last executing test programs:

14.066420231s ago: executing program 2 (id=459):
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x5c, 0x100000, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0xecbb, '\x00', @p_u16=0x0}})
syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[], 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000540)='./sys\x00', 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
read$FUSE(r1, &(0x7f0000000c80)={0x2020}, 0x2020)
r2 = openat(r1, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x40042, 0x1)
connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r3, &(0x7f00000000c0)='1', 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
ioctl$XFS_IOC_BULKSTAT(r2, 0x8040587f, &(0x7f0000003140)={{0xfffffffffffffff8, 0x0, 0x7fffffff, 0x5, 0xfffffffa}, &(0x7f0000002cc0)=[{}, {}, {}, {}, {}, {}]})
write(r4, &(0x7f00000001c0)='1', 0x1)

12.775556543s ago: executing program 3 (id=464):
sched_setscheduler(0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b874cd601d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799224883d08ce470220a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d5000000000000007d2bee8ed5acba62b8ce6eee44e813220ebc37ad7d422bb972c33e626d4d13827d303ee15e254c75ee569a56fa9e"], 0x25, 0x55a8, &(0x7f00000014c0)="$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")
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
creat(0x0, 0xdafbe5d6891b6e4)
execve(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f0000000040)={0x0, "5ebcd340010adc324d926cf98acac36f6906aaba2134babc51e914dab943b41e", 0x2, 0x20, 0x6, 0xc, 0x0, 0x4, 0x2, 0x4})
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x3, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000002000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x104000, 0x0, 0x1, 0x0, &(0x7f0000001fc0))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c8100436a91ed24b5573d3a49b542617be688a2e7ff2ef2343feaa54930c6452b02a3b2b9f8404a7dc8dd00daa07c8314506ee97f007d8627a59aa47bf4c85e138c38d826c5df5a7113094cd1472c89314f0000000000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fcdbdf250b000000180001801400020064756d6d793000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x200040c4}, 0x7a712bfc07b8374c)
r6 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r6)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r6)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x35, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r6)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r6)

10.266415685s ago: executing program 2 (id=467):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f00000000c0)=0x1000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r4, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="dd461c0000002f00090025bd7000800000000400000008000c00"], 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x58, 0x0, &(0x7f0000000300)=[@free_buffer, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r5}, @fda={0x66646185, 0x4, 0x1, 0x1a}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/168, 0xa8, 0x0, 0x1e}}, &(0x7f00000002c0)={0x0, 0x18, 0x38}}, 0x400}], 0x0, 0x0, 0x0})

10.081751294s ago: executing program 3 (id=469):
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904"], 0x0)

9.618712146s ago: executing program 1 (id=470):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, &(0x7f0000000200)='md', 0x2)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./img\x00', 0x42, 0x1b6)
ftruncate(r1, 0x2000000)
pwrite64(r1, &(0x7f0000000280)="6269746d04000000001000000500000000000000", 0x14, 0x1000)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r2, 0x40480923, &(0x7f0000000400)="000000000000000000000000000000000100000000040000010000000100000000000000010000000000000000000000010000000100"/72)
ioctl(r2, 0x40140921, &(0x7f0000000500)='\x00\x00\x00\x00\a\x00'/15)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/dev-loop0/offset\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='16\x00', 0x3)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/dev-loop0/size\x00', 0x2, 0x0)
write(r4, &(0x7f0000000840)='65500\x00', 0x6)
close(r4)
close(0xffffffffffffffff)

7.461396s ago: executing program 2 (id=474):
r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
wait4(r0, 0x0, 0x0, &(0x7f0000000100))

6.815235151s ago: executing program 1 (id=477):
openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
unshare(0x22020600)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x10, 0x3, 0x290, 0xf0, 0x160, 0x160, 0x0, 0x0, 0x1c0, 0x280, 0x280, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0xa4}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], [], 'veth0_to_hsr\x00', 'batadv_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x1}, {0x4, 0x6, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="000000280000000407", @ANYRES32=0x0, @ANYRES64=0x0], 0x20)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x3a3081a, &(0x7f00000005c0)={[{@acl}, {@bsdgroups}]}, 0x1, 0x445, &(0x7f0000000f80)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==")
r5 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0)
pwritev2(r5, 0x0, 0x0, 0x5412, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$BLKFLSBUF(r4, 0x1261, 0x0)

6.490635177s ago: executing program 2 (id=479):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x8, 0x0, 0x81, 0x1ff, 0x1}, 0x1c)
recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)=""/82, 0x52}], 0x1}, 0x81}], 0x61, 0x2100, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
socket(0x2, 0x80805, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x7d4105cf, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000040)

5.695725016s ago: executing program 4 (id=480):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
r2 = syz_open_dev$mtd(&(0x7f0000000040), 0x4, 0x10c001)
ioctl$MEMGETREGIONCOUNT(r2, 0x80044d07, &(0x7f0000000080))
sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r5, r5, 0x200000000000000)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
r6 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r6, 0x4)
r7 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00')
read$FUSE(r7, &(0x7f0000000a00)={0x2020}, 0x2020)
sendmmsg$inet6(r0, &(0x7f0000002bc0)=[{{&(0x7f0000002900)={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe255}, 0x1c, &(0x7f0000002a00)=[{&(0x7f0000002940)='B', 0x1}], 0x1}}], 0x1, 0x20044040)
r8 = socket$netlink(0x10, 0x3, 0x4)
writev(r8, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)

5.618106059s ago: executing program 1 (id=481):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$devlink(0x0, r3)
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50)

4.614479677s ago: executing program 2 (id=483):
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x5c, 0x100000, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0xecbb, '\x00', @p_u16=0x0}})
syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[], 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000540)='./sys\x00', 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
read$FUSE(r1, &(0x7f0000000c80)={0x2020}, 0x2020)
r2 = openat(r1, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x40042, 0x1)
connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r3, &(0x7f00000000c0)='1', 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
ioctl$XFS_IOC_BULKSTAT(r2, 0x8040587f, &(0x7f0000003140)={{0xfffffffffffffff8, 0x0, 0x7fffffff, 0x5, 0xfffffffa}, &(0x7f0000002cc0)=[{}, {}, {}, {}, {}, {}]})
write(r4, &(0x7f00000001c0)='1', 0x1)

4.585599489s ago: executing program 1 (id=484):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000500)=0xd79d, 0x4)
write(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x7fff}, &(0x7f0000000200)=0x8)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6, 0x9, 0x0, 0x1, 0xf9ffffff}, {0x66, 0x0, 0x0, 0x256c7520}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc9}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r9, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x8004)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r11=>0x0})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_SET_USERDATA={0x18, 0xd, 0x1, 0x0, "fc448e13cb512b3fc9382f21ed6286ec2ad3588b"}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x81}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3d}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0xc010)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r15=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r14, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)
r16 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r16, 0x89a2, &(0x7f0000000000)='bridge0\x00')
sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

4.585449719s ago: executing program 3 (id=485):
setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0xfe, 0x4)
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES8], 0x21, 0x1cf, &(0x7f0000000780)="$eJzKKC4sZmdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCKF1xS3vdmlN+Z0566motk2VmaPXUlkcWk0vtMXKTXMwjwcwQmnpkUXFlVXZiTk5qUfFChopbyUkVp08wsFy3v6bSLMHp8EeewyFJ00GH6YiPR9aMxhLOSVKaYmxsmQpnz3yQX8emcYTh0QrmjXWeeY11halT89LykqqyqrLmTZy4cWZjZ2Pjyol1UWl+qxhbUlw2NXUyMjlwqwlsZjZUn2SjPeFd+6qHSQ6sPR5+zaeMlV6nMl8yXlgkdWpF1cwJX5RmMxp+Z7jDU7ZCQkPDSeKKhEWDCcOROtsGV5ATUxoY0hTCGJPU2MTatpyZE8LMz+a2QKEl+QRT6FGOpTMlLA4IVZ38aan51iHRbca2pw5sZ3gOH+dZU9AnaHRcgsFpoeB/GZAxCQ0NZRprmZbaLvhSpPFXwmu1sVMGg7s90zJYgLI0gMiVUJ4sWE9C8goPHU1No5TkhIZNEglJbgWGygxb93CuFmhgQIo2FQYGhu2MsLiFgGswxigYBaNgFIyCUTAKRsEoGAWjYBSMghEBAAEAAP//VlaYIg==")

4.465094525s ago: executing program 0 (id=486):
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00')
preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/37, 0x25}], 0x1, 0x4a, 0x4)

4.464936645s ago: executing program 0 (id=487):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, &(0x7f0000000200)='md', 0x2)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./img\x00', 0x42, 0x1b6)
ftruncate(r1, 0x2000000)
pwrite64(r1, &(0x7f0000000280)="6269746d04000000001000000500000000000000", 0x14, 0x1000)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r2, 0x40480923, &(0x7f0000000400)="000000000000000000000000000000000100000000040000010000000100000000000000010000000000000000000000010000000100"/72)
ioctl(r2, 0x40140921, &(0x7f0000000500)='\x00\x00\x00\x00\a\x00'/15)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/dev-loop0/offset\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='16\x00', 0x3)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/dev-loop0/size\x00', 0x2, 0x0)
write(r4, &(0x7f0000000840)='65500\x00', 0x6)
close(r4)
close(0xffffffffffffffff)

3.874762413s ago: executing program 4 (id=488):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
read(r2, &(0x7f00000002c0)=""/103, 0x67)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffe)
setfsgid(0xee00)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

3.53998354s ago: executing program 4 (id=489):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'dummy0\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000780)={'bond_slave_0\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000007c0)={'bond_slave_1\x00'})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0)
write(r1, &(0x7f0000000480)='-bond_slave_0\n\x00', 0xe)
write(r1, &(0x7f00000004c0), 0x0)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/bond0/bonding/mode\x00', 0x2, 0x0)
write(r2, &(0x7f0000000580), 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0)
write(r3, &(0x7f0000000600)='+dummy0', 0x7)

