last executing test programs:

1m24.930327189s ago: executing program 2 (id=3):
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1208002, &(0x7f0000000140)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000001c0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
syz_mount_image$fuse(0x0, &(0x7f00000007c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x4, &(0x7f0000000880)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$bind(0x0, &(0x7f00000008c0)='.\x00', 0x0, 0x21, 0x0)

1m23.975155733s ago: executing program 2 (id=6):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x161)
mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000380)='100', 0x3)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x1, 0x0, 0x0)

1m21.634882993s ago: executing program 2 (id=15):
r0 = syz_mount_image$btrfs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000640)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x5, 0x55b2, &(0x7f0000002780)="$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")
r1 = open(&(0x7f0000007d40)='./bus\x00', 0x14d27e, 0x0)
r2 = open(&(0x7f0000007d80)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x3000)
fallocate(r2, 0x0, 0x80000, 0x4)
faccessat(r0, 0x0, 0x1)
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000007e00)={0x0, 0xfffffffeffd, 0x0, 0xffffffff, 0x1})
r3 = fspick(0xffffffffffffff9c, &(0x7f0000000600)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)

1m21.473542519s ago: executing program 32 (id=15):
r0 = syz_mount_image$btrfs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000640)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x5, 0x55b2, &(0x7f0000002780)="$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")
r1 = open(&(0x7f0000007d40)='./bus\x00', 0x14d27e, 0x0)
r2 = open(&(0x7f0000007d80)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x3000)
fallocate(r2, 0x0, 0x80000, 0x4)
faccessat(r0, 0x0, 0x1)
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000007e00)={0x0, 0xfffffffeffd, 0x0, 0xffffffff, 0x1})
r3 = fspick(0xffffffffffffff9c, &(0x7f0000000600)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)

19.918184007s ago: executing program 4 (id=321):
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x70000, 0x5000, 0xd, 0x6, 0x4, 0xa, 0x6, 0xe, 0x0, 0x1, 0x3, 0x3}, {0x2, 0x1000, 0x0, 0x13, 0x1, 0x8, 0x3, 0x8, 0x65, 0x46, 0x6}, {0xb000, 0x315a4c100da1da58, 0x4, 0xf, 0x5, 0xff, 0xc3, 0x6, 0x3, 0x6, 0x6}, {0x3000, 0x5000, 0x9, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0xf, 0x6}, {0x9000, 0x8000000, 0x0, 0xd, 0x59, 0x2d, 0x5, 0xc, 0xfc, 0x0, 0x3, 0xe5}, {0x2, 0x8092000, 0x0, 0xbd, 0x6, 0x7, 0x12, 0x1, 0xbf, 0x18, 0x2, 0x4}, {0x1, 0x7000, 0xc, 0x9, 0x0, 0xf, 0x10, 0x3, 0x4, 0x80, 0x80, 0x9}, {0xd000, 0x8080000, 0x10, 0x4, 0x3, 0x3, 0x0, 0xf9, 0x1, 0x8, 0x0, 0xfe}, {0x1, 0xedd8}, {0xffff1000, 0x17}, 0x4004000f, 0x0, 0xd000, 0x100000, 0x100000002, 0x0, 0xdddd1000, [0x5, 0x3, 0x10001, 0x7]})
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x5d, {"b8010000000f01c166bad104ec0fdb4d70b99f030000b8feffffffba000000000f300f20578f292098953200000066baf80cb8e68af88def66bafc0c66ed2666420fc737ff4d49c4c155f3e9"}}], 0x5d})
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000000)={0xd, 0x36d, &(0x7f0000000040)="6626f2f7ae104b", 0x0, 0x7})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19.646830894s ago: executing program 4 (id=323):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0xffffffff)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x42000, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000240)=0x1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000001c0)=0x8)
ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6)
poll(&(0x7f0000000200)=[{r2, 0x2}], 0x1, 0x80000000)
close(0x3)

19.336984844s ago: executing program 4 (id=325):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$radio(&(0x7f0000000700), 0x1, 0x2)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$pppl2tp(0x18, 0x1, 0x1)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x48241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0)

18.323647344s ago: executing program 4 (id=326):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x802, &(0x7f0000000300)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0])
chdir(&(0x7f0000000340)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r0, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events.local\x00', 0x275a, 0x0)
ioctl$VHOST_VDPA_SET_CONFIG_CALL(0xffffffffffffffff, 0x4004af77, 0x0)
write$binfmt_script(r1, &(0x7f0000000440), 0x208e24b)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

17.1507305s ago: executing program 4 (id=331):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2d)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x404, &(0x7f0000000500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000007c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000002800)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50)
ioctl$int_in(r0, 0x5452, &(0x7f0000002880)=0xff)
statx(0xffffffffffffff9c, &(0x7f00000028c0)='./file0/file1\x00', 0x1000, 0x100, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000002900)="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", 0x2000, &(0x7f0000004900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000049c0)={0x90, 0x0, 0x7ff, {0x5, 0x3, 0xdc, 0x5, 0x2, 0x7, {0x4, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x9, 0x8000, 0x4, r2, r3, 0x7, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004a80)="0e24ac7705237246fc1db898fda0c7f95d375ea7f4bc7a07517a51095880f2219d9e4329f6c4e734f2bb34564a1c2e298d7eb8844d8af7b30e1a71750a2511e44b368fc6e9ae65e40e64e4b5fd3d0f87009b5727519df1ddbcbb38ef00871f00ed2543b7f2990a44482bf3d7478c3c2799dd8120fc3258cfeccf648fe15128c54d1d4272bfd44950915afd3aa0abb5b04d4dbec287df0816c3e43c2503cac6e95041aa205c5958f51a9c4c8214ae2108401b08ae7ff8440988c93424422f06c628077d767432521fefa0f8d0f387e685e4af54bdd7f931c3eace52ca7a6ba2d0fd701e5d77393e6268f52e68d97087f87edd2ae49180028bf08ab7e02c3ef12aec2f286d1bf40fd3a5f337b0f0b63d701c60bae36a5e1644bc90f34165049ac5c4fc8a0ada90e345df1420a58c92cfcc6973d3fa532b8b4088592e0f2c36f7e756139b272fc99104a93c5cf2599c683b60910af98a55b17bf646ddddb13e73d0bfdcfb3e3d261d84f83270832708f6e5b3fd2bb98e135b914e21681b409d717afa8f65dc9d3ab6a78b9b026b6aa1f1ee5872426b4bd4fd652072f86dfb96ef79649396a0f19239b0ce6ba9a8ff49f8f4820579a3169fe54b6f060a69236d57a1a13f033054fb22dbfb3f72861acc7ed51ebed60a8a03c3e16030e7a114d0690c268713d8206b34a005fb89d5123103d36ab57594fc731e8a6353ab3be3af22faa6f85b54ba78b90aba30e17dad90c31a20cc5f39c8ff50097bb310535efd6ecbc49dfc2d547bee78d5c5ebfe0d4bd3c093413e12cfefbfdb5f38c437ce831b209f3337979f6e0c46d8bf272a3ac6076c7940f905536167d2285d2a7d0e75f1765f0c080f1dfd9bae98afdfda7e7837d1081d83effab72e6eff493cc9031a299383f726227d75474e4c8378b2376fc7fef8b213b26794edc4c2fc110d917b863d25e7382b19b1b90cc90428f6aa0b1df015bcbbe83de36ff56c065ba92f1f49e61ac6bc6b3c20e42e7763dd52f66095f07e235f0062accb0eab60ce54d84391cbf2613096ded353543b5d6a884cc981b759e4499ab72881f88542208c9fd81b541514d6d2ed54683926b0d6bfe904b76215aea6db4cff8242d3ee5524acb456ec219e42d46c1b1e3fa9748404db4583537b195ad326853ed9472790656ab01bd031b19fb64b0e5227d18ea09ea7557c9afdc918c918a1fafdd18f9f54682bf0f49ba2ae14f963340dc6600e1b344ce50ed61af0726e3441583f8cf045df193dfbce93285d7fddfc0d831fefc85cd3e7920757f27a4e09b5cfa77b93a5e82f571d1293d9437cf89997011eee6ba9f9b7e6ce2fe1c381cb2db053a6e2d9351edbddcc10faf80f5b686727dd8982b12604fde3467f4a7e98b13250df7e1eef67da8f7fe3fffd3a185457aaaecb38f5ca31ea3e35cc7c6adc3873c734cb661e3c43e64bf0843b2cf1d950642eeb20d698cc9e598eb7ec71d3a0d83f311afa2d40a659a219defad76fdb7e8146756ff02a8a74abf8a8ccd72ffd7f70911698d54552aada8ef27b3f5b2644d4d0fda2976d838686a7469b296a98b67b7cc9834dc94f2292581dd242d1abb42db30d4de42c4611c0fbdc77134a6cb0c0d7b36d18a217aaabd34744ed5cac171e2a8bfe90b2dad03d0ca5f74d3eb95c454757be4c77f386c63fee91e95a508d8fcea5cd6bef9bd05e0b992da4e4cbc2f52c9cfde09b6f17f3d73fffc01d7ac55f328061516cf0e4fa50fff5b03dca67b163a68d9ddbb988f50a68fdbfc6e6feb6c892b58eb766d3429396669228dd1653bcbb5cb47c0857d27660e62d23e90178ef2b75713c2c58a207d8c21e9ce64556bfd71b40207ee76416f9f40c5601173b1d84105ac331247c021941a6a27e86de4f9a4db382f67dd6dc8e86a02a8438ddda1a636256fcac8e2328aaa3c054ab86f55c9d7bb2c2999a5c7933f092a3bf66523cb388052c65d138346ad1c5137fa383d7b9023b1868af02cf48923289162544db8fb29cf592c306a76ec92b35f33fae90f5aeac830b82dcc3f0069f668aebe6e5fe13c811f150de080632e357221d2f220ef95ce436730d1f9390d9f192220347d04ac5a94631e349ad330276b9524f775f7a8f68be7823ad7ed3ac4b4d87a12c0261846ec1dfe785b60675968e79496d7ae4e5d478661bd7125f2cc0de35422764556b63d687b339e2b25ad43ca85bc861944d19f9689dffe71d87030d23e0428942441d622de361778cbe8952f7b93c74783552b0087bff535afaf92935aa889018e46d34b2a258f863d89e4b6da841389fa63d489d135e559b7d11b8d97215323548501c275248eb07916ae3f0814c6af32f5ece7eb0330bdaac4394c518f3c8e48cafc36057cfa7788fb2f9a73bddb1d40546cf21b681e6c9ef6f0ac43c512762323209b2c878ed5a9f55e207b56a33c863eaa34a6eb14ad8de9885d52a7c073a406ea4324f8433ddfd89b269d6716072627054197928370ae01a94e3dd4d07125560a5cb1d1bfbbd8c099194de5f787a550a3400ce796e115702255d1f17d96a7fb63384ff497cf72beeb50bd24008ffc58256aec6b2faff2c20336e29bc1acd853214496893af25e8efb571c96edf64fbcd136c95e1213e73bc3f1a896fca2bde0894449ee2927c38114de5f1063d0c203c3fab1389861c4cda173a991eb275ccffe04f75d67df181c26777b18e5552b42fb4332046554109a9a6007592a62d2553dbd098f1daae593322e45f66a64bdb09869feede70d1fcc88fd4c19f4008d1b1d5f34a6025a71d9bf6ff20daccda25cbcc662cfc687ffe5ebc344468f338f4c9bbdc7ed9820feb5e3b09ace47f4253a81da7029816656613aef7456524fc68f4345bc0e7f26240d4594374d2fcb39560e2828e0e219b2417f5787add73418b465b1308d5ac5169791f55802d11354eb62940a492d955e8bd11b952a28acea90cb43af774e6fc75e57383e68937aa3643aa37f7e7665c703576579dcccf63d2bdadfbf14be796d4023689880453b0ff576fb01bb141be3c17478f0d555ca96ff7c3f3e4f53be1f088827203fab2008ec6687e4f5df305f58fe647b93ad09a70165c989498d313ca5ba05f3ce90adc80d55b56d0ec4cd5a78268cc6def7e8bb810bc29f8e742487048363815fa3fe645194ee8529ffba2b8d6756915530f142b42f31eae1703faeae14f3d81ae5c2297c3476b0f89b32f53802453fc74c80bf217097577a910a51860bbead4f73a29423816eadca7b1e2d24a9895949b352fe59f13abfa7b69c0f0061eaae2ada6d72b2f90c9c553ad8be9ee4e4ad2876851a3f3e979c4d770d7df9a27e72ab215ec3efd252d622e7ec6160ac951d1ee9b8c0adc0fc853f2a4f36602c955b61646246e07bd7b745f5d3e99f95f55a1616ed36633db6efa97a96dacf12219cf1555222cc6a589a6def5680124f7ac2f1ec83832a30fd011ff02dbf4ab01afb5989fcc678383f179b5d647cf0a762acf0714e9e4151afa39626884e6f56859d3aafc9fc7f7bbcfb27e038e238783cf56c86f0be52568c4bed0917d651f4d26f76ba6c343e075146504590da391e1c4d028dc81767294df5de9370d62756584baa3bfa31578b6f754e77b0d6ea7357d8915ff0bda182b604b014ecf7dc94ab97061765bfab2053fa863fb671fad3b6312d6e59ba0e70b0ea2476399e925f8fa2e51c9bbfac19aeb11db3dd6ea8d916c4d4eae7de17259e6155591be9b704d3e24cda131eded5e9dd6758dc90a5c7a43332957d26ac91bc65120b1c6b7b94fdf83b397bd8990747f01d3ed912abeab74bb5ae3ff2ee0009cfe8cdb6b4e75a7de3566c8ff7bdddb06b7775cf3116b029e7c85fb7189147e753d614caa490594ff2e22b7144153c635ac7b20a49c2d8575af2f546b968bea9fc4ee5ff417a6fa86ca09c8fed14ea4b721b2d5870d4b670761c70516daa07809ac3817246844f01eadda045c57d1c864cbaabedf90cb42d374392e77b3d1a1afdf962feb55a4e04a77c8fb452429007e0046a406a5f2325f0c7f75a19deed1b456ac5de6486eebbc126ff97c5ee8531a975676b61a0d79f56ff75cbcd20337119422815537a57766648777f1b5f75d358dc63764083406e2d95afd87d00099581940367ed029065df0d9008301fb92e019feac9bb406032167eb053ab07309385771aacc2c52a5d526d14721fd530e63cb7c53f27518c679ccd0f3d2db8aa52ef95c6ac3f5dac0b9b5c3a96a794690f3d49aa0e5a4a95b36609cf61d471cc2c0cd55e8cd96be47558b055280313b15907eba5761180f5229a59341faa1e11eb5b6a48ec9320efb1d9f00936d9a5d91f2bf837fe72edf6ec025c1c4e87171cc02c7342fa5d4f825157d70d8f66f6fa0542de2255373d8743612e7d4e16b8ceebf4e92c40926f21929cab343b981120236b8b0b900772a33bbe4eef06feff3c7b104cf63d92c7f9233982f9b713489fb8bf80f2feffd6c22007b63925209e158a837dc95b42d52ed764350b5f83ad54041bc15a7552c0b8c1933d674a16b0c0934277d9895c1ad01327231a7fffc4b5e1a1495489559bebff324d54f2894563a23b85d3bef62c356eb476e01e0c039287ca38626751f701ef4e20d951433940ce1138660589ff389dee9f85a7faebb9cc494bbe7138b413303af6e05806032d8131d5a25a5d7c0ed87906d92bdd87ce7d62c13989f3435ad77a29b721d8219d2cf530c2ec9edc3de9ce2dcd5053c38a6797de8d8cbd3596ed545d2dc6f825a0e65428dd73df96d5f3e40dbe5a62f0f440f712419d1558ef97bf1d0ca1d59fa1caf6ed0d422456848e196e94b4741b757935bc3aef3a46f53066dc7a74f42d539da2228fb8593ddb79ac977a8b67c0a6058efdbe23ba75fb2faf5b9f152e60b8a96ee19fbf0c417c89f882c53d389bf27a18b9e34b2a33aa27029cfed7a03335cf33d95ea803ad125237a9cc70520f18bc7e9f0c1432368a5304544f5d1e1599242bcd905f69f25cd0fcde391960fc57426e0bf22155ea315f0caee330bf3b7f4f4363f87146531175ad4f69002d46e95a48f714c9bbd9e39b95783406d477dabe03397d68e7af5ee623b4c05eb64120ca76af4f1d37348f93f39d8fa1d22fef874ce65b66f8a1aaff9db97520dab97eb8d1f99efef4d4c9704d181d687874ec4fbb400ed4ce050ac997c843e647bebeddc33eeb70201b3286ea25ad1bdb80dba1fc78a6883ecca84d17645be16bee32967bd487c6f5e0714ca819d5913436ac9aeeab4e5092ec1897dad39737365e8414246a81a731bf7d3ad8d789b42c651702b70ee786032356e3b9fc4402104ffbe55026c84e8ec5dd2a1860cefd0e7789ac2a47fa5ee9610dee980fa3c2fa7219b4e57642f31012b3e00e64285fda219fa9ca37955e3c25fd5872172ed2f5651d208897ed4e1d224243b2f241f24580e924e02cb60af5e14898028596400a770f94e67590df5fe99e9d170d061397f71f4202eca4c91c7fc27e2379358a8d9bfc28c2fb67842b0bd1e5e68e017b34084aa08e7453fc6b03bd42772643eae036f25f10e4da022818dc84f35eea2c07e4dbb41e861b8a4c6df4f0b4b785f0df55f863707a0563cdd5b9fcaa352b54071cd486cf4948575ddbe4654a566438922887a3bd304853a98283c7a4d7757cc6e8298b0121aca5fdb64d86996d8c0ddfa1ee4ccef1ee21dcf853bdb02471383f73ddae17dfef217c6a3f79b182fc36bdb47d1899e87bb4c4e490ad4a2724d223b31b889685355f349ca8bc62d39150ebccaba863bd72bf91d65cffe560eecf162b2440f9d74fe0fb3f8479fd8f6293f16e4d67b3ec30e83180444cec51d2b455a3ab2b6286d4fac1acba8b7b5026671fef497d5e050e0aa34dcecf2d06a9e4b60cdb3f9cbb7cadd73c817f255f8e2eb22d6283a7934e0fd64eaf52caab2d1862baf505889e4db1a1870f0049b3ada06d38af52535da352bedbf1e88e34595820cedd4559cbe0fe0578c557a62f56060d75c5a6806e384d3c274c218d57beecbd8e7832f3cc050668b44c1b8ff8cdcd2b85b5ecb9eca1dcc1204d27bc3689578eab43dac5658a1cfe75456b221c15ed26720a49829f96d501fda6d7839724207d6a5f6bb3d8390e90dd7c6b80e15e6b20b7c74ff3282c770eb1c77583fc97bdb5f2df62a74b3385e2e8ba06fc39730f1f02107477c215deb6c8599cdacc7c710b7b1a77afbe3b2a593f6eec5c8014dd366f5890a1a579e51d858cc8ef93aff098af9903b4e3633a3090a630e64be99f49d32d63d779f989d0198044717741d3bfab4242a05dae33f11ed6b1d850fb379f725fdb7b296d9d9b3024160d4fd735a77c8ab23f0816bfc2715a2561c3cee6e41cf79030c1500c09e75ebbd5a7aa8a0e4826542ad46a9350e969b357c142af13afdd8927cdce3d1f35493f6a7a14c5a20739d462d566fe3ab620f1ef323768bd871eb454dad947f2a871efa05d601cf9fb08d992caf6f4b0f652e13df7dfc658f50e0c9bfc3bf28114a51142f65e25435a32c8719fde2a3d5c4850e31ffa675fa44f9e54957d108e46a67a3b7d71b272ecb0385466e39238f6421b2fd6f33a258883a4501b63001ee9ecb9137162488051f7ff15e6f4be81ca31ffac70f48bcd3457fcb137a2f5108d908ba1d51b0fca7e14273b176af4b954837dc3d40b4341fd03063ee145dfc4456bb303bb0540db3aadb26240242f4a55cb9f6623b6e724e0f9d8b73d02c9fd9140873c0bb884e3cf4c844bad6f27388b56840b63d65ca760dbddf778e430e1f03c246e74e9b56a08a56617658f7fc42e3582f3181a720e51598d22062815ca3caebf36389a58278acc788035d8deb0b800180ef6537d92bfa18947cb18232bfd27e048fcd49d44c137f1d8a10294a6dd20251a00c379bb0936fcb5137c9f5a7a7404976c778912a37f1503deb27b85d3b1d886415a98348d3632c7eb4bf58fdfddd5b24407709474e4478c991a03ed8b456d9a71ec82f05791eb17425e0360493fb5ec343eba7e9c970f47f4cd85edda849cc524d42a11eaf29be950e621cd12e16e3a304516ce5c74a2b47a1baf1f3321b84318883bb023cb5f67dc3541a4d72ebb3316244f96cde4aebc1a77336a93d226c315ab02581123140e45373f40c8cfc7fb5d478607f9b38c2b95bcd55fb8a2047569ac7927b9e4208f75032abfe83442d2ca5db1ee8903888548b5fa9724520083052f8e652f1b0d39d031d2c61f63e5cfb98061b5b913dc6da26e690c85b07fa19b9bf83d124a5fcf96de21d9f00c9aaf2ec66580e4dd99c21c01b7557b7c6336cec525003157d3efdd16a52407b35225f65e44933d56c90dbeeffcfbe2b10bdd921a507592817043c88bab1882ac8863f8a73fed3310138ae56c9b5fb8aa22d5d6ab9e5ece2afb94c5054bdc8444b00a46d74716c21346f2dce31f180f3e01453d7a7aaf4200c4be278a2a88fbec4529a551189da822d1365c8ac70bd6c6cb3c3791e183eeba95e65f1f87c10b2f740bee2575807c486e3b7939f093d44693ac069089830afff26d7165712abb7ba5bf8aaa87a3d57c5670b3a45d707b87aa7689b18292d851cac59802b38bd7ab8e1c3b8a134db1a366aaa8f77a6e2c937f49961637d291970b4541e3405948ba2ef49b40f600e28861c54f06a2400f82ffb2b9a0d4c6da720f9fea31dbe3f42aa29bd126fcbfccb9d809c8bbd76d241fc2588963f10434b69e9415d20bea13c30a08b22f5f21bd945a11466d228848b7b68927725239142fc536f784b705d3bd318f5d5fce31ddd32eca57309b1f9e5cdb0164df0bc45d04db323ed272fef5e4e0554cbe0eef83999d6dd82b67a5de6986b7063851602f833a23946ffb004b9cb30f6af2108e2aee029aa3e4fd525597f4a8d0184750731821bf21aaf703753270d3f12d5ed5f7bdb47c891074a44c63bebe47c66aab7f24e422b5f549249f26cab0aac9484087871de53cdb6d575e0e7ea3c73de23460c5b1bbe1e838433de48ecc812c1e21861dc290f22733090b5d3f88910478bff51307e6d869b68a745255ca007b9f5dda63074845d4d8f03604ada7cb5f8c1bcad9f3a84bab71e6c109ef7bd8eb29ba18011430f28eee91aa83749594aa5c717c0d53e0ff68372284e356e55f9cf33716ade1e148beda327236f4005472600f99a1c2fbe10c5492d2e082d15fa962492b16029a222bce55a001b2726fad239160f3ed55e98343fa5266cd7f5e36158480430e2f802fbfa3aa6e7299ab0940eea91682c79fffb171a705a23b70173f0973ca0b0ea230b306418677be4e6bcca0e6cc7bdbf6a3a96090819d541f505402ce505b40bd7d012ffb6a62f2528c5d370b2d6d6cf4b49c6886d20a5cc94cbe5e7cdf012af5d27c0c89c190956d1aaf1911888b33f67341fe74a10cba3328b84e3c4b83bb8b25da32122ed8df7b831e77bf9528af4b0960a0abb420e931eead4dcf31849cafc6099e8a3053758200bdbb411346662442e8274bc9780fd69abb4ef9ddd292f791b846a5849610862453cdb9263ddc232492de5d24c2c52751223cb961bb9ba7c86988b2a5490c3540ada6ffb9ba287c3e15d228aa0a6491ceced135cb1533b31c0b8ca218ffe4e1a07f29b4557a05b447358350ebfdcff9793b2eb1d7e0ea082b1f4fde8207071a8beb8c1e5efc49e1153fb8fb21ebc46c4d5b404a743a54076e4987da1748a39c70c083960873ffa0b88d4cccae69cdf4630a78250db81141e216e2007b7aea7500ad3176ae8e22c5fce5f14f0aa581bbe520a6d6c5f504547b178e62236f54809dd43763107e49b0d44a7968dcdf73a8c3c395fecd8a557ab850bebf1a67e82714131e0380fd6684e8094783190ce491a03243d903b4488d574be3847b4219145f5aa05201b4bafcbe2c2c98fb4e968c15822e20c06e83b0fc24d8d30acc9e24b36cfd06ad1a073719bf3a92922111e76efac5a813faaca76acfb065ad4faf1efe403aee89bc149bfa4e907008fe5f81d4e795c7a646c2b48e79b7ba54ec42425978c4d084c3c1f66ccdf230515366b08cd506a210e92e75bf7adfbaada44b619feecc4427ca23e74b68abfe9796a6e9a1f540d6a438042f506c27bb4f4814c73541b38eb7d548010363cdf7b2b6faf1a41a10fb71bd206388f32777c6b8e3fd7f6cd76342a1fba80deba8100f878eb4e4a09287ce513bb6b1f445e3cbdf220ff5faceb36c3a7f1a1710e780b9772124e5728fed14bbe348f0f4831913ae69ff40c953cc6447babbcf55b08491357531dc9d86fbe5cd4fd0d6e03e5b71daca299a8d31c3596fb98d21acc09d03e3fe7cc1f13c3e8b49b9dd40b8397ae617b322951a4bd8fe8a1eff9f920b79ddad1639da4d4a18c12ca3b65430e41506198483d5a2a0bc058269e7575cd6dc8d1a0393748622369c107b8a5fe570a7795d98b75e23d4c05c39655c8b81a389b512461a20711487695b8d4ff2d81ab4fe8c884768cbb99640a9ec5b54d3cd13a90f318e0264038b7f91dd73205342400eb9d186ed30286ff7cb9e459341ee59638b253148cfa74bada6b959f185b5cf68a313ff757836aafbbdf1f4440ec0f44d99c3950a6e2fdc6b7d8c6120f921630b93ec31c216e93e6b3781d02ef2339dbea56125ffe79019b1689c25d35db7d3f3e5c613060400977a2f7e142b50591b2ae5738dfd208c0f4daeda71edd05beaf4fc0b128fd004bd2bf1cea1d6883b4287cab96354e8f34f9d3707763b731686cbe6c175848a9f4bdd7c2961d270d9ef63ac95aa0603d3612a8933660c303fd1a91b3eb700718cdf40a34795399a7812c89b44f7b223dbe8bb08e0c01c4bf740c95431445a6b6fae337df7778e834813b34e0e6d3f0e935fdd136e6ac50c8e11fffb518b06c734985f31884a411293a3a3757a6e5be3d2495916314dc072fc9c0dbefcb5100513df15c18e04b2ad744d660f9cb5f4c64eead30fdd52507bba003c625108e6cdfcd7a1b38e8fd4fef0d419f695904be3026aeb9bab1ad3566a0a46a2a2d092c75ae2cbad109a117b7db76b729aaab3a89bcef8a5e63008613414fa5ce56988bbe3e839ccb8e192c56115522620e0851fbd19790f3acf9669915ef0f1ca0a2ca8a5578747f2d6cbec07a7bc4128ae131b7685191d5cf05210cc4bca2dc6303747c72cc0e4165512cccd43c5a79800b84ca018190a70984d73056e2a8bbdea91fdfcda72d9f8705227c5c4fdef9e0b81948420cae7344ba872a85e2d47c1e40fefcaa8d246fac5c7abe90b2bf39ec601390dd0a8cacbe82fc1ba0cf13c3cd89220a42e82ce62ccdf63fcb1be53c91d36349c7d3aa30170dccd5262d9ee570581ae5c9f84cf5b32261d8f531f6df0636cea496c698f36aee3274f0f9dfb7d72c074530a2679d13e5cc1bfcd957be3eba04a12f8897507122fc74ad66a7f621012ea43878cfa9a2a3ed95581aebdf1ffd7a8985f65c63de9eab4286cb94e57e3076e4e2850faef69b1d9f75ff45227b9e1bcc256c0236dc63483cffb8d72543eb213b2e0a487217850ab3bf7213dabb360c35714dbab5604357ea7b23fc0ba27d0bd09dc09e7ac471088c58d28e3ef12c3054d8a017a5023f378ae81bbbf55228620e061ace44906cc82520bfac2e1d7f7e340f53215bcf6f6078d82266abaaf479e084e73f0600572a7d482a84633eefc6e196f27638e8f08c6a4c615ef98238895d2cffb221a800424e115b0e84b960424fe39a2f33a203eb42f7f5e70e8f73aa172a8adf1d977b176cae2750859c96692bdac1067b7a1b1496dbd7c8220f3f0b42938ba0779c9bfa414a0e6073556d651d526875a4cfa95e8e981f40fc6d8bdd4704a12f44612e8eb8842535edea3d609d929b3fc05c2b02bd44e02a732ba814caf9e03e0bd7f41a24b3b6e282d07d74de2ab968ac739e994c0265416a7347f44bb80d1948cf8c9a69409e850b13f379dd672eb34a732b0b1d7b67ef2ee1bcb686cc4d1f4512c1ffb105ad2e46d783e0ca5f97ef9e4ab2798ce1c29b0f3292fbf1001d9487adfc3b34b4329be6b72ebf7a62158e488bd7888060f1e562045ecf9388c492fe3e0a6ce9b92b5a3eb29c80cc69da72f7dc2f2ac730e5d82cc5b75cecdd0809db8f1cc17bf5b72ed46fa3038722b6369d9f9497b83cc2ea1d0ebea0ac1306a83249705ae0b1c0145af67388d2153dbcb8856971216ee8f3d0cc6f532f159e5e28c6308154bf8efe46333b30740e9d94993393a27eb263dc0d19f182913ffa3953a52847fe979b9e682d304944529131b02ed468c88b5aac0483ff22ad56f9630b4f6134f266ee446068edd079411571f7e77acf2035d483043b8ad85b6277dca9e590ca801dc1896acdfc88dcf3cf83fca85afefe6addd27131f8be0fd5a80a0723556639fff59d56453ec76d3ebad3f5cb04e7b758b13e3d64c2ff5c3b018f52ba9363e053ee2fd78e35b2a834a069953e759455047521ad6615ab87e6381f0363a4554b86dd14f5ab43eb6b3fff64d94af0949a9e5c63d8c8e883886e61bd36f5ca11dfe2c025290cd49f369f8a3f9023d5daa7410fba96927fd0b5d2c75e", 0x2000, &(0x7f0000006a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006b40)={0x90, 0x0, 0x8, {0x10000000000005, 0x5, 0x8000, 0x4000000000008, 0xfffffffd, 0x6, {0x2, 0x6, 0x3ff, 0x100000000000, 0x7, 0x81, 0x8, 0x1, 0x2008, 0x8000, 0xe, r2, r3, 0x6, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000006c00)='./file0/file1\x00', 0x880cc2, 0x20)

