118.321000][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  118.377281][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  118.414164][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  118.448221][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  118.477712][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  118.538047][ T4694] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.590677][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  118.629572][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  118.676825][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  118.715607][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  118.727326][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  118.780325][ T4694] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.045616][ T1107] Bluetooth: hci2: command 0x0419 tx timeout
[  119.110657][ T4694] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.677340][ T4694] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  120.687351][ T4694] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  120.752784][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  120.765760][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  120.782726][ T4694] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  120.787061][ T4824] loop3: detected capacity change from 0 to 8
[  120.809425][ T4694] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  120.842291][ T4651] 8021q: adding VLAN 0 to HW filter on device batadv0
[  120.907301][ T4824] SQUASHFS error: lzo decompression failed, data probably corrupt
[  120.959973][ T4824] SQUASHFS error: Failed to read block 0x91: -5
[  121.012492][ T4824] SQUASHFS error: Unable to read metadata cache entry [8f]
[  121.035225][ T4824] SQUASHFS error: Unable to read inode 0x11f
[  121.124614][ T4694] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.486595][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  122.496050][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  122.542023][ T4694] 8021q: adding VLAN 0 to HW filter on device team0
[  122.587884][ T4834] binder: BINDER_SET_CONTEXT_MGR already set
[  122.593928][ T4834] binder: 4833:4834 ioctl 4018620d 200000000040 returned -16
[  122.595824][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  122.616231][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  122.645629][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.652876][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.695545][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  122.734785][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  122.785234][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  122.824322][ T4688] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.831515][ T4688] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.880970][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  122.952821][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  122.994307][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  123.037441][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  123.092349][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  123.116600][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  123.151897][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  123.161029][ T4848] __nla_validate_parse: 135 callbacks suppressed
[  123.161048][ T4848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.145'.
[  123.193881][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  123.208353][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  123.226983][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  123.255965][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  123.346606][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  123.395869][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  123.417685][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  123.453285][ T4651] device veth0_vlan entered promiscuous mode
[  124.733032][ T4860] smpboot: CPU 1 is now offline
[  124.749424][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  124.873406][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  124.941355][ T4651] device veth1_vlan entered promiscuous mode
[  124.996088][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  125.044660][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  125.211588][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  125.260734][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  125.316386][ T4651] device veth0_macvtap entered promiscuous mode
[  125.351186][ T4870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.147'.
[  125.395610][ T4651] device veth1_macvtap entered promiscuous mode
[  125.467638][ T4694] 8021q: adding VLAN 0 to HW filter on device batadv0
[  125.522522][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  125.581897][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  126.634996][    C0] sched: RT throttling activated
[  127.581098][ T4880] loop3: detected capacity change from 0 to 128
[  127.634811][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  127.679220][ T4880] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  127.695455][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  127.712662][ T4651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.781286][ T4880] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  127.791204][ T4651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.873547][ T4651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.166249][ T4651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.215077][ T4651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.281586][ T4651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.349274][ T4651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.408155][ T4651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.486100][ T4651] batman_adv: batadv0: Interface activated: batadv_slave_0
[  129.542578][ T4896] loop4: detected capacity change from 0 to 512
[  129.576949][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  129.597327][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  129.640733][ T4896] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  129.789471][ T4651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.835488][ T4896] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  129.855306][ T4651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.891384][ T4651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.921870][ T4896] EXT4-fs (loop4): 1 truncate cleaned up
[  129.939279][ T4651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.949922][ T4896] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,nogrpid,mb_optimize_scan=0x0000000000000001,errors=remount-ro,dioread_lock,. Quota mode: none.
