last executing test programs:

1m11.152121589s ago: executing program 2 (id=3):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000a0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c00000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000005c001a800600000001000000500005802400018008000100010000000800020000000000080003000000000008000400", @ANYRES32=r1, @ANYBLOB="2800038008000100010000000a00020000112233445500000800030000000000080004"], 0x7c}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)

1m10.859833463s ago: executing program 2 (id=5):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
socket$inet(0x2, 0x2, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x18}]}, @void, @void, @void, @val={0x2d, 0x1a, {0x112d, 0x0, 0x0, 0x0, {0x1}}}, @void, @void, [{0xdd, 0x13, "0050f2020101000003a4000027a4000042435e"}]}, 0x65)
nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0)
syz_80211_inject_frame(0x0, &(0x7f0000000440)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @val={0x2d, 0x1a, {0x112d, 0x0, 0x0, 0x0, {0x1}}}}, 0x3c)
r3 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r3, &(0x7f0000000600)="0802110000000802110000010800450000280001000040117ce70a0000020a000001123412340014000061626364656667", 0x31, 0x0, &(0x7f0000000700)={0x11, 0x0, r2}, 0x14)

1m9.229602009s ago: executing program 2 (id=9):
syz_mount_image$jfs(&(0x7f0000000380), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2208088, &(0x7f0000000c80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0, @ANYRES8, @ANYRESOCT=0x0, @ANYRESHEX=0x0], 0x1, 0x5eec, &(0x7f000000bcc0)="$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")
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40)
creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12)
symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x32957, 0x0, 0x0, 0x68245b66, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1)

1m7.449216563s ago: executing program 2 (id=19):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_START_REQ(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000076c0)={&(0x7f0000000880)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xf9}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xa1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000440}, 0x0)

1m5.214791398s ago: executing program 2 (id=30):
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40f00, 0xc}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f0000000080), 0x0}, 0x20)

1m4.469103143s ago: executing program 32 (id=30):
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40f00, 0xc}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f0000000080), 0x0}, 0x20)

18.599039384s ago: executing program 1 (id=284):
r0 = syz_open_procfs(0x0, &(0x7f0000000900)='smaps\x00')
pread64(r0, &(0x7f0000000000)=""/177, 0xb1, 0xa0000000000000)

18.442082581s ago: executing program 1 (id=285):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r0, &(0x7f00000007c0)="923e575cd2", 0x5)

18.125318756s ago: executing program 1 (id=290):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f0000001340)=[{0x0}, {&(0x7f0000000340)="c5dfc5b9ae8a1855cd8165c0d0031dc7ddf3de9c6bdfdbe03ddba8d075ce81ad81a752a729a2bbc9fcbc1d98ca9df8b5cb2a8f956eb3086c0055fbdc4d98da40b51bb656d21f7b7209871500f1a758c5650b0f466a50d0f0656da94503f23805f2c6fe739b9365593b95dcb21cd9f666080f44629ebb19f35ffc518880ceecac736f538e4de9a3971b0e94b741a3017f61003629d489d5ee6ccf1d0eea42c4858ff55e476578a41ec2b2ffd26c6f7ea74c1b3746c8d933476b517d9e04b0abd0e449c3906f19b0a5ac88f1b109b2ef4d3f638e723aa4cfbbbce9984704e7bb1db13081c6cc3fe56a60d00124e15a4af1c8c77fcd7bdec9896e20dfcfd2075890c6826194939da6e14b757145680dc52d717473991f3dcad76985229b7c7316e0d31d99f65a5fb3c8944e3f9fe98755340b027d9a1db40cee5a2993b048e88ebf720be624dbf040f310cea60648da62de63734e543f7a6fe87492db8ce1ef3f16ab4a9c0c813bc518a4f07249c6a1a678711fdfaf935dda775d45bf6d5093c9b9126642bffe01d381bd99c36c740e34d21bb89b63f5ec8de50a810c82b8f94c7882b9effadcf199a27633d78fa0eb4a37f2b37be3934ecc220fdfda449736b2b039c967fa57ddf9a85fa3848e23d958262118f73013ce04affaffe13061a39db82f48542650c924d776bad01f101c901e7cd399101149d0b6c79e53096d4b5a1194c4854e61001f331d645fafacf9e168dc27822889702a71655dc24a8bea4943bc499f8eecda028d1d464b8427b1f41ebd7a82f98ce0032d89ade155c0fb1b6bc85223d2c6dd789f8476510a05d8ec781c794d2da37ba7ec8d6bc8b4af6cb427bd282cfcdf57cf3d69da52ac8ffeb71c098ae708eb5d1b02f44dc0e817484e2720c3c609524e26d7337add8a0b484894e3a1fcb172066ed4d6b97610044e4ee9eed20f6e82705e966c2081fe2910beb18391ff594bace1fe0f2079db82d9f13cfef0261777f8a707b7ec91f71e8d9dbbbf7d2b06b670d058a4b12b045d0f85cb9575a64419b7661fbe8fb623d46322ffb8657129b026b890a693c8ba62d5a12013da1bff88b5679268c671bf78ebf3a72ccc0b4d2795488a849a02635f57c9c6b19fb8f1423916d7fa570ecbfc7b3888a64bbbda33bc95be76b68e506be2cfa54f3e404f39724b63fe8bd2c2b00aede43247209fb09066e7bf644523125d69b2fb7e0de0cb4a5df261ffb031c2759a269b30c14b3aa92e39c38b76cf1fa6de8a3aa28042689f25af5133edaa6f6d7c59299e5ee4bd5e3c8001c62a26729908bb9fc9c6d7a2b3f97ea27dbfbeea672cb25c3c274ee8f259d22848ac62ee682769fc209d819510c586ef81693f7c2852625cdda0b974516f044d7759e18be747af21023c290889f28ef2671e9f1391e2a08431d99b30a79c70a1cb126f1c20dca4b8a7604d1b49c92ec47e2368a6ac0d93d48fbeae4d55d77771430b08f62a9c2c7093c6622b213da82e0929263db77debdea8d0cbc046e811d6db88706e9a3368d1fb720ca457930c7947d59e6cfc014b78e94e5298092812025194400d0a1c81a9b89681a0d0c3834b1e13f21df3c645da7ea79650f6bcc350234a3c1c0cb8566f3bbfae263d364c7f0e109d8013c49b04bd9c0c236bccaf5d3289ada58bd844ac4d7025c135fec1f652d130fe5e122534ecf76a53499f87ea6b316f2a9f8eeadb883906a5b830c2ac7bf43c60a58530f3e42888deb113b9d4b06a8188cb4f722623e6f2089a29a37e2a01652ad47c2a501db3af2f765dc848687823ee627bd072939f5c0c8f3d089022c93b80dbd26035b801abfafc47d84e3e59a54197e80b84fba635a7f45c8f63033b299693e65ba99b9a7cd3fb79e159590d8635c283136184edea822666a6a08dff5cd49199ecce422522335ce83aa0410137740d1c142594e8d707009c91d974110c2b00b2484db405be16e85b481e4e82734ae7b977e59270e9cf67cdb61b5eef47b755955fa12b15f36abbfcad020e5e7b7f4fb914d9450cd67f6ececa3a30f439b892700b8ccdec21b5281cbd253c76e38e67110ea341cdc3b4b13c00879b9df4e4c5c62a1b9cd474afd4f1f34e224a13e23f2fc0d374269027046064edc15adaee042579118407a451451a2a69a95074ff328f1bf416f5566329f500450827638a1b15d70d9ae2874e656166513d85b7a4a745cf80d33a96bcbf83365ab87ed6cd94fa45e925b51a8717f9aa07bde5c611de43075de6c4a206c58a6c4978f92118176307443a201e911f970772b3fc1b7db03552942e90406bfc8aadb8c3aaa8e381a1f1a4e442362cdf770ed4e47d0737c82d22dc141630df549089514774c02ac8d39720b65e3030b878a492a3cf5ee1eabd665b1337b94bfec875f4d8acca78819b31fd2897a5e0a780d11bce700244d41419c3234f8cf179ab67dc392e93d654adeb8c4ad81eb970748c24d2d7b9019c1b3665da4bfab2e62171025fbfcb27a7db347d708149fbf4b3be96766fff65c749d1c681aac9d94f06117c3bd94fd31257c408ec80489f02b1df6b777751021805f06046a0873f7f280ee24579e55d2ad839b3a95c1847cf7957e7c43a06a11d062168cf17bdb4b0ba78d40822109a8d0894241196f419638ed2d5c29be88493e7d69be3962cadcf2827293bee7df750106b0b95da8b3db3d4d9eb1269ec40cc8c25ec4a19e92b896fdb120f0e139b1d23d7bd7691ea2c5936eae35fcea982aedb341c0da0e157965f19319100a3ef7bd68ba980366a15333868b7f60f20d89595c1c5e6ff9fa67c385a452ddb9c02f61d62cdc9e166754dc2cab55fac787a90cb927efc34a885872690eb14198e0e96fbbd617bceb6b6ae94247f61db3f1be0bbb479894700b7cabfeeee8bb02892d6d3d69fb3a260f2f60d2c4ef21e67b7e420fb05d5af35fadc03397b086c5c16c943218d35bb505c307277312d595b258ceaacadd939841da8336719419e290bc79617a670736802cfda2421257c214329a8fdab1a67f91e0e63d4dafc252503996bf4707d6be5920f367964aff393243c1f913f452c964bc1ea2f926ae837803a11754aa165a00024337698f8d51ff1df2480bd821897afb7c58062dc81e7c1e5b6206e3c2c3200ee9ed1cc2ead7e5325ce6aba3ac1a266a0e1f12b619ff3a279863aa5081c2c7f1d8a0d3ec23412643018f977e4f9c0ba05d614112a1fd7404d27ec48dc2d6460fe2bb933ba72fa78ccfd56d1993519b47e2489fc2c2c53c0b612b9dd112e27a7389cdabc5e8df4fda6ef97f9ee4094d99d5eea657c86f5bc64d0ad46def469a56f69280b52c26df932ffa8fcd82f6e377ea275d6f1f9810200c1671c2e233578d067cadd884104f155985c9950394db708e1575ffb754f339beeb1e92b6207fccfeecf4c524e283e0989cb3b1005aa64bb1d19bede9450bdfc75d23a9b5d7366c418d1f4cc708a54875b7a45625e1951bb9c087eba0870adfa734992547631fb3e8a9b42fdc5057aa8bb51040569d9012816c80dbbaba4ce6491d9ff94c5ff563b7acd03954edfc02e9e7284bef248b6eef99d1d4dd6d0308707d66f08ce2619f0efb973e0d3a2861c8244f9e9be84fac0175d4a345d62764f57a7d708034a4dede6db800c4d04e85678d8a0ddb0d5a4e092e20898fa90ea1a09bd60da54b5e19b67134912f5018587f74faa7a867af0ccff553c24e1d104f5f06124ca8ee61dcba221d6b1301562beb53af1632eda0037be55558db0d3dac42b37103cb02c43c5342f4a7d632c345497f48799615de3ff0969d7b8ae64f1812a1600f76162dbd7324f471839badda8a922ac741f7a1c9a2b311393f67c51ea9f02eab9cb61e92cdfbe2dfbdb4c9a56f81e63f94d94405e1265976723c89ee69d2ccf6febfce838a17b77004fd0e1edf5d11e2b2b10c0406b0c37ecccce1ad2a4e913e95ff26de9659195f36dc8af5408c55888a07edddf705196f4c894873c3cf181251bbe729891e48cf8b2b18844b911e199aa6aeb2edf123d1f00ef7d6e901de1bd0930f22feed1a43caa5fc0031480a15a9b0ebab8af793e69ea364fad73402bd8dee7781c85320fae1f599d024bc2fa59e3436541549f4e0304f1cc7478924c208bd6139d127bb4e282ae7aca5b252650d189c9a2af9aacd1731f900501ddd27b0206cc4d2814bb9a26a897f12a27ef306598e07d4d094040993cba9e0fc551cfaa984b836409ba5497e7d1ea47385224078369cb833ebaa24b0fe78807e24ac60049642e2d5eb7e58f61d228b1d93dd51950b7065160590b510dcd56c02f6c7c9f91d5d9125fd9a7762156754cea4b7203b0ae0af2e34b9d631ac3239e9a19cfba9bbc677ab24f5bfa433d438e41f6ebff1de789609f9f379c8015191eb9a6a69900a565fbe2a88bfec11e1ce115dcd305c01eeccc0b1e7b0ddae6c7da83887080b5feaa71235a110b7152d1f26d29ea5cd9a79079d0676d1196a9f5a923cafea430314c1cd4ab9b07ed48444d1870fcf52fb7a67f1a13af736dc88387bc007a05b22531b6f9ada1d2f8a78854ac5859f5f3d3cba264399c6b2a9d87524ef17e178264839f24bb7155fbfb70d9012980aaaacf0ad9b9976b2772acfd22577502504a489efbcebc1dcf80637e7c8e7bab23e4496e970516664a81e3fd3fb2d09e37f427ea55997893c62eb576796ca48cf7bb2b010b25f2cf23c70bf57736a416d3eddc8dc820df27e9fd70bb4102936764fafacfcd111a72249929db705eb0e2e7e8558904d7a0ef077e6e0bea3ce5d1b75a41107232ce755a1893c206f4fe3bc572a9837d61ff8c44bc2fee8d330c29ee5e956ffc081822a693ad8fc2739345a8cf72397405c8191e99db63078abd74688f5f105f5af4ac8a855cd9612ed5792ce85ea6772457be0e3371dc0329169c88c06ad5abf46298d821a61bc8808436406e0f58feb21359f6092ce9494da7d4c27cc4b822ed27c063227073032521b456be48e1868d9c1a19a13c082248a7468c19ecf739a79f303c6085645c4e0a7eb2ef32728353a03d0ee1720d242fe33637187274f496d911cf81ccc53bcb3c4e24423f900ac6798ab7f5b1532eca5aab993db860cc82c22b36d186779d8cc994b1c928272d84f7aad4f7c1dbb4ad33ca329feea7e95de3f1fcd5d42e3b57b985638c3353704bda4596b08ee0ad526702eb747c9c67c9ff62a607dfce89a603c6c4abc60f224b641265e4d73cd0b95e92629058d3d8143d659a34b3f91cad3056750ef55af307e5f36da8a23dee3d01db394bd42ab296a06499f4fb4b608c9a9751876adcf805056e092af29888f26ae010e8fe8829651f24efa0fed50c144b4b05f3c8e18dce892fadab66be8b732116e30e64c7fc9a3c1087e125c4c423c2adf8b24ba2f0e7497128e3e8d910b4a7007185bbd4d6bcf00b67ab69c55c15adfab99b9b1198af072f0dcaf1a5c6654be7f9f34d184aa231a1fd63f2d4aaa3cdabf5e1dcb42f89a092ab995002061937ec79fb37c02d44eb412bb8f4018d854c6bbe5a8a444062f0a91fb14b4e9bdfe3b0418f8e3f79621bfe0ca2a5061751683befc80245bc47f0e96017c221d01d0d67c1be7a93213cbe89ac8ebf479a819b467bb8195dab780344e308409e35027fe8b0b61f678dc27c3f0b016ba932ed78c74de3cf518bb122e421c8e3887f6db689f5e6f666e51128ac01b7bab40c1c3813b08321", 0xfd5}], 0x2)

