last executing test programs:

4.825564015s ago: executing program 1 (id=256):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
ppoll(&(0x7f0000000200)=[{r0, 0x2402}], 0x1, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140))

4.136828024s ago: executing program 3 (id=270):
rt_sigqueueinfo(0x0, 0x16, 0x0)

4.046491773s ago: executing program 3 (id=271):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
read$nci(r0, 0x0, 0x0)

3.820695346s ago: executing program 1 (id=274):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000004760900000000004c"], 0x48)

3.761754742s ago: executing program 1 (id=277):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000000010000000000000000000000200000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000000000000000900000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000040800000000000000000000000000000002000000000000010001000000000084010500ac1414aa00000000000000000000000000000000330000000000000064010100000000000000000000000000ff340000000000000000000000000000402000007f000001000000000000000000000000000020003c"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)

3.647062033s ago: executing program 1 (id=280):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000000080)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000000380)="$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")
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000800)=@filename='./dev/sda1\x00', &(0x7f0000000900)='./mnt\x00', &(0x7f00000012c0)='ext4\x00', 0x8410, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./mnt\x00', 0x438001, 0x10)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000001340)=0x4091)

3.512492667s ago: executing program 0 (id=282):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180), 0x0, 0x559e, &(0x7f0000001180)="$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")
openat(0xffffffffffffff9c, &(0x7f0000006740)='.\x00', 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000006780)=ANY=[], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f00000067c0)='./debug\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000006840)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000006880)='./debug/failslab/times\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000006900)='./debug/failslab/probability\x00', 0x2, 0x0)
write(r1, &(0x7f0000006940)='5\x00', 0x1)
r2 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000006980)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0)
write(r2, &(0x7f00000069c0)='1', 0x1)
mkdirat(0xffffffffffffffff, 0x0, 0x4)
prlimit64(0x0, 0xe, &(0x7f00000076c0)={0x8, 0x20000008d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000007700)=0x7)
mount(&(0x7f0000007740)=@filename='mtd0\x00', &(0x7f0000007780)='./file0\x00', &(0x7f00000077c0)='jffs2\x00', 0x800000, 0x0)
chdir(&(0x7f0000007800)='./file0\x00')
r3 = open(&(0x7f0000007840)='./file1\x00', 0x4827e, 0x20)
setxattr$trusted_overlay_upper(&(0x7f0000007880)='./file1\x00', &(0x7f00000078c0), 0x0, 0x0, 0x0)
write$FUSE_WRITE(r3, &(0x7f0000007900)={0x18, 0x0, 0x0, {0xffffffff}}, 0x18)
openat(0xffffffffffffff9c, &(0x7f0000007940)='./file1\x00', 0xc4042, 0x1ff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000007980)={0x1, &(0x7f00000079c0)=[{0x6, 0x0, 0x4, 0x7fff0000}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000007a00)='./dev\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000007a40)='./config\x00', 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000001040)=ANY=[@ANYBLOB="b7050000000000007910a800000000001d500000000000009500000000000000dad0ae437202fe29729e5361e283f4c4ddf4f91558ee5ce40394c5f0063281d106d9692809f9019b91aa47941e12669ec84cb12e51a175b929b9eb3ed662fd9448d2cf8c101279664c6e0e70869cd88420cb289b7fdbd62b760fd36c31a0919c482808100058572aea56c1b636001f34db40ee898d88ee30e8942a975c7806f0cfb12f6127edd280f96e41d54100b2ced86c59bb6524d0d985c6eaef2ea15d1ceadcf5cdde89b6c76ea58af225f8a9c763767491566c6a3627011463fb7267715090bc94407ad0962476b14a851594175b41576cbd060faa5ae19d1d433bad4e5aa7f338f511028103bf634e003cce56be57cd177878f429"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0xfffffffffffffe1e}, 0x2a)

3.48386176s ago: executing program 1 (id=284):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
memfd_create(0x0, 0x0)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000940), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0)
ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000980)={0xfffffffffffffe43, 0x0})
read(r0, 0x0, 0xff40)
preadv(r0, &(0x7f00000009c0)=[{&(0x7f0000000a00)=""/102, 0x66}], 0x1, 0x10000, 0x1ff)
write$ppp(r0, &(0x7f0000000a80)="8f1c", 0x2)
r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x4)
write(r1, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
timer_create(0x6, 0x0, &(0x7f0000000b80))
ioctl$TCSETS(r2, 0x40045431, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000900)=0x6f)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'dvmrp1\x00', 0x2}, 0x18)

3.065637062s ago: executing program 1 (id=288):
r0 = eventfd2(0x8, 0x0)
ppoll(&(0x7f00000006c0)=[{r0, 0x8100}], 0x1, 0x0, 0x0, 0x0)
write$eventfd(r0, &(0x7f00000018c0)=0xfffffffffffffffc, 0x8)
read(r0, &(0x7f0000001900)=""/82, 0x52)

2.840577105s ago: executing program 32 (id=288):
r0 = eventfd2(0x8, 0x0)
ppoll(&(0x7f00000006c0)=[{r0, 0x8100}], 0x1, 0x0, 0x0, 0x0)
write$eventfd(r0, &(0x7f00000018c0)=0xfffffffffffffffc, 0x8)
read(r0, &(0x7f0000001900)=""/82, 0x52)

2.611559458s ago: executing program 4 (id=294):
mkdir(&(0x7f0000000000)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./mysys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./mysys/bus/pci/devices/0000:00:01.0/enable\x00', 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
write$binfmt_format(r0, &(0x7f0000000340)='1\x00', 0x2)

2.506668268s ago: executing program 2 (id=295):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x14552, &(0x7f00000000c0)=ANY=[], 0x7b, 0x11ff, &(0x7f0000000100)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000013c0)='./file1\x00', 0x2000, 0x28)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000001800)={0xfffa, [0x0, 0xfffffffc], 0x4}, 0x10)

2.506441248s ago: executing program 4 (id=296):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x402)
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x3, 'Y'}]}}}}}}}}, 0x0)

2.425395006s ago: executing program 0 (id=297):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x143642, 0x0)
close(r1)
socket(0x10, 0x803, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @random="0100003600"})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f00000003c0), 0x56)
sendmsg$kcm(r4, &(0x7f0000000400)={&(0x7f0000000440)=@xdp={0x2c, 0x8, r3, 0x42}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000007c0)="27030200dc0f14000e0007000025c1020000ff84125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f0000000800)="02db0b9ef1cafdab", 0xdd86}], 0x2}, 0x4005)

2.358661393s ago: executing program 4 (id=298):
syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x10000)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000001e80)=[{0x0, 0x3, {0x1, 0xff, 0x4}, {0x0, 0x0, 0x6}, 0x0, 0xff}, {0x2, 0x3, {0x0, 0xf0, 0x1}, {0x0, 0x1}, 0x1}], 0x40)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050)

2.128614806s ago: executing program 4 (id=299):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000004)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40040)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x51, 0xffffffff}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000340), 0x8)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
timer_create(0x1, &(0x7f00000024c0)={0x0, 0x1c, 0x1, @thr={&(0x7f00000004c0), 0x0}}, &(0x7f0000002500))
r1 = socket$rds(0x15, 0x5, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0)
sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xce21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8c0}, 0x0)

1.966486042s ago: executing program 2 (id=300):
setns(0xc9, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000008c0)={'syzkaller0\x00', 0x1})
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r2, &(0x7f0000000900), 0x12)
listen(r2, 0x1)
write$tun(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="000008050000010b8f7e0b0a42b820a8e8c9881db642"], 0x97)
setns(0xc9, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000580)={'syz_tun\x00', 0x1})
ioctl$TUNSETLINK(r3, 0x400454cd, 0x10f)
r4 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000005c0)={'syz_tun\x00', 0x1})
write$tun(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="00000805001001"], 0xa)

1.943688285s ago: executing program 0 (id=301):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000002040)=[{{&(0x7f00000020c0)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000002100)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x0)

1.764610543s ago: executing program 0 (id=302):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000140)=@udp=r0}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000340), 0x318, 0x0)
recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2)
unshare(0x400)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000440)=0x3)
socket$netlink(0x10, 0x3, 0x0)
unshare(0x4000400)
socket$packet(0x11, 0x3, 0x300)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, 0x0, 0x20000000)
read(r5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={0x0, 0x40}}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000", @ANYBLOB="ffffffff00"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000200"/28], 0x50)
getgroups(0x1, &(0x7f0000000080)=[0x0])

829.511777ms ago: executing program 0 (id=303):
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280)

766.077213ms ago: executing program 3 (id=304):
bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xd3}]}, &(0x7f0000001a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)

713.591008ms ago: executing program 2 (id=305):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newtfilter={0x4c, 0x2c, 0x609, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x8e1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e4ad}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x40080)

644.476095ms ago: executing program 0 (id=306):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180), 0x0, 0x559e, &(0x7f0000001180)="$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")
openat(0xffffffffffffff9c, &(0x7f0000006740)='.\x00', 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000006780)=ANY=[], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f00000067c0)='./debug\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000006840)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000006880)='./debug/failslab/times\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000006900)='./debug/failslab/probability\x00', 0x2, 0x0)
write(r1, &(0x7f0000006940)='5\x00', 0x1)
r2 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000006980)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0)
write(r2, &(0x7f00000069c0)='1', 0x1)
mkdirat(0xffffffffffffffff, 0x0, 0x4)
prlimit64(0x0, 0xe, &(0x7f00000076c0)={0x8, 0x20000008d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000007700)=0x7)
mount(&(0x7f0000007740)=@filename='mtd0\x00', &(0x7f0000007780)='./file0\x00', &(0x7f00000077c0)='jffs2\x00', 0x800000, 0x0)
chdir(&(0x7f0000007800)='./file0\x00')
r3 = open(&(0x7f0000007840)='./file1\x00', 0x4827e, 0x20)
setxattr$trusted_overlay_upper(&(0x7f0000007880)='./file1\x00', &(0x7f00000078c0), 0x0, 0x0, 0x0)
write$FUSE_WRITE(r3, &(0x7f0000007900)={0x18, 0x0, 0x0, {0xffffffff}}, 0x18)
openat(0xffffffffffffff9c, &(0x7f0000007940)='./file1\x00', 0xc4042, 0x1ff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000007980)={0x1, &(0x7f00000079c0)=[{0x6, 0x0, 0x4, 0x7fff0000}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000007a00)='./dev\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000007a40)='./config\x00', 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0xfffffffffffffe1e}, 0x2a)

644.135395ms ago: executing program 4 (id=307):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f00000004c0)=0x401, 0x4)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000500)=0x800001, 0x4)
bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x31e5}, 0x1c)
listen(r0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000580)=0x401, 0x4)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000005c0)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000600)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x31e5}, 0x1c)
listen(r1, 0x1)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

627.176927ms ago: executing program 3 (id=308):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
setresuid(0x0, 0xee01, 0x0)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001200010300000000000000000200"/56, @ANYRES32=0x0, @ANYBLOB="0000000000f91900ffffffef000000001400010007"], 0x60}}, 0x0)

574.769102ms ago: executing program 2 (id=309):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$cont(0x20, r0, 0x200, 0x7)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000680)={0x0, 0x0, 0x0, 'queue0\x00'})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r2)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000580)={'wpan1\x00', <r4=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r4, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)