16.077497356s ago: executing program 4 (id=335):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000012c0)={'syzkaller1\x00', @link_local})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xc}, {0xfff1, 0xffff}, {0x300, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x8000, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x80}}, 0x0)
write$tun(r0, &(0x7f00000009c0)=ANY=[], 0xffe)

15.359891746s ago: executing program 33 (id=335):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000012c0)={'syzkaller1\x00', @link_local})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xc}, {0xfff1, 0xffff}, {0x300, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x8000, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x80}}, 0x0)
write$tun(r0, &(0x7f00000009c0)=ANY=[], 0xffe)

4.329565454s ago: executing program 1 (id=378):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
r1 = socket$inet(0x2, 0xa, 0x262)
clock_gettime(0xb, 0x0)
ioctl$sock_inet_SIOCSARP(r1, 0x8953, 0x0)
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205", 0x3, 0xffffffffffffffff)

3.683068487s ago: executing program 1 (id=371):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x1}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600)=0x40001000, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)

3.55994185s ago: executing program 1 (id=372):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x24000084)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6403658ab3b48a93093de50c743a4f987cc433b546f194f00ba2d1cb675b44bdec6b6", 0x148}], 0x1}}], 0x1, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000740)=0xdf8, 0x4)
writev(r0, &(0x7f0000001d40)=[{&(0x7f0000002d80)="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", 0x795}], 0x1)

3.299037275s ago: executing program 1 (id=373):
syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000000cc0)='./file0\x00', 0x800810, &(0x7f0000000d00)={[{@commit={'commit', 0x3d, 0xdfd}}, {@space_cache_v2}, {@compress_force}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x1a22a}}, {@flushoncommit}, {@skip_balance}, {@max_inline={'max_inline', 0x3d, [0x38, 0x31, 0x65]}}, {@nodiscard}]}, 0x1, 0x510a, &(0x7f00000020c0)="$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")
ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000001680))
r0 = fsopen(0x0, 0x0)
fsmount(r0, 0x0, 0x80)
syz_mount_image$hfs(&(0x7f0000001000), &(0x7f0000001040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20c000, &(0x7f00000010c0)={[{@part={'part', 0x3d, 0xffff}}, {@part}, {@codepage={'codepage', 0x3d, 'euc-jp'}}, {@uid}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}, 0x9, 0x36f, &(0x7f0000001140)="$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")
syz_mount_image$vfat(&(0x7f00000014c0), &(0x7f0000001500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x3, 0x0, &(0x7f0000001580))
openat(0xffffffffffffff9c, &(0x7f0000000f80)='./proc/net/pppol2tp\x00', 0x80, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file1\x00', 0x101042, 0x15)
pwrite64(r1, &(0x7f0000000dc0)='2', 0xfdef, 0xc00)
truncate(&(0x7f0000000e00)='./file1\x00', 0x9)

2.973796617s ago: executing program 3 (id=375):
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000)
r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r1, &(0x7f0000000600)='7', 0x1)
futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x34fffffd)

2.880715326s ago: executing program 0 (id=377):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002c00), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002c40))
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000002c80)=0x200000000)
preadv2(r0, &(0x7f0000002cc0)=[{&(0x7f0000002d00)=""/4096, 0x1000}], 0x1, 0x1, 0x10007b3, 0x17)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000003d00)=0x1)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000003d40)=0x1)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000003d80)={0x1, &(0x7f0000003dc0)=[{0x6, 0x4, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

2.350290049s ago: executing program 0 (id=379):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc, 0x7}, {0x2, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

2.350118479s ago: executing program 3 (id=380):
fsmount(0xffffffffffffffff, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000400)='ro\x00', 0x0, 0x0)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
futex(0x0, 0xb, 0x0, 0x0, 0x0, 0xfffffffa)
r0 = socket(0x400000000010, 0x2, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x205, 0x2581)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000002780)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
munmap(&(0x7f0000000000/0x2000)=nil, 0x2000)
ioctl$USBDEVFS_REAPURB(r2, 0x4004550c, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)

2.13502815s ago: executing program 3 (id=381):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$igmp(0x2, 0x3, 0x2)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, 0x0, 0x20000000)
unshare(0x4020400)
unshare(0x2c020400)
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00', 0xa10808, &(0x7f00000007c0)=ANY=[@ANYRES8=0x0, @ANYRES16=0x0, @ANYRES64, @ANYRES16], 0x81, 0x26e, &(0x7f00000010c0)="$eJzsmc9rE0EUx78zm03a2FoP4sGbWLGlNr+KUISCCt4F6y+8GO2mRKeNJBGSgGjx0kuPHkSv/gMePPTkQU/evNpDVQQP7VEQLI7M7Mxmdk00NN58H8js2/fezHvzMvsWEhAE8d/y6eO37Y3z84unAIxhEhmj/+qpcVvL3PHfenp/5snChecvP7x4s3rwwWZ8tZFeIVjinru+yvj67Z61pQApXefJ0Cvl6i6DY9rIV8FwAoAP4CY4s9ECMFw3PnccuTZqUw1yt2tiqVIVQUENxUpVZFCpLsaTVYF/SCmXTMZSSsnQTafRvrGlrrYQQb3RVikI32xDKE3nblnsX+hVVDe/3XMcC5FGSlXga+uP19RdzmgL4KaWQBEcRSPPgeHzTCjPYyOVy+W6JbHrrzEcVUI2EXz9GaCy9HQhhtxkQuPr0EIEXiMTCtZkj+jfV/Znu5rvZtb4FSmHTLXduTXc9Liw8xMY1NmP1/mMEMGx7snLRIcyOf1Asrz/RDg71PSJP/iM9jHhULjDoZJnSY16YKcPmxN1ZHfznRa4e8a+hJqBY7FHYaKOSUXxzDc0eM62He5jp+NGsG25LNQz5fi8z/ad7ple5ppY0jltdtMzerc/qe59MupOUqac/plvrtzLN9qd2epKeTlYDlZLpbks/ELhdCmvG1E4Gu+xaN5e1P9GdH/Kpu36TPp9emWapdEqN5v1Ygto1ov6Xkr5sNTi8Z3g0qvajlZw3f84po6HbxY16FCZ3jGY+XB9VdKUFxljbzFM9EmTIAiCIAiCIAiCIAiCIAiiF/anTynDP6qs9Duli9rxVwAAAP//A2gv4w==")

1.894520344s ago: executing program 0 (id=382):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x1}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600)=0x40001000, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)

1.789789764s ago: executing program 3 (id=383):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x24000084)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="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", 0x148}], 0x1}}], 0x1, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000740)=0xdf8, 0x4)
writev(r0, &(0x7f0000001d40)=[{&(0x7f0000002d80)="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", 0x795}], 0x1)

1.715682061s ago: executing program 0 (id=384):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000640)=0x3)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x80002, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000200))
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0)
ioctl(r3, 0x40047438, &(0x7f0000000280))
ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f00000002c0))
pwritev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)='\x00!', 0x2}], 0x1, 0x1, 0xad)

1.463949746s ago: executing program 3 (id=385):
socket$inet(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00')
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0)
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8000, 0x2100, 0xc6, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x10000, 0xfffffffe, 0xc0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0xe4, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb5a9, 0x2, 0x2, 0x80000250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

1.244097868s ago: executing program 1 (id=386):
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000)
r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r1, &(0x7f0000000600)='7', 0x1)
futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x34fffffd)

1.242444538s ago: executing program 0 (id=387):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000c80)={"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"})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x100000008, 0x0, 0x1, 0x6, 0xffffffffffffffff, 0x8, 0x37b7, 0xe9, 0x0, 0x6, 0x7, 0x2, 0x3ff, 0x45d], 0xeeef0000, 0x4fb40})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