[  129.991244][ T4651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.055099][ T4651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.124809][ T4651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.153683][ T4896] using random self ethernet address
[  130.163376][ T4651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.185566][ T4896] using random host ethernet address
[  130.217549][ T4651] batman_adv: batadv0: Interface activated: batadv_slave_1
[  130.289649][ T4197] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /33/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  130.321638][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  130.346241][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  130.366111][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  130.387461][ T4197] EXT4-fs (loop4): Remounting filesystem read-only
[  130.403591][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  130.423050][ T4197] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  130.455676][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  130.493289][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  130.520231][ T4694] device veth0_vlan entered promiscuous mode
[  130.530930][ T4197] EXT4-fs (loop4): Remounting filesystem read-only
[  130.544216][ T4651] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.651935][ T4197] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /33/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  131.820952][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[  131.829645][ T1433] ieee802154 phy1 wpan1: encryption failed: -22
[  131.842528][ T4651] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.860220][ T4651] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.870054][ T4197] EXT4-fs (loop4): Remounting filesystem read-only
[  131.881375][ T4651] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.892423][ T4197] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  131.982116][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  132.020478][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  132.080887][ T4694] device veth1_vlan entered promiscuous mode
[  132.787670][ T4197] EXT4-fs (loop4): Remounting filesystem read-only
[  132.902259][ T4197] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /33/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  133.053466][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  133.085645][ T4197] EXT4-fs (loop4): Remounting filesystem read-only
[  133.092771][ T4197] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  133.135649][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  133.185375][ T4694] device veth0_macvtap entered promiscuous mode
[  133.254678][ T4694] device veth1_macvtap entered promiscuous mode
[  133.278687][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.331450][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.350287][ T4197] EXT4-fs (loop4): Remounting filesystem read-only
[  134.176608][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  134.191822][ T4197] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /33/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  134.222818][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  134.254700][ T4694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.282696][ T4197] EXT4-fs (loop4): Remounting filesystem read-only
[  134.303050][ T4694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.318268][ T4197] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  134.351133][ T4694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.382161][ T4694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.403243][ T4197] EXT4-fs (loop4): Remounting filesystem read-only
[  134.423193][ T4694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.439014][ T4197] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /33/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  134.479427][ T4694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.506867][ T4694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.527190][ T4197] EXT4-fs (loop4): Remounting filesystem read-only
[  134.543987][ T4694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.558722][ T4197] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  134.599295][ T4694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.625619][ T4694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.640016][ T4197] EXT4-fs (loop4): Remounting filesystem read-only
[  134.670407][ T4694] batman_adv: batadv0: Interface activated: batadv_slave_0
[  134.761339][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  134.800250][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  134.863179][ T4694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  134.920513][ T4694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.015027][ T4694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.063651][ T4694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.129821][ T4694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.199961][ T4694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.244261][ T4694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.309867][ T4694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.359158][ T4694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.415077][ T4694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.482329][ T4694] batman_adv: batadv0: Interface activated: batadv_slave_1
[  135.564535][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  135.573136][ T4688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.634122][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  135.644046][ T4688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.694491][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  135.735519][ T4694] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.772198][ T4694] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.825949][ T4694] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.862622][ T4694] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.102132][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.168814][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.244154][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  137.298451][ T4956] loop5: detected capacity change from 0 to 512
[  137.406896][ T4687] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.444768][ T4956] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  137.505225][ T4687] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.546334][ T4956] EXT4-fs warning (device loop5): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  137.564371][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  137.702785][ T4956] EXT4-fs (loop5): mount failed
[  137.748691][ T4685] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  138.025151][ T4685] usb 4-1: Using ep0 maxpacket: 32
[  138.058842][ T4973] loop5: detected capacity change from 0 to 512
[  138.136923][ T4973] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  138.155343][ T4685] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[  138.209832][ T4410] device hsr_slave_0 left promiscuous mode
[  138.227860][ T4973] EXT4-fs (loop5): 1 truncate cleaned up
[  138.244176][ T4410] device hsr_slave_1 left promiscuous mode
[  138.262451][ T4973] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none.
[  138.297384][ T4410] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.333084][ T4410] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.363471][ T4410] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  138.371422][ T4685] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5
[  138.401990][ T4685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.424489][ T4410] batman_adv: batadv0: Removing interface: batadv_slave_1
[  138.483338][ T4685] usb 4-1: Product: syz
[  138.506540][ T4685] usb 4-1: Manufacturer: syz
[  138.531964][ T4651] EXT4-fs error (device loop5): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 46 (inode size 256)
[  138.547825][ T4685] usb 4-1: SerialNumber: syz
[  138.589593][ T4685] usb 4-1: config 0 descriptor??
[  138.651772][ T4410] device bridge_slave_1 left promiscuous mode
[  138.665295][ T4959] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  138.691188][ T4651] EXT4-fs (loop5): Remounting filesystem read-only
[  138.708018][ T4410] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.856599][ T4651] EXT4-fs error (device loop5): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 46 (inode size 256)
[  139.725440][ T4410] device bridge_slave_0 left promiscuous mode
[  139.731685][ T4410] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.876025][ T4651] EXT4-fs (loop5): Remounting filesystem read-only
[  139.891450][ T4410] device veth1_macvtap left promiscuous mode
[  139.922049][ T4996] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  139.942123][ T1326] Bluetooth: hci4: command 0x0409 tx timeout
[  139.972455][ T4410] device veth0_macvtap left promiscuous mode
[  140.012948][ T4410] device veth1_vlan left promiscuous mode
[  140.043269][ T4410] device veth0_vlan left promiscuous mode
[  140.216674][ T1326] usb 4-1: USB disconnect, device number 3
[  140.810621][ T4410] team0 (unregistering): Port device team_slave_1 removed
[  140.862947][ T4410] team0 (unregistering): Port device team_slave_0 removed
[  140.919482][ T4410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  140.976642][ T4410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  141.864519][ T5001] netlink: 308 bytes leftover after parsing attributes in process `syz.3.181'.