484.695001ms ago: executing program 4 (id=310):
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0)
ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000400))
write$P9_RREADLINK(r1, &(0x7f0000000440)={0x34, 0x17, 0x1, {0x2b, './proc/sys/net/ipv6/conf/default/forwarding'}}, 0x34)
write(r1, &(0x7f0000000480)='1', 0x1)
io_uring_setup(0xf08, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
fstat(0xffffffffffffffff, 0x0)

448.252695ms ago: executing program 2 (id=311):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000b40)={0x3ffffffffffffe96, &(0x7f0000000b80)=[{0x4000, 0x5}]})

444.470755ms ago: executing program 3 (id=312):
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x810, &(0x7f0000000580)={[{@errors_remount}, {@grpquota}]}, 0x1, 0x4fe, &(0x7f00000005c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', 0x80342, 0xcc)
pwrite64(r0, &(0x7f0000000b00)='2', 0xfdef, 0xfecc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./file1\x00', 0x48042, 0x8c)
fallocate(r1, 0x1, 0x3, 0x8010004)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./file1\x00', 0x181441, 0x148)
fallocate(r2, 0x20, 0x4000, 0x10000008000)

237.33µs ago: executing program 3 (id=313):
mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8995, 0x0)
r0 = io_uring_setup(0x653, &(0x7f0000001840)={0x0, 0x804, 0x0, 0x4})
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0xf, &(0x7f00000018c0)={0x1002, 0x0, 0x0, 0x0, 0x28}, 0x20)

