last executing test programs:

4.618990512s ago: executing program 4 (id=350):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1032})
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d67000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000300)="66b8880000000f23d00f21f86635300000030f23f83e0f01c5ba4300b89190ef0f0f6e15b0f3aff30faa66b9d30b00000f32d81c0f23abba210066b8ae60000066ef", 0x42}], 0x1, 0x2, 0x0, 0x0)
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000000000000800450000280000400040113cc37f0000017f000001"], 0x36)

4.196719133s ago: executing program 4 (id=352):
r0 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0)
setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006})
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0xffffffff})
mlock2(&(0x7f00000bf000/0x2000)=nil, 0x2000, 0x1)
mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1)

3.989431999s ago: executing program 4 (id=356):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$uac2(0x4, 0x8f, &(0x7f0000000240)=ANY=[@ANYBLOB="12010003002a7a7c3f04193f40000102030109027d0003014c2008080b020001052004090400000001012000092401a60f060900050904010000010220000904010101010220000b2402040000020209050109000240030e08250101034008000904020000"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000023c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.046264243s ago: executing program 3 (id=367):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000002700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea09000000002f009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.739931686s ago: executing program 3 (id=370):
futex(0x0, 0xb, 0x0, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20)

2.661004278s ago: executing program 3 (id=372):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000800)={0xa0000006})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000040)={0x80002000})
epoll_pwait(r0, &(0x7f0000000280)=[{}], 0x1, 0xd83, 0x0, 0x0)

2.566766525s ago: executing program 3 (id=375):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
r0 = socket$kcm(0x2d, 0x2, 0x0)
read(r0, &(0x7f0000000280)=""/160, 0xc9)

2.053490665s ago: executing program 1 (id=380):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001})
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000f00001c"], 0x4a)

2.052339508s ago: executing program 4 (id=381):
r0 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\x7fc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\xee\xff\x80\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\a+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||/c\x87\x94Y\xa0\x8ez\xadT\xc8\x8c\xe5\x8b\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8c\x80z8Z\xd2}\xf5\xe4', 0x2)
write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x100)
pwrite64(r0, &(0x7f0000000040)="ab", 0x1, 0x2)
syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3a00041, &(0x7f0000000140)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c002a8147bd45d266c8b59269"], 0x1, 0x9e28, &(0x7f000000a040)="$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")
mknod$loop(0x0, 0xc000, 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

1.976972449s ago: executing program 0 (id=382):
unshare(0x22020600)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0)
write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="6d6ff16901dc11fffe880000000000000000000000000001fc0100000000000000000000000000004e254e2101dc9078ee373935ef0f8da10b47000507b0025a9001e6cc070855848340507e8bd26f3ca1d633ec36"], 0x204)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x12, 0x60d, 0xf0, 0x202, 0x1b8, 0x2e8, 0x2e8, 0x1b8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xff, 0xff000000, 0x0, 0xfe], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xd0, 0xf0}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xae328689605bc686)

1.625987318s ago: executing program 0 (id=383):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000100039042abd7000eaffffff000003e4", @ANYRES32=r2, @ANYBLOB="830004000000000020001280080001007369740014000280080014007f00000008000300e0001d"], 0x40}, 0x1, 0x0, 0x0, 0x20008004}, 0x40c0)

1.536355594s ago: executing program 2 (id=384):
wait4(0x0, &(0x7f0000000000), 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x18}}, 0x20004890)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYBLOB="1000000000000000280012800b0001"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.422850846s ago: executing program 4 (id=385):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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")
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0)
setxattr$incfs_metadata(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x2)

1.352939683s ago: executing program 3 (id=386):
unshare(0x6020400)
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x88)
r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpu.weight.nice\x00', 0x2, 0x0)
write$FUSE_POLL(r2, &(0x7f0000004140)={0x18, 0x0, 0x0, {0x9ac}}, 0x18)

1.247711892s ago: executing program 2 (id=387):
socket$unix(0x1, 0x1, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0001}]})
close_range(r0, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0x2de9, r1}, 0x38)

1.233856863s ago: executing program 1 (id=388):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/printer.usb0\x00')

1.128920313s ago: executing program 3 (id=389):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xffbffffe, 0x257, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x1, 0x1, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff8, 0x1000, 0x1, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0xfffffffe, 0x2, 0x0, r7}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0xffffff7e, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.069180735s ago: executing program 1 (id=390):
r0 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x8, @empty, 0x9}, 0x1c)
listen(r0, 0x4d)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x1, 0x4)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

1.000750685s ago: executing program 0 (id=391):
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0)
write$dsp(r0, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000007c0)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000009,session=0x0000000000000023,utf8,map=acorn,check=strict,mode=0x00000000000000c9,cruft,map=off,check=strict,overriderockperm,block=0x0000000000000200,cruft,nocompress,cruft,session=0x000000000000002e,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c7362736563746f723d3078303030303030303030303030303004332c0091386ba63f775915b6b981669f99a6758fc6130e2e181f075ed46c0b97ee8c6ce2d08017924dd527144bf683e31335a3b7f24e5a1a93da15e92a08550215ecc4070da2db21d6ac07dadb5cb173d0b41818198ff783f10620b9875eeda06e2edde06600000000"], 0x1, 0xa3e, &(0x7f0000000940)="$eJzs3c1vXWdeB/DvubYTjzskmU4oJerUNynJeDrGsR2aEHUxJPZN4sEvyHakRiwmw8RBUQyFKUidCmkyEmI1FUggFrCrWLGq1A1lgbpBsKMrFkio/wJiFVZG59xr+9q+19fxOLabfj7R9T0vv/M8v3PPec6T+/qEL5e101vm1taq2z7n7/7jIWTMMXZz+ouPPv6wvP3sSU6kL28V/5QMJqkn/UleTQamphcX5noU9Di5n+SzpEhyMs37Pbmf4i/z9c35z1L8fVlvVyf2WjK9rPGVdtTnHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHEfF1PT4+ERxIjPzd9+pNyX1HaamFxeKrK3tXLO+TdOn1ajfxac9602K8pbBwfWhvl89u7n6lST1C3mtOfdaNSB5BvPBS6+cefub/bX17btl8ws5ufdi3/vJB49/uLq68uOOa4viALM6ZprnyO3G/MzSwszcjduN+szSQv361avjl+/cWqrfmpltLN1bWm7M1acWGzeWFxbrI1PfqU9cv36l3hi7t3B3/vb02GxjfeG1X58cH79a//7Y7zRuLC4tzF/+/tjS1J2Z2dmZ+dtVTLm6jLlWnoi/PbNcX27cmKvXHz5aXbmyLbO+bDt/y6CJXvtTBk32Cpocn5ycmJicnPhZa/TsjQVX37r+1rXx8f7xbVJFFG0Rz+mk5Xj5WvfDfPAXcdinWrP/T2Yzk/nczTupd/w3leksZiFzXda3rPf/Fy83dq02bf1/q5fvb1t/rvxzIa+3Zge79P9dcjm8f+/lJ/kgj/PDrGY1K/nxodZ+8sj3/3Yamc9MlrKQmczlRrWk3lpSz/VczdWM5we5k+EspT+3MpPZNLKUe1nKchrVGTWVxTRyI8tZyGLqGclUvpN6JnI913Ml9TQylntZyN3M53amc6Mq5WEeVY/7lV1y3Aia2EvQ5C5BO7r7Pfb/mxGN7f854QVU2/UoP4erOOzPWqv/P9E7dGTqMBICAAAADtyv/ntOnX353/47KfKt6n35WzOzjfGjTgsAAAA4QNXH9V4r7wbKqW+l8PwfAAAAXjRF9R27IslQhptT69+E8iIAAAAAvCCq9/9fTzG8ucDzfwAAAHjB9P6N/Z4Rxej6z//WHzTvH7QimnPF0K2Z2cbY1MLs2xO5VP3KQPVNgx2l9SXFQPX1gzdzvhl1fqh5P7RZYlnnYBk1Mfb2RN7MhdaOjLxR3r0x0iFyshn57Wbkt9sj+7Il8koZCQAvugu79Me79//Ntw7KkDcz2pwcPVd1+f3ntvTBfVXPOq5nBYDjYmOMnf9rDWnWof9vRbze7fn/b+zy/L+MeDkPh5sfKRjLj/JuVvMgo2l94mC4U6nroxE0P4Yw2uPVgKHWRxY+v1bL6I7XAwY39rU9diWTGe34ikBbucV6DleacX3P5xgAwGG7sGs/vNH/9+/W/4/u/vy/rc/1kUIAOA42RrB/1onhvQcf9T4CAFvppQEAAAAAAAAAAAAAAAAAAAAAAAAAAODg7ekH/P/jUrK6upLsd7CADhOf/+s//1LXmJ+/lAw+S4a7T9RyMDkf/4m+JEdV+/fyzFuVx/i4PHQmtk4c8YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAQ1EkfZ2W15KTScaTXD78rJ6fJ0edwEGp72+z4mme5v2cOuh0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+6lq//19L8/6l5qL015KLSe4n+d2jzvFZDPZY//SQ8jh+/qD62/b7/7VkIGtF+puHPcXA1PTiwlx5KhQny/VffPTxh+Wta5E/XZ/YOapCWUBZw5bBJVo1tC0Z2LrVN6qthqZX3nv8J+/+UX36ZnVi3ly+NTs9d3vxtzYDXyk+aQ6B0D4Mwnq+f3bxX/6qbfGJVuWflHva2fZ6b1X1Tu+s91c6bd2l3j14tLoyWda03Hhn+U//sNa+6uWcT94YSUa21vT75a1LTee3P55bnUzxF8Wp/G3uV8e/fDSKtaI8RKer/f/aw0erK2M/enf1wUZOP330flsBZzKc5MHWVtYjp+HqetJRddbVBspax6ug8s/ZHuXtqq3Eic3Hdcs+fKM6ZYaeaR/q3feh0uNxb2V0ZXtGa2Uj+es//mYu7XqkT3Yo8VKPGjsq/qf4r+JO/jN/3jb+R608/hfTsXV2KKKKbDtT2tdtaV61i5t7Ptm+4gfby+zaKnkOfp7fy29uHP9a2/W/day6tJuN69H32hZ2aTfrTWuXdtFW44520dKrXexsqf9wekePsqlqRme39Uitq0+3bVp5nm1Gdcnzl/PdpP/cM11RvtvjitJr+/22/78rRvK/eWL8HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Pgrkr5Oy2vJxSRnkpwu5+vJ2vaYJ/uorzZU7CfNA7OfnI+lr++2sui6o8XTPM37OfWcsgIAAAAAAADgkN2c/uKjjz8sb9X78X35tVprTT3pT3Km+JuBqenFhbkeBQ0k99ff0h/sHNJlce5n6/vYn5Vzr/ao72g/PgAAX2r/HwAA//+A7mwy")
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)
mlockall(0x2)

847.183753ms ago: executing program 2 (id=392):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064756d6d79"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0)

513.319502ms ago: executing program 0 (id=393):
getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
unshare(0x22020600)
r0 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r0, 0x1)

455.15011ms ago: executing program 2 (id=394):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)

