last executing test programs:

10.019880693s ago: executing program 0 (id=221):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf250f00000034000780080002007f91000008000100b70000e7"], 0x4c}, 0x1, 0x0, 0x0, 0x4044800}, 0x4000050)

9.9522208s ago: executing program 0 (id=225):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x20, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff4}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffee8, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)

8.912181515s ago: executing program 0 (id=233):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
readv(r2, &(0x7f0000001b00)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x1)
splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0)
splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0)

8.332175135s ago: executing program 0 (id=234):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x8081, 0x0, 0xa0363159, 0x5, 0x5, [{}, {0xffffffff}, {}, {0x0, 0x76dfbff1}, {}, {}, {0x0, 0x4}, {0x3}], 0x0, 0x20}})

8.151779998s ago: executing program 0 (id=236):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
chdir(&(0x7f0000000080)='./file0\x00')
setpgid(r0, r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x220901, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x200000, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0, 0x3fb, &(0x7f0000000c40)="$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")
setpgid(0x0, r0)
openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x10300, 0x1a)

7.985726364s ago: executing program 0 (id=238):
syz_mount_image$cramfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x140, &(0x7f0000000200)="$eJzszEFLImEcx/Hv7Myuy66uLhlYkAUdGhJzHLFbB40kIRsovHQSbKJAMxKiYwXdOvQCPFRCJ/EQHTuUdbEUwl6H0CHoWIwjiBEdOj+fyzDf/8Nvbqap4gEZ22whv7VtFovm6tiSkUosX1xe/bO6A/jdd7ffX8dg3foq0N4HK9+6YG0jZ05lCznrvx0DFYj/tbuG/faP1bx2C3ebOg61Qbvpn7RItw0rEHf39t5OYcLa+9/bewF2S4Fq5X6xUU8GJ89HZA6TgdEBqb/7zSM9MVR2+mTS5t0Z8c79KVQPPoaqlVazkVowUkYzouvTES2sadGW8dBIRveOUeadO7DyYe8XPr+ShgMJShJUOvf2jeQCaievRt7t8ALPmx6QvrpkM76f5YzX8wNZRUIQBEEQBEEQBEEQvuk9AAD//2iQbNs=")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

2.120327387s ago: executing program 2 (id=286):
mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000001300)={0x0, 0x400}, 0x8)

2.052410852s ago: executing program 2 (id=287):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000157000/0x2000)=nil, 0x1fffff, 0x0, 0x157, 0x0)

1.981868376s ago: executing program 2 (id=289):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

1.791912369s ago: executing program 1 (id=293):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
r1 = fcntl$dupfd(r0, 0x406, r0)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000001ec0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24004001}, 0x1)
recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x122)

1.791683729s ago: executing program 1 (id=294):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$sock(r0, &(0x7f0000000740)={&(0x7f0000000100)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@timestamping={{0x10, 0x1, 0x4f, 0x1}}], 0x10}, 0x4004)

1.732121516s ago: executing program 1 (id=295):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f0000000080), 0x0, 0x52e, &(0x7f0000000f00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000240)='./bus\x00')
truncate(&(0x7f0000000080)='./file2\x00', 0x1ffe)

1.65752283s ago: executing program 1 (id=296):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000000)={[{@mblk_io_submit}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x7b9, &(0x7f00000007c0)="$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")
quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

1.491625634s ago: executing program 1 (id=297):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
fcntl$lock(r1, 0x26, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
close_range(r0, 0xffffffffffffffff, 0x0)

1.010842193s ago: executing program 2 (id=298):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x300, 0x302, 0x1, 0xf}})

920.948369ms ago: executing program 2 (id=299):
setresgid(0xee00, 0xee01, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000000c0)={{}, {}, [], {0x4, 0x2}, [{0x8, 0x6}], {0x10, 0x3}, {0x20, 0x7}}, 0x2c, 0x2)
setreuid(0xffffffffffffffff, 0xee01)
mount$afs(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x4080, 0x0)

728.476939ms ago: executing program 2 (id=300):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000)
openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', &(0x7f0000000380)={0x40440, 0x15c, 0x12}, 0x18)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)