[  142.005775][ T1326] Bluetooth: hci4: command 0x041b tx timeout
[  142.029641][ T4410] bond0 (unregistering): Released all slaves
[  142.514872][ T5010] loop1: detected capacity change from 0 to 1024
[  142.581443][ T4968] chnl_net:caif_netlink_parms(): no params data found
[  142.729032][ T5010] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,noblock_validity,,errors=continue. Quota mode: writeback.
[  142.820936][ T5010] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.966920][   T26] kauditd_printk_skb: 58 callbacks suppressed
[  142.966932][   T26] audit: type=1800 audit(1786849636.012:76): pid=5010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.183" name="file1" dev="loop1" ino=15 res=0 errno=0
[  143.022296][ T4968] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.100071][ T4968] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.174533][ T4968] device bridge_slave_0 entered promiscuous mode
[  143.287507][ T4968] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.294685][ T4968] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.445747][ T4968] device bridge_slave_1 entered promiscuous mode
[  143.560749][ T5034] loop3: detected capacity change from 0 to 256
[  143.656111][ T4968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  143.685497][ T5033] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  143.826088][ T5033] kvm: pic: level sensitive irq not supported
[  143.832409][ T5033] kvm: pic: non byte read
[  143.849274][ T4968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  143.969618][ T5033] kvm: pic: level sensitive irq not supported
[  143.969683][ T5033] kvm: pic: non byte read
[  144.091053][ T4968] team0: Port device team_slave_0 added
[  144.099579][ T4232] Bluetooth: hci4: command 0x040f tx timeout
[  144.110539][ T5033] kvm: pic: level sensitive irq not supported
[  144.113495][ T5033] kvm: pic: non byte read
[  144.213493][ T4968] team0: Port device team_slave_1 added
[  144.234923][ T5033] kvm: pic: level sensitive irq not supported
[  144.235818][ T5033] kvm: pic: non byte read
[  144.364231][ T5033] kvm: pic: level sensitive irq not supported
[  144.364294][ T5033] kvm: pic: non byte read
[  144.447450][ T5028] chnl_net:caif_netlink_parms(): no params data found
[  144.508991][ T4968] batman_adv: batadv0: Adding interface: batadv_slave_0
[  144.558382][ T4968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.726975][ T4968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  144.800128][ T5058] device bridge1 entered promiscuous mode
[  144.844565][ T4968] batman_adv: batadv0: Adding interface: batadv_slave_1
[  145.642104][ T4232] Bluetooth: hci1: command 0x0409 tx timeout
[  145.659507][ T4968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.556389][ T1110] Bluetooth: hci4: command 0x0419 tx timeout
[  146.593263][ T4968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  146.837337][ T4968] device hsr_slave_0 entered promiscuous mode
[  146.903355][ T4968] device hsr_slave_1 entered promiscuous mode
[  146.965128][ T4968] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  146.972754][ T4968] Cannot create hsr debugfs directory
[  147.152431][ T5028] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.216763][ T5028] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.283974][ T5028] device bridge_slave_0 entered promiscuous mode
[  147.336958][ T5028] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.405231][ T5028] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.465162][ T5028] device bridge_slave_1 entered promiscuous mode
[  147.591550][ T5028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  147.699533][ T5028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  147.795602][ T1110] Bluetooth: hci1: command 0x041b tx timeout
[  148.973520][ T5028] team0: Port device team_slave_0 added
[  149.047470][ T5028] team0: Port device team_slave_1 added
[  149.173974][ T5028] batman_adv: batadv0: Adding interface: batadv_slave_0
[  149.255055][ T5028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.288912][ T4205] Bluetooth: hci0: hardware error 0x00
[  149.392938][ T5090] loop3: detected capacity change from 0 to 2048
[  149.472475][ T5090] EXT4-fs (loop3): Ignoring removed nobh option
[  149.485098][ T5028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  149.550767][ T5090] EXT4-fs (loop3): Ignoring removed nobh option
[  149.586282][ T4968] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  149.642523][ T5090] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,delalloc,barrier=0x0000000000000007,i_version,nobh,abort,,errors=continue. Quota mode: none.