319.354549ms ago: executing program 1 (id=388):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x2ef41000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="aa", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14"], 0x18, 0x40884}, 0x4c801)
ioctl$int_in(r1, 0x5452, &(0x7f0000000340)=0x173b)
setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000380)=0x3, 0x4)
recvmmsg(r1, &(0x7f00000003c0), 0x700, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)

266.375394ms ago: executing program 3 (id=389):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x158}, &(0x7f00000020c0), 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x4, 0x202, 0x7d, 0xffffffffffffffff, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x800, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0)

0s ago: executing program 0 (id=390):
r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3)
r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0)
ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1})
ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f00000001c0)={0x0, {0x1, 0x0}, 0x0, 0x6})
ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6})
ioctl$RUN_ARRAY(r1, 0x400c0930, &(0x7f0000000240))
ioctl$GET_ARRAY_INFO(r1, 0x80480911, &(0x7f0000000280))
pwrite64(r1, &(0x7f0000000300)="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0x20, 0x1000)
ioctl$GET_DISK_INFO(r1, 0x80140912, &(0x7f0000000340)={0x1})
ioctl$STOP_ARRAY(r1, 0x932, 0x0)

kernel console output (not intermixed with test programs):

om eth1
[   80.880085][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   80.911270][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   81.117712][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.206492][ T5786] Bluetooth: hci0: command tx timeout
[   81.222505][ T5785] 8021q: adding VLAN 0 to HW filter on device team0
[   81.256378][ T5782] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   81.269206][ T5782] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   81.281669][ T5782] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   81.289039][ T5786] Bluetooth: hci3: command tx timeout
[   81.294292][ T5788] Bluetooth: hci1: command tx timeout
[   81.299962][   T52] Bluetooth: hci2: command tx timeout
[   81.311691][ T2954] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.319242][ T2954] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.340868][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.348118][ T5782] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   81.371177][ T2954] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.378530][ T2954] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.427032][ T5783] 8021q: adding VLAN 0 to HW filter on device team0
[   81.460724][ T4697] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.467917][ T4697] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.487328][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.506720][ T4697] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.513910][ T4697] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.573134][ T5781] 8021q: adding VLAN 0 to HW filter on device team0
[   81.610039][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.617217][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.642665][ T4697] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.649932][ T4697] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.690302][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   81.850263][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.911304][ T5782] 8021q: adding VLAN 0 to HW filter on device team0
[   81.980838][ T2954] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.988117][ T2954] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.026447][ T2954] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.033680][ T2954] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.104666][ T5782] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   82.116217][ T5782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   82.152948][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.192031][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.268506][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.388727][ T5785] veth0_vlan: entered promiscuous mode
[   82.431702][ T5783] veth0_vlan: entered promiscuous mode
[   82.451462][ T5785] veth1_vlan: entered promiscuous mode
[   82.462729][ T5781] veth0_vlan: entered promiscuous mode
[   82.505787][ T5783] veth1_vlan: entered promiscuous mode
[   82.527354][ T5781] veth1_vlan: entered promiscuous mode
[   82.566802][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.594759][ T5785] veth0_macvtap: entered promiscuous mode
[   82.612895][ T5785] veth1_macvtap: entered promiscuous mode
[   82.661591][ T5783] veth0_macvtap: entered promiscuous mode
[   82.679736][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.699599][ T5783] veth1_macvtap: entered promiscuous mode
[   82.710150][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.724525][ T5781] veth0_macvtap: entered promiscuous mode
[   82.748071][ T5785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.761362][ T5785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.771039][ T5785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.780082][ T5785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.805355][ T5781] veth1_macvtap: entered promiscuous mode
[   82.831649][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.846560][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.858395][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.891577][ T5782] veth0_vlan: entered promiscuous mode
[   82.898862][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.910284][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.922000][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.934120][ T5783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.944102][ T5783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.952896][ T5783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.961842][ T5783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.990877][ T5782] veth1_vlan: entered promiscuous mode
[   83.027262][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.038598][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.048963][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.063818][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.075644][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.147442][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.158373][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.169419][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.180019][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.191627][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.230086][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.255888][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.277226][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.285913][   T52] Bluetooth: hci0: command tx timeout
[   83.295911][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.305615][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.316392][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.354438][ T5782] veth0_macvtap: entered promiscuous mode
[   83.363771][   T52] Bluetooth: hci3: command tx timeout
[   83.364888][ T5788] Bluetooth: hci2: command tx timeout
[   83.369186][   T52] Bluetooth: hci1: command tx timeout
[   83.395857][ T5782] veth1_macvtap: entered promiscuous mode
[   83.477132][ T2954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.494841][ T2954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.506117][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.520213][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.575495][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.588014][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.598539][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.610470][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.620429][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.631079][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.646527][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.687392][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.690546][ T4223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.710463][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.722025][ T4223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.723311][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.747383][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.757843][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.768863][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.782147][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.825210][ T5782] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.826026][ T5785] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   83.837677][ T5782] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.870990][ T5782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.880558][ T5782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.916394][ T4223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.948646][ T4223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.079142][ T5894] syz.2.3[5894]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   84.085035][ T4697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.124003][ T4697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.183735][ T5894] loop2: detected capacity change from 0 to 1024
[   84.191975][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.215407][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.221333][ T5894] EXT4-fs: Ignoring removed nomblk_io_submit option
[   84.263687][ T5894] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   84.278216][ T5894] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   84.320788][ T5894] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[   84.337747][ T5894] System zones: 0-1, 3-36
[   84.362986][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.409572][ T5894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.428246][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.445837][ T5898] loop1: detected capacity change from 0 to 512
[   84.463156][ T5898] =======================================================
[   84.463156][ T5898] WARNING: The mand mount option has been deprecated and
[   84.463156][ T5898]          and is ignored by this kernel. Remove the mand
[   84.463156][ T5898]          option from the mount to silence this warning.
[   84.463156][ T5898] =======================================================
[   84.470160][ T5900] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1'.
[   84.535732][ T5898] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   84.569903][ T5898] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[   84.615405][ T5898] EXT4-fs (loop1): orphan cleanup on readonly fs
[   84.621849][ T5898] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.11: bad orphan inode 3
[   84.690424][ T5898] EXT4-fs (loop1): Remounting filesystem read-only
[   84.754885][ T5898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   84.775899][ T5906] loop0: detected capacity change from 0 to 128
[   84.852283][ T5898] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.11: dx entry: limit 0 != root limit 125
[   84.852725][ T5908] loop3: detected capacity change from 0 to 16
[   84.894458][ T5898] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.11: Corrupt directory, running e2fsck is recommended
[   84.988718][ T5908] erofs: (device loop3): mounted with root inode @ nid 36.
[   85.011570][ T5912] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.11: dx entry: limit 0 != root limit 125
[   85.060671][ T5785] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   85.091687][ T5912] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.11: Corrupt directory, running e2fsck is recommended
[   85.107686][ T5898] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.11: dx entry: limit 0 != root limit 125
[   85.121702][ T5785] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   85.155865][ T5898] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.11: Corrupt directory, running e2fsck is recommended
[   85.222863][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   85.365143][   T52] Bluetooth: hci0: command tx timeout
[   85.391851][ T5906] syz.0.5: attempt to access beyond end of device
[   85.391851][ T5906] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128
[   85.444019][   T52] Bluetooth: hci1: command tx timeout
[   85.447437][ T5906] Buffer I/O error on dev loop0, logical block 128, lost async page write
[   85.449526][ T5786] Bluetooth: hci2: command tx timeout
[   85.477222][ T5919] FAULT_INJECTION: forcing a failure.
[   85.477222][ T5919] name failslab, interval 1, probability 0, space 0, times 1
[   85.493177][ T5919] CPU: 1 PID: 5919 Comm: syz.3.8 Not tainted syzkaller #0
[   85.500359][ T5919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   85.510442][ T5919] Call Trace:
[   85.513723][ T5919]  <TASK>
[   85.516649][ T5919]  dump_stack_lvl+0x18c/0x250
[   85.521378][ T5919]  ? show_regs_print_info+0x20/0x20
[   85.526579][ T5919]  ? load_image+0x420/0x420
[   85.531079][ T5919]  ? __might_sleep+0xe0/0xe0
[   85.535675][ T5919]  ? __lock_acquire+0x7eb0/0x7eb0
[   85.540733][ T5919]  should_fail_ex+0x394/0x4c0
[   85.545426][ T5919]  should_failslab+0x9/0x20
[   85.549930][ T5919]  slab_pre_alloc_hook+0x59/0x300
[   85.554949][ T5919]  ? rcu_read_lock_any_held+0xb4/0x140
[   85.560408][ T5919]  ? ipv6_flowlabel_opt+0x16cc/0x24a0
[   85.565786][ T5919]  __kmem_cache_alloc_node+0x53/0x260
[   85.571334][ T5919]  ? ipv6_flowlabel_opt+0x16cc/0x24a0
[   85.576708][ T5919]  kmalloc_trace+0x2a/0xe0
[   85.581131][ T5919]  ipv6_flowlabel_opt+0x16cc/0x24a0
[   85.586351][ T5919]  ? ipv6_flowlabel_opt_get+0x900/0x900
[   85.591951][ T5919]  ? mark_lock+0x94/0x320
[   85.596307][ T5919]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[   85.602296][ T5919]  ? lock_chain_count+0x20/0x20
[   85.607148][ T5919]  ? __local_bh_enable_ip+0x13a/0x1c0
[   85.612520][ T5919]  ? lockdep_hardirqs_on+0x98/0x150
[   85.617721][ T5919]  ? _local_bh_enable+0xa0/0xa0
[   85.622575][ T5919]  do_ipv6_setsockopt+0x12ac/0x3290
[   85.627788][ T5919]  ? sk_dst_reset+0xa0/0xa0
[   85.632287][ T5919]  ? futex_unqueue+0xcb/0xf0
[   85.636879][ T5919]  ? aa_label_sk_perm+0x500/0x6a0
[   85.641906][ T5919]  ? aa_sk_perm+0x8e0/0x8e0
[   85.646408][ T5919]  ? futex_wait_setup+0x270/0x270
[   85.651457][ T5919]  ipv6_setsockopt+0x59/0x190
[   85.656135][ T5919]  rawv6_setsockopt+0x276/0x5d0
[   85.660990][ T5919]  ? raw6_destroy+0x30/0x30
[   85.665494][ T5919]  ? __fget_files+0x28/0x460
[   85.670085][ T5919]  ? aa_sock_opt_perm+0x74/0x100
[   85.675017][ T5919]  ? sock_common_setsockopt+0x36/0xc0
[   85.680383][ T5919]  ? sock_common_recvmsg+0x190/0x190
[   85.685660][ T5919]  do_sock_setsockopt+0x175/0x1a0
[   85.690685][ T5919]  ? __fdget+0x180/0x210
[   85.694960][ T5919]  __x64_sys_setsockopt+0x182/0x200
[   85.700161][ T5919]  do_syscall_64+0x55/0xb0
[   85.704576][ T5919]  ? clear_bhb_loop+0x40/0x90
[   85.709255][ T5919]  ? clear_bhb_loop+0x40/0x90
[   85.713944][ T5919]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   85.719866][ T5919] RIP: 0033:0x7faab07a8f19
[   85.724286][ T5919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   85.743908][ T5919] RSP: 002b:00007faab1681028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   85.752324][ T5919] RAX: ffffffffffffffda RBX: 00007faab0a25fa0 RCX: 00007faab07a8f19
[   85.760293][ T5919] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003
[   85.768263][ T5919] RBP: 00007faab0837f6d R08: 0000000000000020 R09: 0000000000000000
[   85.776240][ T5919] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000
[   85.784210][ T5919] R13: 00007faab0a26038 R14: 00007faab0a25fa0 R15: 00007ffd808be258
[   85.792204][ T5919]  </TASK>
[   86.005026][ T5870] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   86.031025][ T5924] loop0: detected capacity change from 0 to 128
[   86.229305][ T5870] usb 2-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61
[   86.263220][ T5870] usb 2-1: config 0 interface 0 has no altsetting 0
[   86.270604][ T5929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'.
[   86.296754][ T5870] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   86.307933][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   86.317662][ T5870] usb 2-1: Product: syz
[   86.323025][ T5870] usb 2-1: Manufacturer: syz
[   86.328630][ T5870] usb 2-1: SerialNumber: syz
[   86.346076][ T5870] usb 2-1: config 0 descriptor??
[   86.386220][ T5916] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   86.417312][ T5870] usb 2-1: selecting invalid altsetting 0
[   86.655670][ T5916] usb 2-1: BOGUS urb xfer, pipe 0 != type 3
[   87.165881][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.279443][ T4697] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.415703][ T4697] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.503104][ T4697] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.641340][ T4697] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.682447][ T5940] loop3: detected capacity change from 0 to 16
[   87.694034][ T5940] erofs: Unknown parameter '00000000000000000000000ÿÿ'
[   87.921034][   T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   87.933199][   T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   87.954305][   T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   87.966411][   T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   87.975085][   T52] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   87.982502][   T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   88.079488][ T5944] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   88.219642][ T5941] rxe_eth0 speed is unknown, defaulting to 1000
[   88.423888][ T5613] usb 2-1: USB disconnect, device number 2
[   88.737150][ T5959] loop3: detected capacity change from 0 to 164
[   88.894040][ T5959] iso9660: Corrupted directory entry in block 2 of inode 1920
[   89.757752][ T5979] loop3: detected capacity change from 0 to 128
[   89.849191][ T5979] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   89.948242][ T5982] binder: 5981:5982 ioctl 4018620d 0 returned -22
[   90.078222][ T5032] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   90.093521][ T5786] Bluetooth: hci3: command tx timeout
[   90.221956][ T5032] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   90.365825][ T5979] FAT-fs (loop3): error, parent dir link count too low (2)
[   90.418506][ T5979] FAT-fs (loop3): Filesystem has been set read-only
[   90.642748][ T5782] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   90.689082][ T5987] loop0: detected capacity change from 0 to 512
[   90.801136][ T5987] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.828483][ T5987] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   91.018962][ T5941] chnl_net:caif_netlink_parms(): no params data found
[   91.092016][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.340069][ T6011] loop3: detected capacity change from 0 to 128
[   91.702401][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.726494][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.742893][   T11] kworker/u4:0: attempt to access beyond end of device
[   91.742893][   T11] loop3: rw=1, sector=201, nr_sectors = 840 limit=128
[   91.781389][ T5941] bridge_slave_0: entered allmulticast mode
[   91.795678][ T5941] bridge_slave_0: entered promiscuous mode
[   91.813806][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.821035][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.828968][ T5941] bridge_slave_1: entered allmulticast mode
[   91.838961][ T5941] bridge_slave_1: entered promiscuous mode
[   91.974354][ T6029] loop1: detected capacity change from 0 to 128
[   92.140420][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.157912][ T6029] syz.1.36: attempt to access beyond end of device
