last executing test programs:

10.871403875s ago: executing program 1 (id=298):
mount$tmpfs(0x0, 0x0, 0x0, 0x20e0d3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)
r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
acct(&(0x7f0000000000)='./file1\x00')
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0)
socket(0x1, 0x2, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

9.59146779s ago: executing program 0 (id=300):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
unshare(0x6a040000)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e3704000b80fc0b09000300", 0x33fe0}], 0x1}, 0x0)

7.952514622s ago: executing program 0 (id=306):
r0 = open(0x0, 0x0, 0x40)
fcntl$notify(r0, 0x402, 0x79)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})

7.807217485s ago: executing program 2 (id=307):
r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x18, r0}, 0x18)
syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000140), 0xfe, 0x1103, &(0x7f0000002240)="$eJzs2T+L1EAYBvBnkvUPNpFcHwQtLOS4Y/0CVyhsa6uNyFVedVsp+m38OHqV/XG9Fgv2kbibXZEVwV0V5PeDkDcPeWcy5UwCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg0nyqSQHVdKOWZWkJF13MbtK0o357fd1lZInp7P5o/Pp43mS+tvr5WlShq6hLe3x3ZvttJ22x+3Dg5N7H+avXr98fnZ2er4apqTL5WKvq7g1zl3vdVgAAAD4P/Q7a/7x/AAAAMCv7O0gAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA39c2mbseiSlKSrruYXSXptvRd+0vfBwAAAOyupMqzZlu+PAbYeJCPTVnnw/1LGeqjvNvSDwAAAPxUf2NVfP9/vVzf7MfvZ7Lelw/ZnUxyeLh8frvKP58kdZKjHwa/XLx5MV6lr//0WgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvrIDxwIAAAAAwvyt0+jYAAAAAAAAAAAAAAAAAAAAYK8AAAD//+0M1yg=")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x200, &(0x7f0000000140))
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100))
r2 = open(&(0x7f0000000ec0)='./bus\x00', 0x1c123e, 0x39)
write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b)
syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000dc0)={[], [{@permit_directio}, {@fsname={'fsname', 0x3d, 'noblock_validity'}}, {@fsmagic={'fsmagic', 0x3d, 0x7fffffff}}]}, 0x0, 0x559e, &(0x7f0000005680)="$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")
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15)

7.424799213s ago: executing program 0 (id=308):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1)
mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0)

6.009655231s ago: executing program 3 (id=310):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x14)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0, 0x0, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000240)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x180)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x5c, r7, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x5e}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xb, 0x6d}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x50}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200448c1}, 0x48800)
fcntl$lock(r6, 0x5, &(0x7f0000000200)={0x1})
syz_io_uring_setup(0x276a, &(0x7f00000003c0)={0x0, 0xd2, 0x4000, 0x2, 0xea, 0x0, r6}, &(0x7f0000000000), &(0x7f0000000140))
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x2fd, 0xffff, 0x101, 0x300}})
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$int_in(r10, 0x5452, &(0x7f0000000180)=0xf51)
ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000640))
readv(r10, &(0x7f0000000340)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1)
sendmsg$inet(r10, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x24044014)
connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e)

5.896005193s ago: executing program 1 (id=311):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0x7}}, 0x40c100)

5.655418508s ago: executing program 1 (id=312):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x30}}, 0x2000c8c6)
r1 = socket(0x2, 0x3, 0xff)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)