0s ago: executing program 1 (id=301):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(r2, &(0x7f0000000940)=ANY=[], 0xfdef)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x11}}], 0x1, 0x24008094)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:39490' (ED25519) to the list of known hosts.
syzkaller login: [   56.343792][ T5832] cgroup: Unknown subsys name 'net'
[   56.460991][ T5832] cgroup: Unknown subsys name 'cpuset'
[   56.466834][ T5832] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.755540][ T5832] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.558707][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.562711][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.566515][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.570191][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.573447][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.643146][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.648227][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.652911][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.656959][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.660810][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.664344][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.668224][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.672656][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.675587][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.722089][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.989630][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   65.115432][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   65.202832][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   65.216790][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.219789][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.222846][ T5848] bridge_slave_0: entered allmulticast mode
[   65.228308][ T5848] bridge_slave_0: entered promiscuous mode
[   65.260684][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.263600][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.266690][ T5848] bridge_slave_1: entered allmulticast mode
[   65.270525][ T5848] bridge_slave_1: entered promiscuous mode
[   65.308595][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.310887][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.313481][ T5852] bridge_slave_0: entered allmulticast mode
[   65.316998][ T5852] bridge_slave_0: entered promiscuous mode
[   65.333828][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.338244][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.340604][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.342985][ T5852] bridge_slave_1: entered allmulticast mode
[   65.346803][ T5852] bridge_slave_1: entered promiscuous mode
[   65.366679][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.395262][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.417581][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.433051][ T5848] team0: Port device team_slave_0 added
[   65.455631][ T5848] team0: Port device team_slave_1 added
[   65.473600][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.476648][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.479743][ T5853] bridge_slave_0: entered allmulticast mode
[   65.483800][ T5853] bridge_slave_0: entered promiscuous mode
[   65.513345][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.516683][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.527538][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.532720][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.535023][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.537888][ T5853] bridge_slave_1: entered allmulticast mode
[   65.540914][ T5853] bridge_slave_1: entered promiscuous mode
[   65.560008][ T5852] team0: Port device team_slave_0 added
[   65.563598][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.567567][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.577080][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.582257][ T5852] team0: Port device team_slave_1 added
[   65.624518][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.631103][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.681093][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.683750][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.693857][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.699911][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.702580][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.713479][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.732063][ T5853] team0: Port device team_slave_0 added
[   65.744575][ T5848] hsr_slave_0: entered promiscuous mode
[   65.749816][ T5848] hsr_slave_1: entered promiscuous mode
[   65.754544][ T5853] team0: Port device team_slave_1 added
[   65.785470][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.788761][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.799418][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.819912][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.822741][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.833119][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.883812][ T5852] hsr_slave_0: entered promiscuous mode
[   65.887805][ T5852] hsr_slave_1: entered promiscuous mode
[   65.890439][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   65.892709][ T5852] Cannot create hsr debugfs directory
[   65.991475][ T5853] hsr_slave_0: entered promiscuous mode
[   65.994558][ T5853] hsr_slave_1: entered promiscuous mode
[   65.997984][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   66.000259][ T5853] Cannot create hsr debugfs directory
[   66.292860][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.303076][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.323554][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.340425][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.390022][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.398647][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.405868][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.414411][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.502953][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.522969][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.530486][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.549938][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.627203][ T5857] Bluetooth: hci0: command tx timeout
[   66.674251][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.694997][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.708474][ T5857] Bluetooth: hci1: command tx timeout
[   66.721650][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   66.739913][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   66.754656][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.757830][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.763920][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.766846][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.784446][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.787397][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.790584][ T5857] Bluetooth: hci2: command tx timeout