[  149.666218][ T5028] batman_adv: batadv0: Adding interface: batadv_slave_1
[  149.673262][ T5028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.823395][ T5089] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.202: inline data xattr refers to an external xattr inode
[  149.885319][ T1110] Bluetooth: hci1: command 0x040f tx timeout
[  149.950725][ T4192] Bluetooth: hci0: unexpected event for opcode 0x0c03
[  149.958492][ T5028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  150.040750][ T4968] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  150.275107][ T4968] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  151.601546][ T4968] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  152.410880][ T1326] Bluetooth: hci1: command 0x0419 tx timeout
[  152.445540][ T4685] Bluetooth: hci0: command 0x1003 tx timeout
[  152.594709][ T5028] device hsr_slave_0 entered promiscuous mode
[  152.704151][ T5028] device hsr_slave_1 entered promiscuous mode
[  152.732123][ T5028] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  152.775955][ T5028] Cannot create hsr debugfs directory
[  154.208730][ T4968] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.325134][ T4685] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  154.365291][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  154.412358][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  154.463285][ T4968] 8021q: adding VLAN 0 to HW filter on device team0
[  154.485496][ T4237] Bluetooth: hci0: command 0x1001 tx timeout
[  154.507456][ T5125] loop3: detected capacity change from 0 to 512
[  154.563477][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  154.609379][ T5125] EXT4-fs (loop3): inline encryption not supported
[  154.627434][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  154.660893][ T5125] EXT4-fs (loop3): Test dummy encryption mode enabled
[  154.701434][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.709086][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.730133][ T5125] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  154.774166][ T5125] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.211: bad orphan inode 131083
[  154.785304][ T4685] usb 3-1: unable to get BOS descriptor or descriptor too short
[  154.795922][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  154.837497][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  154.852175][ T5125] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,resgid=0x0000000000000000,inlinecrypt,usrquota,discard,journal_ioprio=0x0000000000000003,min_batch_time=0x0000000000000007,test_dummy_encryption=v1,noblock_validity,,errors=continue. Quota mode: writeback.
[  154.881009][ T4685] usb 3-1: config 1 has an invalid interface number: 123 but max is 2
[  154.915117][ T4685] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  154.939425][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.946605][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.993524][ T4685] usb 3-1: config 1 has 4 interfaces, different from the descriptor's value: 3
[  155.051578][ T4685] usb 3-1: config 1 has no interface number 3
[  155.093720][ T4685] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 36, changing to 7
[  155.375252][ T4685] usb 3-1: New USB device found, idVendor=0499, idProduct=1509, bcdDevice= 0.40
[  155.399730][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  155.423474][ T5147] loop1: detected capacity change from 0 to 512
[  155.435027][ T4685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.443713][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  155.480669][ T4685] usb 3-1: Product: syz
[  155.486083][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  155.514747][ T4685] usb 3-1: Manufacturer: syz
[  155.550198][ T4685] usb 3-1: SerialNumber: syz
[  155.555529][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  155.570171][ T5147] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.207: corrupted in-inode xattr
[  155.630980][ T5149] loop3: detected capacity change from 0 to 2048
[  155.649049][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  155.659310][ T5147] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.207: couldn't read orphan inode 15 (err -117)
[  155.699203][ T5149] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  155.712655][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  155.738952][ T5147] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  155.760305][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  155.809598][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  155.893737][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  155.958705][ T4685] usb 3-1: 1:1 : sample bitwidth 62 in over sample bytes 0
[  156.005354][ T4685] usb 3-1: 1:1 : unsupported sample bitwidth 62 in 0 bytes
[  156.043519][ T4685] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  156.114093][ T4410] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.125169][ T4685] usb 3-1: failed to enable PITCH for EP 0x1
[  156.184842][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  156.211221][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  156.257938][ T4685] usb 3-1: USB disconnect, device number 4
[  156.292135][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  156.385229][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  157.177929][ T4237] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  157.191161][ T4410] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.211900][ T4249] Bluetooth: hci0: command 0x1009 tx timeout
[  157.343766][ T4410] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.458774][ T4410] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.475110][ T4237] usb 2-1: Using ep0 maxpacket: 8
[  157.595216][ T4237] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  157.685356][ T4237] usb 2-1: config 179 has no interface number 0
[  157.704393][ T5028] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  157.725044][ T4237] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  158.518083][ T4237] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  158.574321][ T4237] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  158.616127][ T4237] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  158.659934][ T4237] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  158.720309][ T4237] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  158.760974][ T4237] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.825253][ T5157] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  158.847358][ T4410] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.904494][ T5028] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  158.948955][ T4410] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.049763][   T13] usb 2-1: USB disconnect, device number 3
[  159.065020][    C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  159.073656][    C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  159.088017][ T5193] loop3: detected capacity change from 0 to 256
[  159.110361][ T4968] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.160587][ T5193] exfat: Deprecated parameter 'utf8'
[  159.171958][ T5028] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  159.216380][ T5193] exfat: Deprecated parameter 'namecase'
[  159.227186][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  159.253285][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  159.310738][ T5193] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  159.414187][ T5202] loop1: detected capacity change from 0 to 256
[  159.423368][ T4410] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.538932][ T5028] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  159.594899][ T4410] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.806362][ T5210] loop3: detected capacity change from 0 to 512
[  159.926157][ T5210] EXT4-fs (loop3): Ignoring removed oldalloc option
[  160.051134][ T5028] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.079353][ T5210] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none.
