last executing test programs:

44.26794036s ago: executing program 2 (id=140):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

43.947922639s ago: executing program 2 (id=144):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl(r0, 0x404c4701, &(0x7f0000000100)="0100000000000000000000000000000001000000000000000000000040000000400000000000000001000000")
ioctl(r0, 0x40204706, &(0x7f0000000200)="0100"/16)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0xf9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000301)=0x3)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000303)=0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000304)=0x1c)

42.220604775s ago: executing program 2 (id=150):
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0)
mount(&(0x7f0000000500)=@filename='none\x00', &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='file0\x00', 0x42, 0x1ff)
ftruncate(r0, 0x1000000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='file1\x00', 0x42, 0x1ff)
ftruncate(r1, 0x1000000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='file2\x00', 0x42, 0x1ff)
ftruncate(r2, 0x1000000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='file3\x00', 0x42, 0x1ff)
ftruncate(r3, 0x1000000)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev/loop0\x00', 0x2, 0x0)
ioctl$LOOP_SET_FD(r4, 0x4c00, r0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./dev/loop1\x00', 0x2, 0x0)
ioctl$LOOP_SET_FD(r5, 0x4c00, r1)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./dev/loop2\x00', 0x2, 0x0)
ioctl$LOOP_SET_FD(r6, 0x4c00, r2)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/loop3\x00', 0x2, 0x0)
ioctl$LOOP_SET_FD(r7, 0x4c00, r3)
openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/md0\x00', 0x2, 0x0)
ioctl(r8, 0x40480923, &(0x7f0000001300)="000000005a00000003000000000000000500000000040000040000000300000000000000010000000000000000000000030000000400000000000000000000000000000000100000")
ioctl(r8, 0x40140921, &(0x7f0000001400)="0000000007000000000000000000000006000000")
ioctl(r8, 0x40140921, &(0x7f0000001500)="0100000007000000010000000100000006000000")
ioctl(r8, 0x40140921, &(0x7f0000001600)="0200000007000000020000000200000006000000")
ioctl(r8, 0x400c0930, 0x0)
ioctl(r8, 0x40140921, &(0x7f0000001700)="030000000700000003000000ffffffff02000400")

40.676397607s ago: executing program 2 (id=159):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/cluster/ocfs2\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster/ocfs2/node\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/ocfs2/node/node0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/ocfs2/node/node0/num\x00', 0x1, 0x0)
write(r0, &(0x7f00000001c0)='0\n\x00', 0x2)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='127.0.0.1\n\x00', 0xa)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/cluster/ocfs2/node/node0/ipv4_port\x00', 0x1, 0x0)
write(r2, &(0x7f00000002c0)='7777\n\x00', 0x5)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/ocfs2/node/node0/local\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='1\n\x00', 0x2)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/ocfs2/node/node1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000400)='1\n\x00', 0x2)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/cluster/ocfs2/node/node1/ipv4_address\x00', 0x1, 0x0)
write(r4, &(0x7f0000000480)='127.0.0.2\n\x00', 0xa)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/cluster/ocfs2/node/node1/ipv4_port\x00', 0x1, 0x0)
write(r5, &(0x7f0000000500)='7777\n\x00', 0x5)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/cluster/ocfs2/node/node1/local\x00', 0x1, 0x0)
write(r6, &(0x7f0000000580)='0\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x1ff)
syz_mount_image$ocfs2(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x0, &(0x7f0000000700)="$eJzszrENAVAUBdDrLyASnUIYwA5GESWdiljJDiYwgg0UWs1XfArfABI5J3kvue827/I4Tc6zpA6T2tntD5vVtu3wl0qSUZJxkum85duydYNXf70f1+/59b8AAAAAAAAAwLeSRZ8/Ds8AAAD//9ZiI98=")
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/ocfs2/node/node1\x00', 0x200)
nanosleep(&(0x7f0000000800)={0x2}, 0x0)

39.659628994s ago: executing program 2 (id=164):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl(r0, 0x404c4701, &(0x7f0000000100)="0100000000000000000000000000000001000000000000000000000040000000400000000000000001000000")
ioctl(r0, 0x40204706, &(0x7f0000000200)="0100"/16)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0xf9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000301)=0x3)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000303)=0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000304)=0x1c)

38.210878203s ago: executing program 2 (id=176):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='freeze\n\x00\x00\x00\x00\x00', 0x7)

32.775718999s ago: executing program 0 (id=214):
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/xhci-hcd\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000400), 0x1000)

32.507878827s ago: executing program 0 (id=216):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, &(0x7f0000000200)='measure uid>1000\n\x00', 0x11)

32.203670244s ago: executing program 0 (id=220):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000200)={[{@clear_cache}, {@space_cache_v1}]}, 0x0, 0x559e, &(0x7f0000000500)="$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")
ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000300)={{r0}, 'subvol1\x00'})
r1 = openat(r0, &(0x7f0000000400)='subvol1\x00', 0x0, 0x0)
r2 = openat(r1, &(0x7f0000000500)='file1\x00', 0x42, 0x1c0)
write(r2, &(0x7f0000000600)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x200)
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000800)={{r1}, 'subvol1\x00'})

30.829184541s ago: executing program 0 (id=227):
syz_usb_connect$uac1(0x2, 0x9a, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x200, 0xfff, 0x0, "f441a4440fb2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x78, 0x8, 0xba, {0x7, 0x25, 0x1, 0x8, 0x4, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xfc, 0x3, 0x8, 0x1, "371fc8"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x5, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x2, 0x1, {0x7, 0x25, 0x1, 0x0, 0xe, 0x3}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
syz_open_dev$usbfs(&(0x7f0000000000), 0x11, 0x0)

30.11571618s ago: executing program 0 (id=232):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x4e6, 0x1010, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x1, 0x0, 0x80, 0x32, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x7, 0x5, 0x81, 0x2, 0x200}}, {{0x7, 0x5, 0x2, 0x2, 0x200}}]}}]}}]}}, 0x0)
r1 = epoll_create(0x1)
epoll_wait(r1, &(0x7f0000000100), 0x1, 0x1f4)
syz_usb_control_io(r0, 0x0, &(0x7f0000000140)) (async)
epoll_wait(r1, &(0x7f0000000200), 0x1, 0x9c4)
syz_usb_control_io(r0, 0x0, &(0x7f0000000240)) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)) (async)
syz_usb_control_io(r0, 0x0, &(0x7f00000003c0)) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000540)) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000600)) (async)
syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)) (async)
syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000cc0)) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000f00)) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000001080)) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000001140)) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)) (async)
syz_usb_control_io(r0, 0x0, &(0x7f00000012c0)) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000001380)) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000001440)) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000001500)) (async)
syz_usb_control_io(r0, 0x0, &(0x7f00000015c0)) (async)

26.995582795s ago: executing program 0 (id=242):
mkdir(&(0x7f0000000040)='./mysys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='mysys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='devices\x00', 0x7)

23.06801805s ago: executing program 32 (id=176):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='freeze\n\x00\x00\x00\x00\x00', 0x7)

11.91083717s ago: executing program 33 (id=242):
mkdir(&(0x7f0000000040)='./mysys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='mysys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='devices\x00', 0x7)

5.967482619s ago: executing program 4 (id=321):
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./config\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='0xa4a1\n', 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='usb_gadget/g1/functions/ecm.usb0/ifname\x00', 0x2, 0x0)
write(r2, 0x0, 0x0)
symlinkat(&(0x7f0000000340)='usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='usb_gadget/g1/configs/c.1/ecm.usb0\x00')
nanosleep(&(0x7f0000000440)={0x0, 0x1dcd6500}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', 0x1})
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', <r4=>0x0})
bind$packet(r3, &(0x7f0000000540)={0x11, 0x300, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'syzkaller1\x00', <r6=>0x0})
bind$packet(r5, &(0x7f0000000600)={0x11, 0x300, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14)

5.038724724s ago: executing program 4 (id=324):
r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000402b1a4d3c00010000000109021900010100e001090400000109000000070581030800ff"], 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0), &(0x7f0000000100))
syz_usb_control_io(r0, &(0x7f00000001c0), &(0x7f0000000200))
syz_usb_control_io(r0, &(0x7f00000002c0), &(0x7f0000000340))
nanosleep(&(0x7f0000000300)={0x1}, 0x0)

4.189026477s ago: executing program 5 (id=329):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f00a116700000102030109022000010100c0320904000002ff0000000705810200020007050202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
nanosleep(&(0x7f0000000300)={0x2}, 0x0)

3.554738114s ago: executing program 1 (id=331):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/ima/policy\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='measure uid>10', 0xe)

3.358518159s ago: executing program 6 (id=289):
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe0000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000400)="ba4300b030eeba4000b000eeba4000b010eeba4300b0c2eef4", 0x19}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r3, 0x3, 0x11, r2, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.35529074s ago: executing program 1 (id=332):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl(r0, 0x404c4701, &(0x7f0000000100)="0100000000000000000000000000000001000000000000000000000040000000400000000000000001000000")
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0xf9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000301)=0x3)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000302)=0x3f)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000303)=0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000304)=0x1c)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000305)=0xf9)

2.938908621s ago: executing program 3 (id=333):
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./config\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='0xa4a1\n', 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='usb_gadget/g1/functions/ecm.usb0/ifname\x00', 0x2, 0x0)
write(r2, 0x0, 0x0)
symlinkat(&(0x7f0000000340)='usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='usb_gadget/g1/configs/c.1/ecm.usb0\x00')
nanosleep(&(0x7f0000000440)={0x0, 0x1dcd6500}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', 0x1})
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', <r4=>0x0})
bind$packet(r3, &(0x7f0000000540)={0x11, 0x300, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'syzkaller1\x00', <r6=>0x0})
bind$packet(r5, &(0x7f0000000600)={0x11, 0x300, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14)

2.776489815s ago: executing program 6 (id=334):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory9/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='offline', 0x7)
r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r1, &(0x7f0000000200)='offline\x00', 0x8)

2.158138502s ago: executing program 1 (id=335):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0x0525\x00', 0x7)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='0xa4a7\x00', 0x7)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='123456789\x00', 0xa)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0)
write(r4, &(0x7f0000000380)='Bar\x00', 0x4)
close(r4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x1, 0x0)
write(r5, &(0x7f00000005c0)='Conf1\x00', 0x6)
close(r5)
symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00')
write(0xffffffffffffffff, &(0x7f0000000740)='dummy_udc.0', 0xb)
close(0xffffffffffffffff)
nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0)
nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0)
write(r6, &(0x7f0000000a00)='test\x00', 0x5)

2.015282806s ago: executing program 4 (id=336):
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0)
mount(&(0x7f0000000500)=@filename='none\x00', &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='file0\x00', 0x42, 0x1ff)
ftruncate(r0, 0x1000000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='file1\x00', 0x42, 0x1ff)
ftruncate(r1, 0x1000000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='file2\x00', 0x42, 0x1ff)
ftruncate(r2, 0x1000000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='file3\x00', 0x42, 0x1ff)
ftruncate(r3, 0x1000000)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev/loop0\x00', 0x2, 0x0)
ioctl$LOOP_SET_FD(r4, 0x4c00, r0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./dev/loop1\x00', 0x2, 0x0)
ioctl$LOOP_SET_FD(r5, 0x4c00, r1)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/loop3\x00', 0x2, 0x0)
ioctl$LOOP_SET_FD(r6, 0x4c00, r3)
r7 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r7, &(0x7f0000001100)='md0\x00', 0x4)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/md0\x00', 0x2, 0x0)
ioctl(r8, 0x40480923, &(0x7f0000001300)="000000005a00000003000000000000000500000000040000040000000300000000000000010000000000000000000000030000000400000000000000000000000000000000100000")
ioctl(r8, 0x40140921, &(0x7f0000001400)="0000000007000000000000000000000006000000")
ioctl(r8, 0x40140921, &(0x7f0000001500)="0100000007000000010000000100000006000000")
ioctl(r8, 0x40140921, &(0x7f0000001600)="0200000007000000020000000200000006000000")
ioctl(r8, 0x400c0930, 0x0)
ioctl(r8, 0x40140921, &(0x7f0000001700)="030000000700000003000000ffffffff02000400")

1.944907958s ago: executing program 3 (id=337):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x1ff)
write(r0, &(0x7f0000000180)="01010101", 0x4)
read(r0, &(0x7f00000001c0)=""/4, 0x4)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./myconfig\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='none\x00', &(0x7f0000000280)='./myconfig\x00', &(0x7f00000002c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./myconfig/usb_gadget/g1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r1, &(0x7f0000000380)='0x1d6b', 0x6)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='0x0104', 0x6)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0)
write(r3, &(0x7f0000000500)='44100,48000,88200,96000,176400,192000,352800,384000,705600,768000', 0x41)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0)
write(r4, &(0x7f00000005c0)='44100,48000,88200,96000,176400,192000,352800,384000,705600,768000', 0x41)
close(r4)
symlinkat(&(0x7f0000000640)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r5, &(0x7f0000000700)='usbip-vudc.0', 0xc)
close(r5)
nanosleep(&(0x7f0000000740)={0x0, 0xbebc200}, 0x0)
r6 = syz_open_dev$sndctrl(&(0x7f0000000780), 0x0, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f00000007c0), 0x1, 0x0)
r8 = syz_open_dev$sndctrl(&(0x7f0000000800), 0x2, 0x0)
r9 = syz_open_dev$sndctrl(&(0x7f0000000840), 0x3, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r6, 0xc1105511, &(0x7f0000000880)={{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00'})
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r6, 0xc1105511, &(0x7f00000009c0)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00'})
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r7, 0xc1105511, &(0x7f0000000b00)={{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00'})
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r7, 0xc1105511, &(0x7f0000000c40)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00'})
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r8, 0xc1105511, &(0x7f0000000d80)={{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00'})
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r8, 0xc1105511, &(0x7f0000000ec0)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00'})
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r9, 0xc1105511, &(0x7f0000001000)={{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00'})
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r9, 0xc1105511, &(0x7f0000001140)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00'})

1.86786198s ago: executing program 6 (id=338):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'vcan0\x00', 0x1})
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x102030405060708, {}, 0x20}, 0x18)
connect$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x0, 0xee}, 0xff}, 0x18)
sendmsg$can_j1939(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)="0807060504030201", 0x8}}, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
bind$can_j1939(r2, &(0x7f00000001c0)={0x1d, r1, 0x807060504030201, {}, 0x30}, 0x18)
connect$can_j1939(r2, &(0x7f0000000220)={0x1d, r1, 0x0, {0x0, 0xee}, 0xff}, 0x18)
sendmsg$can_j1939(r2, &(0x7f0000000260)={0x0, 0x0, &(0x7f00000002a0)={&(0x7f00000002c0)="0102030405060708", 0x8}}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x11e1a300}, 0x0)
connect$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x807060504030201, {}, 0x30}, 0x18)
sendmsg$can_j1939(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)="0102030405060708", 0x8}}, 0x0)
recvmsg$can_j1939(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/256, 0x100}], 0x1}, 0x40)

1.535241979s ago: executing program 3 (id=339):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl(r0, 0x404c4701, &(0x7f0000000100)="010000000000000000000000000000000100000000000000000000004000000040")
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0xf9)

1.408320062s ago: executing program 3 (id=340):
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000400), 0x0, 0x2)
syz_open_dev$video(0x0, 0x1, 0x2)
syz_open_dev$video(&(0x7f0000000400), 0x2, 0x2)
r1 = syz_open_dev$video(&(0x7f0000000400), 0x3, 0x2)
r2 = syz_open_dev$video(&(0x7f0000000400), 0x4, 0x2)
r3 = syz_open_dev$video(&(0x7f0000000400), 0x5, 0x2)
r4 = syz_open_dev$video(&(0x7f0000000400), 0x7, 0x2)
r5 = syz_open_dev$video(&(0x7f0000000400), 0x8, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x980900}})
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x980900}})
ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x980900}})
ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x980900}})
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x980900}})
ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x980900}})
ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x980900}})
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x980900}})
syz_usb_disconnect(0xffffffffffffffff)

1.251853016s ago: executing program 6 (id=341):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = eventfd2(0x0, 0x0)
r4 = eventfd2(0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x0, &(0x7f0000000100)={0x2, 0x0, [{0x0, 0x1}, {0x2, 0x1, 0x0, 0x0, @irqchip={0x0, 0x2}}]})
ioctl$KVM_IRQFD(r1, 0x0, &(0x7f0000000200)={r3, 0x0, 0x2, r4})
write$eventfd(r3, &(0x7f0000000300)=0x1, 0x8)
r5 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@out_dx={0x0, 0x0, {0x20, 0x1, 0x20}}, @uexit={0x0, 0x0, 0x1337}]})
ioctl$KVM_RUN(r5, 0x0, 0x0)

1.228118687s ago: executing program 4 (id=342):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/ima/policy\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='measure uid>', 0xc)

1.167816979s ago: executing program 6 (id=343):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/cluster/ocfs2\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster/ocfs2/node\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/ocfs2/node/node0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/ocfs2/node/node0/num\x00', 0x1, 0x0)
write(r0, &(0x7f00000001c0)='0\n\x00', 0x2)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='127.0.0.1\n\x00', 0xa)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/cluster/ocfs2/node/node0/ipv4_port\x00', 0x1, 0x0)
write(r2, &(0x7f00000002c0)='7777\n\x00', 0x5)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/ocfs2/node/node0/local\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='1\n\x00', 0x2)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/ocfs2/node/node1\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/cluster/ocfs2/node/node1/num\x00', 0x1, 0x0)
write(r4, &(0x7f0000000400)='1\n\x00', 0x2)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/cluster/ocfs2/node/node1/ipv4_address\x00', 0x1, 0x0)
write(r5, &(0x7f0000000480)='127.0.0.2\n\x00', 0xa)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/cluster/ocfs2/node/node1/ipv4_port\x00', 0x1, 0x0)
write(r6, &(0x7f0000000500)='7777\n\x00', 0x5)
close(r6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/cluster/ocfs2/node/node1/local\x00', 0x1, 0x0)
write(r7, &(0x7f0000000580)='0\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x1ff)
syz_mount_image$ocfs2(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x0, &(0x7f0000000700)="$eJzszrENAVAUBdDrLyASnUIYwA5GESWdiljJDiYwgg0UWs1XfArfABI5J3kvue827/I4Tc6zpA6T2tntD5vVtu3wl0qSUZJxkum85duydYNXf70f1+/59b8AAAAAAAAAwLeSRZ8/Ds8AAAD//9ZiI98=")
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/ocfs2/node/node1\x00', 0x200)
nanosleep(&(0x7f0000000800)={0x2}, 0x0)