3.339242089s ago: executing program 0 (id=490):
syz_mount_image$minix(&(0x7f0000000100), &(0x7f00000066c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1810002, &(0x7f0000006800)=ANY=[@ANYBLOB="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", @ANYBLOB="86e65fc95cec3737ffc083e9420e0fda32ad9e60822bfec34b914022040a90f8741ca4d99221eeaef6d92e8595aacab6491e0f137f25a1eb6ce98ef49a462828f95b2b068d0d761d5b739c59f7553d6f322aa98313062ead06b1ad3b6575bd1804ab3d04d07d4692003ea4284df89a58c389ecd40e7168cf59c6200e16312d9aaa8722fb6a41995420c131b395b247f1e00fa27a838f52cecfdbf295c4f590e11c0121e67f19efbfe3041bbaa77cef1561d494e645805ba55eb8463cf1b56c08e44d71830924371064c7dd3fe5219c8af052190d7376aa62bf5edc726143be953f1494b0f2ac4591e4676317241150e315770ce42000ae7d8d7a416575697ce9989263cf1ac17daa0de31d3defb3c85aba7ba589d4bba6fb05b84fed5d7a3e6fc3692ee0e37c7515caaf9815bad099d93d420ec27e0da0eb2566233ce799632051375cd5b545428d3209708dd8bc9aed1af2b2dd96d8d7617fac7f5f006e165cd1add85134b939cf15175850d2f58d89ab6d4f0aa93ae8ad8f9d4f428b007af33a69188e661ef662cacd512ef14955045acfd4ab4ab699881d2365236c7dd59f7a28f5579b480600f3070bfe97f59e609da493e6750153bca6cad17312baa4879e0fde2f81ae15ce236f64fb898ad4ba6071403b0cafd642e2648d4e3218949dd9e906c76609ac9efe8c6176ad5e9a2f139d7b6e7e248dadbdf1cc74c05ce3ad93359b3928ec022e6ed2512c66bc64087f22a9bc10961477f5ad8acca7d2fbb242d52703ec70225d76713dfd7dc1ce24ab3aede0f39f2740181efdbaf4dd912701fd8c568d8d0daea80a4c9a93a9e28ba48f1dbafaf2e279c0d83c327e045e20d37abc0ecacd0fd6220295c16e0f4849096f0d5a7d337c8460553a5d5b63ed01a55047e22c98e9df86bd22e4ec55b7c311497d97b30709634c58c2eb751a724f6086d562b9c1d3f5fbba7d5c78a9ed08c924ab085ecaf50cb2a0437174550ea20bdba86364bc9453fb4af21f6cac1268118be3eca0ea7d6f94447e7b2cb6247f42836caa7da504f60314182201790974ac7b648a57b8d87b7af022266b3e3fb6303583fa876de471b1d8ac73f0af724581271be1ba839261e7b50f42e1d3c44856f0a5b3e148a7783ed2ed70ee435cec055be29b7997d2e2bb52e39e413b570d383febe08c38310ca77b3622cc45c1a79f0de240f23c0a9a28ea6fc2030f927a1e07fe15ae8e70e170a7152ce5475e199b780390c971c9148f72eff33cac7f0cb23850f1d7f2494733f86bf52df43c2a44b412c5f0cd830e45a9fa097d4f7508fa6e1f33ddf6953b6dbce69aa70f078c4112636c3a902252a17b197ecb8f05beb5a276e0c297990b240bf0156601deb9105be5529e4c6923f14a8c7e1fe6a04cd229194a0b974d473ce6726fc481bb7f4e172eb661162d221a6837849fd618849da2d300d25db9cb8386efba1c099edd5ac31bf9fbda2a8a3b824cbe2e953710555f579d8fcf51b6d14bb098cdb68d25b9962cb163b78b89ddcb201f8882e036d60c2348a52536d06f1dc891fcdb6a6baab4ad69051ae5eefd73f0f67eb0f254dd3b460a2cf56a796d7a16d67e6818119cc8c40facc305657bfa74bdfee0faa0eec37cf000ecce3f86cc6f6cb40ad12a46a0184391fe32616531b35fd3bf1c3d28d00aa052fd7c2c1891448db260db1a9717281a25bf705514aaee649e0630da06fe202e3949674554373d878e13d90f2dc3fcf3143f1cf9605f694b7854038409573d12eb872befe1132f79d4d7a9b1964fc1cd5214fb99a0ffd1e88936d01b052479e777340b29dc97c5b02e8ddee2a848ab31cac8696b6cc6f7630f2aaca9b8032780b68f2e26d42ea1b86b40fd499c394cf8880d3ee6fa4fc6dd4ff236d0a82641a95767ae8f9ef5ed219891f78db23a977a017da0b0c1914334cf3c919ba02eae35d7e98b96c6a9e7e0a6f0f6747cf91c008ebe56522e7dbdf7a942b16e01427ba658543b4438686a62015bcdfffcd05ef587d3ce8a916a6ab0a80c17096a3180a57bc20bdadd9b5380a59567bb4a0b10fcdc5c98a4168753489c45dbf922962dd7a8968de0fc2ad6d4abfd1fcc530a8eea9f025ef6b7442a7a340d1f8b477db5d4e65d864ff2cc559640b47f47381c1d2de06e957199db1dadc94ae0a320b6829ec3e7506856869979f791c2122e6991b3789a87ada5f5169040344b94841e296dc963d38e775cdc5e65eee3bd059e55c5cc1fb31f7061acc19e0b8dcf72b583578fd5557bcc6dbf8b5e0b7185e7d7dca2c08589c8f8d57a8df8b015942f853a69d7ba492337b04c5f3e6e19ec5fbc28aa100174c71912681576dd014bd4d496abcfdf75289dde158bae37686b042df4de5de3dd19105887f3e4e291a30c1f19061bbea43ea75afb678b1377c2bd189b86bf60b1084dcd91d23197e944f691153df147d5051f2d5ed1b0b55677c1e7a6d99aaefc08db70e7d4b5a59e0d8fcffa8fd76d42e4c326b1df840538662c60c046d219beeb81a62c28565cf2a71742bc702a5c9bad03dd69d00da46478bb48d0a85e333c651245ea387f286cc9114f97cbfcdfe0dce4e37da4a41943785781123dace55d34ede0a855b36972ed1442b1404df80f9532a0db809948bd241f3383d56c8a6ef57a9e5549c12f2677a960bf54d7cbaf6560bd86a91ad793bedddbb704324126b5ea2f145b8aeb17d1ef863cde3a3e2749f5bbcbd45673269d8421cc1eb90ec66f7764bb657de407119146d74b460c727c0ffe7a1f85db6f43dea39a1b81bc6f65cfeb8ecba31dae17f16c4d726f4bf778b235ae38c3270c663d1391a4fc48990383dd240714612358ba3d8dfe2dd6f3347146d3e93082a49bdeeec58263a6f7d34e2ed759eb9b0fa298ac063c09ddf39c86d426d1bdbd173cb3283e99cdc301b13557250615e89e870ee820783eec14398fe91996359ff4bfd39f3a36cd5bd697200f5db1b1c4a58bf60d55f99b323450004277e90a32b0ab09327091afe269a871504da4ca79ebdddaa2d246bcbdf3c57c13184cda844255e03b1437ef5e79545b764ec6dd666b17dd0648806805d09e12c68d794a6da81d70454b09fded5d98aaa17d69e0e343995307785cf40e8993dc72d5f2b7ee69efe86ee897d1d0d46a51898c73d09a709fc9180c71d6cae0a6161b4bcd39bc090dd319165d73e312108a1b4b2515c572e03bd4be6184717037e29868d33f7ccc2885af1beae10bef038df839b7cbc126b1baf8f2e14007e49f2d4a95626c625ecdba3333c69cbae6416a18a75769a7020ecdc96630e0a3c920de9329d6bb6b605f6eb5c2ba273bf5efa977bece3bd4ad848fcd2f11a4103f9abed1eee1b7ea2ad1ebb75327125a1eb5f62c6bcd45fcdac8edc6a29aed4a906d86da215b492ff1a726aa4a317af822060a674b9774464d53a477061117cf3a5d38d91bf3df21dfc398ef04f565c53abd7ebb1b41e2bc5bbc5f218598010c829039852216b19d0762cdd7dce5e7620403313180b04a97651350a7c2bf6380363528d733a74a64594d7a801d3fb3fc80cad52a77d5b8518ef89310f8509bef1933ef303562380bb1e381d49b2c08cc56efa1983c63f60107f378704ae1e89b9dfee5b7478e5e6e5dfb62f75387fe010818be933b0504545513739db06db38abc16387f1b7a4f3908a6a2119432997718506a7e750e40215f6d63787aa74cfe039b3d38dec31b9dfbb3ef901a6f66357d60ee51e06f8b72555092b79be38ec8952bda7dc78dc37ef1f35d0506f6a58a1dfe288b5d388df12c5f6f5eeefcc6c4ace03643e7b600904623891d8e31b2ef23fd8137690621f3deaed46cee675b6d968bccb784add5d0ede8e0289a163b00f5a42573936864efcfb2357b6bb5f4e1872aec8f9d7be2059f1d98a3da288016497e5b358dec464e64dfb21edcd591ac769e100db57b3654c3008644839a929063a3c142606efe3edf19f63ef934d7a949bfcf85dcd6b6fd7a64e786f9ddbd1f8bb86ed4203676cc57f4cc32ccbed9888d7be95903dbcf1d60c6e93e7d5683cfd58950f589284e6950651a8624a5bdb4c23d662ff0554914e0c1f1d5e9b189e566d6daba050749cab9e694fb801efd5f6f342cb077912a846536909a9b3b11d95df8983ddc9448f7b1b89017ec4860bd317467d08e6c0656585d4013270fdb5aed829ba2a44725b552014ac4127edb29adf23956e4ed96ef23f052e4ac88252d5c7842b7e255988d2415fb3a46500c686bc3ea214e5c552b916aa0800cd83bce02e2731c8145a28c4fd19891c5e032e762e1f3a183e091bd5475f682593a0d6ac7697d32ec78142699b9664b7f41194daca4867e9d1dce20c3781b03c18a6d5dcc5f716d8d3fa38ed9604b4a8afc0fefa03b02063a33861d8f17574c6801e6b0bb34c54db351554f3b9f7ae6be472cad47aa41a28382bc5e61a001b5b32c7113a363d6a392e757510858313cb6d14d27e34c8e22486376a6c51bdde8827f2005772ec868b67be57f97d9d341074fc5cdef9678b3b72bcd509d53c9244a85bf790e9cf3dcdece8d66c3bbd5baba730ddff52bbb7a66bfe421684192653479b3588a9b4319c57060eb3fb6a7eec73a51bb5836f50944a5d38a81811b0130ecda2966944f475adb4d828a01c88f7dd29de8ae38265bd382d5e9afd9ee27c378cf56e5e4195ca8a4d46f6c28e1e5e9b4a7a3f6942102dfc249020e79e10061ba420ff2d1181ae6020c9ed2f9f386b8b56bf487b9ef0fe86f4443ac720325720b13596efb718ff28082eafd42353321faad5d4ecc427ac9e9a51950c1e4fe8151d8905108eda21082c09b7858dffbea8ad6bad372e8b37949e4d1b5efde2a1974f1d8e05220ae58bf30cd9b914da9a65b08ad806187cc4385994646811851978a1f9a573f8b01db05941db6b7daedca083981b775cce43228e36e27b591be6c435974b6d0e6c082b08a9d07fd3c138431d8238db64cbaabeff4c522d0504329d913afb4f173d19d8c9c84421199074a91aa0c9ece65ddb46032a6dfcb15f09f582c8b6b4adbcaa2f83727eafa9e01a59fa17d481e3afd4a3e94f860be0c8e6d0fe1031c384b0357784f6d170ab328506e22add3dcf367763c2d9e09737aff5ff4836dd7fbd571548bfb94144403c906a5f2763b619df470843ed660f3c48e6d2f6574c6ccff2ef3dd103ed2b60d643f9a9f8435d8878bbfdfa28414935ba08557e8a21a44df75f21dd7be31013a692729649114e2585be2dfddbfe5f2deb6ab8d0cc4e245ae3b1d99d4d4e6c167d798c438664599e10e839864f6beb76d8d193b1cdde48e185fcb897aebc659f14890056b3cc044f32f24f8564fb8e5e6bf92a4365051561e0236916f8c9ff5115793eea703452ca42bfd6bdc3ad80c36e38d090bb8a992ab44ac41c7f661b586cf64ad3822b626c5418a8619a0697c5fd27a59f82b188c38006daa29d3ae07acd4c8bfcb3a3a11428fa92b03d1ee330ce4142b97894222244d43c4bfb8a0d202f7d2fddd32a6fd56a8f32974aa6d036bc641d6fbd85b54be459845f4aaff42d8ae4315d35b08e7cedff13cdf1eb8b3b76e1e82aa91564ef26d8ecb7d757d081a1455f14c6f5b0a53c8e4376083303427ad743b83d28d85724bdb65cada011b2500b058ea5b9124c07824c2b22595cbbfe9287155896f323b0f914334dc4e9db35717f0f6ef50cd4192a9b05b2fdba5840bbc81914b8fe1f34bef54c6f2e1068f8d1a9b51b7b1d9226287cfd7b50eb746a9e2b289fe43d02d8031928992f1b22409221e4557285d440dc2a20b677e8f6160eeb81fc0beca14482c7e6d62105df6b5e9ef5d8607d759513bdd3dd309014811cfc5dc184d990e7f3c1461aa1d1d16e8dc9973d967de1ad69ea605b777213ee511f44396eafe9c090f4997b5c6", @ANYRES8, @ANYRES8=0x0, @ANYBLOB="a77a47c7093995493790249b0bed32a055f763e24190111977519571ce7e7842f63886bbf71ffeb820eddf6133ab8ae88bcc3d9004d9c6dbe44fbdcf671794f90a6dc723010be2684f321bdcb0f3a28f37715ba81e0f3b27d1206de5d93037a11c2b5ce35f7ffda7b43c3c9888163a50b7db5daea67d670e8b86c032da653d273cfb7bf3df53e836bb96370c4c637ec105fd520968a03441384810ed179646174536425dd1f0073804e63a43a92c901534484b0a352baee33ac1638bff1e67ee4959717feb229b247c25ae4018f502bdb5e7", @ANYRES16, @ANYRESDEC, @ANYBLOB="2da97369bd5bd2a022e4fea628166430fb7a26dae38cd827ad7f8cff5d2246bdd2cc0e8101b9631aa9db6c88c4ea13a8fbc6a23601da47409ecba43e29d90521e4a37f2f57fa7ce2366b5b89b5b9529791fb53b47e83c2014cd5779926a7dd8a0de70a50b2baf658b32d6d108efa8d3b6101762c8308a5b3351fd14516c9c33e6c6bd15e956f84604a27325b8ebb315aff3e39aa98ba22dffb1b6a7c1acafedad4ef237de4595f77f679e98e9dcbf01dc5bcbd5c199b9e95c24b", @ANYBLOB="9651c56ad88578a25546d8301a976d6fc5e51f3814a125051a070f7f54437d1ce35d85809048bfebe5ac13dce749226f4eace102819832dc4feee07cbf025529706f80354fcaaaf34bc289d3892a62957f78a9c45fe4e6e8c1332d57018a296c8eca11a25d4a581b17f43b9f4480c9a839e10a15954d4c325da6384fa44e9bb79ff45d24a2a2e805fac936dd9af003a173aec97678f46c000b0eab44f2", @ANYBLOB="0805c250a09347cb0bca3b9f8a8755b3945d3396e6eb14eb64426210d11830f13cb571b8967902d058a39cf86287f14c080fcb8d529bfcda2a3722d8dc8ebe2c29476750ec92bf56619454329e748b3549ba625812d4422958b334db652bd2b9492784354250a06d9b3f22846434889dbea72d8f13aa590030f83b62254e87e4230846ce6bd18bc79e73a1a1fa67571c3ba78979edf79dfc3410b95c51ce90bcca297c2a6995b236c39c5ec957cf8717fa28a560525b50a3a689d2bc34038bc078356614f0c584b2ae572c025c4d8414161f1100073f6fee746c008cefce574d1c1e0333b07febbd41add7375c604f3c34b6606013a8172cea655aa6580601b3668ac91df25f684745c94ad9ffc15548d32a8608c5acb60bc437052b2dd51eea8957d673499f6f685feefb2332976ce89829d1cd967d7dd29336387ff12a", @ANYRES32], 0x1, 0x1d8, &(0x7f0000000580)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
open(0x0, 0x14927e, 0x6)
chdir(&(0x7f0000000080)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x22043, 0x69)

3.255740283s ago: executing program 0 (id=491):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000380)='8\n', 0x2)
close(0xffffffffffffffff)
write(0xffffffffffffffff, &(0x7f0000000400)="05010906a101050719e029e71500250175019508810295017508810195057501050819012905910295017503910195067508150025650507190029658100c0", 0x3f)
close(0xffffffffffffffff)
symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r0, &(0x7f0000000500)='dummy_udc.0\n', 0xc)

3.150743158s ago: executing program 3 (id=492):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
close(r2)
listen(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f0000000680)='dummy_udc.0', 0xb)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x500, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94)
unlink(&(0x7f0000000300)='./config\x00')

2.986598816s ago: executing program 0 (id=493):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11)
timer_getoverrun(0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f00000001c0))
r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0)
ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000400)={0x23, &(0x7f0000000580)=[{0x40, '\x00', @st={0x4, [{0x1, @svalue=0x100000000003}, {0x2, @svalue=0x8}, {0x2, @svalue=0x1}, {0x1, @uvalue=0x8}]}, 0x2}]})
mount(0x0, 0x0, &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)

2.377033006s ago: executing program 4 (id=494):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)

2.371537206s ago: executing program 2 (id=495):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$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")
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
truncate(&(0x7f0000000100)='./file1\x00', 0x20fdfffffe)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x100)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

2.347440227s ago: executing program 1 (id=496):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x4}, 0x1c)

1.25166414s ago: executing program 0 (id=497):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x1, 0x0, 0xffffffff, 'syz0\x00', 0x71}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0})

1.23693686s ago: executing program 3 (id=498):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$tipc(0x1e, 0x2, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070))
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0))
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/86, 0x56)

207.68114ms ago: executing program 1 (id=499):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
read(r2, &(0x7f00000002c0)=""/103, 0x67)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
add_key(0x0, 0x0, &(0x7f0000000080)="100c0601000000", 0x7, 0xfffffffffffffffe)
setfsgid(0xee00)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

207.41489ms ago: executing program 4 (id=500):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, &(0x7f0000000200)='md', 0x2)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./img\x00', 0x42, 0x1b6)
ftruncate(r1, 0x2000000)
pwrite64(r1, &(0x7f0000000280)="6269746d04000000001000000500000000000000", 0x14, 0x1000)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r2, 0x40480923, &(0x7f0000000400)="000000000000000000000000000000000100000000040000010000000100000000000000010000000000000000000000010000000100"/72)
ioctl(r2, 0x40140921, &(0x7f0000000500)='\x00\x00\x00\x00\a\x00'/15)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/dev-loop0/offset\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='16\x00', 0x3)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/dev-loop0/size\x00', 0x2, 0x0)
write(r4, &(0x7f0000000840)='65500\x00', 0x6)
close(r4)
close(0xffffffffffffffff)

1.16651ms ago: executing program 3 (id=501):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r5, 0x47, &(0x7f0000000200)=0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000006c0)={0x50, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x4c094)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000010)
sendmsg$nl_generic(r0, 0x0, 0x44014)

