last executing test programs:

1m51.047867684s ago: executing program 4 (id=53):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000200)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x7, 0x7fff0000}]})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0xa602, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioprio_set$pid(0x2, 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x7fffe000, 0x1)

1m49.979068756s ago: executing program 4 (id=63):
r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, &(0x7f0000000080)={0x2e, 0x1fdd1375bdd2e52f, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@new_dev={0x1, 0x390, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1a0}}}, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_setup_queues(r2, r3, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

1m49.785882289s ago: executing program 4 (id=66):
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe)
listen(r1, 0x1)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

1m49.689082406s ago: executing program 4 (id=68):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000200)={0x4003, 0x3}, 0x4)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newsa={0xf0, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@private1}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}}, 0xf0}}, 0x0)

1m49.532344302s ago: executing program 4 (id=70):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x2, 0x1c8)
r0 = syz_io_uring_setup(0xf08, &(0x7f00000002c0)={0x0, 0xfefffffe, 0x80, 0x3, 0x3ca}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0, &(0x7f00000003c0)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000002600)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}})
io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)

1m48.109261584s ago: executing program 4 (id=73):
r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0x0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00'], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x0)

1m32.771880376s ago: executing program 32 (id=73):
r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0x0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00'], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x0)

1m7.225569537s ago: executing program 0 (id=276):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00', 0x2}}, 0x0, 0x0, 0x25, 0x0, "c43b9320585854378463e5d9ac44984ed4936350a7f170f645640905822998ca06b3a771e3ab05c927d207f7d21d93b1d5e068c6a0652a79973d9cbb62bd8c26deb2eae0b68847b15bbe30539483f6e7"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
sendto$inet6(r0, 0x0, 0x0, 0x20004010, &(0x7f0000000380)={0xa, 0x4e21, 0x10001, @empty, 0x2}, 0x1c)

1m4.986905246s ago: executing program 2 (id=281):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@getqdisc={0x24, 0x26, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfffe}, {0xfff2, 0x8}, {0x1, 0x6}}}, 0x24}}, 0x2000c085)
accept$packet(r1, 0x0, 0x0)

1m4.573754774s ago: executing program 5 (id=283):
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
sync()

1m4.046487919s ago: executing program 0 (id=285):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=<r2=>0x0)
bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xfffffffe, 0x4, 0x0, 0x4, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60)
readv(r0, &(0x7f0000000180)=[{&(0x7f0000000840)=""/167, 0xa7}], 0x1)
close(r1)

1m3.705609139s ago: executing program 1 (id=286):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001dc0), 0x40002, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000001e00)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000001e40)={0x48, 0x2, r1, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000001ec0)={0x28, 0x1, r2, r1, <r3=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000001f00)={0x28, 0x0, r2, r3, <r4=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000001f40)})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000001f80)={0x20, r4, &(0x7f0000001fc0)=[{}], 0xdeadbeef, 0x8, 0x80000})

1m2.899221238s ago: executing program 3 (id=287):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3}, 0x18)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10)

1m2.682548915s ago: executing program 0 (id=288):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001040)={'syzkaller1\x00', 0x4001})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001080)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000010c0)={'syzkaller1\x00', 0x1})
write$tun(r0, &(0x7f0000001100)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f005c0000000000000600003c"], 0x6a)

1m2.472720572s ago: executing program 2 (id=289):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x1})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x30, 0x24, 0x401, 0x2000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newtfilter={0x64, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x9}, {0xffff, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1002}, {0x1004}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x4]}]}}]}]}]}}]}, 0x64}}, 0x0)

1m2.31362134s ago: executing program 5 (id=290):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount(&(0x7f000000b8c0)=@filename='mtd0\x00', &(0x7f000000b900)='./file0\x00', &(0x7f000000b940)='jffs2\x00', 0x800000, 0x0)
chdir(&(0x7f000000b980)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f0000001f40)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000001fc0)='./file0\x00', &(0x7f0000002040), 0x8, &(0x7f0000002080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

1m1.868067849s ago: executing program 5 (id=291):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
connect$inet(r0, &(0x7f0000000640)={0x2, 0x4e24, @remote}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000200), &(0x7f0000000240)=@udp=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r1], 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, &(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\n', 0x0}, 0x50)

1m1.859938391s ago: executing program 3 (id=292):
r0 = socket(0xa, 0x3, 0x87)
sendto(r0, &(0x7f00000015c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000001600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80)
ioctl$int_in(r0, 0x5452, &(0x7f0000001680)=0x2)
ppoll(&(0x7f00000016c0)=[{r0}], 0x1, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="4000000028120700080004008100000008001b"], 0x30}}, 0x4004080)

1m1.57914637s ago: executing program 0 (id=293):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x2})

1m1.296890376s ago: executing program 2 (id=294):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000200)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2, 0x9, 0x1}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'gre0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f00000002c0)="cd", 0x1, 0x20044090, &(0x7f0000000300)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)

1m0.557253542s ago: executing program 3 (id=295):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x7d4, [{0x3, 0x5, 0x91}]}]}}, &(0x7f0000000040)=""/3, 0x32, 0x3, 0x1, 0x9}, 0x28)

1m0.268004692s ago: executing program 1 (id=296):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @empty}], 0x10)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0)
sendmsg$inet_sctp(r0, &(0x7f0000000100)={&(0x7f0000000140)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0xe9, 0x9, 0x7}]}, 0x10)
shutdown(r0, 0x1)

1m0.083808005s ago: executing program 6 (id=166):
syz_mount_image$btrfs(&(0x7f0000020240), &(0x7f0000020280)='./file0\x00', 0x1204408, &(0x7f00000202c0)={[{@compress_force}, {@datasum}, {@flushoncommit}, {@enospc_debug}, {@max_inline={'max_inline', 0x3d, [0x36, 0x6b, 0x0, 0x32, 0x31, 0x34, 0x6d]}}, {@space_cache_v1}, {@commit={'commit', 0x3d, 0x7b}}, {@barrier}, {@check_int_print_mask={'check_int_print_mask', 0x3d, 0x8000000000000000}}], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x64, 0x32, 0x37, 0x64, 0x64, 0x35, 0x33], 0x2d, [0x34, 0x34, 0x39, 0x62], 0x2d, [0x65, 0x30, 0x65, 0x65], 0x2d, [0x38, 0x39, 0x0, 0x37], 0x2d, [0x32, 0x5c, 0x37, 0x32, 0x65, 0x30, 0x65, 0x63]}}}]}, 0x0, 0x51ab, &(0x7f00000203c0)="$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")
chdir(&(0x7f0000000740)='./file0\x00')
syz_mount_image$vfat(&(0x7f0000025e00), &(0x7f0000025e40)='./bus\x00', 0x2000000, 0x0, 0x1, 0x0, &(0x7f0000025e80))
chdir(&(0x7f0000025ec0)='./bus\x00')
r0 = open(&(0x7f0000025e80)='.\x00', 0x20000, 0x0)
getdents64(r0, &(0x7f0000025f40)=""/224, 0xe0)

59.399959567s ago: executing program 3 (id=297):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

59.237703675s ago: executing program 5 (id=298):
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x42, 0x0)
mkdir(&(0x7f0000000380)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x8, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
linkat(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file2\x00', 0x1000)

59.127514315s ago: executing program 0 (id=299):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000340)={0x40000000, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001540)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001580)={r2, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000001600)="b9ff0300600d698cff9e13f008004de7f9c764360000ff8700132001000000000000", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

59.120681854s ago: executing program 2 (id=300):
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000001e00)='./proc\x00', &(0x7f0000001e40)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001e80)='./proc/fs/afs/cells\x00', 0x1, 0x0)
write(r0, &(0x7f0000001ec0)='add syz0 127.0.0.1+7003:', 0x18)

58.921495454s ago: executing program 1 (id=301):
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2400, 0x4100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x3c}}, 0x4000000)

58.776041426s ago: executing program 3 (id=302):
syz_mount_image$btrfs(&(0x7f0000000540), &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000700), 0x1, 0x5199, &(0x7f0000000e40)="$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")
mknodat$loop(0xffffffffffffff9c, &(0x7f0000026140)='my_debugfs\x00', 0x6004, 0x1)
syz_mount_image$vfat(&(0x7f0000045ec0), &(0x7f0000045f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000046000))
symlinkat(&(0x7f0000046040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000046080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
symlinkat(&(0x7f0000046180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000462c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_mount_image$vfat(&(0x7f0000046400), &(0x7f0000046440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824441, 0x0, 0x1, 0x0, &(0x7f0000046540))

58.620481759s ago: executing program 5 (id=303):
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x1)
syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x406}}}, 0x7)
timerfd_create(0x0, 0x0)
epoll_create1(0x80000)

58.581994498s ago: executing program 2 (id=304):
bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, 0x0, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @cgroup_skb=0x1}, 0x94)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x88})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

56.912403224s ago: executing program 0 (id=305):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4)

56.510948301s ago: executing program 1 (id=306):
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x18}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="020300090e000000ff000e000a004e22"], 0x70}}, 0x8810)
r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}})

56.238230931s ago: executing program 2 (id=307):
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x1ff)
r0 = inotify_init1(0x80800)
inotify_add_watch(r0, &(0x7f00000001c0)='./file1\x00', 0x7f7)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x8)
fallocate(r1, 0x0, 0x1000000, 0x3)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x200000c, 0x13, r1, 0x2000)

55.626792897s ago: executing program 6 (id=308):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
pipe2(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r2, &(0x7f0000000340)=ANY=[], 0xffffff6a)
pipe2(&(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
tee(r1, r3, 0xfffffffffffffc01, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

55.559401326s ago: executing program 5 (id=309):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000008c0)={0x2, 0x4e21, @empty}, 0x10)
connect$inet(r0, &(0x7f0000000900)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000940)='westwood', 0x6e)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a00)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000a80)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000)

55.373076295s ago: executing program 1 (id=310):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000005000000018010000776c6c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10)

54.881088256s ago: executing program 6 (id=311):
openat(0xffffffffffffff9c, 0x0, 0x0, 0x4e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f00000001c0)='/.\x00', &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c)

54.865559594s ago: executing program 3 (id=323):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdfc6ea55887dfa18d0aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37df95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a17143a29c14ecadd1b6244e31b888d8f3fa03208d3e9a4826a98f31995509015ebdc89f2f3106e54d5898d3758b9bfc9e4924e9cedf7f8fd584e7185703cc5f23741ffb480b5a87cd7efcceb409d354bdab211ebd50ab12b13c1b8ce93093a59a0f952153c2efd10e72ec9ee5fa2a00f9637851ddb81d059f9a363c4ada68dd25f19ee9e4841acee7c1b35ad6f9d54cf4939ce78a55a04e655d7746a3989c6f33b02f8497aacb6bfca7456111900000000000000000048d35af24acb66fdd4d1fb150138f0ee6abfc7049c94346868ed76d3a5df7335184386a5c532d425f1a098ff93efd05e5dd8b765121fbdfe5ef44f6472b939c31883f45889142e82086c2448da60d7a40774d71c2da2e7f6d4fe5d36923213cc7b7d71a1c90006e8f8d84953f284b0eb4366beff5df5595827dcd736e8cfab28cfa416e83c06213ca7fd21af56e3de1d80e77060447e20a8b317a4c06e24e99239824d08abf670a685bc46c8168bee4cfc30cc6d0dc030a592925bad3e0f805f0d4b2b600dc3f0c4c6f75bb4e49982f4198ac90ab77c5572c956d415858bad5ee117b3e5f1507bbd0d7a30388865deb11106a93225a81feb08f5"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000ff3a00132001000000000000", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

40.10130986s ago: executing program 1 (id=312):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x161)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='100', 0x3)
r1 = syz_io_uring_setup(0x126b, &(0x7f00000003c0)={0x0, 0x200072db, 0x0, 0x8001, 0x27f}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0))
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0x2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}, 0x20)