[   66.796946][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.799719][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.820525][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.887166][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   66.905916][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.908957][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.933691][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.944229][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.947224][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.207610][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.213165][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.263833][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.309089][ T5852] veth0_vlan: entered promiscuous mode
[   67.312392][ T5848] veth0_vlan: entered promiscuous mode
[   67.329263][ T5848] veth1_vlan: entered promiscuous mode
[   67.333810][ T5852] veth1_vlan: entered promiscuous mode
[   67.369341][ T5853] veth0_vlan: entered promiscuous mode
[   67.384841][ T5853] veth1_vlan: entered promiscuous mode
[   67.419256][ T5853] veth0_macvtap: entered promiscuous mode
[   67.422074][ T5848] veth0_macvtap: entered promiscuous mode
[   67.432954][ T5853] veth1_macvtap: entered promiscuous mode
[   67.447871][ T5852] veth0_macvtap: entered promiscuous mode
[   67.459043][ T5848] veth1_macvtap: entered promiscuous mode
[   67.467321][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.474865][ T5852] veth1_macvtap: entered promiscuous mode
[   67.483262][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.508108][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.515721][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.523653][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.538579][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.541567][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.561353][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.584779][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.596797][ T5878] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.602034][ T5878] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.608168][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.615665][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.631130][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.651702][ T5879] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.673873][ T5879] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.678621][ T5879] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.709169][ T5879] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.718231][ T3568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.724272][ T3568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.807877][ T3568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.811858][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.815686][ T3568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.816494][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.867402][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.872801][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.910350][ T5853] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.915286][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.920363][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.957330][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.962453][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.201636][ T5927] loop0: detected capacity change from 0 to 2048
[   68.245667][ T5928] loop2: detected capacity change from 0 to 1024
[   68.250896][ T5927] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.258618][ T5927] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   68.268111][ T5927] EXT4-fs error (device loop0): __ext4_new_inode:1073: comm syz.0.6: reserved inode found cleared - inode=1
[   68.303047][ T5928] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.314712][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.429446][ T5937] EXT4-fs (loop2): shut down requested (0)
[   68.706373][ T5857] Bluetooth: hci0: command tx timeout
[   68.756754][   T47] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   68.787511][ T5857] Bluetooth: hci1: command tx timeout
[   68.866296][ T5857] Bluetooth: hci2: command tx timeout
[   68.906814][   T47] usb 1-1: Using ep0 maxpacket: 16
[   68.915734][   T47] usb 1-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=91.ed
[   68.919679][   T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.923222][   T47] usb 1-1: Product: syz
[   68.924906][   T47] usb 1-1: Manufacturer: syz
[   68.926915][   T47] usb 1-1: SerialNumber: syz
[   68.936604][   T47] usb 1-1: config 0 descriptor??
[   68.950988][   T47] s2255 1-1:0.0: Could not find bulk-in endpoint
[   68.953724][   T47] Sensoray 2255 driver load failed: 0xfffffff4
[   68.956882][   T47] s2255 1-1:0.0: probe with driver s2255 failed with error -12
[   69.076264][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.151261][   T47] usb 1-1: USB disconnect, device number 2
[   69.202162][ T5950] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   69.274297][ T5955] capability: warning: `syz.2.17' uses deprecated v2 capabilities in a way that may be insecure
[   69.630812][ T5963] loop1: detected capacity change from 0 to 32768
[   69.633716][ T5963] =======================================================
[   69.633716][ T5963] WARNING: The mand mount option has been deprecated and
[   69.633716][ T5963]          and is ignored by this kernel. Remove the mand
[   69.633716][ T5963]          option from the mount to silence this warning.
[   69.633716][ T5963] =======================================================
[   69.706969][ T5963] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   69.719596][ T5963] (syz.1.19,5963,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[   69.794253][ T5848] ocfs2: Unmounting device (7,1) on (node local)
[   70.139164][ T5991] loop0: detected capacity change from 0 to 256
[   70.141986][ T5991] exfat: Deprecated parameter 'utf8'
[   70.144135][ T5991] exfat: Deprecated parameter 'namecase'
[   70.166753][ T5991] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[   70.327347][ T6004] random: crng reseeded on system resumption
[   70.527582][ T6018] loop2: detected capacity change from 0 to 1024
[   70.786881][ T5857] Bluetooth: hci0: command tx timeout
[   70.919249][ T5857] Bluetooth: hci1: command tx timeout
[   70.946554][ T5857] Bluetooth: hci2: command tx timeout
[   71.078360][ T6024] nvme_fabrics: missing parameter 'transport=%s'
[   71.081407][ T6024] nvme_fabrics: missing parameter 'nqn=%s'
[   71.191455][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.194475][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.399878][ T6034] loop1: detected capacity change from 0 to 128
[   71.404854][ T6034] EXT4-fs: Ignoring removed nomblk_io_submit option
[   71.410326][ T6034] EXT4-fs: Ignoring removed nomblk_io_submit option
[   71.415048][ T6034] EXT4-fs (loop1): Test dummy encryption mode enabled
[   71.430030][ T6034] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   71.435703][ T6034] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   71.475503][ T5848] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   71.642120][   T33] audit: type=1800 audit(1756525738.900:2): pid=6039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.53" name="file1" dev="tmpfs" ino=115 res=0 errno=0