[   92.157912][ T6029] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128
[   92.163691][ T5786] Bluetooth: hci3: command tx timeout
[   92.246752][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.275172][ T6029] syz.1.36: attempt to access beyond end of device
[   92.275172][ T6029] loop1: rw=2049, sector=138, nr_sectors = 2 limit=128
[   92.297199][ T6029] Buffer I/O error on dev loop1, logical block 69, lost async page write
[   92.327518][ T6027] syz.1.36: attempt to access beyond end of device
[   92.327518][ T6027] loop1: rw=2049, sector=138, nr_sectors = 2 limit=128
[   92.373329][ T6027] Buffer I/O error on dev loop1, logical block 69, lost async page write
[   92.401090][ T4697] hsr_slave_0: left promiscuous mode
[   92.423665][ T4697] hsr_slave_1: left promiscuous mode
[   92.455950][ T4697] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.475817][ T4697] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.491092][ T4697] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.499293][ T4697] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.522176][ T4697] bridge_slave_1: left allmulticast mode
[   92.532557][ T4697] bridge_slave_1: left promiscuous mode
[   92.540506][ T4697] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.547199][ T6038] loop3: detected capacity change from 0 to 4096
[   92.556747][ T4697] bridge_slave_0: left allmulticast mode
[   92.562559][ T4697] bridge_slave_0: left promiscuous mode
[   92.576804][ T4697] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.607800][ T6038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.646656][   T28] audit: type=1800 audit(1794343040.798:2): pid=6038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.38" name="file0" dev="loop3" ino=13 res=0 errno=0
[   92.647667][ T4697] veth1_macvtap: left promiscuous mode
[   92.674118][ T6038] fs-verity: sha256 using implementation "sha256-avx2"
[   92.689929][ T6038] fs-verity (loop3, inode 13): Error -22 reading file data
[   92.697766][ T6038] fs-verity (loop3, inode 13): Error -22 building Merkle tree
[   92.721086][ T4697] veth0_macvtap: left promiscuous mode
[   92.742896][ T4697] veth1_vlan: left promiscuous mode
[   92.755768][ T4697] veth0_vlan: left promiscuous mode
[   92.837319][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.917359][ T6046] FAULT_INJECTION: forcing a failure.
[   92.917359][ T6046] name failslab, interval 1, probability 0, space 0, times 0
[   92.955807][ T6046] CPU: 0 PID: 6046 Comm: syz.1.40 Not tainted syzkaller #0
[   92.963106][ T6046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   92.973211][ T6046] Call Trace:
[   92.976520][ T6046]  <TASK>
[   92.979478][ T6046]  dump_stack_lvl+0x18c/0x250
[   92.984252][ T6046]  ? show_regs_print_info+0x20/0x20
[   92.989499][ T6046]  ? load_image+0x420/0x420
[   92.994060][ T6046]  ? __might_sleep+0xe0/0xe0
[   92.998719][ T6046]  ? __lock_acquire+0x7eb0/0x7eb0
[   93.003917][ T6046]  should_fail_ex+0x394/0x4c0
[   93.008731][ T6046]  should_failslab+0x9/0x20
[   93.013282][ T6046]  slab_pre_alloc_hook+0x59/0x300
[   93.018373][ T6046]  ? ima_eventdigest_init_common+0x2b9/0x490
[   93.024434][ T6046]  ? ima_eventdigest_init_common+0x2b9/0x490
[   93.030485][ T6046]  __kmem_cache_alloc_node+0x53/0x260
[   93.035914][ T6046]  ? ima_eventdigest_init_common+0x2b9/0x490
[   93.041917][ T6046]  __kmalloc+0xa7/0x240
[   93.046093][ T6046]  ima_eventdigest_init_common+0x2b9/0x490
[   93.051917][ T6046]  ? ima_eventdigest_init+0x4d0/0x4d0
[   93.057324][ T6046]  ? ima_alloc_init_template+0x172/0x6e0
[   93.063008][ T6046]  ? rcu_is_watching+0x15/0xb0
[   93.067812][ T6046]  ? ima_alloc_init_template+0x172/0x6e0
[   93.073458][ T6046]  ? __kmalloc+0xe5/0x240
[   93.077806][ T6046]  ? ima_eventdigest_init_common+0x490/0x490
[   93.083794][ T6046]  ima_alloc_init_template+0x308/0x6e0
[   93.089530][ T6046]  ima_store_measurement+0x1db/0x690
[   93.094869][ T6046]  ? ima_collect_measurement+0xa30/0xa30
[   93.100500][ T6046]  ? ima_d_path+0x1e4/0x240
[   93.105006][ T6046]  ? ima_get_cache_status+0xd0/0xd0
[   93.110213][ T6046]  process_measurement+0x1304/0x1d50
[   93.115518][ T6046]  ? ima_file_mmap+0x1d0/0x1d0
[   93.120368][ T6046]  ? aa_file_perm+0x11b/0xee0
[   93.125078][ T6046]  ? __lock_acquire+0x7eb0/0x7eb0
[   93.130172][ T6046]  ? apparmor_current_getsecid_subj+0xb5/0x120
[   93.136357][ T6046]  ima_file_mmap+0x184/0x1d0
[   93.140981][ T6046]  ? ima_file_free+0x4b0/0x4b0
[   93.145764][ T6046]  ? bpf_lsm_mmap_file+0x9/0x10
[   93.150625][ T6046]  ? security_mmap_file+0x122/0x180
[   93.155828][ T6046]  vm_mmap_pgoff+0x128/0x3f0
[   93.160488][ T6046]  ? account_locked_vm+0x200/0x200
[   93.165633][ T6046]  ? hugetlb_file_setup+0x419/0x610
[   93.170913][ T6046]  ksys_mmap_pgoff+0x565/0x720
[   93.175726][ T6046]  do_syscall_64+0x55/0xb0
[   93.180154][ T6046]  ? clear_bhb_loop+0x40/0x90
[   93.184850][ T6046]  ? clear_bhb_loop+0x40/0x90
[   93.189570][ T6046]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   93.195485][ T6046] RIP: 0033:0x7ff5b81a8f19
[   93.199914][ T6046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   93.219541][ T6046] RSP: 002b:00007ff5b913a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[   93.227973][ T6046] RAX: ffffffffffffffda RBX: 00007ff5b8425fa0 RCX: 00007ff5b81a8f19
[   93.235952][ T6046] RDX: 0000000002000007 RSI: 0000000000002000 RDI: 0000200000000000
[   93.243928][ T6046] RBP: 00007ff5b8237f6d R08: ffffffffffffffff R09: 0000000040000000
[   93.251939][ T6046] R10: 0000000000040032 R11: 0000000000000246 R12: 0000000000000000
[   93.259930][ T6046] R13: 00007ff5b8426038 R14: 00007ff5b8425fa0 R15: 00007ffe923f5d98
[   93.267936][ T6046]  </TASK>
[   93.282915][   T27] cfg80211: failed to load regulatory.db
[   93.305063][   T28] audit: type=1804 audit(1794343041.458:3): pid=6046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.1.40" name="anon_hugepage" dev="hugetlbfs" ino=8603 res=0 errno=0
[   93.614907][ T6057] loop0: detected capacity change from 0 to 256
[   94.029736][ T6053] loop1: detected capacity change from 0 to 32768
[   94.160993][ T6053] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[   94.247009][ T5786] Bluetooth: hci3: command tx timeout
[   94.297393][ T6053] XFS (loop1): Ending clean mount
[   94.339040][ T6053] XFS (loop1): Quotacheck needed: Please wait.
[   94.437924][ T6053] XFS (loop1): Quotacheck: Done.
[   94.505207][ T6053] jffs2: notice: (6053) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   94.532260][ T4697] team0 (unregistering): Port device team_slave_1 removed
[   94.600512][ T4697] team0 (unregistering): Port device team_slave_0 removed
[   94.670048][ T4697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   94.738278][ T4697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   95.012675][ T5783] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[   95.321243][ T4697] bond0 (unregistering): Released all slaves
[   95.528564][ T5941] team0: Port device team_slave_0 added
[   95.575840][ T5941] team0: Port device team_slave_1 added
[   95.694191][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.701241][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.793540][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.821011][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.862104][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.940358][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.194119][ T5941] hsr_slave_0: entered promiscuous mode
[   96.237667][ T5941] hsr_slave_1: entered promiscuous mode
[   96.329053][ T5786] Bluetooth: hci3: command tx timeout
[   96.354681][ T6101] FAULT_INJECTION: forcing a failure.
[   96.354681][ T6101] name failslab, interval 1, probability 0, space 0, times 0
[   96.374214][ T6101] CPU: 1 PID: 6101 Comm: syz.1.52 Not tainted syzkaller #0
[   96.381498][ T6101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   96.391594][ T6101] Call Trace:
[   96.394909][ T6101]  <TASK>
[   96.397866][ T6101]  dump_stack_lvl+0x18c/0x250
[   96.402591][ T6101]  ? show_regs_print_info+0x20/0x20
[   96.407821][ T6101]  ? load_image+0x420/0x420
[   96.412344][ T6101]  ? __might_sleep+0xe0/0xe0
[   96.416941][ T6101]  ? __lock_acquire+0x7eb0/0x7eb0
[   96.421967][ T6101]  ? mark_lock+0x94/0x320
[   96.426309][ T6101]  should_fail_ex+0x394/0x4c0
[   96.431000][ T6101]  should_failslab+0x9/0x20
[   96.435508][ T6101]  slab_pre_alloc_hook+0x59/0x300
[   96.440544][ T6101]  ? lockdep_softirqs_off+0x440/0x440
[   96.445939][ T6101]  ? afs_alloc_vlserver_list+0x22/0xa0
[   96.451408][ T6101]  ? afs_alloc_vlserver_list+0x22/0xa0
[   96.456864][ T6101]  __kmem_cache_alloc_node+0x53/0x260
[   96.462234][ T6101]  ? lockdep_softirqs_off+0x440/0x440
[   96.467650][ T6101]  ? afs_alloc_vlserver_list+0x22/0xa0
[   96.473112][ T6101]  __kmalloc+0xa7/0x240
[   96.477277][ T6101]  afs_alloc_vlserver_list+0x22/0xa0
[   96.482566][ T6101]  afs_lookup_cell+0xd29/0x1680
[   96.487430][ T6101]  ? afs_find_cell+0x310/0x310
[   96.492198][ T6101]  ? afs_net+0x45/0x270
[   96.496369][ T6101]  ? afs_net+0x45/0x270
[   96.500537][ T6101]  afs_cell_init+0x6e/0x300
[   96.505048][ T6101]  proc_simple_write+0x109/0x140
[   96.510006][ T6101]  ? proc_remove+0x80/0x80
[   96.514425][ T6101]  proc_reg_write+0x1e4/0x2d0
[   96.519111][ T6101]  ? proc_reg_llseek+0x280/0x280
[   96.524056][ T6101]  vfs_write+0x299/0x9a0
[   96.528309][ T6101]  ? file_end_write+0x250/0x250
[   96.533168][ T6101]  ? __fget_files+0x28/0x460
[   96.537768][ T6101]  ? __fget_files+0x3fc/0x460
[   96.542458][ T6101]  ? __fdget_pos+0x2a3/0x330
[   96.547145][ T6101]  ? ksys_write+0x74/0x260
[   96.551576][ T6101]  ksys_write+0x151/0x260
[   96.555921][ T6101]  ? __ia32_sys_read+0x90/0x90
[   96.560694][ T6101]  ? lockdep_hardirqs_on+0x98/0x150
[   96.565939][ T6101]  do_syscall_64+0x55/0xb0
[   96.570364][ T6101]  ? clear_bhb_loop+0x40/0x90
[   96.575048][ T6101]  ? clear_bhb_loop+0x40/0x90
[   96.579733][ T6101]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   96.585639][ T6101] RIP: 0033:0x7ff5b81a8f19
[   96.590066][ T6101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   96.609682][ T6101] RSP: 002b:00007ff5b913a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   96.618185][ T6101] RAX: ffffffffffffffda RBX: 00007ff5b8425fa0 RCX: 00007ff5b81a8f19
[   96.626159][ T6101] RDX: 0000000000000002 RSI: 0000200000000300 RDI: 0000000000000003
[   96.634130][ T6101] RBP: 00007ff5b8237f6d R08: 0000000000000000 R09: 0000000000000000
[   96.642107][ T6101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   96.650081][ T6101] R13: 00007ff5b8426038 R14: 00007ff5b8425fa0 R15: 00007ffe923f5d98
[   96.658074][ T6101]  </TASK>
[   96.930140][ T6076] loop0: detected capacity change from 0 to 40427
[   96.979544][ T6106] loop1: detected capacity change from 0 to 128
[   97.027987][ T6076] F2FS-fs (loop0): invalid crc value
[   97.050755][ T6106] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[   97.105511][ T6076] F2FS-fs (loop0): Found nat_bits in checkpoint
[   97.122755][ T6106] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[   97.273868][ T5941] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   97.287694][ T6106] EXT4-fs (loop1): shut down requested (0)
[   97.293139][ T6076] F2FS-fs (loop0): Start checkpoint disabled!
[   97.306485][ T5941] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   97.355546][ T5941] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   97.366654][ T6076] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   97.376495][ T5783] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   97.406821][ T5941] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   97.508644][ T5786] Bluetooth: Unexpected continuation frame (len 16)
[   97.647262][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.681052][ T5941] 8021q: adding VLAN 0 to HW filter on device team0
[   97.717044][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.724326][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.741929][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.749220][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.300048][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.661038][ T5868] rxe_eth0 speed is unknown, defaulting to 1000
[   98.821661][ T5941] veth0_vlan: entered promiscuous mode
[   98.846213][ T5941] veth1_vlan: entered promiscuous mode
[   98.908579][ T6136] loop3: detected capacity change from 0 to 40427
[   98.917291][ T5941] veth0_macvtap: entered promiscuous mode
[   98.935049][ T5941] veth1_macvtap: entered promiscuous mode
[   98.948192][ T6136] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   98.983827][ T6136] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   98.999087][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.017223][ T6136] F2FS-fs (loop3): invalid crc value
[   99.037652][ T6136] F2FS-fs (loop3): Found nat_bits in checkpoint
[   99.050961][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.070801][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.091759][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.141361][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.172598][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.200394][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.221156][ T6136] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   99.243023][ T6136] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   99.280471][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.325756][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.343587][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.358312][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.369441][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.380574][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.398188][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.430947][ T5941] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.450605][ T5941] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.462785][ T5941] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.478549][ T5941] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.665291][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.705153][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.792161][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.823054][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.136153][ T6183] loop4: detected capacity change from 0 to 512
[  100.189515][ T6183] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  100.234987][ T6183] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  100.277497][ T6183] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  100.326658][ T6183] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:478: comm syz.4.16: Invalid block bitmap block 0 in block_group 0
[  100.388606][ T6183] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6660: Corrupt filesystem
[  100.429844][ T6183] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.16: attempt to clear invalid blocks 983261 len 1
[  100.482244][ T6183] EXT4-fs error (device loop4): __ext4_get_inode_loc:4509: comm syz.4.16: Invalid inode table block 0 in block_group 0
[  100.537401][ T6183] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5974: Corrupt filesystem
[  100.582971][ T6183] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  100.644863][ T6183] EXT4-fs error (device loop4): __ext4_get_inode_loc:4509: comm syz.4.16: Invalid inode table block 0 in block_group 0
[  100.694624][ T6183] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5974: Corrupt filesystem
[  100.725166][ T6183] EXT4-fs error (device loop4): ext4_truncate:4314: inode #11: comm syz.4.16: mark_inode_dirty error
[  100.755889][ T6183] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  100.779534][ T6183] EXT4-fs error (device loop4): __ext4_get_inode_loc:4509: comm syz.4.16: Invalid inode table block 0 in block_group 0
[  100.816643][ T6198] TC_ACT_REPEAT abuse ?
[  100.819532][ T6183] EXT4-fs (loop4): 1 truncate cleaned up
[  100.845652][ T6183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.063175][ T6183] EXT4-fs error (device loop4): __ext4_get_inode_loc:4509: comm syz.4.16: Invalid inode table block 0 in block_group 0
[  101.179358][ T5941] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.229380][ T6207] loop0: detected capacity change from 0 to 256
[  101.239127][   T28] audit: type=1800 audit(1794343049.398:4): pid=6171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.58" name="file1" dev="loop3" ino=12 res=0 errno=0
[  101.371628][ T6171] syz.3.58 (6171) used greatest stack depth: 19976 bytes left
[  101.408162][ T6207] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  101.631223][ T6207] exFAT-fs (loop0): start_clu is invalid cluster(0xff000008)
[  101.657523][ T6213] syz.1.69 uses obsolete (PF_INET,SOCK_PACKET)
[  101.880541][ T6220] FAULT_INJECTION: forcing a failure.
[  101.880541][ T6220] name fail_futex, interval 1, probability 0, space 0, times 1
[  101.882059][ T6218] FAULT_INJECTION: forcing a failure.
[  101.882059][ T6218] name failslab, interval 1, probability 0, space 0, times 0
[  101.894493][ T6220] CPU: 0 PID: 6220 Comm: syz.0.71 Not tainted syzkaller #0
[  101.915170][ T6220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  101.925280][ T6220] Call Trace:
[  101.928661][ T6220]  <TASK>
[  101.931603][ T6220]  dump_stack_lvl+0x18c/0x250
[  101.936328][ T6220]  ? show_regs_print_info+0x20/0x20
[  101.941555][ T6220]  ? load_image+0x420/0x420
[  101.946103][ T6220]  should_fail_ex+0x394/0x4c0
[  101.950817][ T6220]  futex_lock_pi_atomic+0x14c/0xd00
[  101.956052][ T6220]  ? pi_state_update_owner+0x340/0x340
[  101.961535][ T6220]  ? futex_setup_timer+0xc0/0xc0
[  101.966500][ T6220]  futex_lock_pi+0x22b/0xa00
[  101.971122][ T6220]  ? futex_wait_queue+0x138/0x1b0
[  101.976168][ T6220]  ? fixup_pi_state_owner+0x5f0/0x5f0
[  101.981575][ T6220]  ? file_end_write+0x159/0x250
[  101.986443][ T6220]  ? vfs_write+0x5de/0x9a0
[  101.990904][ T6220]  do_futex+0x23d/0x3e0
[  101.995079][ T6220]  ? __ia32_sys_get_robust_list+0x110/0x110
[  102.000998][ T6220]  __se_sys_futex+0x3a9/0x440
[  102.005702][ T6220]  ? __x64_sys_futex+0xf0/0xf0
[  102.010499][ T6220]  ? __x64_sys_futex+0x21/0xf0
[  102.015293][ T6220]  do_syscall_64+0x55/0xb0
[  102.019767][ T6220]  ? clear_bhb_loop+0x40/0x90
[  102.024482][ T6220]  ? clear_bhb_loop+0x40/0x90
[  102.029206][ T6220]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  102.035129][ T6220] RIP: 0033:0x7f4dc8ba8f19
[  102.039572][ T6220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  102.059252][ T6220] RSP: 002b:00007f4dc9abe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  102.067723][ T6220] RAX: ffffffffffffffda RBX: 00007f4dc8e25fa0 RCX: 00007f4dc8ba8f19
[  102.075992][ T6220] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000000
[  102.084004][ T6220] RBP: 00007f4dc8c37f6d R08: 0000000000000000 R09: 0000000034fffffd
[  102.092149][ T6220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  102.100313][ T6220] R13: 00007f4dc8e26038 R14: 00007f4dc8e25fa0 R15: 00007ffe53d16d38
[  102.108353][ T6220]  </TASK>
[  102.136610][ T6218] CPU: 1 PID: 6218 Comm: syz.4.70 Not tainted syzkaller #0
[  102.143973][ T6218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  102.154059][ T6218] Call Trace:
[  102.157356][ T6218]  <TASK>
[  102.160300][ T6218]  dump_stack_lvl+0x18c/0x250
[  102.165016][ T6218]  ? show_regs_print_info+0x20/0x20
[  102.170256][ T6218]  ? load_image+0x420/0x420
[  102.174800][ T6218]  ? __might_sleep+0xe0/0xe0
[  102.179446][ T6218]  ? __lock_acquire+0x7eb0/0x7eb0
[  102.184525][ T6218]  should_fail_ex+0x394/0x4c0
[  102.189247][ T6218]  should_failslab+0x9/0x20
[  102.193950][ T6218]  slab_pre_alloc_hook+0x59/0x300
[  102.199017][ T6218]  ? __request_module+0x2ed/0x600
[  102.204092][ T6218]  ? __request_module+0x2ed/0x600
[  102.209154][ T6218]  __kmem_cache_alloc_node+0x53/0x260
[  102.214571][ T6218]  ? __request_module+0x2ed/0x600
[  102.219633][ T6218]  __kmalloc_node_track_caller+0xa4/0x230
[  102.225404][ T6218]  kstrdup+0x3b/0x80
[  102.229346][ T6218]  __request_module+0x2ed/0x600