0s ago: executing program 4 (id=502):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4001000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000ea0000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700005350000020001002000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800"], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.50' (ED25519) to the list of known hosts.
[   56.949486][ T4173] cgroup: Unknown subsys name 'net'
[   57.053932][ T4173] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.322169][ T4173] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   60.238689][ T4196] chnl_net:caif_netlink_parms(): no params data found
[   60.293460][ T4187] chnl_net:caif_netlink_parms(): no params data found
[   60.328527][ T4185] chnl_net:caif_netlink_parms(): no params data found
[   60.390539][ T4188] chnl_net:caif_netlink_parms(): no params data found
[   60.411016][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.421056][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.429290][ T4196] device bridge_slave_0 entered promiscuous mode
[   60.442105][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.449385][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.457549][ T4196] device bridge_slave_1 entered promiscuous mode
[   60.492243][ T4186] chnl_net:caif_netlink_parms(): no params data found
[   60.535215][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.542428][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.551018][ T4187] device bridge_slave_0 entered promiscuous mode
[   60.564588][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.571945][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.580311][ T4187] device bridge_slave_1 entered promiscuous mode
[   60.589981][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.602565][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.622542][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.629910][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.637772][ T4185] device bridge_slave_0 entered promiscuous mode
[   60.652747][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.660020][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.668474][ T4185] device bridge_slave_1 entered promiscuous mode
[   60.723189][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.736564][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.743829][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.752119][ T4188] device bridge_slave_0 entered promiscuous mode
[   60.762018][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.774287][ T4196] team0: Port device team_slave_0 added
[   60.785531][ T4196] team0: Port device team_slave_1 added
[   60.796207][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.805787][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.813385][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.822064][ T4188] device bridge_slave_1 entered promiscuous mode
[   60.831209][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.894771][ T4185] team0: Port device team_slave_0 added
[   60.904484][ T4187] team0: Port device team_slave_0 added
[   60.917060][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.924284][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.932674][ T4186] device bridge_slave_0 entered promiscuous mode
[   60.942647][ T4185] team0: Port device team_slave_1 added
[   60.950259][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.957389][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.984483][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.997711][ T4187] team0: Port device team_slave_1 added
[   61.003940][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.011071][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.038051][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.050643][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.060095][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.067834][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.076090][ T4186] device bridge_slave_1 entered promiscuous mode
[   61.105305][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.126370][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.133469][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.160099][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.173918][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.181184][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.208749][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.246462][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.253718][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.280504][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.312304][ T4196] device hsr_slave_0 entered promiscuous mode
[   61.319362][ T4196] device hsr_slave_1 entered promiscuous mode
[   61.336003][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.345984][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.353029][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.379364][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.397543][ T4188] team0: Port device team_slave_0 added
[   61.409984][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.435473][ T4188] team0: Port device team_slave_1 added
[   61.463604][ T4186] team0: Port device team_slave_0 added
[   61.501686][ T4186] team0: Port device team_slave_1 added
[   61.510637][ T4187] device hsr_slave_0 entered promiscuous mode
[   61.518117][ T4187] device hsr_slave_1 entered promiscuous mode
[   61.524883][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.533008][ T4187] Cannot create hsr debugfs directory
[   61.541977][ T4185] device hsr_slave_0 entered promiscuous mode
[   61.548965][ T4185] device hsr_slave_1 entered promiscuous mode
[   61.555486][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.563559][ T4185] Cannot create hsr debugfs directory
[   61.573594][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.581428][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.609314][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.655906][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.663051][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.693749][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.733227][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.740380][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.767480][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.808452][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.815438][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.841826][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.874197][ T4188] device hsr_slave_0 entered promiscuous mode
[   61.883188][ T4188] device hsr_slave_1 entered promiscuous mode
[   61.891159][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.898848][ T4188] Cannot create hsr debugfs directory
[   61.946578][   T13] Bluetooth: hci0: command 0x0409 tx timeout
[   61.953652][   T13] Bluetooth: hci4: command 0x0409 tx timeout
[   61.979723][ T4186] device hsr_slave_0 entered promiscuous mode
[   61.987309][ T4186] device hsr_slave_1 entered promiscuous mode
[   61.993974][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.001870][ T4186] Cannot create hsr debugfs directory
[   62.025709][   T13] Bluetooth: hci3: command 0x0409 tx timeout
[   62.026927][   T23] Bluetooth: hci2: command 0x0409 tx timeout
[   62.038367][   T23] Bluetooth: hci1: command 0x0409 tx timeout
[   62.150743][ T4196] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   62.179042][ T4196] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   62.199893][ T4196] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   62.212065][ T4196] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   62.247921][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   62.256993][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   62.274809][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   62.283750][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   62.335853][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   62.366836][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   62.376151][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   62.404789][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   62.415215][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   62.439155][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   62.450702][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   62.462056][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   62.515518][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.536900][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   62.551953][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.564360][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   62.575558][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   62.585429][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   62.600381][ T4187] 8021q: adding VLAN 0 to HW filter on device team0
[   62.616304][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   62.627605][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   62.639668][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   62.649384][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   62.662040][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   62.671903][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   62.682434][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.689752][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.699605][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   62.716056][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   62.725306][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   62.734890][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.742213][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.757970][ T4196] 8021q: adding VLAN 0 to HW filter on device team0
[   62.794325][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   62.818171][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   62.827864][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   62.837068][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.844206][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.861301][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.877395][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   62.886102][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   62.894701][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   62.908000][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   62.916756][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.923832][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.931860][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   62.946631][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   62.957330][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   62.966636][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   62.975356][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   63.008948][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   63.017084][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   63.026643][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   63.035242][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   63.044318][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   63.053694][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   63.064297][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   63.073253][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   63.082209][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   63.092219][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   63.101839][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   63.111550][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   63.121260][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   63.133920][ T4185] 8021q: adding VLAN 0 to HW filter on device team0
[   63.154862][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.162775][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   63.173789][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   63.182439][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   63.191495][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   63.201179][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.208531][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.220583][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.232196][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   63.246480][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   63.262462][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   63.271467][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   63.284337][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   63.295454][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   63.311124][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   63.329461][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.347047][ T4188] 8021q: adding VLAN 0 to HW filter on device team0
[   63.354679][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   63.363885][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   63.374604][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.381744][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.394356][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   63.404529][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   63.433223][ T4186] 8021q: adding VLAN 0 to HW filter on device team0
[   63.476911][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   63.485221][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   63.494915][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   63.504387][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   63.515437][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   63.524813][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   63.533643][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   63.542230][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   63.550927][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   63.560685][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   63.569590][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   63.578373][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   63.586993][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.594059][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.602526][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   63.611425][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   63.620969][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.628609][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.641594][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   63.650333][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   63.671110][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.682753][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   63.696815][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   63.704427][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   63.720669][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   63.731963][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   63.740578][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.748299][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.758822][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   63.780487][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   63.790544][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   63.799970][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   63.810230][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   63.819306][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   63.853598][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   63.862959][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   63.880242][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.887418][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.902838][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   63.911953][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   63.921550][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   63.930288][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   63.939200][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   63.956500][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   63.964168][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   63.971927][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   63.980624][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   63.992035][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   64.007570][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.020003][ T4196] device veth0_vlan entered promiscuous mode
[   64.027518][ T4231] Bluetooth: hci4: command 0x041b tx timeout
[   64.031416][ T1106] Bluetooth: hci0: command 0x041b tx timeout
[   64.046054][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   64.056502][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   64.066958][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   64.075494][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   64.085029][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   64.094898][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   64.104397][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   64.112838][ T4234] Bluetooth: hci1: command 0x041b tx timeout
[   64.115025][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   64.119415][ T4234] Bluetooth: hci2: command 0x041b tx timeout
[   64.133467][ T4234] Bluetooth: hci3: command 0x041b tx timeout
[   64.135006][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   64.149020][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   64.157001][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   64.179161][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   64.205230][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.219162][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   64.228830][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   64.238398][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   64.248014][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   64.258222][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   64.266564][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   64.285599][ T4187] device veth0_vlan entered promiscuous mode
[   64.301413][ T4196] device veth1_vlan entered promiscuous mode
[   64.311627][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   64.321290][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   64.334047][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   64.343758][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   64.360180][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   64.370968][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   64.379117][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   64.393168][ T4187] device veth1_vlan entered promiscuous mode
[   64.420203][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   64.430237][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   64.465062][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   64.474334][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   64.496479][ T4187] device veth0_macvtap entered promiscuous mode