367.494878ms ago: executing program 1 (id=395):
r0 = socket(0x10, 0x803, 0x0)
r1 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x55}, &(0x7f00000003c0)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={0x14, 0x41, 0x107, 0x70bd2c, 0xa5dfdbfa, {0xe, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x400c015}, 0xc000)
syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x80010182, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0)

305.414825ms ago: executing program 2 (id=396):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)

206.248775ms ago: executing program 0 (id=397):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x18}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="020300090e000000ff000e000a004e22"], 0x70}}, 0x8810)
r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe)
ioctl(0xffffffffffffffff, 0x5, &(0x7f0000000280)="82f37e97996a7358b8")
r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}})

179.326693ms ago: executing program 1 (id=398):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r1}, 0xc)

173.739827ms ago: executing program 4 (id=399):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000d, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
unshare(0x4020400)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x3, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0)

43.972265ms ago: executing program 0 (id=400):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setpgid(r0, r0)
setpgid(0x0, r0)
wait4(r0, 0x0, 0x2, 0x0)
getpgid(r0)

18.668971ms ago: executing program 1 (id=401):
syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd000905e2ffbe"], 0x0)
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x95}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10010001, 0xffffffffffffffff, 0x0, 0xcd}}}, &(0x7f0000000480)=<r4=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_ublk_setup_queues(0xffffffffffffffff, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xd8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0xfffffffd, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x369}}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