[  102.234241][ T6218]  ? module_enforce_rwx_sections+0x150/0x150
[  102.240277][ T6218]  ? nvmf_dev_write+0x1bba/0x2b50
[  102.245346][ T6218]  ? __kmem_cache_free+0xba/0x1f0
[  102.250420][ T6218]  nvmf_dev_write+0x1d6b/0x2b50
[  102.255340][ T6218]  ? nvmf_host_put+0x190/0x190
[  102.260132][ T6218]  ? aa_file_perm+0x11b/0xee0
[  102.264835][ T6218]  ? futex_wait_queue+0x138/0x1b0
[  102.269925][ T6218]  ? common_file_perm+0x198/0x1f0
[  102.274996][ T6218]  ? fsnotify_perm+0x5d/0x5e0
[  102.279731][ T6218]  ? security_file_permission+0x79/0xa0
[  102.285355][ T6218]  ? nvmf_host_put+0x190/0x190
[  102.290161][ T6218]  vfs_write+0x299/0x9a0
[  102.294474][ T6218]  ? file_end_write+0x250/0x250
[  102.299382][ T6218]  ? __fget_files+0x28/0x460
[  102.304016][ T6218]  ? __fget_files+0x3fc/0x460
[  102.308742][ T6218]  ? __fdget_pos+0x1d8/0x330
[  102.313383][ T6218]  ? ksys_write+0x74/0x260
[  102.317841][ T6218]  ksys_write+0x151/0x260
[  102.322228][ T6218]  ? __ia32_sys_read+0x90/0x90
[  102.327026][ T6218]  ? lockdep_hardirqs_on+0x98/0x150
[  102.332252][ T6218]  do_syscall_64+0x55/0xb0
[  102.336701][ T6218]  ? clear_bhb_loop+0x40/0x90
[  102.341414][ T6218]  ? clear_bhb_loop+0x40/0x90
[  102.346134][ T6218]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  102.352064][ T6218] RIP: 0033:0x7f42b75a8f19
[  102.356511][ T6218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  102.376158][ T6218] RSP: 002b:00007f42b83d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  102.384581][ T6218] RAX: ffffffffffffffda RBX: 00007f42b7825fa0 RCX: 00007f42b75a8f19
[  102.392569][ T6218] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000004
[  102.400538][ T6218] RBP: 00007f42b7637f6d R08: 0000000000000000 R09: 0000000000000000
[  102.408518][ T6218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  102.416487][ T6218] R13: 00007f42b7826038 R14: 00007f42b7825fa0 R15: 00007ffdc8c6b828
[  102.424467][ T6218]  </TASK>
[  102.477654][ T6218] nvme_fabrics: missing parameter 'transport=%s'
[  102.486334][ T6218] nvme_fabrics: missing parameter 'nqn=%s'
[  102.809015][ T6237] loop1: detected capacity change from 0 to 2048
[  102.887578][ T6237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.990417][ T6237] EXT4-fs error (device loop1): ext4_read_inline_dir:1600: inode #12: block 9: comm syz.1.74: path /18/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=45, inode=4195584, rec_len=0, size=60 fake=0
[  103.182104][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.370841][ T6250] TC_ACT_REPEAT abuse ?
[  103.659444][   T28] audit: type=1800 audit(1794343051.818:5): pid=6270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.80" name="bus" dev="sda1" ino=2045 res=0 errno=0
[  103.691006][ T6267] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  103.980951][ T6282] FAULT_INJECTION: forcing a failure.
[  103.980951][ T6282] name failslab, interval 1, probability 0, space 0, times 0
[  103.999806][ T6282] CPU: 1 PID: 6282 Comm: syz.4.83 Not tainted syzkaller #0
[  104.007104][ T6282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  104.017371][ T6282] Call Trace:
[  104.020686][ T6282]  <TASK>
[  104.023650][ T6282]  dump_stack_lvl+0x18c/0x250
[  104.028388][ T6282]  ? show_regs_print_info+0x20/0x20
[  104.033631][ T6282]  ? load_image+0x420/0x420
[  104.038182][ T6282]  ? __might_sleep+0xe0/0xe0
[  104.042819][ T6282]  ? __lock_acquire+0x7eb0/0x7eb0
[  104.047892][ T6282]  should_fail_ex+0x394/0x4c0
[  104.052628][ T6282]  should_failslab+0x9/0x20
[  104.057174][ T6282]  slab_pre_alloc_hook+0x59/0x300
[  104.062243][ T6282]  ? x509_cert_parse+0x15c/0x7b0
[  104.067226][ T6282]  __kmem_cache_alloc_node+0x53/0x260
[  104.072644][ T6282]  ? x509_cert_parse+0x15c/0x7b0
[  104.077625][ T6282]  kmalloc_trace+0x2a/0xe0
[  104.082095][ T6282]  x509_cert_parse+0x15c/0x7b0
[  104.086918][ T6282]  x509_key_preparse+0x64/0x6c0
[  104.091826][ T6282]  ? down_read+0x1ac/0x2e0
[  104.096284][ T6282]  asymmetric_key_preparse+0xa9/0x140
[  104.101710][ T6282]  __key_create_or_update+0x362/0xa80
[  104.107147][ T6282]  ? key_create_or_update+0x60/0x60
[  104.112419][ T6282]  ? search_process_keyrings_rcu+0x360/0x360
[  104.118467][ T6282]  ? __virt_addr_valid+0x10c/0x380
[  104.123629][ T6282]  ? __virt_addr_valid+0x10c/0x380
[  104.128799][ T6282]  key_create_or_update+0x42/0x60
[  104.133889][ T6282]  __se_sys_add_key+0x34f/0x410
[  104.138794][ T6282]  ? __x64_sys_add_key+0xc0/0xc0
[  104.143782][ T6282]  ? lockdep_hardirqs_on+0x98/0x150
[  104.149018][ T6282]  ? __x64_sys_add_key+0x20/0xc0
[  104.154006][ T6282]  do_syscall_64+0x55/0xb0
[  104.158462][ T6282]  ? clear_bhb_loop+0x40/0x90
[  104.163193][ T6282]  ? clear_bhb_loop+0x40/0x90
[  104.167918][ T6282]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  104.173870][ T6282] RIP: 0033:0x7f42b75a8f19
[  104.178327][ T6282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  104.197976][ T6282] RSP: 002b:00007f42b83d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  104.206441][ T6282] RAX: ffffffffffffffda RBX: 00007f42b7825fa0 RCX: 00007f42b75a8f19
[  104.214460][ T6282] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[  104.222486][ T6282] RBP: 00007f42b7637f6d R08: ffffffffffffffff R09: 0000000000000000
[  104.230544][ T6282] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  104.238569][ T6282] R13: 00007f42b7826038 R14: 00007f42b7825fa0 R15: 00007ffdc8c6b828
[  104.246634][ T6282]  </TASK>
[  104.480337][ T6298] loop1: detected capacity change from 0 to 16
[  104.500849][ T6298] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 142700)
[  104.926469][ T6314] Illegal XDP return value 4294967274 on prog  (id 6) dev N/A, expect packet loss!
[  105.401147][ T6335] loop1: detected capacity change from 0 to 512
[  105.563728][ T5613] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  105.774950][ T5613] usb 1-1: Using ep0 maxpacket: 16
[  105.787279][ T5613] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.802190][ T5613] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.814010][ T5613] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  105.834060][ T5613] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00
[  105.843310][ T5613] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.862080][ T5613] usb 1-1: config 0 descriptor??
[  105.867457][   T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  106.085770][   T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  106.107203][   T27] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00
[  106.135205][   T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.154864][   T27] usb 2-1: Product: syz
[  106.159115][   T27] usb 2-1: Manufacturer: syz
[  106.174683][   T27] usb 2-1: SerialNumber: syz
[  106.199893][   T27] gspca_main: mr97310a-2.14.0 probing 08ca:0110
[  106.359867][ T5613] input: HID 054c:03d5 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:03D5.0001/input/input5
[  106.517069][ T5613] sony 0003:054C:03D5.0001: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.0-1/input0
[  106.699702][   T56] usb 1-1: USB disconnect, device number 2
[  107.047732][   T27] gspca_mr97310a: reg write [19] error -71
[  107.064538][   T27] mr97310a: probe of 2-1:1.0 failed with error -71
[  107.083261][   T27] usb 2-1: USB disconnect, device number 3
[  107.363946][ T5613] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  107.581744][ T5613] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  107.602386][ T5613] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  107.618190][ T5613] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  107.630944][ T5613] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  107.663937][ T6372] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  107.666249][ T5613] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  107.716753][ T5613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.732767][ T5613] usb 4-1: Product: syz
[  107.737579][ T5613] usb 4-1: Manufacturer: syz
[  107.742224][ T5613] usb 4-1: SerialNumber: syz
[  107.823687][ T6376] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  107.986353][ T6364] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  107.998387][ T6364] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  108.088809][ T6386] loop1: detected capacity change from 0 to 2048
[  108.623180][ T6364] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  108.642793][ T6364] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  108.863771][   T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  108.891919][ T5613] cdc_ncm 4-1:1.0: bind() failure
[  108.916252][ T5613] cdc_ncm: probe of 4-1:1.1 failed with error -71
[  108.940679][ T5613] cdc_mbim: probe of 4-1:1.1 failed with error -71
[  108.960927][ T5613] usbtest: probe of 4-1:1.1 failed with error -71
[  109.002425][ T5613] usb 4-1: USB disconnect, device number 2
[  109.073500][   T27] usb 2-1: Using ep0 maxpacket: 32
[  109.085495][ T6420] kvm: pic: non byte write
[  109.104345][   T27] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  109.122043][   T27] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.157780][   T27] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  109.176224][   T27] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  109.195005][   T27] usb 2-1: Product: syz
[  109.202658][   T27] usb 2-1: Manufacturer: syz
[  109.231848][   T27] hub 2-1:4.0: USB hub found
[  109.424508][ T6430] netlink: 64 bytes leftover after parsing attributes in process `syz.0.114'.
[  109.450550][   T27] hub 2-1:4.0: config failed, can't read hub descriptor (err -22)
[  109.466443][ T6430] syzkaller1: entered promiscuous mode
[  109.472003][ T6430] syzkaller1: entered allmulticast mode
[  109.539131][   T27] usb 2-1: USB disconnect, device number 4
[  109.822129][ T6437] kvm: pic: non byte write
[  110.108125][   T27] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  110.160931][ T6448] loop0: detected capacity change from 0 to 4096
[  110.201222][ T6448] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting.
[  110.211244][ T6448] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  110.218526][ T6448]  loop0:
[  110.311864][   T27] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  110.331962][   T27] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  110.366529][   T27] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  110.375874][   T27] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  110.394237][   T27] usb 2-1: Product: syz
[  110.403590][   T27] usb 2-1: Manufacturer: syz
[  110.429313][   T27] hub 2-1:4.0: USB hub found
[  110.633596][   T27] hub 2-1:4.0: 2 ports detected
[  110.668782][ T6455] netlink: 28 bytes leftover after parsing attributes in process `syz.3.122'.
[  110.679526][ T6455] netlink: 28 bytes leftover after parsing attributes in process `syz.3.122'.
[  110.712333][ T6455] TC_ACT_REPEAT abuse ?
[  110.826861][ T6459] TC_ACT_REPEAT abuse ?
[  110.929545][ T6461] binder: 6460:6461 ioctl c0306201 2000000001c0 returned -14
[  111.117648][ T6464] 0: reclassify loop, rule prio 0, protocol 03
[  111.398636][ T6396] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  111.445677][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.110'.
[  111.741424][ T6478] TC_ACT_REPEAT abuse ?
[  111.866851][   T27] hub 2-1:4.0: activate --> -90
[  112.083331][ T5865] usb 2-1: USB disconnect, device number 5
[  112.089558][   T27] hub 2-1:4.0: hub_ext_port_status failed (err = -71)
[  112.177338][ T6485] syzkaller1: entered promiscuous mode
[  112.184136][ T6485] syzkaller1: entered allmulticast mode
[  112.487544][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.134'.
[  112.528147][ T6496] TC_ACT_REPEAT abuse ?
[  113.060647][ T6509] netlink: 'syz.1.139': attribute type 1 has an invalid length.
[  113.146417][ T6509] bond1: entered promiscuous mode
[  113.164131][ T6509] 8021q: adding VLAN 0 to HW filter on device bond1
[  113.219307][ T6513] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  113.293744][ T6513] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  113.315869][ T6512] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  113.347095][ T6513] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  113.514934][ T6515] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  113.543618][ T6515] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  114.969699][ T6543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.146'.
[  115.044907][ T6545] binder: 6544:6545 ioctl c0306201 2000000001c0 returned -14
[  115.060304][ T6547] loop4: detected capacity change from 0 to 128
[  115.134398][ T6549] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  115.348153][ T6553] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2812553464 (22500427712 ns) > initial count (17799498648 ns). Using initial count to start timer.
[  115.420955][ T6557] loop3: detected capacity change from 0 to 512
[  115.496953][ T5795] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  115.556387][   T50] kworker/u4:3: attempt to access beyond end of device
[  115.556387][   T50] loop4: rw=1, sector=201, nr_sectors = 840 limit=128
[  115.600681][ T6560] syzkaller1: entered allmulticast mode
[  116.633865][ T5865] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  116.744729][ T6600] xt_bpf: check failed: parse error
[  116.823754][ T5865] usb 4-1: Using ep0 maxpacket: 16
[  116.846087][ T5865] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[  116.872361][ T5865] usb 4-1: config 0 has no interface number 0
[  116.883790][ T5865] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  116.913966][ T5865] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  116.945087][ T5865] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  116.959350][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.968167][ T5865] usb 4-1: Product: syz
[  116.972374][ T5865] usb 4-1: Manufacturer: syz
[  116.977570][ T5865] usb 4-1: SerialNumber: syz
[  117.001242][ T5865] usb 4-1: config 0 descriptor??
[  117.027337][ T6586] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  117.046516][ T6586] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  117.197351][ T6611] xt_bpf: check failed: parse error
[  117.310503][ T6586] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  117.340744][ T6586] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  117.467178][ T6618] loop0: detected capacity change from 0 to 512
[  117.551548][ T5774] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  117.573745][ T5865] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  119.084785][ T6626] loop4: detected capacity change from 0 to 32768
[  119.107343][ T6650] loop1: detected capacity change from 0 to 164
[  119.190888][ T5865] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[  119.202219][ T5865] asix: probe of 4-1:0.34 failed with error -71
[  119.237320][ T6626] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.170 (6626)
[  119.241650][ T5865] usb 4-1: USB disconnect, device number 3
[  119.295530][ T6650] netlink: 28 bytes leftover after parsing attributes in process `syz.1.174'.
[  119.343510][ T6650] netlink: 28 bytes leftover after parsing attributes in process `syz.1.174'.
[  119.461733][ T6626] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  119.497002][ T6658] netlink: 28 bytes leftover after parsing attributes in process `syz.1.174'.
[  119.527484][ T6658] netlink: 28 bytes leftover after parsing attributes in process `syz.1.174'.
[  119.556217][ T6626] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  119.603978][ T6626] BTRFS info (device loop4): using free space tree
[  119.733985][ T6658] Zero length message leads to an empty skb
[  119.881507][ T6684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.178'.
[  120.035206][ T6626] BTRFS info (device loop4): enabling ssd optimizations
[  120.086639][ T6626] BTRFS info (device loop4): auto enabling async discard
[  120.427373][ T6700] TC_ACT_REPEAT abuse ?
[  120.692277][   T28] audit: type=1800 audit(1794343068.848:6): pid=6711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.170" name="file1" dev="loop4" ino=260 res=0 errno=0
[  120.738818][ T6709] ip_tables: iptables: counters copy to user failed while replacing table
[  121.070097][   T11] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  121.352861][ T6728] FAULT_INJECTION: forcing a failure.
[  121.352861][ T6728] name failslab, interval 1, probability 0, space 0, times 0
[  121.388159][ T6728] CPU: 0 PID: 6728 Comm: syz.1.185 Not tainted syzkaller #0
[  121.395518][ T6728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  121.405607][ T6728] Call Trace:
[  121.408905][ T6728]  <TASK>
[  121.411851][ T6728]  dump_stack_lvl+0x18c/0x250
[  121.416595][ T6728]  ? show_regs_print_info+0x20/0x20
[  121.421841][ T6728]  ? load_image+0x420/0x420
[  121.426386][ T6728]  ? __might_sleep+0xe0/0xe0
[  121.431017][ T6728]  ? __lock_acquire+0x7eb0/0x7eb0
[  121.436137][ T6728]  should_fail_ex+0x394/0x4c0
[  121.440859][ T6728]  should_failslab+0x9/0x20
[  121.445396][ T6728]  slab_pre_alloc_hook+0x59/0x300
[  121.450456][ T6728]  ? x509_cert_parse+0x5b/0x7b0
[  121.455318][ T6728]  __kmem_cache_alloc_node+0x53/0x260
[  121.460690][ T6728]  ? x509_cert_parse+0x5b/0x7b0
[  121.465539][ T6728]  kmalloc_trace+0x2a/0xe0
[  121.469962][ T6728]  x509_cert_parse+0x5b/0x7b0
[  121.474642][ T6728]  x509_key_preparse+0x64/0x6c0
[  121.479492][ T6728]  ? down_read+0x1ac/0x2e0
[  121.483906][ T6728]  asymmetric_key_preparse+0xa9/0x140
[  121.489288][ T6728]  __key_create_or_update+0x362/0xa80
[  121.494664][ T6728]  ? key_create_or_update+0x60/0x60
[  121.499880][ T6728]  ? search_process_keyrings_rcu+0x360/0x360
[  121.505866][ T6728]  ? __virt_addr_valid+0x10c/0x380
[  121.510980][ T6728]  ? __virt_addr_valid+0x10c/0x380
[  121.516099][ T6728]  key_create_or_update+0x42/0x60
[  121.521124][ T6728]  __se_sys_add_key+0x34f/0x410
[  121.525984][ T6728]  ? __x64_sys_add_key+0xc0/0xc0
[  121.530939][ T6728]  ? lockdep_hardirqs_on+0x98/0x150
[  121.536139][ T6728]  ? __x64_sys_add_key+0x20/0xc0
[  121.541079][ T6728]  do_syscall_64+0x55/0xb0
[  121.545503][ T6728]  ? clear_bhb_loop+0x40/0x90
[  121.550183][ T6728]  ? clear_bhb_loop+0x40/0x90
[  121.554858][ T6728]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  121.560773][ T6728] RIP: 0033:0x7ff5b81a8f19
[  121.565210][ T6728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  121.584813][ T6728] RSP: 002b:00007ff5b913a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  121.593229][ T6728] RAX: ffffffffffffffda RBX: 00007ff5b8425fa0 RCX: 00007ff5b81a8f19
[  121.601196][ T6728] RDX: 0000200000001840 RSI: 0000000000000000 RDI: 0000200000001340
[  121.609165][ T6728] RBP: 00007ff5b8237f6d R08: fffffffffffffffd R09: 0000000000000000
[  121.617127][ T6728] R10: 00000000000001d8 R11: 0000000000000246 R12: 0000000000000000
[  121.625093][ T6728] R13: 00007ff5b8426038 R14: 00007ff5b8425fa0 R15: 00007ffe923f5d98
[  121.633076][ T6728]  </TASK>
[  121.826566][ T5941] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  122.470822][ T6756] loop1: detected capacity change from 0 to 512
[  122.720458][ T6756] EXT4-fs: quotafile must be on filesystem root
[  122.935301][ T6775] loop1: detected capacity change from 0 to 8
[  123.318139][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.196'.
[  123.365121][ T6788] process 'syz.1.197' launched './file0' with NULL argv: empty string added
[  123.628714][ T6796] loop1: detected capacity change from 0 to 128
[  123.793638][ T5613] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  123.976692][   T11] kworker/u4:0: attempt to access beyond end of device
[  123.976692][   T11] loop1: rw=1, sector=201, nr_sectors = 840 limit=128
[  124.018488][ T5613] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  124.028202][ T5613] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.054759][ T5613] usb 5-1: config 0 descriptor??
[  124.081714][ T5613] cp210x 5-1:0.0: cp210x converter detected
[  124.480929][ T5613] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32
[  124.531789][ T5613] usb 5-1: cp210x converter now attached to ttyUSB0
[  124.732681][ T5613] usb 5-1: USB disconnect, device number 2
