last executing test programs:

1m18.887278043s ago: executing program 3 (id=4):
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps_rollup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020)

1m17.25736455s ago: executing program 3 (id=12):
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000f80)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xc5f, &(0x7f0000001300)="$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")
r0 = inotify_init1(0x80000)
inotify_add_watch(r0, &(0x7f0000000580)='.\x00', 0x1000401)
syz_mount_image$fuse(0x0, &(0x7f00000005c0)='./file0\x00', 0x219c40d, 0x0, 0x1, 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000005600)='./file0\x00', 0x0, 0x2c)
getdents64(r1, &(0x7f00000098c0)=""/134, 0x86)
getdents64(r1, 0x0, 0x0)

1m16.85966551s ago: executing program 3 (id=14):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
mmap$IORING_OFF_SQ_RING(0x0, 0x101, 0x3000008, 0x11, r0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_clone3(&(0x7f0000000e40)={0x800000, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58)

1m16.57340149s ago: executing program 3 (id=18):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000001100)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r0, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001180), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000011c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc})
write$sndseq(r1, &(0x7f0000001280)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f00000012c0)={0x0, 0xe, 0x1, 'queue0\x00'})

1m11.273638591s ago: executing program 0 (id=41):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x9005}, 0x0)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

1m10.927783816s ago: executing program 0 (id=43):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000700)={'pimreg0\x00', 0x7c2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f00000008c0)=[{0x6}]})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x2180, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000780)={'pimreg0\x00', 0x7c2})

1m10.580191811s ago: executing program 0 (id=44):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r1, r0, 0x2f}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xe, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f0000004640)='syzkaller\x00'}, 0x3c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004680)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000004700)="b9ff0b078059268cb89e14f088a82d", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m10.20457354s ago: executing program 0 (id=47):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f00000108c0)="$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")
symlink(&(0x7f0000000200)='.\x00', &(0x7f0000000240)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000540)='./bus\x00')
listxattr(&(0x7f0000000580)='./file0\x00', 0x0, 0x0)

1m7.998624095s ago: executing program 0 (id=51):
r0 = syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x402)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000500)=[{0x6, 0xff, 0xfe, 0x7fff0006}]})
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000540), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f00000006c0)={0x20004, <r3=>r1})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000700)={0x0, 0x0, r3})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r0, 0x100000000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3)

1m6.68041016s ago: executing program 0 (id=56):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7, 0x100}, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82)
r1 = fanotify_init(0x81, 0x40000)
fanotify_mark(r1, 0x105, 0x800101b, r0, 0x0)
read$FUSE(r1, &(0x7f0000002300)={0x2020}, 0x2020)

1m6.180755791s ago: executing program 32 (id=56):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7, 0x100}, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82)
r1 = fanotify_init(0x81, 0x40000)
fanotify_mark(r1, 0x105, 0x800101b, r0, 0x0)
read$FUSE(r1, &(0x7f0000002300)={0x2020}, 0x2020)

1m1.48492331s ago: executing program 33 (id=18):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000001100)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r0, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001180), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000011c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc})
write$sndseq(r1, &(0x7f0000001280)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f00000012c0)={0x0, 0xe, 0x1, 'queue0\x00'})

35.460264538s ago: executing program 1 (id=203):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vxcan1\x00', <r2=>0x0})
bind$can_raw(r1, &(0x7f0000000540)={0x1d, r2}, 0x10)
socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x3ffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xfff2, 0xffff}, {0xa}}}, 0x24}}, 0x0)

34.773591288s ago: executing program 1 (id=207):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000004c0)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000580)=0xfefffff9, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000005c0)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @sack_perm, @sack_perm], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000640), 0x4)

34.490637668s ago: executing program 1 (id=209):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3})
mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0)
mq_timedreceive(r1, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0)

34.045234613s ago: executing program 1 (id=211):
syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x12140c5, &(0x7f0000000740)={[{@fat=@quiet}, {@shortname_mixed}, {@fat=@sys_immutable}, {@utf8no}, {@fat=@nfs}, {@utf8}, {@shortname_win95}, {@utf8no}, {}, {@utf8}, {@numtail}, {@numtail}, {@utf8no}]}, 0x0, 0x2c4, &(0x7f0000000800)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000b40)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0/file0\x00', 0x0, 0x13481, 0x0)
mount$bind(&(0x7f0000000c80)='.\x00', &(0x7f0000000cc0)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000000d00)={0x2020}, 0x2020)

33.48484365s ago: executing program 1 (id=214):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = epoll_create1(0x80000)
r2 = fcntl$dupfd(r0, 0x0, r0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x20000000})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000014})
r3 = getpid()
kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000100)={r1, r0, 0x6})

32.856402874s ago: executing program 1 (id=216):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f00000004c0)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0})
r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
syz_ublk_setup_queues(r6, r5, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x1, 0x2e3}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd52, 0x40000, 0x2, 0x22a, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdb3, 0x8c, 0x9, 0x0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb48c, 0x4020, 0x3, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x12, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0)

32.353513296s ago: executing program 34 (id=216):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f00000004c0)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0})
r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
syz_ublk_setup_queues(r6, r5, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x1, 0x2e3}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd52, 0x40000, 0x2, 0x22a, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdb3, 0x8c, 0x9, 0x0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb48c, 0x4020, 0x3, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x12, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0)

27.80857433s ago: executing program 2 (id=240):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @pic={0x3, 0xff, 0x9, 0x0, 0x6, 0x6c, 0x41, 0x5, 0x9, 0x5, 0x3, 0x2, 0x0, 0xc, 0x4, 0x10}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x7, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x2c4210})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

27.439810078s ago: executing program 2 (id=244):
r0 = fsopen(&(0x7f0000000300)='debugfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r2, &(0x7f0000000080)=""/234, 0xea)
lseek(r2, 0x3, 0x1)

27.239770738s ago: executing program 2 (id=246):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50ed, &(0x7f00000051c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000005140)='./file0\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000300)={0x5, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
r2 = fanotify_init(0x200, 0x0)
fanotify_mark(r2, 0x101, 0x48000028, r1, 0x0)
fanotify_mark(r2, 0x102, 0x40001043, r1, 0x0)

24.847274982s ago: executing program 2 (id=255):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0)
mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='\x00', 0x89901)
mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x185093, 0x0)

24.251930243s ago: executing program 2 (id=258):
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0xfffffffd}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="3eb0", 0x2}], 0x1}}], 0x1, 0x9200000000000000)
r2 = dup3(r1, r0, 0x0)
recvmmsg(r2, &(0x7f000000a040)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000001c0)=""/20, 0x14}], 0x1}, 0xfffffc15}], 0x1, 0x10001, 0x0)

23.459791524s ago: executing program 2 (id=262):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000000c0)=0x7f, 0x4)
close(0x4)

22.923523319s ago: executing program 35 (id=262):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000000c0)=0x7f, 0x4)
close(0x4)

4.636770876s ago: executing program 7 (id=360):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000005c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000007c0)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r1 = getpid()
process_vm_readv(r1, &(0x7f0000000800)=[{&(0x7f0000000840)=""/54, 0x7ffff000}, {&(0x7f0000000880)=""/152, 0x98}], 0x2, &(0x7f0000000940)=[{&(0x7f0000000980)=""/95, 0x7ffff000}], 0x286, 0x0)

4.520833058s ago: executing program 5 (id=361):
pipe(&(0x7f0000000380))
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x189d, 0x1a)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x80042, 0x1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x4, 0x4)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0xb393}], 0x1, 0x0, 0x0)

4.299112441s ago: executing program 5 (id=362):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x0, 0x0, 0xff, 0x1}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe, 0x2, 0x1, 0x8, 0x0, 0x200}, 0x20)

4.082705353s ago: executing program 5 (id=364):
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000080), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r2=>0x0})
sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x48}}, 0x0)

3.91861418s ago: executing program 5 (id=366):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10003, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000)
r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
preadv(r0, &(0x7f0000001e80)=[{&(0x7f0000001c80)=""/236, 0xec}], 0x1, 0x5, 0x6)

3.353634318s ago: executing program 7 (id=368):
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040))
mkdir(&(0x7f0000000000)='my_sys\x00', 0x1fd)
mount(0x0, &(0x7f0000000080)='my_sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x100)
mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r1, 0x0)
preadv2(r0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/215, 0xd7}], 0x1, 0x4, 0x2006, 0x1)

3.23396912s ago: executing program 7 (id=369):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000009e00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{r0}, &(0x7f0000000b80), &(0x7f0000000bc0)=r1}, 0x20)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800)

3.079724255s ago: executing program 7 (id=370):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x1922, 0x4000, 0x8, 0x223})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb)
io_uring_enter(r0, 0x1912, 0x71, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000100)={0x2, r0, 0x4, {0x8, 0x5}, 0x6}, 0x1)

2.976786136s ago: executing program 5 (id=371):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd28, 0x25dfdc02, {0x7, 0x0, 0x0, r4, 0x2, 0x0, 0x3}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

2.407160974s ago: executing program 4 (id=373):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x1c, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x93}, 0xe)
ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff)
unshare(0x2c020400)
pselect6(0x40, &(0x7f0000000100)={0x9, 0x0, 0x4000000000, 0x0, 0xa48f, 0x0, 0x800010100000}, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
shutdown(r0, 0x1)

2.358774759s ago: executing program 6 (id=374):
r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000040)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x2a, {0x0, "66ba3412eea5880f20e035004000000f22e0"}}, @nested_vmlaunch={0x12f, 0x18}], 0x72})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.974492388s ago: executing program 5 (id=375):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f00000001c0)={0x20, 0xc6cdb91b1c448aed, 0xb, "2c33bb55b5878989fe6d97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)

1.884539547s ago: executing program 4 (id=376):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e)
getsockopt(r2, 0x111, 0x3, 0x0, &(0x7f00000000c0)=0xff12)

1.840712162s ago: executing program 6 (id=377):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x22000402, &(0x7f00000005c0)={[{@noquota}, {@noblock_validity}, {@data_err_ignore}, {@discard}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@norecovery}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@jqfmt_vfsv1}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@min_batch_time={'min_batch_time', 0x3d, 0xc}}], [], 0x2c}, 0x85, 0x4f3, &(0x7f00000006c0)="$eJzs3LtvHNUaAPBvxs887eRG99487o0hICwCduwESEEBCKQ0ICQoQmkcE4U4CUqMRKKIGIRCifgLAiUSEhUNFUgIAQ0gWuhRpAi5iaFAi87ujL221/b6FZPs7yft7jk7Z+bMNzNn5+ycnQ2gZfWlpyxie0T8EhE9tezcAn21l+mpq6N/TF0dzaJSeen3rFru9tTV0bJoOd+2ItOfR+TvZbG/Qb2XLl85OzI+PnaxyA9OnHtj8NLlK4+eOTdyeuz02Pnh48ePHR164vHhx5qK49oy01Nct/e9feHA3hOvfPj8aCVe/e7TtL7bi+n1cdT0NlXv4sqtUamafb+z+vzgGpf+T7OjLp21b+KKsCJtEZF2V0e1/fdEW8zuvJ547t2ZzNebtILAhknnpl0L3m0rXvPi7AXcmzJtHFpUecZP33/Lx53sf2y2W0+n57Fq/NPF44cXatsmT99le2vf2NvmzZcXr/9usMzuVL42Q6Vnmfq3R8TJyT9vpEc0vA6xhKzpkgAAM75M/Z9HGvX/8jl9m53FGEpvRByOiN0R8a+I2DPTE4r4T0T8d4X1983LL+z//LRlhYtckdT/e7IY2yoftSllXNlMbkc1/o7stTPjY0eKbdIfHV0pP7REHV89+/MHi03rq+v/pUeqv+wLFutxs7177jynRiZG1hDyHLfeidjX3ij+bGYkIG2BvRGxbxXLT9vszMOfHEjpndsWTl8+/kVkxcDFGlU+jniotv8nY178dVWlmhYbnxzsjvGxI4PlUbHQ9z9ef7E+31GXnhN/d3Mxda822AbS/t867/ivLb+IPy8qnDdeO7mCOq7/+v6iUc2Jvy1uTE9lcbJYeG1MMb/Z3hURW2Y3Wzr+O7OXy2x1Rd8amZi4OBTRWRteLUZZi/eHZ+sr82X5FH//ocbtf3fEXx8V8+2PiHQQ/y8i/h8RB4t1vy8i7o+IQ0vE/+0zD7y+9BZaxfG/TlL8pxp+/s0c/71Z/Xj9KhJtZ7/5YrH6m/r86zpWTfUX7zTz+dfsCq5l2wEAAMDdIq+OQWf5QJmuuzi1J7bm4xcuTRzuizfPn6qNVfdGR15e6eqpux46VFwbLvPDKd05mz8aEbuqvzTaUs0PjF4Y37GZgQPVe3XK9t9VvDcwUHv9bf6PXoB7z4rG0ep/dPbZ5+u/MsAd5X5NaF3aP7Qu7R9al/YPratR+78WMb0JqwLcYc2d/ytuN4d7kP4/tC7tH1rXbPv3iz9oIQtviS//bmU1d/rPJnafWNPsG56o9GzIkidXPlfbBkUadX/asXjhLCJWV0XkS5fpjMtXutcpnHSGWqpMedNK0wvMly3z1HKbpWNN/4mREgeLRFdENDvXtSb26fodP0nmsh8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBX+zsAAP///sXcJw==")
mkdirat(0xffffffffffffff9c, &(0x7f0000000bc0)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000c00)='./tracefs\x00', 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c40)='./file0\x00', 0x1fd)
openat(0xffffffffffffff9c, &(0x7f0000000c80)='./tracefs/trace_options\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000012c0)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000001340)={0xd3f, 0x5, 0x5, 0x80006, 0xfffffffe, 0x7})

1.640805792s ago: executing program 4 (id=378):
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18)
fcntl$setlease(r0, 0x400, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x400, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x102)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x80143, 0x0)
pread64(r1, &(0x7f00000000c0)=""/23, 0x17, 0x1)

1.295178508s ago: executing program 7 (id=379):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xffbffffe, 0x257, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff8, 0x1000, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)

895.181319ms ago: executing program 6 (id=380):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000ae8ff030900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close(0x3)

603.081329ms ago: executing program 6 (id=381):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x3, 0x0, 0x0, 0xf}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
ptrace(0x10, r0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000380)={&(0x7f0000000000)=""/120, 0x78})
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0})

563.208422ms ago: executing program 4 (id=382):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000200)={0x20080522}, &(0x7f0000000240)={0x200002, 0x200003, 0x801, 0x4, 0x7})
r1 = fsopen(&(0x7f0000000040)='configfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

352.431064ms ago: executing program 4 (id=383):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3}, 0x18)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x3f00000000000000)

230.884587ms ago: executing program 6 (id=384):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x4)
mount(0x0, &(0x7f00000002c0)='./gadget\x00', &(0x7f0000000300)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r0, &(0x7f0000000500)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
r1 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000180)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x3bee3f9f87c5003e, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)

227.758487ms ago: executing program 7 (id=385):
io_setup(0x6, &(0x7f00000003c0))
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[<r3=>0x0, 0x0, <r4=>0x0], &(0x7f0000000300), 0x3, r2})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r4, r3, r4], &(0x7f00000003c0), 0x0, 0x2})

2.08778ms ago: executing program 6 (id=386):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50ed, &(0x7f00000051c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000005140)='./file0\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000300)={0x5, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
r2 = fanotify_init(0x200, 0x0)
fanotify_mark(r2, 0x101, 0x48000028, r1, 0x0)
fanotify_mark(r2, 0x102, 0x40001043, r1, 0x0)

0s ago: executing program 4 (id=394):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x0, 0x1, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil})

kernel console output (not intermixed with test programs):