0s ago: executing program 2 (id=314):
setns(0xc9, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000880)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r2, &(0x7f0000000900), 0x12)
listen(r2, 0x1)
write$tun(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="000008050000010b8f7e0b0a42b820a8e8c9881db642"], 0x97)
setns(0xc9, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000580)={'syz_tun\x00', 0x1})
ioctl$TUNSETLINK(r3, 0x400454cd, 0x10f)
r4 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000005c0)={'syz_tun\x00', 0x1})
write$tun(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="00000805001001"], 0xa)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.76' (ED25519) to the list of known hosts.
[   61.389858][ T4176] cgroup: Unknown subsys name 'net'
[   61.498178][ T4176] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   63.025119][ T4176] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   64.916600][ T4197] rxe_eth0 speed is unknown, defaulting to 1000
[   64.943703][ T4197] rxe_eth0 speed is unknown, defaulting to 1000
[   64.952581][ T4198] rdma_rxe: rxe_register_device failed with error -23
[   64.953668][ T4197] rxe_eth0 speed is unknown, defaulting to 1000
[   64.969898][ T4190] rdma_rxe: rxe_register_device failed with error -23
[   64.977584][ T4190] rdma_rxe: failed to add rxe_eth0
[   64.985084][ T4188] rdma_rxe: rxe_register_device failed with error -23
[   64.992356][ T4189] rdma_rxe: rxe_register_device failed with error -23
[   65.002927][ T4198] rdma_rxe: failed to add rxe_eth0
[   65.009996][ T4188] rdma_rxe: failed to add rxe_eth0
[   65.019898][ T4189] rdma_rxe: failed to add rxe_eth0
[   65.145723][ T4197] infiniband rxe0: set active
[   65.153232][ T4197] infiniband rxe0: added rxe_eth0
[   65.168302][ T1111] rxe_eth0 speed is unknown, defaulting to 1000
[   65.204465][ T4197] RDS/IB: rxe0: added
[   65.209390][ T4197] smc: adding ib device rxe0 with port count 1
[   65.215691][ T4197] smc:    ib device rxe0 port 1 has pnetid 
[   65.222702][ T4212] rxe_eth0 speed is unknown, defaulting to 1000
[   65.249602][ T4197] rxe_eth0 speed is unknown, defaulting to 1000
[   65.422811][ T4198] chnl_net:caif_netlink_parms(): no params data found
[   65.467229][ T4197] rxe_eth0 speed is unknown, defaulting to 1000
[   65.553013][ T4188] chnl_net:caif_netlink_parms(): no params data found
[   65.590852][ T4189] chnl_net:caif_netlink_parms(): no params data found
[   65.627536][ T4190] chnl_net:caif_netlink_parms(): no params data found
[   65.691350][ T4197] rxe_eth0 speed is unknown, defaulting to 1000
[   65.802074][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.818341][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.826699][ T4198] device bridge_slave_0 entered promiscuous mode
[   65.869155][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.876262][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.884859][ T4198] device bridge_slave_1 entered promiscuous mode
[   65.893125][ T4197] rxe_eth0 speed is unknown, defaulting to 1000
[   65.912560][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.928374][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.938617][ T4188] device bridge_slave_0 entered promiscuous mode
[   66.000903][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.007988][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.017017][ T4188] device bridge_slave_1 entered promiscuous mode
[   66.043496][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.067987][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.082331][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.089944][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.098049][ T4189] device bridge_slave_0 entered promiscuous mode
[   66.115350][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.127247][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.135812][ T4190] device bridge_slave_0 entered promiscuous mode
[   66.150410][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.157491][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.165901][ T4189] device bridge_slave_1 entered promiscuous mode
[   66.182496][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.193276][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.200882][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.209044][ T4190] device bridge_slave_1 entered promiscuous mode
[   66.236586][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.253094][ T4197] rxe_eth0 speed is unknown, defaulting to 1000
[   66.265637][ T4198] team0: Port device team_slave_0 added
[   66.297902][ T4198] team0: Port device team_slave_1 added
[   66.310395][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.340231][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.375471][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.391302][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.403746][ T4188] team0: Port device team_slave_0 added
[   66.411853][ T4188] team0: Port device team_slave_1 added
[   66.421227][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.430746][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.461156][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.505643][ T4190] team0: Port device team_slave_0 added
[   66.514963][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.522186][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.548613][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.575195][ T4190] team0: Port device team_slave_1 added
[   66.595728][ T4189] team0: Port device team_slave_0 added
[   66.602700][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.609827][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.636354][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.661820][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.668895][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.695073][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.707866][ T4189] team0: Port device team_slave_1 added
[   66.723451][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.730765][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.757189][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.778981][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.785952][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.812218][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.834693][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.841739][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.867792][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.879405][ T4212] Bluetooth: hci0: command 0x0409 tx timeout
[   66.886152][ T4212] Bluetooth: hci1: command 0x0409 tx timeout
[   66.889235][    T7] Bluetooth: hci3: command 0x0409 tx timeout
[   66.909196][ T4198] device hsr_slave_0 entered promiscuous mode
[   66.916065][ T4198] device hsr_slave_1 entered promiscuous mode
[   66.946307][ T4188] device hsr_slave_0 entered promiscuous mode
[   66.953645][ T4188] device hsr_slave_1 entered promiscuous mode
[   66.959992][ T1109] Bluetooth: hci2: command 0x0409 tx timeout
[   66.966436][ T1109] Bluetooth: hci4: command 0x0409 tx timeout
[   66.973475][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   66.983890][ T4188] Cannot create hsr debugfs directory
[   66.992274][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.999572][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.025808][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.113044][ T4190] device hsr_slave_0 entered promiscuous mode
[   67.120176][ T4190] device hsr_slave_1 entered promiscuous mode
[   67.126791][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   67.134615][ T4190] Cannot create hsr debugfs directory
[   67.192278][ T4189] device hsr_slave_0 entered promiscuous mode
[   67.199378][ T4189] device hsr_slave_1 entered promiscuous mode
[   67.205992][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   67.214795][ T4189] Cannot create hsr debugfs directory
[   67.383650][ T4197] chnl_net:caif_netlink_parms(): no params data found
[   67.412332][ T4198] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   67.451616][ T4198] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   67.486296][ T4198] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   67.495312][ T4198] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   67.587055][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   67.611371][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   67.631015][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   67.643031][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   67.660736][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.667823][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.675984][ T4197] device bridge_slave_0 entered promiscuous mode
[   67.710936][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.718035][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.730625][ T4197] device bridge_slave_1 entered promiscuous mode
[   67.765856][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.777483][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.787459][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   67.797438][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   67.807972][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   67.834754][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   67.854670][ T4197] team0: Port device team_slave_0 added
[   67.878995][ T4197] team0: Port device team_slave_1 added
[   67.922733][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.930488][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.957342][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.986100][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.993243][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.019684][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.063119][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.075611][ T4197] device hsr_slave_0 entered promiscuous mode
[   68.083745][ T4197] device hsr_slave_1 entered promiscuous mode
[   68.090995][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.099702][ T4197] Cannot create hsr debugfs directory
[   68.126790][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   68.136665][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   68.146770][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   68.174274][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   68.197837][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   68.207411][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   68.232462][ T4198] 8021q: adding VLAN 0 to HW filter on device team0
[   68.279249][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.300785][ T4188] 8021q: adding VLAN 0 to HW filter on device team0
[   68.319226][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   68.327633][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   68.338471][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   68.347054][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   68.356562][ T1257] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.363876][ T1257] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.374503][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   68.392981][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.412231][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   68.423068][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   68.431860][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.439004][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.448007][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   68.458664][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   68.467268][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   68.476124][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.483284][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.493937][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   68.517760][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   68.527098][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   68.536539][ T1257] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.543681][ T1257] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.553252][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   68.562675][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   68.572345][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   68.589527][ T4190] 8021q: adding VLAN 0 to HW filter on device team0
[   68.610312][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   68.620601][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   68.629981][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   68.637951][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   68.649289][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   68.657920][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   68.666913][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   68.694483][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   68.704523][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   68.713538][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   68.729460][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   68.737821][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.744967][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.754567][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   68.764336][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   68.773014][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   68.781847][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   68.791832][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.798958][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.807338][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   68.816433][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   68.826037][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   68.835091][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   68.844069][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   68.852165][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   68.867293][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   68.881536][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   68.921509][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   68.933834][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   68.942839][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   68.951973][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   68.960031][ T4258] Bluetooth: hci3: command 0x041b tx timeout
[   68.966076][ T4258] Bluetooth: hci1: command 0x041b tx timeout
[   68.973808][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   68.982127][ T4258] Bluetooth: hci0: command 0x041b tx timeout
[   68.990165][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   69.002225][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   69.012156][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   69.021199][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   69.030126][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   69.038430][ T4258] Bluetooth: hci2: command 0x041b tx timeout
[   69.039098][ T4259] Bluetooth: hci4: command 0x041b tx timeout
