last executing test programs:

6.918054868s ago: executing program 0 (id=37):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f00000001c0))

6.770659903s ago: executing program 0 (id=38):
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000)

6.768179813s ago: executing program 2 (id=39):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f0000001880)={0x1f, @any, 0x3}, 0x19)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r1, &(0x7f00000018c0)={0x1f, @any, 0x11}, 0xa)
shutdown(r0, 0x1)

6.622998567s ago: executing program 3 (id=40):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000800)={0x0, @bt={0x12, 0x7c5, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0x7, 0x8, 0x5, 0x722, 0x0, 0xd25b, 0x8, 0x2e, 0x2d, {0xffff945a, 0xfffffffe}, 0x3, 0xed}})

6.469655623s ago: executing program 3 (id=41):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x800}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./debug\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
write(r0, &(0x7f00000003c0)='+p', 0x2)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x40)

6.174600393s ago: executing program 3 (id=42):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/times\x00', 0x2, 0x0)
write(r2, &(0x7f0000000180)='100', 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/failslab/probability\x00', 0x2, 0x0)
write(r3, &(0x7f0000000200)='5\x00', 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0x3, &(0x7f0000000300)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r4 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0)
write(r4, &(0x7f0000000380)='1', 0x1)
openat$dir(0xffffffffffffff9c, 0x0, 0x1, 0x1d4)
syz_mount_image$ocfs2(&(0x7f0000006100), &(0x7f0000006140)='./file1\x00', 0x8c0, &(0x7f0000006180)={[{@intr}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x1}}, {@heartbeat_global}, {@coherency_buffered}, {@localflocks}, {@coherency_full}, {@barrier={'barrier', 0x3d, 0x4}}]}, 0x1, 0x4431, &(0x7f0000006240)="$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")
bpf$PROG_LOAD(0x5, &(0x7f000000a680)={0x1, 0x0, 0x0, &(0x7f000000a740)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f000000a780), 0x8, 0x10, &(0x7f000000a7c0)={0x0, 0x0, 0x40000000}, 0x10}, 0x94)
getpid()
ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x2, 0x5002)
openat$nci(0xffffffffffffff9c, &(0x7f000000a800), 0x2, 0x0)
fanotify_init(0x1, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f000000a840)={0xf, 0x10, &(0x7f000000a900)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@call={0x85, 0x0, 0x0, 0xba}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f000000a980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @cgroup_device=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f000000a9c0)={0x0, 0x0, &(0x7f000000aa00)={&(0x7f000000aa40)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$jfs(&(0x7f000000aac0), &(0x7f000000ab00)='./file0\x00', 0x214001, &(0x7f000000ab40), 0x1, 0x5def, &(0x7f000000ab80)="$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")

5.244603258s ago: executing program 2 (id=44):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000006c0)={0x120, 0x33, 0x200, 0x70bc2d, 0x25dfdbfd, {0x7}, [@nested={0x10a, 0x160, 0x0, 0x1, [@generic="722dfd395c7dda70c8322bb36e4a84030bca9937f4ae5bff79533a0592c3bf58bef47e90155f8b1a9bea07235c19fa145a6060dd40ac904359d0aa9c16f4e68fe9f48be6ad5b3ce9a79e278740d53ae157051748d39f395d6831ea57bbfae5f67cd0dca3af72823d55e47e47c2601cf99ee5", @typed={0x91, 0x6a, 0x0, 0x0, @binary="e10c02bd0ba1d2c86c79e676955f21c28c2e48705209299e6a6f72d99918e5e71a5c3e1f183c12274ca8f7c015d890b47c10fbaf9004b71a3cafb4a5283ff18a02bed4755a61b5d8629e831ab3ea411236390755a30d91953af7c94df518d2a18753077cf258cb1f5973d8d187e6a01203d5c04bc69e9d32a2b356fe594306645a37f3be2dc767ecacab6ba9e8"}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff0802110000"], 0x6f4}}, 0x0)

5.148428147s ago: executing program 0 (id=45):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000640)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x7101})
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000740)='./sys\x00', &(0x7f0000000780)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys/class/net/syzkaller0/queues/tx-0/xps_cpus\x00', 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/class/net/syzkaller0/queues/tx-1/xps_cpus\x00', 0x2, 0x0)
write(r2, &(0x7f0000000880)='1', 0x1)

5.009970531s ago: executing program 2 (id=46):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0)

4.797827413s ago: executing program 2 (id=47):
syz_open_dev$video(0x0, 0x0, 0x2)
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f00000000c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1f90, @empty}}, 0x24)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1f90, @loopback}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rxrpc/conns\x00', 0x0, 0x0)
read(r2, &(0x7f0000000300), 0x1000)

4.713516011s ago: executing program 0 (id=48):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x122, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001})
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r2, &(0x7f0000000100)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10)
listen(r2, 0x5)
write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c"], 0x4a)

4.283806675s ago: executing program 2 (id=49):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000206d044fc2000000000022090224000900001006090410ec010300030009218100ff0122280009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="2023280000002803c26313"], 0x0, 0x0, 0x0, 0x0}, 0x0)

3.175967117s ago: executing program 0 (id=52):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r0, &(0x7f0000000080)='10000', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x5ada985dea50982f)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff)
write(r1, &(0x7f0000000100)='1', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='0', 0x1)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sysvipc/sem\x00', 0x0, 0x0)
io_setup(0x8001, &(0x7f0000000240))
mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='devpts\x00', 0x8, 0x0)

1.797544257s ago: executing program 3 (id=57):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000640)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x7101})
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000740)='./sys\x00', &(0x7f0000000780)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys/class/net/syzkaller0/queues/tx-0/xps_cpus\x00', 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/class/net/syzkaller0/queues/tx-1/xps_cpus\x00', 0x2, 0x0)
write(r2, &(0x7f0000000880)='1', 0x1)

1.635487164s ago: executing program 3 (id=58):
setns(0xc9, 0x0)
r0 = socket(0x80000000000000a, 0x2, 0x0)
mkdirat(0xffffff9c, &(0x7f0000001a00)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000001a40)='./proc\x00', &(0x7f0000001a80)='proc\x00', 0x0, 0x0)
openat(0xffffff9c, &(0x7f0000001ac0)='./proc/sys/net/ipv6/conf/all/force_mld_version\x00', 0x201, 0x5)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001b40)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)

1.545889533s ago: executing program 3 (id=59):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
fdatasync(0xffffffffffffffff)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x5e21, @empty}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000080)=0x9, 0x4)
r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x11, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xfc, 0x1, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x0)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$BLKTRACESETUP(r2, 0xc0481273, 0x0)
ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0)
ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x5e21, @local}, 0x10)
sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47ed2345653602648dcaaf6c26c291214549f100000000000000ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a009b00000000000000000000080000000eceb6b342a570f4f2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0x0)

850.152583ms ago: executing program 1 (id=61):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c)
syz_genetlink_get_family_id$mptcp(&(0x7f000001f840), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f000001f880)={0x0, 0x0, &(0x7f000001f8c0)={0x0}}, 0x0)
listen(r0, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f000001f940)='./debug\x00', 0x60)
mount(0x0, &(0x7f000001f980)='./debug\x00', &(0x7f000001f9c0)='debugfs\x00', 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000000706050000000000000088356b8f000205000100d1"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)=""/4099, 0x1003}, {0x0}], 0x2}, 0x2020)

833.838345ms ago: executing program 2 (id=62):
syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[], 0xfe, 0x6241, &(0x7f0000000500)="$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")
lsetxattr$trusted_overlay_opaque(&(0x7f000000c700)='./file0\x00', &(0x7f000000c740), 0x0, 0x0, 0x0)
r0 = fspick(0xffffffffffffff9c, &(0x7f0000006d80)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f000000c7c0)='./file0\x00', &(0x7f000000c800), 0x0, &(0x7f000000c840)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

786.92559ms ago: executing program 1 (id=63):
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x82, 0x0)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0x1, 0x3, &(0x7f0000000040)={0x7, "8c5c98de73a02fa249356e545f167a165d9128fa70bc68ca54a195935920dc9ca5"}})
ioctl$I2C_PEC(r0, 0x708, 0x5)

636.046605ms ago: executing program 1 (id=64):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000006c0)={0x120, 0x33, 0x200, 0x70bc2d, 0x25dfdbfd, {0x7}, [@nested={0x10a, 0x160, 0x0, 0x1, [@generic="722dfd395c7dda70c8322bb36e4a84030bca9937f4ae5bff79533a0592c3bf58bef47e90155f8b1a9bea07235c19fa145a6060dd40ac904359d0aa9c16f4e68fe9f48be6ad5b3ce9a79e278740d53ae157051748d39f395d6831ea57bbfae5f67cd0dca3af72823d55e47e47c2601cf99ee5", @typed={0x91, 0x6a, 0x0, 0x0, @binary="e10c02bd0ba1d2c86c79e676955f21c28c2e48705209299e6a6f72d99918e5e71a5c3e1f183c12274ca8f7c015d890b47c10fbaf9004b71a3cafb4a5283ff18a02bed4755a61b5d8629e831ab3ea411236390755a30d91953af7c94df518d2a18753077cf258cb1f5973d8d187e6a01203d5c04bc69e9d32a2b356fe594306645a37f3be2dc767ecacab6ba9e8"}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

394.1622ms ago: executing program 1 (id=65):
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f00000022c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