[  124.789197][ T5613] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  124.821353][ T5613] cp210x 5-1:0.0: device disconnected
[  126.054225][ T6866] TC_ACT_REPEAT abuse ?
[  126.282300][ T6872] loop3: detected capacity change from 0 to 128
[  126.317343][ T6872] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  126.453670][ T5613] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  126.511294][ T6872] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  126.673977][ T5613] usb 1-1: Using ep0 maxpacket: 32
[  126.687289][ T5613] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  126.712662][ T5613] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.737432][ T5613] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  126.752708][ T5613] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  126.762202][ T5613] usb 1-1: Product: syz
[  126.771005][ T5613] usb 1-1: Manufacturer: syz
[  126.790233][ T5613] hub 1-1:4.0: USB hub found
[  126.998134][ T5613] hub 1-1:4.0: config failed, can't read hub descriptor (err -22)
[  127.046767][ T5613] usb 1-1: USB disconnect, device number 3
[  127.311506][ T6883] loop1: detected capacity change from 0 to 40427
[  127.328646][ T6883] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  127.345739][ T6883] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  127.356572][ T6883] F2FS-fs (loop1): invalid crc value
[  127.393682][   T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  127.482244][ T6883] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  127.496021][ T6883] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  127.573581][   T23] usb 5-1: Using ep0 maxpacket: 32
[  127.588458][   T23] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  127.604536][   T23] usb 5-1: config 0 has no interface number 0
[  127.611851][   T23] usb 5-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping
[  127.622921][   T23] usb 5-1: config 0 interface 1 has no altsetting 0
[  127.629753][ T5613] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  127.641495][   T23] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  127.651583][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.660001][   T23] usb 5-1: Product: syz
[  127.670388][   T23] usb 5-1: Manufacturer: syz
[  127.676813][   T23] usb 5-1: SerialNumber: syz
[  127.679310][ T5783] syz-executor: attempt to access beyond end of device
[  127.679310][ T5783] loop1: rw=2049, sector=45096, nr_sectors = 32 limit=40427
[  127.692673][   T23] usb 5-1: config 0 descriptor??
[  127.711158][ T5783] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  127.720320][ T5783] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  127.727949][ T5783] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  127.735800][ T5783] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  127.826007][ T5613] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  127.844840][ T5613] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  127.883144][ T5613] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  127.903698][ T5613] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  127.912156][ T5613] usb 1-1: Product: syz
[  127.929961][   T23] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  127.943646][ T5613] usb 1-1: Manufacturer: syz
[  127.968126][   T23] cx231xx 5-1:0.1: Failed to read PCB config
[  127.976620][ T5613] hub 1-1:4.0: USB hub found
[  127.993840][   T23] cx231xx: probe of 5-1:0.1 failed with error -71
[  128.022860][   T23] usb 5-1: USB disconnect, device number 3
[  128.197643][ T5613] hub 1-1:4.0: 2 ports detected
[  128.225571][ T6903] TC_ACT_REPEAT abuse ?
[  128.543793][ T6906] loop3: detected capacity change from 0 to 512
[  128.564656][ T6906] EXT4-fs: quotafile must be on filesystem root
[  128.588852][   T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  128.793556][   T23] usb 5-1: Using ep0 maxpacket: 32
[  128.801717][   T23] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  128.810822][   T23] usb 5-1: config 0 has no interface number 0
[  128.817474][   T23] usb 5-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping
[  128.828218][   T23] usb 5-1: config 0 interface 1 has no altsetting 0
[  128.838110][   T23] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  128.847440][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.855569][   T23] usb 5-1: Product: syz
[  128.859787][   T23] usb 5-1: Manufacturer: syz
[  128.864665][   T23] usb 5-1: SerialNumber: syz
[  128.872097][   T23] usb 5-1: config 0 descriptor??
[  129.101376][   T23] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  129.120305][   T23] cx231xx 5-1:0.1: bad config in buspower!!!!
[  129.120305][   T23] config_info=40
[  129.133242][   T23] cx231xx 5-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4)
[  129.255624][   T23] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --110
[  129.272221][   T23] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  129.282522][   T23] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  129.291455][   T23] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  129.300465][   T23] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  129.309900][   T23] cx231xx 5-1:0.1: Failed to set devmode to analog: error: -32
[  129.362910][   T23] i2c i2c-2: Added multiplexed i2c bus 4
[  129.385085][   T23] i2c i2c-2: Added multiplexed i2c bus 5
[  129.401721][   T23] cx231xx 5-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]!
[  129.413495][   T23] cx231xx 5-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]!
[  129.459497][   T23] cx231xx: probe of 5-1:0.1 failed with error -71
[  129.473463][ T5613] hub 1-1:4.0: activate --> -90
[  129.486967][   T23] usb 5-1: USB disconnect, device number 4
[  129.677358][ T5613] hub 1-1:4.0: hub_ext_port_status failed (err = -71)
[  129.678740][   T56] usb 1-1: USB disconnect, device number 4
[  130.305819][ T6916] loop1: detected capacity change from 0 to 128
[  130.328568][ T6916] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  130.456518][ T6916] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  130.957052][ T6911] loop3: detected capacity change from 0 to 32768
[  130.975395][ T6911] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.229 (6911)
[  131.029285][ T6911] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  131.057506][ T6911] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  131.076145][ T6911] BTRFS info (device loop3): using free space tree
[  131.182968][ T6911] BTRFS info (device loop3): enabling ssd optimizations
[  131.188216][ T6917] loop4: detected capacity change from 0 to 40427
[  131.198515][ T6911] BTRFS info (device loop3): auto enabling async discard
[  131.228879][ T6917] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  131.260215][ T6917] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  131.308672][ T6917] F2FS-fs (loop4): invalid crc value
[  131.536680][   T28] audit: type=1800 audit(1794343079.698:7): pid=6911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.229" name="file1" dev="loop3" ino=260 res=0 errno=0
[  131.574505][ T5032] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[  131.613754][   T28] audit: type=1800 audit(1794343079.718:8): pid=6911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.229" name="file1" dev="loop3" ino=260 res=0 errno=0
[  131.705744][ T6917] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  131.737131][ T6917] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  131.923636][ T6911] ip_tables: iptables: counters copy to user failed while replacing table
[  131.999733][ T6955] binder: 6954:6955 ioctl c0306201 2000000003c0 returned -14
[  132.047428][ T5941] syz-executor: attempt to access beyond end of device
[  132.047428][ T5941] loop4: rw=2049, sector=45096, nr_sectors = 32 limit=40427
[  132.065584][ T5782] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  132.088785][ T5941] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  132.114787][ T5941] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  132.121808][ T5941] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  132.140463][ T5941] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  132.172759][   T28] audit: type=1804 audit(1794343080.318:9): pid=6957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.237" name="/newroot/74/bus/file1" dev="overlay" ino=427 res=1 errno=0
[  132.382145][ T6961] loop0: detected capacity change from 0 to 128
[  132.453769][ T6961] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  132.523520][   T23] usb 2-1: new low-speed USB device number 6 using dummy_hcd
[  132.535748][ T6961] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  132.716101][   T23] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  132.736456][   T23] usb 2-1: config 0 has no interface number 0
[  132.743842][   T23] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  132.772822][   T23] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  132.783855][   T23] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  132.796455][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.833575][   T23] usb 2-1: config 0 descriptor??
[  132.839962][ T6959] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  132.840066][ T6968] FAULT_INJECTION: forcing a failure.
[  132.840066][ T6968] name fail_futex, interval 1, probability 0, space 0, times 0
[  132.884304][   T23] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  132.885879][ T6968] CPU: 0 PID: 6968 Comm: syz.4.238 Not tainted syzkaller #0
[  132.901911][ T6968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  132.912025][ T6968] Call Trace:
[  132.915331][ T6968]  <TASK>
[  132.918284][ T6968]  dump_stack_lvl+0x18c/0x250
[  132.923006][ T6968]  ? show_regs_print_info+0x20/0x20
[  132.928243][ T6968]  ? load_image+0x420/0x420
[  132.932868][ T6968]  ? min_deadline_cb_rotate+0x150/0x150
[  132.938458][ T6968]  should_fail_ex+0x394/0x4c0
[  132.943274][ T6968]  get_futex_key+0x134/0xf40
[  132.947905][ T6968]  ? futex_setup_timer+0xc0/0xc0
[  132.952878][ T6968]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  132.958901][ T6968]  ? __lock_acquire+0x7eb0/0x7eb0
[  132.963967][ T6968]  ? lock_chain_count+0x20/0x20
[  132.968850][ T6968]  futex_wait_setup+0xbc/0x270
[  132.973650][ T6968]  ? futex_wait_multiple+0x970/0x970
[  132.978974][ T6968]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  132.984910][ T6968]  ? _raw_spin_unlock+0x40/0x40
[  132.989808][ T6968]  futex_wait+0x1cf/0x640
[  132.994181][ T6968]  ? futex_wait_setup+0x270/0x270
[  132.999284][ T6968]  do_futex+0x2ff/0x3e0
[  133.003479][ T6968]  ? __ia32_sys_get_robust_list+0x110/0x110
[  133.009415][ T6968]  ? aa_af_perm+0x330/0x330
[  133.013962][ T6968]  __se_sys_futex+0x3a9/0x440
[  133.018685][ T6968]  ? __x64_sys_futex+0xf0/0xf0
[  133.023481][ T6968]  ? __x64_sys_futex+0x21/0xf0
[  133.028320][ T6968]  do_syscall_64+0x55/0xb0
[  133.032764][ T6968]  ? clear_bhb_loop+0x40/0x90
[  133.037478][ T6968]  ? clear_bhb_loop+0x40/0x90
[  133.042216][ T6968]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  133.048150][ T6968] RIP: 0033:0x7f42b75a8f19
[  133.052602][ T6968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  133.072239][ T6968] RSP: 002b:00007f42b83d60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  133.080687][ T6968] RAX: ffffffffffffffda RBX: 00007f42b7825fa8 RCX: 00007f42b75a8f19
[  133.088697][ T6968] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f42b7825fa8
[  133.096707][ T6968] RBP: 00007f42b7825fa0 R08: 0000000000000000 R09: 0000000000000000
[  133.105078][ T6968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  133.113088][ T6968] R13: 00007f42b7826038 R14: 00007ffdc8c6b740 R15: 00007ffdc8c6b828
[  133.121108][ T6968]  </TASK>
[  133.146125][ T6968] lo: entered allmulticast mode
[  133.156052][ T6965] lo: left allmulticast mode
[  133.632706][ T6980] loop3: detected capacity change from 0 to 2048
[  133.667935][ T6980] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  133.738184][ T6982] jffs2: notice: (6982) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  133.939755][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  133.947700][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  134.098768][ T6987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.247'.
[  134.425448][ T6999] lo: entered allmulticast mode
[  135.230348][    T9] usb 2-1: USB disconnect, device number 6
[  135.471427][ T7014] jffs2: notice: (7014) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  137.156655][ T7059] netlink: 60 bytes leftover after parsing attributes in process `syz.4.263'.
[  138.963334][ T7071] jffs2: notice: (7071) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  139.358321][ T7084] netlink: 'syz.4.272': attribute type 39 has an invalid length.
[  139.391011][ T7068] loop1: detected capacity change from 0 to 32768
[  139.432628][ T7086] loop3: detected capacity change from 0 to 512
[  139.443645][ T7068] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.266 (7068)
[  139.476579][ T7086] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  139.542416][ T7068] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  139.561915][ T7086] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.271: invalid indirect mapped block 9 (level 0)
[  139.616546][ T7068] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  139.663910][ T7068] BTRFS info (device loop1): using free space tree
[  139.682446][ T7086] EXT4-fs (loop3): 1 truncate cleaned up
[  139.710327][ T7086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.775713][ T7086] syz.3.271 (pid 7086) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  139.844000][ T7068] BTRFS info (device loop1): enabling ssd optimizations
[  139.869660][ T7068] BTRFS info (device loop1): auto enabling async discard
[  139.900128][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.608816][   T28] audit: type=1800 audit(1794343088.748:10): pid=7119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.266" name="file1" dev="loop1" ino=260 res=0 errno=0
[  140.728487][ T7120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.277'.
[  140.749191][ T7119] ip_tables: iptables: counters copy to user failed while replacing table
[  140.838357][   T50] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[  140.909545][ T7125] loop4: detected capacity change from 0 to 256
[  141.047341][ T5783] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  141.240311][   T28] audit: type=1800 audit(1794343089.398:11): pid=7136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.281" name="num" dev="configfs" ino=12185 res=0 errno=0
[  141.405214][ T7138] jffs2: notice: (7138) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  141.644004][ T7141] netlink: 'syz.3.283': attribute type 39 has an invalid length.
[  141.770842][ T7143] loop4: detected capacity change from 0 to 2048
[  141.824489][ T7143] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  142.231468][ T7151] loop3: detected capacity change from 0 to 4096
[  142.355738][ T7151] ntfs3: loop3: Failed to load $Extend (-22).
[  142.362407][ T7151] ntfs3: loop3: Failed to initialize $Extend.
[  142.535062][ T7145] loop0: detected capacity change from 0 to 32768
[  142.553901][ T7145] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.293 (7145)
[  142.597402][ T7145] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  142.614833][ T7145] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  142.625907][ T7145] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  142.636338][ T7145] BTRFS info (device loop0): use zstd compression, level 3
[  142.656369][ T7145] BTRFS info (device loop0): using free space tree
[  142.682399][   T28] audit: type=1804 audit(1794343090.838:12): pid=7156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.285" name="/newroot/75/file1/bus/file1" dev="loop3" ino=34 res=1 errno=0
[  142.816748][ T7145] BTRFS info (device loop0): enabling ssd optimizations
[  142.842625][ T7145] BTRFS info (device loop0): auto enabling async discard
[  143.020095][   T28] audit: type=1800 audit(1794343091.178:13): pid=7145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.293" name="bus" dev="loop0" ino=263 res=0 errno=0
[  143.065681][   T28] audit: type=1800 audit(1794343091.208:14): pid=7174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.293" name="bus" dev="loop0" ino=263 res=0 errno=0
[  143.120016][ T7178] FAULT_INJECTION: forcing a failure.
[  143.120016][ T7178] name failslab, interval 1, probability 0, space 0, times 0
[  143.134569][ T7178] CPU: 1 PID: 7178 Comm: syz.1.298 Not tainted syzkaller #0
[  143.141903][ T7178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  143.152030][ T7178] Call Trace:
[  143.155311][ T7178]  <TASK>
[  143.158239][ T7178]  dump_stack_lvl+0x18c/0x250
[  143.162919][ T7178]  ? show_regs_print_info+0x20/0x20
[  143.168131][ T7178]  ? load_image+0x420/0x420
[  143.172655][ T7178]  ? __might_sleep+0xe0/0xe0
[  143.177286][ T7178]  ? __lock_acquire+0x7eb0/0x7eb0
[  143.182334][ T7178]  ? trace_contention_end+0x39/0xe0
[  143.187549][ T7178]  should_fail_ex+0x394/0x4c0
[  143.192255][ T7178]  should_failslab+0x9/0x20
[  143.196775][ T7178]  slab_pre_alloc_hook+0x59/0x300
[  143.201818][ T7178]  ? __list_lru_init+0xb4/0x600
[  143.206726][ T7178]  ? __list_lru_init+0xb4/0x600
[  143.211647][ T7178]  __kmem_cache_alloc_node+0x53/0x260
[  143.217027][ T7178]  ? __list_lru_init+0xb4/0x600
[  143.221884][ T7178]  __kmalloc+0xa7/0x240
[  143.226078][ T7178]  __list_lru_init+0xb4/0x600
[  143.230798][ T7178]  alloc_super+0x77b/0x910
[  143.235256][ T7178]  ? kernfs_get_tree+0x910/0x910
[  143.240221][ T7178]  sget_fc+0x2ee/0x930
[  143.244300][ T7178]  ? kernfs_test_super+0x100/0x100
[  143.249426][ T7178]  kernfs_get_tree+0x1ec/0x910
[  143.254206][ T7178]  ? vfs_parse_fs_string+0x170/0x170
[  143.259508][ T7178]  ? kernfs_super_ns+0x60/0x60
[  143.264285][ T7178]  sysfs_get_tree+0x46/0x110
[  143.268874][ T7178]  vfs_get_tree+0x8c/0x280
[  143.273299][ T7178]  do_new_mount+0x24a/0xa60
[  143.277946][ T7178]  __se_sys_mount+0x2e7/0x3d0
[  143.282634][ T7178]  ? __x64_sys_mount+0xc0/0xc0
[  143.287414][ T7178]  ? lockdep_hardirqs_on+0x98/0x150
[  143.292673][ T7178]  ? __x64_sys_mount+0x20/0xc0
[  143.297467][ T7178]  do_syscall_64+0x55/0xb0
[  143.301898][ T7178]  ? clear_bhb_loop+0x40/0x90
[  143.306583][ T7178]  ? clear_bhb_loop+0x40/0x90
[  143.311275][ T7178]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  143.317181][ T7178] RIP: 0033:0x7ff5b81a8f19
[  143.321597][ T7178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  143.341301][ T7178] RSP: 002b:00007ff5b913a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  143.349747][ T7178] RAX: ffffffffffffffda RBX: 00007ff5b8425fa0 RCX: 00007ff5b81a8f19
[  143.357739][ T7178] RDX: 0000200000000500 RSI: 00002000000004c0 RDI: 0000000000000000
[  143.365728][ T7178] RBP: 00007ff5b8237f6d R08: 0000000000000000 R09: 0000000000000000
[  143.373705][ T7178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  143.381670][ T7178] R13: 00007ff5b8426038 R14: 00007ff5b8425fa0 R15: 00007ffe923f5d98
[  143.389652][ T7178]  </TASK>
[  143.543595][ T5865] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  143.722481][ T7181] loop4: detected capacity change from 0 to 32768
[  143.744104][ T7181] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.299 (7181)
[  143.767567][ T5865] usb 1-1: unable to get BOS descriptor or descriptor too short
[  143.778142][ T5865] usb 1-1: no configurations
[  143.782853][ T7181] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  143.793806][ T5865] usb 1-1: can't read configurations, error -22
[  143.800389][ T7181] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  143.811144][ T7181] BTRFS warning (device loop4): excessive commit interval 3581
[  143.819199][ T7181] BTRFS info (device loop4): force zlib compression, level 3
[  143.827132][ T7181] BTRFS info (device loop4): metadata ratio 107050
[  143.834107][ T7181] BTRFS info (device loop4): turning on flush-on-commit
[  143.841258][ T7181] BTRFS info (device loop4): max_inline at 4096