[   69.049024][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   69.059232][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   69.071812][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   69.083908][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   69.103317][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   69.119919][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   69.131790][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   69.140457][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   69.162324][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.176920][ T4197] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   69.196699][ T4197] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   69.227495][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   69.251354][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   69.277257][ T4197] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   69.291787][ T4189] 8021q: adding VLAN 0 to HW filter on device team0
[   69.311924][ T4197] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   69.334897][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   69.345624][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   69.358102][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.365525][ T4269] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.375357][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   69.385762][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   69.395082][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.402222][ T4269] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.411126][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   69.425625][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   69.445972][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.483212][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   69.491551][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   69.509118][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   69.541687][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   69.560144][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   69.584616][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   69.621869][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   69.641874][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   69.654515][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   69.663401][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   69.686830][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   69.701003][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   69.713405][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.745643][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   69.753340][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   69.762525][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   69.777931][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   69.787965][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   69.802466][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   69.827900][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.841903][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.868581][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   69.877046][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   69.921452][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   69.934369][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   69.962540][ T4197] 8021q: adding VLAN 0 to HW filter on device team0
[   69.992728][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   70.011073][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   70.050675][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   70.060612][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   70.069968][ T3076] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.077072][ T3076] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.085498][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   70.095125][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   70.104388][ T3076] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.111521][ T3076] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.121032][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   70.130140][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   70.139437][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   70.149858][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   70.157900][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   70.167132][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   70.193107][ T4190] device veth0_vlan entered promiscuous mode
[   70.209895][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   70.219742][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   70.228984][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   70.237466][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   70.249603][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   70.258062][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   70.267005][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   70.274507][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   70.283833][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   70.292662][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   70.303594][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   70.312403][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   70.326890][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   70.336648][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   70.350973][ T4190] device veth1_vlan entered promiscuous mode
[   70.361495][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.374169][ T4198] device veth0_vlan entered promiscuous mode
[   70.393052][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   70.406221][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   70.416684][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   70.425350][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   70.437543][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   70.445927][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   70.464880][ T4198] device veth1_vlan entered promiscuous mode
[   70.488577][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   70.498849][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   70.510928][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   70.523511][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   70.546607][ T4188] device veth0_vlan entered promiscuous mode
[   70.582123][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   70.593354][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   70.607029][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   70.615742][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   70.625448][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   70.645163][ T4188] device veth1_vlan entered promiscuous mode
[   70.666261][ T4190] device veth0_macvtap entered promiscuous mode
[   70.691758][ T4189] device veth0_vlan entered promiscuous mode
[   70.699600][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   70.710859][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   70.720088][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   70.729110][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   70.737748][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   70.747599][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   70.757456][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   70.765845][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   70.774016][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   70.790193][ T4198] device veth0_macvtap entered promiscuous mode
[   70.824068][ T4188] device veth0_macvtap entered promiscuous mode
[   70.838003][ T4189] device veth1_vlan entered promiscuous mode
[   70.849663][ T4198] device veth1_macvtap entered promiscuous mode
[   70.859010][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   70.867681][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   70.876290][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   70.885134][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   70.894928][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   70.905046][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   70.915727][ T4190] device veth1_macvtap entered promiscuous mode
[   70.943079][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.951368][ T4188] device veth1_macvtap entered promiscuous mode
[   70.973195][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   70.981919][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   70.993021][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   71.003005][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   71.011940][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   71.021778][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   71.029583][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   71.040349][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.047851][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.049914][ T4274] Bluetooth: hci3: command 0x040f tx timeout
[   71.059488][ T1111] Bluetooth: hci0: command 0x040f tx timeout
[   71.071837][ T1111] Bluetooth: hci1: command 0x040f tx timeout
[   71.079257][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.091486][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.104298][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.115475][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.118666][ T1111] Bluetooth: hci4: command 0x040f tx timeout
[   71.131684][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.140731][ T1111] Bluetooth: hci2: command 0x040f tx timeout
[   71.149837][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   71.160331][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   71.169720][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   71.178508][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   71.187145][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   71.197391][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   71.210090][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[   71.216616][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[   71.225738][ T4198] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.234803][ T4198] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.244033][ T4198] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.253369][ T4198] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.268454][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.284869][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.294696][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.304368][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.314175][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.359289][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   71.368177][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   71.380476][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.391970][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.402913][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.417659][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.430026][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.447017][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   71.456116][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   71.472860][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   71.483891][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   71.494662][ T4189] device veth0_macvtap entered promiscuous mode
[   71.504348][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.516470][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.526650][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.540579][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.551977][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.592676][ T4189] device veth1_macvtap entered promiscuous mode
[   71.599989][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   71.609879][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   71.618025][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   71.626973][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   71.640889][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.650906][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.660258][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.669493][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.710175][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   71.720833][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   71.760704][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.779107][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.789554][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.800389][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.811098][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.821639][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.833323][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.851106][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   71.859978][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   71.867793][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   71.879919][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   71.891946][ T4197] device veth0_vlan entered promiscuous mode
[   71.911529][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.914274][ T3076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.934144][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.945264][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.956558][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.967539][ T3076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.981354][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.992647][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.007298][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.038829][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   72.054012][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   72.063327][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   72.074594][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.085088][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.094201][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.103905][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.117833][ T4197] device veth1_vlan entered promiscuous mode
[   72.184108][  T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.195299][  T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.229970][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   72.253734][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   72.263166][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   72.273582][ T3076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.277044][ T4197] device veth0_macvtap entered promiscuous mode
[   72.281812][ T3076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.297501][ T4197] device veth1_macvtap entered promiscuous mode