16.99102391s ago: executing program 1 (id=298):
mount(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0xc138fd09, &(0x7f0000000000))
madvise(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x64)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000004c0)={0x0, 0x5}, 0x0)
ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40603d07, &(0x7f0000000180)={0xfffffffe})
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x1, 0x1c2, &(0x7f00000002c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000004, 0x10012, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
syz_clone3(&(0x7f00000005c0)={0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16.267056314s ago: executing program 1 (id=302):
r0 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0)
write(r0, &(0x7f0000000000)="0100000000", 0x5)

15.382861485s ago: executing program 1 (id=311):
r0 = userfaultfd(0x801)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2)

13.985226651s ago: executing program 33 (id=311):
r0 = userfaultfd(0x801)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2)

13.442712407s ago: executing program 4 (id=319):
r0 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0)
write(r0, &(0x7f0000000000)="0100000000", 0x5)

13.051161676s ago: executing program 4 (id=322):
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000"], 0x48)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYRESHEX=r1, @ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4008000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006800), 0x4000000000000a6, 0x40000023, 0x0)
r5 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17f, &(0x7f0000000880)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40)
chdir(&(0x7f0000000140)='./file0\x00')

11.647296052s ago: executing program 4 (id=326):
mkdir(0x0, 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)='4', 0x1)

11.282794459s ago: executing program 4 (id=329):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_emit_vhci(0x0, 0x11)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x1, 0x442a, &(0x7f0000004480)="$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")
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x6042, 0x106)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
syz_mount_image$minix(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0032006c00ae1ecebf96fccb8a69f4a8ea113bda4a1e87a726a9dcf01d4bf4543b835eb2b9e6066dc6b060d90b6ca4385a4244aa53e0a0acaebd0c1dd5d380385e85b29008b29f2fb4a93ebe5ace1c105e684d1fd61659e8decea319f675e039904905a8130e2f3c8d5c7a22b4487a331c727612ff1ddd6aabd0e4ab29212632a15e835fac77a7c827"], 0x1, 0x174, &(0x7f0000000240)="$eJzs281uElEYgOFvAH/iysSdcWfV+lMGCpou9VKadmwap2qsmzYu9Aq8Bq/M3oALb0BMR8BEGCaRyAnyPKsvvEzmsDjM2UwAm6vzPLLIYutyvnP95udbWeoVASsySnz/HyMgnfZF6hUAaXx7EXEREV+/fziI9tbM8/myf5z01r3Z/inidmfcs/vx4I8++hLVZ7/69tzrb0z7w7l9++7k/o/icTyJnehGHr3oj/vh9PrhkqcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZVFt2mvvALrXh5XBa92n6l6v3afrXquw19UNuvVb178KY8XLRMYI7Wkvu/3bD/Ow37H0jn9Oz81X5ZFu8MBoNhOqT+ZwL+tfz9ydv89Ox85/hk/6g4Kl4P+8Nne4PB3tNeXp3s88Xne2B9/X7op14JAAAAAAAAAPC3dqP+3RoAAOD/sorXiVL/RgAAAAAAAAAAAAAAWHc/AwAA//8c7qwa")
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='pids.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
io_setup(0x202, 0x0)
syz_emit_vhci(0x0, 0xe)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
socket$inet6(0xa, 0x0, 0x1)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100fbff}])
sendfile(r0, 0xffffffffffffffff, 0x0, 0xf800)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r2 = open(&(0x7f0000000380)='./bus\x00', 0x0, 0x139)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
symlink(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', &(0x7f0000000280)='./file0\x00')

8.945245639s ago: executing program 4 (id=343):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@hyper})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000040)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r1, 0x7a5, &(0x7f0000000140)={{@hyper}, 0x1, 0x8})

3.578968121s ago: executing program 4 (id=361):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r0, &(0x7f0000000380)='100000', 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='1', 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="130000001000000008"], 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180))
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x23, 0x5, 0x0)
unshare(0x62040200)

3.055218766s ago: executing program 34 (id=361):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r0, &(0x7f0000000380)='100000', 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='1', 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="130000001000000008"], 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180))
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x23, 0x5, 0x0)
unshare(0x62040200)

2.11510173s ago: executing program 3 (id=369):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000000)='7', 0x1)
sendto$inet6(r0, 0x0, 0x0, 0x24000010, &(0x7f00000001c0)={0xa, 0x2, 0x10000, @loopback, 0x9}, 0x1c)

1.715475529s ago: executing program 3 (id=371):
statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0)

1.658919342s ago: executing program 0 (id=372):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050)

1.48452979s ago: executing program 3 (id=373):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000a0)={'bridge_slave_0\x00', <r0=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c00000013000100000000000000000007000000", @ANYRES32=r0, @ANYBLOB="00000000000000005c001a800600000001000000500005802400018008000100010000000800020000000000080003000000000008000400", @ANYRES32=r0, @ANYBLOB="2800038008000100010000000a00020000112233445500000800030000000000080004"], 0x7c}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)

1.480111491s ago: executing program 0 (id=374):
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e1f, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x4000010, 0x0, 0x0)

1.27878588s ago: executing program 0 (id=375):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x8b101a, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0xa)

1.194245014s ago: executing program 0 (id=376):
socket$nl_route(0x10, 0x3, 0x0)
r0 = gettid()
timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e25, 0x8001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x7}, 0x1c)
io_setup(0x6, &(0x7f0000000680)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x8, 0x0, r1, 0x0}])

1.174743135s ago: executing program 3 (id=377):
r0 = openat(0xffffffffffffff9c, &(0x7f0000005140)='./file0\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000001000)={{0xffffffff}, '/dev/nullb0\x00'})
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000300)={0x5, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100}})

950.820176ms ago: executing program 3 (id=378):
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000940)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYBLOB="5a78f3a7d22f87373860bcad8e2266d01766d8b81b5cd169ce8bcd84833903277340fcd1ab00516d1d91293cccd4de3fef7ffaf8c7866e7247c301e03d3a6542bb0ef8bfdc149cf66e8f197f3fada6fbacd5e1c7c9e01c99bf90bb407044c52a3896940159f64c", @ANYRESOCT=r0], 0x1, 0x564, &(0x7f00000003c0)="$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")
umount2(0x0, 0x0)

685.545548ms ago: executing program 3 (id=379):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50)
statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0)

227.127499ms ago: executing program 0 (id=380):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050)