1.078351141s ago: executing program 1 (id=344):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
close(0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/ocfs2/node/node0/local\x00', 0x1, 0x0)
write(r0, &(0x7f0000000340)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/ocfs2/node/node1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r1, &(0x7f0000000480)='127.0.0.2\n\x00', 0xa)

995.432973ms ago: executing program 5 (id=345):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0xf9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000301)=0x3)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000302)=0x3f)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000303)=0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000304)=0x1c)

905.369995ms ago: executing program 4 (id=346):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl(r0, 0x404c4701, &(0x7f0000000100)="0100000000000000000000000000000001000000000000000000000040000000400000000000000001000000")
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0xf9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000301)=0x3)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000302)=0x3f)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000303)=0x1)

836.471027ms ago: executing program 1 (id=347):
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl(r0, 0x404c4701, &(0x7f0000000100)="0100000000000000000000000000000001000000000000000000000040000000400000000000000001000000")
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0xf9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000301)=0x3)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000302)=0x3f)

655.849312ms ago: executing program 1 (id=348):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x101301)
ioctl$USBDEVFS_RESET(r0, 0x5514)

655.090652ms ago: executing program 5 (id=349):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, &(0x7f0000000180)='md0\n', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='250:0\n', 0x6)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/dev-nullb0/slot\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='0\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/dev-nullb0/state\x00', 0x1, 0x0)
write(r3, &(0x7f0000000300)='in_sync\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/array_state\x00', 0x1, 0x0)
write(r4, &(0x7f0000000380)='clean\n', 0x6)

625.271703ms ago: executing program 4 (id=350):
r0 = syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x180c808, &(0x7f0000000480)=ANY=[@ANYBLOB='user_xattr,acl,usrquota,grpquota,heartbeat=none,errors=continue\x00'], 0x0, 0x446c, &(0x7f00000042c0)="$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")
r1 = openat(r0, &(0x7f0000000100)='.\x00', 0x0, 0x0)
setxattr(&(0x7f0000000100)='./file1\x00', &(0x7f0000000080)=@known='user.syz\x00', &(0x7f0000000300)='\x00'/16384, 0x4000, 0x0)
setxattr(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0)=@random={'user.', 'syz2\x00'}, &(0x7f0000000300)='\x00'/16384, 0x4000, 0x0)
setxattr(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)=@random={'user.', 'syz3\x00'}, &(0x7f0000000300)='\x00'/16384, 0x4000, 0x0)
ioctl$OCFS2_IOC_REFLINK(r1, 0x40186f04, &(0x7f0000000200)={&(0x7f0000000100)='./file1\x00', &(0x7f0000000200)='./file1_ref\x00'})
removexattr(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)=@known='user.syz\x00')
removexattr(&(0x7f0000000100)='./file1_ref\x00', &(0x7f00000001c0)=@known='user.syz\x00')
removexattr(&(0x7f0000000100)='./file1\x00', &(0x7f0000000240)=@random={'user.', 'syz2\x00'})
removexattr(&(0x7f0000000100)='./file1\x00', &(0x7f0000000280)=@random={'user.', 'syz3\x00'})

539.050446ms ago: executing program 3 (id=351):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="4a0000001100766ef3e8245f", 0xc}], 0x1}, 0x0)

451.126738ms ago: executing program 3 (id=352):
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904000002ff0000000705010200020007058202000200"], 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802)
ioctl$FE_GET_FRONTEND(r0, 0x80246f4d, &(0x7f0000000200))

416.953438ms ago: executing program 5 (id=353):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl(r0, 0x404c4701, &(0x7f0000000100)="0100000000000000000000000000000001000000000000000000000040000000400000000000000001000000")
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0xf9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000301)=0x3)

261.665593ms ago: executing program 5 (id=354):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)={0x40, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x40}}, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r2=>0x0}, 0x106, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x1234, @loopback}}}, 0x90)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000400)={0x7, 0x8, 0xfa00, {r2, 0x10}}, 0x10)

171.460376ms ago: executing program 6 (id=355):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./my_configfs/usb_gadget/g1/strings/0x409\x00', 0x1ff)
chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='control/header/h\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='streaming/uncompressed/u\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='streaming/uncompressed/u/360p\x00', 0x1ff)
symlink(&(0x7f0000001000)='control/header/h\x00', &(0x7f0000001100)='control/class/fs/h\x00')
symlink(&(0x7f0000001200)='control/header/h\x00', &(0x7f0000001300)='control/class/ss/h\x00')
symlink(&(0x7f0000001400)='streaming/uncompressed/u\x00', &(0x7f0000001500)='streaming/header/h/u\x00')
symlink(&(0x7f0000001600)='streaming/header/h\x00', &(0x7f0000001700)='streaming/class/fs/h\x00')
symlink(&(0x7f0000001800)='streaming/header/h\x00', &(0x7f0000001900)='streaming/class/hs/h\x00')
symlink(&(0x7f0000001a00)='streaming/header/h\x00', &(0x7f0000001b00)='streaming/class/ss/h\x00')
fchdir(r0)
symlink(&(0x7f0000001c00)='functions/uvc.usb0\x00', &(0x7f0000001d00)='configs/c.1/uvc.usb0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x0)
write(r1, &(0x7f0000001f00)='usbip-vudc.0\x00', 0xc)
nanosleep(&(0x7f0000002000)={0x0, 0x5f5e100}, 0x0)
r2 = syz_open_dev$video(&(0x7f0000002500), 0x4, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000002a00)={0x8000004})
close(r2)

0s ago: executing program 5 (id=356):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x10000, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x0, 0x4, 0x1000000, 0x10000, 0x0, 0x0, r2})
fallocate(r2, 0x0, 0x0, 0x10000)
mmap(0x0, 0x10000, 0x3, 0x100011, r2, 0x0)
mmap(&(0x7f0000020000)=nil, 0x1000, 0x3, 0x10032, 0xffffffffffffffff, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
read(r3, &(0x7f0000000000), 0x10)
write(r3, &(0x7f0000000000), 0x10)
move_pages(0x0, 0x1, &(0x7f0000020000)=[0xfffffffffffffffc], &(0x7f0000020100)=[0x0], &(0x7f0000020200)=[0x0], 0x2)

kernel console output (not intermixed with test programs):