  88.614947][ T5799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   88.630108][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   88.638142][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   88.645095][ T5800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   88.652918][ T5795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   88.653243][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   88.667532][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   88.674756][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   88.676511][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   88.690608][ T5800] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   88.698985][ T5097] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   88.714777][ T5097] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   88.722831][ T5097] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   88.731762][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   88.739831][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   88.752606][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   88.761413][   T52] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   88.768890][   T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   88.806285][ T5787] (null): rxe_set_mtu: Set mtu to 1024
[   88.813451][ T5787] rxe_eth0 speed is unknown, defaulting to 1000
[   88.822047][ T5787] rxe_eth0 speed is unknown, defaulting to 1000
[   88.830450][ T5787] rxe_eth0 speed is unknown, defaulting to 1000
[   88.888921][ T5788] (null): rxe_set_mtu: Set mtu to 1024
[   88.895171][ T5788] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   88.901327][ T5786] (null): rxe_set_mtu: Set mtu to 1024
[   88.908251][ T5786] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   88.922485][ T5785] (null): rxe_set_mtu: Set mtu to 1024
[   88.948782][ T5785] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   89.186885][ T5787] infiniband rxe0: set active
[   89.197603][ T3370] rxe_eth0 speed is unknown, defaulting to 1000
[   89.208315][ T5787] infiniband rxe0: added rxe_eth0
[   89.283543][ T5787] RDS/IB: rxe0: added
[   89.294895][ T5787] smc: adding ib device rxe0 with port count 1
[   89.305742][ T5787] smc:    ib device rxe0 port 1 has pnetid 
[   89.359698][ T5787] rxe_eth0 speed is unknown, defaulting to 1000
[   89.367357][  T789] rxe_eth0 speed is unknown, defaulting to 1000
[   89.624145][ T5788] chnl_net:caif_netlink_parms(): no params data found
[   89.667188][ T5786] chnl_net:caif_netlink_parms(): no params data found
[   89.694715][ T5785] chnl_net:caif_netlink_parms(): no params data found
[   89.717940][ T5787] rxe_eth0 speed is unknown, defaulting to 1000
[   90.031675][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.039986][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.047505][ T5788] bridge_slave_0: entered allmulticast mode
[   90.055967][ T5788] bridge_slave_0: entered promiscuous mode
[   90.065625][ T5787] rxe_eth0 speed is unknown, defaulting to 1000
[   90.118352][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.125652][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.138375][ T5786] bridge_slave_0: entered allmulticast mode
[   90.145937][ T5786] bridge_slave_0: entered promiscuous mode
[   90.155623][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.163024][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.170325][ T5788] bridge_slave_1: entered allmulticast mode
[   90.177909][ T5788] bridge_slave_1: entered promiscuous mode
[   90.239045][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.246407][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.257422][ T5785] bridge_slave_0: entered allmulticast mode
[   90.265207][ T5785] bridge_slave_0: entered promiscuous mode
[   90.277877][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.285159][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.295951][ T5785] bridge_slave_1: entered allmulticast mode
[   90.304117][ T5785] bridge_slave_1: entered promiscuous mode
[   90.328747][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.335979][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.347605][ T5786] bridge_slave_1: entered allmulticast mode
[   90.355536][ T5786] bridge_slave_1: entered promiscuous mode
[   90.472887][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.485308][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.500450][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.514584][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.555462][ T5788] team0: Port device team_slave_0 added
[   90.564653][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.587022][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.608346][ T5787] rxe_eth0 speed is unknown, defaulting to 1000
[   90.617354][ T5788] team0: Port device team_slave_1 added
[   90.706312][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.717877][ T5797] Bluetooth: hci2: command tx timeout
[   90.728947][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.755520][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.774256][ T5785] team0: Port device team_slave_0 added
[   90.787263][ T5786] team0: Port device team_slave_0 added
[   90.797771][ T5797] Bluetooth: hci3: command tx timeout
[   90.806918][ T5786] team0: Port device team_slave_1 added
[   90.817244][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.841654][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.867862][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.878696][ T5797] Bluetooth: hci1: command tx timeout
[   90.884400][ T5797] Bluetooth: hci0: command tx timeout
[   90.898946][ T5785] team0: Port device team_slave_1 added
[   90.915321][ T5446] infiniband rxe0: set active
[   90.979759][ T3370] rxe_eth0 speed is unknown, defaulting to 1000
[   91.040008][ T5788] hsr_slave_0: entered promiscuous mode
[   91.047397][ T5788] hsr_slave_1: entered promiscuous mode
[   91.073878][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.081110][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.107280][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.143080][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.150288][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.176564][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.188703][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.195709][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.224248][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.240953][  T789] rxe_eth0 speed is unknown, defaulting to 1000
[   91.286165][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.293309][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.321922][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.483631][ T5785] hsr_slave_0: entered promiscuous mode
[   91.491783][ T5785] hsr_slave_1: entered promiscuous mode
[   91.500157][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.508984][ T5785] Cannot create hsr debugfs directory
[   91.523753][ T5786] hsr_slave_0: entered promiscuous mode
[   91.531113][ T5786] hsr_slave_1: entered promiscuous mode
[   91.537522][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.545663][ T5786] Cannot create hsr debugfs directory
[   91.959772][ T5787] chnl_net:caif_netlink_parms(): no params data found
[   92.045723][ T5775] rxe_eth0 speed is unknown, defaulting to 1000
[   92.063982][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   92.098902][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   92.115955][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   92.164156][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   92.276948][ T5446] infiniband rxe0: set active
[   92.301929][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.314643][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.325099][ T5787] bridge_slave_0: entered allmulticast mode
[   92.338774][ T5787] bridge_slave_0: entered promiscuous mode
[   92.360915][    T8] rxe_eth0 speed is unknown, defaulting to 1000
[   92.382434][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.391835][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.400781][ T5787] bridge_slave_1: entered allmulticast mode
[   92.408250][ T5787] bridge_slave_1: entered promiscuous mode
[   92.455369][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.474269][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   92.487474][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   92.503416][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.514737][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   92.530391][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   92.582349][ T5787] team0: Port device team_slave_0 added
[   92.594154][ T5787] team0: Port device team_slave_1 added
[   92.667153][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.677769][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.706270][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.725300][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.733166][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.759448][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.789153][ T5797] Bluetooth: hci2: command tx timeout
[   92.862850][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   92.873995][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   92.878407][ T5797] Bluetooth: hci3: command tx timeout
[   92.900033][ T5787] hsr_slave_0: entered promiscuous mode
[   92.906986][ T5787] hsr_slave_1: entered promiscuous mode
[   92.915246][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   92.923387][ T5787] Cannot create hsr debugfs directory
[   92.944885][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   92.952519][ T5797] Bluetooth: hci1: command tx timeout
[   92.952530][   T52] Bluetooth: hci0: command tx timeout
[   92.972728][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   93.127588][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.215870][ T5788] 8021q: adding VLAN 0 to HW filter on device team0
[   93.239532][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.246912][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.311407][ T3536] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.318623][ T3536] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.371089][ T5787] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   93.385020][ T5787] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   93.411830][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.422477][ T5787] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   93.436025][ T5787] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   93.452068][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.494679][ T5785] 8021q: adding VLAN 0 to HW filter on device team0
[   93.521179][ T5786] 8021q: adding VLAN 0 to HW filter on device team0
[   93.544759][ T3508] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.552009][ T3508] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.585979][ T3508] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.593217][ T3508] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.606491][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.613719][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.674036][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.681247][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.796576][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   93.923899][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.980495][ T5787] 8021q: adding VLAN 0 to HW filter on device team0
[   94.029749][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.036978][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.070638][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.078030][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.265129][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.400967][ T5788] veth0_vlan: entered promiscuous mode
[   94.427195][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.445848][ T5788] veth1_vlan: entered promiscuous mode
[   94.462482][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.565121][ T5786] veth0_vlan: entered promiscuous mode
[   94.582141][ T5788] veth0_macvtap: entered promiscuous mode
[   94.635790][ T5786] veth1_vlan: entered promiscuous mode
[   94.661408][ T5788] veth1_macvtap: entered promiscuous mode
[   94.724197][ T5785] veth0_vlan: entered promiscuous mode
[   94.742602][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.756819][ T5785] veth1_vlan: entered promiscuous mode
[   94.776602][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.809405][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.822166][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.831413][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.841232][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.851543][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.869949][   T52] Bluetooth: hci2: command tx timeout
[   94.910265][ T5786] veth0_macvtap: entered promiscuous mode
[   94.948091][   T52] Bluetooth: hci3: command tx timeout
[   94.963303][ T5786] veth1_macvtap: entered promiscuous mode
[   94.973948][ T5785] veth0_macvtap: entered promiscuous mode
[   94.987809][ T5785] veth1_macvtap: entered promiscuous mode
[   95.033183][   T52] Bluetooth: hci1: command tx timeout
[   95.033194][ T5797] Bluetooth: hci0: command tx timeout
[   95.073358][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.091795][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.103679][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.124986][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.140343][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.153110][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.168326][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.179622][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.190864][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.201533][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.213780][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.252669][ T5787] veth0_vlan: entered promiscuous mode
[   95.264239][  T171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.283808][  T171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.293272][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.304160][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.313615][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.323073][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.342372][ T5787] veth1_vlan: entered promiscuous mode
[   95.353791][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.366378][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.376869][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.391294][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.402852][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.435965][ T3536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.447427][ T3536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.461841][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.475502][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.485398][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.494513][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.620653][ T5787] veth0_macvtap: entered promiscuous mode
[   95.657275][ T5787] veth1_macvtap: entered promiscuous mode
[   95.692640][ T5788] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   95.726613][ T3508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.738635][ T3508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.756656][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.771353][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.785216][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.796449][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.806719][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.819170][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.832659][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.893553][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.910767][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.920967][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.932435][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.942961][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.955337][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.973227][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.983461][  T171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.990450][ T5787] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.002874][ T5787] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.010840][  T171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.014047][ T5787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.028132][ T5787] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.083274][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.098864][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.149774][ T3536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.190788][ T3536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.208602][ T5794] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   96.259869][  T171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.272149][  T171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.358842][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.366749][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.418542][ T5794] usb 3-1: Using ep0 maxpacket: 32