[   64.522345][ T4196] device veth0_macvtap entered promiscuous mode
[   64.543022][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   64.554094][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   64.562350][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   64.570488][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   64.579814][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   64.588802][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   64.598077][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   64.606975][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   64.615206][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   64.623293][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   64.631946][ T4187] device veth1_macvtap entered promiscuous mode
[   64.653808][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.663408][ T4185] device veth0_vlan entered promiscuous mode
[   64.672931][ T4196] device veth1_macvtap entered promiscuous mode
[   64.683711][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.711304][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   64.720270][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   64.728853][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   64.738190][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   64.763799][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.776897][ T4185] device veth1_vlan entered promiscuous mode
[   64.798262][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.809374][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.821272][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.829921][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   64.838654][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   64.847796][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   64.856975][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   64.866774][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   64.875540][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   64.884638][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   64.895540][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.906670][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.916281][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.925143][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.953826][ T4188] device veth0_vlan entered promiscuous mode
[   64.964304][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.976950][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.989698][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.002076][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   65.010534][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   65.019288][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   65.028144][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   65.037729][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   65.046964][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   65.054743][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   65.074694][ T4188] device veth1_vlan entered promiscuous mode
[   65.089030][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   65.099062][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   65.107856][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   65.115516][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   65.130134][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.147571][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.167443][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.181376][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.190497][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.211673][ T4185] device veth0_macvtap entered promiscuous mode
[   65.220136][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   65.230861][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   65.240372][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   65.275325][ T4185] device veth1_macvtap entered promiscuous mode
[   65.288720][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   65.297782][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   65.310072][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   65.334746][ T4188] device veth0_macvtap entered promiscuous mode
[   65.353757][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.371592][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.382804][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.395361][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.407452][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.439916][ T4188] device veth1_macvtap entered promiscuous mode
[   65.453448][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   65.462170][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   65.479344][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   65.489534][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   65.505156][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.516184][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.526842][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.537555][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.549125][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.586164][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   65.598327][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   65.608104][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   65.617366][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   65.634671][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.647107][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.656087][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.664877][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.680455][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.691994][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.702575][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.714190][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.725185][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.736629][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.748787][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.778962][ T4258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.789857][ T4258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.797881][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   65.811042][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   65.820907][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   65.829454][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   65.837848][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   65.851215][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   65.859447][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   65.875111][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.886007][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.898481][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.909527][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.919739][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.931345][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.942489][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.959937][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.970303][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.980694][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.989680][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.002104][ T4186] device veth0_vlan entered promiscuous mode
[   66.011797][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   66.020705][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   66.032902][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.044462][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.073821][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   66.096236][ T4258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.104006][ T4186] device veth1_vlan entered promiscuous mode
[   66.112003][ T4230] Bluetooth: hci0: command 0x040f tx timeout
[   66.112265][ T4258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.119230][ T4230] Bluetooth: hci4: command 0x040f tx timeout
[   66.151984][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.161400][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   66.187144][    T7] Bluetooth: hci3: command 0x040f tx timeout
[   66.194832][    T7] Bluetooth: hci2: command 0x040f tx timeout
[   66.203542][    T7] Bluetooth: hci1: command 0x040f tx timeout
[   66.233466][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.233740][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.252323][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.255398][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.280024][ T4186] device veth0_macvtap entered promiscuous mode
[   66.297515][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   66.309650][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   66.320171][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   66.329974][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.339212][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.351346][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.387890][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.398235][ T4258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.400112][ T4186] device veth1_macvtap entered promiscuous mode
[   66.414670][ T4258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.422677][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.480647][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.500164][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   66.530126][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   66.562431][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.588573][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.612715][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.624631][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.635144][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.647418][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.657989][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.669392][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.685387][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.717924][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.736557][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.756050][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.779618][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.821188][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.833630][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.846799][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.857966][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.872488][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.885399][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.899885][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.913830][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.963614][ T4276] ptp ptp0: new virtual clock ptp1
[   66.973695][ T4276] ptp ptp0: guarantee physical clock free running
[   66.983819][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.002597][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.013623][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.030318][ T4278] FAULT_INJECTION: forcing a failure.
[   67.030318][ T4278] name failslab, interval 1, probability 0, space 0, times 1
[   67.034169][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.055012][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.068342][ T4278] CPU: 0 PID: 4278 Comm: syz.3.8 Not tainted syzkaller #0
[   67.075593][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   67.085858][ T4278] Call Trace:
[   67.089237][ T4278]  <TASK>
[   67.092351][ T4278]  dump_stack_lvl+0x188/0x250
[   67.097057][ T4278]  ? show_regs_print_info+0x20/0x20
[   67.102271][ T4278]  ? load_image+0x410/0x410
[   67.106884][ T4278]  ? __might_sleep+0xf0/0xf0
[   67.111674][ T4278]  ? __lock_acquire+0x7b50/0x7b50
[   67.116722][ T4278]  should_fail+0x383/0x4b0
[   67.121153][ T4278]  should_failslab+0x5/0x20
[   67.125673][ T4278]  slab_pre_alloc_hook+0x51/0xc0
[   67.130677][ T4278]  __kmalloc_node_track_caller+0x68/0x3a0
[   67.136634][ T4278]  ? rtmsg_fib+0xd7/0x440
[   67.140984][ T4278]  ? __alloc_skb+0xf4/0x750
[   67.145507][ T4278]  ? rtmsg_fib+0xd7/0x440
[   67.149845][ T4278]  __alloc_skb+0x22c/0x750
[   67.154275][ T4278]  rtmsg_fib+0xd7/0x440
[   67.158449][ T4278]  fib_table_delete+0xcdb/0xfc0
[   67.163333][ T4278]  ? nexthop_get_nhc_lookup+0x400/0x400
[   67.168903][ T4278]  ? __rwlock_init+0x140/0x140
[   67.173724][ T4278]  ? fib_new_table+0x106/0x2d0
[   67.178515][ T4278]  fib_magic+0x2ea/0x3b0
[   67.182869][ T4278]  ? fib_add_ifaddr+0x5c0/0x5c0
[   67.187749][ T4278]  fib_del_ifaddr+0x1079/0x1480
[   67.192624][ T4278]  fib_inetaddr_event+0xb7/0x1c0
[   67.197590][ T4278]  blocking_notifier_call_chain+0x103/0x1b0
[   67.203768][ T4278]  __inet_del_ifa+0xaac/0x1090
[   67.208570][ T4278]  devinet_ioctl+0x913/0x1ba0
[   67.213283][ T4278]  inet_ioctl+0x2fa/0x460
[   67.217636][ T4278]  ? inet_shutdown+0x370/0x370
[   67.222422][ T4278]  ? kfree+0xef/0x2a0
[   67.226428][ T4278]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[   67.231997][ T4278]  sock_do_ioctl+0xfb/0x320
[   67.236703][ T4278]  ? sock_show_fdinfo+0xb0/0xb0
[   67.241635][ T4278]  sock_ioctl+0x48a/0x700
[   67.245991][ T4278]  ? sock_poll+0x420/0x420
[   67.250693][ T4278]  ? bpf_lsm_file_ioctl+0x5/0x10
[   67.255669][ T4278]  ? security_file_ioctl+0x7c/0xa0
[   67.260794][ T4278]  ? sock_poll+0x420/0x420
[   67.265222][ T4278]  __se_sys_ioctl+0xfa/0x170
[   67.269836][ T4278]  do_syscall_64+0x4c/0xa0
[   67.274271][ T4278]  ? clear_bhb_loop+0x30/0x80
[   67.278958][ T4278]  ? clear_bhb_loop+0x30/0x80
[   67.283644][ T4278]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   67.289648][ T4278] RIP: 0033:0x7fb44d177159
[   67.294270][ T4278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   67.314149][ T4278] RSP: 002b:00007fb44b3cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   67.322581][ T4278] RAX: ffffffffffffffda RBX: 00007fb44d3fefa0 RCX: 00007fb44d177159
[   67.330570][ T4278] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000005
[   67.338678][ T4278] RBP: 00007fb44d20e06b R08: 0000000000000000 R09: 0000000000000000
[   67.346748][ T4278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   67.354818][ T4278] R13: 00007fb44d3ff038 R14: 00007fb44d3fefa0 R15: 00007ffc90915c38
[   67.362829][ T4278]  </TASK>
[   67.428287][ T1333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   67.454732][ T1333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.485128][ T1333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.040878][ T4295] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000
[   68.153832][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.173777][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.183252][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.192311][ T4229] Bluetooth: hci4: command 0x0419 tx timeout
[   68.202317][ T4229] Bluetooth: hci0: command 0x0419 tx timeout
[   68.233348][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.243419][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.253154][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.266885][ T4231] Bluetooth: hci1: command 0x0419 tx timeout
[   68.277868][ T4231] Bluetooth: hci2: command 0x0419 tx timeout
[   68.288823][ T4231] Bluetooth: hci3: command 0x0419 tx timeout
[   68.349823][ T4303] loop1: detected capacity change from 0 to 512
[   68.358751][ T4304] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[   68.358751][ T4304] The task syz.0.11 (4304) triggered the difference, watch for misbehavior.
[   68.403465][ T4303] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[   68.467442][ T4303] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   68.505700][ T4303] EXT4-fs (loop1): 1 truncate cleaned up
[   68.524806][ T4303] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[   69.305638][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   69.345638][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   69.575665][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   69.745884][ T4202] Bluetooth: Unexpected continuation frame (len 10)
[   71.292199][ T4342] bridge0: port 3(syz_tun) entered blocking state
[   71.389891][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[   71.397036][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[   71.407667][ T4342] bridge0: port 3(syz_tun) entered disabled state
[   71.427298][ T4342] device syz_tun entered promiscuous mode
[   71.435441][   T26] audit: type=1326 audit(1790147613.095:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.2.23" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8ca97159 code=0x7ffc0000
[   71.444129][ T4342] bridge0: port 3(syz_tun) entered blocking state
[   71.466442][ T4342] bridge0: port 3(syz_tun) entered forwarding state
[   71.488735][   T26] audit: type=1326 audit(1790147613.095:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.2.23" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8ca97159 code=0x7ffc0000
[   71.513448][   T26] audit: type=1326 audit(1790147613.135:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.2.23" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8ca97159 code=0x7ffc0000
[   71.538681][   T26] audit: type=1326 audit(1790147613.135:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.2.23" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8ca97159 code=0x7ffc0000
[   71.563801][   T26] audit: type=1326 audit(1790147613.135:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.2.23" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f4b8ca97159 code=0x7ffc0000
[   71.592933][   T26] audit: type=1326 audit(1790147613.135:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.2.23" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8ca97159 code=0x7ffc0000
[   71.647314][   T26] audit: type=1326 audit(1790147613.135:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.2.23" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8ca97159 code=0x7ffc0000
[   71.687581][   T26] audit: type=1326 audit(1790147613.135:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.2.23" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4b8ca97159 code=0x7ffc0000
[   71.695453][ T4355] FAULT_INJECTION: forcing a failure.
[   71.695453][ T4355] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   71.729946][   T26] audit: type=1326 audit(1790147613.135:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.2.23" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4b8ca97159 code=0x7ffc0000
[   71.743344][ T4357] loop0: detected capacity change from 0 to 512
[   71.760203][ T4355] CPU: 1 PID: 4355 Comm: syz.1.26 Not tainted syzkaller #0
[   71.768770][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   71.779165][ T4355] Call Trace:
[   71.782447][ T4355]  <TASK>
[   71.785640][ T4355]  dump_stack_lvl+0x188/0x250
[   71.790353][ T4355]  ? show_regs_print_info+0x20/0x20