[   72.324339][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   72.330389][ T1257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.343342][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   72.352929][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   72.369933][ T1257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.379787][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   72.424659][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.442097][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.459635][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.467659][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.483385][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.494135][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.508856][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.519854][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.530214][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.540943][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.557497][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.582386][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   72.590446][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.604762][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   72.604795][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.618040][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   72.629966][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   72.651658][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.660510][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.673214][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.687381][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.697626][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.714922][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.727335][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.746411][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.765121][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.775824][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.801546][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.822968][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.836353][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.847123][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.865317][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.889482][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   72.908028][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   72.918151][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.008972][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.056114][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.077998][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   73.119721][ T1111] Bluetooth: hci1: command 0x0419 tx timeout
[   73.126804][ T1111] Bluetooth: hci0: command 0x0419 tx timeout
[   73.132143][ T4293] Bluetooth: hci3: command 0x0419 tx timeout
[   73.165700][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.186581][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.204959][ T4274] Bluetooth: hci2: command 0x0419 tx timeout
[   74.085967][ T4274] Bluetooth: hci4: command 0x0419 tx timeout
[   74.106228][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.260952][  T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.289702][  T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.331095][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   74.368074][ T4316] FAULT_INJECTION: forcing a failure.
[   74.368074][ T4316] name failslab, interval 1, probability 0, space 0, times 1
[   74.424775][ T4316] CPU: 1 PID: 4316 Comm: syz.1.8 Not tainted syzkaller #0
[   74.431997][ T4316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   74.442099][ T4316] Call Trace:
[   74.445403][ T4316]  <TASK>
[   74.448366][ T4316]  dump_stack_lvl+0x188/0x250
[   74.453104][ T4316]  ? show_regs_print_info+0x20/0x20
[   74.458347][ T4316]  ? load_image+0x410/0x410
[   74.462916][ T4316]  ? __might_sleep+0xf0/0xf0
[   74.467536][ T4316]  ? __lock_acquire+0x7d40/0x7d40
[   74.472638][ T4316]  should_fail+0x383/0x4b0
[   74.477119][ T4316]  should_failslab+0x5/0x20
[   74.481658][ T4316]  slab_pre_alloc_hook+0x51/0xc0
[   74.486635][ T4316]  ? vfs_parse_fs_string+0xd5/0x170
[   74.491877][ T4316]  __kmalloc_track_caller+0x69/0x330
[   74.497194][ T4316]  ? vfs_parse_fs_string+0xd5/0x170
[   74.502434][ T4316]  kmemdup_nul+0x28/0xa0
[   74.506707][ T4316]  vfs_parse_fs_string+0xd5/0x170
[   74.511770][ T4316]  ? vfs_parse_fs_param+0x420/0x420
[   74.517083][ T4316]  ? legacy_init_fs_context+0x7a/0xb0
[   74.522484][ T4316]  ? alloc_fs_context+0x63c/0x7d0
[   74.527549][ T4316]  do_new_mount+0x1c3/0xa50
[   74.532123][ T4316]  __se_sys_mount+0x2e3/0x3d0
[   74.536859][ T4316]  ? __x64_sys_mount+0xc0/0xc0
[   74.541669][ T4316]  ? lockdep_hardirqs_on+0x94/0x140
[   74.546904][ T4316]  ? __x64_sys_mount+0x1c/0xc0
[   74.551825][ T4316]  do_syscall_64+0x4c/0xa0
[   74.556282][ T4316]  ? clear_bhb_loop+0x30/0x80
[   74.561000][ T4316]  ? clear_bhb_loop+0x30/0x80
[   74.565736][ T4316]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   74.571663][ T4316] RIP: 0033:0x7fdbac666b19
[   74.576125][ T4316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   74.595858][ T4316] RSP: 002b:00007fdbaa8bd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   74.604322][ T4316] RAX: ffffffffffffffda RBX: 00007fdbac8ecfa0 RCX: 00007fdbac666b19
[   74.612345][ T4316] RDX: 0000200000000040 RSI: 0000200000000180 RDI: 00002000000000c0
[   74.620359][ T4316] RBP: 00007fdbac6feb70 R08: 0000200000000100 R09: 0000000000000000
[   74.628368][ T4316] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000
[   74.636367][ T4316] R13: 00007fdbac8ed038 R14: 00007fdbac8ecfa0 R15: 00007ffe6c794d68
[   74.644492][ T4316]  </TASK>
[   75.384688][ T4331] rxe_eth0 speed is unknown, defaulting to 1000
[   76.016621][ T4332] rxe_eth0 speed is unknown, defaulting to 1000
[   77.431396][ T4366] loop4: detected capacity change from 0 to 1024
[   77.483087][ T4366] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   77.777231][ T4366] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback.
[   78.557094][ T4400] FAULT_INJECTION: forcing a failure.
[   78.557094][ T4400] name failslab, interval 1, probability 0, space 0, times 0
[   78.655942][ T4400] CPU: 0 PID: 4400 Comm: syz.0.27 Not tainted syzkaller #0
[   78.663198][ T4400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   78.673279][ T4400] Call Trace:
[   78.676581][ T4400]  <TASK>
[   78.679558][ T4400]  dump_stack_lvl+0x188/0x250
[   78.684278][ T4400]  ? show_regs_print_info+0x20/0x20
[   78.689511][ T4400]  ? load_image+0x410/0x410
[   78.694061][ T4400]  ? __might_sleep+0xf0/0xf0
[   78.698685][ T4400]  ? __lock_acquire+0x7d40/0x7d40
[   78.703759][ T4400]  should_fail+0x383/0x4b0
[   78.708212][ T4400]  should_failslab+0x5/0x20
[   78.712749][ T4400]  slab_pre_alloc_hook+0x51/0xc0
[   78.717718][ T4400]  kmem_cache_alloc_trace+0x47/0x290
[   78.723033][ T4400]  ? v9fs_mount+0x5c/0x850
[   78.727488][ T4400]  ? vfs_parse_fs_string+0x10b/0x170
[   78.732809][ T4400]  v9fs_mount+0x5c/0x850
[   78.737094][ T4400]  legacy_get_tree+0xe6/0x180
[   78.741801][ T4400]  ? trace_xrep_findroot_block+0x1f0/0x1f0
[   78.747667][ T4400]  vfs_get_tree+0x88/0x270
[   78.752118][ T4400]  do_new_mount+0x247/0xa50
[   78.756666][ T4400]  __se_sys_mount+0x2e3/0x3d0
[   78.761385][ T4400]  ? __x64_sys_mount+0xc0/0xc0
[   78.766196][ T4400]  ? lockdep_hardirqs_on+0x94/0x140
[   78.771430][ T4400]  ? __x64_sys_mount+0x1c/0xc0
[   78.776237][ T4400]  do_syscall_64+0x4c/0xa0
[   78.780685][ T4400]  ? clear_bhb_loop+0x30/0x80
[   78.785395][ T4400]  ? clear_bhb_loop+0x30/0x80
[   78.790120][ T4400]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   78.796045][ T4400] RIP: 0033:0x7f87eec8fb19
[   78.800493][ T4400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   78.820126][ T4400] RSP: 002b:00007f87ecee6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   78.828577][ T4400] RAX: ffffffffffffffda RBX: 00007f87eef15fa0 RCX: 00007f87eec8fb19
[   78.836583][ T4400] RDX: 0000200000000040 RSI: 0000200000000180 RDI: 00002000000000c0
[   78.844584][ T4400] RBP: 00007f87eed27b70 R08: 0000200000000100 R09: 0000000000000000
[   78.852582][ T4400] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000
[   78.860582][ T4400] R13: 00007f87eef16038 R14: 00007f87eef15fa0 R15: 00007ffcdecabc08
[   78.868603][ T4400]  </TASK>
[   79.006145][ T4364] loop3: detected capacity change from 0 to 32768
[   79.019015][ T1111] rxe_eth0 speed is unknown, defaulting to 1000
[   79.052043][ T4407] FAULT_INJECTION: forcing a failure.
[   79.052043][ T4407] name failslab, interval 1, probability 0, space 0, times 0
[   79.143420][ T4407] CPU: 0 PID: 4407 Comm: syz.1.30 Not tainted syzkaller #0
[   79.150754][ T4407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   79.160838][ T4407] Call Trace:
[   79.164175][ T4407]  <TASK>
[   79.167133][ T4407]  dump_stack_lvl+0x188/0x250
[   79.171855][ T4407]  ? show_regs_print_info+0x20/0x20
[   79.177096][ T4407]  ? load_image+0x410/0x410
[   79.181641][ T4407]  ? __might_sleep+0xf0/0xf0
[   79.186267][ T4407]  ? __lock_acquire+0x7d40/0x7d40
[   79.191355][ T4407]  should_fail+0x383/0x4b0
[   79.195823][ T4407]  should_failslab+0x5/0x20
[   79.200364][ T4407]  slab_pre_alloc_hook+0x51/0xc0
[   79.205348][ T4407]  ? __d_alloc+0x27/0x6d0
[   79.209717][ T4407]  kmem_cache_alloc+0x3d/0x280
[   79.214521][ T4407]  __d_alloc+0x27/0x6d0
[   79.218705][ T4407]  ? d_alloc_pseudo+0xe/0x70
[   79.223326][ T4407]  d_alloc_pseudo+0x19/0x70
[   79.227865][ T4407]  alloc_file_pseudo+0xe0/0x200
[   79.232753][ T4407]  ? alloc_empty_file_noaccount+0x80/0x80
[   79.238537][ T4407]  ? alloc_fd+0x59e/0x650
[   79.242912][ T4407]  sock_alloc_file+0xb3/0x240
[   79.247661][ T4407]  __sys_socket+0x11d/0x170
[   79.252200][ T4407]  __x64_sys_socket+0x76/0x80
[   79.256911][ T4407]  do_syscall_64+0x4c/0xa0
[   79.261357][ T4407]  ? clear_bhb_loop+0x30/0x80
[   79.266097][ T4407]  ? clear_bhb_loop+0x30/0x80
[   79.270817][ T4407]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   79.276765][ T4407] RIP: 0033:0x7fdbac666b19
[   79.281211][ T4407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   79.300853][ T4407] RSP: 002b:00007fdbaa8bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   79.309311][ T4407] RAX: ffffffffffffffda RBX: 00007fdbac8ecfa0 RCX: 00007fdbac666b19
[   79.317314][ T4407] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000018
[   79.325318][ T4407] RBP: 00007fdbac6feb70 R08: 0000000000000000 R09: 0000000000000000
[   79.333332][ T4407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   79.341360][ T4407] R13: 00007fdbac8ed038 R14: 00007fdbac8ecfa0 R15: 00007ffe6c794d68
[   79.349397][ T4407]  </TASK>
[   79.400291][ T4364] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.19 (4364)
[   79.510774][ T4364] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[   79.554009][ T4364] BTRFS info (device loop3): using free space tree
[   79.608033][ T4364] BTRFS info (device loop3): has skinny extents
[   80.133659][ T4364] BTRFS info (device loop3): enabling ssd optimizations
[   80.272416][ T4360] jffs2: notice: (4360) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   80.801074][ T4477] FAULT_INJECTION: forcing a failure.
[   80.801074][ T4477] name failslab, interval 1, probability 5, space 0, times 0
[   80.862920][ T4477] CPU: 1 PID: 4477 Comm: syz.2.42 Not tainted syzkaller #0
[   80.870197][ T4477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   80.880282][ T4477] Call Trace:
[   80.883592][ T4477]  <TASK>
[   80.886553][ T4477]  dump_stack_lvl+0x188/0x250
[   80.891276][ T4477]  ? show_regs_print_info+0x20/0x20
[   80.896551][ T4477]  ? load_image+0x410/0x410
[   80.901098][ T4477]  ? __might_sleep+0xf0/0xf0
[   80.905733][ T4477]  ? __lock_acquire+0x7d40/0x7d40
[   80.910815][ T4477]  should_fail+0x383/0x4b0
[   80.915271][ T4477]  should_failslab+0x5/0x20
[   80.919809][ T4477]  slab_pre_alloc_hook+0x51/0xc0
[   80.924789][ T4477]  ? p9_client_create+0x2e5/0x1020
[   80.929940][ T4477]  __kmalloc_track_caller+0x69/0x330
[   80.935267][ T4477]  ? p9_client_create+0x2e5/0x1020
[   80.940433][ T4477]  kstrdup+0x32/0x70
[   80.944369][ T4477]  p9_client_create+0x2e5/0x1020
[   80.949352][ T4477]  ? p9_parse_header+0x3e0/0x3e0
[   80.954327][ T4477]  ? lockdep_softirqs_off+0x430/0x430
[   80.959738][ T4477]  ? lockdep_softirqs_off+0x430/0x430
[   80.965156][ T4477]  ? free_zapped_rcu+0x1f0/0x1f0
[   80.970134][ T4477]  ? __raw_spin_lock_init+0x41/0x100
[   80.975471][ T4477]  v9fs_session_init+0x1bd/0x1770
[   80.980543][ T4477]  ? v9fs_show_options+0x610/0x610
[   80.985711][ T4477]  v9fs_mount+0x72/0x850
[   80.990013][ T4477]  legacy_get_tree+0xe6/0x180
[   80.994732][ T4477]  ? trace_xrep_findroot_block+0x1f0/0x1f0
[   81.000589][ T4477]  vfs_get_tree+0x88/0x270
[   81.005048][ T4477]  do_new_mount+0x247/0xa50
[   81.009602][ T4477]  __se_sys_mount+0x2e3/0x3d0
[   81.014327][ T4477]  ? __x64_sys_mount+0xc0/0xc0
[   81.019136][ T4477]  ? lockdep_hardirqs_on+0x94/0x140
[   81.024394][ T4477]  ? __x64_sys_mount+0x1c/0xc0
[   81.029198][ T4477]  do_syscall_64+0x4c/0xa0
[   81.033645][ T4477]  ? clear_bhb_loop+0x30/0x80
[   81.038358][ T4477]  ? clear_bhb_loop+0x30/0x80
[   81.043071][ T4477]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   81.049005][ T4477] RIP: 0033:0x7f54cd8f8b19
[   81.053465][ T4477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   81.073107][ T4477] RSP: 002b:00007f54cbb4f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   81.081612][ T4477] RAX: ffffffffffffffda RBX: 00007f54cdb7efa0 RCX: 00007f54cd8f8b19
[   81.089626][ T4477] RDX: 0000200000000040 RSI: 0000200000000180 RDI: 00002000000000c0
[   81.097632][ T4477] RBP: 00007f54cd990b70 R08: 0000200000000100 R09: 0000000000000000
[   81.105657][ T4477] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000
[   81.113689][ T4477] R13: 00007f54cdb7f038 R14: 00007f54cdb7efa0 R15: 00007ffcad55b118
[   81.121732][ T4477]  </TASK>
[   82.039836][ T4508] FAULT_INJECTION: forcing a failure.
[   82.039836][ T4508] name failslab, interval 1, probability 5, space 0, times 0
[   82.144204][ T4508] CPU: 0 PID: 4508 Comm: syz.2.45 Not tainted syzkaller #0
[   82.151488][ T4508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   82.161601][ T4508] Call Trace:
[   82.164907][ T4508]  <TASK>
[   82.167869][ T4508]  dump_stack_lvl+0x188/0x250
[   82.172601][ T4508]  ? show_regs_print_info+0x20/0x20
[   82.177834][ T4508]  ? load_image+0x410/0x410
[   82.182375][ T4508]  ? __might_sleep+0xf0/0xf0
[   82.186986][ T4508]  ? __lock_acquire+0x7d40/0x7d40
[   82.192049][ T4508]  should_fail+0x383/0x4b0
[   82.196495][ T4508]  should_failslab+0x5/0x20
[   82.201128][ T4508]  slab_pre_alloc_hook+0x51/0xc0
[   82.206098][ T4508]  ? __d_alloc+0x27/0x6d0
[   82.210454][ T4508]  kmem_cache_alloc+0x3d/0x280
[   82.215250][ T4508]  __d_alloc+0x27/0x6d0
[   82.219431][ T4508]  ? d_alloc_pseudo+0xe/0x70
[   82.224051][ T4508]  d_alloc_pseudo+0x19/0x70
[   82.228600][ T4508]  alloc_file_pseudo+0xe0/0x200
[   82.233493][ T4508]  ? alloc_empty_file_noaccount+0x80/0x80