0s ago: executing program 0 (id=381):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0)
sendmsg$IEEE802154_START_REQ(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000076c0)={&(0x7f0000000880)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xf9}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xa1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000440}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts.
[   89.333773][ T5761] cgroup: Unknown subsys name 'net'
[   89.483097][ T5761] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   91.334801][ T5761] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   93.817596][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   93.826401][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   93.836095][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   93.846030][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   93.854778][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   93.863634][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   93.873383][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   93.882434][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   93.890335][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   93.900999][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   93.914776][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   93.922822][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   93.945583][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   93.955160][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   93.966530][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   93.967047][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   93.982018][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   93.994198][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   94.005275][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   94.014554][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   94.024092][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   94.033591][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   94.045303][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   94.056842][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   94.562236][ T5776] chnl_net:caif_netlink_parms(): no params data found
[   94.655013][ T5774] chnl_net:caif_netlink_parms(): no params data found
[   94.744827][ T5775] chnl_net:caif_netlink_parms(): no params data found
[   94.786757][ T5773] chnl_net:caif_netlink_parms(): no params data found
[   94.865418][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.874222][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.884184][ T5776] bridge_slave_0: entered allmulticast mode
[   94.892777][ T5776] bridge_slave_0: entered promiscuous mode
[   94.952711][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.964987][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.973205][ T5776] bridge_slave_1: entered allmulticast mode
[   94.981667][ T5776] bridge_slave_1: entered promiscuous mode
[   95.003594][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.010978][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.018714][ T5774] bridge_slave_0: entered allmulticast mode
[   95.027176][ T5774] bridge_slave_0: entered promiscuous mode
[   95.072354][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.081611][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.090544][ T5774] bridge_slave_1: entered allmulticast mode
[   95.099262][ T5774] bridge_slave_1: entered promiscuous mode
[   95.175965][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.200251][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.208332][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.217399][ T5775] bridge_slave_0: entered allmulticast mode
[   95.226413][ T5775] bridge_slave_0: entered promiscuous mode
[   95.235424][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.243006][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.251148][ T5775] bridge_slave_1: entered allmulticast mode
[   95.260659][ T5775] bridge_slave_1: entered promiscuous mode
[   95.271061][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.285775][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.298827][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.307646][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.315560][ T5773] bridge_slave_0: entered allmulticast mode
[   95.324045][ T5773] bridge_slave_0: entered promiscuous mode
[   95.357583][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.393781][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.401958][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.409609][ T5773] bridge_slave_1: entered allmulticast mode
[   95.417150][ T5773] bridge_slave_1: entered promiscuous mode
[   95.439756][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.455896][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.510510][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.540525][ T5774] team0: Port device team_slave_0 added
[   95.555135][ T5776] team0: Port device team_slave_0 added
[   95.575154][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.627747][ T5774] team0: Port device team_slave_1 added
[   95.648094][ T5776] team0: Port device team_slave_1 added
[   95.660091][ T5773] team0: Port device team_slave_0 added
[   95.672627][ T5773] team0: Port device team_slave_1 added
[   95.682592][ T5775] team0: Port device team_slave_0 added
[   95.694076][ T5775] team0: Port device team_slave_1 added
[   95.783523][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.790572][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.819052][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.832626][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.842189][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.869596][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.884717][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.892022][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.920423][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.947000][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.955321][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.987312][ T5782] Bluetooth: hci3: command tx timeout
[   95.995173][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.010578][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.018699][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.056410][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.073548][ T5782] Bluetooth: hci2: command tx timeout
[   96.074817][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.090864][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.122857][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.144237][ T5782] Bluetooth: hci1: command tx timeout
[   96.153383][ T5788] Bluetooth: hci0: command tx timeout
[   96.166194][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.175486][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.205081][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.232070][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.239301][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.268925][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.402127][ T5773] hsr_slave_0: entered promiscuous mode
[   96.409841][ T5773] hsr_slave_1: entered promiscuous mode
[   96.427019][ T5776] hsr_slave_0: entered promiscuous mode
[   96.434555][ T5776] hsr_slave_1: entered promiscuous mode
[   96.441704][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   96.450134][ T5776] Cannot create hsr debugfs directory
[   96.462764][ T5775] hsr_slave_0: entered promiscuous mode
[   96.470120][ T5775] hsr_slave_1: entered promiscuous mode
[   96.476879][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   96.485938][ T5775] Cannot create hsr debugfs directory
[   96.497077][ T5774] hsr_slave_0: entered promiscuous mode
[   96.504641][ T5774] hsr_slave_1: entered promiscuous mode
[   96.511187][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   96.519227][ T5774] Cannot create hsr debugfs directory
[   97.086995][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   97.102504][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   97.118674][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   97.132133][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   97.239817][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   97.270213][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   97.283902][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   97.306519][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   97.416174][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   97.428957][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   97.441129][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   97.452354][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   97.492263][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.588911][    T8] cfg80211: failed to load regulatory.db
[   97.611977][ T5774] 8021q: adding VLAN 0 to HW filter on device team0
[   97.670956][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   97.684171][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   97.707033][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.714538][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.735300][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   97.750306][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   97.785034][ T1320] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.792879][ T1320] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.904457][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.971274][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.068305][ T5782] Bluetooth: hci3: command tx timeout
[   98.099648][ T5775] 8021q: adding VLAN 0 to HW filter on device team0
[   98.143873][ T5782] Bluetooth: hci2: command tx timeout
[   98.148013][ T5773] 8021q: adding VLAN 0 to HW filter on device team0
[   98.200286][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.220049][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.229285][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.234389][ T5782] Bluetooth: hci1: command tx timeout
[   98.247014][ T5782] Bluetooth: hci0: command tx timeout
[   98.285139][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.294277][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.347380][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.357387][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.382925][ T1320] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.390907][ T1320] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.411254][ T5776] 8021q: adding VLAN 0 to HW filter on device team0
[   98.459199][ T2952] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.467714][ T2952] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.505271][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.513415][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.580434][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.848870][ T5774] veth0_vlan: entered promiscuous mode
[   98.902861][ T5774] veth1_vlan: entered promiscuous mode
[   99.020103][ T5774] veth0_macvtap: entered promiscuous mode
[   99.045540][ T5774] veth1_macvtap: entered promiscuous mode
[   99.138482][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.179324][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.220960][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.244955][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.265483][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.280516][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.290850][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.370353][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.467057][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.575939][ T2952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.594819][ T2952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.634611][ T5773] veth0_vlan: entered promiscuous mode
[   99.659866][ T5775] veth0_vlan: entered promiscuous mode
[   99.707489][ T5773] veth1_vlan: entered promiscuous mode
[   99.725457][ T2960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.741189][ T2960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.762603][ T5775] veth1_vlan: entered promiscuous mode
[   99.817229][ T5776] veth0_vlan: entered promiscuous mode
[   99.841001][ T5776] veth1_vlan: entered promiscuous mode
[   99.867982][ T5773] veth0_macvtap: entered promiscuous mode
[   99.922549][ T5773] veth1_macvtap: entered promiscuous mode
[   99.991495][ T5775] veth0_macvtap: entered promiscuous mode
[  100.013185][ T5775] veth1_macvtap: entered promiscuous mode
[  100.058147][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.075627][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.091860][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.122076][ T5776] veth0_macvtap: entered promiscuous mode
[  100.125898][ T5843] syz.3.4[5843]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[  100.148976][ T5782] Bluetooth: hci3: command tx timeout
[  100.202870][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.225080][ T5782] Bluetooth: hci2: command tx timeout