[   72.496874][ T6046] loop2: detected capacity change from 0 to 131072
[   72.590967][ T6046] F2FS-fs (loop2): invalid crc value
[   72.813529][ T6046] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   72.822567][ T6046] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   72.866392][ T5857] Bluetooth: hci0: command tx timeout
[   72.946910][ T5857] Bluetooth: hci1: command tx timeout
[   73.026445][ T5857] Bluetooth: hci2: command tx timeout
[   73.674033][ T6071] loop0: detected capacity change from 0 to 40427
[   73.726894][ T6071] F2FS-fs (loop0): invalid crc value
[   73.859312][ T6071] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   73.865175][ T6071] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   74.023474][ T6078] loop2: detected capacity change from 0 to 32768
[   74.093265][ T6078] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[   74.116255][   T33] audit: type=1800 audit(1756525741.380:3): pid=6078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.66" name="file1" dev="loop2" ino=17058 res=0 errno=0
[   74.184517][ T6081] loop1: detected capacity change from 0 to 32768
[   74.192064][ T6081] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.68 (6081)
[   74.206164][ T6081] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   74.210452][ T6081] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   74.277688][ T6081] BTRFS info (device loop1): rebuilding free space tree
[   74.301920][ T6081] BTRFS info (device loop1): allowing degraded mounts
[   74.304646][ T6081] BTRFS info (device loop1): enabling ssd optimizations
[   74.307793][ T6081] BTRFS info (device loop1): turning off barriers
[   74.310368][ T6081] BTRFS info (device loop1): turning on flush-on-commit
[   74.313095][ T6081] BTRFS info (device loop1): turning on sync discard
[   74.315752][ T6081] BTRFS info (device loop1): enabling free space tree
[   74.318565][ T6081] BTRFS info (device loop1): force clearing of disk cache
[   74.321392][ T6081] BTRFS info (device loop1): force zlib compression, level 3
[   74.530208][ T6081] BTRFS warning (device loop1 state M): remount supports changing free space tree only from RO to RW
[   74.533627][ T6081] BTRFS info (device loop1 state M): force clearing of disk cache
[   74.536168][ T6081] BTRFS info (device loop1 state M): enabling auto defrag
[   74.538355][ T6081] BTRFS info (device loop1 state M): doing ref verification
[   74.540617][ T6081] BTRFS info (device loop1 state M): turning on barriers
[   74.542783][ T6081] BTRFS info (device loop1 state M): use no compression
[   74.544912][ T6081] BTRFS info (device loop1 state M): max_inline set to 65970697666560
[   74.553036][ T6081] BTRFS error (device loop1): trying to do action 2 to bytenr 5255168 num_bytes 4096 but there is no existing entry!
[   74.556977][ T6081] BTRFS error (device loop1):   Ref action 2, root 5, ref_root 5, parent 0, owner 1, offset 0, num_refs 18446744073709551615
[   74.560918][ T6081]    btrfs_force_cow_block+0xfeb/0x2460
[   74.562685][ T6081]    btrfs_cow_block+0x40a/0x9a0
[   74.564216][ T6081]    btrfs_search_slot+0xd11/0x2b90
[   74.565848][ T6081]    btrfs_lookup_file_extent+0xd8/0x120
[   74.568861][ T6081]    btrfs_drop_extents+0x402/0x2da0
[   74.570493][ T6081]    __cow_file_range_inline+0x255/0x1260
[   74.572241][ T6081]    cow_file_range_inline+0x2fc/0x3d0
[   74.573914][ T6081]    cow_file_range+0x449/0x10a0
[   74.575460][ T6081]    btrfs_run_delalloc_range+0x3f9/0xf80
[   74.577332][ T6081]    writepage_delalloc+0xf06/0x1a60
[   74.578953][ T6081]    btrfs_writepages+0x12d1/0x22a0
[   74.580581][ T6081]    do_writepages+0x32e/0x550
[   74.582051][ T6081]    filemap_fdatawrite_range+0x1a5/0x250
[   74.583813][ T6081]    btrfs_sync_file+0x3a1/0x1160
[   74.585277][ T6081]    btrfs_do_write_iter+0x59a/0x710
[   74.586905][ T6081]    do_iter_readv_writev+0x61c/0x8b0
[   74.664650][   T33] audit: type=1800 audit(1756525741.920:4): pid=6098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.66" name="file1" dev="loop2" ino=17058 res=0 errno=0
[   74.669799][ T5848] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   74.720076][ T6078] syz.2.66 (6078) used greatest stack depth: 19336 bytes left
[   74.812128][ T5852] ocfs2: Unmounting device (7,2) on (node local)
[   75.561535][ T6118] loop0: detected capacity change from 0 to 256
[   75.772121][ T6132] loop0: detected capacity change from 0 to 256
[   75.790224][ T6132] FAT-fs (loop0): Directory bread(block 64) failed
[   75.793011][ T6132] FAT-fs (loop0): Directory bread(block 65) failed
[   75.795659][ T6132] FAT-fs (loop0): Directory bread(block 66) failed
[   75.800231][ T6132] FAT-fs (loop0): Directory bread(block 67) failed
[   75.802899][ T6132] FAT-fs (loop0): Directory bread(block 68) failed
[   75.805488][ T6132] FAT-fs (loop0): Directory bread(block 69) failed
[   75.808870][ T6132] FAT-fs (loop0): Directory bread(block 70) failed
[   75.811592][ T6132] FAT-fs (loop0): Directory bread(block 71) failed
[   75.814291][ T6132] FAT-fs (loop0): Directory bread(block 72) failed
[   75.820721][ T6132] FAT-fs (loop0): Directory bread(block 73) failed
[   75.845899][ T6134] loop1: detected capacity change from 0 to 8
[   75.877906][ T6134] SQUASHFS error: lzo decompression failed, data probably corrupt
[   75.881173][ T6134] SQUASHFS error: Failed to read block 0x62b: -5
[   75.883687][ T6134] SQUASHFS error: Unable to read metadata cache entry [629]
[   75.890897][ T6134] SQUASHFS error: Unable to read inode 0x11f
[   75.987645][ T6137] syz_tun: entered promiscuous mode
[   75.990220][ T6137] vlan2: entered promiscuous mode
[   76.059516][ T6144] process 'syz.2.87' launched './file0' with NULL argv: empty string added
[   76.135935][ T6152] loop2: detected capacity change from 0 to 512
[   76.152923][ T6152] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[   76.225871][ T6160] Zero length message leads to an empty skb
[   76.318668][ T6167] loop2: detected capacity change from 0 to 128
[   76.321905][ T6167] udf: Unknown parameter '01777777777777777777777'
[   76.443999][ T6177] netlink: 'syz.1.100': attribute type 10 has an invalid length.
[   76.489774][ T6177] team0: Device veth1_macvtap failed to register rx_handler
[   76.525234][ T6183] loop0: detected capacity change from 0 to 512
[   76.552474][ T6183] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[   76.559737][ T6183] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[   76.564517][ T6183] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.103: Failed to acquire dquot type 1
[   76.575502][ T6183] EXT4-fs (loop0): 1 truncate cleaned up
[   76.578273][ T6183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.582314][ T6183] ext4 filesystem being mounted at /35/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   76.596670][ T6183] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[   76.600527][ T6183] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[   76.610595][ T6183] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.103: Failed to acquire dquot type 1