ANGE): veth0_macvtap: link becomes ready
[   74.919868][ T4290] device veth0_macvtap entered promiscuous mode
[   74.954758][ T2931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.962402][ T4288] device veth1_vlan entered promiscuous mode
[   74.962850][ T2931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.993305][ T4290] device veth1_macvtap entered promiscuous mode
[   75.015235][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   75.023919][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   75.032853][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   75.040944][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   75.049860][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.069080][ T2931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.080188][ T2931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.089838][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.098134][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.109934][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.124643][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.134849][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.147765][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.159422][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.170425][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.183408][ T4290] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.196983][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.207861][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.215933][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   75.225831][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   75.244528][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   75.256312][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   75.276816][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.291402][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.301979][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.313792][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.323666][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.334208][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.352688][ T4290] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.361454][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   75.370110][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.397761][ T4288] device veth0_macvtap entered promiscuous mode
[   75.404700][ T4328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.414980][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.428452][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.437013][ T4328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.463525][ T4290] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.479526][ T4290] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.492956][ T4290] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.504772][ T4290] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.508441][ T4357] loop1: detected capacity change from 0 to 256
[   75.519839][ T4288] device veth1_macvtap entered promiscuous mode
[   75.540375][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   75.566968][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   75.576044][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.584417][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.626965][ T4357] using random self ethernet address
[   75.646923][ T4357] using random host ethernet address
[   75.690024][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.716375][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.726809][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.737777][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.747813][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.759312][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.770044][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.784384][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.799729][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.812017][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.817272][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.822792][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.840724][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.845498][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.851927][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.875099][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.886063][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.896155][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.907097][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.922154][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.945039][ T4357] usb0: HOST MAC 12:d3:54:2c:4d:7f
[   75.950936][ T4357] usb0: MAC 9e:43:62:a3:88:ea
[   75.953214][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.996849][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   76.012856][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   76.026916][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   76.027283][ T4362] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   76.037118][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   76.064453][ T4362] CIFS: Attempting to mount \\127.0.0.1\share
[   76.089553][ T4364] CIFS: VFS: Invalid response size 0 for command 0
[   76.100186][ T4288] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.118603][ T4288] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.130678][ T4364] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes)
[   76.150484][ T4288] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.159727][ T4288] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.256559][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.265390][ T4318] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   76.283300][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.318339][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   76.435420][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.471764][ T4318] usb 1-1: Dual-Role OTG device on HNP port
[   76.497652][ T4362] CIFS: VFS: cifs_mount failed w/return code = -5
[   76.508932][ T4318] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 6.01
[   76.518521][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.536959][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.557456][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.570231][ T4318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.589152][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.619742][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   76.661643][   T49] Bluetooth: hci1: command 0x0419 tx timeout
[   76.661651][ T4280] Bluetooth: hci0: command 0x0419 tx timeout
[   76.741712][ T4280] Bluetooth: hci2: command 0x0419 tx timeout
[   76.793087][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.806334][ T4318] cdc_ncm 1-1:3.0: MAC-Address: 12:d3:54:2c:4d:7f
[   76.831410][   T49] Bluetooth: hci4: command 0x0419 tx timeout
[   76.831420][ T4280] Bluetooth: hci3: command 0x0419 tx timeout
[   76.854679][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.920513][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.938884][ T4318] cdc_ncm 1-1:3.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 12:d3:54:2c:4d:7f
[   76.956714][ T4387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   77.037624][ T4391] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   77.225351][ T4376] null_blk: disk nullb1 created
[   77.254213][ T4400] loop2: detected capacity change from 0 to 128
[   77.271289][ T3653] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   77.306942][ T4400] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   77.352418][ T4400] hpfs: filesystem error: improperly stopped
[   77.358588][ T4400] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   77.371842][ T4400] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2
[   77.483492][ T3653] usb 5-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00
[   77.505272][ T4406] CIFS: Attempting to mount \\127.0.0.1\share
[   77.513003][ T3653] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.546492][ T3653] i2c-tiny-usb 5-1:1.0: version 1.00 found at bus 005 address 002
[   77.751039][   T22] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   77.865857][ T4417] i2c i2c-0: new_device: Instantiated device tps6598x at 0x38
[   77.948247][   T22] usb 2-1: unable to get BOS descriptor or descriptor too short
[   77.965830][   T22] usb 2-1: not running at top speed; connect to a high speed hub
[   77.988137][   T22] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4
[   78.042276][   T22] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40
[   78.057416][   T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.067866][   T22] usb 2-1: Product: syz
[   78.076649][   T22] usb 2-1: Manufacturer: syz
[   78.082796][   T22] usb 2-1: SerialNumber: syz
[   78.197205][ T3653]  (null): failure reading functionality
[   78.222448][ T4430] lo speed is unknown, defaulting to 1000
[   78.240287][ T4430] lo speed is unknown, defaulting to 1000
[   78.262702][ T4430] lo speed is unknown, defaulting to 1000
[   78.288939][ T4415] loop2: detected capacity change from 0 to 32768
[   78.319388][ T4406] CIFS: VFS: cifs_mount failed w/return code = -112
[   78.400841][ T3653] i2c i2c-1: failure reading functionality
[   78.447325][ T3653] i2c i2c-1: connected i2c-tiny-usb device
[   78.507086][ T4415] XFS (loop2): Mounting V5 Filesystem
[   78.660539][ T4415] XFS (loop2): Ending clean mount
[   78.747807][ T4430] infiniband syz0: set active
[   78.753906][   T14] lo speed is unknown, defaulting to 1000
[   78.770524][ T4430] infiniband syz0: added lo
[   78.877572][ T4288] XFS (loop2): Unmounting Filesystem
[   78.889671][ T4430] RDS/IB: syz0: added
[   78.953653][ T4430] smc: adding ib device syz0 with port count 1
[   78.993020][ T4430] smc:    ib device syz0 port 1 has pnetid 
[   79.019611][  T128] lo speed is unknown, defaulting to 1000
[   79.091770][ T4430] lo speed is unknown, defaulting to 1000
[   79.373456][ T4465] gsmld_receive_buf: 00000000: 03                                               .
[   79.441230][ T4465] gsmld_receive_buf: 00000000: 3f                                               ?
[   79.451093][ T4468] gsmld_receive_buf: 00000000: f9                                               .
[   79.469574][ T4465] gsmld_receive_buf: 00000000: 01                                               .
[   79.478093][ T4468] gsmld_receive_buf: 00000000: 03                                               .
[   79.503113][ T4465] gsmld_receive_buf: 00000000: 1c                                               .
[   79.624281][ T4469] gsmld_receive_buf: 00000000: f9                                               .
[   79.686008][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): usb1: link becomes ready
[   79.716295][ T4469] <-- 0) R: SABM(P)
[   79.716377][ T4469] Q-> 0) R: UA(P)
[   79.754745][ T3653] gsm_send_packet: 00000000: f9 03 73 01 d7 f9                                ..s...
[   79.768097][ T3653] --> 0) R: UA(P)
[   79.768130][ T3653] 03 73 01 d7                                      .s..
[   79.778726][ T3653] gsmld_output: 00000000: f9 03 73 01 d7 f9                                ..s...
[   79.793646][ T4430] lo speed is unknown, defaulting to 1000
[   79.801660][   T57] gsmld_receive_buf: 00000000: 5e 43 73 5e 41 d7 f9                             ^Cs^A..
[   80.162272][  T128] usb 5-1: USB disconnect, device number 2
[   80.337715][   T22] usb 2-1: 1:1 : unknown format tag 0x5 is detected.  processed as MPEG.
[   80.411060][   T22] usb 2-1: found format II with max.bitrate = 512, frame size=4095
[   80.419142][   T22] usb 2-1: 1:1 : unknown format tag 0x5 is detected.  processed as MPEG.
[   80.442800][   T22] usb 2-1: found format II with max.bitrate = 512, frame size=4095
[   80.449483][ T4476] gsmld_receive_buf: 00000000: f9                                               .
[   80.505272][   T22] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[   80.539309][ T4430] lo speed is unknown, defaulting to 1000
[   80.616551][ T4477] gsmld_receive_buf: 00000000: 03                                               .
[   80.657354][ T4479] gsmld_receive_buf: 00000000: 3f                                               ?
[   80.717642][   T22] usb 2-1: USB disconnect, device number 2
[   80.726836][ T4476] gsmld_receive_buf: 00000000: 01                                               .
[   80.767918][ T4485] gsmld_receive_buf: 00000000: f9                                               .
[   80.871762][ T4486] loop0: detected capacity change from 0 to 32768
[   80.923021][ T4486] loop1: detected capacity change from 0 to 32768
[   80.978965][ T4486] loop2: detected capacity change from 0 to 32768
[   81.027674][ T4486] loop3: detected capacity change from 0 to 32768
[   81.175248][ T4430] lo speed is unknown, defaulting to 1000
[   81.295548][ T4494] gsmld_receive_buf: 00000000: f9                                               .
[   81.395752][ T4498] gsmld_receive_buf: 00000000: 03                                               .
[   81.471232][ T4494] gsmld_receive_buf: 00000000: 3f                                               ?
[   81.717189][ T4395] udevd[4395]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   81.912420][ T4430] lo speed is unknown, defaulting to 1000
[   82.231310][ T4512] loop1: detected capacity change from 0 to 32768
[   82.328587][ T4512] loop2: detected capacity change from 0 to 32768
[   82.364145][ T4512] loop3: detected capacity change from 0 to 32768
[   82.469382][ T4512] block device autoloading is deprecated and will be removed.
[   83.102578][ T4532] gsmld_receive_buf: 00000000: f9                                               .
[   83.117523][ T4533] gsmld_receive_buf: 00000000: f9                                               .
[   83.183296][ T4531] loop0: detected capacity change from 0 to 32768
[   83.229179][ T4531] loop1: detected capacity change from 0 to 32768
[   83.238996][ T4536] gsmld_receive_buf: 00000000: 03                                               .
[   83.257520][ T4538] gsmld_receive_buf: 00000000: 03                                               .
[   83.313215][ T4531] loop2: detected capacity change from 0 to 32768
[   83.470276][ T4532] gsmld_receive_buf: 00000000: 3f                                               ?
[   83.487079][ T4533] gsmld_receive_buf: 00000000: 3f                                               ?
[   83.561539][ T4543] gsmld_receive_buf: 00000000: 01                                               .
[   83.569493][ T4545] gsmld_receive_buf: 00000000: 01                                               .
[   83.581855][ T4549] gsmld_receive_buf: 00000000: f9                                               .
[   83.601482][ T4548] gsmld_receive_buf: 00000000: 1c                                               .
[   83.655902][ T4550] gsmld_receive_buf: 00000000: f9                                               .
[   83.682265][ T4552] gsmld_receive_buf: 00000000: f9                                               .
[   83.718675][ T4553] gsmld_receive_buf: 00000000: 03                                               .
[   83.761338][ T4555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.827313][ T4549] gsmld_receive_buf: 00000000: 3f                                               ?
[   83.839502][ T4555] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.964942][ T4553] gsmld_receive_buf: 00000000: 01                                               .
[   85.319015][ T4575] md: could not open device unknown-block(7,0).
[   85.414856][ T4575] md: error, md_import_device() returned -16
[   85.875302][ T4575] md/raid:md0: not clean -- starting background reconstruction
[   85.931826][ T4593] gsmld_receive_buf: 00000000: f9                                               .
[   85.936941][ T4575] md/raid:md0: device loop2 operational as raid disk 2
[   85.997190][ T4575] md/raid:md0: device loop1 operational as raid disk 1
[   86.021194][ T4594] gsmld_receive_buf: 00000000: 3f                                               ?
[   86.045067][ T4575] md/raid:md0: device loop0 operational as raid disk 0
[   86.219839][ T4575] md/raid:md0: couldn't allocate thread.
[   86.508637][ T4575] md: pers->run() failed ...
[   86.520924][   T26] audit: type=1800 audit(1786999724.034:2): pid=4604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.50" name="idVendor" dev="configfs" ino=35098 res=0 errno=0
[   86.616151][   T26] audit: type=1800 audit(1786999724.074:3): pid=4604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.50" name="idProduct" dev="configfs" ino=35099 res=0 errno=0
[   86.682632][ T4605] usbip-vudc usbip-vudc.0: gadget not bound
[   86.694105][ T4600] md: array md0 already has disks!
[   86.699389][ T4601] md: could not open device unknown-block(7,0).
[   86.716305][ T4607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   86.739005][ T4607] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   86.743906][  T130] cfg80211: failed to load regulatory.db
[   86.759197][   T26] audit: type=1800 audit(1786999724.074:4): pid=4604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.50" name="bcdUSB" dev="configfs" ino=35100 res=0 errno=0
[   86.781525][ T4601] md: error, md_import_device() returned -16
[   86.788033][ T4608] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[   86.794895][ T4608] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   86.865902][ T4607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   86.911353][ T4607] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   86.926270][   T26] audit: type=1800 audit(1786999724.084:5): pid=4604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.50" name="serialnumber" dev="configfs" ino=35102 res=0 errno=0
[   86.947491][ T4608] vhci_hcd vhci_hcd.0: Device attached
[   87.120198][   T26] audit: type=1800 audit(1786999724.094:6): pid=4604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.50" name="UDC" dev="configfs" ino=35107 res=0 errno=0
[   87.211195][  T130] usb 33-1: new high-speed USB device number 2 using vhci_hcd
[   87.216889][ T4616] gsmld_receive_buf: 00000000: f9                                               .
[   87.290480][ T4609] vhci_hcd: connection reset by peer
[   87.297927][   T46] vhci_hcd: stop threads
[   87.343259][ T4618] gsmld_receive_buf: 00000000: f9                                               .
[   87.370563][   T46] vhci_hcd: release socket
[   87.408506][ T4617] gsmld_receive_buf: 00000000: 03                                               .
[   87.423006][   T46] vhci_hcd: disconnect device
[   87.510658][ T4623] gsmld_receive_buf: 00000000: 03                                               .
[   87.532173][ T4616] gsmld_receive_buf: 00000000: 1c                                               .
[   87.643489][ T4624] gsmld_receive_buf: 00000000: 3f                                               ?
[   87.681416][ T4622] gsmld_receive_buf: 00000000: 3f                                               ?
[   87.742096][ T4618] gsmld_receive_buf: 00000000: f9                                               .
[   87.808184][ T4627] gsmld_receive_buf: 00000000: 01                                               .
[   88.787067][ T4655] set_capacity_and_notify: 4 callbacks suppressed
[   88.787081][ T4655] loop3: detected capacity change from 0 to 32768
[   88.815164][ T4657] md: array md0 already has disks!
[   88.833663][ T4655] md: could not open device unknown-block(7,0).
[   88.852581][ T4655] md: error, md_import_device() returned -16
[   88.860308][ T4657] md: could not open device unknown-block(7,0).
[   88.881440][ T4657] md: error, md_import_device() returned -16
[   88.887625][ T4655] md: could not open device unknown-block(7,1).
[   88.908407][ T4655] md: error, md_import_device() returned -16
[   88.925925][ T4659] gsmld_receive_buf: 00000000: f9                                               .
[   88.947251][ T4660] md: could not open device unknown-block(7,2).
[   88.997248][ T4660] md: error, md_import_device() returned -16
[   89.161980][ T4666] using random self ethernet address
[   89.188912][ T4666] using random host ethernet address
[   89.337163][ T4655] md/raid:md0: not clean -- starting background reconstruction
[   89.377156][ T4655] md/raid:md0: device loop2 operational as raid disk 2
[   89.413180][ T4655] md/raid:md0: device loop1 operational as raid disk 1
[   89.436086][ T4675] page:ffffea00015f8000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00
[   89.458022][ T4655] md/raid:md0: device loop0 operational as raid disk 0
[   89.481222][ T4675] head:ffffea00015f8000 order:3 compound_mapcount:0 compound_pincount:0
[   89.529213][ T4675] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[   89.597059][ T4675] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017442140
[   89.638927][ T4655] md/raid:md0: couldn't allocate thread.
[   89.671090][ T4675] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[   89.755513][ T4675] page dumped because: unmovable page
[   89.796433][ T4686] gsmld_receive_buf: 00000000: 03                                               .
[   89.846115][ T4675] page_owner tracks the page as allocated
[   89.907067][ T4675] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4392, tgid 4392 (udevd), ts 89193562536, free_ts 89172991991
[   90.033401][ T4655] md: pers->run() failed ...
[   90.176159][ T4675]  post_alloc_hook+0x173/0x1a0
[   90.222954][ T4675]  get_page_from_freelist+0x206b/0x2180
[   90.259277][ T4675]  __alloc_pages+0x1ec/0x4f0
[   90.309717][ T4675]  alloc_slab_page+0x5d/0x180
[   90.332689][ T4675]  new_slab+0x87/0x2d0
[   90.336872][ T4675]  ___slab_alloc+0xbc5/0x1240