0s ago: executing program 2 (id=402):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
write$tun(0xffffffffffffffff, &(0x7f00000013c0)=ANY=[@ANYBLOB="03000500030019000c0066644cfb00103a000000ff02000000000000000000000000000186009078000002"], 0x42)
recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.64' (ED25519) to the list of known hosts.
[   66.382867][ T5595] cgroup: Unknown subsys name 'net'
[   66.493668][ T5595] cgroup: Unknown subsys name 'cpuset'
[   66.502910][ T5595] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   67.951314][ T5595] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   70.181088][ T5615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.186964][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   70.197395][ T5622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.198377][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.199075][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   70.201025][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.203100][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.203676][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.204892][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   70.207504][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.208401][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.208832][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.210117][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.211142][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.211769][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.215332][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.228675][ T5615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.230008][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   70.268511][ T4928] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   70.270098][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.271309][ T4928] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   70.289020][ T4928] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   70.289599][ T4928] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   70.290479][ T4928] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   70.292196][   T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   71.833509][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[   71.833585][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[   71.961644][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.962269][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.962387][ T5609] bridge_slave_0: entered allmulticast mode
[   71.963400][ T5609] bridge_slave_0: entered promiscuous mode
[   71.981716][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.981812][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.981966][ T5609] bridge_slave_1: entered allmulticast mode
[   71.983596][ T5609] bridge_slave_1: entered promiscuous mode
[   72.101063][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.101241][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.101611][ T5608] bridge_slave_0: entered allmulticast mode
[   72.103195][ T5608] bridge_slave_0: entered promiscuous mode
[   72.143384][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.143476][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.143590][ T5608] bridge_slave_1: entered allmulticast mode
[   72.144935][ T5608] bridge_slave_1: entered promiscuous mode
[   72.171445][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.175319][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.230664][ T5617] Bluetooth: hci0: command tx timeout
[   72.261941][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.301834][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.301921][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.302030][ T5607] bridge_slave_0: entered allmulticast mode
[   72.303362][ T5607] bridge_slave_0: entered promiscuous mode
[   72.306916][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.308907][   T54] Bluetooth: hci4: command tx timeout
[   72.309099][   T54] Bluetooth: hci2: command tx timeout
[   72.309272][ T5617] Bluetooth: hci3: command tx timeout
[   72.342159][ T5609] team0: Port device team_slave_0 added
[   72.345088][ T5609] team0: Port device team_slave_1 added
[   72.359374][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.359470][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.359837][ T5610] bridge_slave_0: entered allmulticast mode
[   72.361309][ T5610] bridge_slave_0: entered promiscuous mode
[   72.364099][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.364193][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.364311][ T5610] bridge_slave_1: entered allmulticast mode
[   72.365861][ T5610] bridge_slave_1: entered promiscuous mode
[   72.390515][ T5612] Bluetooth: hci1: command tx timeout
[   72.434342][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.434441][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.434561][ T5607] bridge_slave_1: entered allmulticast mode
[   72.435434][ T5607] bridge_slave_1: entered promiscuous mode
[   72.518756][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.530130][ T5608] team0: Port device team_slave_0 added
[   72.530336][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.530427][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.530541][ T5620] bridge_slave_0: entered allmulticast mode
[   72.532963][ T5620] bridge_slave_0: entered promiscuous mode
[   72.536618][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.536634][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.536663][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.544241][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.549280][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.552643][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.555399][ T5608] team0: Port device team_slave_1 added
[   72.555693][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.555785][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.556830][ T5620] bridge_slave_1: entered allmulticast mode
[   72.559998][ T5620] bridge_slave_1: entered promiscuous mode
[   72.575438][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.575455][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.575478][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.736240][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.769831][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.771223][ T5610] team0: Port device team_slave_0 added
[   72.773426][ T5607] team0: Port device team_slave_0 added
[   72.797529][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.797547][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.797570][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.810562][ T5609] hsr_slave_0: entered promiscuous mode
[   72.811742][ T5609] hsr_slave_1: entered promiscuous mode
[   72.847258][ T5610] team0: Port device team_slave_1 added
[   72.862661][ T5607] team0: Port device team_slave_1 added
[   72.863258][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.863270][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.863293][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.878387][ T5620] team0: Port device team_slave_0 added
[   72.923661][ T5620] team0: Port device team_slave_1 added
[   72.924372][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.924384][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.924408][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.986170][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.986187][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.986208][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.995542][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.995557][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.995581][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.026283][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.026300][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.026324][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.051178][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.051196][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.051219][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.069911][ T5608] hsr_slave_0: entered promiscuous mode
[   73.070928][ T5608] hsr_slave_1: entered promiscuous mode
[   73.071693][ T5608] debugfs: 'hsr0' already exists in 'hsr'
[   73.071776][ T5608] Cannot create hsr debugfs directory
[   73.106893][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.106912][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.106936][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.269975][ T5610] hsr_slave_0: entered promiscuous mode
[   73.270587][ T5610] hsr_slave_1: entered promiscuous mode
[   73.271101][ T5610] debugfs: 'hsr0' already exists in 'hsr'
[   73.271120][ T5610] Cannot create hsr debugfs directory
[   73.276370][ T5607] hsr_slave_0: entered promiscuous mode
[   73.276964][ T5607] hsr_slave_1: entered promiscuous mode
[   73.277367][ T5607] debugfs: 'hsr0' already exists in 'hsr'
[   73.277386][ T5607] Cannot create hsr debugfs directory
[   73.306260][ T5620] hsr_slave_0: entered promiscuous mode
[   73.307529][ T5620] hsr_slave_1: entered promiscuous mode
[   73.308211][ T5620] debugfs: 'hsr0' already exists in 'hsr'
[   73.308229][ T5620] Cannot create hsr debugfs directory
[   73.719419][ T5609] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.724694][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   73.725729][ T5609] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.732035][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   73.747349][ T5609] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.757773][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   73.770760][ T5609] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.780246][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   73.847418][ T5608] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   73.860342][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   73.862938][ T5608] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   73.867395][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   73.881374][ T5608] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   73.890167][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   73.909293][ T5608] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   73.912217][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   73.968973][ T5607] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   73.976088][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   73.989186][ T5607] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   73.999802][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   74.000816][ T5607] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   74.007401][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   74.025830][ T5607] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   74.034283][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   74.146140][ T5620] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   74.156533][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   74.157326][ T5620] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   74.161480][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   74.186509][ T5620] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   74.192925][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   74.193823][ T5620] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   74.201867][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   74.208001][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.287850][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.303127][ T5609] 8021q: adding VLAN 0 to HW filter on device team0
[   74.309845][ T5612] Bluetooth: hci0: command tx timeout
[   74.342763][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.343009][ T1328] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.358214][ T5610] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   74.368342][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   74.392750][ T5610] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   74.395998][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   74.396566][ T5610] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   74.399079][ T5617] Bluetooth: hci2: command tx timeout
[   74.399109][ T5617] Bluetooth: hci4: command tx timeout
[   74.399748][ T5612] Bluetooth: hci3: command tx timeout
[   74.400856][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   74.402032][ T5610] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   74.411196][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   74.457964][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.458168][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.469001][ T5612] Bluetooth: hci1: command tx timeout
[   74.481003][ T5608] 8021q: adding VLAN 0 to HW filter on device team0
[   74.508227][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.508285][ T1328] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.541661][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.541722][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.547257][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.566532][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.661055][ T5607] 8021q: adding VLAN 0 to HW filter on device team0
[   74.676897][ T5620] 8021q: adding VLAN 0 to HW filter on device team0
[   74.722865][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.722969][ T1328] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.737200][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.737300][ T1328] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.752388][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.752481][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.794334][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.794452][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.011618][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.063502][ T5610] 8021q: adding VLAN 0 to HW filter on device team0
[   75.124957][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.125833][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.188240][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.188341][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.731759][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.904119][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.925222][ T5608] veth0_vlan: entered promiscuous mode