5.295818685s ago: executing program 0 (id=313):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$ax25(0x3, 0x5, 0x8)
socket(0x2c, 0x3, 0x0) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
listen(0xffffffffffffffff, 0xfffffffd) (async)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@nodiscard}, {}, {@background_gc_on}, {@alloc_mode_reuse}, {@noquota}, {@disable_roll_forward}, {@gc_merge}, {@nouser_xattr}, {@alloc_mode_reuse}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@block_mode}, {@noinline_dentry}]}, 0x2, 0x5505, &(0x7f0000002480)="$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")
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1811e000) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/204, 0xcc}, {&(0x7f0000000300)=""/71, 0x47}, {&(0x7f00000005c0)=""/110, 0x6e}, {&(0x7f0000000100)=""/1, 0x1}, {&(0x7f0000000180)=""/10, 0xa}], 0x5, &(0x7f00000006c0)=""/4096, 0x1000}, 0x140)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f94000) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x109}], {0x14}}, 0x3c}}, 0x0) (async)
socket$inet6(0xa, 0x800000000000002, 0x0)

3.999654571s ago: executing program 3 (id=314):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x109000, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='timer_start\x00', r3}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000010c0))
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c)
mq_open(&(0x7f0000000000)='H\x00', 0x80, 0x29, &(0x7f0000000040)={0x9, 0x8, 0x81, 0x8})

3.707458196s ago: executing program 2 (id=315):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
unshare(0x6a040000)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e3704000b80fc0b09000300", 0x33fe0}], 0x1}, 0x0)

3.54773811s ago: executing program 1 (id=316):
syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x239, 0x0, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
io_uring_enter(r0, 0x2def, 0x20, 0x0, 0x0, 0x0)

3.488044461s ago: executing program 3 (id=317):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8)
sendto$inet6(r0, &(0x7f00000004c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty, 0x100000}, 0x1c)

3.163371567s ago: executing program 1 (id=318):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'virt_wifi0\x00', 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0)
sendmsg$key(r3, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000200), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe"], 0x20000600}}, 0x0)

3.149102637s ago: executing program 3 (id=319):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'virt_wifi0\x00', 0x0})
r0 = socket$unix(0x1, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0)
sendmsg$key(r4, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r5=>0x0})
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f0000000200)={0x1d, r5}, 0x10)
socket$kcm(0xa, 0x3, 0x87)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})

2.081220929s ago: executing program 1 (id=320):
mount$tmpfs(0x0, 0x0, 0x0, 0x20e0d3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)
r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
acct(&(0x7f0000000000)='./file1\x00')
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0)
socket(0x1, 0x2, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1.904037602s ago: executing program 3 (id=321):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0x7}}, 0x40c100)

1.435175271s ago: executing program 0 (id=322):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, &(0x7f0000003180)={[{@nodioread_nolock}, {@inlinecrypt}]}, 0x1, 0x574, &(0x7f0000001980)="$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") (async)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, &(0x7f0000003180)={[{@nodioread_nolock}, {@inlinecrypt}]}, 0x1, 0x574, &(0x7f0000001980)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x1)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) (async)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x1bfc)
pselect6(0xfe41, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1011, &(0x7f00000002c0), 0x1, 0x636, &(0x7f00000007c0)="$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")
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) (async)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0)
sendfile(r1, r1, 0x0, 0x8)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001014d9"], 0x30}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) (async)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50120000", @ANYRES16=r4, @ANYBLOB="070626bd7000fcdbdf252d00000005002b0001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x80)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000b03700005c00000000000000", @ANYRES32, @ANYBLOB="00a06957564cda80637fc2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x48)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x28200, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r5, &(0x7f0000000580)='1\x00', 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_mount_image$nilfs2(&(0x7f000000a000), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f000000a380)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c24e018b91ff1291b504c56de7e4543f49818e1307d98d09daa1e2a7d01dc73aad0b7dbb5685561c7825ba8340621faeae92abed19c524a906c4303258d253722e159646c03a7fdb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c896d1ab3b1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0xb9cbbe05c791f09e) (async)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0xb9cbbe05c791f09e)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000004040000e8030000000300000000000004", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
lseek(r7, 0x5, 0x3) (async)
lseek(r7, 0x5, 0x3)
getdents64(r7, 0x0, 0x0) (async)
getdents64(r7, 0x0, 0x0)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
syz_io_uring_setup(0x4e94, &(0x7f0000000100)={0x0, 0x7e9b, 0x800, 0x2, 0x362}, &(0x7f0000000080), &(0x7f0000000180))
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