[  100.238464][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.259500][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.284210][ T5776] veth1_macvtap: entered promiscuous mode
[  100.303689][ T5782] Bluetooth: hci1: command tx timeout
[  100.315292][ T5782] Bluetooth: hci0: command tx timeout
[  100.323690][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.337445][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.348309][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.360362][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.373185][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.387102][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.397885][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.408489][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.418999][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.445765][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.461603][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.476513][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.490195][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.505932][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.526829][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.541547][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.555418][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.566443][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.578209][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.590833][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.605811][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.636102][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.656694][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.666811][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.677183][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.749694][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.769977][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.780473][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.799671][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.812503][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.833484][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.852024][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.895417][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.917238][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.929233][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.948787][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.065748][ T5843] loop3: detected capacity change from 0 to 32768
[  101.082321][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.093399][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.196644][ T5843] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  101.248767][ T2952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.298992][ T2952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.325559][ T2952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.334167][ T2952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.491129][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.530382][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.550005][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.594119][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.705370][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.705521][ T5843] XFS (loop3): Ending clean mount
[  101.715914][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.136734][ T5858] FAULT_INJECTION: forcing a failure.
[  102.136734][ T5858] name failslab, interval 1, probability 0, space 0, times 1
[  102.181581][ T5858] CPU: 0 PID: 5858 Comm: syz.0.1 Not tainted syzkaller #0
[  102.190243][ T5858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  102.202595][ T5858] Call Trace:
[  102.205953][ T5858]  <TASK>
[  102.209208][ T5858]  dump_stack_lvl+0x18c/0x250
[  102.215227][ T5858]  ? show_regs_print_info+0x20/0x20
[  102.221217][ T5858]  ? load_image+0x420/0x420
[  102.226245][ T5858]  ? __might_sleep+0xe0/0xe0
[  102.227238][ T5782] Bluetooth: hci3: command tx timeout
[  102.231943][ T5858]  ? __lock_acquire+0x7d80/0x7d80
[  102.244146][ T5858]  should_fail_ex+0x394/0x4c0
[  102.251350][ T5858]  should_failslab+0x9/0x20
[  102.257725][ T5858]  slab_pre_alloc_hook+0x59/0x300
[  102.264042][ T5858]  ? __might_sleep+0xe0/0xe0
[  102.268785][ T5858]  ? load_msg+0xc4/0x380
[  102.273958][ T5858]  ? load_msg+0xc4/0x380
[  102.278518][ T5858]  __kmem_cache_alloc_node+0x53/0x250
[  102.287176][ T5858]  ? load_msg+0xc4/0x380
[  102.291734][ T5858]  __kmalloc+0xa7/0x240
[  102.296528][ T5858]  load_msg+0xc4/0x380
[  102.301292][ T5858]  do_msgrcv+0x279/0x13d0
[  102.306843][ T5858]  ? do_msgrcv+0x13d0/0x13d0
[  102.313098][ T5858]  ? ksys_msgrcv+0x40/0x40
[  102.317923][ T5858]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  102.324232][ T5858]  ? lock_chain_count+0x20/0x20
[  102.329758][ T5858]  ? lockdep_hardirqs_on+0x98/0x150
[  102.336250][ T5858]  ? __x64_sys_msgrcv+0x20/0xd0
[  102.341920][ T5858]  do_syscall_64+0x55/0xb0
[  102.348247][ T5858]  ? clear_bhb_loop+0x40/0x90
[  102.355325][ T5858]  ? clear_bhb_loop+0x40/0x90
[  102.360776][ T5858]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  102.367075][ T5858] RIP: 0033:0x7fd1bc99e159
[  102.371825][ T5858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  102.393582][ T5858] RSP: 002b:00007fd1bd8c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000046
[  102.403278][ T5858] RAX: ffffffffffffffda RBX: 00007fd1bcc25fa0 RCX: 00007fd1bc99e159
[  102.411416][ T5858] RDX: 00000000ffffff4e RSI: 0000200000002fc0 RDI: 0000000000000000
[  102.419697][ T5858] RBP: 00007fd1bca3503b R08: 0000000000004800 R09: 0000000000000000
[  102.429630][ T5858] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  102.438441][ T5858] R13: 00007fd1bcc26038 R14: 00007fd1bcc25fa0 R15: 00007ffeb7708428
[  102.446999][ T5858]  </TASK>
[  102.485935][ T5788] Bluetooth: hci0: command tx timeout
[  102.491760][ T5788] Bluetooth: hci1: command tx timeout
[  102.497891][ T5782] Bluetooth: hci2: command tx timeout
[  102.580081][ T5857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.625348][   T28] audit: type=1800 audit(1789205804.084:2): pid=5863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4" name="file1" dev="loop3" ino=9286 res=0 errno=0
[  102.728392][ T5855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.043968][ T5867] FAULT_INJECTION: forcing a failure.
[  103.043968][ T5867] name failslab, interval 1, probability 0, space 0, times 0
[  103.083294][ T5867] CPU: 1 PID: 5867 Comm: syz.0.7 Not tainted syzkaller #0
[  103.092420][ T5774] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  103.102471][ T5867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  103.112844][ T5867] Call Trace:
[  103.116469][ T5867]  <TASK>
[  103.120266][ T5867]  dump_stack_lvl+0x18c/0x250
[  103.125628][ T5867]  ? show_regs_print_info+0x20/0x20
[  103.131344][ T5867]  ? load_image+0x420/0x420
[  103.135912][ T5867]  ? __might_sleep+0xe0/0xe0
[  103.140759][ T5867]  ? __lock_acquire+0x7d80/0x7d80
[  103.145888][ T5867]  should_fail_ex+0x394/0x4c0
[  103.151797][ T5867]  should_failslab+0x9/0x20
[  103.156924][ T5867]  slab_pre_alloc_hook+0x59/0x300
[  103.162049][ T5867]  kmem_cache_alloc_lru+0x4d/0x2b0
[  103.167690][ T5867]  ? __d_alloc+0x31/0x710
[  103.173674][ T5867]  __d_alloc+0x31/0x710
[  103.177931][ T5867]  ? alloc_fd+0x590/0x640
[  103.182767][ T5867]  d_alloc_pseudo+0x1d/0x70
[  103.187420][ T5867]  alloc_file_pseudo+0xe4/0x210
[  103.192353][ T5867]  ? fput+0x1a0/0x1a0
[  103.196418][ T5867]  ? alloc_fd+0x590/0x640
[  103.201281][ T5867]  sock_alloc_file+0xb7/0x280
[  103.206199][ T5867]  __sys_socket+0x140/0x1b0
[  103.211724][ T5867]  __x64_sys_socket+0x7a/0x90
[  103.216577][ T5867]  do_syscall_64+0x55/0xb0
[  103.221908][ T5867]  ? clear_bhb_loop+0x40/0x90
[  103.226654][ T5867]  ? clear_bhb_loop+0x40/0x90
[  103.232177][ T5867]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  103.238313][ T5867] RIP: 0033:0x7fd1bc99e159
[  103.242811][ T5867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  103.264046][ T5867] RSP: 002b:00007fd1bd8c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  103.274435][ T5867] RAX: ffffffffffffffda RBX: 00007fd1bcc25fa0 RCX: 00007fd1bc99e159
[  103.285370][ T5867] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f
[  103.296204][ T5867] RBP: 00007fd1bca3503b R08: 0000000000000000 R09: 0000000000000000
[  103.304935][ T5867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  103.313393][ T5867] R13: 00007fd1bcc26038 R14: 00007fd1bcc25fa0 R15: 00007ffeb7708428
[  103.322131][ T5867]  </TASK>
[  103.356486][ T5860] loop1: detected capacity change from 0 to 32768
[  103.432000][ T5860] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  103.724750][ T5860] XFS (loop1): Ending clean mount
[  103.890405][   T28] audit: type=1800 audit(1789205805.344:3): pid=5860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="bus" dev="loop1" ino=9289 res=0 errno=0
[  104.554439][ T5887] loop3: detected capacity change from 0 to 8192
[  104.629676][ T5887]  loop3: p1 < > p2 < > p3 p4 < p5 >
[  104.645523][ T5878] loop2: detected capacity change from 0 to 32768
[  104.664408][ T5887] loop3: partition table partially beyond EOD, truncated
[  104.695488][ T5887] loop3: p1 start 83886080 is beyond EOD, truncated
[  104.731368][ T5887] loop3: p2 start 16776960 is beyond EOD, truncated
[  105.094231][ T5878] loop2: detected capacity change from 32768 to 0
[  105.135446][ T5895] syz.2.9: attempt to access beyond end of device
[  105.135446][ T5895] loop2: rw=2049, sector=30752, nr_sectors = 8 limit=0
[  105.153566][ T5895] lbmIODone: I/O error in JFS log
[  105.291085][ T5773] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=44, index = 7
[  105.291085][ T5773] 
[  105.347234][ T5773] syz-executor: attempt to access beyond end of device
[  105.347234][ T5773] loop2: rw=0, sector=64, nr_sectors = 8 limit=0
[  105.390814][ T5773] syz-executor: attempt to access beyond end of device
[  105.390814][ T5773] loop2: rw=0, sector=120, nr_sectors = 8 limit=0
[  105.444001][ T5773] ERROR: (device loop2): remounting filesystem as read-only
[  105.466818][ T5779] udevd[5779]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  105.476739][ T5785] udevd[5785]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  105.495337][ T5787] udevd[5787]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[  105.546127][ T5773] syz-executor: attempt to access beyond end of device
[  105.546127][ T5773] loop2: rw=0, sector=288, nr_sectors = 8 limit=0
[  105.590356][ T5773] metapage_read_end_io: I/O error
[  105.609269][ T5773] read_mapping_page failed!
[  105.649681][ T5773] diRead: read_metapage failed
[  105.681041][ T5773] jfs_lookup: iget failed on inum 32
[  105.714238][ T5773] syz-executor: attempt to access beyond end of device
[  105.714238][ T5773] loop2: rw=0, sector=288, nr_sectors = 8 limit=0
[  105.724805][ T5776] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  105.754231][ T5773] metapage_read_end_io: I/O error
[  105.760230][ T5773] read_mapping_page failed!
[  105.768957][ T5773] diRead: read_metapage failed
[  105.776709][ T5773] jfs_lookup: iget failed on inum 32
[  106.040220][ T5899] loop3: detected capacity change from 0 to 32768
[  106.097114][ T5899] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.17 (5899)
[  106.246135][ T5899] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  106.266303][ T5899] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  106.295137][ T5899] BTRFS info (device loop3): setting nodatasum
[  106.303041][ T5899] BTRFS info (device loop3): force zlib compression, level 3
[  106.313258][ T5899] BTRFS info (device loop3): turning on flush-on-commit
[  106.354649][ T5773] syz-executor: attempt to access beyond end of device
[  106.354649][ T5773] loop2: rw=2049, sector=30760, nr_sectors = 8 limit=0
[  106.380309][ T5899] BTRFS info (device loop3): max_inline at 4096
[  106.407668][ T5899] BTRFS info (device loop3): using free space tree
[  106.424299][ T5773] lbmIODone: I/O error in JFS log
[  106.432739][ T5773] syz-executor: attempt to access beyond end of device
[  106.432739][ T5773] loop2: rw=1, sector=160, nr_sectors = 8 limit=0
[  106.480299][ T5773] metapage_write_end_io: I/O error
[  106.503836][ T5773] syz-executor: attempt to access beyond end of device
[  106.503836][ T5773] loop2: rw=1, sector=264, nr_sectors = 8 limit=0
[  106.530389][ T5773] metapage_write_end_io: I/O error
[  106.559157][ T5773] syz-executor: attempt to access beyond end of device
[  106.559157][ T5773] loop2: rw=1, sector=224, nr_sectors = 8 limit=0
[  106.598749][ T5773] metapage_write_end_io: I/O error
[  106.609818][ T2952] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.673511][ T5773] syz-executor: attempt to access beyond end of device
[  106.673511][ T5773] loop2: rw=1, sector=232, nr_sectors = 8 limit=0
[  106.749358][ T5773] metapage_write_end_io: I/O error
[  106.784032][ T5899] BTRFS info (device loop3): enabling ssd optimizations
[  106.801465][ T5773] metapage_write_end_io: I/O error
[  106.812430][ T5773] metapage_write_end_io: I/O error