[   71.795645][ T4355]  ? load_image+0x410/0x410
[   71.800262][ T4355]  ? __lock_acquire+0x7b50/0x7b50
[   71.805290][ T4355]  should_fail+0x383/0x4b0
[   71.809708][ T4355]  prepare_alloc_pages+0x1e3/0x5b0
[   71.814903][ T4355]  __alloc_pages+0x11b/0x480
[   71.819490][ T4355]  ? zone_statistics+0x170/0x170
[   71.824427][ T4355]  ? alloc_pages+0x452/0x560
[   71.829012][ T4355]  __get_free_pages+0x8/0x30
[   71.833596][ T4355]  kasan_populate_vmalloc_pte+0x21/0xc0
[   71.839136][ T4355]  __apply_to_page_range+0x987/0xd10
[   71.844440][ T4355]  ? kasan_populate_vmalloc+0x70/0x70
[   71.849803][ T4355]  alloc_vmap_area+0x19e8/0x1b30
[   71.854833][ T4355]  ? vm_map_ram+0xba0/0xba0
[   71.859362][ T4355]  __get_vm_area_node+0x14f/0x2d0
[   71.864394][ T4355]  __vmalloc_node_range+0xef/0x8b0
[   71.869617][ T4355]  ? array_map_alloc+0x428/0x6f0
[   71.874597][ T4355]  ? apparmor_capable+0x12c/0x190
[   71.879633][ T4355]  ? bpf_lsm_capable+0x5/0x10
[   71.884315][ T4355]  bpf_map_area_mmapable_alloc+0xad/0xd0
[   71.890027][ T4355]  ? array_map_alloc+0x428/0x6f0
[   71.895145][ T4355]  array_map_alloc+0x428/0x6f0
[   71.900008][ T4355]  map_create+0x481/0x2330
[   71.904655][ T4355]  ? bpf_lsm_bpf+0x5/0x10
[   71.909008][ T4355]  __sys_bpf+0x30a/0x6f0
[   71.913421][ T4355]  ? bpf_link_show_fdinfo+0x380/0x380
[   71.918792][ T4355]  __x64_sys_bpf+0x78/0x90
[   71.923197][ T4355]  do_syscall_64+0x4c/0xa0
[   71.927796][ T4355]  ? clear_bhb_loop+0x30/0x80
[   71.932470][ T4355]  ? clear_bhb_loop+0x30/0x80
[   71.937138][ T4355]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   71.943025][ T4355] RIP: 0033:0x7fe26e75a159
[   71.947427][ T4355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   71.967052][ T4355] RSP: 002b:00007fe26c9b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   71.975649][ T4355] RAX: ffffffffffffffda RBX: 00007fe26e9e1fa0 RCX: 00007fe26e75a159
[   71.983781][ T4355] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000000
[   71.991844][ T4355] RBP: 00007fe26e7f106b R08: 0000000000000000 R09: 0000000000000000
[   71.999895][ T4355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   72.007947][ T4355] R13: 00007fe26e9e2038 R14: 00007fe26e9e1fa0 R15: 00007fffd4845e98
[   72.016018][ T4355]  </TASK>
[   72.126878][   T26] audit: type=1800 audit(1790147613.755:11): pid=4359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.27" name=08 dev="sda1" ino=2047 res=0 errno=0
[   72.683350][ T4357] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[   72.771228][ T4365] tmpfs: Unknown parameter 'quota'
[   73.519663][ T4357] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   73.851529][ T4357] EXT4-fs (loop0): 1 truncate cleaned up
[   73.878175][ T4357] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[   75.078144][ T4385] capability: warning: `syz.1.37' uses deprecated v2 capabilities in a way that may be insecure
[   77.903281][ T4412] loop0: detected capacity change from 0 to 512
[   78.102764][ T4412] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[   78.178418][ T4412] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   78.404690][ T4412] EXT4-fs (loop0): 1 truncate cleaned up
[   78.492832][ T4412] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[   78.795643][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   78.805669][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   78.815643][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   78.835641][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   78.845648][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   78.855656][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   78.865644][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   79.808121][ T4430] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   80.292935][ T4445] netlink: 1708 bytes leftover after parsing attributes in process `syz.4.56'.
[   81.535640][    C0] sched: RT throttling activated
[   82.146480][   T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   82.246308][ T4456] loop0: detected capacity change from 0 to 8
[   82.586709][   T21] usb 2-1: config 0 has no interfaces?
[   82.595175][ T4475] Zero length message leads to an empty skb
[   82.823551][ T4477] loop3: detected capacity change from 0 to 40427
[   82.878124][   T21] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00
[   82.878181][   T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.878201][   T21] usb 2-1: Product: syz
[   82.878214][   T21] usb 2-1: Manufacturer: syz
[   82.878227][   T21] usb 2-1: SerialNumber: syz
[   82.882576][   T21] usb 2-1: config 0 descriptor??
[   82.922651][ T4477] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   82.955090][ T4477] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   82.994080][ T4477] F2FS-fs (loop3): invalid crc value
[   83.089936][ T4229] usb 2-1: USB disconnect, device number 2
[   83.154191][ T4477] F2FS-fs (loop3): Found nat_bits in checkpoint
[   83.222585][ T4477] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   83.230382][ T4477] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   83.435953][   T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   84.329493][ T4500] udc-core: couldn't find an available UDC or it's busy
[   84.608652][ T4503] loop2: detected capacity change from 0 to 7
[   84.650451][ T4494] Dev loop2: unable to read RDB block 7
[   84.666999][ T4494]  loop2: unable to read partition table
[   84.687901][ T4494] loop2: partition table beyond EOD, truncated
[   84.855779][ T4503] Dev loop2: unable to read RDB block 7
[   84.893680][ T4503]  loop2: unable to read partition table
[   84.905784][   T23] usb 1-1: unable to get BOS descriptor or descriptor too short
[   84.958209][ T4503] loop2: partition table beyond EOD, truncated
[   85.016180][   T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   85.048878][ T4503] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[   85.111490][   T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[   85.251324][   T23] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   85.777405][ T3558] Dev loop2: unable to read RDB block 7
[   85.840704][ T3558]  loop2: unable to read partition table
[   85.935958][   T23] usb 1-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00
[   85.952025][ T3558] loop2: partition table beyond EOD, truncated
[   85.994112][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[   86.340644][   T23] usb 1-1: can't set config #1, error -71
[   86.524491][   T23] usb 1-1: USB disconnect, device number 2
[   86.762439][ T1356] cfg80211: failed to load regulatory.db
[   87.023883][ T4513] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   88.898077][ T4525] loop2: detected capacity change from 0 to 512
[   88.999569][ T4538] ieee802154 phy0 wpan0: encryption failed: -22
[   89.176319][ T4525] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[   89.452730][ T4548] Need at least one configuration in g1.
[   89.460813][ T4548] udc dummy_udc.0: failed to start g1: -22
[   89.508272][ T4525] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   90.445733][ T4560] loop4: detected capacity change from 0 to 40427
[   91.123645][ T4560] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   91.131471][ T4560] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   91.256671][ T4525] EXT4-fs (loop2): 1 truncate cleaned up
[   91.266389][ T4560] F2FS-fs (loop4): invalid crc value
[   91.319712][ T4525] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[   91.423800][ T4560] F2FS-fs (loop4): Found nat_bits in checkpoint
[   91.472391][ T4560] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   91.480664][ T4560] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   95.066383][ T4585] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   95.482597][ T4595] ieee802154 phy0 wpan0: encryption failed: -22
[   96.303791][   T26] audit: type=1800 audit(1790147637.965:12): pid=4601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.94" name="addr_traddr" dev="configfs" ino=33730 res=0 errno=0
[   97.131783][ T4607] Need at least one configuration in g1.
[   97.138317][ T4607] udc dummy_udc.0: failed to start g1: -22
[   97.522868][   T26] audit: type=1800 audit(1790147639.175:13): pid=4601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.94" name="addr_trtype" dev="configfs" ino=33738 res=0 errno=0
[   97.702962][ T4613] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[   97.962734][ T4614] loop3: detected capacity change from 0 to 40427
[   98.009901][ T4614] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   98.017740][ T4614] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   98.036530][ T4614] F2FS-fs (loop3): invalid crc value
[   98.118130][ T4614] F2FS-fs (loop3): Found nat_bits in checkpoint
[   98.175540][ T4614] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   98.182752][ T4614] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  104.119910][ T4652] ieee802154 phy0 wpan0: encryption failed: -22
[  105.894255][ T4657] FAULT_INJECTION: forcing a failure.
[  105.894255][ T4657] name failslab, interval 1, probability 0, space 0, times 0
[  105.900951][ T4646] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  105.918993][ T4657] CPU: 1 PID: 4657 Comm: syz.0.109 Not tainted syzkaller #0
[  105.926319][ T4657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  105.936477][ T4657] Call Trace:
[  105.939784][ T4657]  <TASK>
[  105.942903][ T4657]  dump_stack_lvl+0x188/0x250
[  105.947600][ T4657]  ? show_regs_print_info+0x20/0x20
[  105.952827][ T4657]  ? load_image+0x410/0x410
[  105.957354][ T4657]  ? __lock_acquire+0x7b50/0x7b50
[  105.962412][ T4657]  ? up_write+0x1b6/0x410
[  105.967063][ T4657]  should_fail+0x383/0x4b0
[  105.971722][ T4657]  should_failslab+0x5/0x20
[  105.976499][ T4657]  slab_pre_alloc_hook+0x51/0xc0
[  105.981461][ T4657]  __kmalloc+0x6b/0x340
[  105.985661][ T4657]  ? multiq_init+0x140/0x2a0
[  105.990387][ T4657]  ? tcf_block_get+0x64/0x90
[  105.995100][ T4657]  ? tcf_block_get+0x90/0x90
[  105.999687][ T4657]  multiq_init+0x140/0x2a0
[  106.004240][ T4657]  ? multiq_peek+0x2e0/0x2e0
[  106.008838][ T4657]  qdisc_create+0x7e4/0x11a0
[  106.013436][ T4657]  ? qdisc_notify+0x360/0x360
[  106.018112][ T4657]  ? lockdep_rtnl_is_held+0x22/0x30
[  106.023309][ T4657]  tc_modify_qdisc+0xae1/0x17d0
[  106.028153][ T4657]  ? rcu_lock_release+0x20/0x20
[  106.033022][ T4657]  ? rcu_lock_release+0x20/0x20
[  106.037999][ T4657]  rtnetlink_rcv_msg+0x7f1/0xf10
[  106.043313][ T4657]  ? lock_chain_count+0x20/0x20
[  106.048254][ T4657]  ? rtnetlink_bind+0x80/0x80
[  106.053045][ T4657]  ? __local_bh_enable_ip+0x136/0x1c0
[  106.058466][ T4657]  ? lockdep_hardirqs_on+0x94/0x140
[  106.063681][ T4657]  ? __local_bh_enable_ip+0x136/0x1c0
[  106.069144][ T4657]  ? _local_bh_enable+0xa0/0xa0
[  106.074188][ T4657]  ? __dev_queue_xmit+0x1b64/0x2e50
[  106.079414][ T4657]  ? dev_queue_xmit+0x20/0x20
[  106.084273][ T4657]  ? memcpy+0x3c/0x60
[  106.088485][ T4657]  ? __copy_skb_header+0x3ba/0x4f0
[  106.094052][ T4657]  netlink_rcv_skb+0x1e9/0x430
[  106.099157][ T4657]  ? rtnetlink_bind+0x80/0x80
[  106.103847][ T4657]  ? netlink_ack+0xb10/0xb10
[  106.108629][ T4657]  netlink_unicast+0x78f/0x940
[  106.113516][ T4657]  netlink_sendmsg+0x8ba/0xbe0
[  106.118280][ T4657]  ? netlink_getsockopt+0x570/0x570
[  106.123477][ T4657]  ? aa_sock_msg_perm+0x94/0x150
[  106.128424][ T4657]  ? apparmor_socket_sendmsg+0x88/0x230
[  106.133976][ T4657]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  106.139749][ T4657]  ? security_socket_sendmsg+0x7c/0xa0
[  106.145587][ T4657]  ? netlink_getsockopt+0x570/0x570
[  106.150809][ T4657]  ____sys_sendmsg+0x5be/0x8f0
[  106.156027][ T4657]  ? __sys_sendmsg_sock+0x30/0x30
[  106.161238][ T4657]  ? import_iovec+0x6f/0xa0
[  106.166117][ T4657]  ___sys_sendmsg+0x236/0x2e0
[  106.171009][ T4657]  ? __sys_sendmsg+0x290/0x290
[  106.175891][ T4657]  ? sock_do_ioctl+0x29d/0x320
[  106.181168][ T4657]  __se_sys_sendmsg+0x1b7/0x2a0
[  106.187603][ T4657]  ? __x64_sys_sendmsg+0x80/0x80
[  106.193311][ T4657]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  106.199463][ T4657]  ? lockdep_hardirqs_on+0x94/0x140
[  106.204842][ T4657]  do_syscall_64+0x4c/0xa0
[  106.209358][ T4657]  ? clear_bhb_loop+0x30/0x80
[  106.214227][ T4657]  ? clear_bhb_loop+0x30/0x80
[  106.219292][ T4657]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  106.225485][ T4657] RIP: 0033:0x7f578e86b159
[  106.230528][ T4657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  106.250348][ T4657] RSP: 002b:00007f578cac3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  106.258869][ T4657] RAX: ffffffffffffffda RBX: 00007f578eaf2fa0 RCX: 00007f578e86b159
[  106.266833][ T4657] RDX: 000000000004c840 RSI: 0000200000000140 RDI: 0000000000000004
[  106.274791][ T4657] RBP: 00007f578e90206b R08: 0000000000000000 R09: 0000000000000000
[  106.282765][ T4657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  106.290790][ T4657] R13: 00007f578eaf3038 R14: 00007f578eaf2fa0 R15: 00007ffff0246c88
[  106.299740][ T4657]  </TASK>
[  107.199417][ T4668] loop3: detected capacity change from 0 to 40427
[  107.282408][ T4668] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  107.290308][ T4668] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  107.300423][ T4668] F2FS-fs (loop3): invalid crc value
[  107.363014][ T4668] F2FS-fs (loop3): Found nat_bits in checkpoint
[  107.441987][ T4668] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  107.450921][ T4668] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  107.526612][   T26] audit: type=1326 audit(1790147649.195:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4677 comm="syz.4.115" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5545098159 code=0x0
[  108.457746][ T4689] Config c/1 of g1 needs at least one function.
[  108.464462][ T4689] udc dummy_udc.0: failed to start g1: -22
[  109.214339][   T26] audit: type=1800 audit(1790147650.875:15): pid=4691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.118" name="addr_traddr" dev="configfs" ino=33903 res=0 errno=0
[  109.289767][   T26] audit: type=1800 audit(1790147650.955:16): pid=4691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.118" name="addr_trtype" dev="configfs" ino=33912 res=0 errno=0
[  109.447129][ T4696] ieee802154 phy0 wpan0: encryption failed: -22
[  111.230602][ T4703] loop0: detected capacity change from 0 to 40427
[  111.299346][ T4703] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  111.307189][ T4703] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  111.325520][ T4703] F2FS-fs (loop0): invalid crc value
[  111.403779][ T4707] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  111.438323][ T4703] F2FS-fs (loop0): Found nat_bits in checkpoint
[  111.502700][ T4703] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  111.510202][ T4703] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  114.325450][ T4722] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  116.320545][ T4726] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  116.712912][ T4730] Config c/1 of g1 needs at least one function.
[  116.719962][ T4730] udc dummy_udc.0: failed to start g1: -22
[  117.819676][   T26] audit: type=1800 audit(1790147659.485:17): pid=4737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.132" name="addr_traddr" dev="configfs" ino=33969 res=0 errno=0
[  117.848154][   T26] audit: type=1800 audit(1790147659.515:18): pid=4737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.132" name="addr_trtype" dev="configfs" ino=34942 res=0 errno=0
[  118.929663][ T4754] ieee802154 phy0 wpan0: encryption failed: -22
[  120.575809][ T4751] loop3: detected capacity change from 0 to 40427
[  120.646784][ T4751] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  120.654618][ T4751] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  120.670082][ T4751] F2FS-fs (loop3): invalid crc value
[  120.773948][ T4751] F2FS-fs (loop3): Found nat_bits in checkpoint
[  120.827288][ T4751] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  120.834489][ T4751] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  121.142438][ T4765] loop0: detected capacity change from 0 to 40427
[  121.925522][ T4765] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  121.933392][ T4765] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  121.945117][ T4765] F2FS-fs (loop0): invalid crc value
[  122.010981][ T4765] F2FS-fs (loop0): Found nat_bits in checkpoint
[  122.053509][ T4765] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  122.060983][ T4765] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  122.828237][   T26] audit: type=1800 audit(1790147664.495:19): pid=4788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.143" name="addr_traddr" dev="configfs" ino=34018 res=0 errno=0
[  122.901507][ T4786] Config c/1 of g1 needs at least one function.
[  122.909451][ T4786] udc dummy_udc.0: failed to start g1: -22
[  122.962616][   T26] audit: type=1800 audit(1790147664.545:20): pid=4788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.143" name="addr_trtype" dev="configfs" ino=34019 res=0 errno=0
[  123.589035][ T4793] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  124.386426][ T4798] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  126.934569][ T4807] ieee802154 phy0 wpan0: encryption failed: -22
[  128.521944][ T4822] loop1: detected capacity change from 0 to 40427
[  128.540951][ T4822] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  128.549404][ T4822] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  128.561902][ T4822] F2FS-fs (loop1): invalid crc value
[  128.571634][ T4818] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  128.607525][ T4822] F2FS-fs (loop1): Found nat_bits in checkpoint
[  128.659740][ T4822] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  128.666898][ T4822] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  128.958892][ T4835] Config c/1 of g1 needs at least one function.
[  128.965422][ T4835] udc dummy_udc.0: failed to start g1: -22
[  129.564164][   T26] audit: type=1800 audit(1790147671.225:21): pid=4837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.156" name="addr_traddr" dev="configfs" ino=35074 res=0 errno=0
[  130.019960][ T4844] loop4: detected capacity change from 0 to 40427
[  130.177517][ T4843] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  130.220294][ T4844] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  130.228140][ T4844] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  130.238116][ T4844] F2FS-fs (loop4): invalid crc value
[  130.298433][ T4844] F2FS-fs (loop4): Found nat_bits in checkpoint
[  130.342622][ T4844] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  130.349958][ T4844] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  131.025815][ T4860] ieee802154 phy0 wpan0: encryption failed: -22
[  132.743492][   T26] audit: type=1800 audit(1790147674.405:22): pid=4876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.168" name="addr_traddr" dev="configfs" ino=35109 res=0 errno=0
[  132.837459][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  132.844154][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  132.994250][ T4880] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  133.438228][ T4883] loop1: detected capacity change from 0 to 40427