[   75.962048][ T5608] veth1_vlan: entered promiscuous mode
[   76.176484][ T5609] veth0_vlan: entered promiscuous mode
[   76.181971][ T5608] veth0_macvtap: entered promiscuous mode
[   76.197836][ T5608] veth1_macvtap: entered promiscuous mode
[   76.207141][ T5609] veth1_vlan: entered promiscuous mode
[   76.263262][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.285762][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.327776][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.374116][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.388681][ T5612] Bluetooth: hci0: command tx timeout
[   76.404528][ T5609] veth0_macvtap: entered promiscuous mode
[   76.436513][ T5609] veth1_macvtap: entered promiscuous mode
[   76.448344][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.472466][ T5612] Bluetooth: hci3: command tx timeout
[   76.472489][   T54] Bluetooth: hci4: command tx timeout
[   76.472516][ T5612] Bluetooth: hci2: command tx timeout
[   76.549939][ T5617] Bluetooth: hci1: command tx timeout
[   76.600955][ T1328] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.622913][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.622941][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.650563][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.651497][ T3370] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.652209][ T3370] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.734909][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.760093][ T3370] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.763561][ T5607] veth0_vlan: entered promiscuous mode
[   76.800172][  T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.800193][  T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.832561][ T5607] veth1_vlan: entered promiscuous mode
[   76.849497][  T140] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.850632][  T140] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.850670][  T140] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.881670][ T5610] veth0_vlan: entered promiscuous mode
[   76.901732][   T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.937647][ T5610] veth1_vlan: entered promiscuous mode
[   77.062753][ T5608] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   77.065556][ T5607] veth0_macvtap: entered promiscuous mode
[   77.070647][ T5620] veth0_vlan: entered promiscuous mode
[   77.088224][ T5607] veth1_macvtap: entered promiscuous mode
[   77.123049][ T5620] veth1_vlan: entered promiscuous mode
[   77.148082][ T5610] veth0_macvtap: entered promiscuous mode
[   77.154968][ T5610] veth1_macvtap: entered promiscuous mode
[   77.178505][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.178526][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.210876][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.240569][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.242731][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.247704][   T32] audit: type=1326 audit(1791384197.939:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.0.1" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671f19e199 code=0x7ffc0000
[   77.247750][   T32] audit: type=1326 audit(1791384197.939:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.0.1" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671f19e199 code=0x7ffc0000
[   77.290825][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.317545][ T1328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.317564][ T1328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.342631][   T32] audit: type=1326 audit(1791384198.039:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.0.1" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671f19e199 code=0x7ffc0000
[   77.342924][   T32] audit: type=1326 audit(1791384198.039:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.0.1" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f671f19e199 code=0x7ffc0000
[   77.344976][   T32] audit: type=1326 audit(1791384198.039:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.0.1" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671f19e199 code=0x7ffc0000
[   77.345436][   T32] audit: type=1326 audit(1791384198.039:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.0.1" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671f19e199 code=0x7ffc0000
[   77.347124][   T32] audit: type=1326 audit(1791384198.039:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.0.1" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671f19e199 code=0x7ffc0000
[   77.375166][   T32] audit: type=1326 audit(1791384198.079:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.0.1" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671f19e199 code=0x7ffc0000
[   77.380651][ T5620] veth0_macvtap: entered promiscuous mode
[   77.400884][   T32] audit: type=1326 audit(1791384198.079:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.0.1" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f671f19e199 code=0x7ffc0000
[   77.400929][   T32] audit: type=1326 audit(1791384198.079:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.0.1" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671f19e199 code=0x7ffc0000
[   77.410991][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.415450][  T140] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.415746][  T140] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.415993][  T140] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.416256][  T140] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.416510][  T140] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.416658][  T140] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.485032][ T5620] veth1_macvtap: entered promiscuous mode
[   77.782673][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.782696][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.796225][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.798735][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.865335][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.924607][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.924630][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.000021][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.000043][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.249731][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.250650][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.251080][ T3370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.251096][ T3370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.302659][ T3370] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.349842][ T3370] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.471553][ T5617] Bluetooth: hci0: command tx timeout
[   78.492210][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.492235][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.548662][ T5617] Bluetooth: hci4: command tx timeout
[   78.548940][   T54] Bluetooth: hci3: command tx timeout
[   78.548980][ T5617] Bluetooth: hci2: command tx timeout
[   78.595881][ T5833] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   78.631194][ T5617] Bluetooth: hci1: command tx timeout
[   78.776495][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.776515][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.844829][ T5889] capability: warning: `syz.2.27' uses deprecated v2 capabilities in a way that may be insecure
[   80.994435][ T5894] ALSA: seq fatal error: cannot create timer (-16)
[   81.456833][ T5913] process 'syz.3.39' launched './file1' with NULL argv: empty string added
[   81.488759][ T5917] loop0: detected capacity change from 0 to 164
[   81.489290][ T5913] =======================================================
[   81.489290][ T5913] WARNING: The mand mount option has been deprecated and
[   81.489290][ T5913]          and is ignored by this kernel. Remove the mand
[   81.489290][ T5913]          option from the mount to silence this warning.
[   81.489290][ T5913] =======================================================
[   81.499337][ T5917] iso9660: Unknown parameter 'ÿÿÿÿÿ.ÃNÛBþO'
[   81.612135][ T5922] xt_hashlimit: size too large, truncated to 1048576
[   82.065386][ T5935] loop3: detected capacity change from 0 to 256
[   82.090825][ T5935] exfat: Deprecated parameter 'namecase'
[   82.294485][ T5935] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[   82.407124][ T5939] loop2: detected capacity change from 0 to 256
[   82.517126][ T5941] loop0: detected capacity change from 0 to 128
[   82.579379][ T5943] Zero length message leads to an empty skb
[   82.581245][ T5941] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   82.581421][ T5941] hpfs: filesystem error: improperly stopped
[   82.581445][ T5941] hpfs: You really don't want any checks? You are crazy...
[   82.581817][ T5941] hpfs: hpfs_map_sector(): read error
[   82.581828][ T5941] hpfs: code page support is disabled
[   82.604627][ T5941] hpfs: hpfs_map_4sectors(): unaligned read
[   82.604823][ T5941] hpfs: hpfs_map_4sectors(): unaligned read
[   82.604835][ T5941] hpfs: filesystem error: unable to find root dir
[   82.686510][ T5945] FAULT_INJECTION: forcing a failure.
[   82.686510][ T5945] name failslab, interval 1, probability 0, space 0, times 1
[   82.686555][ T5945] CPU: 0 UID: 0 PID: 5945 Comm: syz.1.53 Not tainted syzkaller #0 PREEMPT(full) 
[   82.686580][ T5945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   82.686600][ T5945] Call Trace:
[   82.686607][ T5945]  <TASK>
[   82.686615][ T5945]  dump_stack_lvl+0xe8/0x150
[   82.686649][ T5945]  should_fail_ex+0x3eb/0x540
[   82.686678][ T5945]  should_failslab+0xa8/0x100
[   82.686701][ T5945]  __kmalloc_cache_noprof+0x9e/0x600
[   82.686720][ T5945]  ? __pfx_inc_ucount+0x10/0x10
[   82.686740][ T5945]  ? copy_ipcs+0x1fd/0x6c0
[   82.686759][ T5945]  ? copy_ipcs+0x1fd/0x6c0
[   82.686777][ T5945]  ? kmem_cache_alloc_noprof+0x31a/0x600
[   82.686798][ T5945]  copy_ipcs+0x1fd/0x6c0
[   82.686820][ T5945]  create_new_namespaces+0x210/0x6b0
[   82.686843][ T5945]  ? security_capable+0x7e/0x2c0
[   82.686872][ T5945]  unshare_nsproxy_namespaces+0x144/0x190
[   82.686897][ T5945]  ksys_unshare+0x532/0x890
[   82.686920][ T5945]  ? __pfx_ksys_unshare+0x10/0x10
[   82.686951][ T5945]  ? rcu_is_watching+0x16/0xb0
[   82.686978][ T5945]  __x64_sys_unshare+0x38/0x50
[   82.686996][ T5945]  do_syscall_64+0x166/0x520
[   82.687017][ T5945]  ? trace_irq_disable+0x3b/0x140
[   82.687032][ T5945]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.687048][ T5945]  ? clear_bhb_loop+0x70/0xc0
[   82.687067][ T5945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.687083][ T5945] RIP: 0033:0x7fd8c279e199
[   82.687104][ T5945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   82.687118][ T5945] RSP: 002b:00007fd8c3652028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   82.687138][ T5945] RAX: ffffffffffffffda RBX: 00007fd8c2a25fa0 RCX: 00007fd8c279e199
[   82.687150][ T5945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000
[   82.687160][ T5945] RBP: 00007fd8c28358e0 R08: 0000000000000000 R09: 0000000000000000
[   82.687175][ T5945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   82.687186][ T5945] R13: 00007fd8c2a26038 R14: 00007fd8c2a25fa0 R15: 00007ffdc2523fd8
[   82.687211][ T5945]  </TASK>
[   82.853452][ T5941] hpfs: hpfs_map_4sectors(): unaligned read
[   83.046044][ T5951] loop4: detected capacity change from 0 to 2048
[   83.073171][ T5952] loop3: detected capacity change from 0 to 2048
[   83.103856][ T5951]  loop4: p1 < > p4
[   83.103856][ T5951]  p4: <netbsd: >
[   83.168069][ T5952] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   83.170868][ T5951] loop4: p4 size 722688 extends beyond EOD, truncated
[   83.781005][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.65'.
[   83.915953][ T5990] bridge0: entered allmulticast mode
[   83.917870][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.68'.
[   83.917942][ T5990] bridge_slave_1: left allmulticast mode
[   83.917962][ T5990] bridge_slave_1: left promiscuous mode
[   83.918691][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.962274][ T5990] bridge_slave_0: left allmulticast mode
[   83.962306][ T5990] bridge_slave_0: left promiscuous mode
[   83.963527][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.996980][ T5990] bridge0 (unregistering): left allmulticast mode
[   84.240491][ T5998] loop3: detected capacity change from 0 to 1024
[   84.305891][ T5998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.432735][ T6010] (syz.1.74,6010,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory.
[   84.617298][ T5607] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.889685][ T5740] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   85.049257][ T5740] usb 2-1: Using ep0 maxpacket: 32
[   85.051442][ T5740] usb 2-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   85.057308][ T5740] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[   85.057338][ T5740] usb 2-1: config 0 has no interface number 0
[   85.062645][ T5740] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.062669][ T5740] usb 2-1: Product: syz
[   85.062682][ T5740] usb 2-1: Manufacturer: syz
[   85.062696][ T5740] usb 2-1: SerialNumber: syz
[   85.087274][ T5740] usb 2-1: config 0 descriptor??
[   85.356859][ T6051] loop3: detected capacity change from 0 to 1024
[   85.430936][ T6054] xt_hashlimit: size too large, truncated to 1048576
[   85.936985][ T6064] loop3: detected capacity change from 0 to 8192
[   85.955270][ T6064] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   86.331276][ T5740] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71
[   86.331308][ T5740] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[   86.331804][ T5740] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[   86.333246][ T5740] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[   86.354503][ T5740] usb 2-1: USB disconnect, device number 2
[   86.654519][ T6087] Dead loop on virtual device lo (net 39), fix it urgently!
[   86.654755][ T6087] Dead loop on virtual device lo (net 39), fix it urgently!
[   86.654942][ T6087] Dead loop on virtual device lo (net 39), fix it urgently!
[   86.655401][ T6087] Dead loop on virtual device lo (net 39), fix it urgently!