356.848593ms ago: executing program 1 (id=66):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000640)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x7101})
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000740)='./sys\x00', &(0x7f0000000780)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys/class/net/syzkaller0/queues/tx-0/xps_cpus\x00', 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/class/net/syzkaller0/queues/tx-1/xps_cpus\x00', 0x2, 0x0)
write(r2, &(0x7f0000000880)='1', 0x1)

22.142048ms ago: executing program 0 (id=67):
setns(0xc9, 0x0)
r0 = socket(0x80000000000000a, 0x2, 0x0)
mkdirat(0xffffff9c, &(0x7f0000001a00)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000001a40)='./proc\x00', &(0x7f0000001a80)='proc\x00', 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000001b00)=0x1, 0x12)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001b40)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)

0s ago: executing program 1 (id=68):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', <r4=>0x0})
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf761d00", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2)
ptrace$pokeuser(0x6, r6, 0x388, 0x41d9fda7)
socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r9)
r10 = socket$packet(0x11, 0x2, 0x300)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB, @ANYRESHEX=r10])

kernel console output (not intermixed with test programs):

no interfaces have a carrier
[   61.658107][ T5447] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.709413][ T5447] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK

syzkaller
Warning: Permanently added '10.128.1.143' (ED25519) to the list of known hosts.
syzkaller login: [   82.291221][ T5773] cgroup: Unknown subsys name 'net'
[   82.440054][ T5773] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   84.236503][ T5773] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   86.020287][   T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   86.031489][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   86.040605][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   86.056688][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   86.067034][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   86.090219][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   86.145154][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   86.153374][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   86.160844][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   86.163628][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   86.175885][ T5801] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   86.184579][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   86.192455][ T5801] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   86.200015][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   86.210926][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   86.218446][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   86.230409][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   86.238669][   T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   86.247164][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   86.255765][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   86.263840][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   86.271813][ T5800] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   86.279742][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   86.287327][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   86.397401][ T5790] (null): rxe_set_mtu: Set mtu to 1024
[   86.401106][ T5785] (null): rxe_set_mtu: Set mtu to 1024
[   86.413137][ T5786] (null): rxe_set_mtu: Set mtu to 1024
[   86.421908][ T5794] (null): rxe_set_mtu: Set mtu to 1024
[   86.433570][ T5785] rxe_eth0 speed is unknown, defaulting to 1000
[   86.441398][ T5786] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   86.449002][ T5794] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   86.450317][ T5790] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   86.466392][ T5785] rxe_eth0 speed is unknown, defaulting to 1000
[   86.552105][ T5785] rxe_eth0 speed is unknown, defaulting to 1000
[   86.763233][ T5785] infiniband rxe0: set active
[   86.768795][ T5785] infiniband rxe0: added rxe_eth0
[   86.775595][ T5775] rxe_eth0 speed is unknown, defaulting to 1000
[   86.868557][ T5785] RDS/IB: rxe0: added
[   86.876695][ T5785] smc: adding ib device rxe0 with port count 1
[   86.884957][ T5785] smc:    ib device rxe0 port 1 has pnetid 
[   86.910785][ T5775] rxe_eth0 speed is unknown, defaulting to 1000
[   86.947729][ T5785] rxe_eth0 speed is unknown, defaulting to 1000
[   87.028971][ T5794] chnl_net:caif_netlink_parms(): no params data found
[   87.201702][ T5786] chnl_net:caif_netlink_parms(): no params data found
[   87.224041][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.233827][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.260114][ T5794] bridge_slave_0: entered allmulticast mode
[   87.267886][ T5794] bridge_slave_0: entered promiscuous mode
[   87.277867][ T5790] chnl_net:caif_netlink_parms(): no params data found
[   87.344607][ T5785] rxe_eth0 speed is unknown, defaulting to 1000
[   87.380951][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.388232][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.409834][ T5794] bridge_slave_1: entered allmulticast mode
[   87.417427][ T5794] bridge_slave_1: entered promiscuous mode
[   87.549218][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.581964][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.686371][ T5785] rxe_eth0 speed is unknown, defaulting to 1000
[   87.721519][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.729125][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.737418][ T5790] bridge_slave_0: entered allmulticast mode
[   87.745260][ T5790] bridge_slave_0: entered promiscuous mode
[   87.850766][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.858022][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.894040][ T5790] bridge_slave_1: entered allmulticast mode
[   87.911583][ T5790] bridge_slave_1: entered promiscuous mode
[   87.971983][ T5794] team0: Port device team_slave_0 added
[   88.051811][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.059139][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.080557][ T5786] bridge_slave_0: entered allmulticast mode
[   88.088000][ T5786] bridge_slave_0: entered promiscuous mode
[   88.097698][ T5794] team0: Port device team_slave_1 added
[   88.135734][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.149468][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.162762][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.170726][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.178294][ T5786] bridge_slave_1: entered allmulticast mode
[   88.190661][ T5786] bridge_slave_1: entered promiscuous mode
[   88.264284][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.271692][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.298309][ T5788] Bluetooth: hci3: command tx timeout
[   88.308385][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.338772][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.348053][ T5785] rxe_eth0 speed is unknown, defaulting to 1000
[   88.359979][ T5788] Bluetooth: hci1: command tx timeout
[   88.365971][ T5788] Bluetooth: hci2: command tx timeout
[   88.372222][ T5800] Bluetooth: hci0: command tx timeout
[   88.387886][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.396208][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.422299][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.457141][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.517932][ T5790] team0: Port device team_slave_0 added
[   88.611338][ T5786] team0: Port device team_slave_0 added
[   88.630322][ T5790] team0: Port device team_slave_1 added
[   88.670477][ T5786] team0: Port device team_slave_1 added
[   88.723330][ T5794] hsr_slave_0: entered promiscuous mode
[   88.735617][ T5794] hsr_slave_1: entered promiscuous mode
[   88.828682][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.837084][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.863128][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.896886][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.904876][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.933835][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.946545][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.954039][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.980226][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.029485][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.036696][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.063871][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.113116][ T5790] hsr_slave_0: entered promiscuous mode
[   89.121613][ T5790] hsr_slave_1: entered promiscuous mode
[   89.127997][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.136092][ T5790] Cannot create hsr debugfs directory
[   89.224767][ T5786] hsr_slave_0: entered promiscuous mode
[   89.231731][ T5786] hsr_slave_1: entered promiscuous mode
[   89.238355][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.246577][ T5786] Cannot create hsr debugfs directory
[   89.651782][ T5794] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   89.679371][ T5794] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   89.690674][ T5794] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   89.727323][ T5794] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   89.784907][ T5785] chnl_net:caif_netlink_parms(): no params data found