[  106.831519][ T5773] metapage_write_end_io: I/O error
[  106.842367][ T5773] metapage_write_end_io: I/O error
[  106.850947][ T5773] metapage_write_end_io: I/O error
[  106.869776][ T5773] metapage_write_end_io: I/O error
[  106.879544][ T5773] metapage_write_end_io: I/O error
[  106.888380][ T5773] lbmIODone: I/O error in JFS log
[  106.898679][ T5773] lbmIODone: I/O error in JFS log
[  106.908174][ T5773] lbmIODone: I/O error in JFS log
[  106.939141][ T5773] lmLogShutdown: exit(-5)
[  106.948678][ T5773] jfs_umount failed with return code -5
[  106.965465][ T2952] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.145480][ T5774] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  107.231835][ T2952] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.430452][ T2952] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.918828][ T5943] loop3: detected capacity change from 0 to 32768
[  109.571434][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  109.585068][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  109.596852][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  109.606136][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  109.704078][ T5969] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  109.723717][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  109.732800][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  110.302125][ T5973] loop3: detected capacity change from 0 to 16
[  110.462266][ T5973] erofs: (device loop3): mounted with root inode @ nid 36.
[  110.547123][ T5782] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000]
[  110.634698][ T5973] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[  110.648910][   T28] audit: type=1800 audit(1789205812.104:4): pid=5973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.35" name="file2" dev="loop3" ino=89 res=0 errno=0
[  110.848672][ T5973] syz.3.35 (5973) used greatest stack depth: 20432 bytes left
[  111.021764][ T5955] loop0: detected capacity change from 0 to 32768
[  111.054788][ T5955] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.33 (5955)
[  111.139787][ T5955] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  111.159055][ T5979] FAULT_INJECTION: forcing a failure.
[  111.159055][ T5979] name failslab, interval 1, probability 0, space 0, times 0
[  111.191230][ T5955] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  111.224342][ T5979] CPU: 1 PID: 5979 Comm: syz.3.37 Not tainted syzkaller #0
[  111.232270][ T5979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  111.243180][ T5979] Call Trace:
[  111.246696][ T5979]  <TASK>
[  111.249799][ T5979]  dump_stack_lvl+0x18c/0x250
[  111.254397][ T5955] BTRFS info (device loop0): allowing degraded mounts
[  111.255581][ T5979]  ? show_regs_print_info+0x20/0x20
[  111.255620][ T5979]  ? load_image+0x420/0x420
[  111.264795][ T5955] BTRFS info (device loop0): metadata ratio 4
[  111.268478][ T5979]  ? __lock_acquire+0x7d80/0x7d80
[  111.286674][ T5979]  should_fail_ex+0x394/0x4c0
[  111.291524][ T5979]  should_failslab+0x9/0x20
[  111.297246][ T5979]  slab_pre_alloc_hook+0x59/0x300
[  111.303303][ T5979]  kmem_cache_alloc_lru+0x4d/0x2b0
[  111.310061][ T5979]  ? sock_alloc_inode+0x28/0xc0
[  111.315867][ T5979]  sock_alloc_inode+0x28/0xc0
[  111.321348][ T5979]  ? sockfs_init_fs_context+0xb0/0xb0
[  111.329434][ T5979]  new_inode_pseudo+0x63/0x1d0
[  111.334568][ T5979]  __sock_create+0x12d/0x940
[  111.339322][ T5979]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  111.346255][ T5979]  __sys_socket+0xd7/0x1b0
[  111.350814][ T5979]  __x64_sys_socket+0x7a/0x90
[  111.355563][ T5979]  do_syscall_64+0x55/0xb0
[  111.360062][ T5979]  ? clear_bhb_loop+0x40/0x90
[  111.364984][ T5979]  ? clear_bhb_loop+0x40/0x90
[  111.369921][ T5979]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  111.375898][ T5979] RIP: 0033:0x7f40fb59e159
[  111.380749][ T5979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  111.402035][ T5979] RSP: 002b:00007f40fc54e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  111.410613][ T5979] RAX: ffffffffffffffda RBX: 00007f40fb825fa0 RCX: 00007f40fb59e159
[  111.419186][ T5979] RDX: 0000000000000084 RSI: 0000000000000005 RDI: 000000000000000a
[  111.428832][ T5979] RBP: 00007f40fb63503b R08: 0000000000000000 R09: 0000000000000000
[  111.436861][ T5979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  111.445786][ T5979] R13: 00007f40fb826038 R14: 00007f40fb825fa0 R15: 00007ffe43a6dda8
[  111.457585][ T5979]  </TASK>
[  111.495370][ T5955] BTRFS info (device loop0): turning on sync discard
[  111.502561][ T5955] BTRFS info (device loop0): turning off discard
[  111.524488][ T5955] BTRFS warning (device loop0): excessive commit interval 3911
[  111.564397][ T5955] BTRFS info (device loop0): turning on sync discard
[  111.574762][ T5979] socket: no more sockets
[  111.651491][ T5955] BTRFS info (device loop0): disabling tree log
[  111.672375][ T5955] BTRFS info (device loop0): using free space tree
[  111.730222][ T5955] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  111.732323][ T5955] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  111.784613][ T5955] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  111.816932][ T5955] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  111.827487][ T5782] Bluetooth: hci3: command tx timeout
[  111.848301][ T5955] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  111.848974][ T5955] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  111.886199][ T5955] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  111.898919][ T5955] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  111.910187][ T5955] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  111.922803][ T5955] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  111.935981][ T5955] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  112.032173][ T5955] BTRFS error (device loop0): open_ctree failed: -12
[  113.058577][ T2952] hsr_slave_0: left promiscuous mode
[  113.113499][ T2952] hsr_slave_1: left promiscuous mode
[  113.211388][ T2952] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.252739][ T2952] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.290621][ T2952] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.308891][ T2952] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.337906][ T2952] bridge_slave_1: left allmulticast mode
[  113.362751][ T6030] loop3: detected capacity change from 0 to 164
[  113.364332][ T2952] bridge_slave_1: left promiscuous mode
[  113.396796][ T2952] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.452912][ T2952] bridge_slave_0: left allmulticast mode
[  113.478107][ T2952] bridge_slave_0: left promiscuous mode
[  113.493309][ T2952] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.763123][ T2952] veth1_macvtap: left promiscuous mode
[  113.784036][ T2952] veth0_macvtap: left promiscuous mode
[  113.789951][ T2952] veth1_vlan: left promiscuous mode
[  113.829270][ T2952] veth0_vlan: left promiscuous mode
[  113.912334][ T5782] Bluetooth: hci3: command tx timeout
[  114.285409][ T6023] loop0: detected capacity change from 0 to 32768
[  114.441551][ T6046] bonding: no command found in bonding_masters - use +ifname or -ifname
[  114.477216][ T6046] bonding: b is being created...
[  115.210592][ T2952] team0 (unregistering): Port device team_slave_1 removed
[  115.298419][ T2952] team0 (unregistering): Port device team_slave_0 removed
[  115.358654][ T2952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  115.412038][ T2952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  115.811445][ T2952] bond0 (unregistering): Released all slaves
[  115.939930][ T6040] veth0: entered promiscuous mode
[  115.993771][ T5782] Bluetooth: hci3: command tx timeout
[  116.050780][ T5965] chnl_net:caif_netlink_parms(): no params data found
[  116.132666][ T6041] veth0: left promiscuous mode
[  116.454064][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.462436][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.470917][ T5965] bridge_slave_0: entered allmulticast mode
[  116.479448][ T5965] bridge_slave_0: entered promiscuous mode
[  116.518912][ T6067] Illegal XDP return value 4291354624 on prog  (id 3) dev syz_tun, expect packet loss!
[  116.560885][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.608491][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.633737][ T5965] bridge_slave_1: entered allmulticast mode
[  116.641955][ T5965] bridge_slave_1: entered promiscuous mode
[  116.845022][ T5965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  116.912707][ T5965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  117.060950][ T5965] team0: Port device team_slave_0 added
[  117.092566][ T5965] team0: Port device team_slave_1 added
[  117.220445][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_0
[  117.250936][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.345026][ T5965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  117.418199][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_1
[  117.459497][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.538214][ T5965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  117.598608][ T6088] nvmet_tcp: malformed ip/port passed: 127.0.0.1:
[  117.620648][ T6087] netlink: 'syz.1.61': attribute type 4 has an invalid length.
[  117.850716][ T6075] loop3: detected capacity change from 0 to 32768
[  117.862242][ T5965] hsr_slave_0: entered promiscuous mode
[  117.908284][ T5965] hsr_slave_1: entered promiscuous mode
[  118.052089][ T6080] loop0: detected capacity change from 0 to 32768
[  118.064508][ T5782] Bluetooth: hci3: command tx timeout
[  118.088862][ T6080] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.60 (6080)
[  118.165535][ T6080] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  118.205513][ T6080] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  118.257878][ T6080] BTRFS info (device loop0): force clearing of disk cache
[  118.284269][ T6097] Zero length message leads to an empty skb
[  118.301507][ T6080] BTRFS info (device loop0): enabling auto defrag
[  118.334313][ T6080] BTRFS info (device loop0): max_inline at 0
[  118.340995][ T6080] BTRFS info (device loop0): enabling disk space caching
[  118.383374][ T6080] BTRFS info (device loop0): disk space caching is enabled
[  118.534326][ T6080] BTRFS info (device loop0): enabling ssd optimizations
[  118.558039][ T6080] BTRFS info (device loop0): rebuilding free space tree
[  118.748168][ T6080] BTRFS info (device loop0): disabling free space tree
[  118.795494][ T6080] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  118.887041][ T6080] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  118.940787][ T6123] kernel profiling enabled (shift: 5)
[  119.110595][ T5965] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  119.171825][ T5965] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  119.212449][ T5965] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  119.254616][ T5965] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  119.372823][ T6127] loop1: detected capacity change from 0 to 8192
[  119.482002][   T28] audit: type=1804 audit(1789205820.934:5): pid=6133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.60" name="/newroot/24/file0/file1" dev="loop0" ino=260 res=1 errno=0
[  119.541222][   T12] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[  119.658777][ T5965] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.747178][ T5965] 8021q: adding VLAN 0 to HW filter on device team0
[  119.762256][   T28] audit: type=1804 audit(1789205821.214:6): pid=6080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.60" name="/newroot/24/file0/file1" dev="loop0" ino=260 res=1 errno=0
[  119.830206][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.839393][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state
[  119.922926][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.932383][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.052788][ T5965] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  120.069671][ T5965] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  120.225418][ T5775] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  120.287092][ T6145] netlink: 'syz.1.69': attribute type 4 has an invalid length.
[  120.320277][ T6145] nvmet_tcp: malformed ip/port passed: 127.0.0.1:
[  120.928629][ T5965] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.333076][ T5763] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  122.776849][ T6166] ip_tables: iptables: counters copy to user failed while replacing table
[  122.825604][ T5763] usb 1-1: Using ep0 maxpacket: 8
[  122.933625][ T5763] usb 1-1: unable to get BOS descriptor or descriptor too short
[  123.188025][ T5763] usb 1-1: config 7 has an invalid descriptor of length 106, skipping remainder of the config
[  123.351391][ T5763] usb 1-1: config 7 has 0 interfaces, different from the descriptor's value: 1
[  123.610766][ T5763] usb 1-1: string descriptor 0 read error: -22
[  123.748911][ T5763] usb 1-1: New USB device found, idVendor=041e, idProduct=401d, bcdDevice=29.5c
[  123.909200][ T5763] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.136750][ T5763] usb 1-1: can't set config #7, error -71