[  160.168212][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  160.176083][ T4249] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  160.232311][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  160.314565][ T5028] 8021q: adding VLAN 0 to HW filter on device team0
[  160.355127][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  160.401388][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  160.437631][ T4249] usb 2-1: Using ep0 maxpacket: 32
[  160.499935][ T4343] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.507396][ T4343] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.600115][ T4249] usb 2-1: unable to get BOS descriptor or descriptor too short
[  160.624134][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  160.642575][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  160.672092][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  160.702254][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  160.731700][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  160.761418][ T4343] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.769568][ T4343] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.824056][ T4235] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  160.894058][ T4968] device veth0_vlan entered promiscuous mode
[  160.911011][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  160.939189][ T4249] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  160.950094][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  160.975229][ T4249] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.984005][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  161.003553][ T4249] usb 2-1: Product: syz
[  161.011152][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  161.027505][ T4249] usb 2-1: Manufacturer: syz
[  161.042413][ T4249] usb 2-1: SerialNumber: syz
[  161.059325][ T4968] device veth1_vlan entered promiscuous mode
[  161.101512][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  161.122921][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  161.149701][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  161.175304][ T4235] usb 4-1: not running at top speed; connect to a high speed hub
[  161.185394][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  161.213934][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  161.234951][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  161.265926][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  161.275459][ T4235] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 65535, setting to 64
[  161.295397][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  161.332086][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  161.373349][ T5028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  161.405263][ T4249] usb 2-1: unit 0 not found!
[  161.434926][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  161.455536][ T4235] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00
[  161.464860][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.473798][ T4249] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[  161.530086][ T4235] usb 4-1: Product: syz
[  161.535301][ T4249] usb 2-1: unit 0 not found!
[  161.560604][ T4235] usb 4-1: Manufacturer: syz
[  161.570270][ T4235] usb 4-1: SerialNumber: syz
[  161.595745][ T4249] snd-usb-audio: probe of 2-1:1.1 failed with error -22
[  161.646326][ T4235] keyspan 4-1:1.0: Keyspan 4 port adapter converter detected
[  161.654159][ T4235] keyspan 4-1:1.0: unsupported endpoint type 0
[  162.445176][ T4249] usb 2-1: unit 0 not found!
[  162.486807][ T4235] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  162.559974][ T4249] snd-usb-audio: probe of 2-1:1.2 failed with error -22
[  162.571194][ T4235] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  162.635268][ T4249] usb 2-1: USB disconnect, device number 4
[  162.646700][ T4262] udevd[4262]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  162.667662][ T4235] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  162.728062][ T4235] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  162.799883][ T4235] usb 4-1: USB disconnect, device number 4
[  162.893071][ T4235] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  162.940357][ T4235] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  162.988074][ T4235] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  163.039822][ T4235] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  163.055106][ T4249] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  163.094313][ T4235] keyspan 4-1:1.0: device disconnected
[  163.186674][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  163.194851][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  163.253158][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  163.290072][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  163.418995][ T4968] device veth0_macvtap entered promiscuous mode
[  163.445353][ T4249] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.477423][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  163.512949][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  163.521913][ T4249] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  163.626050][ T5262] loop3: detected capacity change from 0 to 16
[  163.644482][ T4249] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  163.680035][ T5262] erofs: (device loop3): mounted with root inode @ nid 36.
[  163.732904][ T4249] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  163.753943][ T4249] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.775580][ T4249] usb 2-1: config 0 descriptor??