1.434511171s ago: executing program 3 (id=323):
r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x18, r0}, 0x18)
syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000140), 0xfe, 0x1103, &(0x7f0000002240)="$eJzs2T+L1EAYBvBnkvUPNpFcHwQtLOS4Y/0CVyhsa6uNyFVedVsp+m38OHqV/XG9Fgv2kbibXZEVwV0V5PeDkDcPeWcy5UwCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg0nyqSQHVdKOWZWkJF13MbtK0o357fd1lZInp7P5o/Pp43mS+tvr5WlShq6hLe3x3ZvttJ22x+3Dg5N7H+avXr98fnZ2er4apqTL5WKvq7g1zl3vdVgAAAD4P/Q7a/7x/AAAAMCv7O0gAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA39c2mbseiSlKSrruYXSXptvRd+0vfBwAAAOyupMqzZlu+PAbYeJCPTVnnw/1LGeqjvNvSDwAAAPxUf2NVfP9/vVzf7MfvZ7Lelw/ZnUxyeLh8frvKP58kdZKjHwa/XLx5MV6lr//0WgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvrIDxwIAAAAAwvyt0+jYAAAAAAAAAAAAAAAAAAAAYK8AAAD//+0M1yg=")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x200, &(0x7f0000000140))
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100))
r2 = open(&(0x7f0000000ec0)='./bus\x00', 0x1c123e, 0x39)
write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b)
syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000dc0)={[], [{@permit_directio}, {@fsname={'fsname', 0x3d, 'noblock_validity'}}, {@fsmagic={'fsmagic', 0x3d, 0x7fffffff}}]}, 0x0, 0x559e, &(0x7f0000005680)="$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")
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15)

762.723474ms ago: executing program 2 (id=324):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e)
socket$pppoe(0x18, 0x1, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1)
ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000200)=0x1)

415.681721ms ago: executing program 2 (id=325):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {0x1, 0x4}, [{0x2, 0x0, 0xee00}], {0x4, 0x1}, [{0x8, 0x4}, {0x8, 0x4}, {0x8, 0x4}], {0x10, 0x3}, {0x20, 0x5}}, 0x4, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005940)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0xfff1, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0x4, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0xc2a4, 0x2, 0x32f7}, {0x5, 0x0, 0x1}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x404d090}, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x20)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)

111.462717ms ago: executing program 2 (id=326):
syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000000)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
io_uring_enter(r0, 0x2def, 0x20, 0x0, 0x0, 0x0)