[   86.655584][ T6087] Dead loop on virtual device lo (net 39), fix it urgently!
[   86.655758][ T6087] Dead loop on virtual device lo (net 39), fix it urgently!
[   86.656249][ T6087] Dead loop on virtual device lo (net 39), fix it urgently!
[   86.657357][ T6087] Dead loop on virtual device lo (net 39), fix it urgently!
[   86.657578][ T6087] Dead loop on virtual device lo (net 39), fix it urgently!
[   86.658001][ T6087] Dead loop on virtual device lo (net 39), fix it urgently!
[   86.698840][   T46] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   86.854168][   T46] usb 1-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01
[   86.856807][   T46] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   86.856862][   T46] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[   86.856886][   T46] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   86.859233][   T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[   86.859256][   T46] usb 1-1: Product: syz
[   86.859269][   T46] usb 1-1: Manufacturer: syz
[   86.868410][ T6079] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   86.907729][   T46] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected
[   86.947446][   T46] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[   87.154525][ T5597] usb 1-1: USB disconnect, device number 2
[   87.241194][ T6091] netlink: 44 bytes leftover after parsing attributes in process `syz.4.110'.
[   87.241219][ T6091] netlink: 35 bytes leftover after parsing attributes in process `syz.4.110'.
[   87.241782][ T6091] netlink: 'syz.4.110': attribute type 5 has an invalid length.
[   87.241798][ T6091] netlink: 'syz.4.110': attribute type 6 has an invalid length.
[   87.241819][ T6091] netlink: 35 bytes leftover after parsing attributes in process `syz.4.110'.
[   87.247491][  T991] cfg80211: failed to load regulatory.db
[   87.252357][ T5597] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[   87.253195][ T5597] garmin_gps 1-1:1.0: device disconnected
[   87.359090][ T6081] loop3: detected capacity change from 0 to 40427
[   87.406616][ T6081] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[   87.406644][ T6081] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   87.794181][ T6081] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   87.808327][ T6081] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   87.808490][ T6081] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   87.863134][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.115'.
[   87.863171][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.115'.
[   87.924690][ T6081] F2FS-fs (loop3): Stopped filesystem due to reason: 0
[   88.859955][ T6147] netlink: 24 bytes leftover after parsing attributes in process `syz.3.124'.
[   88.860005][ T6147] netlink: 'syz.3.124': attribute type 1 has an invalid length.
[   88.860019][ T6147] netlink: 'syz.3.124': attribute type 2 has an invalid length.
[   89.661846][ T6167] netlink: 9 bytes leftover after parsing attributes in process `syz.3.141'.
[   89.692601][ T6167] gretap0: entered promiscuous mode
[   89.764036][ T6167] netlink: 5 bytes leftover after parsing attributes in process `syz.3.141'.
[   89.764402][ T6167] 0ªî{X¹¦: renamed from gretap0
[   89.782722][ T6167] 0ªî{X¹¦: left promiscuous mode
[   89.782745][ T6167] 0ªî{X¹¦: entered allmulticast mode
[   89.952552][ T6179] netlink: 276 bytes leftover after parsing attributes in process `syz.2.144'.
[   89.953456][ T6179] netlink: 276 bytes leftover after parsing attributes in process `syz.2.144'.
[   90.335082][ T6191] loop4: detected capacity change from 0 to 4096
[   90.342290][ T6191] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   90.413112][ T6191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.546308][ T3370] tipc: Subscription rejected, illegal request
[   90.604919][ T5620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.797565][ T6204] netlink: 48 bytes leftover after parsing attributes in process `syz.0.157'.
[   90.798486][ T6204] bridge_slave_0: left allmulticast mode
[   90.798511][ T6204] bridge_slave_0: left promiscuous mode
[   90.823285][ T6204] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.933693][ T6213] Bluetooth: MGMT ver 1.23
[   91.128767][ T6222] Driver unsupported XDP return value 0 on prog  (id 17) dev N/A, expect packet loss!
[   91.209070][ T6226] loop4: detected capacity change from 0 to 512
[   91.267097][ T6226] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.164: corrupted in-inode xattr: invalid ea_ino
[   91.267305][ T6226] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   91.269016][    C1] EXT4-fs (loop4): initial error at time 1791384211: ext4_iget_extra_inode:5210: inode 15
[   91.269048][    C1] EXT4-fs (loop4): last error at time 1791384211: ext4_iget_extra_inode:5210: inode 15
[   91.286265][ T6226] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.164: couldn't read orphan inode 15 (err -117)
[   91.286473][ T6226] loop4: lost filesystem error report for type 5 error -117
[   91.290256][ T6226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.612664][ T5620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.714759][ T6233] FAULT_INJECTION: forcing a failure.
[   91.714759][ T6233] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   91.714790][ T6233] CPU: 0 UID: 0 PID: 6233 Comm: syz.2.169 Not tainted syzkaller #0 PREEMPT(full) 
[   91.714811][ T6233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   91.714822][ T6233] Call Trace:
[   91.714830][ T6233]  <TASK>
[   91.714839][ T6233]  dump_stack_lvl+0xe8/0x150
[   91.714866][ T6233]  should_fail_ex+0x3eb/0x540
[   91.714893][ T6233]  _copy_from_user+0x2d/0xb0
[   91.714915][ T6233]  generic_map_update_batch+0x662/0xad0
[   91.714946][ T6233]  ? __pfx_generic_map_update_batch+0x10/0x10
[   91.714965][ T6233]  ? __fget_files+0x3a2/0x420
[   91.714985][ T6233]  ? __fget_files+0x2a/0x420
[   91.715007][ T6233]  ? fdget+0x1ac/0x250
[   91.715026][ T6233]  ? __pfx_generic_map_update_batch+0x10/0x10
[   91.715047][ T6233]  bpf_map_do_batch+0x391/0x630
[   91.715072][ T6233]  __sys_bpf+0x977/0xe00
[   91.715101][ T6233]  ? __pfx___sys_bpf+0x10/0x10
[   91.715123][ T6233]  ? do_futex+0x3e7/0x4e0
[   91.715169][ T6233]  ? rcu_is_watching+0x16/0xb0
[   91.715195][ T6233]  __x64_sys_bpf+0xba/0xd0
[   91.715216][ T6233]  do_syscall_64+0x166/0x520
[   91.715236][ T6233]  ? trace_irq_disable+0x3b/0x140
[   91.715254][ T6233]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.715275][ T6233]  ? clear_bhb_loop+0x70/0xc0
[   91.715297][ T6233]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.715330][ T6233] RIP: 0033:0x7f614af9e199
[   91.715349][ T6233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   91.715367][ T6233] RSP: 002b:00007f614bd89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   91.715388][ T6233] RAX: ffffffffffffffda RBX: 00007f614b225fa0 RCX: 00007f614af9e199
[   91.715404][ T6233] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a
[   91.715417][ T6233] RBP: 00007f614b0358e0 R08: 0000000000000000 R09: 0000000000000000
[   91.715430][ T6233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   91.715443][ T6233] R13: 00007f614b226038 R14: 00007f614b225fa0 R15: 00007ffcba677ca8
[   91.715476][ T6233]  </TASK>
[   91.986526][ T6235] loop1: detected capacity change from 0 to 8192
[   92.341548][ T6247] netlink: 40 bytes leftover after parsing attributes in process `syz.2.171'.
[   92.360827][ T6253] net_ratelimit: 42 callbacks suppressed
[   92.360847][ T6253] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   92.690075][   T32] kauditd_printk_skb: 23 callbacks suppressed
[   92.690094][   T32] audit: type=1326 audit(1791384213.389:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.1.179" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c279e199 code=0x7ffc0000
[   92.691259][   T32] audit: type=1326 audit(1791384213.389:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.1.179" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c279e199 code=0x7ffc0000
[   92.691464][   T32] audit: type=1326 audit(1791384213.389:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.1.179" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c279e199 code=0x7ffc0000
[   92.693509][   T32] audit: type=1326 audit(1791384213.389:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.1.179" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c279e199 code=0x7ffc0000
[   92.693715][   T32] audit: type=1326 audit(1791384213.389:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.1.179" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c279e199 code=0x7ffc0000
[   92.696164][   T32] audit: type=1326 audit(1791384213.389:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.1.179" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd8c279e199 code=0x7ffc0000
[   92.750503][   T32] audit: type=1326 audit(1791384213.429:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.1.179" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd8c275e9ce code=0x7ffc0000
[   92.751737][   T32] audit: type=1326 audit(1791384213.429:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.1.179" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd8c275e9ce code=0x7ffc0000
[   92.758518][   T32] audit: type=1326 audit(1791384213.459:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.1.179" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd8c275e9ce code=0x7ffc0000
[   92.759786][   T32] audit: type=1326 audit(1791384213.459:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.1.179" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd8c275e9ce code=0x7ffc0000
[   93.166344][ T6268] loop4: detected capacity change from 0 to 512
[   93.195577][ T6268] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   93.195610][ T6268] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[   93.195627][ T6268] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.180: Corrupt directory, running e2fsck is recommended
[   93.200628][ T6268] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[   93.200732][ T6268] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.180: corrupted in-inode xattr: e_name out of bounds
[   93.200758][ T6268] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   93.201250][ T6268] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.180: couldn't read orphan inode 15 (err -117)
[   93.201276][ T6268] loop4: lost filesystem error report for type 5 error -117
[   93.204721][ T6268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.211049][ T6268] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   93.211079][ T6268] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[   93.211095][ T6268] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.180: Corrupt directory, running e2fsck is recommended
[   93.213644][ T6268] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   93.214546][ T6268] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[   93.214566][ T6268] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.180: Corrupt directory, running e2fsck is recommended
[   93.220742][ T6268] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   93.220846][ T6268] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[   93.220863][ T6268] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.180: Corrupt directory, running e2fsck is recommended
[   93.223737][ T6268] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   93.309333][ T5620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.841058][ T6279] FAULT_INJECTION: forcing a failure.
[   93.841058][ T6279] name failslab, interval 1, probability 0, space 0, times 0
[   93.841089][ T6279] CPU: 1 UID: 0 PID: 6279 Comm: syz.2.185 Not tainted syzkaller #0 PREEMPT(full) 
[   93.841121][ T6279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   93.841133][ T6279] Call Trace:
[   93.841141][ T6279]  <TASK>
[   93.841150][ T6279]  dump_stack_lvl+0xe8/0x150
[   93.841178][ T6279]  should_fail_ex+0x3eb/0x540
[   93.841206][ T6279]  should_failslab+0xa8/0x100
[   93.841226][ T6279]  ? security_inode_alloc+0x39/0x310
[   93.841246][ T6279]  kmem_cache_alloc_noprof+0x9c/0x600
[   93.841269][ T6279]  ? __pfx_make_kgid+0x10/0x10
[   93.841287][ T6279]  ? security_inode_alloc+0x39/0x310
[   93.841313][ T6279]  security_inode_alloc+0x39/0x310
[   93.841354][ T6279]  inode_init_always_gfp+0x97e/0xd30
[   93.841381][ T6279]  ? __pfx_shmem_alloc_inode+0x10/0x10
[   93.841399][ T6279]  alloc_inode+0x82/0x1b0
[   93.841418][ T6279]  new_inode+0x1f/0x170
[   93.841432][ T6279]  ? shmem_get_inode+0x29a/0x1030
[   93.841454][ T6279]  shmem_get_inode+0x3a4/0x1030
[   93.841481][ T6279]  ? __pfx_shmem_get_inode+0x10/0x10
[   93.841506][ T6279]  ? __vm_enough_memory+0x11a/0x380
[   93.841529][ T6279]  __shmem_file_setup+0x20b/0x370
[   93.841554][ T6279]  ? __pfx___shmem_file_setup+0x10/0x10
[   93.841574][ T6279]  ? __kmalloc_cache_noprof+0x148/0x600
[   93.841593][ T6279]  ? newseg+0x287/0xc70
[   93.841610][ T6279]  ? newseg+0x287/0xc70
[   93.841636][ T6279]  newseg+0x4c1/0xc70
[   93.841664][ T6279]  ? __pfx_newseg+0x10/0x10
[   93.841733][ T6279]  ? __filemap_fdatawait_range+0x204/0x2a0
[   93.841759][ T6279]  ipcget+0x1c6/0xd10
[   93.841814][ T6279]  ? __pfx_ipcget+0x10/0x10
[   93.841851][ T6279]  ? __se_sys_futex+0x3a8/0x450
[   93.841877][ T6279]  __x64_sys_shmget+0x140/0x190
[   93.841899][ T6279]  ? __pfx___x64_sys_shmget+0x10/0x10
[   93.841929][ T6279]  do_syscall_64+0x166/0x520
[   93.841947][ T6279]  ? trace_irq_disable+0x3b/0x140
[   93.841963][ T6279]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.841983][ T6279]  ? clear_bhb_loop+0x70/0xc0
[   93.842012][ T6279]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.842031][ T6279] RIP: 0033:0x7f614af9e199
[   93.842048][ T6279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   93.842064][ T6279] RSP: 002b:00007f614bd89028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d
[   93.842085][ T6279] RAX: ffffffffffffffda RBX: 00007f614b225fa0 RCX: 00007f614af9e199
[   93.842109][ T6279] RDX: 0000000000000020 RSI: 0000000000004000 RDI: 0000000000000000
[   93.842122][ T6279] RBP: 00007f614b0358e0 R08: 0000000000000000 R09: 0000000000000000
[   93.842136][ T6279] R10: 0000200000ffb000 R11: 0000000000000246 R12: 0000000000000000
[   93.842149][ T6279] R13: 00007f614b226038 R14: 00007f614b225fa0 R15: 00007ffcba677ca8
[   93.842182][ T6279]  </TASK>
[   93.913112][ T6285] syz.0.186 uses obsolete (PF_INET,SOCK_PACKET)