[   82.239265][ T4508]  ? alloc_fd+0x59e/0x650
[   82.243631][ T4508]  sock_alloc_file+0xb3/0x240
[   82.248357][ T4508]  __sys_socket+0x11d/0x170
[   82.252904][ T4508]  __x64_sys_socket+0x76/0x80
[   82.257616][ T4508]  do_syscall_64+0x4c/0xa0
[   82.262074][ T4508]  ? clear_bhb_loop+0x30/0x80
[   82.266790][ T4508]  ? clear_bhb_loop+0x30/0x80
[   82.271507][ T4508]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   82.277447][ T4508] RIP: 0033:0x7f54cd8f8b19
[   82.281890][ T4508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   82.301570][ T4508] RSP: 002b:00007f54cbb4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   82.310030][ T4508] RAX: ffffffffffffffda RBX: 00007f54cdb7efa0 RCX: 00007f54cd8f8b19
[   82.318040][ T4508] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000018
[   82.326043][ T4508] RBP: 00007f54cd990b70 R08: 0000000000000000 R09: 0000000000000000
[   82.334050][ T4508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   82.342057][ T4508] R13: 00007f54cdb7f038 R14: 00007f54cdb7efa0 R15: 00007ffcad55b118
[   82.350111][ T4508]  </TASK>
[   82.380933][ T4512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.47'.
[   82.599997][ T4518] xt_CT: No such helper "syz1"
[   82.684231][ T4526] capability: warning: `syz.4.53' uses deprecated v2 capabilities in a way that may be insecure
[   82.870701][ T4536] FAULT_INJECTION: forcing a failure.
[   82.870701][ T4536] name failslab, interval 1, probability 5, space 0, times 0
[   82.918575][ T4536] CPU: 1 PID: 4536 Comm: syz.4.57 Not tainted syzkaller #0
[   82.925844][ T4536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   82.935937][ T4536] Call Trace:
[   82.939250][ T4536]  <TASK>
[   82.942216][ T4536]  dump_stack_lvl+0x188/0x250
[   82.946936][ T4536]  ? show_regs_print_info+0x20/0x20
[   82.952176][ T4536]  ? load_image+0x410/0x410
[   82.956723][ T4536]  ? __might_sleep+0xf0/0xf0
[   82.961349][ T4536]  ? __lock_acquire+0x7d40/0x7d40
[   82.966422][ T4536]  should_fail+0x383/0x4b0
[   82.970897][ T4536]  should_failslab+0x5/0x20
[   82.975448][ T4536]  slab_pre_alloc_hook+0x51/0xc0
[   82.980431][ T4536]  ? vfs_parse_fs_string+0xd5/0x170
[   82.985689][ T4536]  __kmalloc_track_caller+0x69/0x330
[   82.991010][ T4536]  ? vfs_parse_fs_string+0xd5/0x170
[   82.996278][ T4536]  kmemdup_nul+0x28/0xa0
[   83.000556][ T4536]  vfs_parse_fs_string+0xd5/0x170
[   83.005634][ T4536]  ? vfs_parse_fs_param+0x420/0x420
[   83.010970][ T4536]  ? legacy_init_fs_context+0x7a/0xb0
[   83.016386][ T4536]  ? alloc_fs_context+0x63c/0x7d0
[   83.021454][ T4536]  do_new_mount+0x1c3/0xa50
[   83.026001][ T4536]  __se_sys_mount+0x2e3/0x3d0
[   83.030718][ T4536]  ? __x64_sys_mount+0xc0/0xc0
[   83.035540][ T4536]  ? lockdep_hardirqs_on+0x94/0x140
[   83.040779][ T4536]  ? __x64_sys_mount+0x1c/0xc0
[   83.045586][ T4536]  do_syscall_64+0x4c/0xa0
[   83.050086][ T4536]  ? clear_bhb_loop+0x30/0x80
[   83.054800][ T4536]  ? clear_bhb_loop+0x30/0x80
[   83.059516][ T4536]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   83.065445][ T4536] RIP: 0033:0x7fc49f30eb19
[   83.069889][ T4536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   83.089533][ T4536] RSP: 002b:00007fc49d565028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   83.097989][ T4536] RAX: ffffffffffffffda RBX: 00007fc49f594fa0 RCX: 00007fc49f30eb19
[   83.105994][ T4536] RDX: 0000200000000040 RSI: 0000200000000180 RDI: 00002000000000c0
[   83.113998][ T4536] RBP: 00007fc49f3a6b70 R08: 0000200000000100 R09: 0000000000000000
[   83.122029][ T4536] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000
[   83.130030][ T4536] R13: 00007fc49f595038 R14: 00007fc49f594fa0 R15: 00007ffca7bc9698
[   83.138054][ T4536]  </TASK>
[   83.611160][ T4559] loop5: detected capacity change from 0 to 7
[   83.663420][ T4208] Dev loop5: unable to read RDB block 7
[   83.669257][ T4208]  loop5: unable to read partition table
[   83.695410][ T4208] loop5: partition table beyond EOD, truncated
[   83.742719][ T4559] Dev loop5: unable to read RDB block 7
[   83.768894][ T4559]  loop5: unable to read partition table
[   83.795435][ T4559] loop5: partition table beyond EOD, truncated
[   83.845770][ T4527] loop1: detected capacity change from 0 to 32768
[   83.852361][ T4559] loop_reread_partitions: partition scan of loop5 (���W������ý�*���	���%���4FLQk݊5) failed (rc=-5)
[   83.932317][ T4527] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.51 (4527)
[   84.012457][ T4527] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[   84.096716][ T4527] BTRFS info (device loop1): using free space tree
[   84.136729][ T4527] BTRFS info (device loop1): has skinny extents
[   84.362232][ T4597] FAULT_INJECTION: forcing a failure.
[   84.362232][ T4597] name failslab, interval 1, probability 5, space 0, times 0
[   84.435457][ T4597] CPU: 0 PID: 4597 Comm: syz.0.69 Not tainted syzkaller #0
[   84.442721][ T4597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   84.452818][ T4597] Call Trace:
[   84.456176][ T4597]  <TASK>
[   84.459285][ T4597]  dump_stack_lvl+0x188/0x250
[   84.464017][ T4597]  ? show_regs_print_info+0x20/0x20
[   84.469256][ T4597]  ? load_image+0x410/0x410
[   84.473808][ T4597]  ? __might_sleep+0xf0/0xf0
[   84.478444][ T4597]  ? __lock_acquire+0x7d40/0x7d40
[   84.483508][ T4597]  should_fail+0x383/0x4b0
[   84.488005][ T4597]  should_failslab+0x5/0x20
[   84.492549][ T4597]  slab_pre_alloc_hook+0x51/0xc0
[   84.497554][ T4597]  ? __d_alloc+0x27/0x6d0
[   84.501916][ T4597]  kmem_cache_alloc+0x3d/0x280
[   84.506721][ T4597]  __d_alloc+0x27/0x6d0
[   84.510946][ T4597]  ? d_alloc_pseudo+0xe/0x70
[   84.515577][ T4597]  d_alloc_pseudo+0x19/0x70
[   84.520120][ T4597]  alloc_file_pseudo+0xe0/0x200
[   84.525012][ T4597]  ? alloc_empty_file_noaccount+0x80/0x80
[   84.530931][ T4597]  ? alloc_fd+0x59e/0x650
[   84.535322][ T4597]  sock_alloc_file+0xb3/0x240
[   84.540043][ T4597]  __sys_socket+0x11d/0x170
[   84.544588][ T4597]  __x64_sys_socket+0x76/0x80
[   84.549302][ T4597]  do_syscall_64+0x4c/0xa0
[   84.553756][ T4597]  ? clear_bhb_loop+0x30/0x80
[   84.558483][ T4597]  ? clear_bhb_loop+0x30/0x80
[   84.563199][ T4597]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   84.569132][ T4597] RIP: 0033:0x7f87eec8fb19
[   84.573580][ T4597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   84.593220][ T4597] RSP: 002b:00007f87ecee6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   84.601681][ T4597] RAX: ffffffffffffffda RBX: 00007f87eef15fa0 RCX: 00007f87eec8fb19
[   84.609705][ T4597] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000018
[   84.617742][ T4597] RBP: 00007f87eed27b70 R08: 0000000000000000 R09: 0000000000000000
[   84.625744][ T4597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   84.633746][ T4597] R13: 00007f87eef16038 R14: 00007f87eef15fa0 R15: 00007ffcdecabc08
[   84.641766][ T4597]  </TASK>
[   84.684044][ T4527] BTRFS info (device loop1): enabling ssd optimizations
[   84.742006][ T4527] jffs2: notice: (4527) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[   85.186525][ T4208] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (4208)
[   85.495274][ T4635] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   86.069525][ T1111] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   86.278440][ T1111] usb 2-1: device descriptor read/64, error -71
[   86.548329][ T1111] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   86.562598][   T21] cfg80211: failed to load regulatory.db
[   86.744105][ T1111] usb 2-1: device descriptor read/64, error -71
[   86.868406][ T4681] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   86.869419][ T1111] usb usb2-port1: attempt power cycle
[   87.044805][ T4676] loop0: detected capacity change from 0 to 32768
[   87.078573][ T4683] netlink: 104 bytes leftover after parsing attributes in process `syz.4.87'.
[   87.144397][ T4674] jffs2: notice: (4674) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[   87.338372][ T1111] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   87.428572][ T1111] usb 2-1: device descriptor read/8, error -71
[   87.538611][ T4710] capability: warning: `syz.0.95' uses 32-bit capabilities (legacy support in use)
[   87.660699][ T4709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.105'.
[   87.698376][ T1111] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   87.788554][ T1111] usb 2-1: device descriptor read/8, error -71
[   87.913242][ T1111] usb usb2-port1: unable to enumerate USB device
[   88.911959][ T4762] Zero length message leads to an empty skb
[   89.049583][ T4772] loop2: detected capacity change from 0 to 512
[   89.074601][ T4756] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5
[   89.137986][ T4774] loop1: detected capacity change from 0 to 512
[   89.262055][ T4772] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000d4d,grpquota,,errors=continue. Quota mode: writeback.
[   89.311566][ T4747] loop4: detected capacity change from 0 to 32768
[   89.319463][ T4772] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.394484][ T4774] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback.
[   89.408525][ T4774] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.437656][ T4747] jffs2: notice: (4747) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[   89.489039][   T26] audit: type=1326 audit(1794146074.552:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4783 comm="syz.0.115" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87eec8fb19 code=0x7ffc0000
[   89.601614][   T26] audit: type=1326 audit(1794146074.562:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4783 comm="syz.0.115" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87eec8fb19 code=0x7ffc0000
[   89.757171][   T26] audit: type=1326 audit(1794146074.562:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4783 comm="syz.0.115" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87eec8fb19 code=0x7ffc0000
[   89.831918][   T26] audit: type=1326 audit(1794146074.562:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4783 comm="syz.0.115" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f87eec8fb19 code=0x7ffc0000
[   89.860384][ T4801] loop4: detected capacity change from 0 to 512
[   89.899008][ T4801] =======================================================
[   89.899008][ T4801] WARNING: The mand mount option has been deprecated and
[   89.899008][ T4801]          and is ignored by this kernel. Remove the mand
[   89.899008][ T4801]          option from the mount to silence this warning.
[   89.899008][ T4801] =======================================================
[   89.982284][   T26] audit: type=1326 audit(1794146074.562:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4783 comm="syz.0.115" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87eec8fb19 code=0x7ffc0000
[   90.101945][   T26] audit: type=1326 audit(1794146074.562:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4783 comm="syz.0.115" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87eec8fb19 code=0x7ffc0000
[   90.154713][ T4808] loop0: detected capacity change from 0 to 4096
[   90.165001][ T4801] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   90.179664][   T26] audit: type=1326 audit(1794146074.572:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4783 comm="syz.0.115" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87eec8fb19 code=0x7ffc0000
[   90.204857][   T26] audit: type=1326 audit(1794146074.572:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4783 comm="syz.0.115" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87eec8fb19 code=0x7ffc0000
[   90.229518][   T26] audit: type=1326 audit(1794146074.572:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4783 comm="syz.0.115" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f87eec8fb19 code=0x7ffc0000
[   90.255534][   T26] audit: type=1326 audit(1794146074.572:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4783 comm="syz.0.115" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87eec8fb19 code=0x7ffc0000
[   90.297586][ T4801] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   90.319153][ T4808] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[   90.379000][ T4801] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 32: comm syz.4.119: path /26/bus/file0: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[   90.489056][ T4825] netlink: 52 bytes leftover after parsing attributes in process `syz.1.127'.
[   90.590127][ T4826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.127'.
[   90.932904][ T4842] loop0: detected capacity change from 0 to 128
[   91.010752][ T4842] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   91.083635][ T4842] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   91.536296][ T4829] loop3: detected capacity change from 0 to 32768
[   91.633044][ T4829] jffs2: notice: (4829) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[   91.748630][   T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   91.756935][ T4874] loop2: detected capacity change from 0 to 128
[   91.903391][ T4874] attempt to access beyond end of device
[   91.903391][ T4874] loop2: rw=1, want=146, limit=128
[   92.007623][ T1257] attempt to access beyond end of device
[   92.007623][ T1257] loop2: rw=1, want=212, limit=128
[   92.121569][   T21] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   92.157620][   T21] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   92.193949][ T4895] loop2: detected capacity change from 0 to 512
[   92.208346][   T21] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   92.253055][ T4895] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   92.269497][   T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.308124][   T21] usb 1-1: config 0 descriptor??
[   92.352687][ T4897] FAULT_INJECTION: forcing a failure.
[   92.352687][ T4897] name failslab, interval 1, probability 5, space 0, times 0
[   92.373394][   T21] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[   92.381192][ T4897] CPU: 0 PID: 4897 Comm: syz.4.146 Not tainted syzkaller #0
[   92.388616][ T4897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   92.398576][ T4895] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,norecovery,dioread_nolock,resgid=0x0000000000000000,,errors=continue. Quota mode: writeback.
[   92.398910][ T4895] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.417621][ T4897] Call Trace:
[   92.417663][ T4897]  <TASK>
[   92.417672][ T4897]  dump_stack_lvl+0x188/0x250
[   92.417706][ T4897]  ? show_regs_print_info+0x20/0x20
[   92.417732][ T4897]  ? load_image+0x410/0x410
[   92.417760][ T4897]  ? __might_sleep+0xf0/0xf0
[   92.417781][ T4897]  ? __lock_acquire+0x7d40/0x7d40
[   92.417811][ T4897]  should_fail+0x383/0x4b0
[   92.417838][ T4897]  should_failslab+0x5/0x20
[   92.417859][ T4897]  slab_pre_alloc_hook+0x51/0xc0
[   92.417884][ T4897]  kmem_cache_alloc_node+0x47/0x2c0
[   92.417904][ T4897]  ? __alloc_skb+0xf4/0x750
[   92.417930][ T4897]  __alloc_skb+0xf4/0x750
[   92.417955][ T4897]  __ip6_append_data+0x26b7/0x38f0
[   92.418021][ T4897]  ? ip6_setup_cork+0x11e0/0x11e0
[   92.418048][ T4897]  ? ip6_setup_cork+0xc68/0x11e0
[   92.418077][ T4897]  ip6_append_data+0x1d4/0x310
[   92.418108][ T4897]  ? rawv6_send_hdrinc+0x1650/0x1650