22.624659ms ago: executing program 0 (id=327):
r0 = syz_io_uring_setup(0x64a1, &(0x7f0000000000)={0x0, 0xa0bd, 0x20, 0x3, 0x27d}, &(0x7f0000000080), &(0x7f00000000c0))
io_uring_register$IORING_UNREGISTER_NAPI(r0, 0x1c, &(0x7f0000000100), 0x1) (async)
ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, &(0x7f0000000140)={0x0, "89553ee02262ba92b2725acdd0126997680520d3fa7a49e72041faa275c33f2a", 0x80, 0x2, 0x7028, 0x4, 0x5})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0xff, 0x6, 0x8003, 0x80000001, 0x7, 0x4, 0x100, 0xfffffffc, <r2=>0x0}, &(0x7f0000000200)=0x20)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000240)={<r3=>r2, @in6={{0xa, 0x4e20, 0x0, @empty, 0x2}}}, &(0x7f0000000300)=0x84)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000340)={r3, 0x3ff}, &(0x7f0000000380)=0x8) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r4=>r1}, './file0\x00'})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000400), 0x4)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x3, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x8}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9eb}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0xcf}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000090}, 0xc000) (async)
ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000540)={0x6, 0x0, [{0x80000008, 0x8, 0x2, 0x4c8, 0x4, 0x7, 0x3}, {0x4, 0x1080000, 0x7, 0xc6a6, 0xde, 0x9, 0xe}, {0x4, 0x4, 0x5, 0x400, 0x400, 0xb, 0x7f}, {0x1, 0x5, 0x1, 0x2a, 0x0, 0x4, 0x80}, {0x80000001, 0xaf, 0x4, 0x0, 0xd3b, 0x4, 0xff}, {0xb, 0x7, 0x5, 0x0, 0x9, 0x5, 0xfffeffff}]})
r6 = semget$private(0x0, 0x1, 0x410)
semtimedop(r6, &(0x7f0000000640)=[{0x2, 0x1, 0x1000}, {0x3, 0x5, 0x800}], 0x2, &(0x7f0000000680)) (async)
recvfrom$rose(r4, &(0x7f00000006c0)=""/12, 0xc, 0x40000000, &(0x7f0000000700)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) (async)
setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000740)=@netrom={'nr', 0x0}, 0x10)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000780)={0x48}) (async)
copy_file_range(r1, &(0x7f0000000800)=0x8, r4, &(0x7f0000000840)=0x8001, 0x36, 0x0) (async)
getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000d00)=<r7=>0x0, &(0x7f0000000d40)=0x4)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000e00)={'syztnl0\x00', &(0x7f0000000d80)={'ip6tnl0\x00', <r8=>0x0, 0x2f, 0x0, 0x80, 0x1, 0x2, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x8000, 0x0, 0x4}}) (async)
getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000e40)={@remote, <r9=>0x0}, &(0x7f0000000e80)=0x14)
sendmmsg$inet(r4, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000880)="69b2e2af8862c5e05b7ade265e9dccae2f61f0274f802553dd33aa68d221be717866baee45d76eb47d1354a9af1b57e32c8caf21f46c69c50fbbfcf1bd16cac0e7c786c619e19f7193b0e279bc368385f59c36f1f08fa7b49e5610e105628f43745d8ed4fe8c73f8042fa656c9ca520000d4d7171ba032e432411a28b226a192ad6426faf7a8401cdf1156c836fdc4a7a3382a900de9f0235b68", 0x9a}, {&(0x7f0000000940)="9c00941898b59c12cb8d24c2f134fa9e60d8a95e11ca0a6133995a415fdc90d38dd0afbd43dbd5d75e92ecb9c56896a813bc541d6d7ec55fc47d762ee8ce4a2b258bd7b89b54c06c08dfee8e271deac91ed081b62af2e66541d648b08bcfddebc2f899c2da84c86acf", 0x69}, {&(0x7f00000009c0)="2e5a1d8935ecc756939a904a609d594a8b814db4b443f0a8b7ff7ce38659584c91143e7d4279f38804b6ec4a45b7096dbee02682139019b61b87cc5d8209735d2bd73155ba365504db98446199739d7d112ee428802c04b175f39fc61e85c069f40a476af00756cea29b00b99127634c16fb96277f8ac453ed519fdb624fa3b365fe6bbb6b07b26003545c9622bdf49f74761b68f1bc1a9e257d7fe5b0f380ccdf88a2de86ff2f06477087267ffd01f731a3acf3d5468b612a400c54cc72fe463914b4d30a40116f2e7906cb77c812795a8a8f239a2f529e", 0xd8}, {&(0x7f0000000ac0)="cf05c5e6e83a62ae803b37569a2a40e83d27d2d457e0dfa2a01e2ccee3e279275fb0980e251795e8a276be2d076716dcc470a7fb861248b1adfb8c76192363fb5d37aff7c77a161518f172dd752cf6f1209651dbe48f07098462d90877552afa47ec313fcb0d0dafc908c4613b392429729ccc0c734d1a39feca54a008e78b21a6277acf185c378d", 0x88}], 0x4, &(0x7f0000000bc0)=[@ip_retopts={{0x68, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x54, 0x20, 0x3, 0x7, [{@multicast1, 