[   96.435304][ T5897] syz.0.1[5897]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   96.446774][ T5794] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[   96.468297][ T5794] usb 3-1: config 0 has no interface number 0
[   96.484465][ T5897] loop0: detected capacity change from 0 to 512
[   96.501235][ T5794] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   96.518361][ T5794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.546434][ T5794] usb 3-1: Product: syz
[   96.554533][ T5897] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   96.576360][ T5794] usb 3-1: Manufacturer: syz
[   96.608677][ T5794] usb 3-1: SerialNumber: syz
[   96.616648][ T5897] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   96.680057][ T5794] usb 3-1: config 0 descriptor??
[   96.719969][ T5897] EXT4-fs (loop0): 1 truncate cleaned up
[   96.728880][ T5897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.760471][ T5794] smsc95xx v2.0.0
[   96.798485][ T5897] EXT4-fs warning (device loop0): ext4_group_add:1742: No reserved GDT blocks, can't resize
[   96.864845][ T5903] loop1: detected capacity change from 0 to 1024
[   96.948246][   T52] Bluetooth: hci2: command tx timeout
[   96.984770][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.000120][ T5903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.028254][   T52] Bluetooth: hci3: command tx timeout
[   97.117933][   T52] Bluetooth: hci1: command tx timeout
[   97.123424][   T52] Bluetooth: hci0: command tx timeout
[   97.166643][   T52] Bluetooth: hci1: Unknown advertising packet type: 0x34
[   97.166759][   T52] Bluetooth: hci1: Unknown advertising packet type: 0x3a
[   97.175553][   T52] Bluetooth: hci1: Malformed LE Event: 0x0d
[   97.241020][ T5794] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   97.266240][ T5794] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   97.292396][   T23] cfg80211: failed to load regulatory.db
[   97.373659][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.473757][ T5911] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   98.124781][ T5794] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   98.140955][ T5926] loop3: detected capacity change from 0 to 2048
[   98.159107][ T5794] smsc95xx: probe of 3-1:0.67 failed with error -71
[   98.193222][ T5794] usb 3-1: USB disconnect, device number 2
[   98.230295][ T5926] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   98.661083][ T5939] loop1: detected capacity change from 0 to 512
[   98.829162][ T5940] x86/PAT: syz.3.14:5940 freeing invalid memtype [mem 0xfe004000-0xfe004fff]
[   99.143442][ T5944] FAULT_INJECTION: forcing a failure.
[   99.143442][ T5944] name failslab, interval 1, probability 0, space 0, times 1
[   99.197180][ T5944] CPU: 0 PID: 5944 Comm: syz.1.20 Not tainted syzkaller #0
[   99.204499][ T5944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   99.214636][ T5944] Call Trace:
[   99.217962][ T5944]  <TASK>
[   99.220941][ T5944]  dump_stack_lvl+0x18c/0x250
[   99.225705][ T5944]  ? show_regs_print_info+0x20/0x20
[   99.230975][ T5944]  ? load_image+0x420/0x420
[   99.235547][ T5944]  ? __might_sleep+0xe0/0xe0
[   99.240209][ T5944]  ? __lock_acquire+0x7eb0/0x7eb0
[   99.245305][ T5944]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[   99.251351][ T5944]  should_fail_ex+0x394/0x4c0
[   99.256090][ T5944]  should_failslab+0x9/0x20
[   99.260629][ T5944]  slab_pre_alloc_hook+0x59/0x300
[   99.266030][ T5944]  kmem_cache_alloc_lru+0x4d/0x2c0
[   99.271193][ T5944]  ? __d_alloc+0x31/0x710
[   99.275617][ T5944]  __d_alloc+0x31/0x710
[   99.279815][ T5944]  ? alloc_fd+0x590/0x640
[   99.284208][ T5944]  d_alloc_pseudo+0x1d/0x70
[   99.288768][ T5944]  alloc_file_pseudo+0xe4/0x210
[   99.293671][ T5944]  ? fput+0x1a0/0x1a0
[   99.297704][ T5944]  ? alloc_fd+0x590/0x640
[   99.302103][ T5944]  sock_alloc_file+0xb7/0x280
[   99.306840][ T5944]  __sys_socket+0x140/0x1b0
[   99.311401][ T5944]  __x64_sys_socket+0x7a/0x90
[   99.316143][ T5944]  do_syscall_64+0x55/0xb0
[   99.320623][ T5944]  ? clear_bhb_loop+0x40/0x90
[   99.325385][ T5944]  ? clear_bhb_loop+0x40/0x90
[   99.330119][ T5944]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   99.336079][ T5944] RIP: 0033:0x7f6b5f79f559
[   99.340545][ T5944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   99.360196][ T5944] RSP: 002b:00007f6b60733028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   99.368702][ T5944] RAX: ffffffffffffffda RBX: 00007f6b5fa25fa0 RCX: 00007f6b5f79f559
[   99.376717][ T5944] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 000000000000001d
[   99.384748][ T5944] RBP: 00007f6b5f836b20 R08: 0000000000000000 R09: 0000000000000000
[   99.392764][ T5944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   99.400776][ T5944] R13: 00007f6b5fa26038 R14: 00007f6b5fa25fa0 R15: 00007ffd5bc44d28
[   99.408819][ T5944]  </TASK>
[   99.710766][ T5942] loop2: detected capacity change from 0 to 32768
[   99.737178][ T5942] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.19 (5942)
[   99.787069][ T5942] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   99.805172][ T5942] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[   99.826465][ T5942] BTRFS info (device loop2): using free space tree
[   99.919874][  T171] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x45c4daa94c2fee9c24887d4bee8f983cd8ca9d8901c4a5aa51fab9bc8d8bf5d6 found 0x330c88d00c2faff214a4c53a5c11fc0c64db60f0f6389041b16da37bcb38cc9b level 0
[   99.975344][ T5942] BTRFS warning (device loop2): couldn't read tree root
[  100.045046][ T5942] BTRFS error (device loop2): open_ctree failed: -5
[  100.547861][   T52] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  100.554842][ T5797] Bluetooth: hci4: command 0x1003 tx timeout
[  101.132249][ T5976] FAULT_INJECTION: forcing a failure.
[  101.132249][ T5976] name failslab, interval 1, probability 0, space 0, times 0
[  101.162351][ T5976] CPU: 1 PID: 5976 Comm: syz.0.27 Not tainted syzkaller #0
[  101.169640][ T5976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  101.179763][ T5976] Call Trace:
[  101.183095][ T5976]  <TASK>
[  101.186086][ T5976]  dump_stack_lvl+0x18c/0x250
[  101.190840][ T5976]  ? show_regs_print_info+0x20/0x20
[  101.196098][ T5976]  ? load_image+0x420/0x420
[  101.200655][ T5976]  ? __lock_acquire+0x7eb0/0x7eb0
[  101.205739][ T5976]  ? do_futex+0x2ff/0x3e0
[  101.210120][ T5976]  ? __lock_acquire+0x7eb0/0x7eb0
[  101.215216][ T5976]  should_fail_ex+0x394/0x4c0
[  101.219960][ T5976]  should_failslab+0x9/0x20
[  101.224523][ T5976]  slab_pre_alloc_hook+0x59/0x300
[  101.229609][ T5976]  ? do_eventfd+0x7a/0x2d0
[  101.234095][ T5976]  __kmem_cache_alloc_node+0x53/0x260
[  101.239528][ T5976]  ? do_eventfd+0x7a/0x2d0
[  101.243999][ T5976]  kmalloc_trace+0x2a/0xe0
[  101.248499][ T5976]  do_eventfd+0x7a/0x2d0
[  101.252797][ T5976]  __x64_sys_eventfd2+0x5a/0x70
[  101.257697][ T5976]  do_syscall_64+0x55/0xb0
[  101.262182][ T5976]  ? clear_bhb_loop+0x40/0x90
[  101.266937][ T5976]  ? clear_bhb_loop+0x40/0x90
[  101.271669][ T5976]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  101.277625][ T5976] RIP: 0033:0x7f362f19f559
[  101.282114][ T5976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  101.301788][ T5976] RSP: 002b:00007f36300f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000122
[  101.310286][ T5976] RAX: ffffffffffffffda RBX: 00007f362f425fa0 RCX: 00007f362f19f559
[  101.318310][ T5976] RDX: 0000000000000000 RSI: 0000000000000801 RDI: 0000000000000002
[  101.326332][ T5976] RBP: 00007f362f236b20 R08: 0000000000000000 R09: 0000000000000000
[  101.334360][ T5976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  101.342392][ T5976] R13: 00007f362f426038 R14: 00007f362f425fa0 R15: 00007ffd63dcc528
[  101.350469][ T5976]  </TASK>
[  101.793834][ T5984] process 'syz.0.29' launched './file1' with NULL argv: empty string added
[  101.944873][ T5988] tipc: Started in network mode
[  101.972334][ T5988] tipc: Node identity 7f000001, cluster identity 4711
[  102.008987][ T5988] tipc: Enabled bearer <udp:syz1>, priority 10
[  102.952309][ T6002] Invalid auth_tok structure returned from key query
[  102.991730][  T789] tipc: Node number set to 2130706433
[  103.019175][ T6002] Could not find valid key in user session keyring for sig specified in mount option: [syz]
[  103.087716][ T6002] One or more global auth toks could not properly register; rc = [-22]
[  103.177915][ T6002] Error parsing options; rc = [-22]
[  103.934083][ T3370] rxe_eth0 speed is unknown, defaulting to 1000
[  103.963783][ T6018] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  104.479753][ T6029] overlayfs: failed to get index nlink (file0/file2, err=-61)
[  105.678433][  T789] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  105.897035][  T789] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  105.920802][  T789] usb 3-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00
[  105.944690][  T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.962134][  T789] usb 3-1: Product: syz
[  105.984439][  T789] usb 3-1: Manufacturer: syz
[  105.990069][  T789] usb 3-1: SerialNumber: syz
[  106.040857][  T789] gspca_main: mr97310a-2.14.0 probing 08ca:0110
[  106.271248][ T6058] loop1: detected capacity change from 0 to 32768
[  106.305662][ T6058] =======================================================
[  106.305662][ T6058] WARNING: The mand mount option has been deprecated and
[  106.305662][ T6058]          and is ignored by this kernel. Remove the mand
[  106.305662][ T6058]          option from the mount to silence this warning.
[  106.305662][ T6058] =======================================================
[  106.422350][ T6050] loop0: detected capacity change from 0 to 40427
[  106.456323][ T6050] F2FS-fs (loop0): invalid crc value
[  106.478980][ T6050] F2FS-fs (loop0): Found nat_bits in checkpoint
[  106.527598][ T6058] JBD2: Ignoring recovery information on journal
[  106.606140][ T6050] F2FS-fs (loop0): Start checkpoint disabled!
[  106.639856][ T6050] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  106.772655][ T6058] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  107.032126][  T789] gspca_mr97310a: reg write [21] error -71
[  107.048299][  T789] mr97310a: probe of 3-1:1.0 failed with error -71
[  107.105279][  T789] usb 3-1: USB disconnect, device number 3
[  107.230771][   T28] audit: type=1804 audit(1793258163.820:2): pid=6058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.50" name="/newroot/19/bus/file1" dev="loop1" ino=17059 res=1 errno=0
[  107.292531][ T5785] syz-executor: attempt to access beyond end of device
[  107.292531][ T5785] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  107.333574][ T5785] syz-executor: attempt to access beyond end of device
[  107.333574][ T5785] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  107.396240][ T5787] ocfs2: Unmounting device (7,1) on (node local)
[  107.632825][ T3536] kworker/u4:10: attempt to access beyond end of device
[  107.632825][ T3536] loop0: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  107.669919][ T3536] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  107.679759][ T3536] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  107.686706][ T3536] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  107.708225][ T3536] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  108.139812][ T1094] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.236173][ T1094] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.342708][ T1094] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.482992][ T1094] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.062829][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  110.091219][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  110.107944][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  110.119051][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  110.128883][ T5797] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  110.138631][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  110.260174][ T6116] rxe_eth0 speed is unknown, defaulting to 1000
[  110.533786][ T6129] loop2: detected capacity change from 0 to 512
[  111.103110][ T6138] loop1: detected capacity change from 0 to 64
[  111.608538][ T6153] sctp: [Deprecated]: syz.2.68 (pid 6153) Use of struct sctp_assoc_value in delayed_ack socket option.
[  111.608538][ T6153] Use struct sctp_sack_info instead
[  111.677733][ T1094] hsr_slave_0: left promiscuous mode
[  111.723035][ T1094] hsr_slave_1: left promiscuous mode
[  111.732894][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.767928][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.789997][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.797486][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.830051][ T1094] bridge_slave_1: left allmulticast mode
[  111.843619][ T1094] bridge_slave_1: left promiscuous mode
[  111.859753][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.915849][ T1094] bridge_slave_0: left allmulticast mode
[  111.932759][ T1094] bridge_slave_0: left promiscuous mode
[  111.943908][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.030054][ T1094] veth1_macvtap: left promiscuous mode
[  112.036233][ T1094] veth0_macvtap: left promiscuous mode
[  112.042750][ T1094] veth1_vlan: left promiscuous mode
[  112.049415][ T1094] veth0_vlan: left promiscuous mode
[  112.230206][   T52] Bluetooth: hci1: command tx timeout
[  112.824596][ T6170] loop2: detected capacity change from 0 to 1024
[  112.915201][ T6170] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  113.000009][ T6172] FAULT_INJECTION: forcing a failure.
[  113.000009][ T6172] name fail_futex, interval 1, probability 0, space 0, times 1
[  113.013147][   T28] audit: type=1804 audit(1793258169.580:3): pid=6174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.74" name="/newroot/19/file0/bus" dev="loop2" ino=861 res=1 errno=0
[  113.040522][ T6172] CPU: 1 PID: 6172 Comm: syz.1.75 Not tainted syzkaller #0
[  113.047806][ T6172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  113.057916][ T6172] Call Trace:
[  113.061241][ T6172]  <TASK>
[  113.064222][ T6172]  dump_stack_lvl+0x18c/0x250
[  113.068976][ T6172]  ? show_regs_print_info+0x20/0x20
[  113.074245][ T6172]  ? load_image+0x420/0x420
[  113.078822][ T6172]  ? min_deadline_cb_rotate+0x150/0x150
[  113.084430][ T6172]  should_fail_ex+0x394/0x4c0
[  113.089179][ T6172]  get_futex_key+0x136/0x1030
[  113.093923][ T6172]  ? futex_setup_timer+0xc0/0xc0
[  113.098914][ T6172]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  113.104971][ T6172]  ? __lock_acquire+0x7eb0/0x7eb0
[  113.110066][ T6172]  ? lock_chain_count+0x20/0x20
[  113.114988][ T6172]  futex_wait_setup+0xbc/0x270
[  113.119833][ T6172]  ? futex_wait_multiple+0x920/0x920
[  113.125276][ T6172]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  113.131230][ T6172]  ? _raw_spin_unlock+0x40/0x40
[  113.136154][ T6172]  futex_wait+0x1bc/0x5c0
[  113.140568][ T6172]  ? futex_wait_setup+0x270/0x270
[  113.145676][ T6172]  ? file_end_write+0xdb/0x250
[  113.150518][ T6172]  ? vfs_write+0x5de/0x9a0
[  113.155003][ T6172]  do_futex+0x2ff/0x3e0
[  113.159216][ T6172]  ? file_end_write+0x250/0x250
[  113.164143][ T6172]  ? __ia32_sys_get_robust_list+0x110/0x110
[  113.170108][ T6172]  __se_sys_futex+0x3a9/0x440
[  113.174853][ T6172]  ? __x64_sys_futex+0xf0/0xf0
[  113.179719][ T6172]  ? __x64_sys_futex+0x21/0xf0
[  113.184640][ T6172]  do_syscall_64+0x55/0xb0
[  113.189125][ T6172]  ? clear_bhb_loop+0x40/0x90
[  113.193870][ T6172]  ? clear_bhb_loop+0x40/0x90
[  113.198650][ T6172]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  113.204601][ T6172] RIP: 0033:0x7f6b5f79f559
[  113.209094][ T6172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  113.228785][ T6172] RSP: 002b:00007f6b607330e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  113.237264][ T6172] RAX: ffffffffffffffda RBX: 00007f6b5fa25fa8 RCX: 00007f6b5f79f559
[  113.245297][ T6172] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6b5fa25fa8
[  113.253329][ T6172] RBP: 00007f6b5fa25fa0 R08: 0000000000000000 R09: 0000000000000000
[  113.261355][ T6172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  113.269367][ T6172] R13: 00007f6b5fa26038 R14: 00007ffd5bc44c40 R15: 00007ffd5bc44d28
[  113.277375][ T6172]  </TASK>
[  114.248685][ T1094] team0 (unregistering): Port device team_slave_1 removed
[  114.309457][   T52] Bluetooth: hci1: command tx timeout
[  114.363867][ T5797] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  114.373405][ T5797] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  114.384895][ T5797] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  114.394163][ T1094] team0 (unregistering): Port device team_slave_0 removed
[  114.408624][ T5797] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  114.417592][ T5797] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  114.437559][ T5797] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  114.480693][ T1094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  114.530984][ T1094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  114.851485][ T1094] bond0 (unregistering): Released all slaves