[   89.805953][ T5790] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   89.849105][ T5790] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   89.901255][ T5790] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   89.914512][ T5790] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   90.002541][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.012845][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.021363][ T5785] bridge_slave_0: entered allmulticast mode
[   90.028511][ T5785] bridge_slave_0: entered promiscuous mode
[   90.064900][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.072284][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.079525][ T5785] bridge_slave_1: entered allmulticast mode
[   90.087757][ T5785] bridge_slave_1: entered promiscuous mode
[   90.132207][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   90.143814][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   90.154483][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   90.167246][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   90.192486][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.214126][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.293781][ T5785] team0: Port device team_slave_0 added
[   90.305346][ T5785] team0: Port device team_slave_1 added
[   90.361348][ T5098] Bluetooth: hci3: command tx timeout
[   90.367506][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.375046][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.401807][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.424175][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.433176][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.460588][ T5098] Bluetooth: hci2: command tx timeout
[   90.461518][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.466109][ T5098] Bluetooth: hci0: command tx timeout
[   90.477270][ T5788] Bluetooth: hci1: command tx timeout
[   90.514506][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.588900][ T5785] hsr_slave_0: entered promiscuous mode
[   90.595848][ T5785] hsr_slave_1: entered promiscuous mode
[   90.603918][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.612590][ T5785] Cannot create hsr debugfs directory
[   90.637059][ T5794] 8021q: adding VLAN 0 to HW filter on device team0
[   90.699850][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.707328][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.724964][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.779799][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.787021][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.880897][ T5790] 8021q: adding VLAN 0 to HW filter on device team0
[   90.913186][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.920434][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.973109][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.980376][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.037751][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   91.052976][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   91.072197][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   91.089138][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   91.113025][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.282813][ T5786] 8021q: adding VLAN 0 to HW filter on device team0
[   91.318579][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.325856][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.392499][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.399751][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.559368][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.639156][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.701041][ T5785] 8021q: adding VLAN 0 to HW filter on device team0
[   91.713327][ T5794] veth0_vlan: entered promiscuous mode
[   91.725115][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.743841][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.751682][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.796746][ T5794] veth1_vlan: entered promiscuous mode
[   91.821443][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.828731][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.960688][ T5794] veth0_macvtap: entered promiscuous mode
[   91.973332][ T5790] veth0_vlan: entered promiscuous mode
[   91.987616][ T5794] veth1_macvtap: entered promiscuous mode
[   92.017113][ T5790] veth1_vlan: entered promiscuous mode
[   92.084922][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.108504][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.134479][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.196451][ T5794] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.207524][ T5794] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.216970][ T5794] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.226687][ T5794] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.257645][ T5790] veth0_macvtap: entered promiscuous mode
[   92.293362][ T5790] veth1_macvtap: entered promiscuous mode
[   92.367092][ T5786] veth0_vlan: entered promiscuous mode
[   92.431922][ T5786] veth1_vlan: entered promiscuous mode
[   92.442815][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.455311][ T5788] Bluetooth: hci3: command tx timeout
[   92.469151][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.482980][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.521110][ T5788] Bluetooth: hci0: command tx timeout
[   92.525491][ T5800] Bluetooth: hci1: command tx timeout
[   92.532968][ T5098] Bluetooth: hci2: command tx timeout
[   92.588175][ T5786] veth0_macvtap: entered promiscuous mode
[   92.614828][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.628560][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.645733][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.668734][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.693209][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.729884][ T5790] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.738693][ T5790] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.751577][ T5790] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.762940][ T5790] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.776123][ T5786] veth1_macvtap: entered promiscuous mode
[   92.826822][  T170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.840682][  T170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.849469][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.867254][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.877671][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.888513][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.901478][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.945938][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.978126][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.990491][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.004720][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.018162][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.032145][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.066339][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.085610][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.096737][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.106283][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.137850][ T5794] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   93.219449][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.248394][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.324086][ T5785] veth0_vlan: entered promiscuous mode
[   93.361106][ T1079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.361154][ T1079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.382748][ T5785] veth1_vlan: entered promiscuous mode
[   93.430885][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.430909][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.552525][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.552551][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.609328][ T5785] veth0_macvtap: entered promiscuous mode
[   93.648712][ T5785] veth1_macvtap: entered promiscuous mode
[   93.712211][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.728320][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.731745][ T5879] syz.2.3[5879]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   93.741255][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.782353][ T5879] loop2: detected capacity change from 0 to 512
[   93.796778][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.814577][ T5879] =======================================================
[   93.814577][ T5879] WARNING: The mand mount option has been deprecated and
[   93.814577][ T5879]          and is ignored by this kernel. Remove the mand
[   93.814577][ T5879]          option from the mount to silence this warning.
[   93.814577][ T5879] =======================================================
[   93.850309][    C1] vkms_vblank_simulate: vblank timer overrun
[   93.856849][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.890594][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.907884][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.940197][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.963293][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.997666][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.026955][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.037853][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.054969][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.076949][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.147985][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.167277][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.186130][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.206403][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.492853][ T1079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.521861][ T5098] Bluetooth: hci3: command tx timeout