[  143.858180][ T7181] BTRFS info (device loop4): using free space tree
[  143.887690][ T7181] BTRFS info (device loop4): enabling ssd optimizations
[  144.155559][ T5941] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  144.397339][ T5781] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  144.451882][ T7206] jffs2: notice: (7206) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  145.009972][ T7217] loop1: detected capacity change from 0 to 2048
[  145.063003][ T7217] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  145.076789][ T7213] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  145.666713][ T7233] loop3: detected capacity change from 0 to 4096
[  145.738905][ T7218] loop0: detected capacity change from 0 to 32768
[  145.765509][ T7233] NILFS (loop3): invalid segment: Checksum error in segment payload
[  145.776161][ T7218] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.290 (7218)
[  145.789766][ T7233] NILFS (loop3): trying rollback from an earlier position
[  145.848135][ T7218] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  145.877439][ T7218] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  145.907216][ T7218] BTRFS info (device loop0): using free space tree
[  145.916911][ T7233] NILFS (loop3): recovery complete
[  145.956173][ T7242] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  146.056204][ T7218] BTRFS info (device loop0): enabling ssd optimizations
[  146.090298][ T7218] BTRFS info (device loop0): auto enabling async discard
[  146.240761][ T7253] NILFS (loop3): error -2 preparing GC: cannot delete virtual blocks from DAT file
[  146.306049][   T28] audit: type=1800 audit(1794343094.458:15): pid=7218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.290" name="file1" dev="loop0" ino=260 res=0 errno=0
[  146.341691][   T28] audit: type=1800 audit(1794343094.468:16): pid=7218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.290" name="file1" dev="loop0" ino=260 res=0 errno=0
[  146.396371][ T1131] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[  146.532872][ T7218] ip_tables: iptables: counters copy to user failed while replacing table
[  146.630794][ T5781] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  146.810590][ T5786] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11
[  147.195515][ T7271] input: syz1 as /devices/virtual/input/input6
[  147.211575][ T7271] FAULT_INJECTION: forcing a failure.
[  147.211575][ T7271] name failslab, interval 1, probability 0, space 0, times 0
[  147.226758][ T7271] CPU: 1 PID: 7271 Comm: syz.1.308 Not tainted syzkaller #0
[  147.234909][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  147.244996][ T7271] Call Trace:
[  147.248282][ T7271]  <TASK>
[  147.251216][ T7271]  dump_stack_lvl+0x18c/0x250
[  147.256078][ T7271]  ? show_regs_print_info+0x20/0x20
[  147.261324][ T7271]  ? load_image+0x420/0x420
[  147.266110][ T7271]  ? __might_sleep+0xe0/0xe0
[  147.270756][ T7271]  ? __lock_acquire+0x7eb0/0x7eb0
[  147.275834][ T7271]  should_fail_ex+0x394/0x4c0
[  147.280558][ T7271]  should_failslab+0x9/0x20
[  147.285071][ T7271]  slab_pre_alloc_hook+0x59/0x300
[  147.290104][ T7271]  kmem_cache_alloc+0x5a/0x2d0
[  147.294870][ T7271]  ? __kernfs_new_node+0xe5/0x7f0
[  147.299931][ T7271]  __kernfs_new_node+0xe5/0x7f0
[  147.304798][ T7271]  ? kernfs_new_node+0x260/0x260
[  147.309836][ T7271]  ? up_write+0x1be/0x410
[  147.314180][ T7271]  kernfs_new_node+0x14c/0x260
[  147.318957][ T7271]  __kernfs_create_file+0x4b/0x2e0
[  147.324070][ T7271]  sysfs_add_file_mode_ns+0x237/0x2f0
[  147.329451][ T7271]  sysfs_merge_group+0x184/0x320
[  147.334398][ T7271]  ? sysfs_remove_groups+0xa0/0xa0
[  147.339522][ T7271]  ? device_add_attrs+0x725/0x830
[  147.344577][ T7271]  ? device_add_class_symlinks+0x240/0x240
[  147.350403][ T7271]  dpm_sysfs_add+0xd2/0x270
[  147.354946][ T7271]  device_add+0x55c/0xc40
[  147.359299][ T7271]  cdev_device_add+0x1c6/0x380
[  147.364080][ T7271]  evdev_connect+0x354/0x3f0
[  147.368698][ T7271]  input_register_device+0xcb0/0x1050
[  147.374089][ T7271]  uinput_create_device+0x53e/0x680
[  147.379307][ T7271]  uinput_ioctl_handler+0x437/0x1590
[  147.384601][ T7271]  ? uinput_release+0x50/0x50
[  147.389306][ T7271]  ? bpf_lsm_file_ioctl+0x9/0x10
[  147.394245][ T7271]  ? security_file_ioctl+0x80/0xa0
[  147.399362][ T7271]  ? uinput_poll+0x120/0x120
[  147.403988][ T7271]  __se_sys_ioctl+0xfd/0x170
[  147.408587][ T7271]  do_syscall_64+0x55/0xb0
[  147.413008][ T7271]  ? clear_bhb_loop+0x40/0x90
[  147.417686][ T7271]  ? clear_bhb_loop+0x40/0x90
[  147.422366][ T7271]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  147.428263][ T7271] RIP: 0033:0x7ff5b81a8f19
[  147.432679][ T7271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  147.452301][ T7271] RSP: 002b:00007ff5b913a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  147.460721][ T7271] RAX: ffffffffffffffda RBX: 00007ff5b8425fa0 RCX: 00007ff5b81a8f19
[  147.468777][ T7271] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004
[  147.476740][ T7271] RBP: 00007ff5b8237f6d R08: 0000000000000000 R09: 0000000000000000
[  147.484703][ T7271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  147.492668][ T7271] R13: 00007ff5b8426038 R14: 00007ff5b8425fa0 R15: 00007ffe923f5d98
[  147.500658][ T7271]  </TASK>
[  147.609748][ T7271] input: failed to attach handler evdev to device input6, error: -12
[  147.636040][ T7275] FAULT_INJECTION: forcing a failure.
[  147.636040][ T7275] name failslab, interval 1, probability 0, space 0, times 0
[  147.673631][ T7275] CPU: 0 PID: 7275 Comm: syz.4.310 Not tainted syzkaller #0
[  147.681015][ T7275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  147.691206][ T7275] Call Trace:
[  147.694489][ T7275]  <TASK>
[  147.697410][ T7275]  dump_stack_lvl+0x18c/0x250
[  147.702103][ T7275]  ? show_regs_print_info+0x20/0x20
[  147.707343][ T7275]  ? load_image+0x420/0x420
[  147.711886][ T7275]  ? __might_sleep+0xe0/0xe0
[  147.716512][ T7275]  ? __lock_acquire+0x7eb0/0x7eb0
[  147.721573][ T7275]  should_fail_ex+0x394/0x4c0
[  147.726288][ T7275]  should_failslab+0x9/0x20
[  147.730781][ T7275]  slab_pre_alloc_hook+0x59/0x300
[  147.735817][ T7275]  ? kvm_dev_ioctl+0xaa4/0x1810
[  147.740790][ T7275]  __kmem_cache_alloc_node+0x53/0x260
[  147.746178][ T7275]  ? kvm_dev_ioctl+0xaa4/0x1810
[  147.751031][ T7275]  kmalloc_trace+0x2a/0xe0
[  147.755451][ T7275]  kvm_dev_ioctl+0xaa4/0x1810
[  147.760130][ T7275]  ? kvm_resume+0x1e0/0x1e0
[  147.764635][ T7275]  ? bpf_lsm_file_ioctl+0x9/0x10
[  147.769573][ T7275]  ? security_file_ioctl+0x80/0xa0
[  147.774679][ T7275]  ? kvm_resume+0x1e0/0x1e0
[  147.779182][ T7275]  __se_sys_ioctl+0xfd/0x170
[  147.783778][ T7275]  do_syscall_64+0x55/0xb0
[  147.788198][ T7275]  ? clear_bhb_loop+0x40/0x90
[  147.792877][ T7275]  ? clear_bhb_loop+0x40/0x90
[  147.797557][ T7275]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  147.803456][ T7275] RIP: 0033:0x7f42b75a8f19
[  147.807871][ T7275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  147.827488][ T7275] RSP: 002b:00007f42b83d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  147.835908][ T7275] RAX: ffffffffffffffda RBX: 00007f42b7825fa0 RCX: 00007f42b75a8f19
[  147.843882][ T7275] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004
[  147.851874][ T7275] RBP: 00007f42b7637f6d R08: 0000000000000000 R09: 0000000000000000
[  147.859841][ T7275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  147.867806][ T7275] R13: 00007f42b7826038 R14: 00007f42b7825fa0 R15: 00007ffdc8c6b828
[  147.875792][ T7275]  </TASK>
[  148.024367][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.312'.
[  148.311860][ T7292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.318'.
[  148.485406][ T7290] loop1: detected capacity change from 0 to 32768
[  148.534488][ T7290] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  148.682604][ T7290] XFS (loop1): Ending clean mount
[  148.701550][ T7290] XFS (loop1): Quotacheck needed: Please wait.
[  148.835249][ T7290] XFS (loop1): Quotacheck: Done.
[  148.883511][   T28] audit: type=1800 audit(1794343097.038:17): pid=7290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.315" name="file1" dev="loop1" ino=4422 res=0 errno=0
[  149.116372][ T5783] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  149.223685][   T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  149.425512][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  149.451114][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  149.471281][   T23] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  149.490981][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.524566][   T23] usb 1-1: config 0 descriptor??
[  150.056722][   T23] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x1
[  150.076430][   T23] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[  150.172641][   T23] cp2112 0003:10C4:EA90.0002: error requesting version
[  150.193305][   T23] cp2112: probe of 0003:10C4:EA90.0002 failed with error -71
[  150.220988][   T23] usb 1-1: USB disconnect, device number 7
[  150.268946][ T7333] fido_id[7333]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  151.534946][ T7346] loop0: detected capacity change from 0 to 256
[  151.673531][ T7346] exfat: Deprecated parameter 'utf8'
[  151.678979][ T7346] exfat: Deprecated parameter 'namecase'
[  151.719095][ T7346] exfat: Deprecated parameter 'namecase'
[  151.736871][ T7346] exfat: Deprecated parameter 'utf8'
[  151.826745][ T7346] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  152.117567][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.330'.
[  153.001105][   T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.226698][   T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.456014][   T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.674594][ T7361] loop0: detected capacity change from 0 to 40427
[  153.693913][ T7361] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  153.701034][ T7361] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  153.741081][   T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.789225][ T7361] F2FS-fs (loop0): invalid crc value
[  154.048809][ T7361] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  154.085198][ T7361] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  155.237471][   T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  155.275674][   T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  155.304065][   T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  155.317548][   T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  155.326221][   T52] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  155.333813][   T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  155.790157][ T7388] rxe_eth0 speed is unknown, defaulting to 1000
[  155.853973][ T7409] FAULT_INJECTION: forcing a failure.
[  155.853973][ T7409] name failslab, interval 1, probability 0, space 0, times 0
[  155.883134][ T7409] CPU: 0 PID: 7409 Comm: syz.1.342 Not tainted syzkaller #0
[  155.890500][ T7409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  155.900559][ T7409] Call Trace:
[  155.903832][ T7409]  <TASK>
[  155.906845][ T7409]  dump_stack_lvl+0x18c/0x250
[  155.911520][ T7409]  ? show_regs_print_info+0x20/0x20
[  155.916710][ T7409]  ? load_image+0x420/0x420
[  155.921200][ T7409]  ? __might_sleep+0xe0/0xe0
[  155.925798][ T7409]  ? __lock_acquire+0x7eb0/0x7eb0
[  155.930838][ T7409]  should_fail_ex+0x394/0x4c0
[  155.935593][ T7409]  should_failslab+0x9/0x20
[  155.940119][ T7409]  slab_pre_alloc_hook+0x59/0x300
[  155.945144][ T7409]  kmem_cache_alloc+0x5a/0x2d0
[  155.949908][ T7409]  ? __kernfs_new_node+0xe5/0x7f0
[  155.954930][ T7409]  __kernfs_new_node+0xe5/0x7f0
[  155.959774][ T7409]  ? kernfs_new_node+0x260/0x260
[  155.964737][ T7409]  ? up_write+0x1be/0x410
[  155.969071][ T7409]  kernfs_new_node+0x14c/0x260
[  155.973829][ T7409]  __kernfs_create_file+0x4b/0x2e0
[  155.978930][ T7409]  sysfs_add_file_mode_ns+0x237/0x2f0
[  155.984303][ T7409]  sysfs_merge_group+0x184/0x320
[  155.989248][ T7409]  ? sysfs_remove_groups+0xa0/0xa0
[  155.994358][ T7409]  ? device_add_attrs+0x725/0x830
[  155.999373][ T7409]  ? device_add_class_symlinks+0x240/0x240
[  156.005183][ T7409]  dpm_sysfs_add+0xd2/0x270
[  156.009687][ T7409]  device_add+0x55c/0xc40
[  156.014017][ T7409]  nfc_register_device+0x4e/0x300
[  156.019074][ T7409]  nci_register_device+0x8a3/0xa00
[  156.024232][ T7409]  ? nci_free_device+0x90/0x90
[  156.029001][ T7409]  ? __init_waitqueue_head+0xa8/0x140
[  156.034397][ T7409]  virtual_ncidev_open+0x12c/0x1a0
[  156.039696][ T7409]  ? virtual_ncidev_ioctl+0xd0/0xd0
[  156.044965][ T7409]  misc_open+0x326/0x3a0
[  156.049263][ T7409]  chrdev_open+0x58c/0x600
[  156.054123][ T7409]  ? cd_forget+0x160/0x160
[  156.058588][ T7409]  ? fsnotify_perm+0x3ed/0x5e0
[  156.063411][ T7409]  do_dentry_open+0x880/0x14b0
[  156.068234][ T7409]  ? cd_forget+0x160/0x160
[  156.072763][ T7409]  path_openat+0x284f/0x3270
[  156.077461][ T7409]  ? do_sys_openat2+0xda/0x1d0
[  156.082265][ T7409]  ? __x64_sys_openat+0x139/0x160
[  156.087388][ T7409]  ? verify_lock_unused+0x140/0x140
[  156.092893][ T7409]  ? do_filp_open+0x430/0x430
[  156.097632][ T7409]  do_filp_open+0x1f2/0x430
[  156.102173][ T7409]  ? vfs_tmpfile+0x620/0x620
[  156.106834][ T7409]  ? _raw_spin_unlock+0x28/0x40
[  156.111799][ T7409]  ? alloc_fd+0x590/0x640
[  156.116201][ T7409]  do_sys_openat2+0x134/0x1d0
[  156.120913][ T7409]  ? do_sys_open+0xe0/0xe0
[  156.125369][ T7409]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  156.131387][ T7409]  ? lock_chain_count+0x20/0x20
[  156.136321][ T7409]  __x64_sys_openat+0x139/0x160
[  156.141245][ T7409]  do_syscall_64+0x55/0xb0
[  156.145667][ T7409]  ? clear_bhb_loop+0x40/0x90
[  156.150400][ T7409]  ? clear_bhb_loop+0x40/0x90
[  156.155134][ T7409]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  156.161030][ T7409] RIP: 0033:0x7ff5b81a8f19
[  156.165441][ T7409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  156.185175][ T7409] RSP: 002b:00007ff5b913a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  156.193679][ T7409] RAX: ffffffffffffffda RBX: 00007ff5b8425fa0 RCX: 00007ff5b81a8f19
[  156.201652][ T7409] RDX: 0000000000000002 RSI: 0000200000000300 RDI: ffffffffffffff9c
[  156.209751][ T7409] RBP: 00007ff5b8237f6d R08: 0000000000000000 R09: 0000000000000000
[  156.217739][ T7409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  156.225837][ T7409] R13: 00007ff5b8426038 R14: 00007ff5b8425fa0 R15: 00007ffe923f5d98
[  156.233831][ T7409]  </TASK>
[  156.348980][ T5781] syz-executor: attempt to access beyond end of device
[  156.348980][ T5781] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  156.388438][ T5781] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  157.444938][ T5786] Bluetooth: hci3: command tx timeout
[  158.734725][ T7388] chnl_net:caif_netlink_parms(): no params data found
[  159.267465][   T50] hsr_slave_0: left promiscuous mode
[  159.292931][   T50] hsr_slave_1: left promiscuous mode
[  159.304980][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.334759][ T7470] loop3: detected capacity change from 0 to 512
[  159.339069][   T50] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.365066][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.372678][   T50] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.383738][ T7470] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  159.389146][   T50] bridge_slave_1: left allmulticast mode
[  159.397837][ T7470] System zones: 1-12
[  159.428452][ T7470] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.352: missing EA_INODE flag
[  159.443901][   T50] bridge_slave_1: left promiscuous mode
[  159.449836][   T50] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.467830][ T7465] loop0: detected capacity change from 0 to 32768
[  159.483882][ T7470] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.352: error while reading EA inode 12 err=-117
[  159.485196][ T7465] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.351 (7465)
[  159.511694][ T7470] EXT4-fs (loop3): 1 orphan inode deleted
[  159.519908][ T7470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.524810][ T5786] Bluetooth: hci3: command tx timeout
[  159.542569][   T50] bridge_slave_0: left allmulticast mode
[  159.574011][   T50] bridge_slave_0: left promiscuous mode
[  159.580226][   T50] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.580715][ T7465] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  159.631761][   T50] veth1_macvtap: left promiscuous mode
[  159.637737][   T50] veth0_macvtap: left promiscuous mode
[  159.643589][   T50] veth1_vlan: left promiscuous mode
[  159.649082][   T50] veth0_vlan: left promiscuous mode
[  159.655834][ T7465] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  159.681938][ T7465] BTRFS warning (device loop0): excessive commit interval 3581
[  159.706638][ T7465] BTRFS info (device loop0): force zlib compression, level 3
[  159.726466][ T7465] BTRFS info (device loop0): metadata ratio 107050
[  159.733062][ T7465] BTRFS info (device loop0): turning on flush-on-commit
[  159.746976][ T7465] BTRFS info (device loop0): max_inline at 4096
[  159.757729][ T7465] BTRFS info (device loop0): using free space tree
[  159.773348][   T28] audit: type=1804 audit(1794343107.928:18): pid=7470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.352" name="/newroot/97/file0/file0/file1" dev="overlay" ino=20 res=1 errno=0
[  159.939585][ T7465] BTRFS info (device loop0): enabling ssd optimizations
[  160.042026][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.395572][ T5781] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  161.145317][ T7504] loop1: detected capacity change from 0 to 128
[  161.227250][ T7504] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  161.304282][   T11] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  161.374112][ T7504] FAT-fs (loop1): error, parent dir link count too low (2)
[  161.391783][ T7504] FAT-fs (loop1): Filesystem has been set read-only
[  161.455186][ T5783] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  161.603743][ T5786] Bluetooth: hci3: command tx timeout
[  161.776796][   T50] team0 (unregistering): Port device team_slave_1 removed
[  161.942266][   T50] team0 (unregistering): Port device team_slave_0 removed
[  161.978820][ T7506] loop3: detected capacity change from 0 to 40427
[  162.011674][ T7506] F2FS-fs (loop3): invalid crc value
[  162.042040][ T7506] F2FS-fs (loop3): Found nat_bits in checkpoint
[  162.114311][ T7506] F2FS-fs (loop3): Start checkpoint disabled!
[  162.127749][   T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  162.163656][ T7506] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  162.235091][   T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  162.684040][ T7530] loop3: detected capacity change from 0 to 256
[  162.698728][ T7530] exfat: Unknown parameter '@'
[  162.773823][ T5795] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  162.975803][   T50] bond0 (unregistering): Released all slaves
[  163.126692][ T7388] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.133981][ T7388] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.141275][ T7388] bridge_slave_0: entered allmulticast mode
[  163.152056][ T7388] bridge_slave_0: entered promiscuous mode
[  163.160978][ T7388] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.168284][ T7388] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.184520][ T7388] bridge_slave_1: entered allmulticast mode
[  163.204961][ T7388] bridge_slave_1: entered promiscuous mode
[  163.275784][ T7388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  163.324747][ T7388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  163.412109][ T7388] team0: Port device team_slave_0 added
[  163.500833][ T7388] team0: Port device team_slave_1 added
[  163.561644][ T7541] kvm: pic: non byte write
[  163.591953][ T7388] batman_adv: batadv0: Adding interface: batadv_slave_0
[  163.606397][ T7388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.651504][ T5865] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  163.677185][ T7388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  163.686820][ T5786] Bluetooth: hci3: command tx timeout