[   76.628179][ T6190] loop1: detected capacity change from 0 to 1024
[   76.666365][ T6190] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.675100][ T6190] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   76.685472][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.703929][   T33] audit: type=1800 audit(1756525743.970:5): pid=6190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.105" name="file1" dev="loop1" ino=15 res=0 errno=0
[   76.748399][ T6190] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   76.758511][ T6190] EXT4-fs (loop1): Remounting filesystem read-only
[   76.789237][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.858464][ T6199] input: syz1 as /devices/virtual/input/input4
[   78.057659][ T6220] loop1: detected capacity change from 0 to 64
[   78.160754][ T6228] loop1: detected capacity change from 0 to 512
[   78.184949][ T6228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.200545][ T6228] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   78.344096][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.385051][ T6238] netlink: 40 bytes leftover after parsing attributes in process `syz.2.125'.
[   78.541396][ T6248] loop0: detected capacity change from 0 to 128
[   78.580832][ T6252] loop2: detected capacity change from 0 to 128
[   78.586111][ T6252] EXT4-fs (loop2): Test dummy encryption mode enabled
[   78.603968][ T6252] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   78.610200][ T6252] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   78.828489][ T5899] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   78.842186][ T6252] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[   78.988279][ T5899] usb 1-1: Using ep0 maxpacket: 16
[   78.995527][ T5899] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   79.003271][ T5899] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[   79.012391][ T5899] usb 1-1: config 0 interface 0 has no altsetting 0
[   79.018059][ T5899] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   79.024453][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.034881][ T5899] usb 1-1: config 0 descriptor??
[   79.453922][ T5899] hid (null): report_id 0 is invalid
[   79.457084][ T5899] hid (null): bogus close delimiter
[   79.459509][ T5899] hid (null): invalid report_count 1939077990
[   79.461811][ T5899] hid (null): invalid report_count 56161
[   79.463687][ T5899] hid (null): bogus close delimiter
[   79.465653][ T5899] hid (null): nested delimiters
[   79.468397][ T5899] hid (null): unknown global tag 0xd
[   79.504082][ T5852] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   79.580940][ T6271] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma?
[   79.595408][ T6270] loop1: detected capacity change from 0 to 1024
[   79.607156][ T6270] EXT4-fs: Ignoring removed nobh option
[   79.609631][ T6270] EXT4-fs: Ignoring removed bh option
[   79.636945][ T6270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.652126][ T2320] usb 1-1: USB disconnect, device number 3
[   79.661491][ T6270] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.775104][ T6279] loop1: detected capacity change from 0 to 512
[   79.785736][ T6279] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   79.801495][ T6279] EXT4-fs (loop1): invalid journal inode
[   79.806299][ T6279] EXT4-fs (loop1): can't get journal size
[   79.814261][ T6279] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002]
[   79.819159][ T6279] System zones: 1-12, 13-13
[   79.822360][ T6279] EXT4-fs (loop1): 1 truncate cleaned up
[   79.825162][ T6279] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.837491][ T6282] capability: warning: `syz.2.139' uses 32-bit capabilities (legacy support in use)
[   79.844279][ T6282] program syz.2.139 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   79.859231][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.166134][   T47] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   80.332131][   T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.337866][   T47] usb 3-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00
[   80.341938][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.351035][   T47] usb 3-1: config 0 descriptor??
[   80.874683][   T47] hid-alps 0003:044E:121E.0002: unknown main item tag 0x0
[   80.877842][   T47] hid-alps 0003:044E:121E.0002: unknown main item tag 0x0
[   80.881176][   T47] hid-alps 0003:044E:121E.0002: unknown main item tag 0x0
[   80.884033][   T47] hid-alps 0003:044E:121E.0002: unknown main item tag 0x0
[   80.888798][   T47] hid-alps 0003:044E:121E.0002: unknown main item tag 0x0
[   80.891581][   T47] hid-alps 0003:044E:121E.0002: unknown main item tag 0x0
[   80.894445][   T47] hid-alps 0003:044E:121E.0002: unknown main item tag 0x0
[   80.904260][   T47] hid-alps 0003:044E:121E.0002: hidraw0: USB HID v0.05 Device [HID 044e:121e] on usb-dummy_hcd.2-1/input0
[   81.084166][   T47] usb 3-1: USB disconnect, device number 2
[   81.306811][ T6305] loop1: detected capacity change from 0 to 256
[   81.444847][ T6308] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   81.491340][ T6308] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   82.492697][ T6324] loop1: detected capacity change from 0 to 40427
[   82.499473][ T6324] F2FS-fs: heap/no_heap options were deprecated
[   82.503353][ T6324] F2FS-fs (loop1): Invalid segment count (1)
[   82.513479][ T6324] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   82.535740][ T6324] F2FS-fs (loop1): invalid crc value
[   82.708693][ T6324] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   82.717770][ T6324] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30
[   82.720476][ T6324] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   82.844011][ T6358] loop2: detected capacity change from 0 to 1024
[   82.868590][ T6358] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[   82.902775][ T2320] IPVS: starting estimator thread 0...
[   82.909406][ T6355] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[   82.996298][ T6360] IPVS: using max 63 ests per chain, 151200 per kthread
[   83.651395][ T6381] netlink: 164 bytes leftover after parsing attributes in process `syz.2.174'.
[   83.704437][ T6383] loop2: detected capacity change from 0 to 16
[   83.712640][ T6383] erofs (device loop2): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[   83.718807][ T6383] erofs (device loop2): mounted with root inode @ nid 36.
[   83.725496][ T6383] erofs (device loop2): read error -117 @ 0 of nid 36
[   84.155156][ T6388] loop0: detected capacity change from 0 to 2048
[   84.174010][ T6388] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   84.182361][ T6388] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   84.688284][ T6403] loop1: detected capacity change from 0 to 32768
[   84.727484][ T6403] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[   84.758152][ T6403] (syz.1.183,6403,0):ocfs2_reconfigure:634 ERROR: Cannot change data mode on remount
[   84.797873][ T5848] ocfs2: Unmounting device (7,1) on (node local)
[   84.870941][ T6421] loop2: detected capacity change from 0 to 4096
[   85.009470][ T6427] loop1: detected capacity change from 0 to 512
[   85.018962][ T6427] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843e018, mo2=0002]