[   94.524265][ T1079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.599998][ T5098] Bluetooth: hci0: command tx timeout
[   94.605554][ T5098] Bluetooth: hci2: command tx timeout
[   94.611921][ T5800] Bluetooth: hci1: command tx timeout
[   94.721776][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.756061][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.830164][ T5897] loop2: detected capacity change from 0 to 128
[   94.906792][ T5804] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   94.998320][ T5895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.036560][ T5883] loop1: detected capacity change from 0 to 32768
[   95.067643][ T5900] loop3: detected capacity change from 0 to 128
[   95.117077][ T5883] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.5 (5883)
[   95.186448][ T5883] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   95.186691][ T5883] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[   95.186785][ T5883] BTRFS info (device loop1): setting nodatacow, compression disabled
[   95.186807][ T5883] BTRFS info (device loop1): setting datasum, datacow enabled
[   95.186828][ T5883] BTRFS info (device loop1): force clearing of disk cache
[   95.186849][ T5883] BTRFS info (device loop1): enabling ssd optimizations
[   95.186865][ T5883] BTRFS info (device loop1): using spread ssd allocation scheme
[   95.186886][ T5883] BTRFS info (device loop1): turning on sync discard
[   95.186914][ T5883] BTRFS info (device loop1): turning on flush-on-commit
[   95.186941][ T5883] BTRFS info (device loop1): not using ssd optimizations
[   95.186957][ T5883] BTRFS info (device loop1): not using spread ssd allocation scheme
[   95.186981][ T5883] BTRFS info (device loop1): using free space tree
[   95.371808][ T5901] loop2: detected capacity change from 0 to 8
[   95.477189][ T5883] BTRFS info (device loop1): rebuilding free space tree
[   95.493334][ T5901] SQUASHFS error: Failed to read block 0x6e6: -5
[   95.493443][ T5901] SQUASHFS error: Unable to read metadata cache entry [6e4]
[   95.493458][ T5901] SQUASHFS error: Unable to read directory block [631:26]
[   95.674696][   T28] audit: type=1800 audit(1793096289.525:2): pid=5883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5" name="bus" dev="loop1" ino=263 res=0 errno=0
[   95.779876][ T5925] loop0: detected capacity change from 0 to 2048
[   95.800036][ T5927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.866718][ T5925] NILFS (loop0): invalid segment: Magic number mismatch
[   95.941967][ T5925] NILFS (loop0): trying rollback from an earlier position
[   96.076418][ T5925] NILFS (loop0): recovery complete
[   96.106882][ T5934] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   96.131257][ T5933] Zero length message leads to an empty skb
[   96.154382][ T5933] syz.3.14 uses obsolete (PF_INET,SOCK_PACKET)
[   96.564864][ T5935] iommufd_mock iommufd_mock1: Adding to iommu group 0
[   96.614047][ T5939] device-mapper: table: 248:0: raid: Supplied region size is too large (-EINVAL)
[   96.666320][ T5933] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[   96.682105][ T5939] device-mapper: ioctl: error adding target to table
[   97.032989][ T5785] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[   97.140426][ T5947] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   97.376980][ T5794] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   97.510557][   T23] cfg80211: failed to load regulatory.db
[   97.784231][ T5955] loop0: detected capacity change from 0 to 128
[   98.188546][ T5961] FAULT_INJECTION: forcing a failure.
[   98.188546][ T5961] name failslab, interval 1, probability 5, space 0, times 10000
[   98.272460][ T5961] CPU: 0 PID: 5961 Comm: syz.0.22 Not tainted syzkaller #0
[   98.279846][ T5961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   98.290061][ T5961] Call Trace:
[   98.293381][ T5961]  <TASK>
[   98.296359][ T5961]  dump_stack_lvl+0x18c/0x250
[   98.301131][ T5961]  ? asm_sysvec_call_function_single+0x1a/0x20
[   98.307339][ T5961]  ? show_regs_print_info+0x20/0x20
[   98.312689][ T5961]  ? asm_sysvec_call_function_single+0x1a/0x20
[   98.318919][ T5961]  should_fail_ex+0x394/0x4c0
[   98.323850][ T5961]  should_failslab+0x9/0x20
[   98.328425][ T5961]  slab_pre_alloc_hook+0x59/0x300
[   98.333495][ T5961]  kmem_cache_alloc+0x5a/0x2d0
[   98.338303][ T5961]  ? getname_flags+0xbb/0x500
[   98.343033][ T5961]  getname_flags+0xbb/0x500
[   98.347590][ T5961]  do_sys_openat2+0xda/0x1d0
[   98.352316][ T5961]  ? do_sys_open+0xe0/0xe0
[   98.356956][ T5961]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[   98.362995][ T5961]  ? lock_chain_count+0x20/0x20
[   98.367898][ T5961]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[   98.373948][ T5961]  __x64_sys_openat+0x139/0x160
[   98.378870][ T5961]  do_syscall_64+0x55/0xb0
[   98.383349][ T5961]  ? clear_bhb_loop+0x40/0x90
[   98.388119][ T5961]  ? clear_bhb_loop+0x40/0x90
[   98.392860][ T5961]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   98.398923][ T5961] RIP: 0033:0x7f5c71f5fd8e
[   98.403407][ T5961] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   98.423083][ T5961] RSP: 002b:00007f5c701f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   98.431543][ T5961] RAX: ffffffffffffffda RBX: 00007f5c701f66c0 RCX: 00007f5c71f5fd8e
[   98.439563][ T5961] RDX: 0000000000000002 RSI: 00007f5c701f5c00 RDI: ffffffffffffff9c
[   98.447634][ T5961] RBP: 00007f5c72036b20 R08: 0000000000000000 R09: 0000000000000000
[   98.455665][ T5961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   98.463768][ T5961] R13: 00007f5c72226128 R14: 00007f5c72226090 R15: 00007ffecbb58a78
[   98.472103][ T5961]  </TASK>
[   98.546599][    T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   98.728436][ T5965] loop1: detected capacity change from 0 to 1024
[   98.762650][ T5965] ext2: Unknown parameter 'seclabel'
[   98.811303][    T9] usb 4-1: Using ep0 maxpacket: 32
[   98.827102][    T9] usb 4-1: too many configurations: 34, using maximum allowed: 8
[   98.841007][    T9] usb 4-1: config 0 has an invalid interface number: 16 but max is 8
[   98.867542][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[   98.877255][    T9] usb 4-1: config 0 has no interface number 0
[   98.890456][    T9] usb 4-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.915440][    T9] usb 4-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.940300][    T9] usb 4-1: config 0 interface 16 has no altsetting 0
[   98.949468][    T9] usb 4-1: config 0 has an invalid interface number: 16 but max is 8
[   98.972118][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[   98.987581][    T9] usb 4-1: config 0 has no interface number 0
[   98.997203][    T9] usb 4-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   99.035891][    T9] usb 4-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[   99.061325][    T9] usb 4-1: config 0 interface 16 has no altsetting 0
[   99.098747][    T9] usb 4-1: config 0 has an invalid interface number: 16 but max is 8
[   99.113796][ T5804] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   99.150985][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[   99.172083][ T5965] ubi0: attaching mtd0
[   99.178065][    T9] usb 4-1: config 0 has no interface number 0
[   99.202149][    T9] usb 4-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   99.218635][    T9] usb 4-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[   99.229413][    T9] usb 4-1: config 0 interface 16 has no altsetting 0
[   99.246412][    T9] usb 4-1: config 0 has an invalid interface number: 16 but max is 8
[   99.268309][ T5870] rxe_eth0 speed is unknown, defaulting to 1000
[   99.278091][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[   99.293549][ T5965] ubi0: scanning is finished
[   99.325404][    T9] usb 4-1: config 0 has no interface number 0
[   99.331800][ T5965] ubi0: empty MTD device detected
[   99.353216][    T9] usb 4-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   99.397829][    T9] usb 4-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[   99.445827][    T9] usb 4-1: config 0 interface 16 has no altsetting 0
[   99.472665][    T9] usb 4-1: config 0 has an invalid interface number: 16 but max is 8
[   99.489953][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[   99.499202][    T9] usb 4-1: config 0 has no interface number 0
[   99.515773][    T9] usb 4-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   99.552022][    T9] usb 4-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[   99.588819][    T9] usb 4-1: config 0 interface 16 has no altsetting 0
[   99.636707][    T9] usb 4-1: config 0 has an invalid interface number: 16 but max is 8
[   99.640761][ T5965] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[   99.670006][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[   99.679001][    T9] usb 4-1: config 0 has no interface number 0
[   99.706559][ T5965] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[   99.706595][    T9] usb 4-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   99.752034][ T5965] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[   99.759205][ T5965] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[   99.767468][    T9] usb 4-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[   99.767507][    T9] usb 4-1: config 0 interface 16 has no altsetting 0