0s ago: executing program 33 (id=305):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.19' (ED25519) to the list of known hosts.
[   78.701002][ T5596] cgroup: Unknown subsys name 'net'
[   78.809822][ T5596] cgroup: Unknown subsys name 'cpuset'
[   78.813508][ T5596] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   80.259575][ T5596] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   82.887870][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   82.892771][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   82.893504][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   82.894535][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   82.909412][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   82.965181][ T4925] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   82.966244][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   82.966645][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   82.967416][ T4925] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   82.982122][ T4925] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   83.013700][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   83.015775][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   83.018566][ T5629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   83.019883][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   83.020242][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   83.020988][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   83.021342][ T5629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   83.022502][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   83.023840][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   83.028142][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   83.030227][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   83.030842][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   83.031954][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   83.032348][ T5630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   83.048036][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   83.049338][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   83.087346][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   83.101484][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   83.109661][ T5621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   83.124982][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   84.276444][ T5611] rdma_rxe: Failed to create IPv6 UDP tunnel
[   84.282754][ T5612] rxe_eth0 speed is unknown, defaulting to 1000
[   84.290170][ T5612] rxe_eth0 speed is unknown, defaulting to 1000
[   84.294657][ T5612] rxe_eth0 speed is unknown, defaulting to 1000
[   84.295730][ T5617] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   84.364391][ T5620] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   84.543388][ T5625] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   84.659929][ T5618] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   84.716494][ T5612] infiniband rxe0: set active
[   84.716518][ T5612] infiniband rxe0: added rxe_eth0
[   84.765938][    T9] rxe_eth0 speed is unknown, defaulting to 1000
[   84.773730][ T5612] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   84.773769][ T5612] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   84.773815][ T5612] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   84.870631][ T5612] RDS/IB: rxe0: added
[   84.870962][ T5612] smc: adding ib device rxe0 with port count 1
[   84.871049][ T5612] smc:    ib device rxe0 port 1 has no pnetid
[   84.937405][    T9] rxe_eth0 speed is unknown, defaulting to 1000
[   84.974260][ T5612] rxe_eth0 speed is unknown, defaulting to 1000
[   84.985952][ T5629] Bluetooth: hci0: command tx timeout
[   85.075051][ T5624] Bluetooth: hci3: command tx timeout
[   85.075270][ T5624] Bluetooth: hci1: command tx timeout
[   85.075452][ T5629] Bluetooth: hci4: command tx timeout
[   85.144986][ T5629] Bluetooth: hci2: command tx timeout
[   85.225049][ T5629] Bluetooth: hci5: command tx timeout
[   85.319759][  T938] rxe_eth0 speed is unknown, defaulting to 1000
[   85.367534][ T5612] rxe_eth0 speed is unknown, defaulting to 1000
[   85.389598][  T938] rxe_eth0 speed is unknown, defaulting to 1000
[   85.823355][ T5618] rxe_eth0 speed is unknown, defaulting to 1000
[   86.042469][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.042919][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.043028][ T5611] bridge_slave_0: entered allmulticast mode
[   86.045601][ T5611] bridge_slave_0: entered promiscuous mode
[   86.066962][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.067073][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.067203][ T5617] bridge_slave_0: entered allmulticast mode
[   86.069098][ T5617] bridge_slave_0: entered promiscuous mode
[   86.102533][ T5612] rxe_eth0 speed is unknown, defaulting to 1000
[   86.103454][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.103573][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.103719][ T5625] bridge_slave_0: entered allmulticast mode
[   86.106157][ T5625] bridge_slave_0: entered promiscuous mode
[   86.141376][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.141487][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.141724][ T5620] bridge_slave_0: entered allmulticast mode
[   86.143693][ T5620] bridge_slave_0: entered promiscuous mode
[   86.146727][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.146839][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.147021][ T5611] bridge_slave_1: entered allmulticast mode
[   86.150773][ T5611] bridge_slave_1: entered promiscuous mode
[   86.153525][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.153653][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.154068][ T5617] bridge_slave_1: entered allmulticast mode
[   86.159242][ T5617] bridge_slave_1: entered promiscuous mode
[   86.225266][   T44] cfg80211: failed to load regulatory.db
[   86.228390][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.228500][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.228645][ T5625] bridge_slave_1: entered allmulticast mode
[   86.233986][ T5625] bridge_slave_1: entered promiscuous mode
[   86.238140][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.238328][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.238475][ T5620] bridge_slave_1: entered allmulticast mode
[   86.240727][ T5620] bridge_slave_1: entered promiscuous mode
[   86.311115][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.391375][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.477838][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.481035][ T5617] team0: Port device team_slave_0 added
[   86.502669][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.507592][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.511236][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.529659][ T5612] rxe_eth0 speed is unknown, defaulting to 1000
[   86.553023][ T5617] team0: Port device team_slave_1 added
[   86.571173][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.574202][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.600900][ T5611] team0: Port device team_slave_0 added
[   86.654160][ T5611] team0: Port device team_slave_1 added
[   86.673340][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.673363][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.673393][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.697602][ T5620] team0: Port device team_slave_0 added
[   86.718065][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.718083][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.718112][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.720035][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.720051][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.720079][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.724102][ T5625] team0: Port device team_slave_0 added
[   86.729290][ T5620] team0: Port device team_slave_1 added
[   86.756657][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.756681][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.756711][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.801722][ T5625] team0: Port device team_slave_1 added
[   86.914696][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.914721][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.914750][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.997194][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.997212][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.997239][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.012111][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.012128][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.012157][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.082579][ T5629] Bluetooth: hci0: command tx timeout
[   87.094792][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.094809][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.094838][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.115063][ T5617] hsr_slave_0: entered promiscuous mode
[   87.117990][ T5617] hsr_slave_1: entered promiscuous mode
[   87.135760][ T5611] hsr_slave_0: entered promiscuous mode
[   87.136899][ T5611] hsr_slave_1: entered promiscuous mode
[   87.137648][ T5611] debugfs: 'hsr0' already exists in 'hsr'
[   87.137721][ T5611] Cannot create hsr debugfs directory
[   87.147976][ T5613] Bluetooth: hci1: command tx timeout
[   87.148010][ T5613] Bluetooth: hci3: command tx timeout
[   87.148143][ T5629] Bluetooth: hci4: command tx timeout
[   87.192590][ T5612] rxe_eth0 speed is unknown, defaulting to 1000
[   87.225014][ T5629] Bluetooth: hci2: command tx timeout
[   87.305065][ T5629] Bluetooth: hci5: command tx timeout
[   87.394436][ T5620] hsr_slave_0: entered promiscuous mode
[   87.401560][ T5620] hsr_slave_1: entered promiscuous mode
[   87.408521][ T5620] debugfs: 'hsr0' already exists in 'hsr'
[   87.408549][ T5620] Cannot create hsr debugfs directory
[   87.430723][ T5625] hsr_slave_0: entered promiscuous mode
[   87.431901][ T5625] hsr_slave_1: entered promiscuous mode
[   87.432917][ T5625] debugfs: 'hsr0' already exists in 'hsr'
[   87.432940][ T5625] Cannot create hsr debugfs directory
[   87.965746][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.965910][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.966025][ T5618] bridge_slave_0: entered allmulticast mode
[   87.967679][ T5618] bridge_slave_0: entered promiscuous mode
[   88.020587][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.020699][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.020829][ T5618] bridge_slave_1: entered allmulticast mode
[   88.022543][ T5618] bridge_slave_1: entered promiscuous mode
[   88.097555][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.117944][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.173914][ T5617] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   88.184517][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   88.199086][ T5618] team0: Port device team_slave_0 added
[   88.202175][ T5618] team0: Port device team_slave_1 added
[   88.202221][ T5617] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   88.207972][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   88.208922][ T5617] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   88.223495][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   88.256462][ T5617] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   88.261035][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   88.302007][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.302030][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.302057][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.359851][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.359872][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.359899][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.456681][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.456932][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.457306][ T5612] bridge_slave_0: entered allmulticast mode
[   88.458967][ T5612] bridge_slave_0: entered promiscuous mode
[   88.463219][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.464812][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.467044][ T5612] bridge_slave_1: entered allmulticast mode
[   88.472239][ T5612] bridge_slave_1: entered promiscuous mode
[   88.564936][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.572914][ T5618] hsr_slave_0: entered promiscuous mode
[   88.574016][ T5618] hsr_slave_1: entered promiscuous mode
[   88.576959][ T5618] debugfs: 'hsr0' already exists in 'hsr'
[   88.576980][ T5618] Cannot create hsr debugfs directory
[   88.584518][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.584584][ T5611] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   88.597654][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   88.599658][ T5611] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   88.612150][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   88.677494][ T5611] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   88.682063][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   88.683220][ T5611] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   88.690136][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   88.730112][ T5612] team0: Port device team_slave_0 added
[   88.732546][ T5612] team0: Port device team_slave_1 added
[   88.803942][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.803965][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.803991][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.875889][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.875905][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.875928][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.970008][ T5612] hsr_slave_0: entered promiscuous mode
[   88.970896][ T5612] hsr_slave_1: entered promiscuous mode
[   88.971491][ T5612] debugfs: 'hsr0' already exists in 'hsr'
[   88.971514][ T5612] Cannot create hsr debugfs directory
[   89.036435][ T5625] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   89.040759][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   89.077058][ T5625] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   89.080572][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   89.081312][ T5625] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   89.084490][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   89.127822][ T5625] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   89.131152][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   89.156317][ T5629] Bluetooth: hci0: command tx timeout
[   89.204970][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.235826][ T5624] Bluetooth: hci3: command tx timeout
[   89.235863][ T5624] Bluetooth: hci1: command tx timeout
[   89.236009][ T5629] Bluetooth: hci4: command tx timeout
[   89.267266][ T5620] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   89.271706][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   89.272400][ T5620] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   89.278155][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   89.304417][ T5620] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   89.305691][ T5629] Bluetooth: hci2: command tx timeout
[   89.321300][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   89.323376][ T5620] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   89.329631][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   89.375941][ T5617] 8021q: adding VLAN 0 to HW filter on device team0
[   89.385013][ T5629] Bluetooth: hci5: command tx timeout
[   89.420908][  T179] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.421069][  T179] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.473828][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.473945][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.484129][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.499765][ T5618] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   89.514511][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   89.532977][ T5618] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   89.540463][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   89.552693][ T5618] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   89.564530][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   89.573721][ T5618] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   89.579284][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   89.679722][ T5611] 8021q: adding VLAN 0 to HW filter on device team0