[  133.480263][ T4883] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  133.488471][ T4883] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  133.500827][ T4883] F2FS-fs (loop1): invalid crc value
[  133.812024][ T4883] F2FS-fs (loop1): Found nat_bits in checkpoint
[  134.111313][ T4897] Config c/1 of g1 needs at least one function.
[  134.118097][ T4897] udc dummy_udc.0: failed to start g1: -22
[  136.863599][ T4883] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  136.870854][ T4883] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  136.944046][ T4903] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  137.146162][ T4906] loop2: detected capacity change from 0 to 40427
[  137.200769][ T4906] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  137.208900][ T4906] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  137.223964][ T4906] F2FS-fs (loop2): invalid crc value
[  137.381414][ T4906] F2FS-fs (loop2): Found nat_bits in checkpoint
[  137.444724][ T4906] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  137.452424][ T4906] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  138.114705][ T4921] ieee802154 phy0 wpan0: encryption failed: -22
[  138.160878][   T26] audit: type=1800 audit(1790147679.825:23): pid=4923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.180" name="addr_traddr" dev="configfs" ino=35146 res=0 errno=0
[  138.224928][ T4926] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  140.440545][ T4952] loop4: detected capacity change from 0 to 40427
[  140.959095][ T4952] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  140.967167][ T4952] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  140.978153][ T4952] F2FS-fs (loop4): invalid crc value
[  141.132611][ T4952] F2FS-fs (loop4): Found nat_bits in checkpoint
[  141.196727][ T4952] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  141.204120][ T4952] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  141.301428][ T4959] loop2: detected capacity change from 0 to 40427
[  141.398685][ T4959] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  141.406676][ T4959] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  141.421695][ T4959] F2FS-fs (loop2): invalid crc value
[  142.321323][ T4959] F2FS-fs (loop2): Found nat_bits in checkpoint
[  142.360116][   T26] audit: type=1800 audit(1790147684.025:24): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.193" name="addr_traddr" dev="configfs" ino=35200 res=0 errno=0
[  142.411008][ T4959] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  142.418203][ T4959] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  142.485679][   T26] audit: type=1800 audit(1790147684.025:25): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.193" name="addr_trtype" dev="configfs" ino=35201 res=0 errno=0
[  143.558439][ T4988] ieee802154 phy0 wpan0: encryption failed: -22
[  145.044183][ T5005] Config c/1 of g1 needs at least one function.
[  145.051393][ T5005] udc dummy_udc.0: failed to start g1: -22
[  145.883709][   T26] audit: type=1800 audit(1790147687.545:26): pid=5010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.205" name="addr_traddr" dev="configfs" ino=35263 res=0 errno=0
[  145.997101][   T26] audit: type=1800 audit(1790147687.625:27): pid=5010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.205" name="addr_trtype" dev="configfs" ino=35270 res=0 errno=0
[  146.060563][ T5014] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  146.323838][ T5017] loop1: detected capacity change from 0 to 40427
[  146.501495][ T5021] loop0: detected capacity change from 0 to 40427
[  146.554326][ T5019] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  146.579595][ T5017] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  146.579630][ T5021] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  146.587562][ T5017] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  146.595384][ T5021] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  146.609125][ T5017] F2FS-fs (loop1): invalid crc value
[  146.617235][ T5021] F2FS-fs (loop0): invalid crc value
[  146.662021][ T5017] F2FS-fs (loop1): Found nat_bits in checkpoint
[  146.663252][ T5021] F2FS-fs (loop0): Found nat_bits in checkpoint
[  146.715192][ T5017] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  146.724757][ T5017] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  146.783526][ T5021] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  146.790744][ T5021] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  147.724933][ T5035] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  149.246226][ T5047] ieee802154 phy0 wpan0: encryption failed: -22
[  150.024907][ T5057] Config c/1 of g1 needs at least one function.
[  150.031855][ T5057] udc dummy_udc.0: failed to start g1: -22
[  150.959760][   T26] audit: type=1800 audit(1790147692.625:28): pid=5062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.216" name="addr_traddr" dev="configfs" ino=34352 res=0 errno=0
[  151.256541][ T5069] loop3: detected capacity change from 0 to 40427
[  151.755231][ T5069] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  151.764727][ T5069] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  151.818649][ T5069] F2FS-fs (loop3): invalid crc value
[  151.978804][   T26] audit: type=1800 audit(1790147692.645:29): pid=5062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.216" name="addr_trtype" dev="configfs" ino=34353 res=0 errno=0
[  152.045363][ T5069] F2FS-fs (loop3): Found nat_bits in checkpoint
[  152.110235][ T5069] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  152.117859][ T5069] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  152.141573][ T5081] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  152.360214][ T5085] loop2: detected capacity change from 0 to 40427
[  152.409175][ T5085] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  152.417514][ T5085] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  152.429695][ T5085] F2FS-fs (loop2): invalid crc value
[  153.198124][ T5085] F2FS-fs (loop2): Found nat_bits in checkpoint
[  153.296414][ T5085] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  153.303772][ T5085] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  154.257243][ T5104] ieee802154 phy0 wpan0: encryption failed: -22
[  154.401094][ T5097] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  155.331466][   T26] audit: type=1800 audit(1790147696.995:30): pid=5114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.230" name="addr_traddr" dev="configfs" ino=34424 res=0 errno=0
[  155.353763][   T26] audit: type=1800 audit(1790147697.015:31): pid=5114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.230" name="addr_trtype" dev="configfs" ino=35359 res=0 errno=0
[  156.441714][ T5126] loop3: detected capacity change from 0 to 40427
[  156.529307][ T5126] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  156.537181][ T5126] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  156.549331][ T5126] F2FS-fs (loop3): invalid crc value
[  157.887167][ T5126] F2FS-fs (loop3): Found nat_bits in checkpoint
[  157.936820][ T5138] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  157.952940][ T5126] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  157.960382][ T5126] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  158.069825][ T5145] Config c/1 of g1 needs at least one function.
[  158.076594][ T5145] udc dummy_udc.0: failed to start g1: -22
[  158.878538][ T5150] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  160.640224][   T26] audit: type=1800 audit(1790147702.305:32): pid=5159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.243" name="addr_traddr" dev="configfs" ino=34483 res=0 errno=0
[  160.959527][ T5164] loop0: detected capacity change from 0 to 40427
[  161.009663][   T26] audit: type=1800 audit(1790147702.305:33): pid=5159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.243" name="addr_trtype" dev="configfs" ino=34484 res=0 errno=0
[  161.099042][ T5164] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  161.107631][ T5164] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  161.174550][ T5164] F2FS-fs (loop0): invalid crc value
[  161.411650][ T5164] F2FS-fs (loop0): Found nat_bits in checkpoint
[  161.565089][ T5164] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  161.574480][ T5164] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  164.465592][ T5192] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  164.680340][ T5200] loop1: detected capacity change from 0 to 40427
[  164.697314][ T5202] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  164.742131][ T5200] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  164.750472][ T5200] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  164.760913][ T5200] F2FS-fs (loop1): invalid crc value
[  164.794193][ T5200] F2FS-fs (loop1): Found nat_bits in checkpoint
[  164.851180][ T5200] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  164.858403][ T5200] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  165.268742][   T26] audit: type=1800 audit(1790147706.935:34): pid=5213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.254" name="addr_traddr" dev="configfs" ino=35471 res=0 errno=0
[  165.375529][   T26] audit: type=1800 audit(1790147706.995:35): pid=5213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.254" name="addr_trtype" dev="configfs" ino=35472 res=0 errno=0
[  165.576840][ T5219] Config c/1 of g1 needs at least one function.
[  165.583649][ T5219] udc dummy_udc.0: failed to start g1: -22
[  167.359294][ T5232] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  168.425509][ T5248] loop4: detected capacity change from 0 to 40427
[  169.147770][ T5249] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  169.175951][ T5248] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  169.184740][ T5248] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  169.196875][ T5248] F2FS-fs (loop4): invalid crc value
[  169.249970][ T5248] F2FS-fs (loop4): Found nat_bits in checkpoint
[  169.460275][ T5260] loop2: detected capacity change from 0 to 40427
[  169.503615][ T5248] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  169.510813][ T5248] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  169.513178][   T26] audit: type=1800 audit(1790147711.175:36): pid=5264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.267" name="addr_traddr" dev="configfs" ino=34594 res=0 errno=0
[  169.533197][ T5264] nvmet: Invalid value 'tc' for trtype
[  169.543271][ T5260] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  169.552732][ T5260] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  170.513437][   T26] audit: type=1800 audit(1790147711.195:37): pid=5264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.267" name="addr_trtype" dev="configfs" ino=35555 res=0 errno=0
[  170.526416][ T5260] F2FS-fs (loop2): invalid crc value
[  170.568890][ T5260] F2FS-fs (loop2): Found nat_bits in checkpoint
[  170.629666][ T5260] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  170.637337][ T5260] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  170.761842][ T5271] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  173.947465][ T5304] Config c/1 of g1 needs at least one function.
[  173.954930][ T5304] udc dummy_udc.0: failed to start g1: -22
[  174.493651][   T26] audit: type=1800 audit(1790147716.155:38): pid=5307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.278" name="addr_traddr" dev="configfs" ino=34644 res=0 errno=0
[  174.518265][ T5307] nvmet: Invalid value 'tc' for trtype
[  174.534699][   T26] audit: type=1800 audit(1790147716.185:39): pid=5307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.278" name="addr_trtype" dev="configfs" ino=34645 res=0 errno=0
[  174.742566][ T5311] loop1: detected capacity change from 0 to 40427
[  174.813686][ T5316] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  175.070439][ T5311] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  175.078789][ T5311] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  175.099807][ T5311] F2FS-fs (loop1): invalid crc value
[  176.088778][ T5311] F2FS-fs (loop1): Found nat_bits in checkpoint
[  176.193788][ T5311] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  176.201285][ T5311] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  176.507891][ T5322] loop0: detected capacity change from 0 to 40427
[  176.539306][ T5322] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  176.547329][ T5322] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  176.561091][ T5322] F2FS-fs (loop0): invalid crc value
[  176.656343][ T5322] F2FS-fs (loop0): Found nat_bits in checkpoint
[  176.714548][ T5322] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  176.723797][ T5322] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  179.588216][ T5348] Config c/1 of g1 needs at least one function.
[  179.595057][ T5348] udc dummy_udc.0: failed to start g1: -22
[  179.638386][ T5343] FAULT_INJECTION: forcing a failure.
[  179.638386][ T5343] name fail_futex, interval 1, probability 0, space 0, times 1
[  179.834560][ T5343] CPU: 0 PID: 5343 Comm: syz.3.288 Not tainted syzkaller #0
[  179.841905][ T5343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  179.852334][ T5343] Call Trace:
[  179.855623][ T5343]  <TASK>
[  179.858651][ T5343]  dump_stack_lvl+0x188/0x250
[  179.864977][ T5343]  ? futex_wait_queue_me+0x16e/0x440
[  179.872029][ T5343]  ? show_regs_print_info+0x20/0x20
[  179.877447][ T5343]  ? load_image+0x410/0x410
[  179.883168][ T5343]  ? mark_lock+0x94/0x320
[  179.888146][ T5343]  should_fail+0x383/0x4b0
[  179.892878][ T5343]  get_futex_key+0x1a1/0x12d0
[  179.897597][ T5343]  ? futex_wait_restart+0x250/0x250
[  179.903307][ T5343]  ? __lock_acquire+0x13dc/0x7b50
[  179.909129][ T5343]  futex_wake+0x101/0x540
[  179.913757][ T5343]  ? futex_wait+0x680/0x680
[  179.918732][ T5343]  ? verify_lock_unused+0x140/0x140
[  179.924051][ T5343]  ? verify_lock_unused+0x140/0x140
[  179.929386][ T5343]  do_futex+0xd83/0x12b0
[  179.933774][ T5343]  ? rcu_lock_release+0x9/0x20
[  179.938561][ T5343]  ? futex_exit_release+0x1c0/0x1c0
[  179.943786][ T5343]  ? __context_tracking_exit+0x4c/0x80
[  179.949456][ T5343]  __se_sys_futex+0x389/0x420
[  179.954288][ T5343]  ? __x64_sys_futex+0xf0/0xf0
[  179.959386][ T5343]  ? __x64_sys_futex+0x1d/0xf0
[  179.964349][ T5343]  do_syscall_64+0x4c/0xa0
[  179.968883][ T5343]  ? clear_bhb_loop+0x30/0x80
[  179.974361][ T5343]  ? clear_bhb_loop+0x30/0x80
[  179.979695][ T5343]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  179.985600][ T5343] RIP: 0033:0x7fb44d177159
[  179.990949][ T5343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  180.010932][ T5343] RSP: 002b:00007fb44b3cf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  180.019375][ T5343] RAX: ffffffffffffffda RBX: 00007fb44d3fefa8 RCX: 00007fb44d177159
[  180.027352][ T5343] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb44d3fefac
[  180.035628][ T5343] RBP: 00007fb44d3fefa0 R08: 0023cd9062ba4e08 R09: 0000000000000000
[  180.043872][ T5343] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  180.051837][ T5343] R13: 00007fb44d3ff038 R14: 00007ffc90915b50 R15: 00007ffc90915c38
[  180.060267][ T5343]  </TASK>
[  181.143408][   T26] audit: type=1800 audit(1790147722.805:40): pid=5359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.293" name="addr_traddr" dev="configfs" ino=35693 res=0 errno=0
[  181.402943][ T5359] nvmet: Invalid value 'tc' for trtype
[  181.504314][   T26] audit: type=1800 audit(1790147723.065:41): pid=5359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.293" name="addr_trtype" dev="configfs" ino=35698 res=0 errno=0
[  181.695288][ T5371] loop3: detected capacity change from 0 to 40427
[  181.719589][ T5371] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  181.731361][ T5371] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  181.742346][ T5371] F2FS-fs (loop3): invalid crc value
[  182.022247][ T5368] loop0: detected capacity change from 0 to 40427
[  182.071911][ T5368] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  182.079709][ T5368] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  182.089562][ T5368] F2FS-fs (loop0): invalid crc value
[  182.289092][ T5369] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  182.337685][ T5371] F2FS-fs (loop3): Found nat_bits in checkpoint
[  182.495098][ T5368] F2FS-fs (loop0): Found nat_bits in checkpoint
[  182.915326][ T5384] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  182.937565][ T5368] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  182.941536][ T5371] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  182.944801][ T5368] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  182.951819][ T5371] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  185.240362][ T5407] Config c/1 of g1 needs at least one function.
[  185.248135][ T5407] udc dummy_udc.0: failed to start g1: -22
[  187.266439][   T21] Bluetooth: hci0: command 0x0406 tx timeout
[  187.272666][   T21] Bluetooth: hci3: command 0x0406 tx timeout
[  187.308054][ T5418] FAULT_INJECTION: forcing a failure.
[  187.308054][ T5418] name fail_futex, interval 1, probability 0, space 0, times 0
[  187.348606][   T21] Bluetooth: hci4: command 0x0406 tx timeout
[  187.368402][   T21] Bluetooth: hci1: command 0x0406 tx timeout
[  187.386821][ T5418] CPU: 1 PID: 5418 Comm: syz.4.306 Not tainted syzkaller #0
[  187.395314][ T5418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  187.406082][ T5418] Call Trace:
[  187.409462][ T5418]  <TASK>
[  187.412640][ T5418]  dump_stack_lvl+0x188/0x250
[  187.417717][ T5418]  ? show_regs_print_info+0x20/0x20
[  187.422971][ T5418]  ? load_image+0x410/0x410
[  187.427507][ T5418]  should_fail+0x383/0x4b0
[  187.432073][ T5418]  get_futex_key+0x1a1/0x12d0
[  187.436848][ T5418]  ? futex_wait_restart+0x250/0x250
[  187.442914][ T5418]  futex_wake+0x101/0x540
[  187.447572][ T5418]  ? verify_lock_unused+0x140/0x140
[  187.452884][ T5418]  ? verify_lock_unused+0x140/0x140
[  187.458418][ T5418]  ? futex_wait+0x680/0x680
[  187.462950][ T5418]  do_futex+0xd83/0x12b0
[  187.467449][ T5418]  ? __might_sleep+0xf0/0xf0
[  187.472854][ T5418]  ? __might_fault+0xb7/0x110
[  187.479094][ T5418]  ? futex_exit_release+0x1c0/0x1c0
[  187.484999][ T5418]  ? __lock_acquire+0x7b50/0x7b50
[  187.491369][ T5418]  mm_release+0x278/0x3c0
[  187.495820][ T5418]  ? exit_mm_release+0x30/0x30
[  187.501084][ T5418]  ? lockdep_hardirqs_on+0x94/0x140
[  187.506839][ T5418]  exit_mm+0xaf/0x7b0
[  187.511101][ T5418]  ? perf_pmu_migrate_context+0xb70/0xb70
[  187.516865][ T5418]  ? do_exit+0x2110/0x2110
[  187.523130][ T5418]  ? rcu_is_watching+0x11/0xa0
[  187.528887][ T5418]  ? mm_trace_rss_stat+0x81/0x1c0
[  187.534177][ T5418]  ? sync_mm_rss+0x211/0x350
[  187.539400][ T5418]  do_exit+0x5b8/0x2110
[  187.543696][ T5418]  ? put_task_struct+0x80/0x80
[  187.548679][ T5418]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  187.555390][ T5418]  ? _raw_spin_lock_irq+0xb7/0xf0
[  187.561598][ T5418]  do_group_exit+0x12c/0x2f0
[  187.566594][ T5418]  ? lockdep_hardirqs_on+0x94/0x140
[  187.571948][ T5418]  get_signal+0x7eb/0x12e0
[  187.576507][ T5418]  arch_do_signal_or_restart+0xe6/0x12a0