[   85.022291][ T6427] System zones: 1-12
[   85.047145][ T6427] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.191: invalid indirect mapped block 8 (level 2)
[   85.069356][ T6427] EXT4-fs (loop1): 1 truncate cleaned up
[   85.070735][ T6432] loop0: detected capacity change from 0 to 16
[   85.077026][ T6427] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.093167][ T6432] erofs (device loop0): mounted with root inode @ nid 36.
[   85.124015][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.346229][    T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   85.347452][ T6442] input: syz1 as /devices/virtual/input/input5
[   85.513847][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   85.518126][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   85.523469][    T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   85.528108][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   85.532805][    T9] usb 1-1: SerialNumber: syz
[   85.660798][ T6449] loop2: detected capacity change from 0 to 512
[   85.691673][ T6449] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.707496][ T6449] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   85.785606][ T6453] loop1: detected capacity change from 0 to 16
[   85.872393][ T6453] erofs (device loop1): rootino(nid 36) is not a directory(i_mode 66300)
[   86.064689][    T9] usb 1-1: 0:2 : does not exist
[   86.122164][    T9] usb 1-1: USB disconnect, device number 4
[   86.212697][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   86.271189][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.405050][ T6459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.204'.
[   86.413721][ T6459] tipc: Started in network mode
[   86.415710][ T6459] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711
[   86.426124][ T6459] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   86.557992][ T1272] cfg80211: failed to load regulatory.db
[   87.065879][ T6473] input: syz1 as /devices/virtual/input/input6
[   87.363858][ T6483] loop0: detected capacity change from 0 to 256
[   87.369363][ T6483] exFAT-fs (loop0): error, The cluster chain has a loop
[   87.372246][ T6483] exFAT-fs (loop0): Filesystem has been set read-only
[   87.374524][ T6483] exFAT-fs (loop0): failed to count the number of clusters in root
[   87.377160][ T6483] exFAT-fs (loop0): failed to recognize exfat type
[   87.531555][ T6490] loop2: detected capacity change from 0 to 1024
[   87.541560][ T6490] EXT4-fs: Ignoring removed nomblk_io_submit option
[   87.565204][ T6490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.613234][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.669462][ T6495] netlink: 32 bytes leftover after parsing attributes in process `syz.0.219'.
[   87.673646][ T6495] netlink: 16 bytes leftover after parsing attributes in process `syz.0.219'.
[   87.786746][ T6503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.221'.
[   87.789991][ T6503] netlink: 32 bytes leftover after parsing attributes in process `syz.0.221'.
[   87.793404][ T6505] sch_tbf: burst 0 is lower than device lo mtu (81) !
[   88.001962][ T6516] loop2: detected capacity change from 0 to 256
[   88.013942][ T6516] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   88.021654][ T6516] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[   88.031391][ T6516] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   88.161111][ T6524] netlink: 36 bytes leftover after parsing attributes in process `syz.1.230'.
[   88.171764][ T6524] netlink: 36 bytes leftover after parsing attributes in process `syz.1.230'.
[   88.185930][ T6524] netlink: 36 bytes leftover after parsing attributes in process `syz.1.230'.
[   88.304654][ T6524] loop1: detected capacity change from 0 to 2048
[   88.346765][ T6524] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   89.527050][ T6536] loop2: detected capacity change from 0 to 512
[   89.533240][ T6536] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   89.546526][ T6536] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   89.574192][ T6536] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   89.589264][ T6536] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   89.623232][ T6536] EXT4-fs (loop2): 1 truncate cleaned up
[   89.710202][ T6542] loop0: detected capacity change from 0 to 136
[   89.716224][ T6536] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.815302][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.105897][ T6549] loop2: detected capacity change from 0 to 32768
[   90.306963][ T6553] loop1: detected capacity change from 0 to 32768
[   90.319781][ T6553] XFS (loop1): sunit and swidth options incompatible with the noalign option
[   90.582675][ T6566] loop1: detected capacity change from 0 to 4096
[   90.721048][ T6570] loop1: detected capacity change from 0 to 256
[   90.724693][ T6570] vfat: Bad value for 'umask'
[   90.834585][ T6574] loop1: detected capacity change from 0 to 1024
[   90.882146][ T6574] hfsplus: catalog searching failed
[   90.903542][   T27] hfsplus: b-tree write err: -5, ino 3
[   90.911208][ T5848] hfsplus: node 4:3 still has 1 user(s)!
[   90.949090][ T6576] loop1: detected capacity change from 0 to 512
[   90.954239][ T6576] EXT4-fs: Ignoring removed orlov option
[   90.960001][ T6576] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   90.968515][ T6576] EXT4-fs (loop1): orphan cleanup on readonly fs
[   90.976487][ T6576] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.253: bg 0: block 248: padding at end of block bitmap is not set
[   90.984157][ T6576] Quota error (device loop1): write_blk: dquota write failed
[   90.990948][ T6576] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[   90.994996][ T6576] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.253: Failed to acquire dquot type 1
[   91.002315][ T6576] EXT4-fs (loop1): 1 truncate cleaned up
[   91.009292][ T6576] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   91.019451][ T6576] EXT4-fs: Ignoring removed orlov option
[   91.021970][ T6576] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   91.027319][ T6576] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[   91.048259][ T6576] EXT4-fs error (device loop1): __ext4_remount:6740: comm syz.1.253: Abort forced by user
[   91.052644][ T6576] EXT4-fs (loop1): Remounting filesystem read-only
[   91.055312][ T6576] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   91.058923][ T6576] ext4 filesystem being remounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   91.079425][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.914516][ T6612] netlink: 'syz.2.268': attribute type 10 has an invalid length.
[   91.924850][ T6612] 8021q: adding VLAN 0 to HW filter on device team0
[   91.930027][ T6612] bond0: (slave team0): Enslaving as an active interface with an up link
[   92.911146][ T6625] loop1: detected capacity change from 0 to 2048
[   92.957314][ T6625] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.965435][ T6625] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.987907][   T33] audit: type=1800 audit(1756525760.250:6): pid=6625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.274" name="file0" dev="loop1" ino=13 res=0 errno=0