[  115.107144][ T6188] rxe_eth0 speed is unknown, defaulting to 1000
[  115.216937][ T6116] chnl_net:caif_netlink_parms(): no params data found
[  115.648711][ T6116] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.655951][ T6116] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.716428][ T6116] bridge_slave_0: entered allmulticast mode
[  115.747571][ T6116] bridge_slave_0: entered promiscuous mode
[  115.757186][ T6116] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.767933][ T6116] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.784516][ T6116] bridge_slave_1: entered allmulticast mode
[  115.797824][ T6116] bridge_slave_1: entered promiscuous mode
[  115.895017][ T6116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  115.950423][ T6116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  116.159288][ T3508] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.207264][ T6116] team0: Port device team_slave_0 added
[  116.246288][ T6116] team0: Port device team_slave_1 added
[  116.291489][ T3508] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.403473][ T5797] Bluetooth: hci1: command tx timeout
[  116.414442][ T3508] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.439102][ T6116] batman_adv: batadv0: Adding interface: batadv_slave_0
[  116.446135][ T6116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.474294][ T6116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  116.490097][ T6116] batman_adv: batadv0: Adding interface: batadv_slave_1
[  116.497244][ T6116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.528103][ T6116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  116.557981][ T5797] Bluetooth: hci4: command tx timeout
[  116.626345][ T3508] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.824728][ T6116] hsr_slave_0: entered promiscuous mode
[  116.853352][ T6116] hsr_slave_1: entered promiscuous mode
[  116.874641][ T6116] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  116.896407][ T6116] Cannot create hsr debugfs directory
[  117.144872][ T6188] chnl_net:caif_netlink_parms(): no params data found
[  117.973926][ T6188] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.994137][ T6188] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.007917][ T6188] bridge_slave_0: entered allmulticast mode
[  118.025791][ T6188] bridge_slave_0: entered promiscuous mode
[  118.054928][ T6188] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.077977][ T6188] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.105756][ T6188] bridge_slave_1: entered allmulticast mode
[  118.119574][ T6188] bridge_slave_1: entered promiscuous mode
[  118.297103][ T6116] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  118.478145][ T5797] Bluetooth: hci1: command tx timeout
[  118.505868][ T6116] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  118.628282][ T5797] Bluetooth: hci4: command tx timeout
[  118.639500][ T6188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  118.673431][ T6116] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  118.704703][ T6188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  118.730703][ T6116] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  118.822585][ T6188] team0: Port device team_slave_0 added
[  118.843082][ T6188] team0: Port device team_slave_1 added
[  119.039000][ T6188] batman_adv: batadv0: Adding interface: batadv_slave_0
[  119.046048][ T6188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.111214][ T6188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  119.135040][ T6188] batman_adv: batadv0: Adding interface: batadv_slave_1
[  119.155490][ T6188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.192719][ T6188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  119.509412][ T6188] hsr_slave_0: entered promiscuous mode
[  119.533665][ T6188] hsr_slave_1: entered promiscuous mode
[  119.567981][ T6188] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  119.575645][ T6188] Cannot create hsr debugfs directory
[  119.726858][ T6266] loop1: detected capacity change from 0 to 764
[  119.988847][ T6266] rock: directory entry would overflow storage
[  119.995583][ T6266] rock: sig=0x5245, size=8, remaining=5
[  120.326805][ T3508] hsr_slave_0: left promiscuous mode
[  120.407969][ T3508] hsr_slave_1: left promiscuous mode
[  120.438441][ T3508] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.445954][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.468801][ T3508] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.476285][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.525260][ T3508] bridge_slave_1: left allmulticast mode
[  120.543380][ T3508] bridge_slave_1: left promiscuous mode
[  120.563565][ T3508] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.658853][ T3508] bridge_slave_0: left allmulticast mode
[  120.664595][ T3508] bridge_slave_0: left promiscuous mode
[  120.688841][ T3508] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.707761][ T5797] Bluetooth: hci4: command tx timeout
[  120.765664][ T3508] veth1_macvtap: left promiscuous mode
[  120.778114][ T3508] veth0_macvtap: left promiscuous mode
[  120.789239][ T3508] veth1_vlan: left promiscuous mode
[  120.794675][ T3508] veth0_vlan: left promiscuous mode
[  122.076394][ T5872] IPVS: starting estimator thread 0...
[  122.188110][ T6294] IPVS: using max 18 ests per chain, 43200 per kthread
[  122.255379][ T3508] team0 (unregistering): Port device team_slave_1 removed
[  122.326672][ T3508] team0 (unregistering): Port device team_slave_0 removed
[  122.432285][ T3508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  122.524171][ T3508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  122.728407][ T5872] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  122.787810][ T5797] Bluetooth: hci4: command tx timeout
[  122.837262][ T6304] syz.1.105 uses obsolete (PF_INET,SOCK_PACKET)
[  122.919871][ T5872] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  122.939384][ T5872] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  122.958573][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.007376][ T5872] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected
[  123.029065][ T5872] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81
[  123.036866][ T5872] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1
[  123.065661][ T5872] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84
[  123.081533][ T5872] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2
[  123.111083][ T5872] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  123.165610][ T5872] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88
[  123.196746][ T5872] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6
[  123.228159][ T5872] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  123.286607][ T3508] bond0 (unregistering): Released all slaves
[  123.461804][  T789] usb 3-1: USB disconnect, device number 4
[  123.493439][  T789] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  123.548078][  T789] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  123.575217][  T789] keyspan 3-1:1.0: device disconnected
[  123.680823][ T6116] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.813814][ T6116] 8021q: adding VLAN 0 to HW filter on device team0
[  123.862519][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.870591][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[  123.894201][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.901472][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[  124.051203][ T6188] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  124.107783][ T6188] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  124.172341][ T6188] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  124.211726][ T6188] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  124.339662][  T789] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  124.527862][  T789] usb 2-1: Using ep0 maxpacket: 8
[  124.541516][  T789] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  124.552882][ T6188] 8021q: adding VLAN 0 to HW filter on device bond0
[  124.571764][  T789] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  124.607542][  T789] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  124.635436][ T6188] 8021q: adding VLAN 0 to HW filter on device team0
[  124.652182][  T789] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  124.673846][  T789] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  124.699001][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.706230][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state
[  124.723054][  T789] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  124.736956][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.744297][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state
[  124.760043][  T789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.918217][ T6188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  125.016911][  T789] usb 2-1: usb_control_msg returned -32
[  125.034093][  T789] usbtmc 2-1:16.0: can't read capabilities
[  125.057016][ T6116] 8021q: adding VLAN 0 to HW filter on device batadv0
[  125.408466][ T6317] usbtmc 2-1:16.0: usb_control_msg returned -32
[  125.425699][ T6348] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -90
[  125.449424][    T9] usb 2-1: USB disconnect, device number 2
[  125.505168][ T6188] 8021q: adding VLAN 0 to HW filter on device batadv0
[  125.892887][ T6116] veth0_vlan: entered promiscuous mode
[  125.931207][ T6116] veth1_vlan: entered promiscuous mode
[  125.994725][ T6116] veth0_macvtap: entered promiscuous mode
[  126.017257][ T6116] veth1_macvtap: entered promiscuous mode
[  126.091212][ T6116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  126.107267][ T6116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.134983][ T6116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  126.160247][ T6116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.185460][ T6116] batman_adv: batadv0: Interface activated: batadv_slave_0
[  126.199077][ T6116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  126.210236][ T6116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.228355][ T6116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  126.247739][ T6116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.271730][ T6116] batman_adv: batadv0: Interface activated: batadv_slave_1
[  126.293464][ T6371] resource: resource sanity check: requesting [mem 0x00000000fe800000-0x00000000fe801fff], which spans more than 0000:00:03.0 [mem 0xfe800000-0xfe80007f]
[  126.325957][ T6116] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.339427][ T6371] caller generic_access_phys+0x33f/0x650 mapping multiple BARs
[  126.368029][ T6116] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.387052][ T6116] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.402151][ T6116] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.660059][ T6188] veth0_vlan: entered promiscuous mode
[  126.711847][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.730385][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.806644][ T3536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.838427][ T6188] veth1_vlan: entered promiscuous mode
[  126.858425][ T3536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.981600][ T6188] veth0_macvtap: entered promiscuous mode
[  127.030086][ T6188] veth1_macvtap: entered promiscuous mode
[  127.099268][ T6188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.139056][ T6188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.177688][ T6188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.214030][ T6188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.235834][ T6188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.252800][ T6188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.280268][ T6188] batman_adv: batadv0: Interface activated: batadv_slave_0
[  127.290717][ T6396] netlink: 'syz.4.57': attribute type 4 has an invalid length.
[  127.355135][ T6188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.394431][ T6188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.424304][ T6188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.452358][ T6188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.470467][ T6188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.492384][ T6188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.519177][ T6188] batman_adv: batadv0: Interface activated: batadv_slave_1
[  127.534092][ T6398] netlink: 'syz.4.57': attribute type 4 has an invalid length.
[  127.605725][ T6188] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.624813][ T6188] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.643959][ T6188] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.686574][ T6188] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.947056][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.983280][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.113631][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.141285][ T6411] syz_tun: entered allmulticast mode
[  128.168003][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.176798][ T6410] syz_tun: left allmulticast mode
[  128.497891][ T5871] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  128.637885][  T789] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  128.703814][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.722150][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.734191][ T5871] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  128.757890][ T5871] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  128.767135][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.819625][ T5871] usb 3-1: config 0 descriptor??
[  128.848320][  T789] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  128.870633][  T789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.898125][  T789] usb 5-1: Product: syz
[  128.908276][  T789] usb 5-1: Manufacturer: syz
[  128.916523][  T789] usb 5-1: SerialNumber: syz
[  129.211811][  T789] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  129.257063][ T5871] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[  129.268102][  T789] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  129.317489][ T5871] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  129.692698][ T6450] loop5: detected capacity change from 0 to 164
[  129.765127][ T6080] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  130.110180][  T789] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -71
[  130.160460][  T789] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  130.198048][  T789] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  130.216177][  T789] lan78xx: probe of 5-1:1.0 failed with error -71
[  130.270989][  T789] usb 5-1: USB disconnect, device number 2
[  130.339557][ T6462] jffs2: notice: (6462) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  130.791274][ T6471] loop1: detected capacity change from 0 to 8192
[  130.866529][ T6471] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  130.891744][ T6471] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  130.902521][ T6471] REISERFS (device loop1): using ordered data mode
[  130.909602][ T6471] reiserfs: using flush barriers
[  130.922115][ T6471] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  130.940352][ T6471] REISERFS (device loop1): checking transaction log (loop1)
[  131.139497][ T6471] REISERFS (device loop1): Using tea hash to sort names
[  131.164928][ T6471] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  131.217458][ T6471] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  131.484547][ T3370] usb 3-1: USB disconnect, device number 5
[  131.639249][ T6498] FAULT_INJECTION: forcing a failure.
[  131.639249][ T6498] name failslab, interval 1, probability 0, space 0, times 0
[  131.657756][ T6498] CPU: 1 PID: 6498 Comm: syz.2.136 Not tainted syzkaller #0
[  131.665131][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  131.675293][ T6498] Call Trace:
[  131.678627][ T6498]  <TASK>
[  131.681620][ T6498]  dump_stack_lvl+0x18c/0x250
[  131.686378][ T6498]  ? show_regs_print_info+0x20/0x20
[  131.691647][ T6498]  ? load_image+0x420/0x420
[  131.696220][ T6498]  ? __might_sleep+0xe0/0xe0
[  131.700878][ T6498]  ? __lock_acquire+0x7eb0/0x7eb0
[  131.705984][ T6498]  should_fail_ex+0x394/0x4c0
[  131.710736][ T6498]  should_failslab+0x9/0x20
[  131.715311][ T6498]  slab_pre_alloc_hook+0x59/0x300
[  131.720399][ T6498]  ? lock_chain_count+0x20/0x20
[  131.725321][ T6498]  ? _raw_spin_lock_irq+0xbb/0xf0
[  131.730428][ T6498]  ? snd_seq_fifo_new+0x4f/0x1b0
[  131.735431][ T6498]  __kmem_cache_alloc_node+0x53/0x260
[  131.740880][ T6498]  ? snd_seq_fifo_new+0x4f/0x1b0
[  131.745903][ T6498]  kmalloc_trace+0x2a/0xe0
[  131.750414][ T6498]  snd_seq_fifo_new+0x4f/0x1b0
[  131.755235][ T6498]  snd_seq_open+0x1fe/0x500
[  131.759813][ T6498]  chrdev_open+0x58c/0x600
[  131.764291][ T6498]  ? cd_forget+0x160/0x160
[  131.768812][ T6498]  ? fsnotify_perm+0x3ed/0x5e0
[  131.773639][ T6498]  do_dentry_open+0x880/0x14b0
[  131.778475][ T6498]  ? cd_forget+0x160/0x160
[  131.782970][ T6498]  path_openat+0x284f/0x3270
[  131.787646][ T6498]  ? do_sys_openat2+0xda/0x1d0
[  131.792471][ T6498]  ? __x64_sys_openat+0x139/0x160
[  131.797565][ T6498]  ? verify_lock_unused+0x140/0x140
[  131.802849][ T6498]  ? do_filp_open+0x430/0x430