[   89.716371][ T5612] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   89.721796][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   89.740072][ T5617] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   89.756246][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.756370][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.762059][ T5612] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   89.792249][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   89.793558][ T5612] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   89.812655][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   89.832224][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.832332][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.834472][ T5612] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   89.858446][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   89.888661][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.980787][ T5625] 8021q: adding VLAN 0 to HW filter on device team0
[   90.028770][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.028852][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.088071][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.088155][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.119282][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.261390][ T5620] 8021q: adding VLAN 0 to HW filter on device team0
[   90.302038][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.311109][  T179] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.311217][  T179] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.361079][  T179] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.361216][  T179] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.438222][ T5618] 8021q: adding VLAN 0 to HW filter on device team0
[   90.514354][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.530796][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.530903][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.583854][  T116] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.583966][  T116] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.700295][ T5612] 8021q: adding VLAN 0 to HW filter on device team0
[   90.731678][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.731795][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.784017][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.791553][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.791661][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.175423][ T5617] veth0_vlan: entered promiscuous mode
[   91.239740][ T5629] Bluetooth: hci0: command tx timeout
[   91.281750][ T5617] veth1_vlan: entered promiscuous mode
[   91.302953][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.306117][ T5613] Bluetooth: hci1: command tx timeout
[   91.306149][ T5613] Bluetooth: hci3: command tx timeout
[   91.306218][ T5629] Bluetooth: hci4: command tx timeout
[   91.386040][ T5629] Bluetooth: hci2: command tx timeout
[   91.465377][ T5629] Bluetooth: hci5: command tx timeout
[   91.539008][ T5611] veth0_vlan: entered promiscuous mode
[   91.541034][ T5617] veth0_macvtap: entered promiscuous mode
[   91.612882][ T5617] veth1_macvtap: entered promiscuous mode
[   91.638922][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.639685][ T5611] veth1_vlan: entered promiscuous mode
[   91.773672][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.806332][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.890535][ T5611] veth0_macvtap: entered promiscuous mode
[   91.933215][ T5611] veth1_macvtap: entered promiscuous mode
[   91.962655][ T1162] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.962847][ T1162] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.075155][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.085562][  T179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.085583][  T179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.137674][ T1145] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.173673][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.251569][   T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.266654][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.323534][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.323558][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.569135][ T5617] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   92.602439][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.602458][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.633845][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.646883][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.646934][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.652043][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.773326][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.784489][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.784514][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.869538][ T1162] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.892667][ T5860] FAULT_INJECTION: forcing a failure.
[   92.892667][ T5860] name failslab, interval 1, probability 0, space 0, times 1
[   92.892706][ T5860] CPU: 0 UID: 0 PID: 5860 Comm: syz.3.7 Not tainted syzkaller #0 PREEMPT(full) 
[   92.892733][ T5860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[   92.892748][ T5860] Call Trace:
[   92.892758][ T5860]  <TASK>
[   92.892768][ T5860]  dump_stack_lvl+0xe8/0x150
[   92.892817][ T5860]  should_fail_ex+0x410/0x560
[   92.892862][ T5860]  should_failslab+0xa8/0x100
[   92.892894][ T5860]  ? security_inode_alloc+0x39/0x310
[   92.892933][ T5860]  kmem_cache_alloc_noprof+0x9c/0x600
[   92.892973][ T5860]  ? make_kgid+0x1d1/0x6a0
[   92.893007][ T5860]  ? rcu_is_watching+0x16/0xb0
[   92.893035][ T5860]  ? security_inode_alloc+0x39/0x310
[   92.893083][ T5860]  security_inode_alloc+0x39/0x310
[   92.893124][ T5860]  inode_init_always_gfp+0x97e/0xd30
[   92.893164][ T5860]  ? __pfx_sock_alloc_inode+0x10/0x10
[   92.893211][ T5860]  alloc_inode+0x82/0x1b0
[   92.893246][ T5860]  __sock_create+0x127/0xac0
[   92.893294][ T5860]  __sys_socket+0xd6/0x1b0
[   92.893342][ T5860]  __x64_sys_socket+0x7a/0x90
[   92.893383][ T5860]  do_syscall_64+0x166/0x520
[   92.893414][ T5860]  ? trace_irq_disable+0x3b/0x140
[   92.893438][ T5860]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.893475][ T5860]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.893499][ T5860] RIP: 0033:0x7fe27219f559
[   92.893521][ T5860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   92.893540][ T5860] RSP: 002b:00007fe27303c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   92.893568][ T5860] RAX: ffffffffffffffda RBX: 00007fe272425fa0 RCX: 00007fe27219f559
[   92.893586][ T5860] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000018
[   92.893601][ T5860] RBP: 00007fe272236b20 R08: 0000000000000000 R09: 0000000000000000
[   92.893617][ T5860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   92.893632][ T5860] R13: 00007fe272426038 R14: 00007fe272425fa0 R15: 00007fffd9e9c408
[   92.893671][ T5860]  </TASK>
[   92.893838][ T5860] socket: no more sockets
[   93.157214][ T5618] veth0_vlan: entered promiscuous mode
[   93.185517][ T5625] veth0_vlan: entered promiscuous mode
[   93.251560][ T5620] veth0_vlan: entered promiscuous mode
[   93.279071][ T5618] veth1_vlan: entered promiscuous mode
[   93.281949][ T5625] veth1_vlan: entered promiscuous mode
[   93.291288][ T5620] veth1_vlan: entered promiscuous mode
[   93.403442][ T5869] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   93.466740][ T5618] veth0_macvtap: entered promiscuous mode
[   93.469716][ T5625] veth0_macvtap: entered promiscuous mode
[   93.499428][ T5775] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   93.503094][ T5625] veth1_macvtap: entered promiscuous mode
[   93.522149][ T5620] veth0_macvtap: entered promiscuous mode
[   93.524417][ T5618] veth1_macvtap: entered promiscuous mode
[   93.557701][ T5620] veth1_macvtap: entered promiscuous mode
[   93.621533][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.644754][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.657037][ T5775] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[   93.661371][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.664829][ T5775] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   93.665728][ T5775] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   93.665755][ T5775] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   93.665782][ T5775] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   93.665829][ T5775] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.666902][ T5612] veth0_vlan: entered promiscuous mode
[   93.680433][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.705294][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.800353][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.823520][ T5612] veth1_vlan: entered promiscuous mode
[   93.838009][   T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.839132][   T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.839181][   T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.839224][   T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.839295][   T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.839338][   T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.839381][   T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.839450][   T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.925731][ T1145] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.926188][ T1145] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.926598][ T1145] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.926953][ T1145] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.070801][ T5876] FAULT_INJECTION: forcing a failure.
[   94.070801][ T5876] name failslab, interval 1, probability 0, space 0, times 0
[   94.070838][ T5876] CPU: 1 UID: 60929 PID: 5876 Comm: syz.0.11 Not tainted syzkaller #0 PREEMPT(full) 
[   94.070865][ T5876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[   94.070881][ T5876] Call Trace:
[   94.070891][ T5876]  <TASK>
[   94.070902][ T5876]  dump_stack_lvl+0xe8/0x150
[   94.070956][ T5876]  should_fail_ex+0x410/0x560
[   94.071016][ T5876]  should_failslab+0xa8/0x100
[   94.071050][ T5876]  ? key_alloc+0x318/0x1020
[   94.071088][ T5876]  kmem_cache_alloc_noprof+0x9c/0x600
[   94.071132][ T5876]  ? key_alloc+0x318/0x1020
[   94.071176][ T5876]  key_alloc+0x318/0x1020
[   94.071229][ T5876]  keyring_alloc+0x45/0xb0
[   94.071259][ T5876]  install_thread_keyring_to_cred+0x9e/0x130
[   94.071302][ T5876]  __se_sys_keyctl+0xa74/0xbc0
[   94.071339][ T5876]  ? __pfx___se_sys_keyctl+0x10/0x10
[   94.071376][ T5876]  ? __pfx_do_futex+0x10/0x10
[   94.071405][ T5876]  ? __fget_files+0x3a2/0x420
[   94.071443][ T5876]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   94.071486][ T5876]  ? srso_alias_return_thunk+0x5/0xfbef5
[   94.071516][ T5876]  ? __se_sys_futex+0x3a8/0x450
[   94.071558][ T5876]  ? srso_alias_return_thunk+0x5/0xfbef5
[   94.071586][ T5876]  ? rcu_is_watching+0x16/0xb0
[   94.071615][ T5876]  ? srso_alias_return_thunk+0x5/0xfbef5
[   94.071652][ T5876]  ? srso_alias_return_thunk+0x5/0xfbef5
[   94.071688][ T5876]  ? __x64_sys_keyctl+0x20/0xc0
[   94.071724][ T5876]  do_syscall_64+0x166/0x520
[   94.071760][ T5876]  ? trace_irq_disable+0x3b/0x140
[   94.071784][ T5876]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.071815][ T5876]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.071840][ T5876] RIP: 0033:0x7f612539f559
[   94.071863][ T5876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   94.071884][ T5876] RSP: 002b:00007f6126219028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[   94.071910][ T5876] RAX: ffffffffffffffda RBX: 00007f6125625fa0 RCX: 00007f612539f559
[   94.071928][ T5876] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000e
[   94.071942][ T5876] RBP: 00007f6125436b20 R08: 0000000000000000 R09: 0000000000000000
[   94.071957][ T5876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   94.071972][ T5876] R13: 00007f6125626038 R14: 00007f6125625fa0 R15: 00007ffe62f2e208
[   94.072012][ T5876]  </TASK>
[   94.213416][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.213436][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.300850][ T5612] veth0_macvtap: entered promiscuous mode
[   94.366986][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.367011][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.367718][ T5612] veth1_macvtap: entered promiscuous mode
[   94.433548][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.433573][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.498826][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.498848][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.515711][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.585806][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.628951][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.628976][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.669892][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.669915][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.685239][   T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.687915][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.706051][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.706462][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.828629][ T5775] gud 4-1:1.0: USB-1: Failed to add properties (ret=-5)
[   94.828681][ T5775] gud 4-1:1.0: Failed to get connectors (error=-5)
[   94.828707][ T5775] gud 4-1:1.0: probe with driver gud failed with error -5
[   95.084991][ T5743] usb 4-1: USB disconnect, device number 2
[   95.370533][ T5901] netlink: 24 bytes leftover after parsing attributes in process `syz.5.18'.
[   95.370591][ T5901] netlink: 16 bytes leftover after parsing attributes in process `syz.5.18'.
[   95.446567][ T5883] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   95.446696][ T5883] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   95.469993][ T5883] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   95.499045][ T5883] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   95.499138][ T5883] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   95.508858][ T5883] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   95.532652][ T5883] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   95.532745][ T5883] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   95.538356][ T5883] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   95.556731][ T5883] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   95.556816][ T5883] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   95.579098][ T5883] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   95.585328][ T5883] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[   95.585398][ T5883] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   95.608781][ T5883] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   95.626842][ T5883] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[   95.626960][ T5883] Bluetooth: hci5: Opcode 0x0406 failed: -4
[   95.650326][ T5883] Bluetooth: hci5: Opcode 0x0406 failed: -4
[   95.721607][ T5903] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   95.889043][ T5908] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20'.
[   95.889101][ T5908] nbd: socks must be embedded in a SOCK_ITEM attr
[   95.893983][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.894003][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.054816][ T5911] process 'syz.5.22' launched './file1' with NULL argv: empty string added
[   96.067872][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.067892][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.102116][ T5879] rxe_eth0 speed is unknown, defaulting to 1000
[   96.143346][ T5914] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   96.300859][   T29] audit: type=1400 audit(1792632263.429:2): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=5915 comm="syz.0.23"
[   96.418820][ T5920] FAULT_INJECTION: forcing a failure.
[   96.418820][ T5920] name failslab, interval 1, probability 0, space 0, times 0
[   96.418860][ T5920] CPU: 1 UID: 0 PID: 5920 Comm: syz.2.26 Not tainted syzkaller #0 PREEMPT(full) 
[   96.418888][ T5920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[   96.418903][ T5920] Call Trace:
[   96.418912][ T5920]  <TASK>
[   96.418923][ T5920]  dump_stack_lvl+0xe8/0x150
[   96.418965][ T5920]  should_fail_ex+0x410/0x560
[   96.419009][ T5920]  should_failslab+0xa8/0x100
[   96.419036][ T5920]  ? ptlock_alloc+0x20/0x70
[   96.419069][ T5920]  kmem_cache_alloc_noprof+0x9c/0x600
[   96.419107][ T5920]  ? srso_alias_return_thunk+0x5/0xfbef5
[   96.419139][ T5920]  ? ptlock_alloc+0x20/0x70
[   96.419183][ T5920]  ptlock_alloc+0x20/0x70
[   96.419219][ T5920]  pte_alloc_one+0x7a/0x370
[   96.419255][ T5920]  do_huge_pmd_anonymous_page+0x307/0xbf0
[   96.419299][ T5920]  handle_mm_fault+0x19b5/0x3750
[   96.419349][ T5920]  ? handle_mm_fault+0xf1/0x3750
[   96.419398][ T5920]  ? __pfx_handle_mm_fault+0x10/0x10
[   96.419451][ T5920]  ? srso_alias_return_thunk+0x5/0xfbef5
[   96.419487][ T5920]  ? srso_alias_return_thunk+0x5/0xfbef5
[   96.419526][ T5920]  __get_user_pages+0x1670/0x2750
[   96.419601][ T5920]  populate_vma_page_range+0x2be/0x3c0
[   96.419638][ T5920]  ? __pfx_populate_vma_page_range+0x10/0x10
[   96.419674][ T5920]  ? srso_alias_return_thunk+0x5/0xfbef5
[   96.419713][ T5920]  ? down_read+0x2b9/0x320
[   96.419754][ T5920]  __mm_populate+0x25f/0x390
[   96.419789][ T5920]  ? __pfx___mm_populate+0x10/0x10
[   96.419822][ T5920]  ? srso_alias_return_thunk+0x5/0xfbef5
[   96.419854][ T5920]  ? srso_alias_return_thunk+0x5/0xfbef5
[   96.419890][ T5920]  do_mlock+0x622/0x730
[   96.419921][ T5920]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   96.419964][ T5920]  ? __pfx_do_mlock+0x10/0x10
[   96.420006][ T5920]  ? srso_alias_return_thunk+0x5/0xfbef5
[   96.420035][ T5920]  ? rcu_is_watching+0x16/0xb0
[   96.420074][ T5920]  __x64_sys_mlock+0x77/0xa0
[   96.420105][ T5920]  do_syscall_64+0x166/0x520
[   96.420136][ T5920]  ? trace_irq_disable+0x3b/0x140
[   96.420160][ T5920]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.420192][ T5920]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.420218][ T5920] RIP: 0033:0x7f612639f559
[   96.420240][ T5920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   96.420260][ T5920] RSP: 002b:00007f61271f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[   96.420287][ T5920] RAX: ffffffffffffffda RBX: 00007f6126625fa0 RCX: 00007f612639f559
[   96.420305][ T5920] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000
[   96.420322][ T5920] RBP: 00007f6126436b20 R08: 0000000000000000 R09: 0000000000000000
[   96.420338][ T5920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   96.420353][ T5920] R13: 00007f6126626038 R14: 00007f6126625fa0 R15: 00007ffc625c8448
[   96.420394][ T5920]  </TASK>
[   96.525331][ T5929] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   96.620997][ T5928] loop4: detected capacity change from 0 to 128
[   96.650906][ T5928] =======================================================
[   96.650906][ T5928] WARNING: The mand mount option has been deprecated and
[   96.650906][ T5928]          and is ignored by this kernel. Remove the mand
[   96.650906][ T5928]          option from the mount to silence this warning.
[   96.650906][ T5928] =======================================================
[   96.724261][ T5928] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   96.724386][ T5928] hpfs: filesystem error: improperly stopped
[   96.724404][ T5928] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   96.724421][ T5928] hpfs: You really don't want any checks? You are crazy...
[   96.732031][ T5928] hpfs: hpfs_map_sector(): read error
[   96.732045][ T5928] hpfs: code page support is disabled
[   96.737630][ T5928] hpfs: hpfs_map_4sectors(): unaligned read
[   96.737765][ T5928] hpfs: hpfs_map_4sectors(): unaligned read
[   96.737777][ T5928] hpfs: filesystem error: unable to find root dir
[   96.778137][ T5629] Bluetooth: hci0: command 0x0c1a tx timeout
[   96.831541][ T5928] hpfs: hpfs_map_4sectors(): unaligned read
[   96.868974][ T5934] loop5: detected capacity change from 0 to 2048
[   96.943441][ T5934]  loop5: p3 < > p4 < >
[   96.943474][ T5934] loop5: partition table partially beyond EOD, truncated
[   96.943847][ T5934] loop5: p3 start 4284289 is beyond EOD, truncated
[   97.243873][ T5945] loop1: detected capacity change from 0 to 1024
[   97.257531][ T5945] EXT4-fs: Ignoring removed bh option
[   97.414597][ T5945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.546248][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout
[   97.546356][ T5629] Bluetooth: hci3: command 0x0c1a tx timeout
[   97.561618][ T5945] FAULT_INJECTION: forcing a failure.
[   97.561618][ T5945] name failslab, interval 1, probability 0, space 0, times 0
[   97.561654][ T5945] CPU: 0 UID: 0 PID: 5945 Comm: syz.1.33 Not tainted syzkaller #0 PREEMPT(full) 
[   97.561681][ T5945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[   97.561702][ T5945] Call Trace:
[   97.561713][ T5945]  <TASK>
[   97.561723][ T5945]  dump_stack_lvl+0xe8/0x150
[   97.561767][ T5945]  should_fail_ex+0x410/0x560
[   97.561814][ T5945]  should_failslab+0xa8/0x100
[   97.561849][ T5945]  __kmalloc_noprof+0xf9/0x710
[   97.561877][ T5945]  ? tomoyo_encode+0x2ad/0x570
[   97.561900][ T5945]  ? tomoyo_encode+0x2ad/0x570
[   97.561934][ T5945]  tomoyo_encode+0x2ad/0x570
[   97.561966][ T5945]  tomoyo_realpath_from_path+0x5fa/0x640
[   97.562005][ T5945]  ? tomoyo_path_number_perm+0x219/0x5f0
[   97.562041][ T5945]  tomoyo_path_number_perm+0x246/0x5f0
[   97.562080][ T5945]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   97.562112][ T5945]  ? __d_add+0x26d/0x330
[   97.562143][ T5945]  ? srso_alias_return_thunk+0x5/0xfbef5
[   97.562173][ T5945]  ? d_splice_alias_ops+0x11c/0x440
[   97.562200][ T5945]  ? d_splice_alias+0x12/0x30
[   97.562263][ T5945]  ? __pfx_current_check_access_path+0x10/0x10
[   97.562300][ T5945]  ? _raw_spin_unlock+0x28/0x50
[   97.562327][ T5945]  ? srso_alias_return_thunk+0x5/0xfbef5
[   97.562355][ T5945]  ? d_alloc+0x144/0x190
[   97.562397][ T5945]  ? lookup_one_qstr_excl+0x1d4/0x360
[   97.562437][ T5945]  ? srso_alias_return_thunk+0x5/0xfbef5
[   97.562471][ T5945]  tomoyo_path_mkdir+0xb0/0xf0
[   97.562499][ T5945]  ? __pfx_tomoyo_path_mkdir+0x10/0x10
[   97.562532][ T5945]  ? __pfx_filename_create+0x10/0x10
[   97.562566][ T5945]  security_path_mkdir+0x169/0x350
[   97.562596][ T5945]  filename_mkdirat+0x200/0x510
[   97.562633][ T5945]  ? __pfx_filename_mkdirat+0x10/0x10
[   97.562665][ T5945]  ? srso_alias_return_thunk+0x5/0xfbef5
[   97.562699][ T5945]  ? do_getname+0x151/0x250
[   97.562736][ T5945]  __se_sys_mkdir+0x34/0x150
[   97.562769][ T5945]  do_syscall_64+0x166/0x520
[   97.562800][ T5945]  ? trace_irq_disable+0x3b/0x140
[   97.562825][ T5945]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.562858][ T5945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.562883][ T5945] RIP: 0033:0x7f72f8f9f559
[   97.562907][ T5945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   97.562927][ T5945] RSP: 002b:00007f72f9e4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[   97.562956][ T5945] RAX: ffffffffffffffda RBX: 00007f72f9225fa0 RCX: 00007f72f8f9f559
[   97.562975][ T5945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100
[   97.562991][ T5945] RBP: 00007f72f9036b20 R08: 0000000000000000 R09: 0000000000000000
[   97.563006][ T5945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   97.563021][ T5945] R13: 00007f72f9226038 R14: 00007f72f9225fa0 R15: 00007ffe4d7ec788
[   97.563063][ T5945]  </TASK>
[   97.569474][ T5945] ERROR: Out of memory at tomoyo_realpath_from_path.
[   97.628919][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout
[   97.629011][ T5629] Bluetooth: hci4: command 0x0c1a tx timeout
[   97.677160][ T5773] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   97.708218][ T5629] Bluetooth: hci5: command 0x0c1a tx timeout
[   97.778483][ T5961] loop3: detected capacity change from 0 to 64
[   97.900987][ T5620] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck.
[   97.932704][ T5620] EXT4-fs error (device loop1): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /4/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[   97.954175][ T5620] EXT4-fs (loop1): Remounting filesystem read-only
[   97.970620][ T5773] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   97.984446][ T5773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.984484][ T5773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.010009][ T5773] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[   98.010041][ T5773] usb 3-1: Manufacturer: syz
[   98.014382][ T5773] usb 3-1: config 0 descriptor??
[   98.106445][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.205290][ T5937] loop0: detected capacity change from 0 to 32768
[   98.288283][ T5937] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   98.375693][ T5972] loop4: detected capacity change from 0 to 4096
[   98.528568][ T5937] XFS (loop0): Ending clean mount
[   98.712821][ T5937] XFS (loop0): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[   98.825868][ T5629] Bluetooth: hci0: command 0x0c1a tx timeout
[   98.999019][ T5611] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   99.044967][   T44] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   99.078902][ T5773] uclogic 0003:256C:006D.0001: v1 frame probing failed: -71
[   99.079004][ T5773] uclogic 0003:256C:006D.0001: failed probing parameters: -71
[   99.079112][ T5773] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71
[   99.146709][ T5773] usb 3-1: USB disconnect, device number 2
[   99.195752][   T44] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   99.196877][   T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   99.196915][   T44] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   99.196953][   T44] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[   99.199742][   T44] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   99.199770][   T44] usb 4-1: Manufacturer: syz
[   99.313509][   T44] usb 4-1: config 0 descriptor??
[   99.330308][   T44] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[   99.374538][ T5993] overlay: filesystem on ./file0 not supported
[   99.626815][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout
[   99.626910][ T5629] Bluetooth: hci3: command 0x0c1a tx timeout
[   99.701182][ T5997] loop4: detected capacity change from 0 to 164
[   99.715125][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout
[   99.715236][ T5629] Bluetooth: hci4: command 0x0c1a tx timeout
[   99.785083][ T5629] Bluetooth: hci5: command 0x0c1a tx timeout
[  100.141114][ T6005] loop2: detected capacity change from 0 to 4096
[  100.158129][ T6005] EXT4-fs: Ignoring removed mblk_io_submit option
[  100.181405][ T6005] EXT4-fs (loop2): Test dummy encryption mode enabled
[  100.247031][ T6005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.339640][ T6017] capability: warning: `syz.1.55' uses 32-bit capabilities (legacy support in use)
[  100.412108][ T5618] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.781572][   T29] audit: type=1400 audit(1792632267.909:3): apparmor="STATUS" operation="profile_load" info="not privileged for target profile" error=-13 profile="unconfined" pid=6016 comm="syz.1.55"
[  100.905585][ T5629] Bluetooth: hci0: command 0x0c1a tx timeout
[  100.995345][   T44] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  101.146272][   T44] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  101.148639][   T44] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  101.148695][   T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.182380][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888054239800: rx timeout, send abort
[  101.343965][ T5774] kernel read not supported for file /newroot/7 (pid: 5774 comm: kworker/1:7)
[  101.459383][ T6046] af_packet: tpacket_rcv: packet too big, clamped from 240 to 4294967272. macoff=96
[  101.682733][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888054239800: abort rx timeout. Force session deactivation
[  101.683971][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888054238400: rx timeout, send abort
[  102.184026][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888054238400: abort rx timeout. Force session deactivation
[  102.581117][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout
[  102.581185][ T5624] Bluetooth: hci4: command 0x0c1a tx timeout
[  102.581229][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout
[  102.581262][ T5624] Bluetooth: hci5: command 0x0c1a tx timeout
[  102.581362][ T5629] Bluetooth: hci3: command 0x0c1a tx timeout
[  102.710698][ T6056] loop0: detected capacity change from 0 to 131072
[  102.740291][   T44] lg-g15 0003:046D:C222.0002: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0
[  102.760944][ T6054] loop1: detected capacity change from 0 to 131072
[  102.781506][ T6056] F2FS-fs (loop0): invalid crc value
[  102.782568][ T6054] F2FS-fs (loop1): invalid crc value
[  102.901391][ T6054] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  102.902686][ T6056] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  102.925456][ T6054] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  102.927088][   T44] lg-g15 0003:046D:C222.0002: Error getting LED brightness: -71
[  102.929023][ T6056] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  102.962498][   T44] lg-g15 0003:046D:C222.0002: probe with driver lg-g15 failed with error -71
[  102.999719][   T44] usb 3-1: USB disconnect, device number 3
[  103.013355][   T29] audit: type=1800 audit(1792632270.139:4): pid=6054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.71" name="file1" dev="loop1" ino=7 res=0 errno=0
[  103.040216][ T4937] usb 4-1: USB disconnect, device number 3
[  103.415681][ T6067] fido_id[6067]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  103.867447][ T6078] FAULT_INJECTION: forcing a failure.
[  103.867447][ T6078] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  103.867485][ T6078] CPU: 1 UID: 0 PID: 6078 Comm: syz.0.76 Not tainted syzkaller #0 PREEMPT(full) 
[  103.867512][ T6078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  103.867527][ T6078] Call Trace:
[  103.867537][ T6078]  <TASK>
[  103.867548][ T6078]  dump_stack_lvl+0xe8/0x150
[  103.867591][ T6078]  should_fail_ex+0x410/0x560
[  103.867638][ T6078]  _copy_to_user+0x31/0xb0
[  103.867665][ T6078]  bpf_vlog_reverse_ubuf+0x289/0x3e0
[  103.867722][ T6078]  bpf_vlog_finalize+0x1c9/0x3f0
[  103.867768][ T6078]  bpf_log_attr_finalize+0x80/0x1e0
[  103.867794][ T6078]  ? __pfx_bpf_log_attr_finalize+0x10/0x10
[  103.867824][ T6078]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.867855][ T6078]  ? btf_parse_hdr+0x54f/0x810
[  103.867894][ T6078]  btf_new_fd+0x6a0/0x8f0
[  103.867930][ T6078]  __sys_bpf+0xd2e/0xd90
[  103.867969][ T6078]  ? __pfx___sys_bpf+0x10/0x10
[  103.868001][ T6078]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.868030][ T6078]  ? do_futex+0x458/0x4e0
[  103.868098][ T6078]  ? rcu_is_watching+0x16/0xb0
[  103.868132][ T6078]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.868169][ T6078]  __x64_sys_bpf+0xba/0xd0
[  103.868214][ T6078]  do_syscall_64+0x166/0x520
[  103.868245][ T6078]  ? trace_irq_disable+0x3b/0x140
[  103.868269][ T6078]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.868305][ T6078]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.868329][ T6078] RIP: 0033:0x7f612539f559
[  103.868352][ T6078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  103.868371][ T6078] RSP: 002b:00007f6126219028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  103.868398][ T6078] RAX: ffffffffffffffda RBX: 00007f6125625fa0 RCX: 00007f612539f559
[  103.868416][ T6078] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012
[  103.868433][ T6078] RBP: 00007f6125436b20 R08: 0000000000000000 R09: 0000000000000000
[  103.868449][ T6078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  103.868464][ T6078] R13: 00007f6125626038 R14: 00007f6125625fa0 R15: 00007ffe62f2e208
[  103.868505][ T6078]  </TASK>
[  104.286446][ T6087] jffs2: notice: (6087) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  104.427640][ T6091] ip_tables: iptables: counters copy to user failed while replacing table
[  104.452201][ T6094] loop1: detected capacity change from 0 to 512
[  104.461895][ T6094] EXT4-fs: Ignoring removed orlov option
[  104.495264][ T6094] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  104.495285][ T6094] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  104.495299][ T6094] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  104.559342][ T6094] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #16: comm syz.1.86: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0)