[   92.418137][ T4897]  ? rawv6_send_hdrinc+0x1650/0x1650
[   92.517395][ T4897]  rawv6_sendmsg+0x1220/0x1710
[   92.522226][ T4897]  ? __might_sleep+0xf0/0xf0
[   92.526875][ T4897]  ? compat_rawv6_ioctl+0x60/0x60
[   92.531951][ T4897]  ? aa_sk_perm+0x7dc/0x910
[   92.536506][ T4897]  ? tomoyo_socket_sendmsg_permission+0x212/0x2f0
[   92.542964][ T4897]  ? sock_rps_record_flow+0x17/0x3b0
[   92.548296][ T4897]  ? inet_sendmsg+0x7a/0x2a0
[   92.552913][ T4897]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[   92.558243][ T4897]  __sys_sendto+0x46d/0x620
[   92.562776][ T4897]  ? __ia32_sys_getpeername+0x80/0x80
[   92.568207][ T4897]  ? lock_chain_count+0x20/0x20
[   92.573105][ T4897]  __x64_sys_sendto+0xda/0xf0
[   92.577820][ T4897]  do_syscall_64+0x4c/0xa0
[   92.582279][ T4897]  ? clear_bhb_loop+0x30/0x80
[   92.586989][ T4897]  ? clear_bhb_loop+0x30/0x80
[   92.591706][ T4897]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   92.597638][ T4897] RIP: 0033:0x7fc49f30eb19
[   92.602086][ T4897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   92.621851][ T4897] RSP: 002b:00007fc49d565028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[   92.630307][ T4897] RAX: ffffffffffffffda RBX: 00007fc49f594fa0 RCX: 00007fc49f30eb19
[   92.635194][   T21] usb 1-1: USB disconnect, device number 2
[   92.638329][ T4897] RDX: 000000000000fdef RSI: 0000200000000340 RDI: 0000000000000004
[   92.638365][ T4897] RBP: 00007fc49f3a6b70 R08: 0000200000000380 R09: 0000000000000080
[   92.638381][ T4897] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000
[   92.638410][ T4897] R13: 00007fc49f595038 R14: 00007fc49f594fa0 R15: 00007ffca7bc9698
[   92.638442][ T4897]  </TASK>
[   92.966211][ T4903] loop2: detected capacity change from 0 to 2048
[   92.991891][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   93.007999][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   93.035184][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   93.058063][ T4903] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   93.091001][ T4904] device bridge_slave_0 left promiscuous mode
[   93.098650][ T4904] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.174381][ T4903] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   93.206808][ T4906] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   93.238802][ T4906] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal
[   93.309877][ T4904] device bridge_slave_1 left promiscuous mode
[   93.329140][ T4904] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.364838][ T4904] bond0: (slave bond_slave_0): Releasing backup interface
[   93.448843][ T4904] bond0: (slave bond_slave_1): Releasing backup interface
[   93.555012][ T4904] team0: Port device team_slave_0 removed
[   93.613586][ T4904] team0: Port device team_slave_1 removed
[   93.652467][ T4904] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.660706][ T4904] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.683672][ T4904] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.791310][ T4904] batman_adv: batadv0: Removing interface: batadv_slave_1
[   94.097702][ T4904] syz.0.134 (4904) used greatest stack depth: 19600 bytes left
[   94.156835][ T4259] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   94.168774][ T4916] FAULT_INJECTION: forcing a failure.
[   94.168774][ T4916] name failslab, interval 1, probability 5, space 0, times 0
[   94.242819][ T4916] CPU: 0 PID: 4916 Comm: syz.2.152 Not tainted syzkaller #0
[   94.250204][ T4916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   94.260287][ T4916] Call Trace:
[   94.263592][ T4916]  <TASK>
[   94.266547][ T4916]  dump_stack_lvl+0x188/0x250
[   94.271266][ T4916]  ? show_regs_print_info+0x20/0x20
[   94.276496][ T4916]  ? load_image+0x410/0x410
[   94.281039][ T4916]  ? __might_sleep+0xf0/0xf0
[   94.286050][ T4916]  ? __lock_acquire+0x7d40/0x7d40
[   94.291122][ T4916]  should_fail+0x383/0x4b0
[   94.295589][ T4916]  should_failslab+0x5/0x20
[   94.300126][ T4916]  slab_pre_alloc_hook+0x51/0xc0
[   94.305101][ T4916]  ? __d_alloc+0x27/0x6d0
[   94.309468][ T4916]  kmem_cache_alloc+0x3d/0x280
[   94.314271][ T4916]  ? __lock_acquire+0x7d40/0x7d40
[   94.319338][ T4916]  __d_alloc+0x27/0x6d0
[   94.323543][ T4916]  d_alloc_parallel+0x7b/0x1320
[   94.328427][ T4916]  ? __d_lookup+0x6a4/0x760
[   94.332979][ T4916]  path_openat+0x985/0x2fb0
[   94.337552][ T4916]  ? do_filp_open+0x400/0x400
[   94.342281][ T4916]  do_filp_open+0x1df/0x400
[   94.346826][ T4916]  ? vfs_tmpfile+0x300/0x300
[   94.351475][ T4916]  ? _raw_spin_unlock+0x24/0x40
[   94.356379][ T4916]  ? alloc_fd+0x59e/0x650
[   94.360776][ T4916]  do_sys_openat2+0x14b/0x500
[   94.365488][ T4916]  ? __lock_acquire+0x7d40/0x7d40
[   94.370548][ T4916]  ? do_sys_open+0xe0/0xe0
[   94.374993][ T4916]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[   94.381012][ T4916]  ? lock_chain_count+0x20/0x20
[   94.385912][ T4916]  __x64_sys_openat+0x135/0x160
[   94.390813][ T4916]  do_syscall_64+0x4c/0xa0
[   94.395262][ T4916]  ? clear_bhb_loop+0x30/0x80
[   94.399976][ T4916]  ? clear_bhb_loop+0x30/0x80
[   94.404710][ T4916]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   94.410634][ T4916] RIP: 0033:0x7f54cd8b934e
[   94.415082][ T4916] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   94.434720][ T4916] RSP: 002b:00007f54cbb4eb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   94.443172][ T4916] RAX: ffffffffffffffda RBX: 00007f54cbb4f6c0 RCX: 00007f54cd8b934e
[   94.451174][ T4916] RDX: 0000000000084000 RSI: 00007f54cbb4ec00 RDI: ffffffffffffff9c
[   94.459173][ T4916] RBP: 00007f54cbb4ec00 R08: 0000000000000000 R09: 0000000000000000
[   94.467167][ T4916] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[   94.475171][ T4916] R13: 00007f54cdb7f038 R14: 00007f54cdb7efa0 R15: 00007ffcad55b118
[   94.483185][ T4916]  </TASK>
[   94.904539][ T4259] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   94.998864][ T4932] set_capacity_and_notify: 1 callbacks suppressed
[   94.998880][ T4932] loop4: detected capacity change from 0 to 512
[   95.065690][ T4934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.156'.
[   95.091213][ T4929] fido_id[4929]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   95.171845][ T4932] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.155: bad orphan inode 13
[   95.220778][ T4941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.157'.
[   95.261202][ T4932] ext4_test_bit(bit=12, block=4) = 1
[   95.266582][ T4932] is_bad_inode(inode)=0
[   95.277257][ T4932] NEXT_ORPHAN(inode)=0
[   95.287103][ T4932] max_ino=32
[   95.290422][ T4932] i_nlink=1
[   95.293657][ T4932] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   95.364429][ T4921] loop0: detected capacity change from 0 to 32768
[   95.440011][ T4918] jffs2: notice: (4918) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[   95.505137][ T4951] loop4: detected capacity change from 0 to 512
[   95.603612][ T4258] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   95.626595][ T4951] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   95.655158][ T4951] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.828494][ T4258] usb 3-1: device descriptor read/64, error -71
[   96.098390][ T4258] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   96.137574][ T4985] xt_hashlimit: size too large, truncated to 1048576
[   96.162822][ T4985] xt_hashlimit: max too large, truncated to 1048576
[   96.288307][ T4258] usb 3-1: device descriptor read/64, error -71
[   96.375278][ T4998] FAULT_INJECTION: forcing a failure.
[   96.375278][ T4998] name failslab, interval 1, probability 5, space 0, times 0
[   96.400036][ T4998] CPU: 0 PID: 4998 Comm: syz.4.177 Not tainted syzkaller #0
[   96.407392][ T4998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   96.410357][ T4258] usb usb3-port1: attempt power cycle
[   96.417472][ T4998] Call Trace:
[   96.426168][ T4998]  <TASK>
[   96.429121][ T4998]  dump_stack_lvl+0x188/0x250
[   96.433875][ T4998]  ? show_regs_print_info+0x20/0x20
[   96.439108][ T4998]  ? load_image+0x410/0x410
[   96.443652][ T4998]  ? __might_sleep+0xf0/0xf0
[   96.448280][ T4998]  ? __lock_acquire+0x7d40/0x7d40
[   96.453364][ T4998]  should_fail+0x383/0x4b0
[   96.457840][ T4998]  should_failslab+0x5/0x20
[   96.462387][ T4998]  slab_pre_alloc_hook+0x51/0xc0
[   96.467359][ T4998]  ? ptlock_alloc+0x1c/0x60
[   96.471921][ T4998]  kmem_cache_alloc+0x3d/0x280
[   96.476720][ T4998]  ptlock_alloc+0x1c/0x60
[   96.481077][ T4998]  pte_alloc_one+0xc0/0x310
[   96.485608][ T4998]  ? rcu_lock_release+0x20/0x20
[   96.490489][ T4998]  ? count_memcg_event_mm+0x324/0x370
[   96.495910][ T4998]  ? remove_device_exclusive_entry+0xac0/0xac0
[   96.502091][ T4998]  ? userfaultfd_unmap_complete+0x28f/0x310
[   96.508024][ T4998]  ? verify_lock_unused+0x140/0x140
[   96.513288][ T4998]  __pte_alloc+0x21/0x150
[   96.517680][ T4998]  handle_mm_fault+0x39d9/0x4440
[   96.522669][ T4998]  ? get_page+0xe0/0xe0
[   96.526877][ T4998]  ? vmacache_find+0x4f0/0x590
[   96.531676][ T4998]  ? vmacache_update+0xa0/0x100
[   96.536573][ T4998]  ? find_vma+0x1df/0x230
[   96.540939][ T4998]  do_user_addr_fault+0x494/0xc90
[   96.546018][ T4998]  exc_page_fault+0x60/0x100
[   96.550642][ T4998]  ? clear_bhb_loop+0x30/0x80
[   96.555495][ T4998]  asm_exc_page_fault+0x22/0x30
[   96.560369][ T4998] RIP: 0033:0x7fc49f1c544e
[   96.564817][ T4998] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01
[   96.584476][ T4998] RSP: 002b:00007fc49d564470 EFLAGS: 00010246
[   96.590575][ T4998] RAX: 0000000000000001 RBX: 00007fc49d564530 RCX: 0000000000000101
[   96.598701][ T4998] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007fc49d5645d0
[   96.606706][ T4998] RBP: 0000000000000102 R08: 00007fc495145000 R09: 0000000000000000
[   96.614712][ T4998] R10: 0000000000000000 R11: 00007fc49d564540 R12: 0000000000000001
[   96.622733][ T4998] R13: 00007fc49f3c72e0 R14: 0000000000000000 R15: 00007fc49d5645d0
[   96.630770][ T4998]  </TASK>
[   96.676519][ T4998] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[   96.713807][ T4998] loop4: detected capacity change from 0 to 1024
[   96.830341][ T4998] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   96.848472][ T4258] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   96.894352][ T4998] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000003,noinit_itable,noblock_validity,nouid32,dioread_nolock,nodiscard,sysvgroups,jqfmt=vfsold,minixdf,auto_da_alloc=0x0000000000000800,,errors=continue. Quota mode: none.
[   96.938526][ T4258] usb 3-1: device descriptor read/8, error -71
[   96.968505][ T4998] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.043563][ T4983] loop0: detected capacity change from 0 to 32768
[   97.097858][ T4983] jffs2: notice: (4983) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[   97.208711][ T4258] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   97.308727][ T4258] usb 3-1: device descriptor read/8, error -71
[   97.399676][ T5020] loop4: detected capacity change from 0 to 512
[   97.448874][ T4258] usb usb3-port1: unable to enumerate USB device
[   98.428041][ T5020] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback.
[   98.484862][ T5035] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.185'.
[   98.492538][ T5020] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   98.650591][   T26] kauditd_printk_skb: 5 callbacks suppressed
[   98.650607][   T26] audit: type=1804 audit(1794146083.722:17): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.181" name="/newroot/43/bus/bus" dev="loop4" ino=18 res=1 errno=0
[   98.679618][ T4620] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   98.697791][ T5045] EXT4-fs error (device loop4): ext4_lookup:1860: inode #12: comm syz.4.181: iget: bad i_size value: 2533274857506816
[   98.775092][ T5054] loop2: detected capacity change from 0 to 512
[   98.837306][ T5058] loop0: detected capacity change from 0 to 1024
[   98.907833][ T5045] EXT4-fs error (device loop4): ext4_lookup:1860: inode #12: comm syz.4.181: iget: bad i_size value: 2533274857506816
[   99.114131][ T5058] EXT4-fs (loop0): Ignoring removed orlov option
[   99.120788][ T4620] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   99.140901][ T5054] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,errors=remount-ro,usrjquota=,nobarrier,usrquota,. Quota mode: writeback.
[   99.240306][ T4620] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   99.264934][ T5054] EXT4-fs error (device loop2): ext4_lookup:1860: inode #12: comm syz.2.190: iget: bad i_size value: 2533274857506816
[   99.293246][ T5058] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,bsddf,noblock_validity,block_validity,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,i_version,jqfmt=vfsold,min_batch_time=0x0000000000000000,,errors=continue. Quota mode: none.
[   99.317052][ T5068] process 'syz.2.190' launched './file1' with NULL argv: empty string added
[   99.350711][   T26] audit: type=1804 audit(1794146084.422:18): pid=5069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.181" name="/newroot/43/bus/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=19 res=1 errno=0
[   99.778773][ T4620] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[   99.794294][ T4620] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[   99.824574][ T4620] usb 4-1: Product: syz
[   99.835508][ T4620] usb 4-1: Manufacturer: syz
[   99.851938][ T4620] usb 4-1: SerialNumber: syz
[   99.885467][ T4620] usb 4-1: config 0 descriptor??
[  100.181432][ T4620] usb 4-1: USB disconnect, device number 2
[  100.297906][ T5085] loop0: detected capacity change from 0 to 4096
[  100.357130][ T5085] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  101.046964][ T5077] loop2: detected capacity change from 0 to 32768
[  101.105045][ T5111] loop3: detected capacity change from 0 to 512
[  101.168900][ T5077] jffs2: notice: (5077) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  101.210022][ T5111] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.201: iget: bad extended attribute block 134217728
[  101.236759][ T5111] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.201: couldn't read orphan inode 15 (err -117)
[  101.257489][ T5111] EXT4-fs (loop3): mounted filesystem without journal. Opts: prjquota,,errors=continue. Quota mode: writeback.
[  102.767877][ T5164] Unsupported ieee802154 address type: 0
[  102.879577][ T5168] FAULT_INJECTION: forcing a failure.
[  102.879577][ T5168] name failslab, interval 1, probability 5, space 0, times 0
[  102.924627][ T5168] CPU: 0 PID: 5168 Comm: syz.0.218 Not tainted syzkaller #0
[  102.931986][ T5168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  102.937581][ T5172] loop4: detected capacity change from 0 to 512
[  102.942116][ T5168] Call Trace:
[  102.942138][ T5168]  <TASK>
[  102.942148][ T5168]  dump_stack_lvl+0x188/0x250
[  102.942184][ T5168]  ? show_regs_print_info+0x20/0x20
[  102.942211][ T5168]  ? load_image+0x410/0x410
[  102.942240][ T5168]  ? __might_sleep+0xf0/0xf0
[  102.973740][ T5168]  ? __lock_acquire+0x7d40/0x7d40
[  102.978870][ T5168]  should_fail+0x383/0x4b0
[  102.983337][ T5168]  should_failslab+0x5/0x20
[  102.987869][ T5168]  slab_pre_alloc_hook+0x51/0xc0
[  102.992845][ T5168]  __kmalloc+0x6b/0x340