[   90.374630][ T4675]  __kmem_cache_alloc_node+0x126/0x270
[   90.430741][ T4675]  __kmalloc+0xa3/0x240
[   90.466906][ T4675]  tomoyo_realpath_from_path+0xe2/0x5c0
[   90.500520][ T4675]  tomoyo_path_perm+0x26f/0x610
[   90.528446][ T4675]  security_inode_getattr+0xcf/0x120
[   90.548701][ T4675]  vfs_getattr+0x26/0x3a0
[   90.568937][ T4675]  vfs_statx+0x168/0x610
[   90.586842][ T4675]  __x64_sys_newfstatat+0x190/0x240
[   90.607513][ T4675]  do_syscall_64+0x4c/0xa0
[   90.625747][ T4675]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   90.650242][ T4675] page last free stack trace:
[   90.664689][ T4675]  free_unref_page_prepare+0x8e5/0x9e0
[   90.697407][ T4675]  free_unref_page+0x2e/0x3f0
[   90.703814][ T4675]  __unfreeze_partials+0x188/0x1e0
[   90.709077][ T4675]  put_cpu_partial+0x17c/0x250
[   90.756270][ T4675]  qlist_free_all+0x76/0xe0
[   90.766568][ T4675]  kasan_quarantine_reduce+0x144/0x160
[   90.772612][ T4675]  __kasan_slab_alloc+0x1e/0x80
[   90.777665][ T4675]  slab_post_alloc_hook+0x4b/0x490
[   90.790268][ T4675]  kmem_cache_alloc+0x18b/0x2f0
[   90.796411][ T4675]  getname_flags+0xb7/0x500
[   90.808904][ T4675]  do_sys_openat2+0xdd/0x4f0
[   90.814015][ T4675]  __x64_sys_openat+0x135/0x160
[   90.818959][ T4675]  do_syscall_64+0x4c/0xa0
[   90.829381][ T4675]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   90.935465][ T4693] gsmld_receive_buf: 00000000: f9                                               .
[   91.022615][ T4696] gsmld_receive_buf: 00000000: 03                                               .
[   91.122684][ T4701] gsmld_receive_buf: 00000000: f9                                               .
[   91.128774][ T4693] gsmld_receive_buf: 00000000: 3f                                               ?
[   91.205702][ T4700] md: array md0 already has disks!
[   91.272123][ T4696] gsmld_receive_buf: 00000000: 01                                               .
[   91.281170][ T4700] md: could not open device unknown-block(7,0).
[   91.287729][ T4700] md: error, md_import_device() returned -16
[   91.298842][ T4704] gsmld_receive_buf: 00000000: 03                                               .
[   91.371347][ T4707] gsmld_receive_buf: 00000000: f9                                               .
[   91.411303][ T4706] gsmld_receive_buf: 00000000: 01                                               .
[   92.194517][ T4719] gsmld_receive_buf: 00000000: f9                                               .
[   92.357157][  T130] vhci_hcd: vhci_device speed not set
[   92.366881][ T4721] gsmld_receive_buf: 00000000: 3f                                               ?
[   92.462014][ T4724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   92.497783][ T4724] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   92.658584][   T26] audit: type=1800 audit(1786999730.174:7): pid=4732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.88" name="ifname" dev="configfs" ino=35360 res=0 errno=0
[   92.737797][ T4734] page:ffffea00015f8000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00
[   92.862350][ T4734] head:ffffea00015f8000 order:3 compound_mapcount:0 compound_pincount:0
[   92.905425][ T4734] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[   92.940813][ T4734] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017442140
[   92.993700][ T4734] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[   93.055126][ T4734] page dumped because: unmovable page
[   93.088324][ T4734] page_owner tracks the page as allocated
[   93.126449][ T4734] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4392, tgid 4392 (udevd), ts 89193562536, free_ts 89172991991
[   93.255835][ T4734]  post_alloc_hook+0x173/0x1a0
[   93.261030][ T4734]  get_page_from_freelist+0x206b/0x2180
[   93.359708][ T4734]  __alloc_pages+0x1ec/0x4f0
[   93.366017][ T4734]  alloc_slab_page+0x5d/0x180
[   93.381616][ T4734]  new_slab+0x87/0x2d0
[   93.392576][ T4734]  ___slab_alloc+0xbc5/0x1240
[   93.408538][ T4734]  __kmem_cache_alloc_node+0x126/0x270
[   93.453377][ T4734]  __kmalloc+0xa3/0x240
[   93.495655][ T4734]  tomoyo_realpath_from_path+0xe2/0x5c0
[   93.515908][ T4734]  tomoyo_path_perm+0x26f/0x610
[   93.520882][ T4734]  security_inode_getattr+0xcf/0x120
[   93.551000][ T4734]  vfs_getattr+0x26/0x3a0
[   93.555451][ T4734]  vfs_statx+0x168/0x610
[   93.571145][ T4734]  __x64_sys_newfstatat+0x190/0x240
[   93.576473][ T4734]  do_syscall_64+0x4c/0xa0
[   93.597969][ T4734]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   93.605769][ T4734] page last free stack trace:
[   93.610745][ T4734]  free_unref_page_prepare+0x8e5/0x9e0
[   93.616394][ T4734]  free_unref_page+0x2e/0x3f0
[   93.621541][ T4734]  __unfreeze_partials+0x188/0x1e0
[   93.626708][ T4734]  put_cpu_partial+0x17c/0x250
[   93.631611][ T4734]  qlist_free_all+0x76/0xe0
[   93.636158][ T4734]  kasan_quarantine_reduce+0x144/0x160
[   93.643937][ T4734]  __kasan_slab_alloc+0x1e/0x80
[   93.648829][ T4734]  slab_post_alloc_hook+0x4b/0x490
[   93.654041][ T4734]  kmem_cache_alloc+0x18b/0x2f0
[   93.658933][ T4734]  getname_flags+0xb7/0x500
[   93.663587][ T4734]  do_sys_openat2+0xdd/0x4f0
[   93.668267][ T4734]  __x64_sys_openat+0x135/0x160
[   93.673957][ T4734]  do_syscall_64+0x4c/0xa0
[   93.678424][ T4734]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   94.194103][ T4766] gsmld_receive_buf: 00000000: f9                                               .
[   94.226891][ T4766] gsmld_receive_buf: 00000000: 03                                               .
[   94.261621][ T4766] gsmld_receive_buf: 00000000: 3f                                               ?
[   94.302868][ T4766] gsmld_receive_buf: 00000000: 1c                                               .
[   94.359301][ T4766] gsmld_receive_buf: 00000000: f9                                               .
[   94.674046][ T4777] gsmld_receive_buf: 00000000: f9                                               .
[   94.799745][ T4778] gsmld_receive_buf: 00000000: 03                                               .
[   94.926204][ T4777] gsmld_receive_buf: 00000000: 01                                               .
[   95.184490][ T4788] gsmld_receive_buf: 00000000: 03                                               .
[   95.254422][ T4790] gsmld_receive_buf: 00000000: 3f                                               ?
[   95.296375][ T4791] i2c i2c-0: new_device: Instantiated device isp1301 at 0x2c
[   95.469242][ T4795] page:ffffea00015f8000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00
[   95.576356][ T4795] head:ffffea00015f8000 order:3 compound_mapcount:0 compound_pincount:0
[   95.601156][ T4795] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[   95.663785][   T26] audit: type=1800 audit(1786999733.184:8): pid=4798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.106" name="ifname" dev="configfs" ino=34644 res=0 errno=0
[   95.689777][ T4795] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017442140
[   95.823482][ T4795] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[   95.918933][ T4795] page dumped because: unmovable page
[   95.974937][ T4795] page_owner tracks the page as allocated
[   96.021061][ T4795] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4328, tgid 4328 (kworker/u4:6), ts 94322124435, free_ts 93975747040
[   96.210993][ T4795]  post_alloc_hook+0x173/0x1a0
[   96.228755][ T4795]  get_page_from_freelist+0x206b/0x2180
[   96.291323][ T4795]  __alloc_pages+0x1ec/0x4f0
[   96.296073][ T4795]  alloc_slab_page+0x5d/0x180
[   96.300840][ T4795]  new_slab+0x87/0x2d0
[   96.381555][ T4795]  ___slab_alloc+0xbc5/0x1240
[   96.411094][  T130] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   96.434697][ T4795]  __kmem_cache_alloc_node+0x126/0x270
[   96.471081][ T4795]  __kmalloc_node_track_caller+0xa0/0x240
[   96.503371][ T4795]  __alloc_skb+0x226/0x7d0
[   96.507911][ T4795]  nsim_dev_trap_report_work+0x24f/0xa80
[   96.537892][ T4795]  process_one_work+0x8ab/0x1160
[   96.549106][ T4795]  worker_thread+0xaf5/0x12a0
[   96.555620][ T4795]  kthread+0x29d/0x330
[   96.559802][ T4795]  ret_from_fork+0x1f/0x30
[   96.564584][ T4795] page last free stack trace:
[   96.569313][ T4795]  free_unref_page_prepare+0x8e5/0x9e0
[   96.577504][ T4795]  free_unref_page+0x2e/0x3f0
[   96.582772][ T4795]  __unfreeze_partials+0x188/0x1e0
[   96.587963][ T4795]  put_cpu_partial+0x17c/0x250
[   96.593312][ T4795]  qlist_free_all+0x76/0xe0
[   96.597893][ T4795]  kasan_quarantine_reduce+0x144/0x160
[   96.609632][ T4795]  __kasan_slab_alloc+0x1e/0x80
[   96.611060][  T130] usb 4-1: Using ep0 maxpacket: 8
[   96.619746][ T4795]  slab_post_alloc_hook+0x4b/0x490
[   96.633296][  T130] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice= 0.00
[   96.643183][ T4795]  kmem_cache_alloc+0x18b/0x2f0
[   96.650085][ T4795]  vm_area_alloc+0x20/0xe0
[   96.655095][  T130] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[   96.660475][ T4795]  mmap_region+0xcbc/0x1c50
[   96.670206][ T4795]  do_mmap+0x9ce/0x10d0
[   96.674893][  T130] usb 4-1: Product: syz
[   96.679087][  T130] usb 4-1: Manufacturer: syz
[   96.680447][ T4795]  vm_mmap_pgoff+0x1c1/0x2d0
[   96.692842][ T4795]  ksys_mmap_pgoff+0x4bf/0x720
[   96.706119][ T4795]  do_syscall_64+0x4c/0xa0
[   96.710647][ T4795]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   96.917329][  T130] legousbtower 4-1:1.0: LEGO USB Tower firmware version is 1.2 build 0
[   96.947247][  T130] legousbtower 4-1:1.0: LEGO USB Tower #-160 now attached to major 180 minor 0
[   97.419478][ T4832] gsmld_receive_buf: 00000000: f9                                               .
[   97.459749][ T4832] gsmld_receive_buf: 00000000: 03                                               .
[   97.517783][ T4836] gsmld_receive_buf: 00000000: f9                                               .
[   97.530108][ T4835] gsmld_receive_buf: 00000000: 3f                                               ?
[   97.554663][ T4832] gsmld_receive_buf: 00000000: 1c                                               .
[   97.579364][ T4837] gsmld_receive_buf: 00000000: 3f                                               ?
[   97.605381][ T4835] gsmld_receive_buf: 00000000: f9                                               .
[   97.627970][ T4836] gsmld_receive_buf: 00000000: 01                                               .
[   98.138830][   T22] usb 4-1: USB disconnect, device number 2
[   98.173195][   T22] legousbtower 4-1:1.0: LEGO USB Tower #-160 now disconnected
[   98.725661][ T4851] page:ffffea00015f8000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00
[   98.775620][   T26] audit: type=1800 audit(1786999736.294:9): pid=4853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.125" name="ifname" dev="configfs" ino=35475 res=0 errno=0
[   98.831774][ T4851] head:ffffea00015f8000 order:3 compound_mapcount:0 compound_pincount:0
[   98.850598][ T4851] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[   98.931103][ T4851] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017442140
[   98.975703][ T4851] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[   99.020807][ T4851] page dumped because: unmovable page
[   99.052871][ T4851] page_owner tracks the page as freed
[   99.086394][ T4851] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4328, tgid 4328 (kworker/u4:6), ts 94322124435, free_ts 99011676812
[   99.211180][ T4851]  post_alloc_hook+0x173/0x1a0
[   99.226351][ T4851]  get_page_from_freelist+0x206b/0x2180
[   99.266918][ T4851]  __alloc_pages+0x1ec/0x4f0
[   99.312379][ T4851]  alloc_slab_page+0x5d/0x180
[   99.347700][ T4851]  new_slab+0x87/0x2d0
[   99.378241][ T4851]  ___slab_alloc+0xbc5/0x1240
[   99.435724][ T4851]  __kmem_cache_alloc_node+0x126/0x270
[   99.458546][ T4851]  __kmalloc_node_track_caller+0xa0/0x240
[   99.511094][ T4851]  __alloc_skb+0x226/0x7d0
[   99.515593][ T4851]  nsim_dev_trap_report_work+0x24f/0xa80
[   99.551972][ T4851]  process_one_work+0x8ab/0x1160
[   99.557029][ T4851]  worker_thread+0xaf5/0x12a0
[   99.580991][ T4851]  kthread+0x29d/0x330
[   99.585138][ T4851]  ret_from_fork+0x1f/0x30
[   99.589595][ T4851] page last free stack trace:
[   99.632369][ T4851]  free_unref_page_prepare+0x8e5/0x9e0
[   99.638048][ T4851]  free_unref_page+0x2e/0x3f0
[   99.644857][ T4851]  __unfreeze_partials+0x188/0x1e0
[   99.650034][ T4851]  put_cpu_partial+0x17c/0x250
[   99.674080][ T4851]  qlist_free_all+0x76/0xe0
[   99.686594][ T4851]  kasan_quarantine_reduce+0x144/0x160
[   99.715174][ T4851]  __kasan_slab_alloc+0x1e/0x80
[   99.720116][ T4851]  slab_post_alloc_hook+0x4b/0x490
[   99.766112][ T4851]  kmem_cache_alloc+0x18b/0x2f0
[   99.781272][ T4851]  ptlock_alloc+0x1c/0x60
[   99.785680][ T4851]  pte_alloc_one+0xc0/0x310
[   99.819503][ T4851]  handle_mm_fault+0x257d/0x3d40
[   99.824785][ T4872] gsmld_receive_buf: 00000000: f9                                               .
[   99.851217][ T4851]  do_user_addr_fault+0x58e/0xb20
[   99.856368][ T4851]  exc_page_fault+0x60/0x100
[   99.881330][ T4873] gsmld_receive_buf: 00000000: 3f                                               ?
[   99.890649][ T4851]  asm_exc_page_fault+0x22/0x30
[   99.940280][ T4872] gsmld_receive_buf: 00000000: 01                                               .
[  100.341334][ T4883] gsmld_receive_buf: 00000000: f9                                               .
[  100.418140][ T4887] gsmld_receive_buf: 00000000: 03                                               .
[  100.503738][ T4888] md: array md0 already has disks!
[  100.530497][ T4889] gsmld_receive_buf: 00000000: 3f                                               ?
[  100.567257][ T4890] md: could not open device unknown-block(7,0).
[  100.594835][ T4890] md: error, md_import_device() returned -16
[  100.605577][ T4888] md: could not open device unknown-block(7,1).
[  100.630220][ T4883] gsmld_receive_buf: 00000000: 1c                                               .
[  100.659244][ T4888] md: error, md_import_device() returned -16
[  100.695639][ T4890] md: could not open device unknown-block(7,2).
[  100.703063][ T4887] gsmld_receive_buf: 00000000: f9                                               .
[  100.744234][ T4890] md: error, md_import_device() returned -16
[  101.047169][ T4892] md/raid:md0: not clean -- starting background reconstruction
[  101.091282][ T4892] md/raid:md0: device nullb0 operational as raid disk 0
[  101.145207][ T4892] md/raid:md0: device loop2 operational as raid disk 2
[  101.180451][ T4892] md/raid:md0: device loop1 operational as raid disk 1
[  101.205448][ T4892] md: pers->run() failed ...
[  101.807015][ T4917] page:ffffea00015f8000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00
[  101.859108][ T4917] head:ffffea00015f8000 order:3 compound_mapcount:0 compound_pincount:0
[  101.906789][ T4917] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  101.962636][   T26] audit: type=1800 audit(1786999739.484:10): pid=4921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.143" name="ifname" dev="configfs" ino=35858 res=0 errno=0
[  101.969880][ T4917] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017442140
[  101.999483][ T4924] gsmld_receive_buf: 00000000: f9                                               .
[  102.033228][ T4917] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[  102.184027][ T4930] gsmld_receive_buf: 00000000: 03                                               .
[  102.201103][ T4917] page dumped because: unmovable page
[  102.267936][ T4917] page_owner tracks the page as allocated
[  102.308833][ T4917] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 9, tgid 9 (kworker/u4:0), ts 100804020376, free_ts 99011676812
[  102.334469][ T4935] gsmld_receive_buf: 00000000: f9                                               .
[  102.388284][ T4924] gsmld_receive_buf: 00000000: 01                                               .
[  102.401611][ T4917]  post_alloc_hook+0x173/0x1a0
[  102.406347][ T4939] gsmld_receive_buf: 00000000: 03                                               .
[  102.406460][ T4917]  get_page_from_freelist+0x206b/0x2180
[  102.406493][ T4917]  __alloc_pages+0x1ec/0x4f0
[  102.456900][ T4936] gsmld_receive_buf: 00000000: 1c                                               .
[  102.752146][ T4917]  alloc_slab_page+0x5d/0x180
[  102.786539][ T4917]  new_slab+0x87/0x2d0
[  102.815232][ T4917]  ___slab_alloc+0xbc5/0x1240
[  102.852091][ T4917]  __kmem_cache_alloc_node+0x126/0x270
[  102.894342][ T4917]  __kmalloc_node_track_caller+0xa0/0x240
[  102.925828][ T4945] md: array md0 already has disks!
[  102.935388][ T4917]  __alloc_skb+0x226/0x7d0
[  102.960555][ T4917]  nsim_dev_trap_report_work+0x24f/0xa80
[  102.975677][ T4945] md: could not open device unknown-block(7,0).
[  102.992298][ T4917]  process_one_work+0x8ab/0x1160
[  103.002732][ T4945] md: error, md_import_device() returned -16
[  103.016041][ T4917]  worker_thread+0xaf5/0x12a0
[  103.041081][ T4917]  kthread+0x29d/0x330
[  103.060741][ T4917]  ret_from_fork+0x1f/0x30
[  103.080774][ T4917] page last free stack trace:
[  103.119603][ T4917]  free_unref_page_prepare+0x8e5/0x9e0
[  103.150607][ T4917]  free_unref_page+0x2e/0x3f0
[  103.182906][ T4917]  __unfreeze_partials+0x188/0x1e0
[  103.229654][ T4917]  put_cpu_partial+0x17c/0x250
[  103.269721][ T4917]  qlist_free_all+0x76/0xe0
[  103.281011][ T4917]  kasan_quarantine_reduce+0x144/0x160
[  103.298712][ T4917]  __kasan_slab_alloc+0x1e/0x80
[  103.338149][ T4917]  slab_post_alloc_hook+0x4b/0x490
[  103.354159][ T4917]  kmem_cache_alloc+0x18b/0x2f0
[  103.359083][ T4917]  ptlock_alloc+0x1c/0x60
[  103.427079][ T4917]  pte_alloc_one+0xc0/0x310
[  103.451025][ T4917]  handle_mm_fault+0x257d/0x3d40
[  103.456125][ T4917]  do_user_addr_fault+0x58e/0xb20
[  103.493704][ T4917]  exc_page_fault+0x60/0x100
[  103.498368][ T4917]  asm_exc_page_fault+0x22/0x30
[  103.729738][ T4952] md: array md0 already has disks!
[  103.792428][ T4959] md: could not open device unknown-block(7,0).
[  103.836968][ T4959] md: error, md_import_device() returned -16
[  103.861378][ T4952] md: could not open device unknown-block(7,1).
[  103.867717][ T4952] md: error, md_import_device() returned -16
[  103.947947][ T4959] md: could not open device unknown-block(7,2).
[  103.981280][   T14] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  103.998398][ T4959] md: error, md_import_device() returned -16
[  104.185437][   T14] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  104.207030][ T4972] gsmld_receive_buf: 00000000: f9                                               .
[  104.225056][   T14] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  104.277836][   T14] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64
[  104.288507][ T4974] gsmld_receive_buf: 00000000: 03                                               .
[  104.360021][   T14] usb 2-1: New USB device found, idVendor=15a4, idProduct=9020, bcdDevice= 1.00
[  104.370174][ T4972] gsmld_receive_buf: 00000000: 01                                               .
[  104.401786][ T4977] gsmld_receive_buf: 00000000: f9                                               .
[  104.425277][   T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.446676][ T4972] gsmld_receive_buf: 00000000: 1c                                               .
[  104.448748][   T14] usb 2-1: Product: syz
[  104.471742][ T4980] gsmld_receive_buf: 00000000: 03                                               .
[  104.509778][   T14] usb 2-1: Manufacturer: syz
[  104.535346][   T14] usb 2-1: SerialNumber: syz
[  104.536058][ T4974] gsmld_receive_buf: 00000000: f9                                               .
[  104.564886][ T4952] md/raid:md0: not clean -- starting background reconstruction
[  104.581004][ T4954] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  104.596070][ T4954] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  104.622433][ T4952] md/raid:md0: device nullb0 operational as raid disk 0
[  104.639780][ T4954] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  104.647259][ T4952] md/raid:md0: device loop2 operational as raid disk 2
[  104.692246][   T14] af9005: boot packet bulk message failed: -71 (252/0)
[  104.697509][ T4952] md/raid:md0: device loop1 operational as raid disk 1
[  104.709564][   T14] dvb-usb: found a 'Afatech DVB-T USB1.1 stick' in cold state, will try to load a firmware
[  104.785394][ T4952] md: pers->run() failed ...
[  104.861973][   T14] usb 2-1: Direct firmware load for af9005.fw failed with error -2
[  104.878135][   T14] usb 2-1: Falling back to sysfs fallback for: af9005.fw
[  105.359216][ T4997] page:ffffea00015f8000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00
[  105.378716][ T4995] md: array md0 already has disks!
[  105.390223][ T4997] head:ffffea00015f8000 order:3 compound_mapcount:0 compound_pincount:0
[  105.420488][ T4995] md: could not open device unknown-block(7,0).
[  105.424693][ T4997] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  105.438605][ T4995] md: error, md_import_device() returned -16
[  105.455279][ T4997] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017442140
[  105.481111][ T4997] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[  105.497908][ T4997] page dumped because: unmovable page
[  105.519825][ T4997] page_owner tracks the page as allocated
[  105.530479][   T26] audit: type=1800 audit(1786999743.044:11): pid=5001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.162" name="ifname" dev="configfs" ino=35582 res=0 errno=0
[  105.531327][ T4997] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 9, tgid 9 (kworker/u4:0), ts 100804020376, free_ts 99011676812
[  105.586929][ T4997]  post_alloc_hook+0x173/0x1a0
[  105.601632][ T4997]  get_page_from_freelist+0x206b/0x2180
[  105.615317][ T4997]  __alloc_pages+0x1ec/0x4f0
[  105.643331][ T4997]  alloc_slab_page+0x5d/0x180
[  105.667804][ T4997]  new_slab+0x87/0x2d0