[  124.266514][ T5763] usb 1-1: USB disconnect, device number 2
[  124.789611][ T5965] veth0_vlan: entered promiscuous mode
[  124.818060][ T6186] netlink: 'syz.3.79': attribute type 4 has an invalid length.
[  124.829429][ T5782] Bluetooth: hci0: failed to read key size for handle 200
[  124.896181][ T6192] nvmet_tcp: malformed ip/port passed: 127.0.0.1:
[  124.926873][ T5965] veth1_vlan: entered promiscuous mode
[  125.018991][ T5965] veth0_macvtap: entered promiscuous mode
[  125.076826][ T5965] veth1_macvtap: entered promiscuous mode
[  125.180626][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.213479][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.234719][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.273672][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.295338][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.333358][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.369536][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.456876][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.496799][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.542124][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.578992][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.617676][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.658072][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.716161][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.797638][ T5965] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.834335][ T5965] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.848914][ T5965] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.860637][ T5965] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.179282][ T2952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.220089][ T2952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.307936][ T2989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.351808][ T2989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.453595][ T6223] netlink: 'syz.3.91': attribute type 4 has an invalid length.
[  126.539058][ T6223] nvmet_tcp: malformed ip/port passed: 127.0.0.1:
[  126.665880][ T6195] loop1: detected capacity change from 0 to 32768
[  126.801054][ T6237] loop3: detected capacity change from 0 to 512
[  126.820575][ T6237] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  126.832359][ T6195] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  127.321764][ T6195] XFS (loop1): Ending clean mount
[  127.383101][ T6195] XFS (loop1): Quotacheck needed: Please wait.
[  127.607535][ T6195] XFS (loop1): Quotacheck: Done.
[  127.851132][ T5776] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  127.924435][ T6263] netlink: 'syz.0.101': attribute type 4 has an invalid length.
[  128.029009][ T6267] nvmet_tcp: failed to bind port socket -99
[  128.444757][ T6271] =======================================================
[  128.444757][ T6271] WARNING: The mand mount option has been deprecated and
[  128.444757][ T6271]          and is ignored by this kernel. Remove the mand
[  128.444757][ T6271]          option from the mount to silence this warning.
[  128.444757][ T6271] =======================================================
[  128.608270][ T6266] loop4: detected capacity change from 0 to 32768
[  128.664385][ T6266] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.102 (6266)
[  128.756149][ T6266] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  128.806295][ T6266] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  128.875348][ T6266] BTRFS info (device loop4): force clearing of disk cache
[  128.896876][ T6266] BTRFS info (device loop4): enabling auto defrag
[  128.931204][ T6266] BTRFS info (device loop4): max_inline at 0
[  128.974308][ T6266] BTRFS info (device loop4): enabling disk space caching
[  128.982878][ T6266] BTRFS info (device loop4): disk space caching is enabled
[  129.142705][ T6290] FAULT_INJECTION: forcing a failure.
[  129.142705][ T6290] name failslab, interval 1, probability 0, space 0, times 0
[  129.158044][ T6290] CPU: 0 PID: 6290 Comm: syz.0.109 Not tainted syzkaller #0
[  129.167089][ T6290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  129.178872][ T6290] Call Trace:
[  129.182914][ T6290]  <TASK>
[  129.186184][ T6290]  dump_stack_lvl+0x18c/0x250
[  129.191648][ T6290]  ? show_regs_print_info+0x20/0x20
[  129.198425][ T6290]  ? load_image+0x420/0x420
[  129.203905][ T6290]  ? __might_sleep+0xe0/0xe0
[  129.209175][ T6290]  ? __lock_acquire+0x7d80/0x7d80
[  129.215039][ T6290]  should_fail_ex+0x394/0x4c0
[  129.220849][ T6290]  should_failslab+0x9/0x20
[  129.226237][ T6290]  slab_pre_alloc_hook+0x59/0x300
[  129.231691][ T6290]  ? loop_add+0x54/0x990
[  129.236777][ T6290]  __kmem_cache_alloc_node+0x53/0x250
[  129.242733][ T6290]  ? loop_add+0x54/0x990
[  129.247342][ T6290]  kmalloc_trace+0x2a/0xe0
[  129.252016][ T6290]  loop_add+0x54/0x990
[  129.256291][ T6290]  loop_control_ioctl+0x128/0x590
[  129.261679][ T6290]  ? loop_set_hw_queue_depth+0x110/0x110
[  129.269095][ T6290]  ? bpf_lsm_file_ioctl+0x9/0x10
[  129.274775][ T6290]  ? security_file_ioctl+0x80/0xa0
[  129.281672][ T6290]  ? loop_set_hw_queue_depth+0x110/0x110
[  129.288281][ T6290]  __se_sys_ioctl+0xfd/0x170
[  129.293499][ T6290]  do_syscall_64+0x55/0xb0
[  129.298600][ T6290]  ? clear_bhb_loop+0x40/0x90
[  129.303678][ T6290]  ? clear_bhb_loop+0x40/0x90
[  129.308781][ T6290]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  129.315693][ T6290] RIP: 0033:0x7fd1bc99e159
[  129.320559][ T6290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  129.340743][ T6290] RSP: 002b:00007fd1bd8c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  129.349252][ T6290] RAX: ffffffffffffffda RBX: 00007fd1bcc25fa0 RCX: 00007fd1bc99e159
[  129.357515][ T6290] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000004
[  129.365986][ T6290] RBP: 00007fd1bca3503b R08: 0000000000000000 R09: 0000000000000000
[  129.374109][ T6290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  129.382610][ T6290] R13: 00007fd1bcc26038 R14: 00007fd1bcc25fa0 R15: 00007ffeb7708428
[  129.391271][ T6290]  </TASK>
[  129.531481][ T6266] BTRFS info (device loop4): enabling ssd optimizations
[  129.578172][ T6266] BTRFS info (device loop4): rebuilding free space tree
[  129.688273][ T6266] BTRFS info (device loop4): disabling free space tree
[  129.731081][ T6309] loop1: detected capacity change from 0 to 164
[  129.739166][ T6266] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  129.773587][ T6266] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  130.070624][ T6164] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  130.231843][ T5965] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  130.346140][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.112'.
[  130.382735][ T6319] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  130.612782][ T6107] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 14 /dev/loop4 scanned by udevd (6107)
[  130.966137][ T6319] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.585189][ T6313] loop0: detected capacity change from 0 to 32768
[  131.742097][ T6313] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  131.878331][ T6358] loop1: detected capacity change from 0 to 128
[  132.044022][ T6358] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  132.206993][ T6358] bio_check_eod: 12 callbacks suppressed
[  132.207015][ T6358] syz.1.124: attempt to access beyond end of device
[  132.207015][ T6358] loop1: rw=2051, sector=112, nr_sectors = 940 limit=128
[  132.265101][ T6313] XFS (loop0): Ending clean mount
[  132.306088][ T6313] XFS (loop0): Quotacheck needed: Please wait.
[  132.447466][ T6313] XFS (loop0): Quotacheck: Done.
[  132.807057][ T5775] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  133.166769][ T6379] loop4: detected capacity change from 0 to 16
[  133.312016][ T6379] erofs: (device loop4): mounted with root inode @ nid 36.
[  133.415221][ T5782] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000]
[  133.439053][ T6378] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[  133.470385][   T28] audit: type=1800 audit(1789205834.904:7): pid=6378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.125" name="file2" dev="loop4" ino=89 res=0 errno=0
[  133.497840][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  133.511212][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  134.252671][ T6385] socket: no more sockets
[  134.283501][ T6385] Failed to initialize the IGMP6 autojoin socket (err -23)
[  134.469615][ T6363] loop3: detected capacity change from 0 to 32768
[  134.492684][ T6393] overlayfs: upper fs does not support file handles, falling back to index=off.
[  134.519838][ T6363] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 14
[  134.878587][ T6107] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 14
[  136.058646][ T6436] loop0: detected capacity change from 0 to 16
[  136.127400][ T6436] erofs: (device loop0): mounted with root inode @ nid 36.
[  136.718767][ T6430] loop1: detected capacity change from 0 to 32768
[  136.742591][ T6430] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 14
[  136.999953][ T6107] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 14
[  137.298108][ T6471] cgroup: No subsys list or none specified
[  137.494794][ T6476] loop1: detected capacity change from 0 to 16
[  137.525418][ T6476] erofs: (device loop1): mounted with root inode @ nid 36.
[  138.260072][ T6497] FAULT_INJECTION: forcing a failure.
[  138.260072][ T6497] name failslab, interval 1, probability 0, space 0, times 0
[  138.294117][ T6497] CPU: 0 PID: 6497 Comm: syz.1.169 Not tainted syzkaller #0
[  138.303200][ T6497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  138.319322][ T6497] Call Trace:
[  138.324531][ T6497]  <TASK>
[  138.327732][ T6497]  dump_stack_lvl+0x18c/0x250
[  138.336681][ T6497]  ? show_regs_print_info+0x20/0x20
[  138.342247][ T6497]  ? load_image+0x420/0x420
[  138.347223][ T6497]  ? __might_sleep+0xe0/0xe0
[  138.354199][ T6497]  ? __lock_acquire+0x7d80/0x7d80
[  138.359758][ T6497]  should_fail_ex+0x394/0x4c0
[  138.364702][ T6497]  should_failslab+0x9/0x20
[  138.369988][ T6497]  slab_pre_alloc_hook+0x59/0x300
[  138.375892][ T6497]  kmem_cache_alloc+0x5a/0x2c0
[  138.381521][ T6497]  ? __proc_create+0x373/0x8b0
[  138.386451][ T6497]  __proc_create+0x373/0x8b0
[  138.392220][ T6482] loop0: detected capacity change from 0 to 32768
[  138.399384][ T6497]  ? proc_symlink+0x260/0x260
[  138.399459][ T6497]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  138.399487][ T6497]  ? _raw_spin_unlock+0x40/0x40
[  138.416618][ T6497]  proc_create_reg+0x8b/0x110
[  138.421996][ T6497]  proc_create_net_data+0x99/0x1b0
[  138.427462][ T6497]  ? bpf_iter_fini_seq_net+0xc0/0xc0
[  138.432933][ T6497]  netlink_net_init+0x56/0x70
[  138.437813][ T6497]  ops_init+0x391/0x640
[  138.443370][ T6497]  setup_net+0x3b6/0xa20
[  138.447800][ T6497]  ? copy_net_ns+0x5d0/0x5d0
[  138.453989][ T6497]  ? copy_net_ns+0x342/0x5d0
[  138.460076][ T6497]  ? down_read_killable+0x1d0/0x340
[  138.460192][ T6482] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 14
[  138.466274][ T6497]  copy_net_ns+0x35e/0x5d0
[  138.466320][ T6497]  create_new_namespaces+0x3ce/0x700
[  138.466362][ T6497]  unshare_nsproxy_namespaces+0x11a/0x160
[  138.466394][ T6497]  ksys_unshare+0x4fa/0x8f0
[  138.501237][ T6497]  ? sighand_ctor+0x50/0x50
[  138.506096][ T6497]  ? lock_chain_count+0x20/0x20
[  138.511522][ T6497]  ? syscall_enter_from_user_mode+0x25/0x80
[  138.519809][ T6497]  __x64_sys_unshare+0x38/0x40
[  138.527521][ T6497]  do_syscall_64+0x55/0xb0
[  138.533090][ T6497]  ? clear_bhb_loop+0x40/0x90
[  138.538278][ T6497]  ? clear_bhb_loop+0x40/0x90
[  138.544084][ T6497]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  138.551896][ T6497] RIP: 0033:0x7fe31d59e159
[  138.558187][ T6497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  138.582736][ T6497] RSP: 002b:00007fe31e541028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  138.592078][ T6497] RAX: ffffffffffffffda RBX: 00007fe31d825fa0 RCX: 00007fe31d59e159
[  138.602268][ T6497] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000
[  138.612643][ T6497] RBP: 00007fe31d63503b R08: 0000000000000000 R09: 0000000000000000
[  138.622423][ T6497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  138.633852][ T6497] R13: 00007fe31d826038 R14: 00007fe31d825fa0 R15: 00007ffcf52abb38
[  138.646430][ T6497]  </TASK>
[  138.832132][ T6107] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 14
[  138.951883][ T6504] loop4: detected capacity change from 0 to 16
[  138.993872][ T6504] erofs: (device loop4): mounted with root inode @ nid 36.
[  140.012535][ T6537] loop3: detected capacity change from 0 to 16
[  140.076488][ T6537] erofs: (device loop3): mounted with root inode @ nid 36.
[  140.570624][ T6526] loop0: detected capacity change from 0 to 32768
[  140.607082][ T6526] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 14
[  140.772557][ T6107] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 14
[  142.058506][ T6578] loop1: detected capacity change from 0 to 16
[  142.248280][ T6578] erofs: (device loop1): mounted with root inode @ nid 36.