[  163.801507][ T4968] device veth1_macvtap entered promiscuous mode
[  164.598748][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  164.631073][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  164.773033][ T4968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.816654][ T4249] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[  164.889418][ T4968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.901460][ T5278] loop3: detected capacity change from 0 to 8
[  164.925539][ T4249] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  164.957827][ T4968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.997067][ T5278] SQUASHFS error: lzo decompression failed, data probably corrupt
[  165.050176][ T5278] SQUASHFS error: Failed to read block 0x144: -5
[  165.061841][ T4968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.107588][ T5278] SQUASHFS error: Unable to read metadata cache entry [142]
[  165.141805][ T4968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.162691][ T5278] SQUASHFS error: Unable to read inode 0x11f
[  165.216789][ T4968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.263853][ T4968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.313545][ T4968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.359034][ T4968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.409711][ T4968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.454020][ T4968] batman_adv: batadv0: Interface activated: batadv_slave_0
[  166.305167][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  166.313934][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  166.326504][    C0] plantronics 0003:047F:FFFF.0003: usb_submit_urb(ctrl) failed: -1
[  166.450245][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  166.505353][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  166.557795][ T4968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.632163][ T4968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.654845][ T5297] loop1: detected capacity change from 0 to 164
[  166.693599][ T4968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.779797][ T4968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.814754][ T4968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.869848][ T4968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.910431][ T4968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.967555][ T4968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.017500][ T4968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.065714][ T4968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.127509][ T4968] batman_adv: batadv0: Interface activated: batadv_slave_1
[  167.154803][ T5302] loop2: detected capacity change from 0 to 16
[  167.176276][ T4249] usb 2-1: USB disconnect, device number 5
[  167.210770][ T5028] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.311234][ T5302] erofs: (device loop2): mounted with root inode @ nid 36.
[  167.427837][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  167.485545][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  167.647844][ T4968] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.705052][ T4968] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.734939][ T4968] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.758829][ T5315] loop3: detected capacity change from 0 to 512
[  167.811250][ T4968] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.833480][ T5315] EXT4-fs (loop3): Ignoring removed oldalloc option
[  167.943877][ T5313] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  167.970764][ T5315] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none.
[  168.099483][ T5313] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  168.375985][ T4343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.383854][ T4343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.445159][ T4235] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  168.559160][ T5334] loop2: detected capacity change from 0 to 256
[  168.572299][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  168.590460][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  168.632020][ T5334] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xcbfa8d46, utbl_chksum : 0xe619d30d)
[  168.676991][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  168.727192][ T4235] usb 4-1: Using ep0 maxpacket: 16