[  105.685742][ T4997]  ___slab_alloc+0xbc5/0x1240
[  105.716555][ T4997]  __kmem_cache_alloc_node+0x126/0x270
[  105.736798][ T4997]  __kmalloc_node_track_caller+0xa0/0x240
[  105.781818][ T4997]  __alloc_skb+0x226/0x7d0
[  105.786321][ T4997]  nsim_dev_trap_report_work+0x24f/0xa80
[  105.881009][ T4997]  process_one_work+0x8ab/0x1160
[  105.926706][ T4997]  worker_thread+0xaf5/0x12a0
[  105.957573][ T4997]  kthread+0x29d/0x330
[  105.967773][ T4997]  ret_from_fork+0x1f/0x30
[  105.984576][ T4997] page last free stack trace:
[  105.998507][ T4997]  free_unref_page_prepare+0x8e5/0x9e0
[  106.005278][ T4997]  free_unref_page+0x2e/0x3f0
[  106.010011][ T4997]  __unfreeze_partials+0x188/0x1e0
[  106.019286][ T4997]  put_cpu_partial+0x17c/0x250
[  106.030881][ T4997]  qlist_free_all+0x76/0xe0
[  106.058531][ T4997]  kasan_quarantine_reduce+0x144/0x160
[  106.081055][ T4997]  __kasan_slab_alloc+0x1e/0x80
[  106.086233][ T4997]  slab_post_alloc_hook+0x4b/0x490
[  106.101323][ T4997]  kmem_cache_alloc+0x18b/0x2f0
[  106.106450][ T4997]  ptlock_alloc+0x1c/0x60
[  106.110821][ T4997]  pte_alloc_one+0xc0/0x310
[  106.115448][ T4997]  handle_mm_fault+0x257d/0x3d40
[  106.120419][ T4997]  do_user_addr_fault+0x58e/0xb20
[  106.125566][ T4997]  exc_page_fault+0x60/0x100
[  106.130193][ T4997]  asm_exc_page_fault+0x22/0x30
[  106.359105][ T5020] gsmld_receive_buf: 00000000: f9                                               .
[  106.444311][ T5021] gsmld_receive_buf: 00000000: 03                                               .
[  106.611606][ T5020] gsmld_receive_buf: 00000000: 01                                               .
[  106.699675][ T5026] gsmld_receive_buf: 00000000: 1c                                               .
[  106.972303][ T5040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.007656][ T5040] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.439934][ T5054] page:ffffea00015f8000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00
[  107.481616][ T5054] head:ffffea00015f8000 order:3 compound_mapcount:0 compound_pincount:0
[  107.513401][ T5054] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  107.537522][ T5054] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017442140
[  107.560785][ T5054] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[  107.589627][ T5054] page dumped because: unmovable page
[  107.617203][ T5054] page_owner tracks the page as allocated
[  107.636283][ T5054] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4395, tgid 4395 (udevd), ts 106412783097, free_ts 106406762568
[  107.667530][ T5054]  post_alloc_hook+0x173/0x1a0
[  107.675747][ T5054]  get_page_from_freelist+0x206b/0x2180
[  107.682255][ T5054]  __alloc_pages+0x1ec/0x4f0
[  107.687315][ T5056] PM: suspend entry (s2idle)
[  107.687472][ T5054]  alloc_slab_page+0x5d/0x180
[  107.697932][ T5054]  new_slab+0x87/0x2d0
[  107.703146][ T5054]  ___slab_alloc+0xbc5/0x1240
[  107.708438][ T5054]  __kmem_cache_alloc_node+0x126/0x270
[  107.714507][ T5054]  kmalloc_trace+0x26/0xe0
[  107.719283][ T5054]  uevent_show+0x154/0x320
[  107.724309][ T5054]  dev_attr_show+0x50/0xb0
[  107.728943][ T5054]  sysfs_kf_seq_show+0x349/0x4b0
[  107.741701][ T5054]  seq_read_iter+0x460/0xc50
[  107.746666][ T5054]  vfs_read+0x471/0x960
[  107.751384][ T5054]  ksys_read+0x14d/0x260
[  107.755872][ T5054]  do_syscall_64+0x4c/0xa0
[  107.760496][ T5054]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  107.766616][ T5054] page last free stack trace:
[  107.771888][ T5054]  free_unref_page_prepare+0x8e5/0x9e0
[  107.777638][ T5054]  free_unref_page+0x2e/0x3f0
[  107.782542][ T5054]  __unfreeze_partials+0x188/0x1e0
[  107.788087][ T5054]  put_cpu_partial+0x17c/0x250
[  107.794601][ T5054]  qlist_free_all+0x76/0xe0
[  107.799272][ T5054]  kasan_quarantine_reduce+0x144/0x160
[  107.806565][ T5054]  __kasan_slab_alloc+0x1e/0x80
[  107.811654][ T5054]  slab_post_alloc_hook+0x4b/0x490
[  107.816908][ T5054]  kmem_cache_alloc+0x18b/0x2f0
[  107.822647][ T5054]  getname_flags+0xb7/0x500
[  107.827249][ T5054]  do_sys_openat2+0xdd/0x4f0
[  107.832331][ T5054]  __x64_sys_openat+0x135/0x160
[  107.837342][ T5054]  do_syscall_64+0x4c/0xa0
[  107.841950][ T5054]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  108.009583][ T5056] Filesystems sync: 0.281 seconds
[  108.415053][ T5068] loop4: detected capacity change from 0 to 4096
[  108.505546][ T5056] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  108.512163][  T130] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  108.513545][ T5056] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  108.583564][ T5056] Bluetooth: hci0: Suspend notifier action (3) failed: -4
[  108.601839][ T5056] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  108.614874][ T5056] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  108.636891][ T5056] Bluetooth: hci1: Suspend notifier action (3) failed: -4
[  108.645141][ T5056] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  108.651229][ T5056] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  108.659173][ T5056] Bluetooth: hci2: Suspend notifier action (3) failed: -4
[  108.667137][ T5056] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  108.673236][ T5056] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  108.686772][ T5056] Bluetooth: hci3: Suspend notifier action (3) failed: -4
[  108.697783][ T5056] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  108.705238][ T5056] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  108.721308][  T130] usb 4-1: unable to get BOS descriptor or descriptor too short
[  108.737402][ T4290] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  108.745783][ T4290] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  108.754890][ T5056] Bluetooth: hci4: Suspend notifier action (3) failed: -4
[  108.757667][  T130] usb 4-1: not running at top speed; connect to a high speed hub
[  108.778328][  T130] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4
[  108.843024][  T130] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40
[  108.861567][  T130] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.870103][  T130] usb 4-1: Product: syz
[  108.909621][ T5080] gsmld_receive_buf: 00000000: f9                                               .
[  108.920133][  T130] usb 4-1: Manufacturer: syz
[  108.934945][  T130] usb 4-1: SerialNumber: syz
[  108.993009][ T5082] gsmld_receive_buf: 00000000: 3f                                               ?
[  109.005002][ T5083] page:ffffea00015f8000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00
[  109.017112][ T5080] gsmld_receive_buf: 00000000: 01                                               .
[  109.027943][ T5083] head:ffffea00015f8000 order:3 compound_mapcount:0 compound_pincount:0
[  109.043153][ T5080] gsmld_receive_buf: 00000000: 1c                                               .
[  109.056537][ T5083] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  109.076442][ T5083] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017442140
[  109.106623][ T5083] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[  109.135676][ T5083] page dumped because: unmovable page
[  109.144899][ T5083] page_owner tracks the page as allocated
[  109.156946][ T5083] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4395, tgid 4395 (udevd), ts 106412783097, free_ts 106406762568
[  109.206771][ T5083]  post_alloc_hook+0x173/0x1a0
[  109.211899][ T5083]  get_page_from_freelist+0x206b/0x2180
[  109.283509][ T5083]  __alloc_pages+0x1ec/0x4f0
[  109.320460][ T5083]  alloc_slab_page+0x5d/0x180
[  109.326445][ T5083]  new_slab+0x87/0x2d0
[  109.341014][ T5083]  ___slab_alloc+0xbc5/0x1240
[  109.345857][ T5083]  __kmem_cache_alloc_node+0x126/0x270
[  109.359811][ T5083]  kmalloc_trace+0x26/0xe0
[  109.364792][ T5083]  uevent_show+0x154/0x320
[  109.369595][ T5083]  dev_attr_show+0x50/0xb0
[  109.380356][ T5083]  sysfs_kf_seq_show+0x349/0x4b0
[  109.386017][ T5083]  seq_read_iter+0x460/0xc50
[  109.397098][ T5083]  vfs_read+0x471/0x960
[  109.402026][ T5083]  ksys_read+0x14d/0x260
[  109.406685][ T5083]  do_syscall_64+0x4c/0xa0
[  109.412124][ T5083]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  109.418176][ T5083] page last free stack trace:
[  109.424514][ T5083]  free_unref_page_prepare+0x8e5/0x9e0
[  109.430153][ T5083]  free_unref_page+0x2e/0x3f0
[  109.451331][ T5083]  __unfreeze_partials+0x188/0x1e0
[  109.459701][ T5083]  put_cpu_partial+0x17c/0x250
[  109.475994][ T5083]  qlist_free_all+0x76/0xe0
[  109.482703][ T5083]  kasan_quarantine_reduce+0x144/0x160
[  109.488523][ T5083]  __kasan_slab_alloc+0x1e/0x80
[  109.498714][ T5083]  slab_post_alloc_hook+0x4b/0x490
[  109.505367][ T5083]  kmem_cache_alloc+0x18b/0x2f0
[  109.510504][ T5083]  getname_flags+0xb7/0x500
[  109.520452][ T5083]  do_sys_openat2+0xdd/0x4f0
[  109.527132][ T5083]  __x64_sys_openat+0x135/0x160
[  109.539184][ T5083]  do_syscall_64+0x4c/0xa0
[  109.560497][ T5083]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  110.185029][   T49] Bluetooth: hci0: command 0x0c1a tx timeout
[  110.661421][   T49] Bluetooth: hci2: command 0x0c1a tx timeout
[  110.667587][   T49] Bluetooth: hci1: command 0x0c1a tx timeout
[  110.734763][ T5111] gsmld_receive_buf: 00000000: f9                                               .
[  110.745050][ T5111] gsmld_receive_buf: 00000000: 03                                               .
[  110.754553][   T49] Bluetooth: hci4: command 0x0c1a tx timeout
[  110.760641][   T49] Bluetooth: hci3: command 0x0c1a tx timeout
[  110.768383][ T5111] gsmld_receive_buf: 00000000: 3f                                               ?
[  110.994679][ T5118] gsmld_receive_buf: 00000000: f9                                               .
[  111.080611][ T5119] gsmld_receive_buf: 00000000: 3f                                               ?
[  111.125178][ T5117] gsmld_receive_buf: 00000000: 01                                               .
[  111.163246][ T5117] gsmld_receive_buf: 00000000: 1c                                               .
[  111.187187][  T130] usb 4-1: 1:1 : unknown format tag 0x5 is detected.  processed as MPEG.
[  111.210450][  T130] usb 4-1: found format II with max.bitrate = 512, frame size=4095
[  111.219590][  T130] usb 4-1: 1:1 : unknown format tag 0x5 is detected.  processed as MPEG.
[  111.240790][  T130] usb 4-1: found format II with max.bitrate = 512, frame size=4095
[  111.295207][  T130] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  111.429194][  T130] usb 4-1: USB disconnect, device number 3
[  111.455884][   T26] audit: type=1800 audit(1786999748.974:12): pid=5124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.202" name="ifname" dev="configfs" ino=35733 res=0 errno=0
[  111.531621][ T4571] udevd[4571]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  112.262084][   T49] Bluetooth: hci0: command 0x0406 tx timeout
[  112.293525][ T5146] md: array md0 already has disks!
[  112.299167][ T5146] md: could not open device unknown-block(7,0).
[  112.305692][ T5146] md: error, md_import_device() returned -16
[  112.432146][ T5149] gsmld_receive_buf: 00000000: f9                                               .
[  112.462827][ T5149] gsmld_receive_buf: 00000000: 03                                               .
[  112.499487][ T5149] gsmld_receive_buf: 00000000: 3f                                               ?
[  112.741773][   T49] Bluetooth: hci1: command 0x0406 tx timeout
[  112.741793][ T4280] Bluetooth: hci2: command 0x0406 tx timeout
[  112.821324][   T49] Bluetooth: hci3: command 0x0406 tx timeout
[  112.821444][ T4280] Bluetooth: hci4: command 0x0406 tx timeout
[  113.461100][ T5168] gsmld_receive_buf: 00000000: f9                                               .
[  113.478061][   T26] audit: type=1800 audit(1786999750.994:13): pid=5167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.218" name="ifname" dev="configfs" ino=36345 res=0 errno=0
[  113.519921][ T5171] gsmld_receive_buf: 00000000: 3f                                               ?
[  113.580249][ T5168] gsmld_receive_buf: 00000000: 01                                               .
[  113.682869][ T5176] gsmld_receive_buf: 00000000: 1c                                               .
[  113.805265][ T5180] page:ffffea00015f8000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00
[  113.868715][ T5180] head:ffffea00015f8000 order:3 compound_mapcount:0 compound_pincount:0
[  113.908540][ T5180] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  113.953158][ T5180] raw: 00fff00000010200 ffffea000166be00 dead000000000002 ffff888017442140
[  113.993211][ T5180] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[  114.005522][ T5180] page dumped because: unmovable page
[  114.013732][ T5180] page_owner tracks the page as allocated
[  114.019825][ T5180] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4395, tgid 4395 (udevd), ts 106412783097, free_ts 106406762568
[  114.058331][ T5180]  post_alloc_hook+0x173/0x1a0
[  114.069289][ T5180]  get_page_from_freelist+0x206b/0x2180
[  114.075553][ T5180]  __alloc_pages+0x1ec/0x4f0
[  114.080585][ T5180]  alloc_slab_page+0x5d/0x180
[  114.090850][ T5180]  new_slab+0x87/0x2d0
[  114.096478][ T5180]  ___slab_alloc+0xbc5/0x1240
[  114.110091][ T5180]  __kmem_cache_alloc_node+0x126/0x270
[  114.116544][ T5180]  kmalloc_trace+0x26/0xe0
[  114.126629][ T5180]  uevent_show+0x154/0x320
[  114.131666][ T5180]  dev_attr_show+0x50/0xb0
[  114.136398][ T5180]  sysfs_kf_seq_show+0x349/0x4b0
[  114.147140][ T5180]  seq_read_iter+0x460/0xc50
[  114.155047][ T5180]  vfs_read+0x471/0x960
[  114.159649][ T5180]  ksys_read+0x14d/0x260
[  114.171364][ T5180]  do_syscall_64+0x4c/0xa0
[  114.176063][ T5180]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  114.187687][ T5180] page last free stack trace:
[  114.194135][ T5180]  free_unref_page_prepare+0x8e5/0x9e0
[  114.199971][ T5180]  free_unref_page+0x2e/0x3f0
[  114.210121][ T5180]  __unfreeze_partials+0x188/0x1e0
[  114.216927][ T5180]  put_cpu_partial+0x17c/0x250
[  114.226192][ T5180]  qlist_free_all+0x76/0xe0
[  114.232319][ T5180]  kasan_quarantine_reduce+0x144/0x160
[  114.238846][ T5180]  __kasan_slab_alloc+0x1e/0x80
[  114.248345][ T5180]  slab_post_alloc_hook+0x4b/0x490
[  114.256688][ T5180]  kmem_cache_alloc+0x18b/0x2f0
[  114.276584][ T5180]  getname_flags+0xb7/0x500
[  114.282838][ T5180]  do_sys_openat2+0xdd/0x4f0
[  114.287712][ T5180]  __x64_sys_openat+0x135/0x160
[  114.296965][ T5180]  do_syscall_64+0x4c/0xa0
[  114.302802][ T5180]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  114.855432][ T5195] md: array md0 already has disks!
[  114.870266][ T5195] md: could not open device unknown-block(7,0).
[  114.878761][ T5195] md: error, md_import_device() returned -16
[  114.899274][ T5195] md: could not open device unknown-block(7,1).
[  114.913968][ T5195] md: error, md_import_device() returned -16
[  114.920570][ T5195] md: could not open device unknown-block(7,2).
[  114.938556][ T5195] md: error, md_import_device() returned -16
[  114.983760][ T5198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  114.994326][ T5198] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.065852][ T5195] md/raid:md0: not clean -- starting background reconstruction
[  115.080445][ T5195] md/raid:md0: device nullb0 operational as raid disk 0
[  115.088445][ T5195] md/raid:md0: device loop2 operational as raid disk 2
[  115.095993][ T5195] md/raid:md0: device loop1 operational as raid disk 1
[  115.103899][ T5195] md: pers->run() failed ...
[  115.154621][ T5199] md: could not open device unknown-block(7,3).
[  115.161176][ T5199] md: error, md_import_device() returned -16
[  115.632513][ T5209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.643888][ T5209] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.652036][  T130] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  115.693627][   T26] audit: type=1800 audit(1786999753.214:14): pid=5211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.233" name="ifname" dev="configfs" ino=36426 res=0 errno=0
[  115.855450][  T130] usb 4-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00
[  115.870805][  T130] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.902266][  T130] i2c-tiny-usb 4-1:1.0: version 1.00 found at bus 004 address 004
[  116.053035][ T5223] gsmld_receive_buf: 00000000: 03                                               .
[  116.073894][ T5223] gsmld_receive_buf: 00000000: 3f                                               ?
[  116.095211][ T5223] gsmld_receive_buf: 00000000: 01                                               .
[  116.116602][ T5223] gsmld_receive_buf: 00000000: 1c                                               .
[  116.453972][ T5227] page:ffffea00015f8000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00
[  116.464714][ T5227] head:ffffea00015f8000 order:3 compound_mapcount:0 compound_pincount:0
[  116.473561][ T5227] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  116.482241][ T5227] raw: 00fff00000010200 ffffea000166be00 dead000000000002 ffff888017442140
[  116.490917][ T5227] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[  116.500221][ T5227] page dumped because: unmovable page
[  116.508286][ T5227] page_owner tracks the page as allocated
[  116.515658][ T5227] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4395, tgid 4395 (udevd), ts 106412783097, free_ts 106406762568
[  116.538400][ T5227]  post_alloc_hook+0x173/0x1a0
[  116.543598][ T5227]  get_page_from_freelist+0x206b/0x2180
[  116.549225][ T5227]  __alloc_pages+0x1ec/0x4f0
[  116.553906][ T5227]  alloc_slab_page+0x5d/0x180
[  116.558657][ T5227]  new_slab+0x87/0x2d0
[  116.562849][ T5227]  ___slab_alloc+0xbc5/0x1240
[  116.567584][ T5227]  __kmem_cache_alloc_node+0x126/0x270
[  116.573145][ T5227]  kmalloc_trace+0x26/0xe0
[  116.577625][ T5227]  uevent_show+0x154/0x320
[  116.582152][ T5227]  dev_attr_show+0x50/0xb0
[  116.586622][ T5227]  sysfs_kf_seq_show+0x349/0x4b0
[  116.591654][ T5227]  seq_read_iter+0x460/0xc50
[  116.596304][ T5227]  vfs_read+0x471/0x960
[  116.600621][ T5227]  ksys_read+0x14d/0x260
[  116.604998][ T5227]  do_syscall_64+0x4c/0xa0
[  116.610165][ T5227]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  116.616202][ T5227] page last free stack trace:
[  116.620971][ T5227]  free_unref_page_prepare+0x8e5/0x9e0
[  116.626552][ T5227]  free_unref_page+0x2e/0x3f0
[  116.632124][ T5227]  __unfreeze_partials+0x188/0x1e0
[  116.637314][ T5227]  put_cpu_partial+0x17c/0x250
[  116.642219][ T5227]  qlist_free_all+0x76/0xe0
[  116.646780][ T5227]  kasan_quarantine_reduce+0x144/0x160
[  116.652631][ T5227]  __kasan_slab_alloc+0x1e/0x80
[  116.657599][ T5227]  slab_post_alloc_hook+0x4b/0x490
[  116.663374][ T5227]  kmem_cache_alloc+0x18b/0x2f0
[  116.668411][ T5227]  getname_flags+0xb7/0x500
[  116.673275][ T5227]  do_sys_openat2+0xdd/0x4f0
[  116.678061][ T5227]  __x64_sys_openat+0x135/0x160
[  116.683242][ T5227]  do_syscall_64+0x4c/0xa0
[  116.687797][ T5227]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  117.044815][ T2931] bond0: (slave bond_slave_0): interface is now down
[  117.054631][ T2931] bond0: (slave bond_slave_1): interface is now down
[  117.069583][ T2931] bond0: now running without any active interface!
[  118.318661][  T130] i2c i2c-1: failure reading functionality
[  118.327985][  T130] i2c i2c-1: connected i2c-tiny-usb device
[  118.337293][  T130] usb 4-1: USB disconnect, device number 4
[  118.962107][ T5248] md: array md0 already has disks!
[  118.978536][ T5248] md: could not open device unknown-block(7,0).
[  118.997116][ T5248] md: error, md_import_device() returned -16
[  119.603239][ T5263] gsmld_receive_buf: 00000000: f9                                               .
[  119.641749][ T5263] gsmld_receive_buf: 00000000: 3f                                               ?
[  119.671097][  T128] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  119.674453][ T5263] gsmld_receive_buf: 00000000: 01                                               .
[  119.715441][ T5263] gsmld_receive_buf: 00000000: 1c                                               .
[  119.727747][ T5263] gsmld_receive_buf: 00000000: f9                                               .
[  119.872689][  T128] usb 4-1: config index 0 descriptor too short (expected 46, got 44)
[  119.880883][  T128] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  119.917113][  T128] usb 4-1: New USB device found, idVendor=0bda, idProduct=8152, bcdDevice= 0.00
[  119.944614][  T128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.973209][  T128] usb 4-1: Product: syz
[  119.977464][  T128] usb 4-1: Manufacturer: syz
[  120.017287][  T128] usb 4-1: SerialNumber: syz
[  120.381092][  T128] r8152-cfgselector 4-1: reset high-speed USB device number 5 using dummy_hcd
[  120.541142][  T128] r8152-cfgselector 4-1: device descriptor read/64, error -32
[  120.562125][ T5272] ima: policy update failed
[  120.567557][   T26] audit: type=1802 audit(1786999758.084:15): pid=5272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.252" res=0 errno=0
[  120.824308][  T128] r8152-cfgselector 4-1: reset high-speed USB device number 5 using dummy_hcd
[  120.981514][  T128] r8152-cfgselector 4-1: device descriptor read/64, error -32
[  121.251082][  T128] r8152-cfgselector 4-1: reset high-speed USB device number 5 using dummy_hcd
[  122.907581][ T4280] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  122.917036][ T4280] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  122.928374][ T4280] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  122.937236][ T4280] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  122.945061][ T4280] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  122.952601][ T4280] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  124.991190][ T4280] Bluetooth: hci5: command 0x0409 tx timeout