[  187.582201][ T5418]  ? futex_exit_release+0x1c0/0x1c0
[  187.587507][ T5418]  ? get_sigframe_size+0x10/0x10
[  187.592473][ T5418]  ? __context_tracking_exit+0x4c/0x80
[  187.598078][ T5418]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  187.604344][ T5418]  ? exit_to_user_mode_loop+0x3b/0x130
[  187.609913][ T5418]  exit_to_user_mode_loop+0x9e/0x130
[  187.615600][ T5418]  exit_to_user_mode_prepare+0xee/0x180
[  187.623429][ T5418]  syscall_exit_to_user_mode+0x16/0x40
[  187.629769][ T5418]  do_syscall_64+0x58/0xa0
[  187.636953][ T5418]  ? clear_bhb_loop+0x30/0x80
[  187.643347][ T5418]  ? clear_bhb_loop+0x30/0x80
[  187.648520][ T5418]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  187.656170][ T5418] RIP: 0033:0x7f5545098159
[  187.661592][ T5418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  187.682168][ T5418] RSP: 002b:00007f55432f00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  187.690771][ T5418] RAX: fffffffffffffe00 RBX: 00007f554531ffa8 RCX: 00007f5545098159
[  187.700194][ T5418] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f554531ffa8
[  187.709567][ T5418] RBP: 00007f554531ffa0 R08: 0000000000000000 R09: 0000000000000000
[  187.719431][ T5418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  187.728131][ T5418] R13: 00007f5545320038 R14: 00007ffd39dfb8c0 R15: 00007ffd39dfb9a8
[  187.738931][ T5418]  </TASK>
[  187.751964][   T21] Bluetooth: hci2: command 0x0406 tx timeout
[  187.800294][ T5425] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  187.847218][ T5425] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  188.107916][ T5434] loop2: detected capacity change from 0 to 40427
[  188.133740][ T5439] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  188.149381][ T5434] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  188.157303][ T5434] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  188.167140][ T5434] F2FS-fs (loop2): invalid crc value
[  188.887082][ T5434] F2FS-fs (loop2): Found nat_bits in checkpoint
[  188.933216][ T5434] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  188.941136][ T5434] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  189.250036][ T5453] Config c/1 of g1 needs at least one function.
[  189.256855][ T5453] udc dummy_udc.0: failed to start g1: -22
[  191.835239][ T5473] vivid-001: kernel_thread() failed
[  193.977909][ T5502] Config c/1 of g1 needs at least one function.
[  193.984834][ T5502] udc dummy_udc.0: failed to start g1: -22
[  194.277599][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  194.284343][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  195.542192][ T5514] vivid-001: kernel_thread() failed
[  195.624786][ T5511] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  195.779693][ T5524] loop1: detected capacity change from 0 to 40427
[  195.839642][ T5524] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  195.847544][ T5524] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  195.861298][ T5524] F2FS-fs (loop1): invalid crc value
[  195.924714][ T5524] F2FS-fs (loop1): Found nat_bits in checkpoint
[  195.935276][ T5530] device syzkaller0 entered promiscuous mode
[  195.991133][ T5524] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  195.997251][ T5530] tipc: Started in network mode
[  195.998430][ T5524] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  196.005524][ T5530] tipc: Node identity b2f182e5716e, cluster identity 4711
[  196.020833][ T5530] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.158278][ T5528] tipc: Resetting bearer <eth:syzkaller0>
[  196.258342][ T5528] tipc: Disabling bearer <eth:syzkaller0>
[  197.060782][ T5549] Config c/1 of g1 needs at least one function.
[  197.068691][ T5549] udc dummy_udc.0: failed to start g1: -22
[  199.683154][ T5569] vivid-001: kernel_thread() failed
[  199.797474][ T5559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.347'.
[  200.218510][ T5584] loop4: detected capacity change from 0 to 40427
[  200.353361][ T5584] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  200.361459][ T5584] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  200.419536][ T5586] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  200.434820][ T5584] F2FS-fs (loop4): invalid crc value
[  200.507797][ T5584] F2FS-fs (loop4): Found nat_bits in checkpoint
[  200.559581][ T5584] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  200.567336][ T5584] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  200.952125][ T5602] FAULT_INJECTION: forcing a failure.
[  200.952125][ T5602] name failslab, interval 1, probability 0, space 0, times 0
[  201.035991][ T5602] CPU: 1 PID: 5602 Comm: syz.4.358 Not tainted syzkaller #0
[  201.043330][ T5602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  201.053465][ T5602] Call Trace:
[  201.056742][ T5602]  <TASK>
[  201.059795][ T5602]  dump_stack_lvl+0x188/0x250
[  201.064794][ T5602]  ? show_regs_print_info+0x20/0x20
[  201.069987][ T5602]  ? load_image+0x410/0x410
[  201.074506][ T5602]  ? __might_sleep+0xf0/0xf0
[  201.079178][ T5602]  ? __lock_acquire+0x7b50/0x7b50
[  201.084224][ T5602]  ? format_decode+0xb38/0x1330
[  201.089078][ T5602]  should_fail+0x383/0x4b0
[  201.093594][ T5602]  should_failslab+0x5/0x20
[  201.098086][ T5602]  slab_pre_alloc_hook+0x51/0xc0
[  201.103012][ T5602]  ? __d_alloc+0x27/0x6d0
[  201.107336][ T5602]  kmem_cache_alloc+0x3d/0x280
[  201.112564][ T5602]  __d_alloc+0x27/0x6d0
[  201.116894][ T5602]  d_alloc_name+0xb7/0x320
[  201.121650][ T5602]  ? vsprintf+0x30/0x30
[  201.126043][ T5602]  ? d_alloc_pseudo+0x70/0x70
[  201.131110][ T5602]  devpts_pty_new+0x37c/0x650
[  201.136171][ T5602]  ? devpts_kill_index+0x40/0x40
[  201.141337][ T5602]  ? do_raw_spin_unlock+0x11d/0x230
[  201.146725][ T5602]  ptmx_open+0x1b9/0x2c0
[  201.150965][ T5602]  chrdev_open+0x585/0x5f0
[  201.155643][ T5602]  ? cd_forget+0x160/0x160
[  201.160319][ T5602]  ? fsnotify_perm+0x3a7/0x560
[  201.165343][ T5602]  ? cd_forget+0x160/0x160
[  201.169795][ T5602]  do_dentry_open+0x7f7/0xf90
[  201.174693][ T5602]  ? vfs_open+0x2b/0x80
[  201.178880][ T5602]  path_openat+0x2718/0x2fb0
[  201.183546][ T5602]  ? __kasan_slab_alloc+0xa9/0xc0
[  201.188580][ T5602]  ? do_filp_open+0x400/0x400
[  201.193473][ T5602]  do_filp_open+0x1df/0x400
[  201.198214][ T5602]  ? vfs_tmpfile+0x300/0x300
[  201.202980][ T5602]  ? _raw_spin_unlock+0x24/0x40
[  201.208319][ T5602]  ? alloc_fd+0x59e/0x650
[  201.212742][ T5602]  do_sys_openat2+0x14b/0x500
[  201.217709][ T5602]  ? __lock_acquire+0x7b50/0x7b50
[  201.222994][ T5602]  ? do_sys_open+0xe0/0xe0
[  201.227651][ T5602]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  201.233947][ T5602]  ? lock_chain_count+0x20/0x20
[  201.238990][ T5602]  __x64_sys_openat+0x135/0x160
[  201.243934][ T5602]  do_syscall_64+0x4c/0xa0
[  201.248430][ T5602]  ? clear_bhb_loop+0x30/0x80
[  201.253125][ T5602]  ? clear_bhb_loop+0x30/0x80
[  201.257952][ T5602]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  201.263835][ T5602] RIP: 0033:0x7f5545098159
[  201.268238][ T5602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  201.288137][ T5602] RSP: 002b:00007f55432f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  201.297067][ T5602] RAX: ffffffffffffffda RBX: 00007f554531ffa0 RCX: 00007f5545098159
[  201.305137][ T5602] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c
[  201.313425][ T5602] RBP: 00007f554512f06b R08: 0000000000000000 R09: 0000000000000000
[  201.321523][ T5602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  201.329800][ T5602] R13: 00007f5545320038 R14: 00007f554531ffa0 R15: 00007ffd39dfb9a8
[  201.337993][ T5602]  </TASK>
[  201.346377][ T4232] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  202.436388][ T5609] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000
[  202.456957][ T4232] usb 4-1: Using ep0 maxpacket: 8
[  202.665931][ T4232] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  202.675134][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.749413][ T4232] pvrusb2: Hardware description: Terratec Grabster AV400
[  202.764460][ T4232] pvrusb2: **********
[  202.768781][ T4232] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  202.782289][ T4232] pvrusb2: Important functionality might not be entirely working.
[  202.790964][ T4232] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  202.802887][ T4232] pvrusb2: **********
[  202.988082][ T2425] pvrusb2: Invalid write control endpoint
[  204.497144][ T4232] usb 4-1: USB disconnect, device number 2
[  204.687125][ T2425] pvrusb2: Invalid write control endpoint
[  204.693066][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  204.760654][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  204.776023][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  204.951966][ T2425] pvrusb2: Device being rendered inoperable
[  205.044171][ T5637] loop4: detected capacity change from 0 to 40427
[  205.091663][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  205.115816][ T5637] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  205.123741][ T5637] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  205.152093][ T5637] F2FS-fs (loop4): invalid crc value
[  205.162918][ T5640] loop1: detected capacity change from 0 to 1024
[  205.285110][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  205.551991][ T2425] pvrusb2: Attached sub-driver cx25840
[  205.656069][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  205.765805][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  205.831074][ T5640] EXT4-fs (loop1): Ignoring removed bh option
[  205.855920][ T5637] F2FS-fs (loop4): Found nat_bits in checkpoint
[  205.889627][ T5645] loop0: detected capacity change from 0 to 2048
[  205.915390][ T5637] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  205.922546][ T5637] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  205.923782][ T5640] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,nodiscard,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,lazytime,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,acl,,errors=continue. Quota mode: none.
[  205.978705][ T5640] EXT4-fs (loop1): Online defrag not supported with bigalloc
[  206.106464][ T4185] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  207.780691][   T26] audit: type=1326 audit(1790147749.425:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5674 comm="syz.1.379" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26e75a159 code=0x7ffc0000
[  207.815698][   T26] audit: type=1326 audit(1790147749.425:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5674 comm="syz.1.379" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26e75a159 code=0x7ffc0000
[  208.302602][   T26] audit: type=1326 audit(1790147749.455:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5674 comm="syz.1.379" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26e75a159 code=0x7ffc0000
[  208.348465][   T26] audit: type=1326 audit(1790147749.455:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5674 comm="syz.1.379" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26e75a159 code=0x7ffc0000
[  208.403725][   T26] audit: type=1326 audit(1790147749.475:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5674 comm="syz.1.379" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fe26e75a159 code=0x7ffc0000
[  208.431056][   T26] audit: type=1326 audit(1790147749.475:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5674 comm="syz.1.379" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26e75a159 code=0x7ffc0000
[  208.582701][   T26] audit: type=1326 audit(1790147749.475:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5674 comm="syz.1.379" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26e75a159 code=0x7ffc0000
[  208.625885][ T4291] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  208.715729][   T26] audit: type=1326 audit(1790147749.475:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5674 comm="syz.1.379" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26e75a159 code=0x7ffc0000
[  208.765017][   T26] audit: type=1326 audit(1790147749.485:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5674 comm="syz.1.379" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe26e75a159 code=0x7ffc0000
[  208.835037][   T26] audit: type=1326 audit(1790147749.525:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5674 comm="syz.1.379" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26e75a159 code=0x7ffc0000
[  209.395815][ T4291] usb 4-1: config 0 has an invalid interface number: 50 but max is 0
[  209.408462][ T4291] usb 4-1: config 0 has no interface number 0
[  209.431737][ T4291] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  209.744350][ T5695] loop2: detected capacity change from 0 to 40427
[  209.785933][ T4291] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  209.839822][ T5695] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  209.848295][ T5695] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  209.864661][ T5695] F2FS-fs (loop2): invalid crc value
[  210.434732][ T4291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.537452][ T5695] F2FS-fs (loop2): Found nat_bits in checkpoint
[  210.595969][ T4291] usb 4-1: Product: syz
[  210.600669][ T5695] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  210.608088][ T5695] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  210.708998][ T4291] usb 4-1: Manufacturer: syz
[  210.714846][ T4291] usb 4-1: SerialNumber: syz
[  210.738730][ T4291] usb 4-1: config 0 descriptor??
[  211.289021][ T4291] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0
[  211.591492][ T4291] usb 4-1: USB disconnect, device number 3
[  211.771046][ T4291] yurex 4-1:0.50: USB YUREX #0 now disconnected
[  211.826568][ T5713] md: array md0 already has disks!
[  211.857659][ T5713] md: could not open device unknown-block(7,0).
[  211.882820][ T5713] md: error, md_import_device() returned -16
[  213.401314][ T5720] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  215.023691][ T5736] futex_wake_op: syz.3.398 tries to shift op by 144; fix this program
[  215.032490][ T5736] futex_wake_op: syz.3.398 tries to shift op by 144; fix this program
[  219.234887][ T5772] loop1: detected capacity change from 0 to 512
[  219.272801][ T5772] EXT4-fs (loop1): bad s_min_extra_isize: 544
[  221.593154][ T4291] Bluetooth: hci5: command 0x1003 tx timeout
[  221.610152][ T4203] Bluetooth: hci5: sending frame failed (-49)
[  222.114033][ T5811] loop4: detected capacity change from 0 to 128
[  222.371793][ T5815] md: array md0 already has disks!
[  222.411752][ T5815] md: could not open device unknown-block(7,0).
[  222.433150][ T5815] md: error, md_import_device() returned -16
[  222.651753][ T5823] zram0: detected capacity change from 0 to 8
[  222.701484][ T5820] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  222.709778][ T5820] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  222.718297][ T5820] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  222.818489][ T5825] sctp: failed to load transform for md5: -2
[  223.787470][ T4232] Bluetooth: hci5: command 0x1001 tx timeout
[  223.869344][ T4203] Bluetooth: hci5: sending frame failed (-49)
[  223.906488][ T5838] FAULT_INJECTION: forcing a failure.
[  223.906488][ T5838] name failslab, interval 1, probability 0, space 0, times 0
[  223.946016][ T5838] CPU: 0 PID: 5838 Comm: syz.0.423 Not tainted syzkaller #0
[  223.953345][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  223.963488][ T5838] Call Trace:
[  223.966876][ T5838]  <TASK>
[  223.969793][ T5838]  dump_stack_lvl+0x188/0x250
[  223.974459][ T5838]  ? show_regs_print_info+0x20/0x20
[  223.979819][ T5838]  ? load_image+0x410/0x410
[  223.984314][ T5838]  ? __might_sleep+0xf0/0xf0
[  223.988893][ T5838]  ? __lock_acquire+0x7b50/0x7b50
[  223.993920][ T5838]  should_fail+0x383/0x4b0
[  223.998327][ T5838]  should_failslab+0x5/0x20
[  224.002815][ T5838]  slab_pre_alloc_hook+0x51/0xc0
[  224.007757][ T5838]  kmem_cache_alloc_trace+0x47/0x290
[  224.013083][ T5838]  ? apply_wqattrs_prepare+0xeb/0xad0
[  224.018561][ T5838]  apply_wqattrs_prepare+0xeb/0xad0
[  224.023757][ T5838]  ? mutex_lock_io_nested+0x60/0x60
[  224.028995][ T5838]  apply_workqueue_attrs+0xd0/0x170
[  224.034219][ T5838]  alloc_workqueue+0xf1e/0x1450
[  224.039094][ T5838]  ? mempool_init_node+0x3c0/0x480
[  224.044225][ T5838]  ? apply_workqueue_attrs+0x170/0x170
[  224.049706][ T5838]  ? ceph_msgpool_init+0x180/0x180
[  224.054832][ T5838]  ? mempool_create+0x7d/0xc0
[  224.059522][ T5838]  ? mempool_create+0xad/0xc0
[  224.064209][ T5838]  ? ceph_msgpool_init+0xcd/0x180
[  224.069251][ T5838]  ceph_osdc_init+0x5fe/0x8a0
[  224.074081][ T5838]  ceph_create_client+0x242/0x300
[  224.079121][ T5838]  ceph_get_tree+0xf6/0x1290
[  224.083725][ T5838]  ? bpf_lsm_capable+0x5/0x10
[  224.088501][ T5838]  ? security_capable+0x85/0xb0
[  224.093373][ T5838]  vfs_get_tree+0x88/0x270
[  224.097807][ T5838]  vfs_fsconfig_locked+0x22f/0x400
[  224.102935][ T5838]  __se_sys_fsconfig+0x69e/0x7e0
[  224.107896][ T5838]  ? __x64_sys_fsconfig+0xc0/0xc0
[  224.112952][ T5838]  ? lockdep_hardirqs_on+0x94/0x140
[  224.118251][ T5838]  ? __x64_sys_fsconfig+0x1c/0xc0
[  224.123292][ T5838]  do_syscall_64+0x4c/0xa0
[  224.127723][ T5838]  ? clear_bhb_loop+0x30/0x80
[  224.132432][ T5838]  ? clear_bhb_loop+0x30/0x80
[  224.137123][ T5838]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  224.143042][ T5838] RIP: 0033:0x7f578e86b159
[  224.147467][ T5838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  224.167342][ T5838] RSP: 002b:00007f578cac3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  224.175774][ T5838] RAX: ffffffffffffffda RBX: 00007f578eaf2fa0 RCX: 00007f578e86b159
[  224.183869][ T5838] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[  224.191886][ T5838] RBP: 00007f578e90206b R08: 0000000000000000 R09: 0000000000000000
[  224.199874][ T5838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  224.207858][ T5838] R13: 00007f578eaf3038 R14: 00007f578eaf2fa0 R15: 00007ffff0246c88
[  224.215885][ T5838]  </TASK>
[  225.809745][   T13] wiimote 0005:057E:0330.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0
[  225.840801][   T13] wiimote 0005:057E:0330.0001: New device registered
[  225.940314][ T5855] Config c/1 of g1 needs at least one function.
[  225.947168][ T5855] udc dummy_udc.0: failed to start g1: -22
[  225.964148][ T4232] Bluetooth: hci5: command 0x1009 tx timeout
[  226.576207][ T5850] wiimote 0005:057E:0330.0001: Device removed
[  226.882463][ T5861] fido_id[5861]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  227.642677][ T5409] wiimote 0005:057E:0330.0001: detected device: Nintendo Wii Remote Plus (Gen 2)
[  227.664492][ T5409] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0001/input/input6
[  227.687219][ T5409] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0001/input/input7
[  227.705901][ T5409] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0001/input/input5
[  227.987645][ T5866] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  228.068334][ T5877] md: array md0 already has disks!
[  228.074146][ T5877] md: could not open device unknown-block(7,0).
[  228.082798][ T5877] md: error, md_import_device() returned -16
[  230.552445][ T5904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.438'.