[   94.167345][ T6272] loop4: detected capacity change from 0 to 32768
[   94.252297][ T6290] loop3: detected capacity change from 0 to 1024
[   94.321131][ T6272] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   94.363879][ T6290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.430833][ T6272] XFS (loop4): Ending clean mount
[   94.462211][ T6290] EXT4-fs error (device loop3): ext4_read_inline_dir:1512: inode #12: block 7: comm syz.3.188: path /36/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=14, rec_len=8, size=60 fake=0
[   94.601585][ T5607] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.647252][ T5620] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   94.666526][   T46] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   94.825221][   T46] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40
[   94.826271][   T46] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.826314][   T46] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[   94.826338][   T46] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 47601, setting to 64
[   94.828522][   T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.828544][   T46] usb 2-1: Product: syz
[   94.828556][   T46] usb 2-1: Manufacturer: syz
[   94.829040][   T46] usb 2-1: SerialNumber: syz
[   94.901776][   T46] cdc_mbim 2-1:1.0: skipping garbage
[   95.087205][ T6306] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   95.201821][ T6316] loop0: detected capacity change from 0 to 32768
[   95.371975][ T6316] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[   95.387611][ T6323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.196'.
[   95.395522][ T6323] netlink: 'syz.2.196': attribute type 2 has an invalid length.
[   95.425978][ T6316] JBD2: Ignoring recovery information on journal
[   95.575810][ T6316] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   95.589890][ T6326] netlink: 'syz.4.193': attribute type 4 has an invalid length.
[   95.701836][ T6306] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   95.910568][   T46] cdc_mbim 2-1:1.0: bind() failure
[   95.941258][   T46] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71
[   95.943513][   T46] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71
[   95.947885][   T46] usbtest 2-1:1.1: probe with driver usbtest failed with error -71
[   95.989794][   T46] usb 2-1: USB disconnect, device number 3
[   96.182677][ T5608] ocfs2: Unmounting device (7,0) on (node local)
[   96.888702][    T9] usb 2-1: new low-speed USB device number 4 using dummy_hcd
[   97.026955][ T6364] raw_sendmsg: syz.0.210 forgot to set AF_INET. Fix it!
[   97.043233][    T9] usb 2-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   97.044653][    T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[   97.044679][    T9] usb 2-1: config 0 has no interface number 0
[   97.044717][    T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[   97.044743][    T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[   97.044790][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.092286][    T9] usb 2-1: config 0 descriptor??
[   97.093825][ T6355] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   97.135779][ T6349] loop2: detected capacity change from 0 to 40427
[   97.212863][ T6349] F2FS-fs (loop2): invalid crc value
[   97.263337][    T9] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[   97.379777][   T46] usb 2-1: USB disconnect, device number 4
[   97.379939][    C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[   97.527126][ T6349] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   97.547486][ T6349] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0
[   97.547545][ T6349] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[   97.547616][ T6349] F2FS-fs (loop2): Start checkpoint disabled!
[   97.595859][ T6374] loop3: detected capacity change from 0 to 512
[   97.634758][ T6349] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0
[   97.637641][ T6349] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   97.653050][ T6374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.653164][ T6374] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   97.692325][ T6374] EXT4-fs (loop3): shut down requested (0)
[   97.923126][ T5607] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.161290][ T6383] loop0: detected capacity change from 0 to 32768
[   98.375369][ T6383] ERROR: (device loop0): dbAlloc: the hint is outside the map
[   98.375369][ T6383] 
[   98.414666][ T6383] ialloc: diAlloc returned -5!
[   98.622435][ T6404] loop2: detected capacity change from 0 to 256
[   99.139372][ T6414] FAULT_INJECTION: forcing a failure.
[   99.139372][ T6414] name failslab, interval 1, probability 0, space 0, times 0
[   99.139404][ T6414] CPU: 0 UID: 0 PID: 6414 Comm: syz.2.227 Not tainted syzkaller #0 PREEMPT(full) 
[   99.139427][ T6414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   99.139439][ T6414] Call Trace:
[   99.139447][ T6414]  <TASK>
[   99.139455][ T6414]  dump_stack_lvl+0xe8/0x150
[   99.139484][ T6414]  should_fail_ex+0x3eb/0x540
[   99.139511][ T6414]  should_failslab+0xa8/0x100
[   99.139542][ T6414]  __kmalloc_noprof+0xf9/0x710
[   99.139564][ T6414]  ? kstrdup_quotable+0x1a4/0x560
[   99.139583][ T6414]  ? kstrdup_quotable+0x1a4/0x560
[   99.139608][ T6414]  kstrdup_quotable+0x1a4/0x560
[   99.139633][ T6414]  ? __pfx_kstrdup_quotable+0x10/0x10
[   99.139652][ T6414]  ? mmput+0x61/0x70
[   99.139670][ T6414]  ? get_cmdline+0x2b0/0x320
[   99.139696][ T6414]  kstrdup_quotable_cmdline+0x342/0x3c0
[   99.139722][ T6414]  __report_access+0x76/0x320
[   99.139748][ T6414]  task_work_run+0x1d9/0x260
[   99.139771][ T6414]  ? __pfx_task_work_run+0x10/0x10
[   99.139789][ T6414]  ? __se_sys_ptrace+0x340/0x3a0
[   99.139816][ T6414]  exit_to_user_mode_loop+0x204/0x770
[   99.139834][ T6414]  ? rcu_is_watching+0x16/0xb0
[   99.139857][ T6414]  do_syscall_64+0x328/0x520
[   99.139877][ T6414]  ? trace_irq_disable+0x3b/0x140
[   99.139895][ T6414]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.139917][ T6414]  ? clear_bhb_loop+0x70/0xc0
[   99.139940][ T6414]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.139960][ T6414] RIP: 0033:0x7f614af9e199
[   99.139979][ T6414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   99.139997][ T6414] RSP: 002b:00007f614bd89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000065
[   99.140019][ T6414] RAX: ffffffffffffffff RBX: 00007f614b225fa0 RCX: 00007f614af9e199
[   99.140034][ T6414] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000010
[   99.140046][ T6414] RBP: 00007f614b0358e0 R08: 0000000000000000 R09: 0000000000000000
[   99.140059][ T6414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   99.140070][ T6414] R13: 00007f614b226038 R14: 00007f614b225fa0 R15: 00007ffcba677ca8
[   99.140097][ T6414]  </TASK>
[   99.140296][ T6414] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5609] was attempted by "(null)"[6414]
[   99.244650][ T6418] loop1: detected capacity change from 0 to 256
[   99.256799][ T6418] exfat: Deprecated parameter 'utf8'
[   99.256823][ T6418] exfat: Deprecated parameter 'utf8'
[   99.341310][ T6418] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   99.525157][ T6417] loop3: detected capacity change from 0 to 4096
[  100.108766][  T991] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  100.213603][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.238'.
[  100.279116][  T991] usb 1-1: Using ep0 maxpacket: 32
[  100.281487][  T991] usb 1-1: New USB device found: idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  100.283648][  T991] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  100.283672][  T991] usb 1-1: config 0 has no interfaces?
[  100.332271][  T991] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.332297][  T991] usb 1-1: Product: syz
[  100.332308][  T991] usb 1-1: Manufacturer: syz
[  100.332321][  T991] usb 1-1: SerialNumber: syz
[  100.359378][  T991] usb 1-1: config 0 descriptor??
[  100.647714][   T32] kauditd_printk_skb: 51 callbacks suppressed
[  100.647733][   T32] audit: type=1326 audit(1791384221.339:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.1.242" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c279e199 code=0x7ffc0000
[  100.647944][   T32] audit: type=1326 audit(1791384221.339:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.1.242" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c279e199 code=0x7ffc0000
[  100.648024][ T6425] mmap: syz.0.224 (6425) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  100.698706][   T32] audit: type=1326 audit(1791384221.389:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.1.242" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd8c279e199 code=0x7ffc0000
[  100.698760][   T32] audit: type=1326 audit(1791384221.389:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.1.242" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c279e199 code=0x7ffc0000
[  100.698797][   T32] audit: type=1326 audit(1791384221.389:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.1.242" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c279e199 code=0x7ffc0000
[  100.708468][   T32] audit: type=1326 audit(1791384221.399:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.1.242" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd8c279e199 code=0x7ffc0000
[  100.708539][   T32] audit: type=1326 audit(1791384221.399:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.1.242" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c279e199 code=0x7ffc0000
[  100.708680][   T32] audit: type=1326 audit(1791384221.399:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.1.242" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c279e199 code=0x7ffc0000
[  100.725439][   T32] audit: type=1326 audit(1791384221.419:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.1.242" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd8c279e199 code=0x7ffc0000
[  101.123159][   T32] audit: type=1326 audit(1791384221.819:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.1.242" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c279e199 code=0x7ffc0000
[  101.338268][ T6458] ip_tables: iptables: counters copy to user failed while replacing table
[  101.446269][ T5712] usb 1-1: USB disconnect, device number 3
[  101.710389][ T6451] loop3: detected capacity change from 0 to 32768
[  101.748134][ T6451] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  101.837591][ T6451] XFS (loop3): Ending clean mount
[  102.012436][ T6451] XFS (loop3): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  102.250989][ T5607] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  102.454153][ T6482] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿÿÿÿ
[  102.674919][ T6487] loop1: detected capacity change from 0 to 512
[  102.687823][ T6487] EXT4-fs: Invalid want_extra_isize 1969
[  103.132877][ T6505] hugetlbfs: syz.3.261 (6505): Using mlock ulimits for SHM_HUGETLB is obsolete
[  103.151307][ T6507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.262'.
[  103.194372][ T6509] loop4: detected capacity change from 0 to 256
[  103.601854][ T6521] capability: warning: `syz.0.267' uses 32-bit capabilities (legacy support in use)
[  103.896572][ T6530] netlink: 134 bytes leftover after parsing attributes in process `syz.3.270'.
[  103.896772][ T6530] netlink: 134 bytes leftover after parsing attributes in process `syz.3.270'.
[  104.087540][ T6538] kAFS: unable to lookup cell 'testcell'
[  104.369081][ T6552] loop2: detected capacity change from 0 to 256
[  104.638325][ T6558] FAULT_INJECTION: forcing a failure.
[  104.638325][ T6558] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  104.638357][ T6558] CPU: 1 UID: 0 PID: 6558 Comm: syz.3.282 Not tainted syzkaller #0 PREEMPT(full) 
[  104.638381][ T6558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  104.638393][ T6558] Call Trace:
[  104.638401][ T6558]  <TASK>
[  104.638410][ T6558]  dump_stack_lvl+0xe8/0x150
[  104.638447][ T6558]  should_fail_ex+0x3eb/0x540
[  104.638475][ T6558]  _copy_from_user+0x2d/0xb0
[  104.638498][ T6558]  ucma_write+0x158/0x2f0
[  104.638520][ T6558]  ? __pfx_ucma_write+0x10/0x10
[  104.638539][ T6558]  ? security_file_permission+0x75/0x260
[  104.638565][ T6558]  ? rw_verify_area+0x203/0x4c0
[  104.638584][ T6558]  ? __pfx_ucma_write+0x10/0x10
[  104.638600][ T6558]  vfs_write+0x296/0xba0
[  104.638625][ T6558]  ? __pfx_vfs_write+0x10/0x10
[  104.638646][ T6558]  ? __fget_files+0x2a/0x420
[  104.638664][ T6558]  ? __fget_files+0x3a2/0x420
[  104.638682][ T6558]  ? __fget_files+0x2a/0x420
[  104.638704][ T6558]  ? fdget+0x1ac/0x250
[  104.638729][ T6558]  ksys_write+0x150/0x270
[  104.638750][ T6558]  ? __pfx_ksys_write+0x10/0x10
[  104.638779][ T6558]  do_syscall_64+0x166/0x520
[  104.638798][ T6558]  ? trace_irq_disable+0x3b/0x140
[  104.638815][ T6558]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.638837][ T6558]  ? clear_bhb_loop+0x70/0xc0
[  104.638858][ T6558]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.638878][ T6558] RIP: 0033:0x7fc98d79e199
[  104.638897][ T6558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  104.638914][ T6558] RSP: 002b:00007fc98e641028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  104.638935][ T6558] RAX: ffffffffffffffda RBX: 00007fc98da25fa0 RCX: 00007fc98d79e199
[  104.638950][ T6558] RDX: 0000000000000018 RSI: 0000200000000400 RDI: 0000000000000003
[  104.638963][ T6558] RBP: 00007fc98d8358e0 R08: 0000000000000000 R09: 0000000000000000
[  104.638977][ T6558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  104.638988][ T6558] R13: 00007fc98da26038 R14: 00007fc98da25fa0 R15: 00007ffdb97ed2b8
[  104.639018][ T6558]  </TASK>
[  104.704068][ T6562] FAULT_INJECTION: forcing a failure.
[  104.704068][ T6562] name failslab, interval 1, probability 0, space 0, times 0
[  104.704097][ T6562] CPU: 0 UID: 0 PID: 6562 Comm: syz.4.287 Not tainted syzkaller #0 PREEMPT(full) 
[  104.704119][ T6562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  104.704131][ T6562] Call Trace:
[  104.704138][ T6562]  <TASK>
[  104.704146][ T6562]  dump_stack_lvl+0xe8/0x150
[  104.704173][ T6562]  should_fail_ex+0x3eb/0x540
[  104.704198][ T6562]  should_failslab+0xa8/0x100
[  104.704220][ T6562]  __kmalloc_cache_noprof+0x9e/0x600
[  104.704242][ T6562]  ? alloc_mnt_ns+0xae/0x2c0
[  104.704259][ T6562]  ? alloc_mnt_ns+0xae/0x2c0
[  104.704284][ T6562]  alloc_mnt_ns+0xae/0x2c0