[  104.559510][ T6094] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  104.564946][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  104.564970][    C0] EXT4-fs (loop1): initial error at time 1792632271: ext4_ext_check_inode:521: inode 16
[  104.565006][    C0] EXT4-fs (loop1): last error at time 1792632271: ext4_ext_check_inode:521: inode 16
[  104.570291][ T6094] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.86: couldn't read orphan inode 16 (err -117)
[  104.570397][ T6094] loop1: lost filesystem error report for type 5 error -117
[  104.575217][ T6094] EXT4-fs (loop1): 1 orphan inode deleted
[  104.590301][ T6094] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.879999][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.129904][ T6100] loop1: detected capacity change from 0 to 512
[  105.137444][ T6100] EXT4-fs: Ignoring removed mblk_io_submit option
[  105.172299][ T6100] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.87: corrupted in-inode xattr: e_value size too large
[  105.172338][ T6100] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  105.174296][ T6100] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.87: couldn't read orphan inode 15 (err -117)
[  105.174329][ T6100] loop1: lost filesystem error report for type 5 error -117
[  105.174911][    C0] EXT4-fs (loop1): error count since last fsck: 2
[  105.174933][    C0] EXT4-fs (loop1): initial error at time 1792632272: ext4_iget_extra_inode:5210: inode 15
[  105.174968][    C0] EXT4-fs (loop1): last error at time 1792632272: ext4_orphan_get:1408
[  105.207194][ T6100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.411217][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.545008][   T44] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  105.707745][   T44] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  105.710418][   T44] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  105.710455][   T44] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  105.710497][   T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.765116][ T6107] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  105.793527][   T44] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  106.294083][   T44] usb 6-1: USB disconnect, device number 2
[  107.388403][ T6149] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  107.743387][ T6160] FAULT_INJECTION: forcing a failure.
[  107.743387][ T6160] name failslab, interval 1, probability 0, space 0, times 0
[  107.743429][ T6160] CPU: 0 UID: 0 PID: 6160 Comm: syz.0.100 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  107.743463][ T6160] Tainted: [L]=SOFTLOCKUP
[  107.743472][ T6160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  107.743487][ T6160] Call Trace:
[  107.743497][ T6160]  <TASK>
[  107.743508][ T6160]  dump_stack_lvl+0xe8/0x150
[  107.743551][ T6160]  should_fail_ex+0x410/0x560
[  107.743599][ T6160]  should_failslab+0xa8/0x100
[  107.743634][ T6160]  __kmalloc_noprof+0xf9/0x710
[  107.743660][ T6160]  ? __pfx___futex_wait+0x10/0x10
[  107.743697][ T6160]  ? iovec_from_user+0x87/0x250
[  107.743742][ T6160]  ? iovec_from_user+0x87/0x250
[  107.743795][ T6160]  iovec_from_user+0x87/0x250
[  107.743840][ T6160]  __import_iovec+0x15e/0x7e0
[  107.743886][ T6160]  ? srso_alias_return_thunk+0x5/0xfbef5
[  107.743923][ T6160]  import_iovec+0x73/0xa0
[  107.743972][ T6160]  vfs_writev+0x1cf/0x990
[  107.744016][ T6160]  ? __pfx_vfs_writev+0x10/0x10
[  107.744073][ T6160]  ? __fget_files+0x3a2/0x420
[  107.744110][ T6160]  ? __fget_files+0x2a/0x420
[  107.744151][ T6160]  ? srso_alias_return_thunk+0x5/0xfbef5
[  107.744180][ T6160]  ? fdget+0x1ac/0x250
[  107.744219][ T6160]  __se_sys_pwritev2+0x177/0x2a0
[  107.744252][ T6160]  ? __pfx___se_sys_pwritev2+0x10/0x10
[  107.744287][ T6160]  ? srso_alias_return_thunk+0x5/0xfbef5
[  107.744317][ T6160]  ? __x64_sys_pwritev2+0x20/0xc0
[  107.744347][ T6160]  do_syscall_64+0x166/0x520
[  107.744379][ T6160]  ? trace_irq_disable+0x3b/0x140
[  107.744404][ T6160]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.744437][ T6160]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.744462][ T6160] RIP: 0033:0x7f612539f559
[  107.744485][ T6160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  107.744505][ T6160] RSP: 002b:00007f6126219028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[  107.744531][ T6160] RAX: ffffffffffffffda RBX: 00007f6125625fa0 RCX: 00007f612539f559
[  107.744550][ T6160] RDX: 000000000000001c RSI: 0000200000000500 RDI: 0000000000000003
[  107.744566][ T6160] RBP: 00007f6125436b20 R08: 0000000000000000 R09: 0000000000000022
[  107.744582][ T6160] R10: 0000000000000a00 R11: 0000000000000246 R12: 0000000000000000
[  107.744598][ T6160] R13: 00007f6125626038 R14: 00007f6125625fa0 R15: 00007ffe62f2e208
[  107.744640][ T6160]  </TASK>
[  107.968276][ T6147] loop2: detected capacity change from 0 to 131072
[  107.976673][ T6147] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0)
[  107.976703][ T6147] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  108.003420][ T6147] F2FS-fs (loop2): invalid crc value
[  108.128168][ T6147] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  108.148820][ T6147] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  108.148848][ T6147] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  108.179598][ T4937] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  108.336121][ T4937] usb 2-1: Using ep0 maxpacket: 32
[  108.337126][ T4937] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  108.343188][ T4937] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  108.346793][ T4937] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  108.346823][ T4937] usb 2-1: Product: syz
[  108.346840][ T4937] usb 2-1: Manufacturer: syz
[  108.346857][ T4937] usb 2-1: SerialNumber: syz
[  108.367064][ T4937] usb 2-1: config 0 descriptor??
[  108.369268][ T6151] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  108.382747][ T4937] hub 2-1:0.0: bad descriptor, ignoring hub
[  108.382775][ T4937] hub 2-1:0.0: probe with driver hub failed with error -5
[  108.653665][ T6178] loop0: detected capacity change from 0 to 2048
[  108.773258][ T6178] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.773377][ T6178] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.864153][ T6178] EXT4-fs (loop0): shut down requested (0)
[  109.083760][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.108242][ T6151] usb 2-1: reset high-speed USB device number 2 using dummy_hcd
[  109.299271][ T6151] usb 2-1: device firmware changed
[  109.313331][ T4937] usb 2-1: USB disconnect, device number 2
[  109.484989][ T4937] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  109.646885][ T4937] usb 2-1: Using ep0 maxpacket: 32
[  109.648120][ T4937] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  109.653843][ T4937] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  109.697785][ T4937] usb 2-1: string descriptor 0 read error: -22
[  109.697926][ T4937] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  109.725648][ T4937] usb 2-1: config 0 descriptor??
[  109.730711][ T6180] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  109.732111][ T4937] hub 2-1:0.0: bad descriptor, ignoring hub
[  109.732136][ T4937] hub 2-1:0.0: probe with driver hub failed with error -5
[  110.076682][ T5775] usb 2-1: USB disconnect, device number 3
[  110.145111][ T4937] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  110.306934][ T4937] usb 4-1: Using ep0 maxpacket: 32
[  110.311805][ T4937] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  110.330560][ T4937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.357976][ T4937] gspca_main: nw80x-2.14.0 probing 055f:d001
[  110.454969][    T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  110.605123][    T9] usb 6-1: Using ep0 maxpacket: 8
[  110.606254][    T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55
[  110.614405][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.614434][    T9] usb 6-1: Product: syz
[  110.614451][    T9] usb 6-1: Manufacturer: syz
[  110.614469][    T9] usb 6-1: SerialNumber: syz
[  110.632023][    T9] usb 6-1: config 0 descriptor??
[  110.700420][ T6223] FAULT_INJECTION: forcing a failure.
[  110.700420][ T6223] name failslab, interval 1, probability 0, space 0, times 0
[  110.700468][ T6223] CPU: 0 UID: 0 PID: 6223 Comm: syz.1.120 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  110.700501][ T6223] Tainted: [L]=SOFTLOCKUP
[  110.700511][ T6223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  110.700530][ T6223] Call Trace:
[  110.700540][ T6223]  <TASK>
[  110.700550][ T6223]  dump_stack_lvl+0xe8/0x150
[  110.700596][ T6223]  should_fail_ex+0x410/0x560
[  110.700645][ T6223]  should_failslab+0xa8/0x100
[  110.700683][ T6223]  __kmalloc_cache_noprof+0x9e/0x600
[  110.700719][ T6223]  ? do_signalfd4+0x11f/0x3c0
[  110.700755][ T6223]  ? do_signalfd4+0x11f/0x3c0
[  110.700791][ T6223]  ? srso_alias_return_thunk+0x5/0xfbef5
[  110.700829][ T6223]  do_signalfd4+0x11f/0x3c0
[  110.700872][ T6223]  __x64_sys_signalfd4+0x15a/0x1a0
[  110.700912][ T6223]  ? __pfx___x64_sys_signalfd4+0x10/0x10
[  110.700960][ T6223]  do_syscall_64+0x166/0x520
[  110.700990][ T6223]  ? trace_irq_disable+0x3b/0x140
[  110.701012][ T6223]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.701044][ T6223]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.701067][ T6223] RIP: 0033:0x7f72f8f9f559
[  110.701087][ T6223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  110.701105][ T6223] RSP: 002b:00007f72f9e4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000121
[  110.701130][ T6223] RAX: ffffffffffffffda RBX: 00007f72f9225fa0 RCX: 00007f72f8f9f559
[  110.701147][ T6223] RDX: 0000000000000008 RSI: 00002000000005c0 RDI: ffffffffffffffff
[  110.701165][ T6223] RBP: 00007f72f9036b20 R08: 0000000000000000 R09: 0000000000000000
[  110.701181][ T6223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  110.701196][ T6223] R13: 00007f72f9226038 R14: 00007f72f9225fa0 R15: 00007ffe4d7ec788
[  110.701233][ T6223]  </TASK>
[  110.887203][    T9] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  110.900734][    T9] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  110.919024][    T9] usb 6-1: USB disconnect, device number 3
[  111.012979][ T1845] usb 4-1: USB disconnect, device number 4
[  111.655439][ T5775] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  111.805980][ T5775] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  111.806035][ T5775] usb 2-1: too many configurations: 102, using maximum allowed: 8
[  111.808330][ T5775] usb 2-1: config 1 has an invalid interface number: 3 but max is 0
[  111.808359][ T5775] usb 2-1: config 1 has no interface number 0
[  111.810885][ T5775] usb 2-1: config 1 has an invalid interface number: 3 but max is 0
[  111.810909][ T5775] usb 2-1: config 1 has no interface number 0
[  111.811980][ T5775] usb 2-1: config 1 has an invalid interface number: 3 but max is 0
[  111.812004][ T5775] usb 2-1: config 1 has no interface number 0
[  111.813769][ T5775] usb 2-1: config 1 has an invalid interface number: 3 but max is 0
[  111.813794][ T5775] usb 2-1: config 1 has no interface number 0
[  111.814984][ T5775] usb 2-1: config 1 has an invalid interface number: 3 but max is 0
[  111.815030][ T5775] usb 2-1: config 1 has no interface number 0
[  111.907757][ T5775] usb 2-1: config 1 has an invalid interface number: 3 but max is 0
[  111.907787][ T5775] usb 2-1: config 1 has no interface number 0
[  111.910335][ T5775] usb 2-1: config 1 has an invalid interface number: 3 but max is 0
[  111.910362][ T5775] usb 2-1: config 1 has no interface number 0
[  111.913278][ T6251] FAULT_INJECTION: forcing a failure.
[  111.913278][ T6251] name failslab, interval 1, probability 0, space 0, times 0
[  111.913315][ T6251] CPU: 0 UID: 0 PID: 6251 Comm: syz.3.130 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  111.913348][ T6251] Tainted: [L]=SOFTLOCKUP
[  111.913358][ T6251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  111.913373][ T6251] Call Trace:
[  111.913383][ T6251]  <TASK>
[  111.913393][ T6251]  dump_stack_lvl+0xe8/0x150
[  111.913442][ T6251]  should_fail_ex+0x410/0x560
[  111.913489][ T6251]  should_failslab+0xa8/0x100
[  111.913525][ T6251]  __kmalloc_cache_noprof+0x9e/0x600
[  111.913553][ T6251]  ? __kmalloc_cache_noprof+0x148/0x600
[  111.913577][ T6251]  ? sctp_add_bind_addr+0x8c/0x370
[  111.913616][ T6251]  ? sctp_add_bind_addr+0x8c/0x370
[  111.913657][ T6251]  ? srso_alias_return_thunk+0x5/0xfbef5
[  111.913700][ T6251]  sctp_add_bind_addr+0x8c/0x370
[  111.913746][ T6251]  sctp_copy_local_addr_list+0x31a/0x4e0
[  111.913791][ T6251]  ? sctp_copy_local_addr_list+0xa3/0x4e0
[  111.913833][ T6251]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  111.913881][ T6251]  ? srso_alias_return_thunk+0x5/0xfbef5
[  111.913911][ T6251]  ? sctp_v4_is_any+0x35/0x60
[  111.913936][ T6251]  ? sctp_copy_one_addr+0x93/0x360
[  111.913981][ T6251]  sctp_bind_addr_copy+0x189/0x3c0
[  111.914031][ T6251]  sctp_connect_new_asoc+0x2ff/0x6b0
[  111.914067][ T6251]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  111.914107][ T6251]  ? srso_alias_return_thunk+0x5/0xfbef5
[  111.914136][ T6251]  ? srso_alias_return_thunk+0x5/0xfbef5
[  111.914165][ T6251]  ? security_sctp_bind_connect+0x7e/0x2c0
[  111.914203][ T6251]  sctp_sendmsg+0x159b/0x2d00
[  111.914253][ T6251]  ? __pfx_sctp_sendmsg+0x10/0x10
[  111.914281][ T6251]  ? finish_task_switch+0x40e/0xc60
[  111.914315][ T6251]  ? srso_alias_return_thunk+0x5/0xfbef5
[  111.914345][ T6251]  ? __lock_acquire+0x747/0x2de0
[  111.914404][ T6251]  ? aa_sock_msg_perm+0xfc/0x210
[  111.914440][ T6251]  ? srso_alias_return_thunk+0x5/0xfbef5
[  111.914469][ T6251]  ? sock_rps_record_flow+0x19/0x350
[  111.914498][ T6251]  ? srso_alias_return_thunk+0x5/0xfbef5
[  111.914527][ T6251]  ? inet_sendmsg+0x298/0x320
[  111.914555][ T6251]  ? __pfx_inet_sendmsg+0x10/0x10
[  111.914578][ T6251]  sock_sendmsg_nosec+0x10e/0x180
[  111.914621][ T6251]  ____sys_sendmsg+0x54e/0x850
[  111.914661][ T6251]  ? __pfx_____sys_sendmsg+0x10/0x10
[  111.914709][ T6251]  ? srso_alias_return_thunk+0x5/0xfbef5
[  111.914740][ T6251]  ? import_iovec+0x73/0xa0
[  111.914785][ T6251]  ___sys_sendmsg+0x2a5/0x360
[  111.914815][ T6251]  ? __lock_acquire+0x747/0x2de0
[  111.914860][ T6251]  ? __pfx____sys_sendmsg+0x10/0x10
[  111.914904][ T6251]  ? __pfx_futex_wake_mark+0x10/0x10
[  111.914975][ T6251]  ? srso_alias_return_thunk+0x5/0xfbef5
[  111.915024][ T6251]  ? __fget_files+0x3a2/0x420
[  111.915060][ T6251]  ? __fget_files+0x2a/0x420
[  111.915109][ T6251]  __sys_sendmmsg+0x273/0x4e0
[  111.915148][ T6251]  ? __pfx___sys_sendmmsg+0x10/0x10
[  111.915177][ T6251]  ? do_futex+0x3e7/0x4e0
[  111.915248][ T6251]  ? srso_alias_return_thunk+0x5/0xfbef5
[  111.915277][ T6251]  ? rcu_is_watching+0x16/0xb0
[  111.915317][ T6251]  __x64_sys_sendmmsg+0xa0/0xc0
[  111.915352][ T6251]  do_syscall_64+0x166/0x520
[  111.915383][ T6251]  ? trace_irq_disable+0x3b/0x140
[  111.915406][ T6251]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.915439][ T6251]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.915464][ T6251] RIP: 0033:0x7fe27219f559
[  111.915488][ T6251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  111.915507][ T6251] RSP: 002b:00007fe27303c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  111.915532][ T6251] RAX: ffffffffffffffda RBX: 00007fe272425fa0 RCX: 00007fe27219f559
[  111.915551][ T6251] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000004
[  111.915567][ T6251] RBP: 00007fe272236b20 R08: 0000000000000000 R09: 0000000000000000
[  111.915582][ T6251] R10: 0000000000048000 R11: 0000000000000246 R12: 0000000000000000
[  111.915597][ T6251] R13: 00007fe272426038 R14: 00007fe272425fa0 R15: 00007fffd9e9c408
[  111.915639][ T6251]  </TASK>
[  111.923124][ T5775] usb 2-1: config 1 has an invalid interface number: 3 but max is 0
[  111.923153][ T5775] usb 2-1: config 1 has no interface number 0
[  112.001114][ T5775] usb 2-1: New USB device strings: Mfr=219, Product=128, SerialNumber=211
[  112.001147][ T5775] usb 2-1: Product: syz
[  112.001164][ T5775] usb 2-1: Manufacturer: syz
[  112.001181][ T5775] usb 2-1: SerialNumber: syz
[  112.418414][ T5775] usb 2-1: 3:0 : does not exist
[  112.418458][ T5775] usb 2-1: 3:0 : does not exist
[  112.482437][ T6257] binder: 6255:6257 ioctl c0306201 200000000080 returned -14