[  125.393058][ T5309] ima: policy update failed
[  125.398932][   T26] audit: type=1802 audit(1786999762.914:16): pid=5309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.263" res=0 errno=0
[  125.476641][ T5312] page:ffffea00015f8000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00
[  125.487476][ T5312] head:ffffea00015f8000 order:3 compound_mapcount:0 compound_pincount:0
[  125.496485][ T5312] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  125.505120][ T5312] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888017442140
[  125.514088][ T5312] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[  125.523682][ T5312] page dumped because: unmovable page
[  125.529081][ T5312] page_owner tracks the page as allocated
[  125.535498][ T5312] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4395, tgid 4395 (udevd), ts 106412783097, free_ts 106406762568
[  125.558288][ T5312]  post_alloc_hook+0x173/0x1a0
[  125.563372][ T5312]  get_page_from_freelist+0x206b/0x2180
[  125.568968][ T5312]  __alloc_pages+0x1ec/0x4f0
[  125.573966][ T5312]  alloc_slab_page+0x5d/0x180
[  125.578684][ T5312]  new_slab+0x87/0x2d0
[  125.583241][ T5312]  ___slab_alloc+0xbc5/0x1240
[  125.587953][ T5312]  __kmem_cache_alloc_node+0x126/0x270
[  125.593817][ T5312]  kmalloc_trace+0x26/0xe0
[  125.598282][ T5312]  uevent_show+0x154/0x320
[  125.603066][ T5312]  dev_attr_show+0x50/0xb0
[  125.607503][ T5312]  sysfs_kf_seq_show+0x349/0x4b0
[  125.612833][ T5312]  seq_read_iter+0x460/0xc50
[  125.617454][ T5312]  vfs_read+0x471/0x960
[  125.622885][ T5312]  ksys_read+0x14d/0x260
[  125.627291][ T5312]  do_syscall_64+0x4c/0xa0
[  125.632077][ T5312]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  125.637999][ T5312] page last free stack trace:
[  125.643007][ T5312]  free_unref_page_prepare+0x8e5/0x9e0
[  125.648512][ T5312]  free_unref_page+0x2e/0x3f0
[  125.653589][ T5312]  __unfreeze_partials+0x188/0x1e0
[  125.658745][ T5312]  put_cpu_partial+0x17c/0x250
[  125.664782][ T5312]  qlist_free_all+0x76/0xe0
[  125.669327][ T5312]  kasan_quarantine_reduce+0x144/0x160
[  125.675147][ T5312]  __kasan_slab_alloc+0x1e/0x80
[  125.680048][ T5312]  slab_post_alloc_hook+0x4b/0x490
[  125.685344][ T5312]  kmem_cache_alloc+0x18b/0x2f0
[  125.690497][ T5312]  getname_flags+0xb7/0x500
[  125.695365][ T5312]  do_sys_openat2+0xdd/0x4f0
[  125.699993][ T5312]  __x64_sys_openat+0x135/0x160
[  125.705557][ T5312]  do_syscall_64+0x4c/0xa0
[  125.710112][ T5312]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  126.351277][  T128] r8152-cfgselector 4-1: device descriptor read/8, error -110
[  126.621084][  T128] r8152-cfgselector 4-1: reset high-speed USB device number 5 using dummy_hcd
[  126.668453][  T128] r8152-cfgselector 4-1: device descriptor read/8, error -32
[  126.793676][  T128] r8152 4-1:1.0: USB reset failed, errno=-19
[  126.802209][   T26] audit: type=1800 audit(1786999764.314:17): pid=5280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.255" name="ifname" dev="configfs" ino=36912 res=0 errno=0
[  126.816340][  T128] r8152-cfgselector 4-1: Unknown version 0x0000
[  126.859989][  T128] r8152-cfgselector 4-1: USB disconnect, device number 5
[  126.870334][ T5290] lo speed is unknown, defaulting to 1000
[  127.065889][ T4280] Bluetooth: hci5: command 0x041b tx timeout
[  127.277053][ T5290] chnl_net:caif_netlink_parms(): no params data found
[  127.387638][ T5320] loop4: detected capacity change from 0 to 32768
[  127.397811][ T5290] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.406612][ T5290] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.415225][ T5290] device bridge_slave_0 entered promiscuous mode
[  127.415992][ T5320] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.268 (5320)
[  127.425083][ T5290] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.441919][ T5290] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.450446][ T5290] device bridge_slave_1 entered promiscuous mode
[  127.484184][ T5290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  127.496746][ T5290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  127.531587][ T5320] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  127.533099][ T5290] team0: Port device team_slave_0 added
[  127.553946][ T5290] team0: Port device team_slave_1 added
[  127.569518][ T5320] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  127.582392][ T5290] batman_adv: batadv0: Adding interface: batadv_slave_0
[  127.589475][ T5290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.595183][ T5320] BTRFS info (device loop4): using free space tree
[  127.616118][ T5290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  127.636672][ T5290] batman_adv: batadv0: Adding interface: batadv_slave_1
[  127.644568][ T5290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.680632][ T5290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  127.788657][ T5290] device hsr_slave_0 entered promiscuous mode
[  127.804973][ T5290] device hsr_slave_1 entered promiscuous mode
[  127.817783][ T5290] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  127.828855][ T5290] Cannot create hsr debugfs directory
[  127.830310][ T5320] BTRFS info (device loop4): enabling ssd optimizations
[  128.155207][ T5348] BTRFS info (device loop4): balance: start -d -m -s
[  128.199367][ T5348] BTRFS info (device loop4): relocating block group 8519680 flags data|metadata
[  128.315989][ T5290] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  128.367117][ T5290] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  128.383707][ T5348] BTRFS info (device loop4): relocating block group 1048576 flags system
[  128.415644][ T5290] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  128.444213][ T5290] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  128.476233][ T5348] BTRFS info (device loop4): 2 enospc errors during balance
[  128.491280][ T5348] BTRFS info (device loop4): balance: canceled
[  128.574643][ T5290] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.592437][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  128.600305][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  128.610534][ T4290] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  128.628565][ T5290] 8021q: adding VLAN 0 to HW filter on device team0
[  128.647816][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  128.681837][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  128.700407][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.707615][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.717686][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  128.738900][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  128.781312][   T22] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  128.805052][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  128.819943][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.827203][ T4328] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.836419][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  128.865864][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  128.875891][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  128.900275][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  128.939660][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  128.949442][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  128.964764][   T22] usb 4-1: New USB device found, idVendor=07c4, idProduct=a000, bcdDevice= 0.00
[  128.980239][   T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.989659][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  128.998733][   T22] usb 4-1: Product: syz
[  128.999333][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  129.005964][   T22] usb 4-1: Manufacturer: syz
[  129.014145][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  129.024633][   T22] usb 4-1: SerialNumber: syz
[  129.025038][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  129.039265][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  129.040769][   T22] ums-datafab 4-1:1.0: USB Mass Storage device detected
[  129.057107][ T5290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  129.110756][   T22] ums-datafab 4-1:1.0: This device (07c4,a000,0000 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  129.110756][   T22]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  129.141246][   T49] Bluetooth: hci5: command 0x040f tx timeout
[  129.155768][   T22] scsi host1: usb-storage 4-1:1.0
[  129.316975][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  129.324895][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  129.338783][ T5290] 8021q: adding VLAN 0 to HW filter on device batadv0
[  129.630314][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  129.645525][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  129.668339][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  129.678521][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  129.698929][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  129.726824][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  129.757339][ T5290] device veth0_vlan entered promiscuous mode
[  129.806918][ T5290] device veth1_vlan entered promiscuous mode
[  129.807228][ T5384] ima: policy update failed
[  129.836334][   T26] audit: type=1802 audit(1786999767.354:18): pid=5384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.273" res=0 errno=0
[  129.867809][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  129.882089][ T5387] page:ffffea00015f8000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00
[  129.899735][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  129.910793][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  129.932744][ T5387] head:ffffea00015f8000 order:3 compound_mapcount:0 compound_pincount:0
[  129.943925][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  129.953478][ T5387] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  129.965311][ T5290] device veth0_macvtap entered promiscuous mode
[  129.972641][ T5387] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888017442140
[  129.993469][ T5290] device veth1_macvtap entered promiscuous mode
[  129.999939][ T5387] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[  130.023031][ T5387] page dumped because: unmovable page
[  130.035809][ T5290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.041030][ T5387] page_owner tracks the page as allocated
[  130.046506][ T5290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.063415][ T5387] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4395, tgid 4395 (udevd), ts 106412783097, free_ts 106406762568
[  130.064064][ T5290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.097969][ T5290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.098002][ T5387]  post_alloc_hook+0x173/0x1a0
[  130.110826][ T5290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.121636][ T5387]  get_page_from_freelist+0x206b/0x2180
[  130.131452][ T5387]  __alloc_pages+0x1ec/0x4f0
[  130.135788][ T5290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.136240][ T5387]  alloc_slab_page+0x5d/0x180
[  130.147315][ T5290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.151123][ T5387]  new_slab+0x87/0x2d0
[  130.165588][ T5387]  ___slab_alloc+0xbc5/0x1240
[  130.167993][ T5290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.170422][ T5387]  __kmem_cache_alloc_node+0x126/0x270
[  130.180556][ T5290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.191098][   T32] scsi 1:0:0:0: Direct-Access     Datafab  MDCFE-B USB CF R 0000 PQ: 0 ANSI: 0 CCS
[  130.202005][ T5290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.206067][ T5387]  kmalloc_trace+0x26/0xe0
[  130.222598][   T32] scsi 1:0:0:1: Direct-Access     Datafab  MDCFE-B USB CF R 0000 PQ: 0 ANSI: 0 CCS
[  130.224391][ T5290] batman_adv: batadv0: Interface activated: batadv_slave_0
[  130.233680][ T5387]  uevent_show+0x154/0x320
[  130.249115][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  130.266124][   T32] sd 1:0:0:0: Attached scsi generic sg1 type 0
[  130.267788][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  130.273726][ T5387]  dev_attr_show+0x50/0xb0
[  130.287317][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  130.293861][   T32] sd 1:0:0:1: Attached scsi generic sg2 type 0
[  130.298535][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  130.309873][ T5387]  sysfs_kf_seq_show+0x349/0x4b0
[  130.318172][ T5290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.319973][ T5387]  seq_read_iter+0x460/0xc50
[  130.336026][ T5387]  vfs_read+0x471/0x960
[  130.340414][ T5290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.348319][ T5387]  ksys_read+0x14d/0x260
[  130.351900][ T5290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.365739][ T5387]  do_syscall_64+0x4c/0xa0
[  130.370617][ T5387]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  130.376953][ T5387] page last free stack trace:
[  130.381773][ T5290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.392874][ T5387]  free_unref_page_prepare+0x8e5/0x9e0
[  130.398398][ T5387]  free_unref_page+0x2e/0x3f0
[  130.403245][ T5290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.411078][ T5387]  __unfreeze_partials+0x188/0x1e0
[  130.414361][ T5290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.418947][ T5387]  put_cpu_partial+0x17c/0x250
[  130.429003][ T5290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.443298][ T5387]  qlist_free_all+0x76/0xe0
[  130.445894][ T5290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.449384][ T5387]  kasan_quarantine_reduce+0x144/0x160
[  130.459367][ T5290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.459417][ T5290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.461418][ T5290] batman_adv: batadv0: Interface activated: batadv_slave_1
[  130.471103][ T5387]  __kasan_slab_alloc+0x1e/0x80
[  130.504129][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  130.513598][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  130.515107][ T5387]  slab_post_alloc_hook+0x4b/0x490
[  130.526595][ T5290] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.530689][ T5387]  kmem_cache_alloc+0x18b/0x2f0
[  130.543066][ T5387]  getname_flags+0xb7/0x500
[  130.546584][ T5290] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.547663][ T5387]  do_sys_openat2+0xdd/0x4f0
[  130.561205][ T5387]  __x64_sys_openat+0x135/0x160
[  130.566167][ T5387]  do_syscall_64+0x4c/0xa0
[  130.566437][ T5290] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.570714][ T5387]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  130.589842][ T5290] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  130.703002][ T5391] gsmld_receive_buf: 00000000: f9                                               .
[  130.750551][ T4678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.775350][ T4678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.797934][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  130.860544][ T4678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.870139][ T4678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.887943][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  130.984672][   T26] audit: type=1800 audit(1786999768.504:19): pid=5395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.278" name="ifname" dev="configfs" ino=37537 res=0 errno=0
[  131.221327][   T49] Bluetooth: hci5: command 0x0419 tx timeout
[  131.291284][ T5366] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  131.483881][ T5364] usb 4-1: USB disconnect, device number 6
[  131.527307][ T2931] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK
[  131.543175][ T4328] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK
[  131.569486][ T2931] sd 1:0:0:0: [sdb] Sense not available.
[  131.582582][ T4328] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK
[  131.600798][ T2931] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B)
[  131.609021][ T4328] sd 1:0:0:1: [sdc] Sense not available.
[  131.629631][ T2931] sd 1:0:0:0: [sdb] 0-byte physical blocks
[  131.650627][ T4328] sd 1:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B)
[  131.658619][ T2931] sd 1:0:0:0: [sdb] Write Protect is off
[  131.678755][ T4328] sd 1:0:0:1: [sdc] 0-byte physical blocks
[  131.685621][ T2931] sd 1:0:0:0: [sdb] Asking for cache data failed
[  131.692856][ T4328] sd 1:0:0:1: [sdc] Test WP failed, assume Write Enabled
[  131.709590][ T2931] sd 1:0:0:0: [sdb] Assuming drive cache: write through
[  131.720075][ T4328] sd 1:0:0:1: [sdc] Asking for cache data failed
[  131.739437][ T4328] sd 1:0:0:1: [sdc] Assuming drive cache: write through
[  131.756175][ T2931] sd 1:0:0:0: [sdb] Attached SCSI removable disk
[  131.805090][ T4328] sd 1:0:0:1: [sdc] Attached SCSI removable disk
[  131.848802][ T4534] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK
[  132.087929][   T49] Bluetooth: hci4: unexpected event for opcode 0x041b
[  132.088287][ T5413] Bluetooth: MGMT ver 1.22
[  132.303380][ T4534] udevd[4534]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory
[  132.370727][ T4519] udevd[4519]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory
[  132.555582][ T4583] udevd[4583]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory
[  132.621165][ T4540] udevd[4540]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory
[  132.695487][ T5422] ima: policy update failed
[  132.700217][   T26] audit: type=1802 audit(1786999770.214:20): pid=5422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.284" res=0 errno=0
[  132.825089][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  132.831554][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  132.876272][ T5427] page:ffffea00015f8000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00
[  132.896477][ T5427] head:ffffea00015f8000 order:3 compound_mapcount:0 compound_pincount:0
[  132.910554][ T5427] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  132.919916][ T5427] raw: 00fff00000010200 ffffea0001d9bc00 dead000000000002 ffff888017442140
[  132.929248][ T5427] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[  132.938808][ T5427] page dumped because: unmovable page
[  132.944369][ T5427] page_owner tracks the page as allocated
[  132.950138][ T5427] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4395, tgid 4395 (udevd), ts 106412783097, free_ts 106406762568
[  132.972750][ T5427]  post_alloc_hook+0x173/0x1a0
[  132.977601][ T5427]  get_page_from_freelist+0x206b/0x2180
[  132.983460][ T5427]  __alloc_pages+0x1ec/0x4f0
[  132.988137][ T5427]  alloc_slab_page+0x5d/0x180
[  132.994854][ T5427]  new_slab+0x87/0x2d0
[  132.999048][ T5427]  ___slab_alloc+0xbc5/0x1240
[  133.004374][ T5427]  __kmem_cache_alloc_node+0x126/0x270
[  133.009976][ T5427]  kmalloc_trace+0x26/0xe0
[  133.014858][ T5427]  uevent_show+0x154/0x320
[  133.019374][ T5427]  dev_attr_show+0x50/0xb0
[  133.024500][ T5427]  sysfs_kf_seq_show+0x349/0x4b0
[  133.046694][ T5427]  seq_read_iter+0x460/0xc50
[  133.052588][ T5427]  vfs_read+0x471/0x960
[  133.056890][ T5427]  ksys_read+0x14d/0x260
[  133.061295][ T5427]  do_syscall_64+0x4c/0xa0
[  133.065865][ T5427]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  133.076501][ T5427] page last free stack trace:
[  133.081803][ T5427]  free_unref_page_prepare+0x8e5/0x9e0
[  133.087745][ T5427]  free_unref_page+0x2e/0x3f0
[  133.092798][ T5427]  __unfreeze_partials+0x188/0x1e0
[  133.099281][ T5427]  put_cpu_partial+0x17c/0x250
[  133.106278][ T5427]  qlist_free_all+0x76/0xe0
[  133.111875][ T5427]  kasan_quarantine_reduce+0x144/0x160
[  133.117413][ T5427]  __kasan_slab_alloc+0x1e/0x80
[  133.122828][ T5427]  slab_post_alloc_hook+0x4b/0x490
[  133.128076][ T5427]  kmem_cache_alloc+0x18b/0x2f0
[  133.133269][ T5427]  getname_flags+0xb7/0x500
[  133.137828][ T5427]  do_sys_openat2+0xdd/0x4f0
[  133.143767][ T5427]  __x64_sys_openat+0x135/0x160
[  133.148887][ T5427]  do_syscall_64+0x4c/0xa0
[  133.153434][ T5427]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  133.312047][ T5432] gsmld_receive_buf: 00000000: 03                                               .
[  133.347710][ T5432] gsmld_receive_buf: 00000000: 3f                                               ?
[  133.362334][ T5432] gsmld_receive_buf: 00000000: 01                                               .
[  133.375767][ T5432] gsmld_receive_buf: 00000000: 1c                                               .
[  133.389007][ T5432] gsmld_receive_buf: 00000000: f9                                               .
[  133.961832][   T26] audit: type=1800 audit(1786999771.484:21): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.290" name="ifname" dev="configfs" ino=36801 res=0 errno=0
[  134.118677][ T5366] usb 6-1: unable to read config index 0 descriptor/start: -71
[  134.156147][ T5366] usb 6-1: can't read configurations, error -71
[  134.264192][ T5445] md: array md0 already has disks!
[  134.297088][ T5445] md: could not open device unknown-block(7,0).
[  134.333804][ T5445] md: error, md_import_device() returned -16
[  134.381254][ T5450] md: could not open device unknown-block(7,1).
[  134.387622][ T5450] md: error, md_import_device() returned -16
[  134.464856][ T5453] gsmld_receive_buf: 00000000: f9                                               .
[  134.494748][ T5445] md: could not open device unknown-block(7,2).
[  134.541295][ T5445] md: error, md_import_device() returned -16
[  134.707764][   T26] audit: type=1807 audit(1786999772.224:22): action=measure UNKNOWN=u res=0
[  134.714355][ T5457] ima: policy update failed
[  134.739708][   T26] audit: type=1802 audit(1786999772.234:23): pid=5458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.295" res=0 errno=0
[  134.765792][ T5455] md/raid:md0: not clean -- starting background reconstruction