[   93.180780][   T33] audit: type=1800 audit(1756525760.440:7): pid=6630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.275" name="/" dev="9p" ino=2 res=0 errno=0
[   93.753593][ T6625] fs-verity (loop1, inode 13): Error -4 building Merkle tree
[   93.781325][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.087000][ T2320] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   94.239922][ T2320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   94.253025][ T2320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   94.262160][ T2320] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[   94.269427][ T2320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.274875][ T2320] usb 2-1: config 0 descriptor??
[   94.556211][   T47] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   94.689191][ T2320] isku 0003:1E7D:319C.0003: unknown main item tag 0x0
[   94.696183][ T2320] isku 0003:1E7D:319C.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0
[   94.710771][   T47] usb 3-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[   94.714483][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.718273][   T47] usb 3-1: Product: syz
[   94.719942][   T47] usb 3-1: Manufacturer: syz
[   94.722161][   T47] usb 3-1: SerialNumber: syz
[   94.727947][   T47] usb 3-1: config 0 descriptor??
[   94.738460][   T47] hub 3-1:0.0: bad descriptor, ignoring hub
[   94.740848][   T47] hub 3-1:0.0: probe with driver hub failed with error -5
[   94.744449][   T47] f81232 3-1:0.0: f81534a converter detected
[   94.887620][ T2320] isku 0003:1E7D:319C.0003: couldn't init struct isku_device
[   94.891958][ T2320] isku 0003:1E7D:319C.0003: couldn't install keyboard
[   94.899527][ T2320] isku 0003:1E7D:319C.0003: probe with driver isku failed with error -71
[   94.908968][ T2320] usb 2-1: USB disconnect, device number 2
[   94.940622][   T47] f81534a ttyUSB0: f81232_set_register failed status: -71
[   94.946837][   T47] f81534a ttyUSB0: probe with driver f81534a failed with error -5
[   94.978985][   T47] usb 3-1: USB disconnect, device number 3
[   94.983711][   T47] f81232 3-1:0.0: device disconnected
[   95.485392][ T6646] loop1: detected capacity change from 0 to 2048
[   95.493565][ T6646] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   95.504182][ T6646] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   95.698367][ T6656] mmap: syz.2.287 (6656) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   95.727945][   T33] audit: type=1800 audit(1756525762.980:8): pid=6658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.288" name="bus" dev="overlay" ino=587 res=0 errno=0
[   95.807695][   T47] libceph: connect (1)[c::]:6789 error -101
[   95.811841][   T47] libceph: mon0 (1)[c::]:6789 connect error
[   96.009993][ T6674] loop1: detected capacity change from 0 to 512
[   96.019359][ T6674] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0
[   96.024659][ T6674] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[   96.038766][ T6674] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.295: Failed to acquire dquot type 1
[   96.049710][ T6674] EXT4-fs (loop1): 1 truncate cleaned up
[   96.052511][ T6674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.058016][ T6674] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.078114][   T47] libceph: connect (1)[c::]:6789 error -101
[   96.080094][   T47] libceph: mon0 (1)[c::]:6789 connect error
[   96.082684][ T6674] evm: overlay not supported
[   96.121230][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.186549][ T6679] loop1: detected capacity change from 0 to 2048
[   96.191092][ T6679] EXT4-fs: Ignoring removed mblk_io_submit option
[   96.196785][ T6679] EXT4-fs: Ignoring removed bh option
[   96.212110][ T6679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.241055][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.610129][ T6660] ceph: No mds server is up or the cluster is laggy
[   96.614735][ T1272] libceph: connect (1)[c::]:6789 error -101
[   96.620686][ T1272] libceph: mon0 (1)[c::]:6789 connect error
[   97.833666][ T6693] ------------[ cut here ]------------
[   97.836354][ T6693] 'send_pkt()' returns 0, but 65536 expected
[   97.841027][ T6693] WARNING: CPU: 0 PID: 6693 at net/vmw_vsock/virtio_transport_common.c:428 virtio_transport_send_pkt_info+0xd11/0xf00
[   97.845918][ T6693] Modules linked in:
[   97.849522][ T6693] CPU: 0 UID: 0 PID: 6693 Comm: syz.1.301 Not tainted syzkaller #0 PREEMPT(full) 
[   97.853502][ T6693] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   97.858054][ T6693] RIP: 0010:virtio_transport_send_pkt_info+0xd11/0xf00
[   97.860840][ T6693] Code: 0f 0b 90 bd f2 ff ff ff eb bc e8 7a 16 66 f6 c6 05 6d f5 33 04 01 90 48 c7 c7 a0 c4 b8 8c 44 89 f6 4c 89 ea e8 00 b5 29 f6 90 <0f> 0b 90 90 e9 e1 fe ff ff e8 51 16 66 f6 90 0f 0b 90 e9 c5 f7 ff
[   97.868610][ T6693] RSP: 0018:ffffc90003037530 EFLAGS: 00010246
[   97.871032][ T6693] RAX: 5cd92120b7462900 RBX: 0000000000010000 RCX: 0000000000080000
[   97.874274][ T6693] RDX: ffffc90008aa9000 RSI: 0000000000008f2e RDI: 0000000000008f2f
[   97.877426][ T6693] RBP: ffffffff8f8783d0 R08: ffff88804b024253 R09: 1ffff1100960484a
[   97.880544][ T6693] R10: dffffc0000000000 R11: ffffed100960484b R12: dffffc0000000000
[   97.883691][ T6693] R13: 0000000000010000 R14: 0000000000000000 R15: ffff888022816da4
[   97.886956][ T6693] FS:  00007f38108466c0(0000) GS:ffff8880b861b000(0000) knlGS:0000000000000000
[   97.890536][ T6693] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   97.893159][ T6693] CR2: 000020000003f000 CR3: 0000000032c9e000 CR4: 00000000000006f0
[   97.896380][ T6693] Call Trace:
[   97.897693][ T6693]  <TASK>
[   97.898868][ T6693]  ? lockdep_hardirqs_on+0x9c/0x150
[   97.900991][ T6693]  virtio_transport_seqpacket_enqueue+0x143/0x1c0
[   97.903356][ T6693]  ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10
[   97.905892][ T6693]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   97.908357][ T6693]  ? do_raw_spin_unlock+0x4d/0x240
[   97.910272][ T6693]  ? remove_wait_queue+0x33/0x120
[   97.912185][ T6693]  vsock_connectible_sendmsg+0xac7/0x1050
[   97.914489][ T6693]  ? __pfx_vsock_connectible_sendmsg+0x10/0x10
[   97.917143][ T6693]  ? __pfx_aa_sk_perm+0x10/0x10
[   97.919150][ T6693]  ? __pfx_woken_wake_function+0x10/0x10
[   97.921377][ T6693]  ? aa_sock_msg_perm+0xf1/0x1d0
[   97.923410][ T6693]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   97.925566][ T6693]  ? __pfx_vsock_connectible_sendmsg+0x10/0x10
[   97.928188][ T6693]  __sock_sendmsg+0x21c/0x270
[   97.930093][ T6693]  ____sys_sendmsg+0x52d/0x830
[   97.932039][ T6693]  ? __pfx_____sys_sendmsg+0x10/0x10
[   97.934203][ T6693]  ? import_iovec+0x74/0xa0
[   97.936179][ T6693]  ___sys_sendmsg+0x21f/0x2a0
[   97.938093][ T6693]  ? __pfx____sys_sendmsg+0x10/0x10
[   97.940225][ T6693]  ? __fget_files+0x2a/0x420
[   97.942098][ T6693]  ? __fget_files+0x3a0/0x420
[   97.944039][ T6693]  __sys_sendmmsg+0x227/0x430
[   97.946153][ T6693]  ? __pfx___sys_sendmmsg+0x10/0x10
[   97.948249][ T6693]  ? do_futex+0x395/0x420
[   97.950587][ T6693]  ? rcu_is_watching+0x15/0xb0
[   97.952565][ T6693]  __x64_sys_sendmmsg+0xa0/0xc0
[   97.954549][ T6693]  do_syscall_64+0xfa/0x3b0
[   97.957038][ T6693]  ? lockdep_hardirqs_on+0x9c/0x150