0x7f000000}, {@loopback, 0xd}, {@multicast2}, {@loopback, 0xe}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x2}, {@multicast1, 0x50}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@broadcast, 0x8000}, {@broadcast, 0x4b6e}]}]}}}], 0x68}}, {{&(0x7f0000000c40)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000c80)="93a723d023c08de841d38b", 0xb}], 0x1, &(0x7f0000000ec0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast1, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @loopback, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0xa8}}], 0x2, 0x20000) (async)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000001000)=0x2) (async)
sendmmsg$inet(r4, &(0x7f0000002780)=[{{&(0x7f0000001040)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000001180)=[{&(0x7f0000001080)="e0f8", 0x2}, {&(0x7f00000010c0)="d46540f600d707b9524ab0d6965fd7edd2b1cb43c66938ce53490529b520ba40a7cdf7501282b57a73b58494abe9e808650369d6bb4b7fcc8af4bcedc6fb20b9c885c196184244457d72fa6355b9b22a8acdd3dcbfe2a41bef5522c772ad919b40d52c59f860828d6f31f0a9ee529cc7ffa03c9db7837e189ffc61abce979dd50d313b483f71aec3ddb4a25a040a573e161a54", 0x93}], 0x2, &(0x7f00000011c0)}}, {{&(0x7f0000001200)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000002680)=[{&(0x7f0000001240)="53f601410794222bd2a370de76ca59e3185534d2528280eb6f9960e70be2db57c9c4ed94c9fff642e2e3bf8c55e18c8221a7096cfb45df7564d8d7e72e4eb75a2d43f7e461e65a891361f84ea35ecfa2e4bb3830f528bca5b40bcb3d7728fcb9b50f77572039f717d3c2660c281bbf3d6bb2ceec874ab4fce04ed6ae132a906562f77c67c6587237b1744890ef10a3fa2ad45b9714f9ab8da7de0b0db4ccc748b5731f9279f2a610fcf30e8fc64dc1e9b31c0c66f5d66299679a60a694b7e002755e87ec944bae9a5ba0c9f7ff94ad608c2c41", 0xd3}, {&(0x7f0000001340)="00fd8d60734382eea54543b85b5eb0bb0f1bde04b3ea67a6df1b24f06d523d9bfa572bc8cd3b2b228a1efd7b3eabdbfb399996ac697a53ec09e0935585fa821e395cf83d47dfc808758d858f2ab616d346db851985a2adf0b9eebde8", 0x5c}, {&(0x7f00000013c0)="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", 0x1000}, {&(0x7f00000023c0)="d711fb12bca72f94d5e387779c0ac58bcf8b1590a1b7d29c4613d5ac619d8df5e191b4086a6152c5ce37df566788b59fc1b91e89d6c447b0520d9a67f14c57590c2bd7a68d7681f6b8b990e91b62abf9b84cf600aa78f01df7958b74bf244bdc30d8c2c9cb1dafa155e88ab343c1e6a942351d2893cc40d54c90bdd9712aa10af9c7a86de4d574292b481dec0910f157244f1468fd5e4584a8b4d8db3d7a0a49203be9bc0e2b94f23ce672b1fb9ff09e52632a53af13fea19e334ac45c143694c9b322fe8505a53a8414568b", 0xcc}, {&(0x7f00000024c0)="89d9ee8bf912bdcedd41642a90f0a7d0bfd68caf736c651a145874b482944971d4a9231d9d07c5accf72961e7c120dd65ee1d10ece92b9b42a65bfc4ead43a61c61348ff6fe7e8ae0cbccbc38767351acf1eaba5aee168545d30881cfa867be769e7051badce013ed69aa87b48635192abbc9c6e3fbc7cd734d27bcfe4da8781bdcc8ea85072fde580f2db1f15e0c343186dcf858c76f433deff37b213f648b070b8adc71631b4fb5b2a53b37ee57e1f0398e4cf9ec728a7008211057b8e2b5bd22e6388490e420a1fdb8d8bf85b98a4d1012d3ac97a78d4cb255db76f32271454a846b42e795592f967bc86f9", 0xed}, {&(0x7f00000025c0)="949ee740ebbaab68a89289145871e4267294f51f3947a72cdfe69173ee89ab3e251c53a67097d3609095872280324816c6c37b06693658559ec37c64671be6734a89ba038da7af0fb00954ad74eb4177449713f623ddda870a2cca451ed452501d39a95aa1a5", 0x66}, {&(0x7f0000002640)="2c34f127c9e1a738463f0746f7e6c822e29fe47e42e9425066e3d46bbe3df0afb2ced44ea130", 0x26}], 0x7, &(0x7f0000002700)=[@ip_retopts={{0x58, 0x0, 0x7, {[@end, @cipso={0x86, 0x1b, 0x2, [{0x0, 0x8, "c7a165f7a292"}, {0x6, 0xd, "4e13a4825f2743489079f2"}]}, @ra={0x94, 0x4, 0x1}, @generic={0x44, 0x5, "aa1a06"}, @lsrr={0x83, 0xb, 0xfa, [@local, @multicast1]}, @rr={0x7, 0x17, 0xc2, [@broadcast, @rand_addr=0x64010101, @multicast2, @loopback, @loopback]}]}}}], 0x58}}], 0x2, 0x4000) (async)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000002800)={<r10=>r3, 0x3, "7d7cfe"}, &(0x7f0000002840)=0xb)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000002880)={r10, 0x81}, &(0x7f00000028c0)=0x8)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002900)='./cgroup/syz0\x00', 0x200002, 0x0) (async)
ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000002940)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x2000})