[  112.565666][ T5879] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  112.633215][ T1845] usb 2-1: USB disconnect, device number 4
[  112.717491][ T5879] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  112.723898][ T5879] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  112.723931][ T5879] usb 3-1: config 0 has no interface number 0
[  112.723974][ T5879] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.724003][ T5879] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.724028][ T5879] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  112.724075][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.743939][ T5879] usb 3-1: config 0 descriptor??
[  112.920132][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  113.227718][ T6271] ip_tables: iptables: counters copy to user failed while replacing table
[  113.457039][ T5879] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0042.0003/input/input6
[  113.621673][ T5879] uclogic 0003:28BD:0042.0003: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.2-1/input1
[  113.662406][ T5879] usb 3-1: USB disconnect, device number 4
[  113.977434][ T6282] fido_id[6282]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  114.289252][ T6291] pimreg: entered allmulticast mode
[  114.329598][ T6288] pimreg: left allmulticast mode
[  114.702301][ T6301] loop0: detected capacity change from 0 to 128
[  114.772951][ T6301] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  114.792251][ T6301] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  114.921802][ T6307] FAULT_INJECTION: forcing a failure.
[  114.921802][ T6307] name failslab, interval 1, probability 0, space 0, times 0
[  114.921847][ T6307] CPU: 0 UID: 0 PID: 6307 Comm: syz.3.150 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  114.921884][ T6307] Tainted: [L]=SOFTLOCKUP
[  114.921894][ T6307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  114.921909][ T6307] Call Trace:
[  114.921918][ T6307]  <TASK>
[  114.921929][ T6307]  dump_stack_lvl+0xe8/0x150
[  114.921973][ T6307]  should_fail_ex+0x410/0x560
[  114.922021][ T6307]  should_failslab+0xa8/0x100
[  114.922054][ T6307]  ? alloc_empty_file+0x5b/0x1d0
[  114.922087][ T6307]  kmem_cache_alloc_noprof+0x9c/0x600
[  114.922130][ T6307]  ? alloc_empty_file+0x5b/0x1d0
[  114.922162][ T6307]  ? srso_alias_return_thunk+0x5/0xfbef5
[  114.922199][ T6307]  alloc_empty_file+0x5b/0x1d0
[  114.922277][ T6307]  alloc_file_pseudo+0x110/0x1e0
[  114.922314][ T6307]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  114.922348][ T6307]  ? _raw_spin_unlock+0x28/0x50
[  114.922374][ T6307]  ? srso_alias_return_thunk+0x5/0xfbef5
[  114.922414][ T6307]  sock_alloc_file+0xb8/0x2e0
[  114.922450][ T6307]  ? __sys_socket+0x12b/0x1b0
[  114.922492][ T6307]  __sys_socket+0x13f/0x1b0
[  114.922537][ T6307]  __x64_sys_socket+0x7a/0x90
[  114.922580][ T6307]  do_syscall_64+0x166/0x520
[  114.922614][ T6307]  ? trace_irq_disable+0x3b/0x140
[  114.922639][ T6307]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.922671][ T6307]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.922696][ T6307] RIP: 0033:0x7fe27219f559
[  114.922719][ T6307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  114.922739][ T6307] RSP: 002b:00007fe27303bfc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  114.922771][ T6307] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fe27219f559
[  114.922788][ T6307] RDX: 0000000000000000 RSI: 0000000000000802 RDI: 000000000000001a
[  114.922803][ T6307] RBP: 00007fe272236b20 R08: 0000000000000000 R09: 0000000000000000
[  114.922819][ T6307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  114.922833][ T6307] R13: 00007fe272426038 R14: 00007fe272425fa0 R15: 00007fffd9e9c408
[  114.922873][ T6307]  </TASK>
[  115.450201][ T5611] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  115.557190][ T6318] loop2: detected capacity change from 0 to 4096
[  115.631397][ T6318] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  115.758306][ T6318] ntfs3(loop2): ino=1a, mi_enum_attr
[  115.758441][ T6318] ntfs3(loop2): ino=1a, mi_enum_attr
[  115.758461][ T6318] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[  115.815811][ T6322] sg_write: data in/out 24540/136 bytes for SCSI command 0x0-- guessing data in;
[  115.815811][ T6322]    program syz.0.155 not setting count and/or reply_len properly
[  115.987077][   T29] audit: type=1800 audit(1792632283.119:5): pid=6318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.153" name="file1" dev="loop2" ino=30 res=0 errno=0
[  115.990841][ T6314] ntfs3(loop2): ino=1e, "file1" attr_set_size_ex
[  116.138163][ T6327] ip_tables: iptables: counters copy to user failed while replacing table
[  116.848470][ T6337] loop0: detected capacity change from 0 to 40427
[  116.850156][ T5792] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  116.853223][ T6337] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  116.853261][ T6337] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  116.960698][ T6337] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  116.980807][ T6337] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  116.980837][ T6337] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  117.077155][ T6337] syz.0.159: attempt to access beyond end of device
[  117.077155][ T6337] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  117.415048][ T6337] syz.0.159: attempt to access beyond end of device
[  117.415048][ T6337] loop0: rw=2049, sector=45104, nr_sectors = 8144 limit=40427
[  117.421640][ T6337] syz.0.159: attempt to access beyond end of device
[  117.421640][ T6337] loop0: rw=2049, sector=45056, nr_sectors = 8 limit=40427
[  117.522096][ T6337] syz.0.159: attempt to access beyond end of device
[  117.522096][ T6337] loop0: rw=2049, sector=57344, nr_sectors = 16384 limit=40427
[  117.534433][ T6337] syz.0.159: attempt to access beyond end of device
[  117.534433][ T6337] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  117.535897][ T6337] syz.0.159: attempt to access beyond end of device
[  117.535897][ T6337] loop0: rw=2049, sector=73728, nr_sectors = 8 limit=40427
[  117.536187][ T6337] syz.0.159: attempt to access beyond end of device
[  117.536187][ T6337] loop0: rw=2049, sector=73736, nr_sectors = 8 limit=40427
[  117.536399][ T6337] syz.0.159: attempt to access beyond end of device
[  117.536399][ T6337] loop0: rw=2049, sector=73744, nr_sectors = 8 limit=40427
[  117.536604][ T6337] syz.0.159: attempt to access beyond end of device
[  117.536604][ T6337] loop0: rw=2049, sector=73752, nr_sectors = 8 limit=40427
[  117.536868][ T6337] syz.0.159: attempt to access beyond end of device
[  117.536868][ T6337] loop0: rw=2049, sector=73760, nr_sectors = 8 limit=40427
[  117.749993][ T5792] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  117.754105][ T5792] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  117.754157][ T5792] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[  117.754187][ T5792] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  117.754232][ T5792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.071571][ T5611] CPU: 0 UID: 0 PID: 5611 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  118.071612][ T5611] Tainted: [L]=SOFTLOCKUP
[  118.071622][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  118.071636][ T5611] Call Trace:
[  118.071647][ T5611]  <TASK>
[  118.071658][ T5611]  dump_stack_lvl+0xe8/0x150
[  118.071704][ T5611]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  118.071761][ T5611]  f2fs_write_end_bio+0x1211/0x16e0
[  118.071797][ T5611]  ? blkg_put+0x22/0x240
[  118.071858][ T5611]  __submit_merged_bio+0x258/0x6a0
[  118.071883][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.071915][ T5611]  ? rcu_is_watching+0x16/0xb0
[  118.071955][ T5611]  f2fs_submit_merged_write+0x27d/0x380
[  118.072004][ T5611]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  118.072056][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.072097][ T5611]  f2fs_sync_node_pages+0x104b/0x1200
[  118.072121][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.072176][ T5611]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  118.072262][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.072303][ T5611]  f2fs_write_checkpoint+0xf8c/0x2710
[  118.072335][ T5611]  ? __lock_acquire+0x747/0x2de0
[  118.072415][ T5611]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  118.072447][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.072546][ T5611]  kill_f2fs_super+0x2dd/0x700
[  118.072590][ T5611]  ? __pfx_kill_f2fs_super+0x10/0x10
[  118.072638][ T5611]  ? call_rcu+0x64d/0x8b0
[  118.072666][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.072695][ T5611]  ? lockdep_hardirqs_on+0x7b/0x110
[  118.072733][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.072780][ T5611]  deactivate_locked_super+0xbe/0x110
[  118.072822][ T5611]  cleanup_mnt+0x204/0x2a0
[  118.072855][ T5611]  task_work_run+0x1d9/0x260
[  118.072884][ T5611]  ? __pfx_task_work_run+0x10/0x10
[  118.072938][ T5611]  exit_to_user_mode_loop+0x204/0x770
[  118.072962][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.072991][ T5611]  ? rcu_is_watching+0x16/0xb0
[  118.073025][ T5611]  do_syscall_64+0x328/0x520
[  118.073057][ T5611]  ? trace_irq_disable+0x3b/0x140
[  118.073081][ T5611]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.073114][ T5611]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.073139][ T5611] RIP: 0033:0x7f61253a0797
[  118.073161][ T5611] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  118.073181][ T5611] RSP: 002b:00007ffe62f2d478 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  118.073207][ T5611] RAX: 0000000000000000 RBX: 00007f6125435f63 RCX: 00007f61253a0797
[  118.073225][ T5611] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe62f2d530
[  118.073240][ T5611] RBP: 00007ffe62f2d530 R08: 00007ffe62f2e530 R09: 00000000ffffffff
[  118.073258][ T5611] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe62f2e5c0
[  118.073274][ T5611] R13: 00007f6125435f63 R14: 000000000001cc33 R15: 00007ffe62f2e600
[  118.073316][ T5611]  </TASK>
[  118.083958][ T5611] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  118.123445][ T1845] loop0: lost filesystem error report for type 5 error -108
[  118.284285][ T5792] cxacru 3-1:1.0: send of cm 0x91 failed (-71)
[  118.284350][ T5792] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71
[  118.284365][ T5792] ATM dev 0: usbatm_atm_init: atm_start failed: -71!
[  118.348277][ T5792] cxacru 3-1:1.0: probe with driver cxacru failed with error -71
[  118.404551][ T5792] usb 3-1: USB disconnect, device number 5
[  118.806379][ T5613] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  118.808663][ T5613] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  118.810508][ T5613] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  118.823430][ T5613] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  118.825732][ T5613] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  119.729747][ T6133] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.805001][   T44] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  119.814298][ T6377] input: syz0 as /devices/virtual/input/input8
[  119.956985][   T44] usb 3-1: Using ep0 maxpacket: 8
[  119.959468][   T44] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  119.960618][   T44] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  119.960643][   T44] usb 3-1: config 179 has no interface number 0
[  119.960689][   T44] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  119.960719][   T44] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  119.960750][   T44] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  119.960780][   T44] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  119.960810][   T44] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  119.960855][   T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.010745][ T6133] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.079763][ T6371] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  120.326231][ T6133] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.562481][    C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  120.562544][    C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  120.562783][ T5773] usb 3-1: USB disconnect, device number 6
[  120.616864][ T6133] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.807692][ T6362] rxe_eth0 speed is unknown, defaulting to 1000
[  120.905728][ T5629] Bluetooth: hci6: command tx timeout
[  121.009684][ T6412] loop0: detected capacity change from 0 to 1024
[  121.022892][ T6412] EXT4-fs: Ignoring removed mblk_io_submit option
[  121.022923][ T6412] EXT4-fs: Ignoring removed oldalloc option
[  121.068305][ T6412] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  121.068519][ T6412] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.135720][ T6412] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: block 3: comm syz.0.180: lblock 3 mapped to illegal pblock 3 (length 3)
[  121.162659][ T6412] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  121.162694][ T6412] EXT4-fs (loop0): This should not happen!! Data will be lost
[  121.162694][ T6412] 
[  121.171207][ T6412] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: block 3: comm syz.0.180: lblock 3 mapped to illegal pblock 3 (length 1)
[  121.180073][ T6412] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: block 3: comm syz.0.180: lblock 3 mapped to illegal pblock 3 (length 1)
[  121.180742][ T6412] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: block 3: comm syz.0.180: lblock 3 mapped to illegal pblock 3 (length 1)
[  121.181461][ T6412] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: block 3: comm syz.0.180: lblock 3 mapped to illegal pblock 3 (length 1)
[  121.182081][ T6412] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: block 3: comm syz.0.180: lblock 3 mapped to illegal pblock 3 (length 1)
[  121.182600][ T6412] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: block 3: comm syz.0.180: lblock 3 mapped to illegal pblock 3 (length 1)
[  121.183185][ T6412] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: block 3: comm syz.0.180: lblock 3 mapped to illegal pblock 3 (length 1)
[  121.183705][ T6412] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: block 3: comm syz.0.180: lblock 3 mapped to illegal pblock 3 (length 1)
[  121.184258][ T6412] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: block 3: comm syz.0.180: lblock 3 mapped to illegal pblock 3 (length 1)
[  121.409581][ T6422] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117
[  121.409622][ T6422] EXT4-fs (loop0): This should not happen!! Data will be lost
[  121.409622][ T6422] 
[  121.416609][ T6419] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  121.504760][ T6419] bond1: (slave lo): Enslaving as an active interface with an up link
[  121.510857][ T6419] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  121.677128][ T6428] loop5: detected capacity change from 0 to 128
[  121.744455][ T6428] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  121.747738][ T6428] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  121.920565][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  122.040367][ T5625] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  122.118854][ T6133] bridge_slave_1: left allmulticast mode
[  122.128363][ T6133] bridge_slave_1: left promiscuous mode
[  122.129309][ T6133] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.161621][ T6133] bridge_slave_0: left allmulticast mode
[  122.161651][ T6133] bridge_slave_0: left promiscuous mode
[  122.162183][ T6133] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.300284][ T6447] loop2: detected capacity change from 0 to 512
[  122.344050][ T6447] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.348051][ T6447] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  122.369389][ T5773] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  122.464984][   T44] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  122.531801][ T5618] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.545789][ T5773] usb 2-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00
[  122.548462][ T5773] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  122.548511][ T5773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.595363][ T5773] usb 2-1: config 0 descriptor??