[  131.807599][ T6498]  do_filp_open+0x1f2/0x430
[  131.812158][ T6498]  ? vfs_tmpfile+0x620/0x620
[  131.816837][ T6498]  ? _raw_spin_unlock+0x28/0x40
[  131.821785][ T6498]  ? alloc_fd+0x590/0x640
[  131.826192][ T6498]  do_sys_openat2+0x134/0x1d0
[  131.830938][ T6498]  ? do_sys_open+0xe0/0xe0
[  131.835425][ T6498]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  131.841471][ T6498]  ? lock_chain_count+0x20/0x20
[  131.846391][ T6498]  __x64_sys_openat+0x139/0x160
[  131.851317][ T6498]  do_syscall_64+0x55/0xb0
[  131.855797][ T6498]  ? clear_bhb_loop+0x40/0x90
[  131.860551][ T6498]  ? clear_bhb_loop+0x40/0x90
[  131.865303][ T6498]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  131.871264][ T6498] RIP: 0033:0x7f5cba79f559
[  131.875730][ T6498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  131.895403][ T6498] RSP: 002b:00007f5cbb66f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  131.903883][ T6498] RAX: ffffffffffffffda RBX: 00007f5cbaa25fa0 RCX: 00007f5cba79f559
[  131.911916][ T6498] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: ffffffffffffff9c
[  131.919955][ T6498] RBP: 00007f5cba836b20 R08: 0000000000000000 R09: 0000000000000000
[  131.927997][ T6498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  131.936017][ T6498] R13: 00007f5cbaa26038 R14: 00007f5cbaa25fa0 R15: 00007ffe92e1f288
[  131.944063][ T6498]  </TASK>
[  132.071172][ T6502] binder: 6499:6502 ioctl c0306201 200000000640 returned -14
[  132.575623][ T6514] syz_tun: entered allmulticast mode
[  132.690382][ T6518] FAULT_INJECTION: forcing a failure.
[  132.690382][ T6518] name failslab, interval 1, probability 0, space 0, times 0
[  132.709226][ T6518] CPU: 0 PID: 6518 Comm: syz.1.143 Not tainted syzkaller #0
[  132.716607][ T6518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  132.726745][ T6518] Call Trace:
[  132.730076][ T6518]  <TASK>
[  132.733062][ T6518]  dump_stack_lvl+0x18c/0x250
[  132.737811][ T6518]  ? show_regs_print_info+0x20/0x20
[  132.743073][ T6518]  ? load_image+0x420/0x420
[  132.747632][ T6518]  ? __might_sleep+0xe0/0xe0
[  132.752288][ T6518]  ? __lock_acquire+0x7eb0/0x7eb0
[  132.757419][ T6518]  should_fail_ex+0x394/0x4c0
[  132.762174][ T6518]  should_failslab+0x9/0x20
[  132.766735][ T6518]  slab_pre_alloc_hook+0x59/0x300
[  132.771823][ T6518]  kmem_cache_alloc_node+0x5e/0x320
[  132.777088][ T6518]  ? __alloc_skb+0x103/0x2c0
[  132.781831][ T6518]  __alloc_skb+0x103/0x2c0
[  132.786410][ T6518]  tcp_stream_alloc_skb+0x3d/0x330
[  132.791594][ T6518]  tcp_connect+0x16da/0x5310
[  132.796290][ T6518]  ? mark_lock+0x94/0x320
[  132.800687][ T6518]  ? __lock_acquire+0x7eb0/0x7eb0
[  132.805785][ T6518]  ? seqcount_lockdep_reader_access+0x12b/0x1d0
[  132.812142][ T6518]  ? seqcount_lockdep_reader_access+0x191/0x1d0
[  132.818461][ T6518]  ? lock_chain_count+0x20/0x20
[  132.823735][ T6518]  ? tcp_options_write+0xc70/0xc70
[  132.828915][ T6518]  ? get_random_u32+0x4d5/0x930
[  132.833915][ T6518]  ? lockdep_hardirqs_on+0x98/0x150
[  132.839188][ T6518]  ? read_tsc+0x9/0x20
[  132.843366][ T6518]  ? __asan_memset+0x22/0x40
[  132.848040][ T6518]  ? tcp_fastopen_active_should_disable+0x240/0x240
[  132.854715][ T6518]  ? inet6_hash_connect+0x7b/0xe0
[  132.859801][ T6518]  tcp_v6_connect+0x11ba/0x18e0
[  132.864748][ T6518]  ? tcp_v6_pre_connect+0xf0/0xf0
[  132.869842][ T6518]  ? aa_sk_perm+0x8e0/0x8e0
[  132.874407][ T6518]  ? tomoyo_check_inet_address+0x6b0/0x910
[  132.880284][ T6518]  ? tomoyo_check_inet_address+0x27d/0x910
[  132.886167][ T6518]  ? tomoyo_check_unix_address+0x7c0/0x7c0
[  132.892045][ T6518]  ? mark_lock+0x94/0x320
[  132.896443][ T6518]  __inet_stream_connect+0x254/0xdf0
[  132.901797][ T6518]  ? lock_chain_count+0x20/0x20
[  132.906713][ T6518]  ? __local_bh_enable_ip+0x13a/0x1c0
[  132.912154][ T6518]  ? inet_dgram_connect+0x340/0x340
[  132.917417][ T6518]  ? __local_bh_enable_ip+0x13a/0x1c0
[  132.922861][ T6518]  ? _local_bh_enable+0xa0/0xa0
[  132.927836][ T6518]  inet_stream_connect+0x66/0xa0
[  132.932879][ T6518]  __sys_connect+0x3da/0x470
[  132.937527][ T6518]  ? __sys_connect_file+0x170/0x170
[  132.942800][ T6518]  __x64_sys_connect+0x7a/0x90
[  132.947624][ T6518]  do_syscall_64+0x55/0xb0
[  132.952098][ T6518]  ? clear_bhb_loop+0x40/0x90
[  132.956856][ T6518]  ? clear_bhb_loop+0x40/0x90
[  132.961610][ T6518]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  132.967582][ T6518] RIP: 0033:0x7f6b5f79f559
[  132.972150][ T6518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  132.991943][ T6518] RSP: 002b:00007f6b60733028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  133.000425][ T6518] RAX: ffffffffffffffda RBX: 00007f6b5fa25fa0 RCX: 00007f6b5f79f559
[  133.008477][ T6518] RDX: 000000000000001c RSI: 0000200000001500 RDI: 0000000000000003
[  133.016516][ T6518] RBP: 00007f6b5f836b20 R08: 0000000000000000 R09: 0000000000000000
[  133.024547][ T6518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  133.032585][ T6518] R13: 00007f6b5fa26038 R14: 00007f6b5fa25fa0 R15: 00007ffd5bc44d28
[  133.040659][ T6518]  </TASK>
[  133.124401][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  133.137747][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  133.396716][ T6529] comedi: valid board names for 8255 driver are:
[  133.437821][ T6529]  8255
[  133.440678][ T6529] comedi: valid board names for vmk80xx driver are:
[  133.447397][ T6529]  vmk80xx
[  133.478261][ T6529] comedi: valid board names for usbduxsigma driver are:
[  133.506742][ T6529]  usbduxsigma
[  133.538434][ T6529] comedi: valid board names for usbduxfast driver are:
[  133.555632][ T6529]  usbduxfast
[  133.564905][ T6529] comedi: valid board names for usbdux driver are:
[  133.583284][ T6533] loop4: detected capacity change from 0 to 1024
[  133.594448][ T6529]  usbdux
[  133.598058][ T6529] comedi: valid board names for ni6501 driver are:
[  133.608296][ T6533] EXT4-fs: Ignoring removed nomblk_io_submit option
[  133.630640][ T6529]  ni6501
[  133.640758][ T6529] comedi: valid board names for dt9812 driver are:
[  133.681482][ T6529]  dt9812
[  133.684552][ T6529] comedi: valid board names for ni_labpc_cs driver are:
[  133.707197][ T6533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.728423][ T6529]  ni_labpc_cs
[  133.731869][ T6529] comedi: valid board names for ni_daq_700 driver are:
[  133.739249][ T6529]  ni_daq_700
[  133.742603][ T6529] comedi: valid board names for labpc_pci driver are:
[  133.749880][ T6529]  labpc_pci
[  133.753133][ T6529] comedi: valid board names for adl_pci9118 driver are:
[  133.761182][ T6529]  pci9118dg
[  133.764447][ T6529]  pci9118hg
[  133.767828][ T6529]  pci9118hr
[  133.771082][ T6529] comedi: valid board names for 8255_pci driver are:
[  133.778185][ T6529]  8255_pci
[  133.781344][ T6529] comedi: valid board names for s526 driver are:
[  133.789540][ T6529]  s526
[  133.792664][ T6529] comedi: valid board names for multiq3 driver are:
[  133.807866][ T6529]  multiq3
[  133.817051][ T6529] comedi: valid board names for pcmuio driver are:
[  133.865306][ T6529]  pcmuio48
[  133.887776][ T6529]  pcmuio96
[  133.904555][ T6529] comedi: valid board names for pcmmio driver are:
[  133.923822][ T6529]  pcmmio
[  133.950841][ T6529] comedi: valid board names for pcmda12 driver are:
[  133.957532][ T6529]  pcmda12
[  133.997748][ T6529] comedi: valid board names for pcmad driver are:
[  134.004260][ T6529]  pcmad12
[  134.007369][ T6529]  pcmad16
[  134.050591][ T6529] comedi: valid board names for ni_labpc driver are:
[  134.068244][ T6529]  lab-pc-1200
[  134.071698][ T6529]  lab-pc-1200ai
[  134.075285][ T6529]  lab-pc+
[  134.118172][ T6529] comedi: valid board names for atmio16 driver are:
[  134.124862][ T6529]  atmio16
[  134.146099][ T6550] 9pnet: p9_errstr2errno: server reported unknown error õ1
[  134.167952][ T6529]  atmio16d
[  134.171176][ T6529] comedi: valid board names for ni_at_ao driver are:
[  134.207746][ T6529]  at-ao-6
[  134.210879][ T6529]  at-ao-10
[  134.214034][ T6529] comedi: valid board names for ni_at_a2150 driver are:
[  134.262778][ T6529]  ni_at_a2150
[  134.266251][ T6529] comedi: valid board names for adq12b driver are:
[  134.308554][ T6529]  adq12b
[  134.316037][ T6529] comedi: valid board names for mpc624 driver are:
[  134.348011][ T6529]  mpc624
[  134.351043][ T6529] comedi: valid board names for c6xdigio driver are:
[  134.377761][ T6529]  c6xdigio
[  134.380969][ T6529] comedi: valid board names for aio_iiro_16 driver are:
[  134.407886][ T6529]  aio_iiro_16
[  134.411353][ T6529] comedi: valid board names for aio_aio12_8 driver are:
[  134.441172][ T6529]  aio_aio12_8
[  134.463712][ T6529]  aio_ai12_8
[  134.467093][ T6529]  aio_ao12_4
[  134.487949][ T6529] comedi: valid board names for fl512 driver are:
[  134.504685][ T6529]  fl512
[  134.527669][ T6529] comedi: valid board names for dmm32at driver are:
[  134.534380][ T6529]  dmm32at
[  134.537446][ T6529] comedi: valid board names for dt282x driver are:
[  134.568854][ T6529]  dt2821
[  134.571887][ T6529]  dt2821-f
[  134.575035][ T6529]  dt2821-g
[  134.588132][ T6529]  dt2823
[  134.594254][ T6529]  dt2824-pgh
[  134.601391][ T6529]  dt2824-pgl
[  134.607399][ T6529]  dt2825
[  134.631470][ T6529]  dt2827
[  134.634506][ T6529]  dt2828
[  134.637490][ T6529]  dt2829
[  134.665119][ T6529]  dt21-ez
[  134.675241][ T6529]  dt23-ez
[  134.685377][ T6529]  dt24-ez
[  134.695505][ T6529]  dt24-ez-pgl
[  134.707891][ T6529] comedi: valid board names for dt2817 driver are:
[  134.725008][ T6116] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.738394][ T6529]  dt2817
[  134.741766][ T6529] comedi: valid board names for dt2815 driver are:
[  134.757975][ T6529]  dt2815
[  134.770341][ T6529] comedi: valid board names for dt2814 driver are:
[  134.785335][ T6529]  dt2814
[  134.797667][ T6529] comedi: valid board names for dt2811 driver are:
[  134.829103][ T6529]  dt2811-pgh
[  134.832476][ T6529]  dt2811-pgl
[  134.865767][ T6529] comedi: valid board names for dt2801 driver are:
[  134.882947][ T6529]  dt2801
[  134.885981][ T6529] comedi: valid board names for das6402 driver are:
[  134.925252][ T6529]  das6402-12
[  134.935338][ T6529]  das6402-16
[  134.940886][ T6529] comedi: valid board names for das1800 driver are:
[  134.976932][ T6529]  das-1701st
[  134.988561][ T6529]  das-1701st-da
[  134.992192][ T6529]  das-1702st
[  134.995516][ T6529]  das-1702st-da
[  135.023711][ T6529]  das-1702hr
[  135.027090][ T6529]  das-1702hr-da
[  135.047273][ T6529]  das-1701ao
[  135.057719][ T6529]  das-1702ao
[  135.062087][ T6529]  das-1801st
[  135.079971][ T6529]  das-1801st-da
[  135.083596][ T6529]  das-1802st
[  135.089486][ T6529]  das-1802st-da
[  135.093107][ T6529]  das-1802hr
[  135.096437][ T6529]  das-1802hr-da
[  135.122500][ T6529]  das-1801hc
[  135.125897][ T6529]  das-1802hc
[  135.147722][ T6529]  das-1801ao
[  135.158790][ T6529]  das-1802ao
[  135.172885][ T6529] comedi: valid board names for das800 driver are:
[  135.210975][ T6529]  das-800
[  135.214117][ T6529]  cio-das800
[  135.217486][ T6529]  das-801
[  135.247812][ T6529]  cio-das801
[  135.251182][ T6529]  das-802
[  135.254251][ T6529]  cio-das802
[  135.282935][ T6529]  cio-das802/16
[  135.286576][ T6529] comedi: valid board names for isa-das08 driver are:
[  135.310375][ T6529]  isa-das08
[  135.313654][ T6529]  das08-pgm
[  135.322850][ T6582] FAULT_INJECTION: forcing a failure.
[  135.322850][ T6582] name failslab, interval 1, probability 0, space 0, times 0
[  135.340340][ T6529]  das08-pgh
[  135.343670][ T6529]  das08-pgl
[  135.346947][ T6529]  das08-aoh
[  135.350770][ T6582] CPU: 1 PID: 6582 Comm: syz.5.161 Not tainted syzkaller #0
[  135.358122][ T6582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  135.368242][ T6582] Call Trace:
[  135.371569][ T6582]  <TASK>
[  135.374552][ T6582]  dump_stack_lvl+0x18c/0x250
[  135.379390][ T6582]  ? show_regs_print_info+0x20/0x20
[  135.384692][ T6582]  ? load_image+0x420/0x420
[  135.389293][ T6582]  ? __might_sleep+0xe0/0xe0
[  135.393956][ T6582]  ? __lock_acquire+0x7eb0/0x7eb0
[  135.399057][ T6582]  should_fail_ex+0x394/0x4c0
[  135.403817][ T6582]  should_failslab+0x9/0x20
[  135.408383][ T6582]  slab_pre_alloc_hook+0x59/0x300
[  135.413475][ T6582]  kmem_cache_alloc_lru+0x4d/0x2c0
[  135.418652][ T6582]  ? __d_alloc+0x31/0x710
[  135.423059][ T6582]  __d_alloc+0x31/0x710
[  135.427297][ T6582]  ? _raw_spin_unlock+0x28/0x40
[  135.432191][ T6582]  d_make_root+0x4a/0xe0
[  135.436472][ T6582]  kernfs_get_tree+0x59b/0x910
[  135.441316][ T6582]  ? kernfs_super_ns+0x60/0x60
[  135.446163][ T6582]  sysfs_get_tree+0x46/0x110
[  135.450978][ T6582]  vfs_get_tree+0x8c/0x280
[  135.455468][ T6582]  do_new_mount+0x24a/0xa60
[  135.460025][ T6582]  __se_sys_mount+0x2e7/0x3d0
[  135.464802][ T6582]  ? __x64_sys_mount+0xc0/0xc0
[  135.469626][ T6582]  ? lockdep_hardirqs_on+0x98/0x150
[  135.474929][ T6582]  ? __x64_sys_mount+0x20/0xc0
[  135.479766][ T6582]  do_syscall_64+0x55/0xb0
[  135.484235][ T6582]  ? clear_bhb_loop+0x40/0x90
[  135.488964][ T6582]  ? clear_bhb_loop+0x40/0x90
[  135.493694][ T6582]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  135.499632][ T6582] RIP: 0033:0x7fc5a439f559
[  135.504092][ T6582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  135.523743][ T6582] RSP: 002b:00007fc5a52ca028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  135.532281][ T6582] RAX: ffffffffffffffda RBX: 00007fc5a4625fa0 RCX: 00007fc5a439f559
[  135.540331][ T6582] RDX: 0000200000000b80 RSI: 0000200000000b40 RDI: 0000000000000000
[  135.548343][ T6582] RBP: 00007fc5a4436b20 R08: 0000000000000000 R09: 0000000000000000
[  135.556351][ T6582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  135.564367][ T6582] R13: 00007fc5a4626038 R14: 00007fc5a4625fa0 R15: 00007fff6a9ff628
[  135.572398][ T6582]  </TASK>
[  135.587705][ T6529]  das08-aol
[  135.590992][ T6529]  das08-aom
[  135.594239][ T6529]  das08/jr-ao
[  135.632945][ T6529]  das08jr-16-ao
[  135.636576][ T6529]  pc104-das08
[  135.657415][ T6529]  das08jr/16
[  135.665307][ T6529] comedi: valid board names for das16m1 driver are:
[  135.673827][ T6529]  das16m1
[  135.677180][ T6529] comedi: valid board names for dac02 driver are:
[  135.684167][ T6529]  dac02
[  135.687071][ T6529] comedi: valid board names for rti802 driver are:
[  135.694127][ T6529]  rti802
[  135.697276][ T6529] comedi: valid board names for rti800 driver are:
[  135.713681][ T6529]  rti800
[  135.716688][ T6529]  rti815
[  135.720202][ T6529] comedi: valid board names for pcm3724 driver are:
[  135.727173][ T6529]  pcm3724
[  135.733943][ T6529] comedi: valid board names for pcl818 driver are:
[  135.741457][ T6529]  pcl818l
[  135.744532][ T6529]  pcl818h
[  135.748665][ T3370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  135.757774][ T6529]  pcl818hd
[  135.761813][ T6529]  pcl818hg
[  135.767295][ T6529]  pcl818
[  135.772671][ T6529]  pcl718
[  135.780167][ T6529]  pcm3718
[  135.783505][ T6529] comedi: valid board names for pcl816 driver are:
[  135.829681][ T6529]  pcl816
[  135.835053][ T6529]  pcl814b
[  135.847477][ T6529] comedi: valid board names for pcl812 driver are:
[  135.866894][ T6529]  pcl812
[  135.873530][ T6529]  pcl812pg
[  135.886303][ T6529]  acl8112pg
[  135.894319][ T6529]  acl8112dg
[  135.904487][ T6529]  acl8112hg
[  135.916979][ T6529]  a821pgl
[  135.926279][ T6529]  a821pglnda
[  135.948730][ T6529]  a821pgh
[  135.953191][ T6529]  a822pgl
[  135.956278][ T6529]  a822pgh
[  135.968240][ T6529]  a823pgl
[  135.971344][ T6529]  a823pgh
[  135.987698][ T6529]  pcl813
[  135.992222][ T6529]  pcl813b
[  136.005562][ T6529]  acl8113
[  136.012365][ T6529]  iso813
[  136.024400][ T6529]  acl8216
[  136.033376][ T6529]  a826pg
[  136.044694][ T6529] comedi: valid board names for pcl730 driver are:
[  136.064634][ T6529]  pcl730
[  136.071543][ T6529]  iso730
[  136.084864][ T6529]  acl7130
[  136.093648][ T6529]  pcm3730
[  136.103863][ T6529]  pcl725
[  136.116267][ T6529]  p8r8dio
[  136.126028][ T6529]  acl7225b
[  136.132051][ T6529]  p16r16dio
[  136.135506][ T6529]  pcl733
[  136.167323][ T6529]  pcl734
[  136.174906][ T6529]  opmm-1616-xt
[  136.186930][ T6529]  pearl-mm-p
[  136.198320][ T6529]  ir104-pbf
[  136.204861][ T6529] comedi: valid board names for pcl726 driver are:
[  136.257876][ T6529]  pcl726
[  136.260906][ T6529]  pcl727
[  136.263891][ T6529]  pcl728
[  136.266874][ T6529]  acl6126
[  136.281588][ T6529]  acl6128
[  136.284696][ T6529] comedi: valid board names for pcl724 driver are:
[  136.303481][ T6529]  pcl724
[  136.306543][ T6529]  pcl722
[  136.311370][ T6529]  pcl731
[  136.314595][ T6529]  acl7122
[  136.323944][ T6529]  acl7124
[  136.327226][ T6529]  pet48dio
[  136.330530][ T6529]  pcmio48
[  136.333803][ T6529]  onyx-mm-dio
[  136.337364][ T6529] comedi: valid board names for pcl711 driver are:
[  136.349086][ T6529]  pcl711
[  136.352142][ T6529]  pcl711b
[  136.355216][ T6529]  acl8112hg
[  136.371257][ T6529]  acl8112dg
[  136.377853][ T6529] comedi: valid board names for amplc_pc263 driver are:
[  136.400878][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  136.417883][ T6529]  pc263
[  136.421288][ T6529] comedi: valid board names for amplc_pc236 driver are:
[  136.453209][ T6529]  pc36at
[  136.456310][ T6529] comedi: valid board names for amplc_dio200 driver are:
[  136.466930][ T6529]  pc212e
[  136.470275][ T6529]  pc214e
[  136.474440][ T6529]  pc215e
[  136.477495][ T6529]  pc218e
[  136.490854][ T6529]  pc272e
[  136.500993][ T6529] comedi: valid board names for comedi_parport driver are:
[  136.518109][ T6529]  comedi_parport
[  136.525423][ T6529] comedi: valid board names for comedi_test driver are:
[  136.543018][ T6529]  comedi_test
[  136.552971][ T6529] comedi: valid board names for comedi_bond driver are:
[  136.568164][ T6529]  comedi_bond
[  136.787908][ T5794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  136.920846][ T6631] ip_tables: iptables: counters copy to user failed while replacing table
[  136.968367][ T6631] raw_sendmsg: syz.1.176 forgot to set AF_INET. Fix it!
[  137.787329][ T6661] Driver unsupported XDP return value 0 on prog  (id 30) dev N/A, expect packet loss!
[  137.828546][ T5794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  137.903384][ T6667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  137.914133][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.071471][  T789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.358737][  T789] kernel write not supported for file /dummy_udc (pid: 789 comm: kworker/0:2)
[  138.731532][ T6686] loop5: detected capacity change from 0 to 8192
[  138.798019][ T6686] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512).
[  138.855208][ T6686] ntfs3: loop5: ino=b, mi_enum_attr
[  138.868036][ T6686] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  138.880349][ T5794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.933460][ T6686] ntfs3: loop5: Failed to load $Extend (-2).
[  138.948911][ T6686] ntfs3: loop5: Failed to initialize $Extend.
[  139.588435][ T6724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  139.761659][ T6697] loop4: detected capacity change from 0 to 32768
[  139.807336][ T6697] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.195 (6697)
[  139.847746][ T6697] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  139.877933][ T6697] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  139.908273][ T6697] BTRFS info (device loop4): using free space tree
[  139.916956][ T6727] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  140.033635][ T6743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.203'.
[  140.092967][ T6697] BTRFS info (device loop4): enabling ssd optimizations
[  140.122131][ T6697] BTRFS info (device loop4): auto enabling async discard
[  140.500336][ T6757] netlink: 12 bytes leftover after parsing attributes in process `syz.5.205'.
[  140.545285][ T6757] netlink: 12 bytes leftover after parsing attributes in process `syz.5.205'.
[  140.763458][ T6697] BTRFS info (device loop4): balance: start -dconvert=raid0 -mconvert=raid0
[  140.939017][ T6697] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata
[  140.954081][ T5794] net_ratelimit: 2 callbacks suppressed
[  140.954097][ T5794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.094859][ T6776] loop5: detected capacity change from 0 to 2048
[  141.109241][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.213350][ T6776] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.234444][ T6697] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata
[  141.276500][ T6776] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  141.380366][ T6697] BTRFS info (device loop4): balance: canceled
[  141.388503][ T6776] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  141.412681][ T6782] loop1: detected capacity change from 0 to 128
[  141.542349][ T6783] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  141.589181][ T6116] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  141.666885][ T6188] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.849162][ T5787] FAT-fs (loop1): error, corrupted directory (invalid entries)
[  141.898451][ T5787] FAT-fs (loop1): error, corrupted directory (invalid entries)
[  141.989610][ T3370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  142.214880][ T5787] syz_tun (unregistering): left allmulticast mode
[  142.237874][ T5794] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  142.367230][ T5787] syz-executor (5787) used greatest stack depth: 20936 bytes left
[  142.462876][ T5794] usb 6-1: Using ep0 maxpacket: 32
[  142.479953][ T5794] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  142.503194][ T5794] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  142.530985][ T5794] usb 6-1: config 0 interface 0 has no altsetting 0
[  142.577851][ T5794] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00
[  142.587002][ T5794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.634871][ T5794] usb 6-1: config 0 descriptor??
[  142.708997][  T789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  142.894959][ T6790] loop5: detected capacity change from 0 to 512
[  143.038176][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  143.263574][ T5794] hid (null): unknown global tag 0xfd
[  143.321585][ T5794] input: HID 0458:5019 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5019.0002/input/input5
[  143.405924][ T5794] input: HID 0458:5019 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5019.0002/input/input6
[  143.648581][ T5794] kye 0003:0458:5019.0002: input,hiddev0,hidraw0: USB HID v0.08 Device [HID 0458:5019] on usb-dummy_hcd.5-1/input0
[  143.739708][ T5794] usb 6-1: USB disconnect, device number 2
[  143.973034][ T6824] fido_id[6824]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  144.011987][   T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  144.024782][   T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  144.035392][   T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  144.046788][   T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  144.058349][   T52] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  144.068092][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  144.086658][   T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  144.149782][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  144.225219][ T6826] rxe_eth0 speed is unknown, defaulting to 1000
[  144.888149][ T6846] fscrypt (sda1, inode 1262): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS
[  145.121377][ T3370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  145.281814][ T6826] chnl_net:caif_netlink_parms(): no params data found
[  145.571365][ T6826] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.581467][ T6826] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.589317][ T6826] bridge_slave_0: entered allmulticast mode
[  145.599293][ T6826] bridge_slave_0: entered promiscuous mode
[  145.610082][ T6826] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.617457][ T6826] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.625299][ T6826] bridge_slave_1: entered allmulticast mode
[  145.633276][ T6826] bridge_slave_1: entered promiscuous mode
[  145.712250][ T6826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  145.755678][ T6826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  145.767395][ T6873] sctp: [Deprecated]: syz.5.233 (pid 6873) Use of int in maxseg socket option.
[  145.767395][ T6873] Use struct sctp_assoc_value instead
[  145.888269][ T6826] team0: Port device team_slave_0 added
[  145.910161][ T6826] team0: Port device team_slave_1 added
[  146.010441][ T6826] batman_adv: batadv0: Adding interface: batadv_slave_0
[  146.028170][ T6826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.149039][ T5794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  146.157579][   T52] Bluetooth: hci2: command tx timeout
[  146.181753][ T6826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  146.285651][ T6826] batman_adv: batadv0: Adding interface: batadv_slave_1
[  146.292812][ T6826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.320063][ T6826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  146.495717][ T6826] hsr_slave_0: entered promiscuous mode
[  146.523839][ T6826] hsr_slave_1: entered promiscuous mode
[  146.543798][ T6826] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  146.567307][ T6826] Cannot create hsr debugfs directory
[  146.776560][ T6885] syz.2.235 (6885) used greatest stack depth: 20360 bytes left
[  147.188358][ T5775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  147.196760][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  147.270937][ T6826] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  147.320399][ T6826] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  147.345297][ T6826] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  147.381170][ T6826] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  147.526057][ T6826] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.572255][ T6826] 8021q: adding VLAN 0 to HW filter on device team0
[  147.603521][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.610781][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.653590][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.660892][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.235823][ T3370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  148.244455][   T52] Bluetooth: hci2: command tx timeout
[  148.305748][ T6826] 8021q: adding VLAN 0 to HW filter on device batadv0
[  149.014268][ T6928] loop2: detected capacity change from 0 to 32768
[  149.039438][ T6928] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.246 (6928)
[  149.113090][ T6928] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  149.137241][ T6826] veth0_vlan: entered promiscuous mode
[  149.143379][ T6928] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  149.172414][ T6826] veth1_vlan: entered promiscuous mode
[  149.196721][ T6928] BTRFS info (device loop2): using free space tree
[  149.278385][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  149.330156][ T6826] veth0_macvtap: entered promiscuous mode
[  149.439774][ T6826] veth1_macvtap: entered promiscuous mode
[  149.478526][ T6928] BTRFS info (device loop2): enabling ssd optimizations
[  149.485646][ T6928] BTRFS info (device loop2): auto enabling async discard
[  149.569048][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.590288][ T6080] udevd[6080]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system
[  149.615846][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.639531][ T6080] udevd[6080]: symlink '../../loop2' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:2' failed: Read-only file system
[  149.647846][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.703276][ T6972] Invalid auth_tok structure returned from key query
[  149.713095][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.748908][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.767931][ T6928] BTRFS info (device loop2): balance: start -dconvert=raid0 -mconvert=raid0
[  149.768217][ T6972] Could not find valid key in user session keyring for sig specified in mount option: [syz]
[  149.808840][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.823149][ T6928] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata
[  149.837997][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.878732][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.904735][ T6972] One or more global auth toks could not properly register; rc = [-22]
[  149.936743][ T6826] batman_adv: batadv0: Interface activated: batadv_slave_0
[  149.970396][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.985511][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.037669][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.069848][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.097508][ T6972] Error parsing options; rc = [-22]
[  150.104200][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.151983][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.170007][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.199038][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.220164][ T6826] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.225739][ T6928] BTRFS info (device loop2): relocating block group 5242880 flags data|metadata
[  150.238220][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.283809][ T6826] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.308063][ T3370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.316955][ T6826] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.318328][   T52] Bluetooth: hci2: command tx timeout
[  150.340305][ T6826] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.372372][ T6826] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.384640][ T6928] BTRFS info (device loop2): balance: canceled
[  150.453266][ T5788] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  150.516585][ T6080] udevd[6080]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system
[  150.544204][ T6080] udevd[6080]: symlink '../../loop2' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:2' failed: Read-only file system
[  150.679952][   T28] audit: type=1326 audit(1793258207.280:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6984 comm="syz.4.256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e399f559 code=0x7ffc0000
[  150.764159][   T28] audit: type=1326 audit(1793258207.330:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6984 comm="syz.4.256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e399f559 code=0x7ffc0000
[  150.815620][ T3536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.827490][   T28] audit: type=1326 audit(1793258207.330:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6984 comm="syz.4.256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e399f559 code=0x7ffc0000
[  150.869112][   T28] audit: type=1326 audit(1793258207.330:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6984 comm="syz.4.256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff5e399f559 code=0x7ffc0000
[  150.887819][ T3536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.987712][   T28] audit: type=1326 audit(1793258207.330:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6984 comm="syz.4.256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e399f559 code=0x7ffc0000
[  151.048571][   T28] audit: type=1326 audit(1793258207.330:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6984 comm="syz.4.256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e399f559 code=0x7ffc0000
[  151.087647][ T3508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.108583][ T3508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.148210][   T28] audit: type=1326 audit(1793258207.330:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6984 comm="syz.4.256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e399f559 code=0x7ffc0000
[  151.247770][   T28] audit: type=1326 audit(1793258207.330:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6984 comm="syz.4.256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e399f559 code=0x7ffc0000
[  151.334441][   T28] audit: type=1326 audit(1793258207.330:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6984 comm="syz.4.256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff5e399f559 code=0x7ffc0000
[  151.388287][ T3370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  151.411971][   T28] audit: type=1326 audit(1793258207.340:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6984 comm="syz.4.256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e399f559 code=0x7ffc0000
[  151.787307][ T7005] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000
[  151.923765][ T1142] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.940880][ T6080] udevd[6080]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system
[  152.014109][ T6080] udevd[6080]: symlink '../../loop2' '/dev/disk/by-diskseq/107.tmp-b7:2' failed: Read-only file system
[  152.087415][ T1142] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.194294][ T1142] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.302940][ T1142] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.387980][   T52] Bluetooth: hci2: command tx timeout
[  152.741058][ T7023] loop5: detected capacity change from 0 to 1024
[  152.850154][ T6080] udevd[6080]: symlink '../../loop5' '/dev/disk/by-diskseq/109.tmp-b7:5' failed: Read-only file system
[  152.909240][ T7023] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.987358][ T7032] loop6: detected capacity change from 0 to 1024
[  153.060844][ T6080] udevd[6080]: symlink '../../loop5' '/dev/disk/by-diskseq/109.tmp-b7:5' failed: Read-only file system
[  153.131285][ T6080] udevd[6080]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  153.190105][ T7032] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  153.266459][ T6013] udevd[6013]: symlink '../../loop6' '/dev/disk/by-diskseq/110.tmp-b7:6' failed: Read-only file system
[  153.321802][ T6188] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.411663][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  153.432675][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  153.456760][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  153.469263][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  153.479236][ T5797] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  153.486638][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  153.729065][ T7037] rxe_eth0 speed is unknown, defaulting to 1000
[  154.230732][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.419257][ T7064] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000