[  134.801120][ T5455] md/raid:md0: device nullb0 operational as raid disk 0
[  134.828830][ T5455] md/raid:md0: device loop2 operational as raid disk 2
[  134.835994][   T26] audit: type=1802 audit(1786999772.264:24): pid=5457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.295" res=0 errno=0
[  134.865811][ T5455] md/raid:md0: device loop1 operational as raid disk 1
[  134.900392][ T5455] md: pers->run() failed ...
[  134.959523][ T4280] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  134.976071][ T4280] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  134.987108][ T4280] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  135.004429][ T5450] md: could not open device unknown-block(7,3).
[  135.011768][ T5450] md: error, md_import_device() returned -16
[  135.021615][ T4280] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  135.029246][ T4280] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  135.036822][ T4280] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  135.099875][ T5461] lo speed is unknown, defaulting to 1000
[  135.300471][ T5469] page:ffffea0001210000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48400
[  135.376212][ T5469] head:ffffea0001210000 order:10 compound_mapcount:0 compound_pincount:0
[  135.481899][ T5469] flags: 0xfff00000010000(head|node=0|zone=1|lastcpupid=0x7ff)
[  135.512801][ T5469] raw: 00fff00000010000 0000000000000000 dead000000000122 0000000000000000
[  135.547230][ T5474] gsmld_receive_buf: 00000000: f9                                               .
[  135.621361][ T5469] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  135.649212][ T5476] gsmld_receive_buf: 00000000: 03                                               .
[  135.661038][ T5469] page dumped because: unmovable page
[  135.666469][ T5469] page_owner tracks the page as allocated
[  135.715980][ T5474] gsmld_receive_buf: 00000000: 3f                                               ?
[  135.808851][ T5469] page last allocated via order 10, migratetype Unmovable, gfp_mask 0x140dc0(GFP_USER|__GFP_COMP|__GFP_ZERO), pid 5467, tgid 5465 (syz.3.298), ts 135227665141, free_ts 135204004608
[  135.882384][ T5469]  post_alloc_hook+0x173/0x1a0
[  135.883448][ T5480] gsmld_receive_buf: 00000000: 01                                               .
[  135.887341][ T5469]  get_page_from_freelist+0x206b/0x2180
[  135.902438][ T5469]  __alloc_pages+0x1ec/0x4f0
[  135.952582][ T5474] gsmld_receive_buf: 00000000: 1c                                               .
[  135.962130][ T5469]  __kmalloc_large_node+0x8c/0x1f0
[  135.968522][ T5469]  __kmalloc+0x113/0x240
[  135.973132][ T5469]  max_vclocks_store+0x22e/0x3b0
[  136.011104][ T5469]  kernfs_fop_write_iter+0x3a0/0x520
[  136.016705][ T5469]  vfs_write+0x482/0x9a0
[  136.054860][ T5461] chnl_net:caif_netlink_parms(): no params data found
[  136.059170][ T5472] gsmld_receive_buf: 00000000: f9                                               .
[  136.061943][ T5469]  ksys_write+0x14d/0x260
[  136.093655][ T5469]  do_syscall_64+0x4c/0xa0
[  136.123104][ T5469]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  136.135498][ T5469] page last free stack trace:
[  136.146943][ T5469]  __free_pages_ok+0xb7b/0xcb0
[  136.159287][ T5472] <-- 0) R: SABM(P)
[  136.159352][ T5472] Q-> 0) R: 
[  136.160324][ T5469]  free_large_kmalloc+0xfd/0x1a0
[  136.188067][ T5469]  max_vclocks_store+0x2a3/0x3b0
[  136.194369][ T5472] UA(P)
[  136.194445][ T5366] gsm_send_packet: 00000000: f9 03 73 01 d7 f9                                ..s...
[  136.201053][ T5469]  kernfs_fop_write_iter+0x3a0/0x520
[  136.206685][ T5366] --> 0) R: UA(P)
[  136.206739][ T5366] 03 73 01 d7                                      .s..
[  136.206759][ T5366] gsmld_output: 00000000: f9 03 73 01 d7 f9                                ..s...
[  136.216735][ T5461] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.224581][ T5469]  vfs_write+0x482/0x9a0
[  136.244136][ T5461] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.251495][ T2931] gsmld_receive_buf: 00000000: 5e 43 73 5e 41 d7 f9                             ^Cs^A..
[  136.261979][ T5469]  ksys_write+0x14d/0x260
[  136.266408][ T5469]  do_syscall_64+0x4c/0xa0
[  136.272935][ T5461] device bridge_slave_0 entered promiscuous mode
[  136.286125][ T5461] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.299520][ T5469]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  136.315175][ T5461] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.340476][ T5461] device bridge_slave_1 entered promiscuous mode
[  136.449372][ T5461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  136.498540][ T5461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  136.554552][ T5493] gsmld_receive_buf: 00000000: f9                                               .
[  136.627471][ T5461] team0: Port device team_slave_0 added
[  136.655196][ T5461] team0: Port device team_slave_1 added
[  136.732691][ T5461] batman_adv: batadv0: Adding interface: batadv_slave_0
[  136.749563][ T5461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.779280][ T5461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.794744][   T26] audit: type=1800 audit(1786999774.314:25): pid=5495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.306" name="ifname" dev="configfs" ino=37796 res=0 errno=0
[  136.809105][ T5496] ima: policy update failed
[  136.817158][ T5461] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.821282][ T5365] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  136.837092][ T5461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.863942][   T26] audit: type=1807 audit(1786999774.314:26): action=measure UNKNOWN=u res=0
[  136.875904][   T26] audit: type=1802 audit(1786999774.314:27): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.307" res=0 errno=0
[  136.894922][ T5461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  136.906716][   T26] audit: type=1802 audit(1786999774.334:28): pid=5496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.307" res=0 errno=0
[  137.034596][ T5365] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  137.061085][   T49] Bluetooth: hci6: command 0x0409 tx timeout
[  137.082022][ T5365] usb 4-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 0.00
[  137.101686][ T5461] device hsr_slave_0 entered promiscuous mode
[  137.106564][ T5365] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.126009][ T5365] usb 4-1: Product: syz
[  137.130509][ T5365] usb 4-1: Manufacturer: syz
[  137.138723][ T5365] usb 4-1: SerialNumber: syz
[  137.160567][ T5492] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  137.171917][ T5492] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  137.174131][ T5461] device hsr_slave_1 entered promiscuous mode
[  137.191276][ T5365] keyspan 4-1:1.0: Keyspan 1 port adapter converter detected
[  137.206953][ T5365] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84
[  137.218493][ T5461] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  137.231295][ T5365] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81
[  137.248398][ T5365] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 82
[  137.264526][ T5461] Cannot create hsr debugfs directory
[  137.273049][ T5365] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1
[  137.286936][ T5365] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2
[  137.335040][ T5365] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 83
[  137.366667][ T5365] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 3
[  137.404915][ T5365] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  137.460773][   T22] usb 4-1: USB disconnect, device number 7
[  137.488202][   T22] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  137.498626][ T5512] md: array md0 already has disks!
[  137.504434][   T22] keyspan 4-1:1.0: device disconnected
[  137.524313][ T5512] md: could not open device unknown-block(7,0).
[  137.532768][ T5512] md: error, md_import_device() returned -16
[  137.556494][ T5512] md: could not open device unknown-block(7,1).
[  137.587285][ T5512] md: error, md_import_device() returned -16
[  137.601224][ T5516] md: could not open device unknown-block(7,2).
[  137.609973][ T5516] md: error, md_import_device() returned -16
[  137.695689][ T5461] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  137.707282][ T5461] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  137.720565][ T5461] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  137.732811][ T5461] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  137.737796][ T5512] md/raid:md0: not clean -- starting background reconstruction
[  137.748024][ T5512] md/raid:md0: device nullb0 operational as raid disk 0
[  137.755506][ T5512] md/raid:md0: device loop2 operational as raid disk 2
[  137.763003][ T5512] md/raid:md0: device loop1 operational as raid disk 1
[  137.770172][ T5512] md: pers->run() failed ...
[  137.822674][ T5516] md: could not open device unknown-block(7,3).
[  137.829384][ T5516] md: error, md_import_device() returned -16
[  137.854561][ T5461] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.899643][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  137.938906][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  137.980529][ T5461] 8021q: adding VLAN 0 to HW filter on device team0
[  138.018676][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  138.045415][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  138.061694][ T2931] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.068891][ T2931] bridge0: port 1(bridge_slave_0) entered forwarding state
[  138.166350][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  138.200893][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  138.248072][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  138.267833][ T2931] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.275024][ T2931] bridge0: port 2(bridge_slave_1) entered forwarding state
[  138.349787][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  138.412990][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  138.449827][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  138.470793][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  138.513019][ T5526] page:ffffea0001210000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48400
[  138.532814][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  138.550144][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  138.573097][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  138.595476][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  138.601618][ T5530] gsmld_receive_buf: 00000000: f9                                               .
[  138.610750][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  138.621834][ T5526] head:ffffea0001210000 order:10 compound_mapcount:0 compound_pincount:0
[  138.633812][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  138.641597][ T5526] flags: 0xfff00000010000(head|node=0|zone=1|lastcpupid=0x7ff)
[  138.649274][ T5526] raw: 00fff00000010000 0000000000000000 dead000000000122 0000000000000000
[  138.649699][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  138.703382][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  138.719201][ T5526] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  138.753425][ T5526] page dumped because: unmovable page
[  138.758901][ T5526] page_owner tracks the page as allocated
[  138.801187][ T5526] page last allocated via order 10, migratetype Unmovable, gfp_mask 0x140dc0(GFP_USER|__GFP_COMP|__GFP_ZERO), pid 5467, tgid 5465 (syz.3.298), ts 135227665141, free_ts 135204004608
[  138.882136][ T5526]  post_alloc_hook+0x173/0x1a0
[  138.898967][ T5526]  get_page_from_freelist+0x206b/0x2180
[  138.909642][ T5526]  __alloc_pages+0x1ec/0x4f0
[  138.916567][ T5536] gsmld_receive_buf: 00000000: f9                                               .
[  138.925164][ T5526]  __kmalloc_large_node+0x8c/0x1f0
[  138.956375][ T5526]  __kmalloc+0x113/0x240
[  138.969688][ T5526]  max_vclocks_store+0x22e/0x3b0
[  138.982731][ T5526]  kernfs_fop_write_iter+0x3a0/0x520
[  138.998464][ T5526]  vfs_write+0x482/0x9a0
[  139.023220][ T5526]  ksys_write+0x14d/0x260
[  139.027768][ T5537] gsmld_receive_buf: 00000000: 03                                               .
[  139.036702][ T5526]  do_syscall_64+0x4c/0xa0
[  139.087809][ T5526]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  139.109603][ T5539] gsmld_receive_buf: 00000000: 3f                                               ?
[  139.133296][   T26] audit: type=1807 audit(1786999776.654:29): action=measure UNKNOWN=u res=0
[  139.143782][ T5540] ima: policy update failed
[  139.153723][   T49] Bluetooth: hci6: command 0x041b tx timeout
[  139.156252][   T26] audit: type=1802 audit(1786999776.664:30): pid=5541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.319" res=0 errno=0
[  139.160827][ T5526] page last free stack trace:
[  139.178043][ T5536] gsmld_receive_buf: 00000000: 01                                               .
[  139.182776][ T5526]  __free_pages_ok+0xb7b/0xcb0
[  139.196954][ T5526]  free_large_kmalloc+0xfd/0x1a0
[  139.202022][ T5526]  max_vclocks_store+0x2a3/0x3b0
[  139.207137][ T5526]  kernfs_fop_write_iter+0x3a0/0x520
[  139.212919][ T5526]  vfs_write+0x482/0x9a0
[  139.217219][ T5526]  ksys_write+0x14d/0x260
[  139.223552][ T5526]  do_syscall_64+0x4c/0xa0
[  139.228045][ T5526]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  139.235695][ T5537] gsmld_receive_buf: 00000000: 1c                                               .
[  139.244117][   T26] audit: type=1802 audit(1786999776.724:31): pid=5540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.319" res=0 errno=0
[  139.264032][ T5539] gsmld_receive_buf: 00000000: f9                                               .
[  139.283073][ T5527] page:ffffea00015f8000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00
[  139.325656][ T5539] <-- 0) R: SABM(P)
[  139.325714][ T5539] Q-> 0) R: 
[  139.335405][ T5527] head:ffffea00015f8000 order:3 compound_mapcount:0 compound_pincount:0
[  139.362174][ T5539] UA(P)
[  139.362301][  T128] gsm_send_packet: 00000000: f9 03 73 01 d7 f9                                ..s...
[  139.374587][  T128] --> 0) R: UA(P)
[  139.374618][  T128] 03 73 01 d7                                      .s..
[  139.385227][  T128] gsmld_output: 00000000: f9 03 73 01 d7 f9                                ..s...
[  139.398470][ T2931] gsmld_receive_buf: 00000000: 5e 43 73 5e 41 d7 f9                             ^Cs^A..
[  139.456515][ T5527] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  139.506407][ T5527] raw: 00fff00000010200 ffffea0001d9bc00 dead000000000002 ffff888017442140
[  139.527003][ T5527] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[  139.563092][ T5527] page dumped because: unmovable page
[  139.568547][ T5527] page_owner tracks the page as allocated
[  139.597590][ T5527] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4395, tgid 4395 (udevd), ts 106412783097, free_ts 106406762568
[  139.641782][ T5527]  post_alloc_hook+0x173/0x1a0
[  139.646622][ T5527]  get_page_from_freelist+0x206b/0x2180
[  139.668619][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  139.676117][ T5527]  __alloc_pages+0x1ec/0x4f0
[  139.680751][ T5527]  alloc_slab_page+0x5d/0x180
[  139.689615][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  139.698527][ T5527]  new_slab+0x87/0x2d0
[  139.721468][ T5461] 8021q: adding VLAN 0 to HW filter on device batadv0
[  139.729245][ T5527]  ___slab_alloc+0xbc5/0x1240
[  139.736347][ T5527]  __kmem_cache_alloc_node+0x126/0x270
[  139.749522][ T5527]  kmalloc_trace+0x26/0xe0
[  139.751113][  T128] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  139.759888][ T5527]  uevent_show+0x154/0x320
[  139.779064][ T5527]  dev_attr_show+0x50/0xb0
[  139.792605][ T5527]  sysfs_kf_seq_show+0x349/0x4b0
[  139.799680][ T5527]  seq_read_iter+0x460/0xc50
[  139.805700][ T5527]  vfs_read+0x471/0x960
[  139.812121][ T5527]  ksys_read+0x14d/0x260
[  139.816418][ T5527]  do_syscall_64+0x4c/0xa0
[  139.820882][ T5527]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  139.828218][ T5527] page last free stack trace:
[  139.845139][ T5527]  free_unref_page_prepare+0x8e5/0x9e0
[  139.856018][ T5527]  free_unref_page+0x2e/0x3f0
[  139.860774][ T5527]  __unfreeze_partials+0x188/0x1e0
[  139.870090][ T5527]  put_cpu_partial+0x17c/0x250
[  139.880850][ T5527]  qlist_free_all+0x76/0xe0
[  139.910998][ T5527]  kasan_quarantine_reduce+0x144/0x160
[  139.916540][ T5527]  __kasan_slab_alloc+0x1e/0x80
[  139.927190][ T5527]  slab_post_alloc_hook+0x4b/0x490
[  139.934790][ T5527]  kmem_cache_alloc+0x18b/0x2f0
[  139.954227][ T5527]  getname_flags+0xb7/0x500
[  139.963176][  T128] usb 4-1: not running at top speed; connect to a high speed hub
[  139.963847][ T5527]  do_sys_openat2+0xdd/0x4f0
[  139.976458][ T5527]  __x64_sys_openat+0x135/0x160
[  139.990172][  T128] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.00
[  139.991071][ T5527]  do_syscall_64+0x4c/0xa0
[  140.011093][  T128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.026127][ T5527]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  140.053908][  T128] oti6858 4-1:1.0: oti6858 converter detected
[  140.083587][  T128] usb 4-1: oti6858 converter now attached to ttyUSB0
[  140.146271][   T26] audit: type=1800 audit(1786999777.664:32): pid=5553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.321" name="ifname" dev="configfs" ino=38304 res=0 errno=0
[  140.287164][ T5559] md: array md0 already has disks!
[  140.303312][ T5559] md: could not open device unknown-block(7,0).
[  140.329332][ T5559] md: error, md_import_device() returned -16
[  140.375969][ T5563] md: could not open device unknown-block(7,1).
[  140.404435][ T5563] md: error, md_import_device() returned -16
[  140.413492][ T5559] md: could not open device unknown-block(7,2).
[  140.438925][ T5559] md: error, md_import_device() returned -16
[  140.625151][ T5563] md/raid:md0: not clean -- starting background reconstruction
[  140.634639][ T5563] md/raid:md0: device nullb0 operational as raid disk 0
[  140.642896][ T5563] md/raid:md0: device loop2 operational as raid disk 2
[  140.649819][ T5563] md/raid:md0: device loop1 operational as raid disk 1
[  140.671246][ T5563] md: pers->run() failed ...
[  140.752078][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  140.762660][ T5559] md: could not open device unknown-block(7,3).
[  140.773541][ T5559] md: error, md_import_device() returned -16
[  140.784541][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  140.817510][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  140.856200][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  140.891242][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  140.932930][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  140.979947][ T5461] device veth0_vlan entered promiscuous mode
[  141.035069][ T5461] device veth1_vlan entered promiscuous mode
[  141.046247][ T5366] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  141.189507][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  141.216761][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  141.231391][   T49] Bluetooth: hci6: command 0x040f tx timeout
[  141.242955][ T5366] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  141.249197][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  141.271183][ T5366] usb 5-1: New USB device found, idVendor=1a2b, idProduct=3c4d, bcdDevice= 1.00
[  141.290325][ T5366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.299599][ T5364] usb 4-1: USB disconnect, device number 8
[  141.321525][ T5366] hub 5-1:1.0: USB hub found
[  141.327613][ T5364] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0
[  141.337810][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  141.348900][ T5364] oti6858 4-1:1.0: device disconnected
[  141.358915][ T5461] device veth0_macvtap entered promiscuous mode
[  141.407115][ T5461] device veth1_macvtap entered promiscuous mode
[  141.433553][ T5461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.445269][ T5461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.469220][ T5461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.480188][ T5461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.498366][ T5580] gsmld_receive_buf: 00000000: f9                                               .
[  141.507890][ T5461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.519817][ T5461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.531054][ T5461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.542020][ T5461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.555250][ T5461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.593147][ T5461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.604103][ T5461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.614688][ T5461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.626433][ T5461] batman_adv: batadv0: Interface activated: batadv_slave_0
[  141.637477][ T5461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.649480][ T5461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.660524][ T5461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.671399][ T5461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.681497][ T5461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.692247][ T5461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.704016][ T5461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.714767][ T5461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.730389][ T5461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.741206][ T5461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.751115][ T5461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.761667][ T5461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.783981][ T5461] batman_adv: batadv0: Interface activated: batadv_slave_1