[  122.628341][   T44] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  122.630023][   T44] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  122.630073][   T44] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  122.630101][   T44] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  122.632837][   T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  122.632890][   T44] usb 4-1: Product: syz
[  122.632908][   T44] usb 4-1: Manufacturer: syz
[  122.702180][ T6444] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  122.714327][   T44] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected
[  122.743757][   T44] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  122.764011][ T6133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  122.780614][ T6133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  122.797177][ T6133] bond0 (unregistering): Released all slaves
[  122.968740][ T5775] usb 4-1: USB disconnect, device number 5
[  122.985057][ T5629] Bluetooth: hci6: command tx timeout
[  123.007307][ T5775] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  123.008227][ T5775] garmin_gps 4-1:1.0: device disconnected
[  123.087865][ T5773] input: HID 0458:5005 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5005.0004/input/input9
[  123.169662][ T5773] input: HID 0458:5005 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5005.0004/input/input10
[  123.277357][ T5773] kye 0003:0458:5005.0004: input,hiddev0,hidraw0: USB HID v7f.fd Device [HID 0458:5005] on usb-dummy_hcd.1-1/input0
[  123.360441][ T5792] usb 2-1: USB disconnect, device number 5
[  123.483175][ T6460] fido_id[6460]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  123.776698][ T6452] loop2: detected capacity change from 0 to 40427
[  123.786941][ T6452] F2FS-fs: heap/no_heap options were deprecated
[  123.818914][ T6452] F2FS-fs (loop2): build fault injection rate: 19
[  123.818946][ T6452] F2FS-fs (loop2): build fault injection type: 0x3bfe8c
[  123.863185][ T6452] F2FS-fs (loop2): invalid crc value
[  123.923405][ T6477] loop5: detected capacity change from 0 to 1024
[  123.965452][ T6452] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940
[  124.348285][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1
[  124.360322][ T6452] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[  124.419391][ T6452] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  124.467963][ T6452] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  124.548938][ T6452] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0
[  124.631150][ T6452] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3a1/0xdc0
[  124.659492][ T6452] F2FS-fs (loop2): inject slab alloc in f2fs_alloc_inode of alloc_inode+0x6a/0x1b0
[  124.769491][ T5618] bio_check_eod: 1007 callbacks suppressed
[  124.769516][ T5618] syz-executor: attempt to access beyond end of device
[  124.769516][ T5618] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  124.773545][ T5618] CPU: 1 UID: 0 PID: 5618 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  124.773581][ T5618] Tainted: [L]=SOFTLOCKUP
[  124.773591][ T5618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  124.773605][ T5618] Call Trace:
[  124.773615][ T5618]  <TASK>
[  124.773626][ T5618]  dump_stack_lvl+0xe8/0x150
[  124.773668][ T5618]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  124.773726][ T5618]  f2fs_write_end_bio+0x1211/0x16e0
[  124.773766][ T5618]  ? blkg_put+0x22/0x240
[  124.773827][ T5618]  __submit_merged_bio+0x258/0x6a0
[  124.773851][ T5618]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.773886][ T5618]  ? rcu_is_watching+0x16/0xb0
[  124.773921][ T5618]  __submit_merged_write_cond+0x3c9/0x4e0
[  124.773974][ T5618]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  124.774031][ T5618]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.774071][ T5618]  f2fs_write_data_pages+0x2a1d/0x36f0
[  124.774099][ T5618]  ? __lock_acquire+0x747/0x2de0
[  124.774184][ T5618]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  124.774212][ T5618]  ? is_bpf_text_address+0x26/0x2b0
[  124.774258][ T5618]  ? arch_stack_walk+0xfb/0x150
[  124.774324][ T5618]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.774353][ T5618]  ? add_lock_to_list+0xc7/0x100
[  124.774384][ T5618]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.774412][ T5618]  ? __lock_acquire+0x1511/0x2de0
[  124.774484][ T5618]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.774512][ T5618]  ? do_raw_spin_lock+0x12b/0x2f0
[  124.774552][ T5618]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.774590][ T5618]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.774619][ T5618]  ? do_raw_spin_unlock+0xf5/0x200
[  124.774653][ T5618]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  124.774685][ T5618]  do_writepages+0x338/0x560
[  124.774720][ T5618]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.774752][ T5618]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.774786][ T5618]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.774814][ T5618]  ? do_raw_spin_unlock+0xf5/0x200
[  124.774854][ T5618]  filemap_fdatawrite+0x1e9/0x2f0
[  124.774887][ T5618]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  124.774962][ T5618]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.774994][ T5618]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.775050][ T5618]  ? do_raw_spin_unlock+0xf5/0x200
[  124.775089][ T5618]  f2fs_sync_dirty_inodes+0x30e/0x830
[  124.775141][ T5618]  f2fs_write_checkpoint+0xa38/0x2710
[  124.775176][ T5618]  ? __lock_acquire+0x747/0x2de0
[  124.775255][ T5618]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  124.775287][ T5618]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.775384][ T5618]  kill_f2fs_super+0x2dd/0x700
[  124.775428][ T5618]  ? __pfx_kill_f2fs_super+0x10/0x10
[  124.775474][ T5618]  ? call_rcu+0x64d/0x8b0
[  124.775502][ T5618]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.775531][ T5618]  ? lockdep_hardirqs_on+0x7b/0x110
[  124.775562][ T5618]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.775609][ T5618]  deactivate_locked_super+0xbe/0x110
[  124.775650][ T5618]  cleanup_mnt+0x204/0x2a0
[  124.775682][ T5618]  task_work_run+0x1d9/0x260
[  124.775719][ T5618]  ? __pfx_task_work_run+0x10/0x10
[  124.775770][ T5618]  exit_to_user_mode_loop+0x204/0x770
[  124.775794][ T5618]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.775823][ T5618]  ? rcu_is_watching+0x16/0xb0
[  124.775857][ T5618]  do_syscall_64+0x328/0x520
[  124.775888][ T5618]  ? trace_irq_disable+0x3b/0x140
[  124.775912][ T5618]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.775945][ T5618]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.775970][ T5618] RIP: 0033:0x7f61263a0797
[  124.775993][ T5618] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  124.776013][ T5618] RSP: 002b:00007ffc625c76b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  124.776039][ T5618] RAX: 0000000000000000 RBX: 00007f6126435f63 RCX: 00007f61263a0797
[  124.776056][ T5618] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc625c7770
[  124.776072][ T5618] RBP: 00007ffc625c7770 R08: 00007ffc625c8770 R09: 00000000ffffffff
[  124.776089][ T5618] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc625c8800
[  124.776105][ T5618] R13: 00007f6126435f63 R14: 000000000001e6d2 R15: 00007ffc625c8840
[  124.776145][ T5618]  </TASK>
[  124.928558][ T5618] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  124.952569][ T5775] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  125.067567][ T5629] Bluetooth: hci6: command tx timeout
[  125.127068][ T5775] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00
[  125.217242][ T5775] usb 1-1: config 1 has an invalid interface number: 27 but max is 1
[  125.217274][ T5775] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  125.217296][ T5775] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 2
[  125.217319][ T5775] usb 1-1: config 1 has no interface number 2
[  125.217384][ T5775] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64
[  125.217411][ T5775] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  125.217442][ T5775] usb 1-1: config 1 interface 1 has no altsetting 0
[  125.275686][ T5775] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.275725][ T5775] usb 1-1: Product: syz
[  125.275742][ T5775] usb 1-1: Manufacturer: syz
[  125.275759][ T5775] usb 1-1: SerialNumber: syz
[  126.055574][ T6492] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  126.795582][    C1] ATM dev 0: usbatm_complete: urb 0xffff88802a184400 failed (-71)!
[  126.795655][    C1] ATM dev 0: usbatm_complete: urb 0xffff88802a184200 failed (-71)!
[  126.795706][    C1] ATM dev 0: usbatm_complete: urb 0xffff888026505500 failed (-71)!
[  126.795758][    C1] ATM dev 0: usbatm_complete: urb 0xffff888026505700 failed (-71)!
[  126.932058][    C1] ATM dev 0: usbatm_complete: urb 0xffff88802a184400 failed (-71)!
[  126.932120][    C1] ATM dev 0: usbatm_complete: urb 0xffff88802a184200 failed (-71)!
[  126.932162][    C1] ATM dev 0: usbatm_complete: urb 0xffff888026505500 failed (-71)!
[  126.932203][    C1] ATM dev 0: usbatm_complete: urb 0xffff888026505700 failed (-71)!
[  127.063593][    C1] ATM dev 0: usbatm_complete: urb 0xffff88802a184400 failed (-71)!
[  127.063649][    C1] ATM dev 0: usbatm_complete: urb 0xffff88802a184200 failed (-71)!
[  127.174973][ T5629] Bluetooth: hci6: command tx timeout
[  127.199933][ T5775] speedtch 1-1:1.27: speedtch_bind: failed to claim interface  0 (-16)!
[  127.199965][ T5775] speedtch 1-1:1.27: usbatm_usb_probe: bind failed: -16!
[  127.200023][ T5775] speedtch 1-1:1.27: probe with driver speedtch failed with error -16
[  127.272393][ T5775] usb 1-1: USB disconnect, device number 2
[  127.514581][ T6133] hsr_slave_0: left promiscuous mode
[  127.531614][ T6133] hsr_slave_1: left promiscuous mode
[  127.532740][ T6133] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.532784][ T6133] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.588862][ T6133] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  127.588893][ T6133] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.838797][ T6133] veth1_macvtap: left promiscuous mode
[  127.838872][ T6133] veth0_macvtap: left promiscuous mode
[  127.839378][ T6133] veth1_vlan: left promiscuous mode
[  127.839523][ T6133] veth0_vlan: left promiscuous mode
[  129.215307][ T6567] loop0: detected capacity change from 0 to 2048
[  129.282858][ T6567] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  129.339904][ T6567] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  132.202426][ T6133] team0 (unregistering): Port device team_slave_1 removed
[  132.257758][ T6133] team0 (unregistering): Port device team_slave_0 removed
[  132.288020][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  132.295905][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  132.895023][ T6585] loop5: detected capacity change from 0 to 32768
[  133.120204][ T6585] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  133.218292][ T6559] bridge0: port 3(syz_tun) entered blocking state
[  133.218422][ T6559] bridge0: port 3(syz_tun) entered disabled state
[  133.218610][ T6559] syz_tun: entered allmulticast mode
[  133.233303][ T6559] syz_tun: entered promiscuous mode
[  133.265727][ T6559] bridge0: port 3(syz_tun) entered blocking state
[  133.265905][ T6559] bridge0: port 3(syz_tun) entered forwarding state
[  133.319173][ T6585] XFS (loop5): Ending clean mount
[  133.324192][ T5271] 8021q: adding VLAN 0 to HW filter on device eth3
[  133.581708][ T6362] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.581832][ T6362] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.582003][ T6362] bridge_slave_0: entered allmulticast mode
[  133.616305][ T6362] bridge_slave_0: entered promiscuous mode
[  133.649317][ T6362] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.649433][ T6362] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.649604][ T6362] bridge_slave_1: entered allmulticast mode
[  133.681277][ T6362] bridge_slave_1: entered promiscuous mode
[  133.709290][ T5625] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  133.940029][ T6362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  134.009147][ T6362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  134.452535][ T6362] team0: Port device team_slave_0 added
[  134.485828][ T6362] team0: Port device team_slave_1 added
[  134.509238][ T6607] FAULT_INJECTION: forcing a failure.
[  134.509238][ T6607] name failslab, interval 1, probability 0, space 0, times 0
[  134.509281][ T6607] CPU: 1 UID: 0 PID: 6607 Comm: syz.1.234 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  134.509314][ T6607] Tainted: [L]=SOFTLOCKUP
[  134.509324][ T6607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  134.509339][ T6607] Call Trace:
[  134.509349][ T6607]  <TASK>
[  134.509360][ T6607]  dump_stack_lvl+0xe8/0x150
[  134.509402][ T6607]  should_fail_ex+0x410/0x560
[  134.509448][ T6607]  should_failslab+0xa8/0x100
[  134.509484][ T6607]  __kmalloc_cache_noprof+0x9e/0x600
[  134.509511][ T6607]  ? __kasan_kmalloc+0x93/0xb0
[  134.509539][ T6607]  ? ceph_init_fs_context+0x54/0x4b0
[  134.509569][ T6607]  ? ceph_init_fs_context+0x54/0x4b0
[  134.509608][ T6607]  ceph_init_fs_context+0x54/0x4b0
[  134.509644][ T6607]  alloc_fs_context+0x99e/0xd00
[  134.509683][ T6607]  __se_sys_fsopen+0x118/0x370
[  134.509723][ T6607]  do_syscall_64+0x166/0x520
[  134.509755][ T6607]  ? trace_irq_disable+0x3b/0x140
[  134.509779][ T6607]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.509813][ T6607]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.509838][ T6607] RIP: 0033:0x7f72f8f9f559
[  134.509861][ T6607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  134.509881][ T6607] RSP: 002b:00007f72f9e4c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  134.509908][ T6607] RAX: ffffffffffffffda RBX: 00007f72f9225fa0 RCX: 00007f72f8f9f559
[  134.509926][ T6607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280
[  134.509942][ T6607] RBP: 00007f72f9036b20 R08: 0000000000000000 R09: 0000000000000000
[  134.509958][ T6607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  134.509973][ T6607] R13: 00007f72f9226038 R14: 00007f72f9225fa0 R15: 00007ffe4d7ec788
[  134.510015][ T6607]  </TASK>
[  135.191123][ T6362] batman_adv: batadv0: Adding interface: batadv_slave_0
[  135.191145][ T6362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  135.191176][ T6362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  135.245912][ T6362] batman_adv: batadv0: Adding interface: batadv_slave_1
[  135.245933][ T6362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  135.245965][ T6362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  135.575398][ T1845] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  135.685826][ T6622] netlink: 'syz.5.233': attribute type 4 has an invalid length.
[  135.714743][ T6623] netlink: 'syz.5.233': attribute type 4 has an invalid length.
[  135.745122][ T1845] usb 4-1: Using ep0 maxpacket: 16
[  135.745870][ T1845] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  135.749765][ T1845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.749793][ T1845] usb 4-1: Product: syz
[  135.749810][ T1845] usb 4-1: Manufacturer: syz
[  135.749827][ T1845] usb 4-1: SerialNumber: syz
[  135.793608][ T1845] usb 4-1: config 0 descriptor??
[  135.821423][ T1845] gspca_main: spca508-2.14.0 probing 041e:4018
[  135.879777][ T6362] hsr_slave_0: entered promiscuous mode
[  135.899523][ T6362] hsr_slave_1: entered promiscuous mode
[  135.913384][ T6362] debugfs: 'hsr0' already exists in 'hsr'
[  135.913411][ T6362] Cannot create hsr debugfs directory
[  135.967291][ T6623] Zero length message leads to an empty skb
[  136.058605][ T1845] gspca_spca508: reg_read err -32
[  136.075366][ T1845] gspca_spca508: reg_read err -32
[  136.077765][ T1845] gspca_spca508: reg_read err -32
[  136.339352][ T1845] gspca_spca508: reg_read err -71
[  136.340806][ T1845] gspca_spca508: reg write: error -71
[  136.340888][ T1845] spca508 4-1:0.0: probe with driver spca508 failed with error -71
[  136.397389][ T1845] usb 4-1: USB disconnect, device number 6
[  137.048507][ T6636] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  137.114562][ T6643] loop4: detected capacity change from 0 to 2640
[  137.351413][ T6644] Buffer I/O error on dev loop4, logical block 0, lost async page write
[  137.351481][ T6644] Buffer I/O error on dev loop4, logical block 1, lost async page write
[  137.351527][ T6644] Buffer I/O error on dev loop4, logical block 2, lost async page write
[  137.351555][ T6644] Buffer I/O error on dev loop4, logical block 3, lost async page write