[   99.789809][ T5965] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[   99.796686][ T5965] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[   99.860570][    T9] usb 4-1: config 0 has an invalid interface number: 16 but max is 8
[   99.876394][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[   99.899704][ T5965] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1068456278
[   99.913204][    T9] usb 4-1: config 0 has no interface number 0
[   99.935078][    T9] usb 4-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   99.949807][ T5965] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[   99.980378][    T9] usb 4-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  100.005283][ T5980] ubi0: background thread "ubi_bgt0d" started, PID 5980
[  100.012872][ T5969] ubi0: detaching mtd0
[  100.021128][    T9] usb 4-1: config 0 interface 16 has no altsetting 0
[  100.034094][    T9] usb 4-1: config 0 has an invalid interface number: 16 but max is 8
[  100.050878][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  100.073363][    T9] usb 4-1: config 0 has no interface number 0
[  100.083080][ T5969] ubi0: mtd0 is detached
[  100.092213][    T9] usb 4-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  100.121730][    T9] usb 4-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  100.144180][    T9] usb 4-1: config 0 interface 16 has no altsetting 0
[  100.174691][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  100.201882][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.260367][ T5870] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  100.272442][    T9] usb 4-1: config 0 descriptor??
[  100.442277][ T5870] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  100.461527][ T5870] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  100.487572][ T5870] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  100.536739][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.857693][    T9] usb 3-1: USB disconnect, device number 2
[  100.999478][ T5845] usb 4-1: USB disconnect, device number 2
[  101.383946][ T6002] loop1: detected capacity change from 0 to 32768
[  101.412123][ T6002] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.34 (6002)
[  101.469022][ T6002] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  101.520568][ T6002] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  101.545770][ T6002] BTRFS info (device loop1): using free space tree
[  101.749185][ T6002] BTRFS info (device loop1): enabling ssd optimizations
[  101.774533][ T6002] BTRFS info (device loop1): auto enabling async discard
[  101.890513][   T28] audit: type=1800 audit(1793096295.745:3): pid=6002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.34" name="file1" dev="loop1" ino=260 res=0 errno=0
[  102.406413][ T6054] FAULT_INJECTION: forcing a failure.
[  102.406413][ T6054] name failslab, interval 1, probability 5, space 0, times 100
[  102.458443][ T6054] CPU: 1 PID: 6054 Comm: syz.3.42 Not tainted syzkaller #0
[  102.465773][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  102.475912][ T6054] Call Trace:
[  102.479249][ T6054]  <TASK>
[  102.482243][ T6054]  dump_stack_lvl+0x18c/0x250
[  102.487006][ T6054]  ? show_regs_print_info+0x20/0x20
[  102.492369][ T6054]  ? load_image+0x420/0x420
[  102.496967][ T6054]  ? __might_sleep+0xe0/0xe0
[  102.501639][ T6054]  ? __lock_acquire+0x7eb0/0x7eb0
[  102.506744][ T6054]  should_fail_ex+0x394/0x4c0
[  102.511503][ T6054]  should_failslab+0x9/0x20
[  102.516077][ T6054]  slab_pre_alloc_hook+0x59/0x300
[  102.521178][ T6054]  kmem_cache_alloc+0x5a/0x2d0
[  102.526105][ T6054]  ? ptlock_alloc+0x20/0x70
[  102.531095][ T6054]  ptlock_alloc+0x20/0x70
[  102.535593][ T6054]  pte_alloc_one+0xcc/0x540
[  102.540154][ T6054]  ? pfn_modify_allowed+0x560/0x560
[  102.545406][ T6054]  ? count_memcg_event_mm+0x36f/0x3c0
[  102.550858][ T6054]  __pte_alloc+0x22/0x2a0
[  102.555513][ T6054]  handle_mm_fault+0x3dc0/0x4a40
[  102.560501][ T6054]  ? handle_mm_fault+0xe6/0x4a40
[  102.565531][ T6054]  ? lock_vma_under_rcu+0x52c/0x660
[  102.570795][ T6054]  ? numa_migrate_prep+0x350/0x350
[  102.576063][ T6054]  ? lock_vma_under_rcu+0xe5/0x660
[  102.581245][ T6054]  ? do_user_addr_fault+0x1cb/0x12d0
[  102.586631][ T6054]  do_user_addr_fault+0xad2/0x12d0
[  102.591800][ T6054]  ? rcu_is_watching+0x15/0xb0
[  102.596624][ T6054]  exc_page_fault+0x64/0x100
[  102.601291][ T6054]  asm_exc_page_fault+0x26/0x30
[  102.606238][ T6054] RIP: 0033:0x7fa39f85634e
[  102.610804][ T6054] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01
[  102.630576][ T6054] RSP: 002b:00007fa3a0892470 EFLAGS: 00010206
[  102.636691][ T6054] RAX: 0000000000a09001 RBX: 00007fa3a0892530 RCX: 0000000000000038
[  102.644817][ T6054] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007fa3a08925d0
[  102.652926][ T6054] RBP: 0000000000000102 R08: 00007fa3957f7000 R09: 0000000000a09000
[  102.661118][ T6054] R10: 0000000000000000 R11: 00007fa3a0892540 R12: 0000000000000001
[  102.669142][ T6054] R13: 00007fa39fa571e0 R14: 0000000000000000 R15: 00007fa3a08925d0
[  102.677187][ T6054]  </TASK>
[  102.715033][ T6054] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  102.745824][ T6054] FAULT_INJECTION: forcing a failure.
[  102.745824][ T6054] name failslab, interval 1, probability 5, space 0, times 99
[  102.761568][ T6054] CPU: 0 PID: 6054 Comm: syz.3.42 Not tainted syzkaller #0
[  102.768871][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  102.779438][ T6054] Call Trace:
[  102.779455][ T6054]  <TASK>
[  102.779465][ T6054]  dump_stack_lvl+0x18c/0x250
[  102.779502][ T6054]  ? show_regs_print_info+0x20/0x20
[  102.779530][ T6054]  ? load_image+0x420/0x420
[  102.779557][ T6054]  ? __might_sleep+0xe0/0xe0
[  102.779588][ T6054]  ? __lock_acquire+0x7eb0/0x7eb0
[  102.785992][ T6054]  should_fail_ex+0x394/0x4c0
[  102.795901][ T6054]  should_failslab+0x9/0x20
[  102.805110][ T6054]  slab_pre_alloc_hook+0x59/0x300
[  102.805149][ T6054]  kmem_cache_alloc+0x5a/0x2d0
[  102.815110][ T6054]  ? ptlock_alloc+0x20/0x70
[  102.829813][ T6054]  ptlock_alloc+0x20/0x70
[  102.838691][ T6054]  pte_alloc_one+0xcc/0x540
[  102.838727][ T6054]  ? pfn_modify_allowed+0x560/0x560
[  102.848457][ T6054]  ? count_memcg_event_mm+0x36f/0x3c0
[  102.848523][ T6054]  __pte_alloc+0x22/0x2a0
[  102.858839][ T6054]  handle_mm_fault+0x3dc0/0x4a40
[  102.858874][ T6054]  ? handle_mm_fault+0xe6/0x4a40
[  102.869753][ T6054]  ? lock_vma_under_rcu+0x52c/0x660
[  102.875035][ T6054]  ? numa_migrate_prep+0x350/0x350
[  102.881345][ T6054]  ? lock_vma_under_rcu+0xe5/0x660
[  102.886551][ T6054]  ? do_user_addr_fault+0x1cb/0x12d0
[  102.891907][ T6054]  do_user_addr_fault+0xad2/0x12d0
[  102.897268][ T6054]  ? rcu_is_watching+0x15/0xb0
[  102.902106][ T6054]  exc_page_fault+0x64/0x100
[  102.906757][ T6054]  asm_exc_page_fault+0x26/0x30
[  102.911660][ T6054] RIP: 0033:0x7fa39f85634e
[  102.916121][ T6054] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01
[  102.935776][ T6054] RSP: 002b:00007fa3a0892470 EFLAGS: 00010206
[  102.941896][ T6054] RAX: 0000000000e09001 RBX: 00007fa3a0892530 RCX: 000000000000003a
[  102.949901][ T6054] RDX: 0000000000000055 RSI: 0000000000000001 RDI: 00007fa3a08925d0
[  102.957921][ T6054] RBP: 0000000000000102 R08: 00007fa3957f7000 R09: 0000000000e09000
[  102.965964][ T6054] R10: 0000000000000000 R11: 00007fa3a0892540 R12: 0000000000000001
[  102.974001][ T6054] R13: 00007fa39fa571e0 R14: 0000000000000000 R15: 00007fa3a08925d0
[  102.982039][ T6054]  </TASK>
[  103.043070][ T5794] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  103.078916][ T6054] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  103.243333][ T1135] net_ratelimit: 27 callbacks suppressed
[  103.671430][ T6054] loop3: detected capacity change from 0 to 32768
[  103.701573][ T6054] FAULT_INJECTION: forcing a failure.
[  103.701573][ T6054] name failslab, interval 1, probability 5, space 0, times 94
[  103.738692][ T6054] CPU: 0 PID: 6054 Comm: syz.3.42 Not tainted syzkaller #0
[  103.746029][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  103.756346][ T6054] Call Trace:
[  103.759692][ T6054]  <TASK>
[  103.762689][ T6054]  dump_stack_lvl+0x18c/0x250
[  103.767615][ T6054]  ? show_regs_print_info+0x20/0x20
[  103.772893][ T6054]  ? load_image+0x420/0x420
[  103.777482][ T6054]  ? __might_sleep+0xe0/0xe0
[  103.782154][ T6054]  ? __lock_acquire+0x7eb0/0x7eb0
[  103.787260][ T6054]  ? param_get_dyndbg_classes+0x170/0x170
[  103.793078][ T6054]  should_fail_ex+0x394/0x4c0
[  103.797879][ T6054]  should_failslab+0x9/0x20
[  103.802471][ T6054]  slab_pre_alloc_hook+0x59/0x300
[  103.807638][ T6054]  ? inotify_handle_inode_event+0x18a/0x560
[  103.813632][ T6054]  ? inotify_handle_inode_event+0x18a/0x560
[  103.819610][ T6054]  __kmem_cache_alloc_node+0x53/0x260
[  103.825064][ T6054]  ? inotify_handle_inode_event+0x18a/0x560
[  103.831042][ T6054]  __kmalloc+0xa7/0x240
[  103.835292][ T6054]  inotify_handle_inode_event+0x18a/0x560
[  103.841104][ T6054]  fsnotify+0x14db/0x1800
[  103.845531][ T6054]  ? fsnotify+0x513/0x1800
[  103.850025][ T6054]  ? fsnotify_clear_child_dentry_flag+0xe0/0xe0
[  103.856348][ T6054]  __fsnotify_parent+0x577/0x7c0
[  103.861457][ T6054]  ? fsnotify_set_children_dentry_flags+0x220/0x220
[  103.868127][ T6054]  __fput+0x6ed/0x940
[  103.872176][ T6054]  __se_sys_close+0x15c/0x1e0
[  103.876921][ T6054]  do_syscall_64+0x55/0xb0
[  103.881435][ T6054]  ? clear_bhb_loop+0x40/0x90
[  103.886162][ T6054]  ? clear_bhb_loop+0x40/0x90
[  103.890939][ T6054]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  103.896896][ T6054] RIP: 0033:0x7fa39f95fd8e