[  142.350227][ T5782] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000]
[  142.365005][ T6577] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[  142.435292][   T28] audit: type=1800 audit(1789205843.834:8): pid=6577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.196" name="file2" dev="loop1" ino=89 res=0 errno=0
[  142.921569][ T6588] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6589] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6588]
[  143.009765][ T6565] FAULT_INJECTION: forcing a failure.
[  143.009765][ T6565] name fail_futex, interval 1, probability 0, space 0, times 1
[  143.033634][ T6565] CPU: 1 PID: 6565 Comm: syz.3.188 Not tainted syzkaller #0
[  143.041656][ T6565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  143.052645][ T6565] Call Trace:
[  143.055988][ T6565]  <TASK>
[  143.058984][ T6565]  dump_stack_lvl+0x18c/0x250
[  143.063745][ T6565]  ? show_regs_print_info+0x20/0x20
[  143.069188][ T6565]  ? load_image+0x420/0x420
[  143.073857][ T6565]  ? get_user_pages_fast_only+0xa0/0xa0
[  143.080588][ T6565]  should_fail_ex+0x394/0x4c0
[  143.085874][ T6565]  get_futex_key+0x857/0x1030
[  143.090636][ T6565]  ? futex_setup_timer+0xc0/0xc0
[  143.095714][ T6565]  futex_wake+0x127/0x4f0
[  143.100214][ T6565]  ? futex_wake_mark+0x150/0x150
[  143.105245][ T6565]  do_futex+0x35d/0x3e0
[  143.109475][ T6565]  ? __might_fault+0xaa/0x120
[  143.114231][ T6565]  ? __ia32_sys_get_robust_list+0x110/0x110
[  143.120215][ T6565]  ? __might_fault+0xc6/0x120
[  143.124999][ T6565]  mm_release+0x184/0x3a0
[  143.129743][ T6565]  ? exit_mm_release+0x30/0x30
[  143.134742][ T6565]  ? lockdep_hardirqs_on+0x98/0x150
[  143.140016][ T6565]  exit_mm+0xa4/0x340
[  143.144068][ T6565]  ? sysctl_delayacct+0x220/0x220
[  143.149322][ T6565]  ? do_exit+0x2530/0x2530
[  143.154576][ T6565]  do_exit+0x909/0x2530
[  143.158825][ T6565]  ? put_task_struct+0xc0/0xc0
[  143.163753][ T6565]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  143.170317][ T6565]  ? get_signal+0x100e/0x1390
[  143.175130][ T6565]  ? lock_chain_count+0x20/0x20
[  143.181022][ T6565]  ? _raw_spin_lock_irq+0xbb/0xf0
[  143.186105][ T6565]  do_group_exit+0x22d/0x2f0
[  143.191366][ T6565]  ? lockdep_hardirqs_on+0x98/0x150
[  143.196782][ T6565]  get_signal+0x12a6/0x1390
[  143.201785][ T6565]  arch_do_signal_or_restart+0xc2/0x7b0
[  143.207662][ T6565]  ? __ia32_sys_get_robust_list+0x110/0x110
[  143.213603][ T6565]  ? get_sigframe_size+0x20/0x20
[  143.219427][ T6565]  ? exit_to_user_mode_loop+0x3b/0x110
[  143.225407][ T6565]  exit_to_user_mode_loop+0x70/0x110
[  143.231084][ T6565]  exit_to_user_mode_prepare+0xee/0x180
[  143.237039][ T6565]  syscall_exit_to_user_mode+0x1a/0x50
[  143.242839][ T6565]  do_syscall_64+0x61/0xb0
[  143.247863][ T6565]  ? clear_bhb_loop+0x40/0x90
[  143.252941][ T6565]  ? clear_bhb_loop+0x40/0x90
[  143.257710][ T6565]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  143.263658][ T6565] RIP: 0033:0x7f40fb59e159
[  143.268361][ T6565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  143.289024][ T6565] RSP: 002b:00007f40fc52d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  143.297670][ T6565] RAX: fffffffffffffe00 RBX: 00007f40fb826098 RCX: 00007f40fb59e159
[  143.305701][ T6565] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f40fb826098
[  143.315062][ T6565] RBP: 00007f40fb826090 R08: 0000000000000000 R09: 0000000000000000
[  143.325629][ T6565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  143.334537][ T6565] R13: 00007f40fb826128 R14: 00007ffe43a6dcc0 R15: 00007ffe43a6dda8
[  143.343187][ T6565]  </TASK>
[  143.866470][ T6586] loop0: detected capacity change from 0 to 32768
[  143.882978][ T6586] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 14
[  143.950933][ T6107] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  144.469910][ T6608] loop1: detected capacity change from 0 to 1764
[  145.460621][ T6638] loop3: detected capacity change from 0 to 16
[  145.470994][ T6638] erofs: (device loop3): mounted with root inode @ nid 36.
[  146.639629][ T6674] loop0: detected capacity change from 0 to 16
[  146.664012][ T6674] erofs: (device loop0): mounted with root inode @ nid 36.
[  146.686405][ T6641] loop4: detected capacity change from 0 to 32768
[  146.763289][ T6641] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  146.806441][ T6641] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  146.867722][ T6641] BTRFS info (device loop4): force clearing of disk cache
[  146.882535][ T6641] BTRFS info (device loop4): enabling auto defrag
[  146.916412][ T6641] BTRFS info (device loop4): max_inline at 0
[  146.949575][ T6641] BTRFS info (device loop4): enabling disk space caching
[  146.973284][ T6641] BTRFS info (device loop4): disk space caching is enabled
[  147.124153][ T6641] BTRFS info (device loop4): enabling ssd optimizations
[  147.214921][ T6641] BTRFS info (device loop4): rebuilding free space tree
[  147.280023][ T6641] BTRFS info (device loop4): disabling free space tree
[  147.340582][ T6641] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  147.402157][ T6641] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  147.818923][   T28] audit: type=1804 audit(1789205849.264:9): pid=6713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.220" name="/newroot/35/file0/file1" dev="loop4" ino=260 res=1 errno=0
[  147.904652][   T28] audit: type=1804 audit(1789205849.314:10): pid=6713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.220" name="/newroot/35/file0/file1" dev="loop4" ino=260 res=1 errno=0
[  148.076355][ T1144] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  148.374838][ T5965] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  149.776704][ T6757] FAULT_INJECTION: forcing a failure.
[  149.776704][ T6757] name fail_futex, interval 1, probability 0, space 0, times 0
[  149.865252][ T6757] CPU: 0 PID: 6757 Comm: syz.3.248 Not tainted syzkaller #0
[  149.873502][ T6757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  149.883843][ T6757] Call Trace:
[  149.887192][ T6757]  <TASK>
[  149.890459][ T6757]  dump_stack_lvl+0x18c/0x250
[  149.896629][ T6757]  ? show_regs_print_info+0x20/0x20
[  149.902787][ T6757]  ? load_image+0x420/0x420
[  149.907777][ T6757]  should_fail_ex+0x394/0x4c0
[  149.913419][ T6757]  get_futex_key+0x136/0x1030
[  149.918671][ T6757]  ? futex_setup_timer+0xc0/0xc0
[  149.925431][ T6757]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  149.933148][ T6757]  ? __lock_acquire+0x7d80/0x7d80
[  149.939216][ T6757]  ? preempt_schedule+0xc0/0xd0
[  149.944416][ T6757]  futex_wait_setup+0xbc/0x270
[  149.949566][ T6757]  ? futex_wait_multiple+0x920/0x920
[  149.955017][ T6757]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  149.961415][ T6757]  ? _raw_spin_unlock+0x40/0x40
[  149.966338][ T6757]  futex_wait+0x1bc/0x5c0
[  149.970737][ T6757]  ? futex_wait_setup+0x270/0x270
[  149.976094][ T6757]  ? __asan_memset+0x22/0x40
[  149.980843][ T6757]  ? poll_select_finish+0x179/0x5e0
[  149.987352][ T6757]  do_futex+0x2ff/0x3e0
[  149.992362][ T6757]  ? __ia32_sys_get_robust_list+0x110/0x110
[  149.998953][ T6757]  ? __fdget+0x192/0x210
[  150.003880][ T6757]  __se_sys_futex+0x3a9/0x440
[  150.008801][ T6757]  ? __x64_sys_futex+0xf0/0xf0
[  150.013653][ T6757]  ? __x64_sys_futex+0x21/0xf0
[  150.018936][ T6757]  do_syscall_64+0x55/0xb0
[  150.025523][ T6757]  ? clear_bhb_loop+0x40/0x90
[  150.032003][ T6757]  ? clear_bhb_loop+0x40/0x90
[  150.036919][ T6757]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  150.043392][ T6757] RIP: 0033:0x7f40fb59e159
[  150.049541][ T6757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  150.070433][ T6757] RSP: 002b:00007f40fc54e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  150.079087][ T6757] RAX: ffffffffffffffda RBX: 00007f40fb825fa8 RCX: 00007f40fb59e159
[  150.087252][ T6757] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f40fb825fa8
[  150.095315][ T6757] RBP: 00007f40fb825fa0 R08: 0000000000000000 R09: 0000000000000000
[  150.104048][ T6757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  150.112384][ T6757] R13: 00007f40fb826038 R14: 00007ffe43a6dcc0 R15: 00007ffe43a6dda8
[  150.120553][ T6757]  </TASK>
[  151.214599][ T6791] netlink: 16 bytes leftover after parsing attributes in process `syz.4.260'.
[  151.709656][ T6794] loop0: detected capacity change from 0 to 16
[  151.761162][ T6794] erofs: (device loop0): mounted with root inode @ nid 36.
[  151.816070][ T5782] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000]
[  151.832103][ T6794] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[  151.943479][   T28] audit: type=1800 audit(1789205853.304:11): pid=6794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.259" name="file2" dev="loop0" ino=89 res=0 errno=0
[  153.035966][ T6827] netlink: 'syz.0.271': attribute type 4 has an invalid length.
[  153.048323][   T28] audit: type=1326 audit(1789205854.494:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.1.269" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe31d59e159 code=0x0
[  153.117318][ T6828] netlink: 16 bytes leftover after parsing attributes in process `syz.4.270'.
[  153.574299][ T6843] loop4: detected capacity change from 0 to 128
[  153.616065][ T6843] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  153.956652][ T2989] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  154.243510][ T6860] netlink: 'syz.4.281': attribute type 4 has an invalid length.
[  154.644340][ T6876] loop3: detected capacity change from 0 to 164
[  154.689586][ T6876] rock: corrupted directory entry. extent=32, offset=131072, size=237
[  154.774689][ T6876] process 'syz.3.287' launched '/dev/fd/-1/./file0' with NULL argv: empty string added
[  155.664029][ T6901] netlink: 'syz.0.296': attribute type 4 has an invalid length.
[  155.765007][ T6906] overlayfs: failed to resolve './bus': -2
[  155.831370][ T6911] loop1: detected capacity change from 0 to 16
[  155.881024][ T6911] erofs: (device loop1): mounted with root inode @ nid 36.
[  155.944076][ T6911] erofs: (device loop1): z_erofs_readahead: readahead error at folio 3 @ nid 89
[  155.985820][ T6911] syz.1.298: attempt to access beyond end of device
[  155.985820][ T6911] loop1: rw=524288, sector=34359738360, nr_sectors = 8 limit=16
[  156.059555][ T6911] erofs: (device loop1): z_erofs_readahead: readahead error at folio 4 @ nid 89
[  156.141580][ T6911] syz.1.298: attempt to access beyond end of device
[  156.141580][ T6911] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16
[  156.228765][ T6911] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192]
[  156.296509][   T28] audit: type=1800 audit(1789205857.734:13): pid=6911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.298" name="file2" dev="loop1" ino=89 res=0 errno=0
[  156.414877][ T5776] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36
[  157.179608][ T6942] overlayfs: failed to resolve './bus': -2
[  157.639799][ T6949] loop0: detected capacity change from 0 to 16
[  157.828998][ T6949] erofs: (device loop0): mounted with root inode @ nid 36.
[  157.905266][ T5782] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000]
[  157.937753][ T6948] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[  158.003412][   T28] audit: type=1800 audit(1789205859.414:14): pid=6948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.306" name="file2" dev="loop0" ino=89 res=0 errno=0
[  158.483082][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.650652][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.870103][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.132368][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.315398][ T6978] overlayfs: failed to resolve './bus': -2
[  160.460292][ T7001] loop4: detected capacity change from 0 to 16
[  160.595735][ T7001] erofs: (device loop4): mounted with root inode @ nid 36.
[  160.693609][ T5782] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000]
[  160.707264][ T7000] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[  160.730962][   T28] audit: type=1800 audit(1789205862.174:15): pid=7000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.322" name="file2" dev="loop4" ino=89 res=0 errno=0
[  160.996233][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  161.008959][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  161.018617][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  161.038279][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  161.047753][   T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  161.063702][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  162.437402][ T7015] loop4: detected capacity change from 0 to 32768
[  162.481206][ T7002] chnl_net:caif_netlink_parms(): no params data found
[  162.613767][ T7015] JBD2: Ignoring recovery information on journal
[  162.839822][ T7015] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  163.089862][   T28] audit: type=1800 audit(1789205864.544:16): pid=7015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.329" name="file1" dev="loop4" ino=17058 res=0 errno=0
[  163.129834][   T51] Bluetooth: hci0: command tx timeout
[  163.557585][ T7002] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.572772][ T7002] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.582652][ T7002] bridge_slave_0: entered allmulticast mode