[  141.806102][ T5461] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.815782][ T5461] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.825531][ T5461] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.861349][ T5361] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  141.861541][ T5461] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.911701][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  141.924542][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  141.933017][ T5366] hub 5-1:1.0: config failed, can't read hub descriptor (err -22)
[  141.943140][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  141.963139][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  141.972647][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  141.982738][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  142.045893][ T5361] usb 6-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00
[  142.059535][ T5361] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.071959][ T5361] usb 6-1: Product: syz
[  142.076246][ T5361] usb 6-1: Manufacturer: syz
[  142.081544][ T5361] usb 6-1: SerialNumber: syz
[  142.131102][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.146048][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.182467][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  142.243082][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.255991][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.268651][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  142.298973][   T26] audit: type=1807 audit(1786999779.814:33): action=measure uid>10 res=1
[  142.299065][ T5585] ima: policy update completed
[  142.328888][   T26] audit: type=1802 audit(1786999779.844:34): pid=5585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.1.331" res=1 errno=0
[  142.553458][ T5593] gsmld_receive_buf: 00000000: f9                                               .
[  142.652642][ T5595] gsmld_receive_buf: 00000000: 03                                               .
[  142.725876][ T5597] gsmld_receive_buf: 00000000: 3f                                               ?
[  142.781266][ T5591] gsmld_receive_buf: 00000000: 01                                               .
[  142.802159][ T5591] gsmld_receive_buf: 00000000: 1c                                               .
[  142.866119][ T5593] gsmld_receive_buf: 00000000: f9                                               .
[  142.906474][ T5593] <-- 0) R: SABM(P)
[  142.906554][ T5593] Q-> 0) R: UA(P)
[  142.934622][   T22] gsm_send_packet: 00000000: f9 03 73 01 d7 f9                                ..s...
[  142.947778][   T22] --> 0) R: UA(P)
[  142.947811][   T22] 03 73 01 d7                                      .s..
[  142.958402][   T22] gsmld_output: 00000000: f9 03 73 01 d7 f9                                ..s...
[  142.969018][   T46] gsmld_receive_buf: 00000000: 5e 43 73 5e 41 d7 f9                             ^Cs^A..
[  143.019645][ T5601] page:ffffea0001210000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48400
[  143.054814][ T5601] head:ffffea0001210000 order:10 compound_mapcount:0 compound_pincount:0
[  143.142559][ T5601] flags: 0xfff00000010000(head|node=0|zone=1|lastcpupid=0x7ff)
[  143.199026][ T5601] raw: 00fff00000010000 0000000000000000 dead000000000122 0000000000000000
[  143.263616][ T5601] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  143.281157][ T5601] page dumped because: unmovable page
[  143.286804][ T5601] page_owner tracks the page as allocated
[  143.293576][ T4349] usb 5-1: USB disconnect, device number 3
[  143.301069][   T49] Bluetooth: hci6: command 0x0419 tx timeout
[  143.318222][ T5601] page last allocated via order 10, migratetype Unmovable, gfp_mask 0x140dc0(GFP_USER|__GFP_COMP|__GFP_ZERO), pid 5467, tgid 5465 (syz.3.298), ts 135227665141, free_ts 135204004608
[  143.366579][ T5601]  post_alloc_hook+0x173/0x1a0
[  143.384629][ T5601]  get_page_from_freelist+0x206b/0x2180
[  143.398056][ T5601]  __alloc_pages+0x1ec/0x4f0
[  143.408571][ T5601]  __kmalloc_large_node+0x8c/0x1f0
[  143.427853][ T5601]  __kmalloc+0x113/0x240
[  143.441098][ T5601]  max_vclocks_store+0x22e/0x3b0
[  143.458705][ T5601]  kernfs_fop_write_iter+0x3a0/0x520
[  143.484400][ T5601]  vfs_write+0x482/0x9a0
[  143.503683][ T5601]  ksys_write+0x14d/0x260
[  143.519466][ T5601]  do_syscall_64+0x4c/0xa0
[  143.531051][ T5601]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  143.537029][ T5601] page last free stack trace:
[  143.581155][ T5601]  __free_pages_ok+0xb7b/0xcb0
[  143.586504][ T5601]  free_large_kmalloc+0xfd/0x1a0
[  143.602971][ T5601]  max_vclocks_store+0x2a3/0x3b0
[  143.613687][ T5601]  kernfs_fop_write_iter+0x3a0/0x520
[  143.624724][ T5601]  vfs_write+0x482/0x9a0
[  143.634628][ T5601]  ksys_write+0x14d/0x260
[  143.644789][ T5601]  do_syscall_64+0x4c/0xa0
[  143.655188][ T5601]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  143.920578][ T5614] md: array md0 already has disks!
[  143.955595][ T5614] md: could not open device unknown-block(7,0).
[  143.998503][ T5614] md: error, md_import_device() returned -16
[  144.016612][ T5619] md: could not open device unknown-block(7,1).
[  144.037041][ T5619] md: error, md_import_device() returned -16
[  144.047917][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  144.053826][ T5614] md: could not open device unknown-block(7,2).
[  144.078653][ T5614] md: error, md_import_device() returned -16
[  144.151712][ T5623] vcan0: tx drop: invalid sa for name 0x0102030405060708
[  144.193253][ T5614] md/raid:md0: not clean -- starting background reconstruction
[  144.216865][ T5614] md/raid:md0: device nullb0 operational as raid disk 0
[  144.235374][ T5614] md/raid:md0: device loop2 operational as raid disk 2
[  144.264161][ T5614] md/raid:md0: device loop1 operational as raid disk 1
[  144.290513][ T5614] md: pers->run() failed ...
[  144.299996][ T5625] gsmld_receive_buf: 00000000: f9                                               .
[  144.376980][ T5619] md: could not open device unknown-block(7,3).
[  144.390341][ T5619] md: error, md_import_device() returned -16
[  144.690196][ T4323] usb 6-1: USB disconnect, device number 4
[  144.694012][   T26] audit: type=1807 audit(1786999782.204:35): action=measure UNKNOWN=uid> res=0
[  144.731287][ T5631] ima: policy update failed
[  144.741398][   T26] audit: type=1802 audit(1786999782.254:36): pid=5632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.342" res=0 errno=0
[  144.829983][   T26] audit: type=1802 audit(1786999782.254:37): pid=5631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.342" res=0 errno=0
[  144.890892][ T5638] gsmld_receive_buf: 00000000: f9                                               .
[  144.930659][ T5638] gsmld_receive_buf: 00000000: 03                                               .
[  144.949339][ T5638] gsmld_receive_buf: 00000000: 3f                                               ?
[  144.961745][ T5638] gsmld_receive_buf: 00000000: 01                                               .
[  145.000624][ T5638] gsmld_receive_buf: 00000000: 1c                                               .
[  145.204699][ T5646] md: could not open device unknown-block(250,0).
[  145.559212][ T5656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.354'.
[  145.577000][ T5656] siw: device registration error -23
[  145.661633][ T4349] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  145.689495][ T5658] 
[  145.691875][ T5658] ======================================================
[  145.695861][ T5648] loop4: detected capacity change from 0 to 32768
[  145.698879][ T5658] WARNING: possible circular locking dependency detected
[  145.698898][ T5658] syzkaller #0 Not tainted
[  145.698907][ T5658] ------------------------------------------------------
[  145.698912][ T5658] syz.6.355/5658 is trying to acquire lock:
[  145.698921][ T5658] ffffffff8d7b2f90 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: uvcg_streaming_header_allow_link+0x6d/0x4a0
[  145.740919][ T5658] 
[  145.740919][ T5658] but task is already holding lock:
[  145.748293][ T5658] ffff888057750b70 (&sb->s_type->i_mutex_key#23){++++}-{3:3}, at: configfs_symlink+0x47b/0x13c0
[  145.758733][ T5658] 
[  145.758733][ T5658] which lock already depends on the new lock.
[  145.758733][ T5658] 
[  145.769153][ T5658] 
[  145.769153][ T5658] the existing dependency chain (in reverse order) is:
[  145.778171][ T5658] 
[  145.778171][ T5658] -> #2 (&sb->s_type->i_mutex_key#23){++++}-{3:3}:
[  145.786855][ T5658]        down_write+0x36/0x60
[  145.791537][ T5658]        configfs_depend_item_unlocked+0x14f/0x430
[  145.798071][ T5658]        usbg_make_tpg+0x1f3/0x580
[  145.803184][ T5658]        target_fabric_make_tpg+0xa0/0x6d0
[  145.809012][ T5658]        configfs_mkdir+0x511/0x9e0
[  145.814206][ T5658]        vfs_mkdir+0x386/0x570
[  145.818958][ T5658]        do_mkdirat+0x1d8/0x440
[  145.823801][ T5658]        __x64_sys_mkdirat+0x85/0x90
[  145.829077][ T5658]        do_syscall_64+0x4c/0xa0
[  145.834008][ T5658]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  145.840437][ T5658] 
[  145.840437][ T5658] -> #1 (&opts->dep_lock){+.+.}-{3:3}:
[  145.848074][ T5658]        __mutex_lock+0x12d/0xae0
[  145.853095][ T5658]        tcm_set_name+0x26/0x90
[  145.858032][ T5658]        function_make+0x195/0x350
[  145.863222][ T5658]        configfs_mkdir+0x511/0x9e0
[  145.868418][ T5658]        vfs_mkdir+0x386/0x570
[  145.873174][ T5658]        do_mkdirat+0x1d8/0x440
[  145.878022][ T5658]        __x64_sys_mkdirat+0x85/0x90
[  145.883297][ T5658]        do_syscall_64+0x4c/0xa0
[  145.888235][ T5658]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  145.894649][ T5658] 
[  145.894649][ T5658] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}:
[  145.902919][ T5658]        __lock_acquire+0x2d18/0x7c40
[  145.908464][ T5658]        lock_acquire+0x1bb/0x4a0
[  145.913492][ T5658]        __mutex_lock+0x12d/0xae0
[  145.918513][ T5658]        uvcg_streaming_header_allow_link+0x6d/0x4a0
[  145.925186][ T5658]        configfs_symlink+0x5a4/0x13c0
[  145.930635][ T5658]        vfs_symlink+0x245/0x3d0
[  145.935564][ T5658]        do_symlinkat+0x1b6/0x400
[  145.940603][ T5658]        __x64_sys_symlink+0x7a/0x90
[  145.945877][ T5658]        do_syscall_64+0x4c/0xa0
[  145.950813][ T5658]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  145.957220][ T5658] 
[  145.957220][ T5658] other info that might help us debug this:
[  145.957220][ T5658] 
[  145.967435][ T5658] Chain exists of:
[  145.967435][ T5658]   gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#23
[  145.967435][ T5658] 
[  145.982131][ T5658]  Possible unsafe locking scenario:
[  145.982131][ T5658] 
[  145.989575][ T5658]        CPU0                    CPU1
[  145.994929][ T5658]        ----                    ----
[  146.000284][ T5658]   lock(&sb->s_type->i_mutex_key#23);
[  146.005743][ T5658]                                lock(&opts->dep_lock);
[  146.012666][ T5658]                                lock(&sb->s_type->i_mutex_key#23);
[  146.020648][ T5658]   lock(gadget_subsys.su_mutex);
[  146.025662][ T5658] 
[  146.025662][ T5658]  *** DEADLOCK ***
[  146.025662][ T5658] 
[  146.033794][ T5658] 2 locks held by syz.6.355/5658:
[  146.038807][ T5658]  #0: ffff88801f2e6460 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  146.048035][ T5658]  #1: ffff888057750b70 (&sb->s_type->i_mutex_key#23){++++}-{3:3}, at: configfs_symlink+0x47b/0x13c0
[  146.058903][ T5658] 
[  146.058903][ T5658] stack backtrace:
[  146.064795][ T5658] CPU: 0 PID: 5658 Comm: syz.6.355 Not tainted syzkaller #0
[  146.072070][ T5658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  146.082123][ T5658] Call Trace:
[  146.085395][ T5658]  <TASK>
[  146.088315][ T5658]  dump_stack_lvl+0x188/0x24e
[  146.092999][ T5658]  ? load_image+0x410/0x410
[  146.097497][ T5658]  ? show_regs_print_info+0x12/0x12
[  146.102695][ T5658]  ? print_circular_bug+0x12b/0x1a0
[  146.107897][ T5658]  check_noncircular+0x296/0x330
[  146.112831][ T5658]  ? add_chain_block+0x9b0/0x9b0
[  146.117768][ T5658]  ? lockdep_lock+0xf1/0x1f0
[  146.122355][ T5658]  ? _find_first_zero_bit+0xd2/0x100
[  146.127637][ T5658]  __lock_acquire+0x2d18/0x7c40
[  146.132488][ T5658]  ? __kernel_text_address+0x9/0x30
[  146.137682][ T5658]  ? stack_trace_save+0xf0/0xf0
[  146.142536][ T5658]  ? verify_lock_unused+0x140/0x140
[  146.147736][ T5658]  ? mark_lock+0x94/0x320
[  146.152095][ T5658]  ? __lock_acquire+0x1465/0x7c40
[  146.157121][ T5658]  lock_acquire+0x1bb/0x4a0
[  146.161645][ T5658]  ? uvcg_streaming_header_allow_link+0x6d/0x4a0
[  146.167981][ T5658]  ? __might_sleep+0xd0/0xd0
[  146.172566][ T5658]  ? read_lock_is_recursive+0x10/0x10
[  146.177938][ T5658]  ? mark_lock+0x94/0x320
[  146.182263][ T5658]  __mutex_lock+0x12d/0xae0
[  146.186763][ T5658]  ? uvcg_streaming_header_allow_link+0x6d/0x4a0
[  146.193090][ T5658]  ? uvcg_streaming_header_allow_link+0x6d/0x4a0
[  146.199416][ T5658]  ? mutex_lock_nested+0x10/0x10
[  146.204350][ T5658]  ? rwsem_write_trylock+0x135/0x1c0
[  146.209627][ T5658]  ? clear_nonspinnable+0x60/0x60
[  146.214646][ T5658]  uvcg_streaming_header_allow_link+0x6d/0x4a0
[  146.220797][ T5658]  ? inode_permission+0xef/0x480
[  146.225727][ T5658]  ? bpf_lsm_inode_permission+0x5/0x10
[  146.231184][ T5658]  ? security_inode_permission+0xac/0xf0
[  146.236811][ T5658]  configfs_symlink+0x5a4/0x13c0
[  146.241743][ T5658]  ? end_current_label_crit_section+0x14b/0x170
[  146.247995][ T5658]  ? common_perm+0x15d/0x1b0
[  146.252580][ T5658]  ? from_kgid+0x14f/0x6a0
[  146.256992][ T5658]  ? make_kgid+0x650/0x650
[  146.261399][ T5658]  ? apparmor_path_symlink+0x1ac/0x230
[  146.266852][ T5658]  ? lookup_one_qstr_excl+0x11c/0x240
[  146.272217][ T5658]  ? detach_groups+0x370/0x370
[  146.276974][ T5658]  ? inode_permission+0xef/0x480
[  146.281899][ T5658]  ? bpf_lsm_inode_symlink+0x5/0x10
[  146.287096][ T5658]  ? security_inode_symlink+0xb2/0x100
[  146.292546][ T5658]  vfs_symlink+0x245/0x3d0
[  146.296957][ T5658]  do_symlinkat+0x1b6/0x400
[  146.301454][ T5658]  ? vfs_symlink+0x3d0/0x3d0
[  146.306038][ T5658]  ? getname_flags+0x206/0x500
[  146.310795][ T5658]  __x64_sys_symlink+0x7a/0x90
[  146.315552][ T5658]  do_syscall_64+0x4c/0xa0
[  146.319965][ T5658]  ? clear_bhb_loop+0x60/0xb0
[  146.324652][ T5658]  ? clear_bhb_loop+0x60/0xb0
[  146.329324][ T5658]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  146.335220][ T5658] RIP: 0033:0x7eff0179e0d9
[  146.339661][ T5658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  146.359265][ T5658] RSP: 002b:00007eff02614028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[  146.367672][ T5658] RAX: ffffffffffffffda RBX: 00007eff01a25fa0 RCX: 00007eff0179e0d9
[  146.375671][ T5658] RDX: 0000000000000000 RSI: 0000200000001500 RDI: 0000200000001400
[  146.383639][ T5658] RBP: 00007eff01835024 R08: 0000000000000000 R09: 0000000000000000
[  146.391608][ T5658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  146.399571][ T5658] R13: 00007eff01a26038 R14: 00007eff01a25fa0 R15: 00007fff6573a968
[  146.407543][ T5658]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  146.435032][ T5648] (syz.4.350,5648,1):ocfs2_check_set_options:1206 ERROR: User quotas were requested, but this filesystem does not have the feature enabled.
[  146.455841][ T5648] (syz.4.350,5648,0):ocfs2_fill_super:1176 ERROR: status = -22
[  146.513189][ T4349] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  146.566633][ T4349] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.097645][   T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.165269][   T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.202473][ T4349] usb 4-1: can't set config #1, error -71
[  147.222913][ T4349] usb 4-1: USB disconnect, device number 9
[  147.255507][   T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.314800][   T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.182798][   T11] device hsr_slave_0 left promiscuous mode
[  148.189050][   T11] device hsr_slave_1 left promiscuous mode
[  148.204408][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  148.212134][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  148.219906][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  148.227925][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  148.235764][   T11] device bridge_slave_1 left promiscuous mode
[  148.242492][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.250826][   T11] device bridge_slave_0 left promiscuous mode
[  148.258536][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.269110][   T11] device veth1_macvtap left promiscuous mode
[  148.276329][   T11] device veth0_macvtap left promiscuous mode
[  148.282691][   T11] device veth1_vlan left promiscuous mode
[  148.288514][   T11] device veth0_vlan left promiscuous mode
[  148.465118][   T11] team0 (unregistering): Port device team_slave_1 removed
[  148.489420][   T11] team0 (unregistering): Port device team_slave_0 removed
[  148.518276][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  148.544671][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  148.618624][   T11] bond0 (unregistering): Released all slaves
[  149.034296][   T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.069646][   T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.125864][   T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.177636][   T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.256692][   T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.325073][   T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.376384][   T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.425746][   T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.540699][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.577602][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.626736][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.676196][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.949525][   T11] device hsr_slave_0 left promiscuous mode
[  150.956095][   T11] device hsr_slave_1 left promiscuous mode
[  150.963431][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  150.971163][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  150.978742][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.989995][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  150.997703][   T11] device bridge_slave_1 left promiscuous mode
[  151.003955][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.012724][   T11] device bridge_slave_0 left promiscuous mode
[  151.019200][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.030759][   T11] device hsr_slave_0 left promiscuous mode
[  151.037474][   T11] device hsr_slave_1 left promiscuous mode
[  151.043955][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  151.052160][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.061570][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  151.069041][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  151.077161][   T11] device bridge_slave_1 left promiscuous mode
[  151.083641][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.092775][   T11] device bridge_slave_0 left promiscuous mode
[  151.099019][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.110559][   T11] device hsr_slave_0 left promiscuous mode
[  151.117066][   T11] device hsr_slave_1 left promiscuous mode
[  151.123891][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  151.131543][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.139317][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  151.147373][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  151.155734][   T11] device bridge_slave_1 left promiscuous mode
[  151.162489][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.170903][   T11] device bridge_slave_0 left promiscuous mode
[  151.178832][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.194375][   T11] device veth1_macvtap left promiscuous mode
[  151.200485][   T11] device veth0_macvtap left promiscuous mode
[  151.207879][   T11] device veth1_vlan left promiscuous mode
[  151.216143][   T11] device veth0_vlan left promiscuous mode
[  151.224473][   T11] device veth1_macvtap left promiscuous mode
[  151.230555][   T11] device veth0_macvtap left promiscuous mode
[  151.238507][   T11] device veth1_vlan left promiscuous mode
[  151.244871][   T11] device veth0_vlan left promiscuous mode
[  151.254011][   T11] device veth1_macvtap left promiscuous mode
[  151.260084][   T11] device veth0_macvtap left promiscuous mode
[  151.266757][   T11] device veth1_vlan left promiscuous mode
[  151.274206][   T11] device veth0_vlan left promiscuous mode
[  151.501950][   T11] team0 (unregistering): Port device team_slave_1 removed
[  151.528176][   T11] team0 (unregistering): Port device team_slave_0 removed
[  151.554866][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  151.584655][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  151.663492][   T11] bond0 (unregistering): Released all slaves
[  151.812762][   T11] team0 (unregistering): Port device team_slave_1 removed
[  151.837334][   T11] team0 (unregistering): Port device team_slave_0 removed
[  151.859551][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  151.884323][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  151.938006][   T11] bond0 (unregistering): Released all slaves
[  152.082375][   T11] team0 (unregistering): Port device team_slave_1 removed
[  152.106498][   T11] team0 (unregistering): Port device team_slave_0 removed
[  152.128464][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  152.154699][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  152.208532][   T11] bond0 (unregistering): Released all slaves