[  103.901352][ T6054] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  103.921042][ T6054] RSP: 002b:00007fa3a0892df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  103.929516][ T6054] RAX: ffffffffffffffda RBX: 00007fa3a08936c0 RCX: 00007fa39f95fd8e
[  103.937743][ T6054] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009
[  103.945761][ T6054] RBP: 0000200000006100 R08: 0000000000000000 R09: 0000000000000000
[  103.953904][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000006140
[  103.961922][ T6054] R13: 00007fa3a0892ea0 R14: 0000000000004431 R15: 0000200000006180
[  103.969978][ T6054]  </TASK>
[  104.001455][ T6054] FAULT_INJECTION: forcing a failure.
[  104.001455][ T6054] name failslab, interval 1, probability 5, space 0, times 93
[  104.050484][ T6054] CPU: 1 PID: 6054 Comm: syz.3.42 Not tainted syzkaller #0
[  104.057776][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  104.057857][ T6054] Call Trace:
[  104.057869][ T6054]  <TASK>
[  104.057878][ T6054]  dump_stack_lvl+0x18c/0x250
[  104.068135][ T6054]  ? show_regs_print_info+0x20/0x20
[  104.068176][ T6054]  ? load_image+0x420/0x420
[  104.068203][ T6054]  ? __might_sleep+0xe0/0xe0
[  104.074654][ T6054]  ? __lock_acquire+0x7eb0/0x7eb0
[  104.084570][ T6054]  should_fail_ex+0x394/0x4c0
[  104.084609][ T6054]  should_failslab+0x9/0x20
[  104.084629][ T6054]  slab_pre_alloc_hook+0x59/0x300
[  104.093955][ T6054]  ? mas_next_slot+0x910/0x980
[  104.093987][ T6054]  ? task_numa_work+0x921/0x1350
[  104.094011][ T6054]  __kmem_cache_alloc_node+0x53/0x260
[  104.094040][ T6054]  ? task_numa_work+0x921/0x1350
[  104.103826][ T6054]  kmalloc_trace+0x2a/0xe0
[  104.103870][ T6054]  task_numa_work+0x921/0x1350
[  104.103936][ T6054]  ? init_numa_balancing+0x400/0x400
[  104.113475][ T6054]  ? __might_sleep+0xe0/0xe0
[  104.113519][ T6054]  ? _raw_spin_unlock_irq+0x23/0x50
[  104.113548][ T6054]  ? lockdep_hardirqs_on+0x98/0x150
[  104.123290][ T6054]  task_work_run+0x1d4/0x260
[  104.123334][ T6054]  ? task_work_cancel+0x220/0x220
[  104.123364][ T6054]  ? __fput+0x67e/0x940
[  104.133718][ T6054]  ? exit_to_user_mode_loop+0x3b/0x110
[  104.133762][ T6054]  exit_to_user_mode_loop+0xe6/0x110
[  104.133797][ T6054]  exit_to_user_mode_prepare+0xee/0x180
[  104.143056][ T6054]  syscall_exit_to_user_mode+0x1a/0x50
[  104.143087][ T6054]  do_syscall_64+0x61/0xb0
[  104.143113][ T6054]  ? clear_bhb_loop+0x40/0x90
[  104.153045][ T6054]  ? clear_bhb_loop+0x40/0x90
[  104.153086][ T6054]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  104.153117][ T6054] RIP: 0033:0x7fa39f95fd8e
[  104.163564][ T6054] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  104.163588][ T6054] RSP: 002b:00007fa3a0892df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  104.163611][ T6054] RAX: 0000000000000000 RBX: 00007fa3a08936c0 RCX: 00007fa39f95fd8e
[  104.163626][ T6054] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009
[  104.163640][ T6054] RBP: 0000200000006100 R08: 0000000000000000 R09: 0000000000000000
[  104.163654][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000006140
[  104.284240][ T6054] R13: 00007fa3a0892ea0 R14: 0000000000004431 R15: 0000200000006180
[  104.292275][ T6054]  </TASK>
[  104.317246][ T6054] (syz.3.42,6054,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[  104.395064][ T6054] (syz.3.42,6054,1):ocfs2_fill_super:1178 ERROR: status = -22
[  104.454965][ T6054] FAULT_INJECTION: forcing a failure.
[  104.454965][ T6054] name failslab, interval 1, probability 5, space 0, times 91
[  104.504664][ T6054] CPU: 1 PID: 6054 Comm: syz.3.42 Not tainted syzkaller #0
[  104.511990][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  104.522103][ T6054] Call Trace:
[  104.525441][ T6054]  <TASK>
[  104.528533][ T6054]  dump_stack_lvl+0x18c/0x250
[  104.533280][ T6054]  ? show_regs_print_info+0x20/0x20
[  104.538551][ T6054]  ? load_image+0x420/0x420
[  104.543118][ T6054]  ? __might_sleep+0xe0/0xe0
[  104.547772][ T6054]  ? __lock_acquire+0x7eb0/0x7eb0
[  104.552857][ T6054]  should_fail_ex+0x394/0x4c0
[  104.557687][ T6054]  should_failslab+0x9/0x20
[  104.562241][ T6054]  slab_pre_alloc_hook+0x59/0x300
[  104.567417][ T6054]  ? __kernfs_new_node+0xaa/0x7f0
[  104.572519][ T6054]  ? rcu_is_watching+0x15/0xb0
[  104.577380][ T6054]  kmem_cache_alloc+0x5a/0x2d0
[  104.582199][ T6054]  ? __kernfs_new_node+0xe5/0x7f0
[  104.587296][ T6054]  __kernfs_new_node+0xe5/0x7f0
[  104.592215][ T6054]  ? load_image+0x420/0x420
[  104.596773][ T6054]  ? kernfs_new_node+0x260/0x260
[  104.601780][ T6054]  ? __dynamic_pr_debug+0x1a3/0x260
[  104.607045][ T6054]  kernfs_new_node+0x14c/0x260
[  104.611902][ T6054]  kernfs_create_dir_ns+0x44/0x120
[  104.617156][ T6054]  sysfs_create_dir_ns+0x130/0x2a0
[  104.622324][ T6054]  ? sysfs_warn_dup+0xa0/0xa0
[  104.627157][ T6054]  ? do_raw_spin_unlock+0x121/0x230
[  104.632466][ T6054]  kobject_add_internal+0x617/0xc90
[  104.637901][ T6054]  kobject_add+0x164/0x240
[  104.642370][ T6054]  ? __rwlock_init+0x150/0x150
[  104.647296][ T6054]  ? kobject_init+0x1d0/0x1d0
[  104.652012][ T6054]  ? kobject_put+0x41a/0x450
[  104.656665][ T6054]  ? get_device_parent+0x366/0x390
[  104.661850][ T6054]  device_add+0x3fa/0xc40
[  104.666238][ T6054]  nfc_register_device+0x4e/0x300
[  104.671321][ T6054]  nci_register_device+0x8a3/0xa00
[  104.676501][ T6054]  ? nci_free_device+0x90/0x90
[  104.681328][ T6054]  ? __init_waitqueue_head+0xa8/0x140
[  104.686763][ T6054]  virtual_ncidev_open+0x12c/0x1a0
[  104.691938][ T6054]  ? virtual_ncidev_ioctl+0xd0/0xd0
[  104.697199][ T6054]  misc_open+0x326/0x3a0
[  104.701644][ T6054]  chrdev_open+0x58c/0x600
[  104.706132][ T6054]  ? cd_forget+0x160/0x160
[  104.710694][ T6054]  ? fsnotify_perm+0x3ed/0x5e0
[  104.715520][ T6054]  do_dentry_open+0x880/0x14b0
[  104.720350][ T6054]  ? cd_forget+0x160/0x160
[  104.724834][ T6054]  path_openat+0x284f/0x3270
[  104.729481][ T6054]  ? do_sys_openat2+0xda/0x1d0
[  104.734403][ T6054]  ? __x64_sys_openat+0x139/0x160
[  104.739481][ T6054]  ? verify_lock_unused+0x140/0x140
[  104.744730][ T6054]  ? do_filp_open+0x430/0x430
[  104.749507][ T6054]  do_filp_open+0x1f2/0x430
[  104.754060][ T6054]  ? vfs_tmpfile+0x620/0x620
[  104.758797][ T6054]  ? _raw_spin_unlock+0x28/0x40
[  104.763694][ T6054]  ? alloc_fd+0x590/0x640
[  104.768091][ T6054]  do_sys_openat2+0x134/0x1d0
[  104.772823][ T6054]  ? do_sys_open+0xe0/0xe0
[  104.777317][ T6054]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  104.783354][ T6054]  ? lock_chain_count+0x20/0x20
[  104.788265][ T6054]  __x64_sys_openat+0x139/0x160
[  104.793183][ T6054]  do_syscall_64+0x55/0xb0
[  104.797656][ T6054]  ? clear_bhb_loop+0x40/0x90
[  104.802478][ T6054]  ? clear_bhb_loop+0x40/0x90
[  104.807218][ T6054]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  104.813173][ T6054] RIP: 0033:0x7fa39f99f559
[  104.817637][ T6054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  104.837325][ T6054] RSP: 002b:00007fa3a0893028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  104.845806][ T6054] RAX: ffffffffffffffda RBX: 00007fa39fc25fa0 RCX: 00007fa39f99f559
[  104.853833][ T6054] RDX: 0000000000000002 RSI: 000020000000a800 RDI: ffffffffffffff9c
[  104.861853][ T6054] RBP: 00007fa39fa36b20 R08: 0000000000000000 R09: 0000000000000000
[  104.869895][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  104.877907][ T6054] R13: 00007fa39fc26038 R14: 00007fa39fc25fa0 R15: 00007fff770243f8
[  104.886118][ T6054]  </TASK>
[  104.960212][ T6054] kobject: kobject_add_internal failed for nfc2 (error: -12 parent: nfc)
[  105.100189][ T5845] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  105.250706][ T6090] loop1: detected capacity change from 0 to 128
[  105.289653][ T5845] usb 3-1: Using ep0 maxpacket: 32
[  105.308250][ T5845] usb 3-1: too many configurations: 34, using maximum allowed: 8
[  105.340780][ T5845] usb 3-1: config 0 has an invalid interface number: 16 but max is 8
[  105.374279][ T5845] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  105.388351][ T5845] usb 3-1: config 0 has no interface number 0
[  105.402511][ T6091] FAULT_INJECTION: forcing a failure.
[  105.402511][ T6091] name failslab, interval 1, probability 5, space 0, times 90
[  105.419062][ T5845] usb 3-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.451210][ T5845] usb 3-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.453023][ T6091] CPU: 0 PID: 6091 Comm: syz.1.53 Not tainted syzkaller #0
[  105.464240][ T5845] usb 3-1: config 0 interface 16 has no altsetting 0
[  105.468503][ T6091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  105.485277][ T6091] Call Trace:
[  105.485290][ T6091]  <TASK>
[  105.485303][ T6091]  dump_stack_lvl+0x18c/0x250
[  105.485339][ T6091]  ? show_regs_print_info+0x20/0x20
[  105.488802][ T6091]  ? load_image+0x420/0x420
[  105.488834][ T6091]  ? __might_sleep+0xe0/0xe0
[  105.496637][ T6091]  ? __lock_acquire+0x7eb0/0x7eb0
[  105.496676][ T6091]  should_fail_ex+0x394/0x4c0
[  105.511573][ T6091]  should_failslab+0x9/0x20
[  105.521587][ T6091]  slab_pre_alloc_hook+0x59/0x300
[  105.531172][ T6091]  ? vfs_write+0x5de/0x9a0
[  105.531216][ T6091]  kmem_cache_alloc+0x5a/0x2d0
[  105.540105][ T5845] usb 3-1: config 0 has an invalid interface number: 16 but max is 8
[  105.540515][ T6091]  ? getname_flags+0xbb/0x500
[  105.553452][ T6091]  getname_flags+0xbb/0x500
[  105.558018][ T6091]  do_sys_openat2+0xda/0x1d0
[  105.562685][ T6091]  ? do_sys_open+0xe0/0xe0
[  105.567219][ T6091]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  105.571749][ T5845] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  105.573286][ T6091]  ? lock_chain_count+0x20/0x20