[  163.602475][ T7002] bridge_slave_0: entered promiscuous mode
[  163.644374][ T7060] loop4: detected capacity change from 32768 to 64
[  163.737881][ T7002] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.757091][ T7002] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.770656][ T7002] bridge_slave_1: entered allmulticast mode
[  163.788701][ T7002] bridge_slave_1: entered promiscuous mode
[  163.811711][ T5965] syz-executor: attempt to access beyond end of device
[  163.811711][ T5965] loop4: rw=0, sector=17057, nr_sectors = 1 limit=64
[  163.829227][ T5965] (syz-executor,5965,1):ocfs2_read_locked_inode:554 ERROR: status = -5
[  163.858195][   T12] hsr_slave_0: left promiscuous mode
[  163.869663][ T5965] syz-executor: attempt to access beyond end of device
[  163.869663][ T5965] loop4: rw=0, sector=17057, nr_sectors = 1 limit=64
[  163.888796][   T12] hsr_slave_1: left promiscuous mode
[  163.907194][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.917829][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  163.929560][   T12] bridge_slave_1: left allmulticast mode
[  163.937080][ T5965] (syz-executor,5965,1):ocfs2_read_locked_inode:554 ERROR: status = -5
[  163.951770][   T12] bridge_slave_1: left promiscuous mode
[  163.978071][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.001876][   T12] bridge_slave_0: left allmulticast mode
[  164.012297][   T12] bridge_slave_0: left promiscuous mode
[  164.019526][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.098748][   T12] veth1_macvtap: left promiscuous mode
[  164.105175][   T12] veth0_macvtap: left promiscuous mode
[  164.112045][   T12] veth1_vlan: left promiscuous mode
[  164.117987][   T12] veth0_vlan: left promiscuous mode
[  164.303981][   T12] b (unregistering): Released all slaves
PÚÿÿÿ-D
devtmpfs./dev/console[  165.081152][   T12] team0 (unregistering): Port device team_slave_1 removed
[  165.154431][   T12] team0 (unregistering): Port device team_slave_0 removed
[  165.192336][   T51] Bluetooth: hci0: command tx timeout
[  165.241372][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  165.414684][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  166.140913][   T12] bond0 (unregistering): Released all slaves
[  166.467369][ T7002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  166.482565][ T7002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  166.521076][ T5965] syz-executor: attempt to access beyond end of device
[  166.521076][ T5965] loop4: rw=2049, sector=19104, nr_sectors = 1 limit=64
[  166.579205][ T5965] Buffer I/O error on dev loop4, logical block 19104, lost async page write
[  166.600680][ T5965] syz-executor: attempt to access beyond end of device
[  166.600680][ T5965] loop4: rw=2049, sector=19105, nr_sectors = 1 limit=64
[  166.676653][ T5965] Buffer I/O error on dev loop4, logical block 19105, lost async page write
[  166.704770][ T5965] syz-executor: attempt to access beyond end of device
[  166.704770][ T5965] loop4: rw=2049, sector=19106, nr_sectors = 1 limit=64
[  166.713006][ T7002] team0: Port device team_slave_0 added
[  166.746905][ T5965] Buffer I/O error on dev loop4, logical block 19106, lost async page write
[  166.761303][ T7002] team0: Port device team_slave_1 added
[  166.783354][ T5965] syz-executor: attempt to access beyond end of device
[  166.783354][ T5965] loop4: rw=2049, sector=19107, nr_sectors = 1 limit=64
[  166.823308][ T5965] Buffer I/O error on dev loop4, logical block 19107, lost async page write
[  166.852383][ T5965] syz-executor: attempt to access beyond end of device
[  166.852383][ T5965] loop4: rw=2049, sector=19108, nr_sectors = 1 limit=64
[  166.906904][ T7002] batman_adv: batadv0: Adding interface: batadv_slave_0
[  166.923369][ T7002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.927189][ T5965] Buffer I/O error on dev loop4, logical block 19108, lost async page write
[  167.005699][ T7002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  167.027350][ T5965] syz-executor: attempt to access beyond end of device
[  167.027350][ T5965] loop4: rw=2049, sector=19109, nr_sectors = 1 limit=64
[  167.048485][ T7002] batman_adv: batadv0: Adding interface: batadv_slave_1
[  167.052875][ T5965] Buffer I/O error on dev loop4, logical block 19109, lost async page write
[  167.072747][ T5965] syz-executor: attempt to access beyond end of device
[  167.072747][ T5965] loop4: rw=2049, sector=19110, nr_sectors = 1 limit=64
[  167.094707][ T5965] Buffer I/O error on dev loop4, logical block 19110, lost async page write
[  167.109894][ T5965] syz-executor: attempt to access beyond end of device
[  167.109894][ T5965] loop4: rw=2049, sector=19111, nr_sectors = 1 limit=64
[  167.125054][ T5965] Buffer I/O error on dev loop4, logical block 19111, lost async page write
[  167.131802][ T7002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.165096][ T5965] Buffer I/O error on dev loop4, logical block 19112, lost async page write
[  167.176150][ T5965] Buffer I/O error on dev loop4, logical block 19113, lost async page write
[  167.244854][ T7002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  167.268098][   T51] Bluetooth: hci0: command tx timeout
[  167.397966][ T7002] hsr_slave_0: entered promiscuous mode
[  167.431242][ T7002] hsr_slave_1: entered promiscuous mode
[  167.450356][ T7047] Aborting journal on device loop4-75.
[  167.463147][ T7002] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  167.472101][ T7047] JBD2: I/O error when updating journal superblock for loop4-75.
[  167.472983][ T7002] Cannot create hsr debugfs directory
[  167.511822][ T5965] (syz-executor,5965,0):ocfs2_start_trans:379 ERROR: status = -30
[  167.543297][ T5965] OCFS2: abort (device loop4): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal
[  167.563579][ T5965] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  167.601183][ T5965] OCFS2: File system is now read-only.
[  167.628632][ T5965] (syz-executor,5965,0):ocfs2_shutdown_local_alloc:418 ERROR: status = -30
[  167.653668][ T5965] (syz-executor,5965,1):ocfs2_write_block:78 ERROR: status = -5
[  167.662548][ T5965] (syz-executor,5965,1):ocfs2_update_disk_slot:199 ERROR: status = -5
[  167.707932][ T5965] (syz-executor,5965,1):ocfs2_put_slot:517 ERROR: status = -5
[  167.726374][ T5965] (syz-executor,5965,1):ocfs2_journal_shutdown:1108 ERROR: status = -5
[  167.892149][ T5965] ocfs2: Unmounting device (7,4) on (node local)
[  167.968786][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.430574][ T7121] loop0: detected capacity change from 0 to 16
[  168.491233][ T7121] erofs: (device loop0): mounted with root inode @ nid 36.
[  169.032962][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.297189][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.343552][   T51] Bluetooth: hci0: command tx timeout
[  169.535772][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.076091][ T7002] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  170.090718][ T7002] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  170.119363][ T7002] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  170.138628][ T7002] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  170.856346][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  170.870899][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  170.881999][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  170.909680][ T7002] 8021q: adding VLAN 0 to HW filter on device bond0
[  170.923694][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  170.943527][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  170.951634][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  171.308474][ T7002] 8021q: adding VLAN 0 to HW filter on device team0
[  171.447950][ T2989] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.455279][ T2989] bridge0: port 1(bridge_slave_0) entered forwarding state
[  171.588882][ T2989] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.597071][ T2989] bridge0: port 2(bridge_slave_1) entered forwarding state
[  171.847996][ T7186] loop3: detected capacity change from 0 to 164
[  171.940445][ T7002] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  172.556167][   T12] hsr_slave_0: left promiscuous mode
[  172.578216][   T12] hsr_slave_1: left promiscuous mode
[  172.601924][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  172.637622][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.657788][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  172.679376][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.709909][   T12] bridge_slave_1: left allmulticast mode
[  172.717380][   T12] bridge_slave_1: left promiscuous mode
[  172.740878][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.771135][   T12] bridge_slave_0: left allmulticast mode
[  172.785095][   T12] bridge_slave_0: left promiscuous mode
[  172.797390][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.822227][   T12] general protection fault, probably for non-canonical address 0xfbd59c0000000024: 0000 [#1] PREEMPT SMP KASAN
[  172.834493][   T12] KASAN: maybe wild-memory-access in range [0xdead000000000120-0xdead000000000127]
[  172.844498][   T12] CPU: 0 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0
[  172.852110][   T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  172.862409][   T12] Workqueue: netns cleanup_net
[  172.867871][   T12] RIP: 0010:br_del_frame+0xd1/0x150
[  172.873178][   T12] Code: f8 4c 8b 73 10 48 83 c3 18 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 49 ac 76 f8 4c 8b 3b 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 d0 ac 76 f8 4d 89 37 4d 85 f6 74
[  172.895064][   T12] RSP: 0018:ffffc90000117870 EFLAGS: 00010a06
[  172.901711][   T12] RAX: 1bd5a00000000024 RBX: ffffffff8e8e7300 RCX: ffff88801b65da00
[  172.910616][   T12] RDX: 0000000000000000 RSI: ffffffff8e8e72e8 RDI: ffffffff8e8e72f8
[  172.919264][   T12] RBP: 000000000000001d R08: ffffffff911ef50f R09: 1ffffffff223dea1
[  172.929830][   T12] R10: dffffc0000000000 R11: fffffbfff223dea2 R12: dffffc0000000000
[  172.939260][   T12] R13: 1ffffffff1d1ce60 R14: 0000000000000000 R15: dead000000000122
[  172.947648][   T12] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  172.957063][   T12] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  172.964761][   T12] CR2: 0000200000000240 CR3: 0000000061790000 CR4: 00000000003506f0
[  172.975430][   T12] Call Trace:
[  172.981638][   T12]  <TASK>
[  172.984977][   T12]  br_cfm_port_del+0x116/0x1b0
[  172.990253][   T12]  del_nbp+0x167/0x9e0
[  172.995043][   T12]  br_dev_delete+0x6e/0x130
[  172.999947][   T12]  ? nbp_backup_change+0x390/0x390
[  173.007660][   T12]  default_device_exit_batch+0x8c0/0xa00
[  173.013916][   T12]  ? __might_sleep+0xe0/0xe0
[  173.019424][   T12]  ? rdma_dev_exit_net+0x2b3/0x340
[  173.024607][   T12]  ? netdev_exit+0xc0/0xc0
[  173.029190][   T12]  ? rdma_dev_init_net+0x280/0x280
[  173.034384][   T12]  ? netdev_exit+0xc0/0xc0
[  173.038966][   T12]  cleanup_net+0x792/0xbb0
[  173.043732][   T12]  ? ops_free_list+0x3b0/0x3b0
[  173.049754][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  173.055305][   T12]  ? process_scheduled_works+0x975/0x1600
[  173.061245][   T12]  ? process_scheduled_works+0x975/0x1600
[  173.064288][   T51] Bluetooth: hci3: command tx timeout
[  173.068468][   T12]  process_scheduled_works+0xa60/0x1600
[  173.081576][   T12]  ? worker_attach_to_pool+0x370/0x370
[  173.087220][   T12]  ? assign_work+0x3cc/0x5d0
[  173.092408][   T12]  worker_thread+0xa5e/0xfe0
[  173.097950][   T12]  kthread+0x2fa/0x390
[  173.102176][   T12]  ? pr_cont_work+0x550/0x550
[  173.106921][   T12]  ? kthread_blkcg+0xd0/0xd0
[  173.112000][   T12]  ret_from_fork+0x48/0x80
[  173.116654][   T12]  ? kthread_blkcg+0xd0/0xd0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  173.122179][   T12]  ret_from_fork_asm+0x11/0x20
[  173.127224][   T12]  </TASK>
[  173.130399][   T12] Modules linked in:
[  173.146355][   T12] ---[ end trace 0000000000000000 ]---
[  173.152181][   T12] RIP: 0010:br_del_frame+0xd1/0x150
[  173.161300][   T12] Code: f8 4c 8b 73 10 48 83 c3 18 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 49 ac 76 f8 4c 8b 3b 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 d0 ac 76 f8 4d 89 37 4d 85 f6 74
[  173.234319][   T12] RSP: 0018:ffffc90000117870 EFLAGS: 00010a06
[  173.240594][   T12] RAX: 1bd5a00000000024 RBX: ffffffff8e8e7300 RCX: ffff88801b65da00
[  173.273282][   T12] RDX: 0000000000000000 RSI: ffffffff8e8e72e8 RDI: ffffffff8e8e72f8
[  173.281807][   T12] RBP: 000000000000001d R08: ffffffff911ef50f R09: 1ffffffff223dea1
[  173.313241][   T12] R10: dffffc0000000000 R11: fffffbfff223dea2 R12: dffffc0000000000
[  173.322850][   T12] R13: 1ffffffff1d1ce60 R14: 0000000000000000 R15: dead000000000122
[  173.343481][   T12] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  173.352615][   T12] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  173.397731][   T12] CR2: 00007f6efefbde9c CR3: 000000000cf32000 CR4: 00000000003506e0
[  173.416351][   T12] Kernel panic - not syncing: Fatal exception
[  173.423909][   T12] Kernel Offset: disabled
[  173.429155][   T12] Rebooting in 86400 seconds..