[  104.704305][ T6562]  open_new_namespace+0x1cd/0xb50
[  104.704335][ T6562]  ? __pfx_open_new_namespace+0x10/0x10
[  104.704356][ T6562]  ? strncpy_from_user+0x150/0x2c0
[  104.704380][ T6562]  ? do_getname+0x151/0x250
[  104.704402][ T6562]  vfs_open_tree+0x31f/0x3c0
[  104.704423][ T6562]  ? __pfx_vfs_open_tree+0x10/0x10
[  104.704451][ T6562]  __x64_sys_open_tree+0x93/0x110
[  104.704472][ T6562]  do_syscall_64+0x166/0x520
[  104.704491][ T6562]  ? trace_irq_disable+0x3b/0x140
[  104.704508][ T6562]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.704528][ T6562]  ? clear_bhb_loop+0x70/0xc0
[  104.704549][ T6562]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.704569][ T6562] RIP: 0033:0x7f9a3639e199
[  104.704587][ T6562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  104.704604][ T6562] RSP: 002b:00007f9a371c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac
[  104.704625][ T6562] RAX: ffffffffffffffda RBX: 00007f9a36625fa0 RCX: 00007f9a3639e199
[  104.704639][ T6562] RDX: 0000000000081802 RSI: 0000200000000640 RDI: ffffffffffffff9c
[  104.704652][ T6562] RBP: 00007f9a364358e0 R08: 0000000000000000 R09: 0000000000000000
[  104.704665][ T6562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  104.704677][ T6562] R13: 00007f9a36626038 R14: 00007f9a36625fa0 R15: 00007ffceb7f9d48
[  104.704707][ T6562]  </TASK>
[  105.409122][ T6588] ip_tables: iptables: counters copy to user failed while replacing table
[  105.516806][ T6596] loop2: detected capacity change from 0 to 128
[  105.518086][ T6596] EXT4-fs: Ignoring removed i_version option
[  105.567540][ T6596] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  105.582682][ T6596] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  105.767223][ T6587] syz.1.297 (6587) used greatest stack depth: 18312 bytes left
[  105.807120][ T5609] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  105.850705][ T6593] syz.1.297 (6593) used greatest stack depth: 17800 bytes left
[  106.037887][ T6611] loop4: detected capacity change from 0 to 512
[  106.048747][ T6611] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  106.048767][ T6611] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  106.107808][ T6611] EXT4-fs (loop4): 1 truncate cleaned up
[  106.116809][ T6611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.176485][ T6611] EXT4-fs error (device loop4): ext4_generic_delete_entry:2675: inode #2: block 13: comm syz.4.305: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  106.214143][ T6611] EXT4-fs error (device loop4) in ext4_delete_entry:2746: Corrupt filesystem
[  106.223769][ T6611] EXT4-fs warning (device loop4): ext4_rename_delete:3741: inode #2: comm syz.4.305: Deleting old file: nlink 4, error=-117
[  106.820567][ T5620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.011366][   T32] kauditd_printk_skb: 5 callbacks suppressed
[  107.011384][   T32] audit: type=1326 audit(1791384227.709:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6625 comm="syz.1.307" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8c279e199 code=0x0
[  107.123620][ T6637] netlink: 36 bytes leftover after parsing attributes in process `syz.2.312'.
[  107.141789][ T5712] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  107.290730][ T5712] usb 4-1: Using ep0 maxpacket: 32
[  107.294396][ T5712] usb 4-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  107.296875][ T5712] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  107.296904][ T5712] usb 4-1: config 0 has no interface number 0
[  107.302556][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.302605][ T5712] usb 4-1: Product: syz
[  107.302620][ T5712] usb 4-1: Manufacturer: syz
[  107.302633][ T5712] usb 4-1: SerialNumber: syz
[  107.310245][ T5712] usb 4-1: config 0 descriptor??
[  108.418840][ T5712] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  108.418873][ T5712] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  108.423080][ T5712] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  108.423320][ T5712] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  108.459104][ T5712] usb 4-1: USB disconnect, device number 2
[  109.666825][ T6685] loop4: detected capacity change from 0 to 32768
[  109.668046][ T6685] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  109.745251][ T6685] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.321 (6685)
[  109.831309][ T6685] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  109.831357][ T6685] BTRFS info (device loop4): using crc32c checksum algorithm
[  109.856529][ T5719] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  109.979180][ T6694] loop3: detected capacity change from 0 to 32768
[  109.999835][ T5719] usb 3-1: Using ep0 maxpacket: 32
[  110.004144][ T5719] usb 3-1: unable to get BOS descriptor or descriptor too short
[  110.004195][ T5719] usb 3-1: New USB device found: idVendor=1430, idProduct=474b, bcdDevice=0.40
[  110.008264][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.008291][ T5719] usb 3-1: Product: syz
[  110.008305][ T5719] usb 3-1: Manufacturer: syz
[  110.008320][ T5719] usb 3-1: SerialNumber: syz
[  110.102712][ T6694] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  110.106132][ T5719] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  110.141958][ T6685] BTRFS info (device loop4): rebuilding free space tree
[  110.204407][ T6694] XFS (loop3): Ending clean mount
[  110.303420][ T5719] usb 3-1: unit 3 not found!
[  110.451413][ T5719] usb 3-1: USB disconnect, device number 2
[  110.546577][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  110.555543][ T6733] FAULT_INJECTION: forcing a failure.
[  110.555543][ T6733] name failslab, interval 1, probability 0, space 0, times 0
[  110.555575][ T6733] CPU: 1 UID: 0 PID: 6733 Comm: syz.0.331 Not tainted syzkaller #0 PREEMPT(full) 
[  110.555598][ T6733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  110.555610][ T6733] Call Trace:
[  110.555617][ T6733]  <TASK>
[  110.555625][ T6733]  dump_stack_lvl+0xe8/0x150
[  110.555652][ T6733]  should_fail_ex+0x3eb/0x540
[  110.555677][ T6733]  should_failslab+0xa8/0x100
[  110.555700][ T6733]  __kmalloc_noprof+0xf9/0x710
[  110.555723][ T6733]  ? __kmalloc_noprof+0x1a6/0x710
[  110.555741][ T6733]  ? hfsplus_read_wrapper+0x463/0x1170
[  110.555761][ T6733]  ? hfsplus_read_wrapper+0x463/0x1170
[  110.555787][ T6733]  hfsplus_read_wrapper+0x463/0x1170
[  110.555818][ T6733]  ? __pfx_hfsplus_read_wrapper+0x10/0x10
[  110.555843][ T6733]  ? do_raw_spin_unlock+0xf5/0x200
[  110.555880][ T6733]  ? find_nls+0x12c/0x140
[  110.555904][ T6733]  hfsplus_fill_super+0x394/0x1ab0
[  110.555926][ T6733]  ? lock_acquire+0x115/0x350
[  110.555957][ T6733]  ? __pfx_hfsplus_fill_super+0x10/0x10
[  110.555991][ T6733]  ? widen_string+0x3b/0x2a0
[  110.556010][ T6733]  ? string+0x28a/0x2d0
[  110.556031][ T6733]  ? bdev_name+0x2f0/0x450
[  110.556102][ T6733]  ? __pfx_snprintf+0x10/0x10
[  110.556121][ T6733]  ? set_blocksize+0x1c9/0x440
[  110.556146][ T6733]  ? sb_set_blocksize+0x155/0x240
[  110.556168][ T6733]  ? setup_bdev_super+0x586/0x680
[  110.556193][ T6733]  get_tree_bdev_flags+0x430/0x4f0
[  110.556214][ T6733]  ? __pfx_hfsplus_fill_super+0x10/0x10
[  110.556233][ T6733]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  110.556263][ T6733]  vfs_get_tree+0x92/0x2a0
[  110.556284][ T6733]  do_new_mount+0x325/0xb00
[  110.556321][ T6733]  ? __pfx_do_new_mount+0x10/0x10
[  110.556344][ T6733]  ? ns_capable+0x84/0xe0
[  110.556365][ T6733]  ? path_mount+0x647/0x1050
[  110.556388][ T6733]  ? user_path_at+0xd4/0x160
[  110.556409][ T6733]  __se_sys_mount+0x31d/0x420
[  110.556434][ T6733]  ? __pfx___se_sys_mount+0x10/0x10
[  110.556459][ T6733]  ? __x64_sys_mount+0x20/0xc0
[  110.556479][ T6733]  do_syscall_64+0x166/0x520
[  110.556512][ T6733]  ? trace_irq_disable+0x3b/0x140
[  110.556531][ T6733]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.556553][ T6733]  ? clear_bhb_loop+0x70/0xc0
[  110.556575][ T6733]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.556594][ T6733] RIP: 0033:0x7f671f19e199
[  110.556615][ T6733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  110.556631][ T6733] RSP: 002b:00007f67200fd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  110.556652][ T6733] RAX: ffffffffffffffda RBX: 00007f671f425fa0 RCX: 00007f671f19e199
[  110.556668][ T6733] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 00002000000003c0
[  110.556682][ T6733] RBP: 00007f671f2358e0 R08: 0000000000000000 R09: 0000000000000000
[  110.556694][ T6733] R10: 0000000000008041 R11: 0000000000000246 R12: 0000000000000000
[  110.556707][ T6733] R13: 00007f671f426038 R14: 00007f671f425fa0 R15: 00007ffcc021f7c8
[  110.556739][ T6733]  </TASK>
[  110.800652][ T5607] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  110.932759][ T6685] BTRFS info (device loop4): disabling free space tree
[  110.932975][ T6685] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  110.933003][ T6685] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  111.043697][ T6685] BTRFS info (device loop4): enabling ssd optimizations
[  111.043725][ T6685] BTRFS info (device loop4): turning on async discard
[  111.043746][ T6685] BTRFS info (device loop4): force clearing of disk cache
[  111.043774][ T6685] BTRFS info (device loop4): use zstd compression, level 3
[  111.075315][ T6704] loop1: detected capacity change from 0 to 32768
[  111.088411][ T6704] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  111.131230][ T6704] BTRFS info: device /dev/loop1 (7:1) using temp-fsid 10a79d6e-b819-4ff7-96d2-49dc2761d437
[  111.131301][ T6704] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.329 (6704)
[  111.200567][ T6704] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  111.200600][ T6704] BTRFS info (device loop1): using crc32c checksum algorithm
[  111.330669][ T6704] BTRFS info (device loop1): rebuilding free space tree
[  111.375810][ T5620] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  111.391684][ T6704] BTRFS info (device loop1): disabling free space tree
[  111.391748][ T6704] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  111.391770][ T6704] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  111.426345][ T6704] BTRFS info (device loop1): enabling ssd optimizations
[  111.426372][ T6704] BTRFS info (device loop1): turning on async discard
[  111.426405][ T6704] BTRFS info (device loop1): force clearing of disk cache
[  111.426422][ T6704] BTRFS info (device loop1): use zstd compression, level 3
[  111.457901][ T6756] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  112.193083][ T5610] BTRFS info (device loop1): last unmount of filesystem 10a79d6e-b819-4ff7-96d2-49dc2761d437
[  112.544445][ T6789] loop0: detected capacity change from 0 to 256
[  113.223300][ T6808] loop2: detected capacity change from 0 to 128
[  113.293371][ T6808] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  113.302419][ T6808] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  113.516561][ T5609] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  113.674386][ T6814] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[  113.674415][ T6814] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  113.676705][ T6815] vhci_hcd: xmit failed -107
[  113.704656][ T6814] vhci_hcd vhci_hcd.0: Device attached
[  113.721421][ T3370] vhci_hcd vhci_hcd.0: stop threads
[  113.722334][ T3370] vhci_hcd vhci_hcd.0: release socket
[  113.722371][ T3370] vhci_hcd vhci_hcd.0: disconnect device
[  114.040568][ T5719] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  114.078719][    T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  114.139930][ T6835] loop3: detected capacity change from 0 to 512
[  114.157884][ T6835] EXT4-fs (loop3): Test dummy encryption mode enabled
[  114.175001][ T6835] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.361: inode has both inline data and extents flags
[  114.175036][ T6835] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  114.175374][ T6835] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.361: couldn't read orphan inode 15 (err -117)
[  114.175401][ T6835] loop3: lost filesystem error report for type 5 error -117
[  114.189649][ T5719] usb 5-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  114.190977][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.194258][ T5719] usb 5-1: config 0 descriptor??
[  114.197561][ T5719] cp210x 5-1:0.0: cp210x converter detected
[  114.229718][ T6835] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.230377][    T9] usb 1-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01
[  114.231742][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  114.231787][    T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  114.231809][    T9] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  114.233412][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  114.233463][    T9] usb 1-1: Product: syz
[  114.233477][    T9] usb 1-1: Manufacturer: syz
[  114.237377][ T6822] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  114.243166][    T9] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected
[  114.254898][    T9] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  114.314271][ T6835] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-lib"
[  114.453088][ T5607] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.594323][    T9] usb 1-1: USB disconnect, device number 4
[  114.633427][ T5719] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  114.679368][ T6848] netlink: 36 bytes leftover after parsing attributes in process `syz.2.366'.
[  114.703447][    T9] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  114.704015][    T9] garmin_gps 1-1:1.0: device disconnected
[  114.725047][ T5719] usb 5-1: cp210x converter now attached to ttyUSB1
[  114.855199][ T5719] usb 5-1: USB disconnect, device number 2
[  114.879610][ T5719] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1
[  114.880140][ T5719] cp210x 5-1:0.0: device disconnected
[  115.008915][  T991] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  115.117332][ T6863] netlink: 'syz.1.374': attribute type 5 has an invalid length.
[  115.117377][ T6863] netlink: 'syz.1.374': attribute type 9 has an invalid length.
[  115.117390][ T6863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.374'.
[  115.159528][  T991] usb 3-1: New USB device found: idVendor=04b4, idProduct=931e, bcdDevice=0.40