[  105.587278][ T6091]  __x64_sys_openat+0x139/0x160
[  105.588819][ T5845] usb 3-1: config 0 has no interface number 0
[  105.592189][ T6091]  do_syscall_64+0x55/0xb0
[  105.592221][ T6091]  ? clear_bhb_loop+0x40/0x90
[  105.592251][ T6091]  ? clear_bhb_loop+0x40/0x90
[  105.602936][ T6091]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  105.607676][ T5845] usb 3-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.612315][ T6091] RIP: 0033:0x7f4f2675fd8e
[  105.612341][ T6091] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  105.612360][ T6091] RSP: 002b:00007f4f27661b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  105.612384][ T6091] RAX: ffffffffffffffda RBX: 00007f4f276626c0 RCX: 00007f4f2675fd8e
[  105.612400][ T6091] RDX: 0000000000000002 RSI: 00007f4f27661c00 RDI: ffffffffffffff9c
[  105.612415][ T6091] RBP: 00007f4f26836b20 R08: 0000000000000000 R09: 0000000000000000
[  105.612428][ T6091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  105.612442][ T6091] R13: 00007f4f26a26128 R14: 00007f4f26a26090 R15: 00007ffe2f00a8e8
[  105.612503][ T6091]  </TASK>
[  105.622737][ T5845] usb 3-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.649787][ T5845] usb 3-1: config 0 interface 16 has no altsetting 0
[  105.726587][ T5845] usb 3-1: config 0 has an invalid interface number: 16 but max is 8
[  105.736797][ T5845] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  105.746145][ T5845] usb 3-1: config 0 has no interface number 0
[  105.763524][ T5845] usb 3-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.790500][ T5845] usb 3-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.804931][ T5845] usb 3-1: config 0 interface 16 has no altsetting 0
[  105.815379][ T5845] usb 3-1: config 0 has an invalid interface number: 16 but max is 8
[  105.824926][ T5845] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  105.835113][ T5845] usb 3-1: config 0 has no interface number 0
[  105.849700][ T5845] usb 3-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.862187][ T5845] usb 3-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.875246][ T5845] usb 3-1: config 0 interface 16 has no altsetting 0
[  105.887985][ T5845] usb 3-1: config 0 has an invalid interface number: 16 but max is 8
[  105.902420][ T5845] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  105.913949][ T5845] usb 3-1: config 0 has no interface number 0
[  105.922592][ T5845] usb 3-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.936946][ T5845] usb 3-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.948476][ T5845] usb 3-1: config 0 interface 16 has no altsetting 0
[  105.964752][ T5845] usb 3-1: config 0 has an invalid interface number: 16 but max is 8
[  105.975573][ T5845] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  105.987053][ T5845] usb 3-1: config 0 has no interface number 0
[  106.003872][ T5845] usb 3-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.018858][ T5845] usb 3-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  106.031518][ T5845] usb 3-1: config 0 interface 16 has no altsetting 0
[  106.044840][ T5845] usb 3-1: config 0 has an invalid interface number: 16 but max is 8
[  106.053075][ T5845] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  106.063839][ T5845] usb 3-1: config 0 has no interface number 0
[  106.074745][ T5845] usb 3-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.087076][ T5845] usb 3-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  106.102193][ T5845] usb 3-1: config 0 interface 16 has no altsetting 0
[  106.119230][ T5845] usb 3-1: config 0 has an invalid interface number: 16 but max is 8
[  106.136211][ T5845] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  106.146814][ T5845] usb 3-1: config 0 has no interface number 0
[  106.158309][ T5845] usb 3-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.177357][ T5845] usb 3-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  106.188020][ T5845] usb 3-1: config 0 interface 16 has no altsetting 0
[  106.209856][ T5845] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  106.219190][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.238261][ T5845] usb 3-1: config 0 descriptor??
[  106.868289][ T5870] usb 3-1: USB disconnect, device number 3
[  107.019819][ T5845] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  107.202966][ T5845] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  107.214307][ T5845] usb 4-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  107.230522][ T5845] usb 4-1: config 0 interface 0 has no altsetting 0
[  107.237222][ T5845] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[  107.253136][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.266221][ T5845] usb 4-1: config 0 descriptor??
[  107.288101][ T6104] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  107.694579][ T6114] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.64'.
[  107.719453][ T5845] belkin 0003:1020:0006.0003: ignoring exceeding usage max
[  107.757163][ T5845] belkin 0003:1020:0006.0003: No inputs registered, leaving
[  107.774843][ T5845] belkin 0003:1020:0006.0003: hidraw0: USB HID v0.11 Joystick [HID 1020:0006] on usb-dummy_hcd.3-1/input0
[  107.962978][ T5845] usb 4-1: USB disconnect, device number 3
[  107.998617][ T6115] fido_id[6115]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  108.044630][ T6110] loop2: detected capacity change from 0 to 32768
[  108.183442][ T6110] JFS: metapage_get_blocks failed
[  108.214442][ T6110] ERROR: (device loop2): release_metapage: metapage_write_one() failed
[  108.214442][ T6110] 
[  108.246335][ T6110] ERROR: (device loop2): remounting filesystem as read-only
[  108.269894][  T114] blkno = 5002c, nblocks = 1
[  108.275321][  T114] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map
[  108.275321][  T114] 
[  108.321416][  T114] ERROR: (device loop2): remounting filesystem as read-only
[  108.329204][  T114] BUG: Bad page state in process jfsCommit  pfn:2209c
[  108.377995][  T114] page:ffffea0000882700 refcount:0 mapcount:0 mapping:0000000000000000 index:0x24 pfn:0x2209c
[  108.424751][  T114] flags: 0xfff0000000820d(locked|referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff)
[  108.459213][  T114] page_type: 0xffffffff()
[  108.468603][  T114] raw: 00fff0000000820d dead000000000100 dead000000000122 0000000000000000
[  108.479450][  T114] raw: 0000000000000024 ffff8880250e5d90 00000000ffffffff 0000000000000000
[  108.488380][  T114] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
[  108.506426][  T114] page_owner tracks the page as allocated
[  108.528593][ T6126] netlink: 36 bytes leftover after parsing attributes in process `syz.1.68'.
[  108.679664][    C1] net_ratelimit: 49 callbacks suppressed
[  108.742499][ T6129] 9pnet_fd: Insufficient options for proto=fd
[  108.843020][  T114] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 6110, tgid 6109 (syz.2.62), ts 108169265365, free_ts 100216377377
[  109.348856][  T114]  post_alloc_hook+0x1c1/0x200
[  109.414113][  T114]  get_page_from_freelist+0x2181/0x22a0
[  109.420359][  T114]  __alloc_pages+0x1f0/0x460
[  109.425097][  T114]  folio_alloc+0x1e/0x30
[  109.429415][  T114]  filemap_alloc_folio+0xdf/0x490
[  109.441313][  T114]  do_read_cache_folio+0x381/0x7f0
[  109.446547][  T114]  do_read_cache_page+0x32/0x260
[  109.458290][  T114]  __get_metapage+0x31d/0xfa0
[  109.464322][  T114]  diRead+0x6ec/0xbb0
[  109.468409][  T114]  jfs_iget+0x90/0x440
[  109.472786][  T114]  jfs_lookup+0x221/0x420
[  109.477195][  T114]  __lookup_slow+0x2a1/0x400
[  109.488401][  T114]  lookup_slow+0x53/0x70
[  109.495788][  T114]  walk_component+0x2ad/0x3e0
[  109.505063][  T114]  path_lookupat+0x148/0x420
[  109.509885][  T114]  filename_lookup+0x22d/0x580
[  109.514767][  T114] page last free stack trace:
[  109.519488][  T114]  free_unref_page_prepare+0x7d7/0x8f0
[  109.529541][  T114]  free_unref_page+0x32/0x2e0
[  109.534420][  T114]  vfree+0x1a7/0x340
[  109.538394][  T114]  vb2_vmalloc_put+0x68/0xb0
[  109.549078][  T114]  __vb2_buf_mem_free+0x10d/0x2c0
[  109.555294][  T114]  __vb2_queue_free+0x30c/0xbd0
[  109.563867][  T114]  vb2_core_queue_release+0x5f/0x80
[  109.569144][  T114]  vb2_fop_release+0x164/0x1f0
[  109.574066][  T114]  v4l2_release+0x266/0x390
[  109.578626][  T114]  __fput+0x221/0x940
[  109.582923][  T114]  task_work_run+0x1d4/0x260
[  109.587593][  T114]  exit_to_user_mode_loop+0xe6/0x110
[  109.594649][  T114]  exit_to_user_mode_prepare+0xee/0x180
[  109.600684][  T114]  syscall_exit_to_user_mode+0x1a/0x50
[  109.606202][  T114]  do_syscall_64+0x61/0xb0
[  109.610761][  T114]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  109.621412][  T114] Modules linked in:
[  109.628231][  T114] CPU: 1 PID: 114 Comm: jfsCommit Not tainted syzkaller #0
[  109.635508][  T114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  109.635528][  T114] Call Trace:
[  109.635539][  T114]  <TASK>
[  109.635548][  T114]  dump_stack_lvl+0x18c/0x250
[  109.635585][  T114]  ? show_regs_print_info+0x20/0x20
[  109.635613][  T114]  ? swiotlb_print_info+0x70/0x70
[  109.635647][  T114]  bad_page+0x14b/0x170
[  109.635674][  T114]  free_unref_page_prepare+0x884/0x8f0
[  109.635703][  T114]  free_unref_page+0x32/0x2e0
[  109.635729][  T114]  txUnlock+0x275/0xcb0
[  109.635753][  T114]  ? _raw_spin_lock_irqsave+0x100/0x100
[  109.635784][  T114]  ? lockdep_hardirqs_on+0x98/0x150
[  109.635814][  T114]  jfs_lazycommit+0x58c/0xaa0
[  109.635841][  T114]  ? txFreelock+0x5a0/0x5a0
[  109.646173][  T114]  ? do_task_dead+0xd0/0xd0
[  109.646208][  T114]  ? _raw_spin_unlock+0x40/0x40
[  109.646230][  T114]  ? __kthread_parkme+0x71/0x1c0
[  109.646253][  T114]  ? __kthread_parkme+0x15b/0x1c0