[  163.721566][ T7388] batman_adv: batadv0: Adding interface: batadv_slave_1
[  163.760968][ T7388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.825777][ T7388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  163.880334][ T7556] loop3: detected capacity change from 0 to 128
[  163.907781][ T5865] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  163.935437][ T7556] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  163.954912][ T5865] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  163.973902][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  164.005451][ T5865] usb 1-1: SerialNumber: syz
[  164.035783][ T7556] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8)
[  164.046556][ T7388] hsr_slave_0: entered promiscuous mode
[  164.064522][ T7556] FAT-fs (loop3): Filesystem has been set read-only
[  164.071456][ T7556] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522)
[  164.085187][ T7388] hsr_slave_1: entered promiscuous mode
[  164.686139][ T7568] FAULT_INJECTION: forcing a failure.
[  164.686139][ T7568] name failslab, interval 1, probability 0, space 0, times 0
[  164.725280][ T7568] CPU: 1 PID: 7568 Comm: syz.1.378 Not tainted syzkaller #0
[  164.732658][ T7568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  164.742755][ T7568] Call Trace:
[  164.746064][ T7568]  <TASK>
[  164.749025][ T7568]  dump_stack_lvl+0x18c/0x250
[  164.753759][ T7568]  ? show_regs_print_info+0x20/0x20
[  164.759009][ T7568]  ? load_image+0x420/0x420
[  164.763551][ T7568]  ? __might_sleep+0xe0/0xe0
[  164.768195][ T7568]  ? __lock_acquire+0x7eb0/0x7eb0
[  164.773289][ T7568]  should_fail_ex+0x394/0x4c0
[  164.778017][ T7568]  should_failslab+0x9/0x20
[  164.782551][ T7568]  slab_pre_alloc_hook+0x59/0x300
[  164.787639][ T7568]  ? x509_cert_parse+0x15c/0x7b0
[  164.792647][ T7568]  __kmem_cache_alloc_node+0x53/0x260
[  164.798081][ T7568]  ? x509_cert_parse+0x15c/0x7b0
[  164.803058][ T7568]  kmalloc_trace+0x2a/0xe0
[  164.807506][ T7568]  x509_cert_parse+0x15c/0x7b0
[  164.812278][ T7568]  x509_key_preparse+0x64/0x6c0
[  164.817135][ T7568]  ? down_read+0x1ac/0x2e0
[  164.821550][ T7568]  asymmetric_key_preparse+0xa9/0x140
[  164.826936][ T7568]  __key_create_or_update+0x362/0xa80
[  164.832329][ T7568]  ? key_create_or_update+0x60/0x60
[  164.837648][ T7568]  ? search_process_keyrings_rcu+0x360/0x360
[  164.843645][ T7568]  ? __virt_addr_valid+0x10c/0x380
[  164.848763][ T7568]  ? __virt_addr_valid+0x10c/0x380
[  164.853884][ T7568]  key_create_or_update+0x42/0x60
[  164.858911][ T7568]  __se_sys_add_key+0x34f/0x410
[  164.863760][ T7568]  ? __x64_sys_add_key+0xc0/0xc0
[  164.868702][ T7568]  ? lockdep_hardirqs_on+0x98/0x150
[  164.873913][ T7568]  ? __x64_sys_add_key+0x20/0xc0
[  164.879041][ T7568]  do_syscall_64+0x55/0xb0
[  164.883469][ T7568]  ? clear_bhb_loop+0x40/0x90
[  164.888152][ T7568]  ? clear_bhb_loop+0x40/0x90
[  164.892830][ T7568]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  164.898726][ T7568] RIP: 0033:0x7ff5b81a8f19
[  164.903141][ T7568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  164.922757][ T7568] RSP: 002b:00007ff5b913a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  164.931180][ T7568] RAX: ffffffffffffffda RBX: 00007ff5b8425fa0 RCX: 00007ff5b81a8f19
[  164.939147][ T7568] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[  164.947126][ T7568] RBP: 00007ff5b8237f6d R08: ffffffffffffffff R09: 0000000000000000
[  164.955125][ T7568] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  164.963104][ T7568] R13: 00007ff5b8426038 R14: 00007ff5b8425fa0 R15: 00007ffe923f5d98
[  164.971093][ T7568]  </TASK>
[  164.985279][ T5865] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42
[  165.048532][ T7388] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  165.082823][ T7570] loop3: detected capacity change from 0 to 2048
[  165.090327][ T7388] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  165.123359][ T7388] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  165.236349][ T7570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.386344][ T7388] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  165.398366][ T7570] EXT4-fs error (device loop3): ext4_read_inline_dir:1600: inode #12: block 9: comm syz.3.370: path /104/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=45, inode=4195584, rec_len=0, size=60 fake=0
[  165.420195][    C0] vkms_vblank_simulate: vblank timer overrun
[  165.450144][    T9] usb 1-1: USB disconnect, device number 8
[  165.474206][    T9] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device
[  165.602069][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.927125][ T7388] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.997717][ T7388] 8021q: adding VLAN 0 to HW filter on device team0
[  166.050076][ T5032] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.057336][ T5032] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.066941][ T7597] FAULT_INJECTION: forcing a failure.
[  166.066941][ T7597] name fail_futex, interval 1, probability 0, space 0, times 0
[  166.080683][ T7597] CPU: 1 PID: 7597 Comm: syz.3.375 Not tainted syzkaller #0
[  166.088024][ T7597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  166.098121][ T7597] Call Trace:
[  166.101433][ T7597]  <TASK>
[  166.104409][ T7597]  dump_stack_lvl+0x18c/0x250
[  166.109155][ T7597]  ? show_regs_print_info+0x20/0x20
[  166.114398][ T7597]  ? load_image+0x420/0x420
[  166.118990][ T7597]  should_fail_ex+0x394/0x4c0
[  166.123710][ T7597]  futex_lock_pi_atomic+0x5cf/0xd00
[  166.128952][ T7597]  ? pi_state_update_owner+0x340/0x340
[  166.134469][ T7597]  ? futex_setup_timer+0xc0/0xc0
[  166.139463][ T7597]  futex_lock_pi+0x22b/0xa00
[  166.144097][ T7597]  ? fixup_pi_state_owner+0x5f0/0x5f0
[  166.149541][ T7597]  ? __lock_acquire+0x7eb0/0x7eb0
[  166.154598][ T7597]  ? file_end_write+0x159/0x250
[  166.159495][ T7597]  ? vfs_write+0x5de/0x9a0
[  166.163960][ T7597]  do_futex+0x23d/0x3e0
[  166.168146][ T7597]  ? __ia32_sys_get_robust_list+0x110/0x110
[  166.174088][ T7597]  __se_sys_futex+0x3a9/0x440
[  166.178825][ T7597]  ? __x64_sys_futex+0xf0/0xf0
[  166.183639][ T7597]  ? __x64_sys_futex+0x21/0xf0
[  166.188447][ T7597]  do_syscall_64+0x55/0xb0
[  166.192898][ T7597]  ? clear_bhb_loop+0x40/0x90
[  166.197616][ T7597]  ? clear_bhb_loop+0x40/0x90
[  166.202337][ T7597]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  166.208278][ T7597] RIP: 0033:0x7faab07a8f19
[  166.212750][ T7597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  166.232403][ T7597] RSP: 002b:00007faab1681028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  166.240889][ T7597] RAX: ffffffffffffffda RBX: 00007faab0a25fa0 RCX: 00007faab07a8f19
[  166.248914][ T7597] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000000
[  166.256950][ T7597] RBP: 00007faab0837f6d R08: 0000000000000000 R09: 0000000034fffffd
[  166.264970][ T7597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  166.272982][ T7597] R13: 00007faab0a26038 R14: 00007faab0a25fa0 R15: 00007ffd808be258
[  166.280997][ T7597]  </TASK>
[  166.320300][ T2954] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.327522][ T2954] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.429764][ T7388] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  166.664725][ T7591] loop1: detected capacity change from 0 to 32768
[  166.705752][ T7591] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.373 (7591)
[  166.749690][ T7591] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  166.785724][ T7591] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  166.839122][ T7591] BTRFS warning (device loop1): excessive commit interval 3581
[  166.864122][ T7615] loop3: detected capacity change from 0 to 16
[  166.867278][ T7591] BTRFS info (device loop1): force zlib compression, level 3
[  166.913512][ T7591] BTRFS info (device loop1): metadata ratio 107050
[  166.920146][ T7591] BTRFS info (device loop1): turning on flush-on-commit
[  166.923697][ T7615] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 142700)
[  166.975699][ T7591] BTRFS info (device loop1): max_inline at 4096
[  166.976199][ T7388] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.982211][ T7591] BTRFS info (device loop1): using free space tree
[  167.203555][ T7591] BTRFS info (device loop1): enabling ssd optimizations
[  167.724760][ T5783] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  167.977266][ T7388] veth0_vlan: entered promiscuous mode
[  168.060042][ T7388] veth1_vlan: entered promiscuous mode
[  168.113259][ T7665] FAULT_INJECTION: forcing a failure.
[  168.113259][ T7665] name fail_futex, interval 1, probability 0, space 0, times 0
[  168.126730][ T7665] CPU: 0 PID: 7665 Comm: syz.1.386 Not tainted syzkaller #0
[  168.134068][ T7665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  168.144165][ T7665] Call Trace:
[  168.147460][ T7665]  <TASK>
[  168.150429][ T7665]  dump_stack_lvl+0x18c/0x250
[  168.155177][ T7665]  ? show_regs_print_info+0x20/0x20
[  168.160431][ T7665]  ? load_image+0x420/0x420
[  168.164989][ T7665]  should_fail_ex+0x394/0x4c0
[  168.169713][ T7665]  futex_lock_pi_atomic+0x14c/0xd00
[  168.174968][ T7665]  ? pi_state_update_owner+0x340/0x340
[  168.180473][ T7665]  ? futex_setup_timer+0xc0/0xc0
[  168.185469][ T7665]  futex_lock_pi+0x22b/0xa00
[  168.190133][ T7665]  ? futex_wait_queue+0x138/0x1b0
[  168.195221][ T7665]  ? fixup_pi_state_owner+0x5f0/0x5f0
[  168.200676][ T7665]  ? file_end_write+0x159/0x250
[  168.205586][ T7665]  ? vfs_write+0x5de/0x9a0
[  168.210055][ T7665]  do_futex+0x23d/0x3e0
[  168.214255][ T7665]  ? __ia32_sys_get_robust_list+0x110/0x110
[  168.220194][ T7665]  __se_sys_futex+0x3a9/0x440
[  168.224919][ T7665]  ? __x64_sys_futex+0xf0/0xf0
[  168.229729][ T7665]  ? __x64_sys_futex+0x21/0xf0
[  168.234545][ T7665]  do_syscall_64+0x55/0xb0
[  168.238994][ T7665]  ? clear_bhb_loop+0x40/0x90
[  168.243706][ T7665]  ? clear_bhb_loop+0x40/0x90
[  168.248438][ T7665]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  168.254374][ T7665] RIP: 0033:0x7ff5b81a8f19
[  168.258830][ T7665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  168.278476][ T7665] RSP: 002b:00007ff5b913a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  168.286941][ T7665] RAX: ffffffffffffffda RBX: 00007ff5b8425fa0 RCX: 00007ff5b81a8f19
[  168.294952][ T7665] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000000
[  168.296470][ T7388] veth0_macvtap: entered promiscuous mode
[  168.302934][ T7665] RBP: 00007ff5b8237f6d R08: 0000000000000000 R09: 0000000034fffffd
[  168.316689][ T7665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  168.324707][ T7665] R13: 00007ff5b8426038 R14: 00007ff5b8425fa0 R15: 00007ffe923f5d98
[  168.332766][ T7665]  </TASK>
[  168.335846][    C0] vkms_vblank_simulate: vblank timer overrun
[  168.400287][ T7388] veth1_macvtap: entered promiscuous mode
[  168.493588][ T7388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  168.523493][ T7388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.559867][ T7388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  168.580977][ T7388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.613657][ T7388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  168.633455][ T7388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.665271][ T7388] batman_adv: batadv0: Interface activated: batadv_slave_0
[  168.699310][ T7388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.743492][ T7388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.753375][ T7388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.788102][ T7388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.813898][ T7388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.836436][ T7388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.883116][ T7388] batman_adv: batadv0: Interface activated: batadv_slave_1
[  169.064758][ T7388] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.154506][ T7388] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.163370][ T7388] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.235923][ T7388] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  169.287402][ T7682] ------------[ cut here ]------------
[  169.294368][ T7682] kobject: '(null)' (ffff88814bfb40f0): is not initialized, yet kobject_get() is being called.
[  169.352279][ T7682] WARNING: CPU: 1 PID: 7682 at lib/kobject.c:642 kobject_add_internal+0x115/0xc90
[  169.361706][ T7682] Modules linked in:
[  169.365769][ T7682] CPU: 1 PID: 7682 Comm: syz.0.390 Not tainted syzkaller #0
[  169.373097][ T7682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  169.383450][ T7682] RIP: 0010:kobject_add_internal+0x115/0xc90
[  169.389489][ T7682] Code: b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 5e 4e 5d f7 49 8b 34 24 48 c7 c7 00 4f 0b 8c 4c 89 e2 e8 4b ea cd f6 <0f> 0b e9 e5 00 00 00 e8 8f 45 04 f7 b8 fe ff ff ff e9 f0 06 00 00
[  169.409313][ T7682] RSP: 0018:ffffc900043978c8 EFLAGS: 00010246
[  169.415487][ T7682] RAX: 737b6b7190067f00 RBX: ffff888076940078 RCX: 0000000000080000
[  169.423580][ T7682] RDX: ffffc9000e74a000 RSI: 000000000000f7c8 RDI: 000000000000f7c9
[  169.431593][ T7682] RBP: 0000000000000000 R08: ffffc900043974c7 R09: 1ffff92000872e98
[  169.439765][ T7682] R10: dffffc0000000000 R11: fffff52000872e99 R12: ffff88814bfb40f0
[  169.448021][ T7682] R13: dffffc0000000000 R14: ffff88814bfb412c R15: dffffc0000000000
[  169.456883][ T7682] FS:  00007f4dc9a9d6c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000
[  169.466079][ T7682] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  169.472700][ T7682] CR2: 00007f70c7961368 CR3: 000000001fb96000 CR4: 00000000003506e0
[  169.480798][ T7682] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002
[  169.488866][ T7682] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  169.496916][ T7682] Call Trace:
[  169.500218][ T7682]  <TASK>
[  169.503168][ T7682]  ? kfree+0x31/0x1a0
[  169.507230][ T7682]  kobject_add+0x164/0x240
[  169.511660][ T7682]  ? kobject_init+0x1d0/0x1d0
[  169.516368][ T7682]  ? mddev_create_serial_pool+0x1f3/0x4d0
[  169.522100][ T7682]  bind_rdev_to_array+0xb51/0x1270
[  169.527426][ T7682]  ? bind_rdev_to_array+0x5fb/0x1270
[  169.532743][ T7682]  ? md_import_device+0x7b0/0x7b0
[  169.537878][ T7682]  md_add_new_disk+0xe31/0x17b0
[  169.542739][ T7682]  md_ioctl+0x2152/0x24e0
[  169.547115][ T7682]  ? blkdev_common_ioctl+0x10ee/0x2580
[  169.553010][ T7682]  ? md_release+0x1e0/0x1e0
[  169.557815][ T7682]  ? tomoyo_path_number_perm+0x56b/0x5e0
[  169.563551][ T7682]  ? blkdev_bszset+0x1f0/0x1f0
[  169.568347][ T7682]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  169.573907][ T7682]  ? md_release+0x1e0/0x1e0
[  169.578451][ T7682]  blkdev_ioctl+0x5b2/0x730
[  169.582993][ T7682]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  169.588552][ T7682]  ? bpf_lsm_file_ioctl+0x9/0x10
[  169.593623][ T7682]  ? security_file_ioctl+0x80/0xa0
[  169.598781][ T7682]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  169.604887][ T7682]  __se_sys_ioctl+0xfd/0x170
[  169.609542][ T7682]  do_syscall_64+0x55/0xb0
[  169.614171][ T7682]  ? clear_bhb_loop+0x40/0x90
[  169.618892][ T7682]  ? clear_bhb_loop+0x40/0x90
[  169.623674][ T7682]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  169.629608][ T7682] RIP: 0033:0x7f4dc8ba8f19
[  169.634121][ T7682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  169.654788][ T7682] RSP: 002b:00007f4dc9a9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  169.663256][ T7682] RAX: ffffffffffffffda RBX: 00007f4dc8e26090 RCX: 00007f4dc8ba8f19
[  169.671544][ T7682] RDX: 00002000000001c0 RSI: 0000000040140921 RDI: 0000000000000004
[  169.679627][ T7682] RBP: 00007f4dc8c37f6d R08: 0000000000000000 R09: 0000000000000000
[  169.687733][ T7682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  169.695789][ T7682] R13: 00007f4dc8e26128 R14: 00007f4dc8e26090 R15: 00007ffe53d16d38
[  169.703943][ T7682]  </TASK>
[  169.707003][ T7682] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  169.714320][ T7682] CPU: 1 PID: 7682 Comm: syz.0.390 Not tainted syzkaller #0
[  169.721639][ T7682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  169.731701][ T7682] Call Trace:
[  169.734975][ T7682]  <TASK>
[  169.737898][ T7682]  dump_stack_lvl+0x18c/0x250
[  169.742576][ T7682]  ? show_regs_print_info+0x20/0x20
[  169.747774][ T7682]  ? load_image+0x420/0x420
[  169.752280][ T7682]  panic+0x2ca/0x720
[  169.756174][ T7682]  ? bpf_jit_dump+0xd0/0xd0
[  169.760693][ T7682]  __warn+0x2e0/0x470
[  169.764675][ T7682]  ? kobject_add_internal+0x115/0xc90
[  169.770042][ T7682]  ? kobject_add_internal+0x115/0xc90
[  169.775407][ T7682]  report_bug+0x2be/0x4f0
[  169.779735][ T7682]  ? kobject_add_internal+0x115/0xc90
[  169.785098][ T7682]  ? kobject_add_internal+0x115/0xc90
[  169.790460][ T7682]  ? kobject_add_internal+0x117/0xc90
[  169.795827][ T7682]  handle_bug+0xcf/0x120
[  169.800069][ T7682]  exc_invalid_op+0x1a/0x50
[  169.804572][ T7682]  asm_exc_invalid_op+0x1a/0x20
[  169.809424][ T7682] RIP: 0010:kobject_add_internal+0x115/0xc90
[  169.815398][ T7682] Code: b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 5e 4e 5d f7 49 8b 34 24 48 c7 c7 00 4f 0b 8c 4c 89 e2 e8 4b ea cd f6 <0f> 0b e9 e5 00 00 00 e8 8f 45 04 f7 b8 fe ff ff ff e9 f0 06 00 00
[  169.835003][ T7682] RSP: 0018:ffffc900043978c8 EFLAGS: 00010246
[  169.841068][ T7682] RAX: 737b6b7190067f00 RBX: ffff888076940078 RCX: 0000000000080000
[  169.849065][ T7682] RDX: ffffc9000e74a000 RSI: 000000000000f7c8 RDI: 000000000000f7c9
[  169.857030][ T7682] RBP: 0000000000000000 R08: ffffc900043974c7 R09: 1ffff92000872e98
[  169.864998][ T7682] R10: dffffc0000000000 R11: fffff52000872e99 R12: ffff88814bfb40f0
[  169.872962][ T7682] R13: dffffc0000000000 R14: ffff88814bfb412c R15: dffffc0000000000
[  169.880942][ T7682]  ? kobject_add_internal+0x115/0xc90
[  169.886351][ T7682]  ? kfree+0x31/0x1a0
[  169.890338][ T7682]  kobject_add+0x164/0x240
[  169.894754][ T7682]  ? kobject_init+0x1d0/0x1d0
[  169.899427][ T7682]  ? mddev_create_serial_pool+0x1f3/0x4d0
[  169.905152][ T7682]  bind_rdev_to_array+0xb51/0x1270
[  169.910262][ T7682]  ? bind_rdev_to_array+0x5fb/0x1270
[  169.915549][ T7682]  ? md_import_device+0x7b0/0x7b0
[  169.920593][ T7682]  md_add_new_disk+0xe31/0x17b0
[  169.925451][ T7682]  md_ioctl+0x2152/0x24e0
[  169.929780][ T7682]  ? blkdev_common_ioctl+0x10ee/0x2580
[  169.935237][ T7682]  ? md_release+0x1e0/0x1e0
[  169.939735][ T7682]  ? tomoyo_path_number_perm+0x56b/0x5e0
[  169.945363][ T7682]  ? blkdev_bszset+0x1f0/0x1f0
[  169.950119][ T7682]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  169.955597][ T7682]  ? md_release+0x1e0/0x1e0
[  169.960098][ T7682]  blkdev_ioctl+0x5b2/0x730
[  169.964609][ T7682]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  169.970065][ T7682]  ? bpf_lsm_file_ioctl+0x9/0x10
[  169.974998][ T7682]  ? security_file_ioctl+0x80/0xa0
[  169.980102][ T7682]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  169.985580][ T7682]  __se_sys_ioctl+0xfd/0x170
[  169.990190][ T7682]  do_syscall_64+0x55/0xb0
[  169.994608][ T7682]  ? clear_bhb_loop+0x40/0x90
[  169.999294][ T7682]  ? clear_bhb_loop+0x40/0x90
[  170.003979][ T7682]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  170.009872][ T7682] RIP: 0033:0x7f4dc8ba8f19
[  170.014285][ T7682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  170.033889][ T7682] RSP: 002b:00007f4dc9a9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  170.042298][ T7682] RAX: ffffffffffffffda RBX: 00007f4dc8e26090 RCX: 00007f4dc8ba8f19
[  170.050262][ T7682] RDX: 00002000000001c0 RSI: 0000000040140921 RDI: 0000000000000004
[  170.058229][ T7682] RBP: 00007f4dc8c37f6d R08: 0000000000000000 R09: 0000000000000000
[  170.066194][ T7682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  170.074158][ T7682] R13: 00007f4dc8e26128 R14: 00007f4dc8e26090 R15: 00007ffe53d16d38
[  170.082136][ T7682]  </TASK>
[  170.085423][ T7682] Kernel Offset: disabled
[  170.089834][ T7682] Rebooting in 86400 seconds..