[  155.177014][ T7094] loop5: detected capacity change from 0 to 1024
[  155.204808][ T7094] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  155.398385][ T6080] udevd[6080]: symlink '../../loop5' '/dev/disk/by-diskseq/113.tmp-b7:5' failed: Read-only file system
[  155.465987][ T6080] udevd[6080]: symlink '../../loop5' '/dev/disk/by-label/LinuxUDF.tmp-b7:5' failed: Read-only file system
[  155.520970][ T5797] Bluetooth: hci0: command tx timeout
[  155.555350][ T6080] udevd[6080]: symlink '../../loop5' '/dev/disk/by-uuid/1234567812345678.tmp-b7:5' failed: Read-only file system
[  155.612828][ T7037] chnl_net:caif_netlink_parms(): no params data found
[  155.818344][ T6080] udevd[6080]: symlink '../../loop5' '/dev/disk/by-diskseq/113.tmp-b7:5' failed: Read-only file system
[  155.862366][ T6080] udevd[6080]: symlink '../../loop5' '/dev/disk/by-label/LinuxUDF.tmp-b7:5' failed: Read-only file system
[  155.935141][ T6080] udevd[6080]: symlink '../../loop5' '/dev/disk/by-uuid/1234567812345678.tmp-b7:5' failed: Read-only file system
[  156.006061][ T1142] hsr_slave_0: left promiscuous mode
[  156.046076][ T1142] hsr_slave_1: left promiscuous mode
[  156.104795][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  156.144364][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0
[  156.157023][ T6080] udevd[6080]: symlink '../../loop5' '/dev/disk/by-diskseq/113.tmp-b7:5' failed: Read-only file system
[  156.188985][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  156.196486][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1
[  156.215784][ T6080] udevd[6080]: symlink '../../loop5' '/dev/disk/by-diskseq/113.tmp-b7:5' failed: Read-only file system
[  156.251593][ T1142] bridge_slave_1: left allmulticast mode
[  156.264221][ T1142] bridge_slave_1: left promiscuous mode
[  156.276003][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.299151][ T1142] bridge_slave_0: left allmulticast mode
[  156.305162][ T1142] bridge_slave_0: left promiscuous mode
[  156.314926][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.379228][ T1142] veth1_macvtap: left promiscuous mode
[  156.399343][ T1142] veth0_macvtap: left promiscuous mode
[  156.405102][ T1142] veth1_vlan: left promiscuous mode
[  156.432934][ T1142] veth0_vlan: left promiscuous mode
[  157.589933][ T5797] Bluetooth: hci0: command tx timeout
[  157.741560][ T7126] loop6: detected capacity change from 0 to 32768
[  157.860957][ T7126] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  157.946277][ T6080] udevd[6080]: symlink '../../loop6' '/dev/disk/by-diskseq/115.tmp-b7:6' failed: Read-only file system
[  157.961906][ T6080] udevd[6080]: symlink '../../loop6' '/dev/disk/by-uuid/d7dc424e-7990-42cb-9f91-9cb7200a101d.tmp-b7:6' failed: Read-only file system
[  158.130490][ T7126] XFS (loop6): Ending clean mount
[  158.407081][ T1142] team0 (unregistering): Port device team_slave_1 removed
[  158.514841][ T6826] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  158.582618][ T1142] team0 (unregistering): Port device team_slave_0 removed
[  158.711998][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  158.886898][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  159.172101][ T7157] FAULT_INJECTION: forcing a failure.
[  159.172101][ T7157] name failslab, interval 1, probability 0, space 0, times 0
[  159.225920][ T7157] CPU: 0 PID: 7157 Comm: syz.6.296 Not tainted syzkaller #0
[  159.233321][ T7157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  159.243648][ T7157] Call Trace:
[  159.246976][ T7157]  <TASK>
[  159.249976][ T7157]  dump_stack_lvl+0x18c/0x250
[  159.254746][ T7157]  ? show_regs_print_info+0x20/0x20
[  159.260025][ T7157]  ? load_image+0x420/0x420
[  159.264684][ T7157]  ? __might_sleep+0xe0/0xe0
[  159.269349][ T7157]  ? __lock_acquire+0x7eb0/0x7eb0
[  159.274455][ T7157]  should_fail_ex+0x394/0x4c0
[  159.279212][ T7157]  should_failslab+0x9/0x20
[  159.283776][ T7157]  slab_pre_alloc_hook+0x59/0x300
[  159.288868][ T7157]  ? tty_register_device_attr+0x2fa/0x9a0
[  159.294667][ T7157]  __kmem_cache_alloc_node+0x53/0x260
[  159.300123][ T7157]  ? tty_register_device_attr+0x2fa/0x9a0
[  159.305917][ T7157]  kmalloc_trace+0x2a/0xe0
[  159.310432][ T7157]  tty_register_device_attr+0x2fa/0x9a0
[  159.316054][ T7157]  ? tty_register_device+0x30/0x30
[  159.321239][ T7157]  ? tty_port_init+0x132/0x1a0
[  159.326156][ T7157]  ? gsm_dlci_alloc+0x32a/0x630
[  159.331071][ T7157]  ? __might_fault+0xaa/0x120
[  159.335917][ T7157]  gsm_activate_mux+0x110/0x2a0
[  159.340852][ T7157]  gsmld_ioctl+0xcec/0x1900
[  159.345446][ T7157]  ? gsmld_write+0x120/0x120
[  159.350230][ T7157]  ? __init_ldsem+0x150/0x150
[  159.354985][ T7157]  ? __fget_files+0x28/0x460
[  159.359668][ T7157]  ? gsmld_write+0x120/0x120
[  159.364322][ T7157]  tty_ioctl+0x9b5/0xdc0
[  159.368624][ T7157]  ? tty_get_icount+0xb0/0xb0
[  159.373365][ T7157]  __se_sys_ioctl+0xfd/0x170
[  159.378048][ T7157]  do_syscall_64+0x55/0xb0
[  159.382535][ T7157]  ? clear_bhb_loop+0x40/0x90
[  159.387288][ T7157]  ? clear_bhb_loop+0x40/0x90
[  159.392044][ T7157]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  159.398009][ T7157] RIP: 0033:0x7fcdcaf9f559
[  159.402484][ T7157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  159.422183][ T7157] RSP: 002b:00007fcdcbe2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  159.430821][ T7157] RAX: ffffffffffffffda RBX: 00007fcdcb225fa0 RCX: 00007fcdcaf9f559
[  159.438854][ T7157] RDX: 0000200000000440 RSI: 0000000040204706 RDI: 0000000000000004
[  159.446897][ T7157] RBP: 00007fcdcb036b20 R08: 0000000000000000 R09: 0000000000000000
[  159.454924][ T7157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  159.462949][ T7157] R13: 00007fcdcb226038 R14: 00007fcdcb225fa0 R15: 00007ffd75e643c8
[  159.471004][ T7157]  </TASK>
[  159.667839][ T5797] Bluetooth: hci0: command tx timeout
[  159.821071][ T7160] capability: warning: `syz.4.297' uses deprecated v2 capabilities in a way that may be insecure
[  159.892097][ T7160] loop4: detected capacity change from 0 to 2048
[  159.953868][ T7160] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  160.138226][ T1142] bond0 (unregistering): Released all slaves
[  160.474785][ T7037] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.485474][ T7037] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.496899][ T7037] bridge_slave_0: entered allmulticast mode
[  160.505160][ T7037] bridge_slave_0: entered promiscuous mode
[  160.527562][ T7037] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.536891][ T7037] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.547162][ T7037] bridge_slave_1: entered allmulticast mode
[  160.580613][ T7037] bridge_slave_1: entered promiscuous mode
[  160.716600][ T7037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  160.742561][ T7037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  160.938661][ T7037] team0: Port device team_slave_0 added
[  160.959933][ T7037] team0: Port device team_slave_1 added
[  161.102970][ T7037] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.124543][ T7037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.177675][ T7037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  161.230121][ T7037] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.238004][ T7037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.287547][ T7037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  161.426644][ T7196] loop6: detected capacity change from 0 to 256
[  161.484919][ T7037] hsr_slave_0: entered promiscuous mode
[  161.525203][ T7037] hsr_slave_1: entered promiscuous mode
[  161.536696][ T6080] udevd[6080]: symlink '../../loop6' '/dev/disk/by-diskseq/119.tmp-b7:6' failed: Read-only file system
[  161.575653][ T7196] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  161.599551][ T6080] udevd[6080]: symlink '../../loop6' '/dev/disk/by-uuid/1234-1234.tmp-b7:6' failed: Read-only file system
[  161.735644][ T6080] udevd[6080]: symlink '../../loop6' '/dev/disk/by-diskseq/119.tmp-b7:6' failed: Read-only file system
[  161.753563][ T5797] Bluetooth: hci0: command tx timeout
[  161.808215][ T6080] udevd[6080]: symlink '../../loop6' '/dev/disk/by-uuid/1234-1234.tmp-b7:6' failed: Read-only file system
[  161.952429][ T6080] udevd[6080]: symlink '../../loop6' '/dev/disk/by-diskseq/119.tmp-b7:6' failed: Read-only file system
[  162.044312][ T6080] udevd[6080]: symlink '../../loop6' '/dev/disk/by-diskseq/119.tmp-b7:6' failed: Read-only file system
[  162.360382][ T7037] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  162.408673][ T7037] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  162.439527][ T7037] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  162.461253][ T7037] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  162.765983][ T7037] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.849981][ T7037] 8021q: adding VLAN 0 to HW filter on device team0
[  162.885709][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.893112][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.966093][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.973390][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.532745][   T28] kauditd_printk_skb: 35 callbacks suppressed
[  163.532763][   T28] audit: type=1326 audit(1793258220.130:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7246 comm="syz.6.319" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcaf9f559 code=0x7ffc0000
[  163.624660][   T28] audit: type=1326 audit(1793258220.160:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7246 comm="syz.6.319" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcaf9f559 code=0x7ffc0000
[  163.702473][   T28] audit: type=1326 audit(1793258220.160:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7246 comm="syz.6.319" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcaf9f559 code=0x7ffc0000
[  163.802701][   T28] audit: type=1326 audit(1793258220.160:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7246 comm="syz.6.319" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcaf9f559 code=0x7ffc0000
[  163.843068][   T28] audit: type=1326 audit(1793258220.170:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7246 comm="syz.6.319" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fcdcaf9f559 code=0x7ffc0000
[  163.874256][   T28] audit: type=1326 audit(1793258220.170:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7246 comm="syz.6.319" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcaf9f559 code=0x7ffc0000
[  163.921917][ T7037] 8021q: adding VLAN 0 to HW filter on device batadv0
[  163.944660][   T28] audit: type=1326 audit(1793258220.170:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7246 comm="syz.6.319" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcaf9f559 code=0x7ffc0000
[  164.014431][   T28] audit: type=1326 audit(1793258220.170:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7246 comm="syz.6.319" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcaf9f559 code=0x7ffc0000
[  164.097820][   T28] audit: type=1326 audit(1793258220.180:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7246 comm="syz.6.319" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcaf9f559 code=0x7ffc0000
[  164.188001][   T28] audit: type=1326 audit(1793258220.180:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7246 comm="syz.6.319" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcaf9f559 code=0x7ffc0000
[  164.488843][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.5.322'.
[  164.891885][ T7037] veth0_vlan: entered promiscuous mode
[  164.967082][ T7037] veth1_vlan: entered promiscuous mode
[  165.100108][ T7037] veth0_macvtap: entered promiscuous mode
[  165.146236][ T7037] veth1_macvtap: entered promiscuous mode
[  165.221206][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.257789][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.287769][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.337685][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.367652][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.396758][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.407907][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.428909][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.449694][ T7037] batman_adv: batadv0: Interface activated: batadv_slave_0
[  165.481871][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.506828][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.537771][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.561359][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.584858][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.605020][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.642282][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.673554][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.703494][ T7037] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.731997][ T7037] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.749520][ T7037] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.771220][ T7037] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.783491][ T7037] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.198277][ T7314] netlink: 'syz.6.331': attribute type 1 has an invalid length.
[  166.297342][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.337783][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.429547][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.437527][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.805425][ T7332] loop7: detected capacity change from 0 to 32768
[  167.888138][ T7332] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.263 (7332)
[  167.948653][ T7332] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  167.982210][ T7332] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm
[  168.013605][ T7332] BTRFS info (device loop7): using free space tree
[  168.175384][ T7332] BTRFS info (device loop7): enabling ssd optimizations
[  168.187694][ T7332] BTRFS info (device loop7): auto enabling async discard
[  168.203884][ T6080] udevd[6080]: symlink '../../loop7' '/dev/disk/by-diskseq/121.tmp-b7:7' failed: Read-only file system
[  168.289311][ T6080] udevd[6080]: symlink '../../loop7' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:7' failed: Read-only file system
[  168.420754][ T7332] BTRFS info (device loop7): balance: start -dconvert=raid0 -mconvert=raid0
[  168.538414][ T7332] BTRFS info (device loop7): relocating block group 6881280 flags data|metadata
[  168.838709][ T7332] BTRFS info (device loop7): relocating block group 5242880 flags data|metadata
[  169.192082][ T6080] udevd[6080]: symlink '../../loop7' '/dev/disk/by-diskseq/121.tmp-b7:7' failed: Read-only file system
[  169.240678][ T7332] BTRFS info (device loop7): balance: canceled
[  169.241746][ T6080] udevd[6080]: symlink '../../loop7' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:7' failed: Read-only file system
[  169.382032][ T7037] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  170.428616][ T6080] udevd[6080]: symlink '../../loop7' '/dev/disk/by-diskseq/121.tmp-b7:7' failed: Read-only file system
[  170.481597][ T6080] udevd[6080]: symlink '../../loop7' '/dev/disk/by-diskseq/121.tmp-b7:7' failed: Read-only file system
[  170.544000][ T7440] tmpfs: Bad value for 'size'
[  170.679870][ T7445] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  170.707068][ T7445] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  171.457968][ T7470] FAULT_INJECTION: forcing a failure.
[  171.457968][ T7470] name failslab, interval 1, probability 0, space 0, times 0
[  171.487970][ T7470] CPU: 1 PID: 7470 Comm: syz.6.365 Not tainted syzkaller #0
[  171.495365][ T7470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  171.505481][ T7470] Call Trace:
[  171.508936][ T7470]  <TASK>
[  171.511919][ T7470]  dump_stack_lvl+0x18c/0x250
[  171.516689][ T7470]  ? show_regs_print_info+0x20/0x20
[  171.521957][ T7470]  ? load_image+0x420/0x420
[  171.526536][ T7470]  ? __might_sleep+0xe0/0xe0
[  171.531246][ T7470]  ? __lock_acquire+0x7eb0/0x7eb0
[  171.536366][ T7470]  should_fail_ex+0x394/0x4c0
[  171.541115][ T7470]  should_failslab+0x9/0x20
[  171.545676][ T7470]  slab_pre_alloc_hook+0x59/0x300
[  171.550773][ T7470]  ? tomoyo_encode+0x2ad/0x570
[  171.555615][ T7470]  ? tomoyo_encode+0x2ad/0x570
[  171.560446][ T7470]  __kmem_cache_alloc_node+0x53/0x260
[  171.565875][ T7470]  ? tomoyo_encode+0x2ad/0x570
[  171.570712][ T7470]  __kmalloc+0xa7/0x240
[  171.574934][ T7470]  ? full_name_hash+0x92/0xe0
[  171.579680][ T7470]  tomoyo_encode+0x2ad/0x570
[  171.584329][ T7470]  ? tomoyo_fill_path_info+0x30f/0x3b0
[  171.589867][ T7470]  tomoyo_path_perm+0x31a/0x560
[  171.594778][ T7470]  ? tomoyo_path_perm+0x250/0x560
[  171.599882][ T7470]  ? tomoyo_path_permission+0x3a0/0x3a0
[  171.605503][ T7470]  ? _raw_spin_unlock+0x28/0x40
[  171.610401][ T7470]  ? __d_add+0x4e2/0x7e0
[  171.614694][ T7470]  ? d_set_d_op+0x25f/0x370
[  171.619239][ T7470]  ? current_check_access_path+0x3b4/0x480
[  171.625091][ T7470]  ? simple_lookup+0xc5/0xf0
[  171.629721][ T7470]  ? lookup_one_qstr_excl+0x120/0x250
[  171.635174][ T7470]  tomoyo_path_symlink+0xac/0xf0
[  171.640171][ T7470]  ? tomoyo_path_rmdir+0xf0/0xf0
[  171.645186][ T7470]  ? kern_path_create+0x50/0x50
[  171.650078][ T7470]  ? __virt_addr_valid+0x10c/0x380