[  109.646278][  T114]  kthread+0x2fa/0x390
[  109.646300][  T114]  ? txFreelock+0x5a0/0x5a0
[  109.646324][  T114]  ? kthread_blkcg+0xd0/0xd0
[  109.646346][  T114]  ret_from_fork+0x48/0x80
[  109.646381][  T114]  ? kthread_blkcg+0xd0/0xd0
[  109.646403][  T114]  ret_from_fork_asm+0x11/0x20
[  109.646449][  T114]  </TASK>
[  109.732274][  T114] Disabling lock debugging due to kernel taint
[  109.732302][  T114] page:ffffea0000882700 refcount:0 mapcount:0 mapping:0000000000000000 index:0x24 pfn:0x2209c
[  109.776934][ T5790] non-latin1 character 0x2e66 found in JFS file name
[  109.785322][ T5790] mount with iocharset=utf8 to access
[  109.794703][  T114] flags: 0xfff0000000820d(locked|referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff)
[  109.811141][  T114] page_type: 0xffffffff()
[  109.815563][  T114] raw: 00fff0000000820d dead000000000100 dead000000000122 0000000000000000
[  109.824217][  T114] raw: 0000000000000024 ffff8880250e5d90 00000000ffffffff 0000000000000000
[  109.824232][  T114] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u))
[  109.824245][  T114] page_owner tracks the page as allocated
[  109.824252][  T114] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 6110, tgid 6109 (syz.2.62), ts 108169265365, free_ts 100216377377
[  109.824288][  T114]  post_alloc_hook+0x1c1/0x200
[  109.824314][  T114]  get_page_from_freelist+0x2181/0x22a0
[  109.824333][  T114]  __alloc_pages+0x1f0/0x460
[  109.824359][  T114]  folio_alloc+0x1e/0x30
[  109.824379][  T114]  filemap_alloc_folio+0xdf/0x490
[  109.824399][  T114]  do_read_cache_folio+0x381/0x7f0
[  109.824423][  T114]  do_read_cache_page+0x32/0x260
[  109.824445][  T114]  __get_metapage+0x31d/0xfa0
[  109.824463][  T114]  diRead+0x6ec/0xbb0
[  109.824487][  T114]  jfs_iget+0x90/0x440
[  109.824509][  T114]  jfs_lookup+0x221/0x420
[  109.824532][  T114]  __lookup_slow+0x2a1/0x400
[  109.824553][  T114]  lookup_slow+0x53/0x70
[  109.824572][  T114]  walk_component+0x2ad/0x3e0
[  109.824597][  T114]  path_lookupat+0x148/0x420
[  109.937999][  T114]  filename_lookup+0x22d/0x580
[  109.951919][  T114] page last free stack trace:
[  109.956712][  T114]  free_unref_page_prepare+0x7d7/0x8f0
[  109.963334][  T114]  free_unref_page+0x32/0x2e0
[  109.968079][  T114]  vfree+0x1a7/0x340
[  109.972390][  T114]  vb2_vmalloc_put+0x68/0xb0
[  109.977034][  T114]  __vb2_buf_mem_free+0x10d/0x2c0
[  109.982282][  T114]  __vb2_queue_free+0x30c/0xbd0
[  109.987186][  T114]  vb2_core_queue_release+0x5f/0x80
[  109.992576][  T114]  vb2_fop_release+0x164/0x1f0
[  109.997558][  T114]  v4l2_release+0x266/0x390
[  110.002288][  T114]  __fput+0x221/0x940
[  110.006354][  T114]  task_work_run+0x1d4/0x260
[  110.011099][  T114]  exit_to_user_mode_loop+0xe6/0x110
[  110.016440][  T114]  exit_to_user_mode_prepare+0xee/0x180
[  110.022147][  T114]  syscall_exit_to_user_mode+0x1a/0x50
[  110.027674][  T114]  do_syscall_64+0x61/0xb0
[  110.032345][  T114]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  110.053016][  T114] ------------[ cut here ]------------
[  110.059232][  T114] kernel BUG at include/linux/mm.h:1458!
[  110.065062][  T114] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  110.071207][  T114] CPU: 1 PID: 114 Comm: jfsCommit Tainted: G    B              syzkaller #0
[  110.079934][  T114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  110.090079][  T114] RIP: 0010:put_metapage+0x248/0x330
[  110.095429][  T114] Code: 38 c1 0f 8c 31 ff ff ff 4c 89 ef e8 52 a9 df fe e9 24 ff ff ff e8 f8 a3 86 fe 48 8b 3c 24 48 c7 c6 c0 fe 22 8b e8 98 b0 c7 fe <0f> 0b 48 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 15 a8 86 fe 48 89 2c
[  110.115087][  T114] RSP: 0018:ffffc9000266fcd0 EFLAGS: 00010246
[  110.121207][  T114] RAX: eed736adf3393e00 RBX: ffff8880250e5d90 RCX: eed736adf3393e00
[  110.129434][  T114] RDX: 0000000000000000 RSI: ffffffff8b3c50c0 RDI: ffffffff8b3c5080
[  110.131583][    T9] Added buffer head 0 to ffff88814007fc00
[  110.137471][  T114] RBP: 000000000000007f R08: ffffffff8f8dd86f R09: 1ffffffff1f1bb0d
[  110.137493][  T114] R10: dffffc0000000000 R11: fffffbfff1f1bb0e R12: ffff8880250e5db8
[  110.137510][  T114] R13: ffffea0000882734 R14: 1ffff11004a1cbb7 R15: 1ffff11004a1cbc4
[  110.167386][  T114] FS:  0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000
[  110.176383][  T114] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  110.183015][  T114] CR2: 000055556835fab8 CR3: 0000000075a9f000 CR4: 00000000003506e0
[  110.191028][  T114] Call Trace:
[  110.194372][  T114]  <TASK>
[  110.197348][  T114]  txUnlock+0x426/0xcb0
[  110.201561][  T114]  jfs_lazycommit+0x58c/0xaa0
[  110.206286][  T114]  ? txFreelock+0x5a0/0x5a0
[  110.210834][  T114]  ? do_task_dead+0xd0/0xd0
[  110.215729][  T114]  ? _raw_spin_unlock+0x40/0x40
[  110.220652][  T114]  ? __kthread_parkme+0x71/0x1c0
[  110.225637][  T114]  ? __kthread_parkme+0x15b/0x1c0
[  110.230710][  T114]  kthread+0x2fa/0x390
[  110.234817][  T114]  ? txFreelock+0x5a0/0x5a0
[  110.239457][  T114]  ? kthread_blkcg+0xd0/0xd0
[  110.244097][  T114]  ret_from_fork+0x48/0x80
[  110.248593][  T114]  ? kthread_blkcg+0xd0/0xd0
[  110.253226][  T114]  ret_from_fork_asm+0x11/0x20
[  110.258054][  T114]  </TASK>
[  110.261107][  T114] Modules linked in:
[  110.266303][ T5790] hci3: err 0x13
[  110.270235][ T5790] hci3 ffff8880265dc000
[  110.274482][ T5790] hci3: 
[  110.278591][ T5790] hci3: err 0x13
[  110.282415][ T5790] hci3: cancelling interleave scan
[  110.287593][ T5790] hci3 state 0 -> 0
[  110.292158][    C0] percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 0
[  110.295791][ T5790] All LE pending actions cleared
[  110.300516][    C0] percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
[  110.308506][  T114] ---[ end trace 0000000000000000 ]---
[  110.315353][ T5790] hdev hci3
[  110.322949][ T5790] hcon ffff888077fbc000 reason 22
[  110.328060][ T5790] hcon ffff888077fbc000 conn ffff88807cc74000, err 103
[  110.335162][ T5790] hci3 hcon ffff888077fbc000 chan ffff88801aae1b00
[  110.335942][  T114] RIP: 0010:put_metapage+0x248/0x330
[  110.347524][ T5790] hci3 hcon ffff888077fbc000 handle 200
[  110.352717][  T114] Code: 38 c1 0f 8c 31 ff ff ff 4c 89 ef e8 52 a9 df fe e9 24 ff ff ff e8 f8 a3 86 fe 48 8b 3c 24 48 c7 c6 c0 fe 22 8b e8 98 b0 c7 fe <0f> 0b 48 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 15 a8 86 fe 48 89 2c
[  110.353386][ T5790] hci3: hcon ffff888077fbc000
[  110.378465][ T1197] cfg80211: Timeout while waiting for CRDA to reply, restoring regulatory settings
[  110.383723][  T114] RSP: 0018:ffffc9000266fcd0 EFLAGS: 00010246
[  110.387868][ T5790] hcon ffff888077fbc000
[  110.395106][ T5870] kobject: '0' (ffff8880224c7250): kobject_cleanup, parent 0000000000000000
[  110.398298][ T1197] cfg80211: Restoring regulatory settings
[  110.412954][ T5790] hci3: conn ffff888077fbc000
[  110.417063][ T5870] kobject: '0' (ffff8880224c7250): calling ktype release
[  110.417706][ T5790] device: 'hci3:200': device_unregister
[  110.427930][  T114] RAX: eed736adf3393e00 RBX: ffff8880250e5d90 RCX: eed736adf3393e00
[  110.430781][ T1197] cfg80211: Kicking the queue
[  110.443389][  T114] RDX: 0000000000000000 RSI: ffffffff8b3c50c0 RDI: ffffffff8b3c5080
[  110.444445][ T5790] kernfs runtime_status: removing
[  110.456902][ T5790] kernfs control: removing
[  110.459748][ T5870] kobject: '0': free name
[  110.466286][ T5852] cfg80211: Calling CRDA to update world regulatory domain
[  110.473687][ T5852] kobject: 'regulatory.0' (ffff8881400bf010): kobject_uevent_env
[  110.481506][  T114] RBP: 000000000000007f R08: ffffffff8f8dd86f R09: 1ffffffff1f1bb0d
[  110.489870][ T5870] kobject: 'cpu0' (ffffe8ffffc073f8): kobject_cleanup, parent 0000000000000000
[  110.491341][ T5790] kernfs runtime_suspended_time: removing
[  110.506980][ T5852] kobject: 'regulatory.0' (ffff8881400bf010): fill_kobj_path: path = '/devices/platform/regulatory.0'
[  110.508084][ T5870] kobject: 'cpu0' (ffffe8ffffc073f8): calling ktype release
[  110.518110][ T5790] kernfs runtime_active_time: removing
[  110.518150][ T5790] kernfs autosuspend_delay_ms: removing
[  110.537452][  T114] R10: dffffc0000000000 R11: fffffbfff1f1bb0e R12: ffff8880250e5db8
[  110.539305][ T5870] kobject: 'cpu0': free name
[  110.545593][  T114] R13: ffffea0000882734 R14: 1ffff11004a1cbb7 R15: 1ffff11004a1cbc4
[  110.555697][ T5870] kobject: 'cpu1' (ffffe8ffffd073f8): kobject_cleanup, parent 0000000000000000
[  110.558722][ T5852] cfg80211: Pending regulatory request, waiting for it to be processed...
[  110.568522][ T5870] kobject: 'cpu1' (ffffe8ffffd073f8): calling ktype release
[  110.576719][ T5790] kernfs power: removing
[  110.588428][  T114] FS:  0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000
[  110.589846][ T5870] kobject: 'cpu1': free name
[  110.601283][ T5790] kernfs device: removing
[  110.606500][ T5790] kernfs subsystem: removing
[  110.608133][ T5870] kobject: 'mq' (ffff888022941180): kobject_cleanup, parent 0000000000000000
[  110.611444][  T114] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  110.628573][ T5790] kernfs hci3:200: removing
[  110.633357][ T5870] kobject: 'mq' (ffff888022941180): calling ktype release
[  110.633432][ T5870] kobject: 'mq': free name
[  110.641337][  T114] CR2: 000055556835fab8 CR3: 0000000026385000 CR4: 00000000003506e0
[  110.653565][ T5790] kernfs uevent: removing
[  110.657991][ T5790] PM: Removing info for No Bus:hci3:200
[  110.663739][ T5790] kobject: 'hci3:200' (ffff888077fbc5f0): kobject_uevent_env
[  110.672041][  T114] Kernel panic - not syncing: Fatal exception
[  110.678742][  T114] Kernel Offset: disabled
[  110.683182][  T114] Rebooting in 86400 seconds..