[  168.735691][ T5334] exFAT-fs (loop2): failed to load alloc-bitmap
[  168.754690][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.764017][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  168.793409][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.802247][ T5334] exFAT-fs (loop2): failed to recognize exfat type
[  168.815813][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  168.861759][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  168.895244][ T4235] usb 4-1: unable to get BOS descriptor or descriptor too short
[  168.971181][ T5332] page:ffffea000137be80 refcount:4 mapcount:1 mapping:ffff888060847978 index:0x0 pfn:0x4defa
[  168.981964][ T5332] memcg:ffff88807ea44000
[  168.986300][ T5332] aops:shmem_aops ino:4f
[  168.990656][ T5332] flags: 0xfff00000080017(locked|referenced|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff)
[  169.001865][ T5332] raw: 00fff00000080017 ffffea000179d048 ffffea000179d008 ffff888060847978
[  169.010572][ T5332] raw: 0000000000000000 0000000000000000 0000000400000000 ffff88807ea44000
[  169.019454][ T5332] page dumped because: VM_BUG_ON_PAGE(page_mapped(page))
[  169.026479][ T5332] page_owner tracks the page as allocated
[  169.032225][ T5332] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 5334, ts 168923527732, free_ts 168916655209
[  169.047432][ T5332]  get_page_from_freelist+0x24f6/0x2670
[  169.053352][ T5332]  __alloc_pages+0x1ee/0x480
[  169.058419][ T5332]  alloc_pages_vma+0x2bc/0x790
[  169.063327][ T5332]  shmem_alloc_and_acct_page+0x47f/0xbe0
[  169.068968][ T5332]  shmem_getpage_gfp+0x14be/0x2c10
[  169.074071][ T5332]  shmem_read_mapping_page_gfp+0x96/0x100
[  169.079796][ T5332]  udmabuf_create+0xaa9/0x15b0
[  169.084552][ T5332]  udmabuf_ioctl+0x1f3/0x300
[  169.089355][ T5332]  __se_sys_ioctl+0xfa/0x170
[  169.094037][ T5332]  do_syscall_64+0x4c/0xa0
[  169.098973][ T5332]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  169.105047][ T5332] page last free stack trace:
[  169.109984][ T5332]  free_unref_page_prepare+0x637/0x6c0
[  169.115913][ T5332]  free_unref_page_list+0x119/0x830
[  169.121400][ T5332]  release_pages+0x185f/0x1bd0
[  169.126484][ T5332]  __pagevec_release+0x6d/0xe0
[  169.131253][ T5332]  shmem_undo_range+0x5cd/0x19a0
[  169.136414][ T5332]  shmem_evict_inode+0x1e2/0x9a0
[  169.141949][ T5332]  evict+0x4b6/0x8b0
[  169.145961][ T5332]  __dentry_kill+0x412/0x630
[  169.150821][ T5332]  dentry_kill+0xb8/0x290
[  169.155158][ T5332]  dput+0xd8/0x1a0
[  169.159273][ T5332]  do_renameat2+0x9f9/0xf70
[  169.163959][ T5332]  __x64_sys_rename+0x82/0x90
[  169.168914][ T5332]  do_syscall_64+0x4c/0xa0
[  169.173328][ T5332]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  169.179386][ T5332] ------------[ cut here ]------------
[  169.185013][ T5332] kernel BUG at mm/filemap.c:166!
[  169.190149][ T5332] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  169.196398][ T5332] CPU: 0 PID: 5332 Comm: syz.2.244 Not tainted syzkaller #0
[  169.203996][ T5332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  169.214534][ T5332] RIP: 0010:unaccount_page_cache_page+0x74d/0x860
[  169.221119][ T5332] Code: e8 c8 17 db ff 4c 89 f7 48 c7 c6 20 02 33 8a e8 c9 fc 0d 00 0f 0b e8 b2 17 db ff 4c 89 f7 48 c7 c6 60 02 33 8a e8 b3 fc 0d 00 <0f> 0b 48 85 ed 75 59 e8 97 17 db ff eb 5d e8 90 17 db ff 4c 89 f7
[  169.241043][ T5332] RSP: 0018:ffffc9000301f6e8 EFLAGS: 00010046
[  169.247282][ T5332] RAX: b0f08ca9d8bcce00 RBX: 0000000000000000 RCX: 0000000000000000
[  169.255262][ T5332] RDX: 0000000000000044 RSI: 0000000000000000 RDI: fffff52000603ed0
[  169.263218][ T5332] RBP: ffffea000137be88 R08: ffff8880b902795b R09: fffff52000603e8c
[  169.271173][ T5332] R10: dffffc0000000000 R11: ffffed1017204f2c R12: ffffea000137be80
[  169.279333][ T5332] R13: dffffc0000000000 R14: ffffea000137be80 R15: 1ffffd400026f7d1
[  169.287553][ T5332] FS:  00005555652b5500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  169.296985][ T5332] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  169.303735][ T5332] CR2: 0000000000000000 CR3: 000000002b52d000 CR4: 00000000003526f0
[  169.311939][ T5332] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  169.319912][ T5332] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  169.328094][ T5332] Call Trace:
[  169.331376][ T5332]  <TASK>
[  169.334417][ T5332]  ? rcu_is_watching+0x11/0xa0
[  169.339573][ T5332]  __delete_from_page_cache+0xbc/0x6c0
[  169.345141][ T5332]  ? _raw_spin_lock_irq+0x86/0xf0
[  169.350163][ T5332]  ? lockdep_hardirqs_off+0x70/0x100
[  169.355442][ T5332]  ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30
[  169.362628][ T5332]  ? _raw_spin_lock_irq+0xb7/0xf0
[  169.367656][ T5332]  ? _raw_spin_lock_irqsave+0x100/0x100
[  169.373190][ T5332]  ? page_mapping+0x30e/0x440
[  169.378034][ T5332]  delete_from_page_cache+0x121/0x190
[  169.383504][ T5332]  truncate_inode_page+0x8d/0xb0
[  169.388902][ T5332]  shmem_undo_range+0x4f4/0x19a0
[  169.393851][ T5332]  ? shmem_truncate_range+0xa0/0xa0
[  169.399444][ T5332]  ? do_raw_spin_lock+0x128/0x2f0
[  169.404466][ T5332]  ? __rwlock_init+0x140/0x140
[  169.409241][ T5332]  shmem_evict_inode+0x1e2/0x9a0
[  169.414549][ T5332]  ? _raw_spin_unlock+0x24/0x40
[  169.419495][ T5332]  ? shmem_free_in_core_inode+0xb0/0xb0
[  169.425282][ T5332]  ? do_raw_spin_lock+0x128/0x2f0
[  169.430608][ T5332]  ? bit_waitqueue+0x30/0x30
[  169.435197][ T5332]  ? do_raw_spin_unlock+0x11d/0x230
[  169.440520][ T5332]  ? shmem_free_in_core_inode+0xb0/0xb0
[  169.446092][ T5332]  evict+0x4b6/0x8b0
[  169.450134][ T5332]  ? __lock_acquire+0x7b50/0x7b50
[  169.455185][ T5332]  ? proc_nr_inodes+0x320/0x320
[  169.460203][ T5332]  ? do_raw_spin_unlock+0x11d/0x230
[  169.465502][ T5332]  ? _raw_spin_unlock+0x24/0x40
[  169.470343][ T5332]  __dentry_kill+0x412/0x630
[  169.474921][ T5332]  dentry_kill+0xb8/0x290
[  169.479428][ T5332]  dput+0xd8/0x1a0
[  169.483137][ T5332]  __fput+0x5a5/0x8c0
[  169.487231][ T5332]  task_work_run+0x125/0x1a0
[  169.491980][ T5332]  exit_to_user_mode_loop+0x10f/0x130
[  169.497565][ T5332]  exit_to_user_mode_prepare+0xee/0x180
[  169.503118][ T5332]  syscall_exit_to_user_mode+0x16/0x40
[  169.508695][ T5332]  do_syscall_64+0x58/0xa0
[  169.513203][ T5332]  ? clear_bhb_loop+0x30/0x80
[  169.518084][ T5332]  ? clear_bhb_loop+0x30/0x80
[  169.522811][ T5332]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  169.528695][ T5332] RIP: 0033:0x7f9c5675c0d9
[  169.533131][ T5332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  169.552924][ T5332] RSP: 002b:00007fffe4988f18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  169.561338][ T5332] RAX: 0000000000000000 RBX: 00007fffe4989000 RCX: 00007f9c5675c0d9
[  169.569310][ T5332] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  169.577357][ T5332] RBP: 00000000000291f9 R08: 0000000000000001 R09: 0000000000000000
[  169.585688][ T5332] R10: 0000001b31920000 R11: 0000000000000246 R12: 00007fffe4989040
[  169.593820][ T5332] R13: 00007f9c569e3fac R14: 0000000000029418 R15: 00007f9c569e3fa0
[  169.601872][ T5332]  </TASK>
[  169.605029][ T5332] Modules linked in:
[  169.609064][ T5332] ---[ end trace fdd26a1a773417b4 ]---
[  169.614526][ T5332] RIP: 0010:unaccount_page_cache_page+0x74d/0x860
[  169.621066][ T5332] Code: e8 c8 17 db ff 4c 89 f7 48 c7 c6 20 02 33 8a e8 c9 fc 0d 00 0f 0b e8 b2 17 db ff 4c 89 f7 48 c7 c6 60 02 33 8a e8 b3 fc 0d 00 <0f> 0b 48 85 ed 75 59 e8 97 17 db ff eb 5d e8 90 17 db ff 4c 89 f7
[  169.641172][ T5332] RSP: 0018:ffffc9000301f6e8 EFLAGS: 00010046
[  169.647262][ T5332] RAX: b0f08ca9d8bcce00 RBX: 0000000000000000 RCX: 0000000000000000
[  169.655247][ T5332] RDX: 0000000000000044 RSI: 0000000000000000 RDI: fffff52000603ed0
[  169.663234][ T5332] RBP: ffffea000137be88 R08: ffff8880b902795b R09: fffff52000603e8c
[  169.671479][ T5332] R10: dffffc0000000000 R11: ffffed1017204f2c R12: ffffea000137be80
[  169.679570][ T5332] R13: dffffc0000000000 R14: ffffea000137be80 R15: 1ffffd400026f7d1
[  169.687577][ T5332] FS:  00005555652b5500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  169.696514][ T5332] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  169.703281][ T5332] CR2: 0000000000000000 CR3: 000000002b52d000 CR4: 00000000003526f0
[  169.711555][ T5332] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  169.719886][ T5332] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  169.728010][ T5332] Kernel panic - not syncing: Fatal exception
[  169.734244][ T5332] Kernel Offset: disabled
[  169.738608][ T5332] Rebooting in 86400 seconds..