[  137.351599][ T6644] Buffer I/O error on dev loop4, logical block 4, lost async page write
[  137.365508][ T6642] loop1: detected capacity change from 0 to 512
[  137.467378][ T6644] Buffer I/O error on dev loop4, logical block 5, lost async page write
[  137.467413][ T6644] Buffer I/O error on dev loop4, logical block 6, lost async page write
[  137.467442][ T6644] Buffer I/O error on dev loop4, logical block 7, lost async page write
[  137.467504][ T6644] Buffer I/O error on dev loop4, logical block 8, lost async page write
[  137.467531][ T6644] Buffer I/O error on dev loop4, logical block 9, lost async page write
[  137.470645][ T6642] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
[  138.901217][ T6362] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  138.936641][ T6362] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  138.940949][ T6362] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  139.091727][ T6362] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  139.122881][ T6362] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  139.275885][ T6362] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  139.284456][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2
[  139.304219][ T6362] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  139.333493][ T6362] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  140.151560][ T6704] loop1: detected capacity change from 0 to 16
[  140.331196][ T6704] erofs (device loop1): mounted with root inode @ nid 36.
[  140.475447][ T5629] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[  140.541206][ T6704] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096
[  140.541241][ T6704] erofs (device loop1): read error -117 @ 0 of nid 89
[  140.602079][ T6362] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.694437][ T6362] 8021q: adding VLAN 0 to HW filter on device team0
[  140.743792][ T6133] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.743898][ T6133] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.826603][ T6133] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.826710][ T6133] bridge0: port 2(bridge_slave_1) entered forwarding state
[  143.518640][ T6751] loop3: detected capacity change from 0 to 4096
[  143.553145][ T6751] EXT4-fs (loop3): Test dummy encryption mode enabled
[  143.602383][ T6751] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.740034][ T6751] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-lib"
[  144.157711][ T5271] 8021q: adding VLAN 0 to HW filter on device eth4
[  144.403852][ T6766] jffs2: notice: (6766) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  144.881385][ T6739] loop2: detected capacity change from 0 to 32768
[  145.013299][ T6739] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  145.144207][ T6739] XFS (loop2): Ending clean mount
[  145.237783][ T6362] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.437170][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.100708][ T5618] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  146.607955][ T6800] loop1: detected capacity change from 0 to 1024
[  146.791723][ T6800] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.122026][ T6811] loop3: detected capacity change from 0 to 1024
[  147.152307][ T6811] EXT4-fs: Ignoring removed bh option
[  147.163054][ T6811] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  147.263101][ T6811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.394805][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.043879][ T6827] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  148.101916][ T6362] veth0_vlan: entered promiscuous mode
[  148.153061][ T6362] veth1_vlan: entered promiscuous mode
[  148.221233][ T6822] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  148.261854][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.518841][ T6362] veth0_macvtap: entered promiscuous mode
[  148.557006][ T6362] veth1_macvtap: entered promiscuous mode
[  148.684363][ T6362] batman_adv: batadv0: Interface activated: batadv_slave_0
[  148.778382][ T6362] batman_adv: batadv0: Interface activated: batadv_slave_1
[  148.784193][ T6833] syz.0.288 uses obsolete (PF_INET,SOCK_PACKET)
[  148.993932][ T6842] jffs2: notice: (6842) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  149.096219][ T6842] overlay: ./file0 is not a directory
[  149.356749][   T30] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.357715][   T30] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.357761][   T30] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.357804][   T30] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.814971][ T1845] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  149.902489][  T116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.902514][  T116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.974206][ T1845] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  150.000927][ T1845] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  150.001013][ T1845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.001047][ T1845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  150.001074][ T1845] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  150.029390][ T1845] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  150.029425][ T1845] usb 1-1: Manufacturer: syz
[  150.096432][ T1845] usb 1-1: config 0 descriptor??
[  150.246829][  T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.246884][  T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.551416][ T1845] appleir 0003:05AC:8243.0005: unknown main item tag 0x0
[  150.578139][ T1845] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[  150.886223][ T5792] usb 1-1: USB disconnect, device number 3
[  151.186738][ T6860] FAULT_INJECTION: forcing a failure.
[  151.186738][ T6860] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  151.186793][ T6860] CPU: 0 UID: 0 PID: 6860 Comm: syz.3.295 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  151.186828][ T6860] Tainted: [L]=SOFTLOCKUP
[  151.186837][ T6860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  151.186852][ T6860] Call Trace:
[  151.186863][ T6860]  <TASK>
[  151.186874][ T6860]  dump_stack_lvl+0xe8/0x150
[  151.186923][ T6860]  should_fail_ex+0x410/0x560
[  151.186972][ T6860]  _copy_to_user+0x31/0xb0
[  151.187001][ T6860]  bpf_verifier_vlog+0x52a/0x900
[  151.187062][ T6860]  __btf_verifier_log+0xe2/0x140
[  151.187106][ T6860]  ? __pfx___btf_verifier_log+0x10/0x10
[  151.187159][ T6860]  btf_verifier_log_member+0x5a8/0x800
[  151.187209][ T6860]  ? __pfx_btf_verifier_log_member+0x10/0x10
[  151.187264][ T6860]  btf_struct_check_meta+0xb73/0xd20
[  151.187306][ T6860]  ? __pfx_btf_sec_info_cmp+0x10/0x10
[  151.187353][ T6860]  btf_check_all_metas+0x344/0xa30
[  151.187400][ T6860]  btf_parse_type_sec+0xfb/0x1950
[  151.187428][ T6860]  ? __pfx___btf_verifier_log+0x10/0x10
[  151.187468][ T6860]  ? __pfx_btf_check_sec_info+0x10/0x10
[  151.187511][ T6860]  ? srso_alias_return_thunk+0x5/0xfbef5
[  151.187542][ T6860]  ? srso_alias_return_thunk+0x5/0xfbef5
[  151.187571][ T6860]  ? btf_parse_str_sec+0x244/0x2f0
[  151.187603][ T6860]  ? srso_alias_return_thunk+0x5/0xfbef5
[  151.187639][ T6860]  btf_new_fd+0x3e0/0x8f0
[  151.187675][ T6860]  __sys_bpf+0xd2e/0xd90
[  151.187714][ T6860]  ? __pfx___sys_bpf+0x10/0x10
[  151.187751][ T6860]  ? srso_alias_return_thunk+0x5/0xfbef5
[  151.187781][ T6860]  ? do_futex+0x3e7/0x4e0
[  151.187850][ T6860]  ? rcu_is_watching+0x16/0xb0
[  151.187880][ T6860]  ? srso_alias_return_thunk+0x5/0xfbef5
[  151.187917][ T6860]  __x64_sys_bpf+0xba/0xd0
[  151.187962][ T6860]  do_syscall_64+0x166/0x520
[  151.187995][ T6860]  ? trace_irq_disable+0x3b/0x140
[  151.188020][ T6860]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.188053][ T6860]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.188078][ T6860] RIP: 0033:0x7fe27219f559
[  151.188101][ T6860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  151.188122][ T6860] RSP: 002b:00007fe27303c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  151.188148][ T6860] RAX: ffffffffffffffda RBX: 00007fe272425fa0 RCX: 00007fe27219f559
[  151.188167][ T6860] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012
[  151.188184][ T6860] RBP: 00007fe272236b20 R08: 0000000000000000 R09: 0000000000000000
[  151.188200][ T6860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  151.188215][ T6860] R13: 00007fe272426038 R14: 00007fe272425fa0 R15: 00007fffd9e9c408
[  151.188256][ T6860]  </TASK>
[  153.138373][ T6863] loop6: detected capacity change from 0 to 32768
[  153.284907][    C1] sched: DL replenish lagged too much
[  153.354191][ T6863] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.166 (6863)
[  154.524755][ T6863] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  154.524799][ T6863] BTRFS info (device loop6): using xxhash64 checksum algorithm
[  154.618895][ T6863] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  154.621097][ T6910] netlink: 'syz.0.305': attribute type 4 has an invalid length.
[  154.651084][ T6863] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  154.651365][ T6863] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  154.651679][ T6863] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  154.651978][ T6863] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  154.696462][ T6863] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  154.700234][ T6863] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  154.704661][ T6863] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  154.737451][ T6863] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  154.773134][ T6863] BTRFS error (device loop6): open_ctree failed: -ENOMEM
[  154.891320][ T6883] loop3: detected capacity change from 0 to 32768
[  154.916709][ T6883] BTRFS: device fsid a830dcec-d20e-42dc-8160-bf13f3286f97 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.302 (6883)
[  155.009080][ T6883] BTRFS info (device loop3): first mount of filesystem a830dcec-d20e-42dc-8160-bf13f3286f97
[  155.009122][ T6883] BTRFS info (device loop3): using xxhash64 checksum algorithm
[  155.486739][ T6883] BTRFS info (device loop3): enabling ssd optimizations
[  155.486779][ T6883] BTRFS info (device loop3): turning on async discard
[  155.486798][ T6883] BTRFS info (device loop3): enabling free space tree
[  155.863350][ T5617] BTRFS info (device loop3): last unmount of filesystem a830dcec-d20e-42dc-8160-bf13f3286f97
[  158.511573][ T5629] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  158.519452][ T5629] Bluetooth: hci5: Injecting HCI hardware error event
[  158.528149][ T5613] Bluetooth: hci5: hardware error 0x00
[  164.474338][ T5613] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  194.558921][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  194.566438][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  241.970589][ T5629] Bluetooth: hci6: command 0x0406 tx timeout
[  255.190113][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  255.197677][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  317.300688][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  317.308183][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  353.610538][ T6588] udevd[6588]: timeout '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0'
[  354.281111][   T32] INFO: task syz.2.307:6939 blocked for more than 148 seconds.
[  354.281145][   T32]       Tainted: G             L      syzkaller #0
[  354.281159][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  354.281170][   T32] task:syz.2.307       state:D stack:25384 pid:6939  tgid:6939  ppid:5618   task_flags:0x400040 flags:0x00080002
[  354.281243][   T32] Call Trace:
[  354.281252][   T32]  <TASK>
[  354.281270][   T32]  __schedule+0x17dd/0x5820
[  354.281323][   T32]  ? is_bpf_text_address+0x26/0x2b0
[  354.281361][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.281401][   T32]  ? __pfx___schedule+0x10/0x10
[  354.281441][   T32]  ? schedule+0x90/0x2b0
[  354.281474][   T32]  schedule+0x164/0x2b0
[  354.281507][   T32]  schedule_preempt_disabled+0x13/0x30
[  354.281541][   T32]  __mutex_lock+0x7c4/0x15a0
[  354.281579][   T32]  ? __mutex_lock+0x5cd/0x15a0
[  354.281618][   T32]  ? ima_file_free+0x18a/0x5d0
[  354.281648][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  354.281678][   T32]  ? do_syscall_64+0x166/0x520
[  354.281711][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.281741][   T32]  ? locks_remove_file+0x11a/0xf40
[  354.281792][   T32]  ima_file_free+0x18a/0x5d0
[  354.281822][   T32]  ? __pfx_ima_file_free+0x10/0x10
[  354.281854][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.281883][   T32]  ? __asan_memset+0x22/0x50
[  354.281908][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.281937][   T32]  ? locks_remove_posix+0x14f/0x6a0
[  354.281970][   T32]  ? __pfx_locks_remove_posix+0x10/0x10
[  354.281997][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.282033][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.282068][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.282107][   T32]  security_file_release+0x85/0x110
[  354.282141][   T32]  __fput+0x370/0xa40
[  354.282185][   T32]  fput_close_sync+0x11f/0x240
[  354.282220][   T32]  ? __pfx_fput_close_sync+0x10/0x10
[  354.282252][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.282288][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  354.282324][   T32]  filp_close_sync+0x6e/0xa0
[  354.282361][   T32]  __se_sys_close_range+0xa77/0xef0
[  354.282424][   T32]  ? __pfx___se_sys_close_range+0x10/0x10
[  354.282477][   T32]  do_syscall_64+0x166/0x520
[  354.282514][   T32]  ? trace_irq_disable+0x3b/0x140
[  354.282539][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.282572][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.282599][   T32] RIP: 0033:0x7f612639f559
[  354.282621][   T32] RSP: 002b:00007ffc625c85a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  354.282647][   T32] RAX: ffffffffffffffda RBX: 00007f6126627da0 RCX: 00007f612639f559
[  354.282666][   T32] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  354.282681][   T32] RBP: 00007f6126627da0 R08: 0000000000000006 R09: 0000000000000000
[  354.282698][   T32] R10: 00007f6126627cb0 R11: 0000000000000246 R12: 00000000000261d5
[  354.282715][   T32] R13: 00007f6126625fac R14: 0000000000025f1d R15: 00007ffc625c86b0
[  354.282756][   T32]  </TASK>
[  354.282772][   T32] 
[  354.282772][   T32] Showing all locks held in the system:
[  354.282781][   T32] locks held by kthreadd/2: 2, last CPU#1:
[  354.282799][   T32]  #0: ffffffff8fea86b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  354.282863][   T32]  #1: ffffffff8fd588e0 (rcu_read_lock){....}-{1:3}, at: __page_table_check_zero+0x6c/0x430
[  354.282930][   T32] locks held by kworker/0:0/9: 4, last CPU#0:
[  354.282948][   T32]  #0: ffff88807fc4ad40 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  354.283022][   T32]  #1: ffffc900000e7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  354.283115][   T32]  #2: ffff888034470d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0
[  354.283190][   T32]  #3: ffffffff8fea86b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  354.283253][   T32] locks held by kworker/0:1/10: 3, last CPU#0:
[  354.283271][   T32]  #0: ffff88807e9ee140 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  354.283345][   T32]  #1: ffffc900000f7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  354.283435][   T32]  #2: ffff88807b8cd270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0
[  354.283518][   T32] locks held by kworker/u8:0/12: 3, last CPU#1:
[  354.283536][   T32]  #0: ffff88801c0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  354.283604][   T32]  #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  354.283673][   T32]  #2: ffff888052240800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  354.283737][   T32] locks held by kworker/u8:1/13: 4, last CPU#1:
[  354.283755][   T32]  #0: ffff888077971140 ((wq_completion)wg-kex-wg1#11){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  354.283831][   T32]  #1: ffffc90000127c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  354.283900][   T32]  #2: ffff88804fa5d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  354.283975][   T32]  #3: ffff88807b8c8330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  354.284050][   T32] locks held by kworker/1:0/24: 2, last CPU#1:
[  354.284068][   T32]  #0: ffff88807e9e2540 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  354.284143][   T32]  #1: ffffc900001e7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630