[   97.959186][ T6693]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.961649][ T6693]  ? exc_page_fault+0x9f/0xf0
[   97.963589][ T6693]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.965899][ T6693] RIP: 0033:0x7f380f98ebe9
[   97.968084][ T6693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   97.975747][ T6693] RSP: 002b:00007f3810846038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   97.979174][ T6693] RAX: ffffffffffffffda RBX: 00007f380fbc5fa0 RCX: 00007f380f98ebe9
[   97.982341][ T6693] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004
[   97.985508][ T6693] RBP: 00007f380fa11e19 R08: 0000000000000000 R09: 0000000000000000
[   97.988799][ T6693] R10: 0000000024008094 R11: 0000000000000246 R12: 0000000000000000
[   97.991952][ T6693] R13: 00007f380fbc6038 R14: 00007f380fbc5fa0 R15: 00007fff07dbb0e8
[   97.995164][ T6693]  </TASK>
[   97.996568][ T6693] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   97.999458][ T6693] CPU: 0 UID: 0 PID: 6693 Comm: syz.1.301 Not tainted syzkaller #0 PREEMPT(full) 
[   98.003081][ T6693] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   98.007134][ T6693] Call Trace:
[   98.008484][ T6693]  <TASK>
[   98.009688][ T6693]  dump_stack_lvl+0x99/0x250
[   98.011563][ T6693]  ? __asan_memcpy+0x40/0x70
[   98.013431][ T6693]  ? __pfx_dump_stack_lvl+0x10/0x10
[   98.015536][ T6693]  ? __pfx__printk+0x10/0x10
[   98.017407][ T6693]  vpanic+0x281/0x750
[   98.019028][ T6693]  ? __pfx__printk+0x10/0x10
[   98.020896][ T6693]  ? __pfx_vpanic+0x10/0x10
[   98.022728][ T6693]  ? is_bpf_text_address+0x292/0x2b0
[   98.024865][ T6693]  panic+0xb9/0xc0
[   98.026394][ T6693]  ? __pfx_panic+0x10/0x10
[   98.028218][ T6693]  __warn+0x31b/0x4b0
[   98.029852][ T6693]  ? virtio_transport_send_pkt_info+0xd11/0xf00
[   98.032371][ T6693]  ? virtio_transport_send_pkt_info+0xd11/0xf00
[   98.034882][ T6693]  report_bug+0x2be/0x4f0
[   98.036610][ T6693]  ? virtio_transport_send_pkt_info+0xd11/0xf00
[   98.039071][ T6693]  ? virtio_transport_send_pkt_info+0xd11/0xf00
[   98.041505][ T6693]  ? virtio_transport_send_pkt_info+0xd13/0xf00
[   98.043874][ T6693]  handle_bug+0x84/0x160
[   98.045542][ T6693]  exc_invalid_op+0x1a/0x50
[   98.047371][ T6693]  asm_exc_invalid_op+0x1a/0x20
[   98.049268][ T6693] RIP: 0010:virtio_transport_send_pkt_info+0xd11/0xf00
[   98.051846][ T6693] Code: 0f 0b 90 bd f2 ff ff ff eb bc e8 7a 16 66 f6 c6 05 6d f5 33 04 01 90 48 c7 c7 a0 c4 b8 8c 44 89 f6 4c 89 ea e8 00 b5 29 f6 90 <0f> 0b 90 90 e9 e1 fe ff ff e8 51 16 66 f6 90 0f 0b 90 e9 c5 f7 ff
[   98.059271][ T6693] RSP: 0018:ffffc90003037530 EFLAGS: 00010246
[   98.061646][ T6693] RAX: 5cd92120b7462900 RBX: 0000000000010000 RCX: 0000000000080000
[   98.064692][ T6693] RDX: ffffc90008aa9000 RSI: 0000000000008f2e RDI: 0000000000008f2f
[   98.067902][ T6693] RBP: ffffffff8f8783d0 R08: ffff88804b024253 R09: 1ffff1100960484a
[   98.071071][ T6693] R10: dffffc0000000000 R11: ffffed100960484b R12: dffffc0000000000
[   98.074211][ T6693] R13: 0000000000010000 R14: 0000000000000000 R15: ffff888022816da4
[   98.077403][ T6693]  ? lockdep_hardirqs_on+0x9c/0x150
[   98.079548][ T6693]  virtio_transport_seqpacket_enqueue+0x143/0x1c0
[   98.082153][ T6693]  ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10
[   98.084906][ T6693]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   98.087372][ T6693]  ? do_raw_spin_unlock+0x4d/0x240
[   98.089427][ T6693]  ? remove_wait_queue+0x33/0x120
[   98.091453][ T6693]  vsock_connectible_sendmsg+0xac7/0x1050
[   98.093688][ T6693]  ? __pfx_vsock_connectible_sendmsg+0x10/0x10
[   98.096097][ T6693]  ? __pfx_aa_sk_perm+0x10/0x10
[   98.098063][ T6693]  ? __pfx_woken_wake_function+0x10/0x10
[   98.100336][ T6693]  ? aa_sock_msg_perm+0xf1/0x1d0
[   98.102349][ T6693]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   98.104456][ T6693]  ? __pfx_vsock_connectible_sendmsg+0x10/0x10
[   98.106894][ T6693]  __sock_sendmsg+0x21c/0x270
[   98.108805][ T6693]  ____sys_sendmsg+0x52d/0x830
[   98.110750][ T6693]  ? __pfx_____sys_sendmsg+0x10/0x10
[   98.112879][ T6693]  ? import_iovec+0x74/0xa0
[   98.114734][ T6693]  ___sys_sendmsg+0x21f/0x2a0
[   98.116574][ T6693]  ? __pfx____sys_sendmsg+0x10/0x10
[   98.118619][ T6693]  ? __fget_files+0x2a/0x420
[   98.120430][ T6693]  ? __fget_files+0x3a0/0x420
[   98.122224][ T6693]  __sys_sendmmsg+0x227/0x430
[   98.124066][ T6693]  ? __pfx___sys_sendmmsg+0x10/0x10
[   98.126078][ T6693]  ? do_futex+0x395/0x420
[   98.127815][ T6693]  ? rcu_is_watching+0x15/0xb0
[   98.129654][ T6693]  __x64_sys_sendmmsg+0xa0/0xc0
[   98.131623][ T6693]  do_syscall_64+0xfa/0x3b0
[   98.133386][ T6693]  ? lockdep_hardirqs_on+0x9c/0x150
[   98.135393][ T6693]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.137756][ T6693]  ? exc_page_fault+0x9f/0xf0
[   98.139652][ T6693]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.141983][ T6693] RIP: 0033:0x7f380f98ebe9
[   98.143771][ T6693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   98.151235][ T6693] RSP: 002b:00007f3810846038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   98.154423][ T6693] RAX: ffffffffffffffda RBX: 00007f380fbc5fa0 RCX: 00007f380f98ebe9
[   98.157492][ T6693] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004
[   98.160609][ T6693] RBP: 00007f380fa11e19 R08: 0000000000000000 R09: 0000000000000000
[   98.163704][ T6693] R10: 0000000024008094 R11: 0000000000000246 R12: 0000000000000000
[   98.166858][ T6693] R13: 00007f380fbc6038 R14: 00007f380fbc5fa0 R15: 00007fff07dbb0e8
[   98.169851][ T6693]  </TASK>
[   98.171741][ T6693] Kernel Offset: disabled
[   98.173471][ T6693] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:49:25  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff8e139ee0 RBP=ffffffff8172c195 RSP=ffffc900000075d0
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc900000077b8 R11=ffffffff81ac3820
R12=0000000000000002 R13=ffffffff8e139ee0 R14=0000000000000000 R15=0000000000000246
RIP=ffffffff819d5b8b RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f38108466c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000020000003f000 CR3=0000000032c9e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f8318197498 00007f8318197470 XMM03=00007f83181974a8 00007f83181974a0
XMM04=00007f8318cfd100 00007f8318197460 XMM05=00007f8318197478 00007f83181974c0
XMM06=00007f83181974b8 00007f83181974b0 XMM07=00007f83181974a8 00007f83181974a0
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffffc9000259fb58 RCX=d23a6e6711368e00 RDX=0000000000010000
RSI=ffffffff8b87b160 RDI=ffffffff8be33680 RBP=0000000000000000 RSP=ffffc900001e0fc8
R8 =ffffffff8fa38a37 R9 =1ffffffff1f47146 R10=dffffc0000000000 R11=ffffc900001e0ff8
R12=dffffc0000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81723290 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558a0f5500 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f380fbc7dac CR3=000000002785e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f8318197498 00007f8318197470 XMM03=00007f83181974a8 00007f83181974a0
XMM04=00007f8318cfd100 00007f8318197460 XMM05=00007f8318197478 00007f83181974c0
XMM06=00007f83181974b8 00007f83181974b0 XMM07=00007f83181974a8 00007f83181974a0
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