[  230.581360][ T5905] 9pnet_virtio: no channels available for device syz
[  230.666551][ T5907] Config c/1 of g1 needs at least one function.
[  230.673452][ T5907] udc dummy_udc.0: failed to start g1: -22
[  231.232151][ T5905] overlayfs: failed to resolve './file1': -2
[  231.427374][ T5916] md: array md0 already has disks!
[  231.470262][ T5916] md: could not open device unknown-block(7,0).
[  231.481009][ T5916] md: error, md_import_device() returned -16
[  231.651150][ T5925] loop4: detected capacity change from 0 to 16
[  231.741651][ T5925] erofs: (device loop4): erofs_read_superblock: blkszbits 9 isn't supported on this platform
[  232.421433][ T5933] syz.1.448 uses obsolete (PF_INET,SOCK_PACKET)
[  232.559866][   T26] kauditd_printk_skb: 65 callbacks suppressed
[  232.559882][   T26] audit: type=1800 audit(1790147774.225:117): pid=5938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.449" name=08 dev="sda1" ino=2047 res=0 errno=0
[  232.662540][ T5940] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  232.725490][   T26] audit: type=1800 audit(1790147774.375:118): pid=5941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.449" name=08 dev="sda1" ino=2047 res=0 errno=0
[  234.084911][ T5951] 8021q: VLANs not supported on wg0
[  234.267008][ T5956] Config c/1 of g1 needs at least one function.
[  234.273822][ T5956] udc dummy_udc.0: failed to start g1: -22
[  236.294685][ T5964] md: array md0 already has disks!
[  236.331489][ T5964] md: could not open device unknown-block(7,0).
[  236.374835][ T5964] md: error, md_import_device() returned -16
[  236.634293][ T5969] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  236.742814][   T26] audit: type=1800 audit(1790147778.405:119): pid=5972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.461" name=08 dev="sda1" ino=2047 res=0 errno=0
[  236.896162][   T26] audit: type=1800 audit(1790147778.555:120): pid=5973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.461" name=08 dev="sda1" ino=2047 res=0 errno=0
[  237.710266][ T5980] loop3: detected capacity change from 0 to 40427
[  237.752698][ T5980] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  237.760661][ T5980] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  237.776093][ T5980] F2FS-fs (loop3): invalid crc value
[  237.842461][ T5980] F2FS-fs (loop3): Found nat_bits in checkpoint
[  237.889103][ T5980] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  237.896358][ T5980] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  239.422489][ T5992] loop1: detected capacity change from 0 to 131072
[  239.588329][ T5994] Config c/1 of g1 needs at least one function.
[  239.595178][ T5994] udc dummy_udc.0: failed to start g1: -22
[  239.853266][ T5992] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[  239.861571][ T5992] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  239.885988][ T5992] F2FS-fs (loop1): invalid crc value
[  239.915000][ T5992] F2FS-fs (loop1): Found nat_bits in checkpoint
[  240.248843][ T5992] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  240.256163][ T5992] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  240.378679][ T5999] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  242.424785][ T6010] ODEBUG: Out of memory. ODEBUG disabled
[  242.494548][ T6010] syz.4.472 (6010): drop_caches: 2
[  243.061310][ T6021] loop4: detected capacity change from 0 to 4096
[  243.105913][ T4291] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  243.216264][ T6023] md: array md0 already has disks!
[  243.221988][ T6023] md: could not open device unknown-block(7,0).
[  243.243327][ T6023] md: error, md_import_device() returned -16
[  243.250909][ T6024] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  243.264146][ T6021] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  243.316054][ T6021] NILFS (loop4): mounting fs with errors
[  243.511231][ T6027] Cannot find add_set index 0 as target
[  243.517127][ T4291] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  243.562833][ T4291] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  243.876182][ T4291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.884774][ T6031] Config c/1 of g1 needs at least one function.
[  243.891250][ T6031] udc dummy_udc.0: failed to start g1: -22
[  243.924924][ T6034] loop1: detected capacity change from 0 to 512
[  243.986637][ T4291] cxacru 4-1:1.0: usbatm_usb_probe: bind failed: -19!
[  244.280127][ T4630] usb 4-1: USB disconnect, device number 4
[  245.641900][ T6055] loop3: detected capacity change from 0 to 8
[  246.246010][ T6058] md: array md0 already has disks!
[  246.258059][ T6065] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  246.307799][ T6055] SQUASHFS error: zlib decompression failed, data probably corrupt
[  246.323582][ T6061] md: could not open device unknown-block(7,0).
[  246.505333][ T6055] SQUASHFS error: Failed to read block 0x9b: -5
[  246.532141][ T6061] md: error, md_import_device() returned -16
[  246.715136][ T6055] SQUASHFS error: Unable to read metadata cache entry [99]
[  246.750982][ T6055] SQUASHFS error: Unable to read inode 0x127
[  246.774348][ T6062] bridge0: port 3(wlan1) entered blocking state
[  246.781337][ T6062] bridge0: port 3(wlan1) entered disabled state
[  246.793069][ T6062] device wlan1 entered promiscuous mode
[  246.874530][ T6054] bridge0: port 3(wlan1) entered disabled state
[  246.896988][ T6054] device wlan1 left promiscuous mode
[  246.902986][ T6054] bridge0: port 3(wlan1) entered disabled state
[  246.975591][   T26] audit: type=1800 audit(1790147788.645:121): pid=6077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.491" name="UDC" dev="configfs" ino=37609 res=0 errno=0
[  248.886291][ T6092] loop2: detected capacity change from 0 to 128
[  248.915797][ T4230] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  249.025524][ T6092] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  249.516028][ T4230] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  249.768908][ T4230] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  249.936560][ T6102] md: array md0 already has disks!
[  249.967552][ T6102] md: could not open device unknown-block(7,0).
[  249.974638][ T6102] md: error, md_import_device() returned -16
[  250.115811][ T4230] usb 1-1: Dual-Role OTG device on HNP port
[  250.132362][ T6105] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  250.156563][ T4230] usb 1-1: New USB device found, idVendor=0001, idProduct=0000, bcdDevice= 5.15
[  250.168859][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.207463][    C0] ------------[ cut here ]------------
[  250.213256][    C0] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0
[  250.220452][    C0] WARNING: CPU: 0 PID: 6103 at drivers/usb/gadget/udc/core.c:108 usb_ep_enable+0x25f/0x440
[  250.230475][    C0] Modules linked in:
[  250.234395][    C0] CPU: 0 PID: 6103 Comm: syz.1.499 Not tainted syzkaller #0
[  250.241777][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  250.246081][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.502'.
[  250.251839][    C0] RIP: 0010:usb_ep_enable+0x25f/0x440
[  250.251919][    C0] Code: 49 8b 0e 48 c7 c0 00 29 d5 8a 49 c7 c0 20 29 d5 8a 4c 0f 44 c0 48 c7 c7 c0 28 d5 8a 48 c7 c6 63 bb e1 8b 89 ea e8 c1 70 80 03 <0f> 0b e9 e1 fe ff ff e8 85 3b 43 fb 49 bc 00 00 00 00 00 fc ff df
[  250.285962][    C0] RSP: 0018:ffffc90000007688 EFLAGS: 00010046
[  250.292118][    C0] RAX: b6779f38612a3300 RBX: ffff8880247e00e0 RCX: ffff88802a3c8000
[  250.300101][    C0] RDX: 0000000000000100 RSI: 0000000080000103 RDI: 0000000000000000
[  250.308199][    C0] RBP: 0000000000000081 R08: ffff8880b902795b R09: 1ffff11017204f2b
[  250.316321][    C0] R10: dffffc0000000000 R11: ffffed1017204f2c R12: dffffc0000000000
[  250.324396][    C0] R13: ffff8880247e010d R14: ffff8880247e00e8 R15: ffff88802aa9e33a
[  250.332557][    C0] FS:  000055557b232500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  250.341499][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  250.348103][    C0] CR2: 00007fb44b3ceff8 CR3: 000000005f488000 CR4: 00000000003506f0
[  250.356089][    C0] Call Trace:
[  250.359383][    C0]  <IRQ>
[  250.362233][    C0]  hidg_set_alt+0x126/0xa00
[  250.366749][    C0]  ? usb_gadget_set_state+0xaa/0xf0
[  250.371962][    C0]  set_config+0x734/0xfa0
[  250.376320][    C0]  composite_setup+0x1999/0x2b60
[  250.381384][    C0]  configfs_composite_setup+0xc3/0x100
[  250.386947][    C0]  dummy_timer+0x1338/0x34a0
[  250.391578][    C0]  ? __lock_acquire+0x13dc/0x7b50
[  250.396637][    C0]  ? mark_lock+0x94/0x320
[  250.401016][    C0]  ? dummy_free_streams+0x520/0x520
[  250.406290][    C0]  ? dummy_free_streams+0x520/0x520
[  250.411638][    C0]  call_timer_fn+0x17b/0x540
[  250.416269][    C0]  ? dummy_free_streams+0x520/0x520
[  250.421507][    C0]  ? __run_timers+0x810/0x810
[  250.426217][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  250.431431][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  250.436645][    C0]  ? dummy_free_streams+0x520/0x520
[  250.441857][    C0]  __run_timers+0x56c/0x810
[  250.446384][    C0]  ? detach_timer+0x2b0/0x2b0
[  250.451244][    C0]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  250.457247][    C0]  ? sched_clock_cpu+0x15/0x3c0
[  250.462116][    C0]  ? seqcount_lockdep_reader_access+0x177/0x1d0
[  250.468393][    C0]  run_timer_softirq+0x63/0xf0
[  250.473181][    C0]  handle_softirqs+0x336/0x830
[  250.477965][    C0]  ? __irq_exit_rcu+0x13b/0x230
[  250.482967][    C0]  ? do_softirq+0x210/0x210
[  250.487489][    C0]  ? hrtimer_interrupt+0x6a2/0x8b0
[  250.492651][    C0]  ? irqtime_account_irq+0xb2/0x1b0
[  250.498041][    C0]  __irq_exit_rcu+0x13b/0x230
[  250.502824][    C0]  ? irq_exit_rcu+0x20/0x20
[  250.507353][    C0]  irq_exit_rcu+0x5/0x20
[  250.511602][    C0]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  250.517247][    C0]  </IRQ>
[  250.520186][    C0]  <TASK>
[  250.523554][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  250.529721][    C0] RIP: 0010:finish_lock_switch+0x12f/0x290
[  250.534882][ T6113] loop4: detected capacity change from 0 to 4096
[  250.535540][    C0] Code: 83 c7 18 be ff ff ff ff e8 8e da 6c 08 85 c0 74 46 4d 85 ff 75 62 e9 06 01 00 00 48 89 df e8 78 4a 76 08 e8 93 e3 2a 00 fb 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 48 89 df e8 2f 0e fe ff 43 80 3c 2c
[  250.561551][    C0] RSP: 0018:ffffc9000324f978 EFLAGS: 00000282
[  250.567633][    C0] RAX: b6779f38612a3300 RBX: ffff888079091dc0 RCX: b6779f38612a3300
[  250.575627][    C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a48c0
[  250.583614][    C0] RBP: 1ffff11017207613 R08: ffff8880b903a343 R09: 1ffff11017207468
[  250.591587][    C0] R10: dffffc0000000000 R11: ffffed1017207469 R12: ffff8880b903b088
[  250.599652][    C0] R13: dffffc0000000000 R14: ffff8880b903ae08 R15: 0000000000000000
[  250.607637][    C0]  finish_task_switch+0x12f/0x650
[  250.612676][    C0]  __schedule+0x11cb/0x4350
[  250.617305][    C0]  ? ktime_get+0x247/0x270
[  250.621795][    C0]  ? release_firmware_map_entry+0x190/0x190
[  250.627675][    C0]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  250.633567][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  250.638755][    C0]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  250.644634][    C0]  ? _raw_spin_unlock+0x40/0x40
[  250.649480][    C0]  schedule+0x11b/0x1e0
[  250.653645][    C0]  do_nanosleep+0x1cb/0x760
[  250.658165][    C0]  ? usleep_range_state+0x180/0x180
[  250.663355][    C0]  hrtimer_nanosleep+0x33e/0x590
[  250.668288][    C0]  ? nanosleep_copyout+0x110/0x110
[  250.673649][    C0]  ? __remove_hrtimer+0x3a0/0x3a0
[  250.678785][    C0]  ? timespec64_add_safe+0x1f0/0x1f0
[  250.684070][    C0]  ? __lock_acquire+0x7b50/0x7b50
[  250.689103][    C0]  __se_sys_clock_nanosleep+0x30b/0x3a0
[  250.694638][    C0]  ? __x64_sys_clock_nanosleep+0xa0/0xa0
[  250.700257][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  250.705447][    C0]  do_syscall_64+0x4c/0xa0
[  250.709867][    C0]  ? clear_bhb_loop+0x30/0x80
[  250.714708][    C0]  ? clear_bhb_loop+0x30/0x80
[  250.719374][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  250.725259][    C0] RIP: 0033:0x7fe26e71a98e
[  250.729672][    C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  250.749718][    C0] RSP: 002b:00007fffd4845f78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[  250.758117][    C0] RAX: ffffffffffffffda RBX: 000055557b232500 RCX: 00007fe26e71a98e
[  250.766073][    C0] RDX: 00007fffd4845fd0 RSI: 0000000000000000 RDI: 0000000000000000
[  250.774038][    C0] RBP: 00007fe26e9e3da0 R08: 0000000000000000 R09: 0000000000000000
[  250.781996][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000003d373
[  250.789948][    C0] R13: 00007fe26e9e209c R14: 000000000003d12b R15: 00007fe26e9e2090
[  250.797923][    C0]  </TASK>
[  250.800947][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  250.808214][    C0] CPU: 0 PID: 6103 Comm: syz.1.499 Not tainted syzkaller #0
[  250.815482][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  250.825540][    C0] Call Trace:
[  250.828807][    C0]  <IRQ>
[  250.831660][    C0]  dump_stack_lvl+0x188/0x250
[  250.836334][    C0]  ? show_regs_print_info+0x20/0x20
[  250.841535][    C0]  ? load_image+0x410/0x410
[  250.846031][    C0]  panic+0x2f8/0x850
[  250.849918][    C0]  ? bpf_jit_dump+0xd0/0xd0
[  250.854421][    C0]  ? usb_ep_enable+0x25f/0x440
[  250.859302][    C0]  __warn+0x248/0x2b0
[  250.863349][    C0]  ? usb_ep_enable+0x25f/0x440
[  250.868123][    C0]  report_bug+0x1b9/0x2e0
[  250.872455][    C0]  handle_bug+0x3a/0x70
[  250.877035][    C0]  exc_invalid_op+0x16/0x40
[  250.881525][    C0]  asm_exc_invalid_op+0x16/0x20
[  250.886379][    C0] RIP: 0010:usb_ep_enable+0x25f/0x440
[  250.891750][    C0] Code: 49 8b 0e 48 c7 c0 00 29 d5 8a 49 c7 c0 20 29 d5 8a 4c 0f 44 c0 48 c7 c7 c0 28 d5 8a 48 c7 c6 63 bb e1 8b 89 ea e8 c1 70 80 03 <0f> 0b e9 e1 fe ff ff e8 85 3b 43 fb 49 bc 00 00 00 00 00 fc ff df
[  250.911353][    C0] RSP: 0018:ffffc90000007688 EFLAGS: 00010046
[  250.917423][    C0] RAX: b6779f38612a3300 RBX: ffff8880247e00e0 RCX: ffff88802a3c8000
[  250.925407][    C0] RDX: 0000000000000100 RSI: 0000000080000103 RDI: 0000000000000000
[  250.933368][    C0] RBP: 0000000000000081 R08: ffff8880b902795b R09: 1ffff11017204f2b
[  250.941511][    C0] R10: dffffc0000000000 R11: ffffed1017204f2c R12: dffffc0000000000
[  250.949471][    C0] R13: ffff8880247e010d R14: ffff8880247e00e8 R15: ffff88802aa9e33a
[  250.957533][    C0]  ? usb_ep_enable+0x25f/0x440
[  250.962303][    C0]  hidg_set_alt+0x126/0xa00
[  250.966795][    C0]  ? usb_gadget_set_state+0xaa/0xf0
[  250.971984][    C0]  set_config+0x734/0xfa0
[  250.976311][    C0]  composite_setup+0x1999/0x2b60
[  250.981243][    C0]  configfs_composite_setup+0xc3/0x100
[  250.986694][    C0]  dummy_timer+0x1338/0x34a0
[  250.991287][    C0]  ? __lock_acquire+0x13dc/0x7b50
[  250.996320][    C0]  ? mark_lock+0x94/0x320
[  251.000646][    C0]  ? dummy_free_streams+0x520/0x520
[  251.005834][    C0]  ? dummy_free_streams+0x520/0x520
[  251.011019][    C0]  call_timer_fn+0x17b/0x540
[  251.015684][    C0]  ? dummy_free_streams+0x520/0x520
[  251.020880][    C0]  ? __run_timers+0x810/0x810
[  251.025549][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  251.030732][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  251.035923][    C0]  ? dummy_free_streams+0x520/0x520
[  251.041222][    C0]  __run_timers+0x56c/0x810
[  251.045722][    C0]  ? detach_timer+0x2b0/0x2b0
[  251.050392][    C0]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  251.056365][    C0]  ? sched_clock_cpu+0x15/0x3c0
[  251.061212][    C0]  ? seqcount_lockdep_reader_access+0x177/0x1d0
[  251.067443][    C0]  run_timer_softirq+0x63/0xf0
[  251.072223][    C0]  handle_softirqs+0x336/0x830
[  251.076980][    C0]  ? __irq_exit_rcu+0x13b/0x230
[  251.081914][    C0]  ? do_softirq+0x210/0x210
[  251.086402][    C0]  ? hrtimer_interrupt+0x6a2/0x8b0
[  251.091957][    C0]  ? irqtime_account_irq+0xb2/0x1b0
[  251.097155][    C0]  __irq_exit_rcu+0x13b/0x230
[  251.101911][    C0]  ? irq_exit_rcu+0x20/0x20
[  251.106408][    C0]  irq_exit_rcu+0x5/0x20
[  251.111075][    C0]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  251.116700][    C0]  </IRQ>
[  251.119617][    C0]  <TASK>
[  251.122531][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  251.128507][    C0] RIP: 0010:finish_lock_switch+0x12f/0x290
[  251.134311][    C0] Code: 83 c7 18 be ff ff ff ff e8 8e da 6c 08 85 c0 74 46 4d 85 ff 75 62 e9 06 01 00 00 48 89 df e8 78 4a 76 08 e8 93 e3 2a 00 fb 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 48 89 df e8 2f 0e fe ff 43 80 3c 2c
[  251.154077][    C0] RSP: 0018:ffffc9000324f978 EFLAGS: 00000282
[  251.160134][    C0] RAX: b6779f38612a3300 RBX: ffff888079091dc0 RCX: b6779f38612a3300
[  251.168089][    C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a48c0
[  251.176050][    C0] RBP: 1ffff11017207613 R08: ffff8880b903a343 R09: 1ffff11017207468
[  251.184118][    C0] R10: dffffc0000000000 R11: ffffed1017207469 R12: ffff8880b903b088
[  251.192073][    C0] R13: dffffc0000000000 R14: ffff8880b903ae08 R15: 0000000000000000
[  251.200045][    C0]  finish_task_switch+0x12f/0x650
[  251.205067][    C0]  __schedule+0x11cb/0x4350
[  251.209581][    C0]  ? ktime_get+0x247/0x270
[  251.213984][    C0]  ? release_firmware_map_entry+0x190/0x190
[  251.219897][    C0]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  251.225777][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  251.230983][    C0]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  251.236865][    C0]  ? _raw_spin_unlock+0x40/0x40
[  251.241715][    C0]  schedule+0x11b/0x1e0
[  251.245922][    C0]  do_nanosleep+0x1cb/0x760
[  251.250413][    C0]  ? usleep_range_state+0x180/0x180
[  251.255777][    C0]  hrtimer_nanosleep+0x33e/0x590
[  251.260707][    C0]  ? nanosleep_copyout+0x110/0x110
[  251.265805][    C0]  ? __remove_hrtimer+0x3a0/0x3a0
[  251.270819][    C0]  ? timespec64_add_safe+0x1f0/0x1f0
[  251.276091][    C0]  ? __lock_acquire+0x7b50/0x7b50
[  251.281114][    C0]  __se_sys_clock_nanosleep+0x30b/0x3a0
[  251.286674][    C0]  ? __x64_sys_clock_nanosleep+0xa0/0xa0
[  251.292304][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  251.297567][    C0]  do_syscall_64+0x4c/0xa0
[  251.301993][    C0]  ? clear_bhb_loop+0x30/0x80
[  251.306750][    C0]  ? clear_bhb_loop+0x30/0x80
[  251.311416][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  251.317299][    C0] RIP: 0033:0x7fe26e71a98e
[  251.321708][    C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  251.341654][    C0] RSP: 002b:00007fffd4845f78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[  251.350147][    C0] RAX: ffffffffffffffda RBX: 000055557b232500 RCX: 00007fe26e71a98e
[  251.358107][    C0] RDX: 00007fffd4845fd0 RSI: 0000000000000000 RDI: 0000000000000000
[  251.366073][    C0] RBP: 00007fe26e9e3da0 R08: 0000000000000000 R09: 0000000000000000
[  251.374225][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000003d373
[  251.382188][    C0] R13: 00007fe26e9e209c R14: 000000000003d12b R15: 00007fe26e9e2090
[  251.390250][    C0]  </TASK>
[  251.393379][    C0] Kernel Offset: disabled
[  251.397921][    C0] Rebooting in 86400 seconds..