[  102.997039][ T5168]  ? tomoyo_realpath_from_path+0xed/0x5e0
[  103.002803][ T5168]  tomoyo_realpath_from_path+0xed/0x5e0
[  103.008406][ T5168]  tomoyo_check_open_permission+0x1eb/0x410
[  103.014340][ T5168]  ? tomoyo_check_path_number_acl+0x280/0x280
[  103.020474][ T5168]  ? __lock_acquire+0x7d40/0x7d40
[  103.025530][ T5168]  ? __rwlock_init+0x140/0x140
[  103.030333][ T5168]  ? hook_file_open+0xf1/0x230
[  103.035128][ T5168]  ? tomoyo_file_open+0xe9/0x170
[  103.040131][ T5168]  security_file_open+0x5e/0xa0
[  103.045049][ T5168]  do_dentry_open+0x321/0xf90
[  103.049759][ T5168]  ? vfs_open+0x2b/0x80
[  103.053953][ T5168]  path_openat+0x2718/0x2fb0
[  103.058611][ T5168]  ? do_filp_open+0x400/0x400
[  103.063377][ T5168]  do_filp_open+0x1df/0x400
[  103.067924][ T5168]  ? vfs_tmpfile+0x300/0x300
[  103.072567][ T5168]  ? _raw_spin_unlock+0x24/0x40
[  103.077469][ T5168]  ? alloc_fd+0x59e/0x650
[  103.081838][ T5168]  do_sys_openat2+0x14b/0x500
[  103.086551][ T5168]  ? __lock_acquire+0x7d40/0x7d40
[  103.091617][ T5168]  ? do_sys_open+0xe0/0xe0
[  103.096069][ T5168]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  103.102124][ T5168]  ? lock_chain_count+0x20/0x20
[  103.107026][ T5168]  __x64_sys_openat+0x135/0x160
[  103.111924][ T5168]  do_syscall_64+0x4c/0xa0
[  103.116375][ T5168]  ? clear_bhb_loop+0x30/0x80
[  103.121095][ T5168]  ? clear_bhb_loop+0x30/0x80
[  103.125811][ T5168]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  103.131739][ T5168] RIP: 0033:0x7f87eec8fb19
[  103.136186][ T5168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  103.155825][ T5168] RSP: 002b:00007f87ecee6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  103.164275][ T5168] RAX: ffffffffffffffda RBX: 00007f87eef15fa0 RCX: 00007f87eec8fb19
[  103.172277][ T5168] RDX: 0000000000040040 RSI: 0000200000000840 RDI: ffffffffffffff9c
[  103.180279][ T5168] RBP: 00007f87eed27b70 R08: 0000000000000000 R09: 0000000000000000
[  103.188291][ T5168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  103.196295][ T5168] R13: 00007f87eef16038 R14: 00007f87eef15fa0 R15: 00007ffcdecabc08
[  103.204313][ T5168]  </TASK>
[  103.241448][ T5168] ERROR: Out of memory at tomoyo_realpath_from_path.
[  103.275497][ T5172] FAT-fs (loop4): error, corrupted file size (i_pos 51, 8960)
[  103.545438][ T5148] loop3: detected capacity change from 0 to 32768
[  103.651619][ T5148] jffs2: notice: (5148) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  103.853751][ T5194] block device autoloading is deprecated and will be removed.
[  103.901713][ T5194] md: md1 stopped.
[  103.916407][ T5194] md: md1 stopped.
[  104.728162][ T5203] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  104.735043][ T5203] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  104.809781][ T5203] vhci_hcd vhci_hcd.0: Device attached
[  105.102291][ T5220] loop2: detected capacity change from 0 to 8192
[  105.184728][ T5220] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  105.228603][ T5220] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  105.359034][ T4620] usb 36-1: SetAddress Request (2) to port 0
[  105.567586][ T4620] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd
[  106.118222][    C1] sched: RT throttling activated
[  106.305580][ T5231] netlink: 20 bytes leftover after parsing attributes in process `syz.4.234'.
[  106.608407][ T5204] vhci_hcd: connection reset by peer
[  106.648828][  T155] vhci_hcd: stop threads
[  106.653916][  T155] vhci_hcd: release socket
[  106.686922][  T155] vhci_hcd: disconnect device
[  107.372306][ T5254] loop3: detected capacity change from 0 to 1024
[  107.482438][ T5254] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  107.528545][ T5254] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  107.659566][ T5254] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000000003,errors=remount-ro,noblock_validity,nouid32,dioread_nolock,norecovery,nomblk_io_submit,delalloc,nolazytime,. Quota mode: none.
[  107.808483][ T5254] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  107.866067][ T5254] EXT4-fs error (device loop3): ext4_free_blocks:6231: comm syz.3.240: Freeing blocks not in datazone - block = 0, count = 16
[  107.912890][ T5254] EXT4-fs (loop3): Remounting filesystem read-only
[  108.017097][ T5261] loop0: detected capacity change from 0 to 32768
[  108.138156][ T5257] jffs2: notice: (5257) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  108.566608][ T5303] loop3: detected capacity change from 0 to 128
[  108.651887][ T5303] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  108.705109][ T5303] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  109.333988][ T1111] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  109.351130][ T1111] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  109.380892][ T5316] loop2: detected capacity change from 0 to 32768
[  109.518682][ T5316] jffs2: notice: (5316) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  109.537147][ T5349] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  110.056609][ T5395] loop1: detected capacity change from 0 to 128
[  110.200800][ T4189] FAT-fs (loop1): error, invalid access to FAT (entry 0xffff0000)
[  110.211386][ T4189] FAT-fs (loop1): Filesystem has been set read-only
[  110.224441][ T4189] FAT-fs (loop1): error, corrupted directory (invalid entries)
[  110.235159][ T4189] FAT-fs (loop1): error, corrupted directory (invalid entries)
[  110.686499][  T155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.714021][ T5420] program syz.2.289 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  110.794569][  T155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.902767][  T155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.019492][ T5400] loop0: detected capacity change from 0 to 32768
[  111.027278][  T155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.038643][ T4620] usb 36-1: device descriptor read/8, error -110
[  111.159154][ T5400] jffs2: notice: (5400) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  111.467356][ T5440] loop2: detected capacity change from 0 to 8192
[  111.478491][ T4620] usb usb36-port1: Cannot enable. Maybe the USB cable is bad?
[  111.490229][ T4620] usb usb36-port1: attempt power cycle
[  111.685005][ T5449] rxe_eth0 speed is unknown, defaulting to 1000
[  111.848602][ T4620] usb usb36-port1: Cannot enable. Maybe the USB cable is bad?
[  112.691967][ T5364] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  112.797777][ T4620] usb usb36-port1: Cannot enable. Maybe the USB cable is bad?
[  112.806315][ T4620] usb usb36-port1: unable to enumerate USB device
[  113.293729][ T5498] loop3: detected capacity change from 0 to 512
[  113.318121][ T5492] ptp ptp0: new virtual clock ptp1
[  113.379793][ T5498] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback.
[  113.379992][ T5498] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.387490][ T5492] ptp ptp0: new virtual clock ptp2
[  113.414558][ T5492] ptp ptp0: new virtual clock ptp3
[  113.449372][ T5492] ptp ptp0: new virtual clock ptp4
[  113.455657][ T5492] ptp ptp0: guarantee physical clock free running
[  113.508457][ T5499] ptp ptp0: delete virtual clock ptp4
[  113.518469][ T1111] Bluetooth: hci1: command 0x0409 tx timeout
[  113.604821][ T5499] ptp ptp0: delete virtual clock ptp3
[  113.617604][ T5449] chnl_net:caif_netlink_parms(): no params data found
[  113.659836][ T5478] loop0: detected capacity change from 0 to 32768
[  113.680857][ T4258] 
[  113.683559][ T4258] =============================
[  113.688484][ T4258] WARNING: suspicious RCU usage
[  113.693381][ T4258] syzkaller #0 Not tainted
[  113.697819][ T4258] -----------------------------
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  113.702732][ T4258] net/sched/sch_api.c:304 suspicious rcu_dereference_protected() usage!
[  113.711341][ T4258] 
[  113.711341][ T4258] other info that might help us debug this:
[  113.711341][ T4258] 
[  113.721627][ T4258] 
[  113.721627][ T4258] rcu_scheduler_active = 2, debug_locks = 1
[  113.729754][ T4258] 8 locks held by kworker/1:6/4258:
[  113.735001][ T4258]  #0: ffff888062628538 ((wq_completion)wg-crypt-wg0#3){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0
[  113.746123][ T4258]  #1: ffffc900030cfd00 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0
[  113.756799][ T5499] ptp ptp0: delete virtual clock ptp2
[  113.758688][ T4258]  #2: ffff888060470178 (&peer->endpoint_lock){++-.}-{2:2}, at: wg_socket_send_skb_to_peer+0x50/0x1c0
[  113.758824][ T4258]  #3: ffffffff8d11f000 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30
[  113.758901][ T4258]  #4: ffffffff8d11f000 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30
[  113.794487][ T4258]  #5: ffffffff8d11f000 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30
[  113.804159][ T4258]  #6: ffff888078b50908 (&sch->q.lock){+...}-{2:2}, at: __dev_queue_xmit+0xa2b/0x2e50
[  113.813817][ T4258]  #7: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  113.823226][ T4258] 
[  113.823226][ T4258] stack backtrace:
[  113.829215][ T4258] CPU: 1 PID: 4258 Comm: kworker/1:6 Not tainted syzkaller #0
[  113.836704][ T4258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  113.846785][ T4258] Workqueue: wg-crypt-wg0 wg_packet_tx_worker
[  113.852890][ T4258] Call Trace:
[  113.856219][ T4258]  <TASK>
[  113.859182][ T4258]  dump_stack_lvl+0x188/0x250
[  113.863898][ T4258]  ? load_image+0x410/0x410
[  113.868462][ T4258]  ? show_regs_print_info+0x20/0x20
[  113.873730][ T4258]  ? lockdep_rcu_suspicious+0x110/0x180
[  113.879313][ T4258]  qdisc_lookup+0xa6/0x640
[  113.883767][ T4258]  qdisc_tree_reduce_backlog+0x188/0x480
[  113.889448][ T4258]  pfifo_tail_enqueue+0x386/0x500
[  113.894505][ T4258]  tbf_enqueue+0x225/0x6e0
[  113.898985][ T4258]  ? __rwlock_init+0x140/0x140
[  113.903780][ T4258]  dev_qdisc_enqueue+0x48/0x210
[  113.908706][ T4258]  __dev_queue_xmit+0xbde/0x2e50
[  113.913680][ T4258]  ? ipv6_ext_hdr+0x30/0x30
[  113.918254][ T4258]  ? dev_queue_xmit+0x20/0x20
[  113.922573][ T5499] ptp ptp0: guarantee physical clock free running
[  113.923396][ T4258]  ? mark_lock+0x94/0x320
[  113.923428][ T4258]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  113.940205][ T4258]  ? lock_chain_count+0x20/0x20
[  113.945093][ T4258]  ? __ipv6_neigh_lookup_noref+0x60b/0x7d0
[  113.951040][ T4258]  ? ip6_finish_output2+0xd8d/0x1640
[  113.956391][ T4258]  ? ip6_finish_output2+0xf45/0x1640
[  113.961710][ T4258]  ip6_finish_output2+0x1134/0x1640
[  113.966964][ T4258]  ? nf_hook+0x360/0x360
[  113.971240][ T4258]  ? ip6_mtu+0x2fb/0x3d0
[  113.975516][ T4258]  ? ip6_finish_output+0x627/0x790
[  113.980674][ T4258]  udp_tunnel6_xmit_skb+0x4b7/0x8b0
[  113.985947][ T4258]  send6+0x5a0/0x8d0
[  113.989899][ T4258]  ? send4+0xd70/0xd70
[  113.994016][ T4258]  ? __local_bh_disable_ip+0x111/0x1a0
[  113.999531][ T4258]  wg_socket_send_skb_to_peer+0x10d/0x1c0
[  114.005288][ T4258]  wg_packet_tx_worker+0x1d3/0x7b0
[  114.010445][ T4258]  process_one_work+0x867/0xff0
[  114.015352][ T4258]  ? worker_detach_from_pool+0x240/0x240
[  114.021007][ T4258]  ? lockdep_hardirqs_off+0x70/0x100
[  114.026324][ T4258]  ? _raw_spin_lock_irq+0xb7/0xf0
[  114.031380][ T4258]  ? _raw_spin_lock_irqsave+0x100/0x100
[  114.036958][ T4258]  ? wq_worker_running+0x97/0x170
[  114.042040][ T4258]  worker_thread+0xad7/0x12a0
[  114.046765][ T4258]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  114.052825][ T4258]  kthread+0x42e/0x520
[  114.056910][ T4258]  ? rcu_lock_release+0x20/0x20
[  114.061796][ T4258]  ? kthread_blkcg+0xd0/0xd0
[  114.066443][ T4258]  ret_from_fork+0x1f/0x30
[  114.070933][ T4258]  </TASK>
[  114.114273][ T5478] jffs2: notice: (5478) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  114.836253][  T155] device hsr_slave_0 left promiscuous mode
[  114.879075][  T155] device hsr_slave_1 left promiscuous mode
[  114.911571][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.925330][  T155] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.948919][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.956448][  T155] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.966541][  T155] device bridge_slave_1 left promiscuous mode
[  114.974024][  T155] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.991185][  T155] device bridge_slave_0 left promiscuous mode
[  114.997503][  T155] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.038016][  T155] device veth1_vlan left promiscuous mode
[  115.048089][  T155] device veth0_vlan left promiscuous mode
[  115.280794][  T155] team0 (unregistering): Port device team_slave_1 removed
[  115.296186][  T155] team0 (unregistering): Port device team_slave_0 removed
[  115.314520][  T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  115.331657][  T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  115.405796][  T155] bond0 (unregistering): Released all slaves
[  117.472186][  T155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.516790][  T155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.587229][  T155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.647833][  T155] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.763821][  T155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.837175][  T155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.898799][  T155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.966211][  T155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.468091][  T155] device hsr_slave_0 left promiscuous mode
[  119.475246][  T155] device hsr_slave_1 left promiscuous mode
[  119.484553][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.492501][  T155] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.500843][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.508519][  T155] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.516281][  T155] device bridge_slave_1 left promiscuous mode
[  119.523264][  T155] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.533955][  T155] device bridge_slave_0 left promiscuous mode
[  119.540526][  T155] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.557559][  T155] device hsr_slave_0 left promiscuous mode
[  119.564330][  T155] device hsr_slave_1 left promiscuous mode
[  119.584511][  T155] device veth1_macvtap left promiscuous mode
[  119.597760][  T155] device veth0_macvtap left promiscuous mode
[  119.605065][  T155] device veth1_vlan left promiscuous mode
[  119.616726][  T155] device veth0_vlan left promiscuous mode
[  119.625948][  T155] device veth1_macvtap left promiscuous mode
[  119.637885][  T155] device veth0_macvtap left promiscuous mode
[  119.645791][  T155] device veth1_vlan left promiscuous mode
[  119.657489][  T155] device veth0_vlan left promiscuous mode
[  120.012656][  T155] team0 (unregistering): Port device team_slave_1 removed
[  120.030252][  T155] team0 (unregistering): Port device team_slave_0 removed
[  120.044556][  T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  120.060299][  T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  120.126010][  T155] bond0 (unregistering): Released all slaves
[  120.168170][  T155] bond0 (unregistering): Released all slaves
[  120.335027][  T155] bond0 (unregistering): Released all slaves