[  115.161733][  T991] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  115.161760][  T991] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  115.197995][  T991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.198023][  T991] usb 3-1: Product: syz
[  115.198037][  T991] usb 3-1: Manufacturer: syz
[  115.198051][  T991] usb 3-1: SerialNumber: syz
[  115.347554][ T6871] loop6: detected capacity change from 0 to 2640
[  115.357261][ T6871] Buffer I/O error on dev loop6, logical block 0, async page read
[  115.357372][ T6871] Buffer I/O error on dev loop6, logical block 0, async page read
[  115.357404][ T6871] Buffer I/O error on dev loop6, logical block 0, async page read
[  115.357433][ T6871] Buffer I/O error on dev loop6, logical block 0, async page read
[  115.357488][ T6871] Buffer I/O error on dev loop6, logical block 0, async page read
[  115.357546][ T6871] Buffer I/O error on dev loop6, logical block 0, async page read
[  115.357588][ T6871] Buffer I/O error on dev loop6, logical block 0, async page read
[  115.357638][ T6871] Buffer I/O error on dev loop6, logical block 0, async page read
[  115.357769][ T6871] ldm_validate_partition_table(): Disk read failed.
[  115.357799][ T6871] Buffer I/O error on dev loop6, logical block 0, async page read
[  115.357828][ T6871] Buffer I/O error on dev loop6, logical block 0, async page read
[  115.357873][ T6871] Dev loop6: unable to read RDB block 0
[  115.358125][ T6871]  loop6: unable to read partition table
[  115.358422][ T6871] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  115.473696][  T991] usb 3-1: unit 5 not found!
[  115.494462][ T6871] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2
[  115.494571][ T6871] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2
[  115.495271][ T6871] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 80 prio class 2
[  115.562467][  T991] usb 3-1: can't set first interface for hiFace device.
[  115.562496][  T991] snd-usb-hiface 3-1:1.1: probe with driver snd-usb-hiface failed with error -5
[  115.566217][ T6873] FAULT_INJECTION: forcing a failure.
[  115.566217][ T6873] name failslab, interval 1, probability 0, space 0, times 0
[  115.566261][ T6873] CPU: 0 UID: 0 PID: 6873 Comm: syz.0.379 Not tainted syzkaller #0 PREEMPT(full) 
[  115.566285][ T6873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  115.566297][ T6873] Call Trace:
[  115.566305][ T6873]  <TASK>
[  115.566314][ T6873]  dump_stack_lvl+0xe8/0x150
[  115.566352][ T6873]  should_fail_ex+0x3eb/0x540
[  115.566379][ T6873]  should_failslab+0xa8/0x100
[  115.566400][ T6873]  ? copy_fs_struct+0x4f/0x270
[  115.566431][ T6873]  kmem_cache_alloc_noprof+0x9c/0x600
[  115.566454][ T6873]  ? copy_fs_struct+0x4f/0x270
[  115.566481][ T6873]  copy_fs_struct+0x4f/0x270
[  115.566504][ T6873]  copy_fs+0xd2/0x280
[  115.566526][ T6873]  copy_process+0x1d60/0x4430
[  115.566557][ T6873]  ? copy_process+0xd11/0x4430
[  115.566590][ T6873]  ? __pfx_copy_process+0x10/0x10
[  115.566620][ T6873]  kernel_clone+0x2d7/0x940
[  115.566646][ T6873]  ? __pfx_kernel_clone+0x10/0x10
[  115.566675][ T6873]  ? do_futex+0x3e7/0x4e0
[  115.566698][ T6873]  __x64_sys_clone+0x1b6/0x230
[  115.566721][ T6873]  ? __pfx___x64_sys_clone+0x10/0x10
[  115.566755][ T6873]  ? rcu_is_watching+0x16/0xb0
[  115.566786][ T6873]  do_syscall_64+0x166/0x520
[  115.566806][ T6873]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.566827][ T6873]  ? clear_bhb_loop+0x70/0xc0
[  115.566850][ T6873]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.566871][ T6873] RIP: 0033:0x7f671f19e199
[  115.566897][ T6873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  115.566912][ T6873] RSP: 002b:00007f67200fcfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  115.566938][ T6873] RAX: ffffffffffffffda RBX: 00007f671f425fa0 RCX: 00007f671f19e199
[  115.566954][ T6873] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000400
[  115.566967][ T6873] RBP: 00007f671f2358e0 R08: 0000000000000000 R09: 0000000000000000
[  115.566978][ T6873] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  115.566989][ T6873] R13: 00007f671f426038 R14: 00007f671f425fa0 R15: 00007ffcc021f7c8
[  115.567019][ T6873]  </TASK>
[  115.817939][  T991] usb 3-1: USB disconnect, device number 3
[  115.840539][ T6875] loop4: detected capacity change from 0 to 128
[  115.874595][ T6875] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  115.874628][ T6875] hpfs: filesystem error: improperly stopped
[  115.874641][ T6875] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  115.874654][ T6875] hpfs: You really don't want any checks? You are crazy...
[  115.874666][ T6875] hpfs: Code page index out of array
[  115.874673][ T6875] hpfs: code page support is disabled
[  115.878059][ T6875] hpfs: hpfs_map_4sectors(): unaligned read
[  115.878137][ T6875] hpfs: hpfs_map_4sectors(): unaligned read
[  115.878147][ T6875] hpfs: filesystem error: unable to find root dir
[  116.140114][ T6875] hpfs: hpfs_map_4sectors(): unaligned read
[  116.291564][ T6889] netlink: 28 bytes leftover after parsing attributes in process `syz.2.384'.
[  116.764242][ T6891] loop4: detected capacity change from 0 to 32768
[  116.849633][ T6891] (syz.4.385,6891,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  116.856466][ T6891] (syz.4.385,6891,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  116.923374][ T6906] loop0: detected capacity change from 0 to 1764
[  117.001481][ T6891] JBD2: Ignoring recovery information on journal
[  117.059207][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.392'.
[  117.118906][ T6891] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  117.663763][ T5609] 
[  117.666136][ T5609] ======================================================
[  117.673163][ T5609] WARNING: possible circular locking dependency detected
[  117.680209][ T5609] syzkaller #0 Not tainted
[  117.684633][ T5609] ------------------------------------------------------
[  117.685431][ T5620] ocfs2: Unmounting device (7,4) on (node local)
[  117.698059][ T5609] syz-executor/5609 is trying to acquire lock:
[  117.704483][ T5609] ffff888056f2ac00 (&type->i_mutex_dir_key#4){++++}-{4:4}, at: iterate_dir+0x287/0x880
[  117.714174][ T5609] 
[  117.714174][ T5609] but task is already holding lock:
[  117.721567][ T5609] ffff8880123b8160 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: wrap_directory_iterator+0x5a/0xe0
[  117.732363][ T5609] 
[  117.732363][ T5609] which lock already depends on the new lock.
[  117.732363][ T5609] 
[  117.743099][ T5609] 
[  117.743099][ T5609] the existing dependency chain (in reverse order) is:
[  117.752190][ T5609] 
[  117.752190][ T5609] -> #2 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}:
[  117.760875][ T5609]        down_read+0x45/0x320
[  117.765575][ T5609]        lookup_slow+0x46/0x80
[  117.770331][ T5609]        ovl_lookup_single+0x323/0xe90
[  117.775796][ T5609]        ovl_lookup_layer+0x377/0x440
[  117.781525][ T5609]        ovl_lookup+0x9ae/0x1c80
[  117.786550][ T5609]        lookup_open+0x94b/0x1970
[  117.791573][ T5609]        path_openat+0x673/0x1da0
[  117.796586][ T5609]        do_file_open+0x23e/0x4a0
[  117.801688][ T5609]        do_sys_openat2+0x115/0x200
[  117.806891][ T5609]        __x64_sys_openat+0x138/0x170
[  117.812302][ T5609]        do_syscall_64+0x166/0x520
[  117.817426][ T5609]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.823847][ T5609] 
[  117.823847][ T5609] -> #1 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}:
[  117.831677][ T5609]        __d_alloc_parallel+0xc32/0x1700
[  117.837308][ T5609]        __lookup_slow+0x82/0x2f0
[  117.842411][ T5609]        lookup_slow+0x59/0x80
[  117.847169][ T5609]        path_lookupat+0x3f5/0x8c0
[  117.852268][ T5609]        filename_lookup+0x265/0x5d0
[  117.857551][ T5609]        do_readlinkat+0xe3/0x510
[  117.862994][ T5609]        __x64_sys_readlink+0x7f/0x90
[  117.868366][ T5609]        do_syscall_64+0x166/0x520
[  117.873640][ T5609]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.880149][ T5609] 
[  117.880149][ T5609] -> #0 (&type->i_mutex_dir_key#4){++++}-{4:4}:
[  117.888592][ T5609]        __lock_acquire+0x164c/0x2de0
[  117.893987][ T5609]        lock_acquire+0x115/0x350
[  117.899016][ T5609]        down_read_killable+0x4b/0x3b0
[  117.904557][ T5609]        iterate_dir+0x287/0x880
[  117.909501][ T5609]        ovl_dir_read+0x141/0x4a0
[  117.914581][ T5609]        ovl_dir_read_merged+0x2fb/0x520
[  117.920208][ T5609]        ovl_iterate+0xd5a/0x2160
[  117.925236][ T5609]        wrap_directory_iterator+0x96/0xe0
[  117.931060][ T5609]        iterate_dir+0x3db/0x880
[  117.936022][ T5609]        __se_sys_getdents64+0xf1/0x280
[  117.941560][ T5609]        do_syscall_64+0x166/0x520
[  117.946666][ T5609]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.953162][ T5609] 
[  117.953162][ T5609] other info that might help us debug this:
[  117.953162][ T5609] 
[  117.963407][ T5609] Chain exists of:
[  117.963407][ T5609]   &type->i_mutex_dir_key#4 --> DCACHE_PAR_LOOKUP --> &ovl_i_mutex_dir_key[depth]
[  117.963407][ T5609] 
[  117.978450][ T5609]  Possible unsafe locking scenario:
[  117.978450][ T5609] 
[  117.985893][ T5609]        CPU0                    CPU1
[  117.991250][ T5609]        ----                    ----
[  117.997049][ T5609]   lock(&ovl_i_mutex_dir_key[depth]);
[  118.002601][ T5609]                                lock(DCACHE_PAR_LOOKUP);
[  118.009802][ T5609]                                lock(&ovl_i_mutex_dir_key[depth]);
[  118.017772][ T5609]   rlock(&type->i_mutex_dir_key#4);
[  118.023061][ T5609] 
[  118.023061][ T5609]  *** DEADLOCK ***
[  118.023061][ T5609] 
[  118.031454][ T5609] locks held by syz-executor/5609: 2, last CPU#1:
[  118.037948][ T5609]  #0: ffff88807a5f9eb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160
[  118.047083][ T5609]  #1: ffff8880123b8160 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: wrap_directory_iterator+0x5a/0xe0
[  118.058301][ T5609] 
[  118.058301][ T5609] stack backtrace:
[  118.064186][ T5609] CPU: 1 UID: 0 PID: 5609 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  118.073635][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  118.083704][ T5609] Call Trace:
[  118.086981][ T5609]  <TASK>
[  118.089904][ T5609]  dump_stack_lvl+0xe8/0x150
[  118.094491][ T5609]  print_circular_bug+0x2e2/0x300
[  118.099532][ T5609]  check_noncircular+0x12f/0x150
[  118.104518][ T5609]  __lock_acquire+0x164c/0x2de0
[  118.109488][ T5609]  ? apparmor_file_open+0x523/0x6c0
[  118.114701][ T5609]  ? __pfx_aa_file_perm+0x10/0x10
[  118.119943][ T5609]  lock_acquire+0x115/0x350
[  118.124474][ T5609]  ? iterate_dir+0x287/0x880
[  118.129290][ T5609]  ? iterate_dir+0x287/0x880
[  118.134518][ T5609]  down_read_killable+0x4b/0x3b0
[  118.139478][ T5609]  ? iterate_dir+0x287/0x880
[  118.144081][ T5609]  iterate_dir+0x287/0x880
[  118.148499][ T5609]  ovl_dir_read+0x141/0x4a0
[  118.153003][ T5609]  ? __pfx_ovl_dir_read+0x10/0x10
[  118.158035][ T5609]  ? ovl_path_upper+0x105/0x170
[  118.162910][ T5609]  ? ovl_path_next+0x21a/0x430
[  118.167690][ T5609]  ovl_dir_read_merged+0x2fb/0x520
[  118.172817][ T5609]  ? __pfx_ovl_dir_read_merged+0x10/0x10
[  118.178448][ T5609]  ? __pfx_ovl_fill_merge+0x10/0x10
[  118.183651][ T5609]  ? __kasan_kmalloc+0x93/0xb0
[  118.188410][ T5609]  ? __kmalloc_cache_noprof+0x148/0x600
[  118.193951][ T5609]  ? ovl_iterate+0xcbc/0x2160
[  118.198620][ T5609]  ? ovl_iterate+0xcbc/0x2160
[  118.203288][ T5609]  ovl_iterate+0xd5a/0x2160
[  118.207784][ T5609]  ? arch_stack_walk+0xfb/0x150
[  118.212632][ T5609]  ? check_path+0x21/0x40
[  118.216977][ T5609]  ? check_noncircular+0xdb/0x150
[  118.222000][ T5609]  ? __pfx_ovl_iterate+0x10/0x10
[  118.226945][ T5609]  ? lockdep_unlock+0x5c/0xd0
[  118.231616][ T5609]  ? __lock_acquire+0x1511/0x2de0
[  118.236643][ T5609]  ? lock_acquire+0x115/0x350
[  118.241321][ T5609]  ? down_write+0x166/0x200
[  118.245817][ T5609]  ? __pfx_down_write+0x10/0x10
[  118.250657][ T5609]  ? wrap_directory_iterator+0x52/0xe0
[  118.256199][ T5609]  ? __pfx_ovl_iterate+0x10/0x10
[  118.261139][ T5609]  wrap_directory_iterator+0x96/0xe0
[  118.266439][ T5609]  iterate_dir+0x3db/0x880
[  118.270857][ T5609]  __se_sys_getdents64+0xf1/0x280
[  118.275889][ T5609]  ? __pfx___se_sys_getdents64+0x10/0x10
[  118.281610][ T5609]  ? __pfx_filldir64+0x10/0x10
[  118.286410][ T5609]  ? do_user_addr_fault+0xd3f/0x1480
[  118.291696][ T5609]  do_syscall_64+0x166/0x520
[  118.296284][ T5609]  ? trace_irq_disable+0x3b/0x140
[  118.301301][ T5609]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.307362][ T5609]  ? clear_bhb_loop+0x70/0xc0
[  118.312125][ T5609]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.318020][ T5609] RIP: 0033:0x7f614afc6b33
[  118.322445][ T5609] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[  118.342077][ T5609] RSP: 002b:00007ffcba675df8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[  118.350587][ T5609] RAX: ffffffffffffffda RBX: 000055556970ba50 RCX: 00007f614afc6b33
[  118.358577][ T5609] RDX: 0000000000008000 RSI: 000055556970ba80 RDI: 0000000000000005
[  118.366548][ T5609] RBP: 000055556970ba80 R08: 00007f614b1f4e20 R09: 0000000000000001
[  118.374598][ T5609] R10: 0000000000000000 R11: 0000000000000293 R12: 000055556970ba54
[  118.382648][ T5609] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007ffcba6780a0
[  118.390626][ T5609]  </TASK>
[  118.529289][ T5719] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  118.678640][ T5719] usb 2-1: Using ep0 maxpacket: 8
[  118.679212][ T5719] usb 2-1: New USB device found: idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[  118.680025][ T5719] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  118.680060][ T5719] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  118.680086][ T5719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  118.681839][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[  118.681863][ T5719] usb 2-1: Product: syz
[  118.681878][ T5719] usb 2-1: Manufacturer: syz
[  118.681891][ T5719] usb 2-1: SerialNumber: syz
[  118.683797][ T5719] usb 2-1: config 0 descriptor??
[  118.828709][ T5719] rc_core: IR keymap rc-imon-rsc not found
[  118.828726][ T5719] Registered IR keymap rc-empty
[  118.829440][ T5719] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  118.830766][ T5719] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5
[  118.906315][ T5719] usb 2-1: USB disconnect, device number 5