[  171.655250][ T7470]  security_path_symlink+0xe0/0x130
[  171.660496][ T7470]  do_symlinkat+0x110/0x400
[  171.665049][ T7470]  ? vfs_symlink+0x2b0/0x2b0
[  171.669679][ T7470]  ? getname_flags+0x20a/0x500
[  171.674486][ T7470]  __x64_sys_symlink+0x7e/0x90
[  171.679300][ T7470]  do_syscall_64+0x55/0xb0
[  171.683767][ T7470]  ? clear_bhb_loop+0x40/0x90
[  171.688495][ T7470]  ? clear_bhb_loop+0x40/0x90
[  171.693246][ T7470]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  171.699187][ T7470] RIP: 0033:0x7fcdcaf9f559
[  171.703658][ T7470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  171.723310][ T7470] RSP: 002b:00007fcdcbe2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[  171.731777][ T7470] RAX: ffffffffffffffda RBX: 00007fcdcb225fa0 RCX: 00007fcdcaf9f559
[  171.739789][ T7470] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000040
[  171.747803][ T7470] RBP: 00007fcdcb036b20 R08: 0000000000000000 R09: 0000000000000000
[  171.755855][ T7470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  171.763863][ T7470] R13: 00007fcdcb226038 R14: 00007fcdcb225fa0 R15: 00007ffd75e643c8
[  171.771895][ T7470]  </TASK>
[  172.172935][   T28] kauditd_printk_skb: 94 callbacks suppressed
[  172.172950][   T28] audit: type=1326 audit(1793258228.770:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.6.367" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcaf9f559 code=0x7fc00000
[  172.457429][ T7406] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  172.829152][   T28] audit: type=1326 audit(1793258229.430:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.6.367" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcdcaf9f559 code=0x7fc00000
[  173.533989][ T7530] loop6: detected capacity change from 0 to 512
[  173.574291][ T7530] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  173.588064][ T7530] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it
[  173.599698][ T7530] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.377: Corrupt directory, running e2fsck is recommended
[  173.658317][ T7530] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117
[  173.667870][ T7530] EXT4-fs error (device loop6): ext4_iget_extra_inode:4752: inode #15: comm syz.6.377: corrupted in-inode xattr: invalid ea_ino
[  173.684234][ T7530] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.377: couldn't read orphan inode 15 (err -117)
[  173.707395][ T6080] udevd[6080]: symlink '../../loop6' '/dev/disk/by-diskseq/123.tmp-b7:6' failed: Read-only file system
[  173.727973][ T5794] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  173.750826][ T7530] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.784603][ T6080] udevd[6080]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  173.853167][ T7530] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  173.873997][ T7530] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it
[  173.885605][ T7530] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.377: Corrupt directory, running e2fsck is recommended
[  173.935007][ T7538] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  173.952110][ T5794] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  173.977531][ T5794] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  173.981691][ T7538] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it
[  174.006465][ T5794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.031920][ T7538] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.377: Corrupt directory, running e2fsck is recommended
[  174.070952][ T5794] as10x_usb: device has been detected
[  174.100108][ T5794] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  174.142054][ T5794] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  174.157441][ T7538] EXT4-fs warning (device loop6): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed
[  174.207486][ T7530] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  174.239798][ T7530] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it
[  174.271344][ T7530] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.377: Corrupt directory, running e2fsck is recommended
[  174.300547][ T5794] as10x_usb: error during firmware upload part1
[  174.312164][ T5794] Registered device Abilis Systems DVB-Titan
[  174.396253][ T6826] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.464181][ T6080] udevd[6080]: symlink '../../loop6' '/dev/disk/by-diskseq/123.tmp-b7:6' failed: Read-only file system
[  174.538911][ T6080] udevd[6080]: symlink '../../loop6' '/dev/disk/by-diskseq/123.tmp-b7:6' failed: Read-only file system
[  175.207018][ T7576] gadgetfs: bound to dummy_udc driver
[  175.338216][ T6826] ==================================================================
[  175.346390][ T6826] BUG: KASAN: slab-use-after-free in __mutex_lock+0xfc/0xc80
[  175.353809][ T6826] Read of size 8 at addr ffff888143fe5c60 by task syz-executor/6826
[  175.361840][ T6826] 
[  175.364188][ T6826] CPU: 0 PID: 6826 Comm: syz-executor Not tainted syzkaller #0
[  175.371761][ T6826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  175.381871][ T6826] Call Trace:
[  175.385180][ T6826]  <TASK>
[  175.388135][ T6826]  dump_stack_lvl+0x18c/0x250
[  175.392871][ T6826]  ? __lock_acquire+0x7eb0/0x7eb0
[  175.397940][ T6826]  ? show_regs_print_info+0x20/0x20
[  175.403195][ T6826]  ? load_image+0x420/0x420
[  175.407743][ T6826]  ? __virt_addr_valid+0x10c/0x380
[  175.412892][ T6826]  ? __virt_addr_valid+0x10c/0x380
[  175.418042][ T6826]  ? __virt_addr_valid+0x10c/0x380
[  175.423203][ T6826]  print_report+0xa8/0x210
[  175.427659][ T6826]  ? __mutex_lock+0xfc/0xc80
[  175.432296][ T6826]  kasan_report+0x117/0x150
[  175.436833][ T6826]  ? tomoyo_check_open_permission+0x384/0x460
[  175.442959][ T6826]  ? __mutex_lock+0xfc/0xc80
[  175.447597][ T6826]  __mutex_lock+0xfc/0xc80
[  175.452061][ T6826]  ? end_current_label_crit_section+0x170/0x170
[  175.458355][ T6826]  ? ep_open+0x4e/0x270
[  175.462560][ T6826]  ? mutex_lock_nested+0x20/0x20
[  175.467543][ T6826]  ? apparmor_file_open+0x5ab/0x760
[  175.472784][ T6826]  ? apparmor_inode_getattr+0x2c0/0x2c0
[  175.478372][ T6826]  ? __rwlock_init+0x150/0x150
[  175.483217][ T6826]  ep_open+0x4e/0x270
[  175.487245][ T6826]  ? do_dentry_open+0x86f/0x14b0
[  175.492217][ T6826]  do_dentry_open+0x880/0x14b0
[  175.497024][ T6826]  ? ep_ioctl+0x1c0/0x1c0
[  175.501402][ T6826]  path_openat+0x284f/0x3270
[  175.506039][ T6826]  ? do_sys_openat2+0xda/0x1d0
[  175.510863][ T6826]  ? __x64_sys_openat+0x139/0x160
[  175.515930][ T6826]  ? verify_lock_unused+0x140/0x140
[  175.521172][ T6826]  ? do_filp_open+0x430/0x430
[  175.525891][ T6826]  do_filp_open+0x1f2/0x430
[  175.530432][ T6826]  ? vfs_tmpfile+0x620/0x620
[  175.535063][ T6826]  ? _raw_spin_unlock+0x28/0x40
[  175.539954][ T6826]  ? alloc_fd+0x590/0x640
[  175.544324][ T6826]  do_sys_openat2+0x134/0x1d0
[  175.549044][ T6826]  ? do_sys_open+0xe0/0xe0
[  175.553497][ T6826]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  175.559521][ T6826]  ? fsnotify_link_count+0xf0/0xf0
[  175.564673][ T6826]  ? lock_chain_count+0x20/0x20
[  175.569566][ T6826]  __x64_sys_openat+0x139/0x160
[  175.574457][ T6826]  do_syscall_64+0x55/0xb0
[  175.578922][ T6826]  ? clear_bhb_loop+0x40/0x90
[  175.583641][ T6826]  ? clear_bhb_loop+0x40/0x90
[  175.588467][ T6826]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  175.594409][ T6826] RIP: 0033:0x7fcdcaf5fd8e
[  175.598862][ T6826] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  175.618526][ T6826] RSP: 002b:00007ffd75e62498 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  175.626977][ T6826] RAX: ffffffffffffffda RBX: 0000555568bdf500 RCX: 00007fcdcaf5fd8e
[  175.634983][ T6826] RDX: 0000000000000000 RSI: 00007ffd75e62600 RDI: ffffffffffffff9c
[  175.642987][ T6826] RBP: 00007ffd75e62600 R08: 0000000000000000 R09: 0000000000000000
[  175.650992][ T6826] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd75e636f0
[  175.658990][ T6826] R13: 00007fcdcb035f63 R14: 0000555568bdf4e8 R15: 0000000000000006
[  175.667001][ T6826]  </TASK>
[  175.670046][ T6826] 
[  175.672407][ T6826] Allocated by task 7576:
[  175.676759][ T6826]  kasan_set_track+0x4e/0x70
[  175.681386][ T6826]  __kasan_kmalloc+0x8f/0xa0
[  175.686009][ T6826]  gadgetfs_bind+0x25f/0x830
[  175.690639][ T6826]  gadget_bind_driver+0x2b3/0x770
[  175.695698][ T6826]  really_probe+0x24a/0xae0
[  175.700240][ T6826]  __driver_probe_device+0x1f5/0x390
[  175.705589][ T6826]  driver_probe_device+0x4f/0x420
[  175.710652][ T6826]  __driver_attach+0x444/0x6d0
[  175.715452][ T6826]  bus_for_each_dev+0x235/0x2b0
[  175.720361][ T6826]  bus_add_driver+0x340/0x630
[  175.725070][ T6826]  driver_register+0x23a/0x310
[  175.729873][ T6826]  usb_gadget_register_driver_owner+0xf9/0x270
[  175.736092][ T6826]  dev_config+0xe49/0x1260
[  175.740550][ T6826]  vfs_write+0x299/0x9a0
[  175.744845][ T6826]  ksys_write+0x151/0x260
[  175.749211][ T6826]  do_syscall_64+0x55/0xb0
[  175.753666][ T6826]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  175.759595][ T6826] 
[  175.761942][ T6826] Freed by task 789:
[  175.765857][ T6826]  kasan_set_track+0x4e/0x70
[  175.770502][ T6826]  kasan_save_free_info+0x28/0x40
[  175.775586][ T6826]  ____kasan_slab_free+0x126/0x1f0
[  175.780746][ T6826]  slab_free_freelist_hook+0x154/0x240
[  175.786235][ T6826]  __kmem_cache_free+0xba/0x1f0
[  175.791139][ T6826]  destroy_ep_files+0x282/0x330
[  175.796030][ T6826]  gadgetfs_unbind+0x109/0x2b0
[  175.800841][ T6826]  gadget_unbind_driver+0x1bf/0x3e0
[  175.806076][ T6826]  device_release_driver_internal+0x408/0x6f0
[  175.812184][ T6826]  driver_detach+0x1f3/0x2d0
[  175.816814][ T6826]  bus_remove_driver+0x221/0x2f0
[  175.821786][ T6826]  usb_gadget_unregister_driver+0x4e/0x70
[  175.827541][ T6826]  dev_release+0x86/0x200
[  175.831917][ T6826]  __fput+0x221/0x940
[  175.835947][ T6826]  delayed_fput+0x58/0x80
[  175.840308][ T6826]  process_scheduled_works+0xa60/0x1600
[  175.845893][ T6826]  worker_thread+0xa5e/0xfe0
[  175.850532][ T6826]  kthread+0x2fa/0x390
[  175.854634][ T6826]  ret_from_fork+0x48/0x80
[  175.859087][ T6826]  ret_from_fork_asm+0x11/0x20
[  175.863891][ T6826] 
[  175.866277][ T6826] Last potentially related work creation:
[  175.872021][ T6826]  kasan_save_stack+0x3e/0x60
[  175.876732][ T6826]  __kasan_record_aux_stack+0xaf/0xc0
[  175.882138][ T6826]  kvfree_call_rcu+0xee/0x780
[  175.886858][ T6826]  drop_sysctl_table+0x394/0x540
[  175.891834][ T6826]  drop_sysctl_table+0x3ab/0x540
[  175.896802][ T6826]  unregister_sysctl_table+0x41/0x60
[  175.902119][ T6826]  inetdev_event+0x77c/0x1610
[  175.906831][ T6826]  notifier_call_chain+0x18f/0x380
[  175.911984][ T6826]  unregister_netdevice_many_notify+0x1037/0x1910
[  175.918438][ T6826]  default_device_exit_batch+0x5e3/0x670
[  175.924120][ T6826]  cleanup_net+0x785/0xb00
[  175.928566][ T6826]  process_scheduled_works+0xa60/0x1600
[  175.934149][ T6826]  worker_thread+0xa5e/0xfe0
[  175.938800][ T6826]  kthread+0x2fa/0x390
[  175.942920][ T6826]  ret_from_fork+0x48/0x80
[  175.947390][ T6826]  ret_from_fork_asm+0x11/0x20
[  175.952188][ T6826] 
[  175.954556][ T6826] The buggy address belongs to the object at ffff888143fe5c00
[  175.954556][ T6826]  which belongs to the cache kmalloc-512 of size 512
[  175.968641][ T6826] The buggy address is located 96 bytes inside of
[  175.968641][ T6826]  freed 512-byte region [ffff888143fe5c00, ffff888143fe5e00)
[  175.982388][ T6826] 
[  175.984746][ T6826] The buggy address belongs to the physical page:
[  175.991200][ T6826] page:ffffea00050ff900 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x143fe4
[  176.001484][ T6826] head:ffffea00050ff900 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  176.010457][ T6826] flags: 0x57ff00000000840(slab|head|node=1|zone=2|lastcpupid=0x7ff)
[  176.018568][ T6826] page_type: 0xffffffff()
[  176.022954][ T6826] raw: 057ff00000000840 ffff888018c41c80 dead000000000100 dead000000000122
[  176.031574][ T6826] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  176.040190][ T6826] page dumped because: kasan: bad access detected
[  176.046636][ T6826] page_owner tracks the page as allocated
[  176.052388][ T6826] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 16444267881, free_ts 0
[  176.072139][ T6826]  post_alloc_hook+0x1c1/0x200
[  176.076936][ T6826]  get_page_from_freelist+0x2181/0x22a0
[  176.082515][ T6826]  __alloc_pages+0x1f0/0x460
[  176.087137][ T6826]  alloc_page_interleave+0x24/0x1e0
[  176.092375][ T6826]  alloc_slab_page+0x5d/0x180
[  176.097087][ T6826]  new_slab+0x87/0x2d0
[  176.101191][ T6826]  ___slab_alloc+0xc5c/0x12f0
[  176.105908][ T6826]  __kmem_cache_alloc_node+0x122/0x260
[  176.111402][ T6826]  kmalloc_trace+0x2a/0xe0
[  176.115876][ T6826]  device_add+0xb6/0xc40
[  176.120156][ T6826]  usb_hub_create_port_device+0x3f2/0xbc0
[  176.125910][ T6826]  hub_probe+0x26b3/0x37d0
[  176.130355][ T6826]  usb_probe_interface+0x6eb/0xcf0
[  176.135500][ T6826]  really_probe+0x24a/0xae0
[  176.140038][ T6826]  __driver_probe_device+0x1f5/0x390
[  176.145379][ T6826]  driver_probe_device+0x4f/0x420
[  176.150440][ T6826] page_owner free stack trace missing
[  176.155854][ T6826] 
[  176.158213][ T6826] Memory state around the buggy address:
[  176.163879][ T6826]  ffff888143fe5b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  176.171986][ T6826]  ffff888143fe5b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  176.180080][ T6826] >ffff888143fe5c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  176.188171][ T6826]                                                        ^
[  176.195401][ T6826]  ffff888143fe5c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  176.203493][ T6826]  ffff888143fe5d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  176.211579][ T6826] ==================================================================
[  176.292998][ T6826] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  176.300267][ T6826] CPU: 1 PID: 6826 Comm: syz-executor Not tainted syzkaller #0
[  176.307857][ T6826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  176.317964][ T6826] Call Trace:
[  176.321288][ T6826]  <TASK>
[  176.324288][ T6826]  dump_stack_lvl+0x18c/0x250
[  176.329028][ T6826]  ? show_regs_print_info+0x20/0x20
[  176.334347][ T6826]  ? load_image+0x420/0x420
[  176.338897][ T6826]  panic+0x2ca/0x720
[  176.342862][ T6826]  ? bpf_jit_dump+0xd0/0xd0
[  176.347408][ T6826]  ? _raw_spin_unlock_irqrestore+0x111/0x120
[  176.353439][ T6826]  ? _raw_spin_unlock+0x40/0x40
[  176.358332][ T6826]  ? print_memory_metadata+0x314/0x400
[  176.363836][ T6826]  ? __mutex_lock+0xfc/0xc80
[  176.368472][ T6826]  check_panic_on_warn+0x84/0xa0
[  176.373452][ T6826]  ? __mutex_lock+0xfc/0xc80
[  176.378186][ T6826]  end_report+0x6f/0x130
[  176.382476][ T6826]  kasan_report+0x128/0x150
[  176.387048][ T6826]  ? tomoyo_check_open_permission+0x384/0x460
[  176.393157][ T6826]  ? __mutex_lock+0xfc/0xc80
[  176.397793][ T6826]  __mutex_lock+0xfc/0xc80
[  176.402252][ T6826]  ? end_current_label_crit_section+0x170/0x170
[  176.408544][ T6826]  ? ep_open+0x4e/0x270
[  176.412923][ T6826]  ? mutex_lock_nested+0x20/0x20
[  176.417904][ T6826]  ? apparmor_file_open+0x5ab/0x760
[  176.423153][ T6826]  ? apparmor_inode_getattr+0x2c0/0x2c0
[  176.428746][ T6826]  ? __rwlock_init+0x150/0x150
[  176.433560][ T6826]  ep_open+0x4e/0x270
[  176.437581][ T6826]  ? do_dentry_open+0x86f/0x14b0
[  176.442566][ T6826]  do_dentry_open+0x880/0x14b0
[  176.447370][ T6826]  ? ep_ioctl+0x1c0/0x1c0
[  176.451742][ T6826]  path_openat+0x284f/0x3270
[  176.456369][ T6826]  ? do_sys_openat2+0xda/0x1d0
[  176.461173][ T6826]  ? __x64_sys_openat+0x139/0x160
[  176.466256][ T6826]  ? verify_lock_unused+0x140/0x140
[  176.471500][ T6826]  ? do_filp_open+0x430/0x430
[  176.476218][ T6826]  do_filp_open+0x1f2/0x430
[  176.480784][ T6826]  ? vfs_tmpfile+0x620/0x620
[  176.485421][ T6826]  ? _raw_spin_unlock+0x28/0x40
[  176.490314][ T6826]  ? alloc_fd+0x590/0x640
[  176.494696][ T6826]  do_sys_openat2+0x134/0x1d0
[  176.499416][ T6826]  ? do_sys_open+0xe0/0xe0
[  176.503877][ T6826]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  176.509894][ T6826]  ? fsnotify_link_count+0xf0/0xf0
[  176.515045][ T6826]  ? lock_chain_count+0x20/0x20
[  176.519940][ T6826]  __x64_sys_openat+0x139/0x160
[  176.524837][ T6826]  do_syscall_64+0x55/0xb0
[  176.529398][ T6826]  ? clear_bhb_loop+0x40/0x90
[  176.534115][ T6826]  ? clear_bhb_loop+0x40/0x90
[  176.538846][ T6826]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  176.544780][ T6826] RIP: 0033:0x7fcdcaf5fd8e
[  176.549236][ T6826] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  176.568883][ T6826] RSP: 002b:00007ffd75e62498 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  176.577323][ T6826] RAX: ffffffffffffffda RBX: 0000555568bdf500 RCX: 00007fcdcaf5fd8e
[  176.585328][ T6826] RDX: 0000000000000000 RSI: 00007ffd75e62600 RDI: ffffffffffffff9c
[  176.593337][ T6826] RBP: 00007ffd75e62600 R08: 0000000000000000 R09: 0000000000000000
[  176.601361][ T6826] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd75e636f0
[  176.609389][ T6826] R13: 00007fcdcb035f63 R14: 0000555568bdf4e8 R15: 0000000000000006
[  176.617449][ T6826]  </TASK>
[  176.621272][ T6826] Kernel Offset: disabled
[  176.625619][ T6826] Rebooting in 86400 seconds..