0s ago: executing program 2 (id=328):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'virt_wifi0\x00', 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0)
sendmsg$key(r3, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000200), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe"], 0x20000600}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.41' (ED25519) to the list of known hosts.
[   83.494448][ T5774] cgroup: Unknown subsys name 'net'
[   83.639324][ T5774] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   85.366797][ T5774] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   87.880595][   T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   87.893957][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   87.901703][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   87.906883][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   87.909976][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   87.917536][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   87.927191][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   87.932163][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   87.938632][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   87.945669][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   87.952071][ T5796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   87.998996][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   88.015617][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   88.020257][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   88.024342][ T5798] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   88.030626][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   88.040196][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   88.043932][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   88.051383][ T5798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   88.069047][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   88.079353][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   88.090517][ T5798] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   88.097910][ T5790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   88.109129][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   88.703203][ T5783] chnl_net:caif_netlink_parms(): no params data found
[   88.713846][ T5792] chnl_net:caif_netlink_parms(): no params data found
[   88.841774][ T5788] chnl_net:caif_netlink_parms(): no params data found
[   88.939990][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.947890][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.955896][ T5792] bridge_slave_0: entered allmulticast mode
[   88.963800][ T5792] bridge_slave_0: entered promiscuous mode
[   88.977942][ T5784] chnl_net:caif_netlink_parms(): no params data found
[   88.993932][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.001337][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.008567][ T5792] bridge_slave_1: entered allmulticast mode
[   89.015966][ T5792] bridge_slave_1: entered promiscuous mode
[   89.096558][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.104172][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.112465][ T5783] bridge_slave_0: entered allmulticast mode
[   89.119831][ T5783] bridge_slave_0: entered promiscuous mode
[   89.150891][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.160514][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.168397][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.176470][ T5783] bridge_slave_1: entered allmulticast mode
[   89.183697][ T5783] bridge_slave_1: entered promiscuous mode
[   89.223858][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.297367][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.307909][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.315712][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.323908][ T5788] bridge_slave_0: entered allmulticast mode
[   89.331092][ T5788] bridge_slave_0: entered promiscuous mode
[   89.349358][ T5792] team0: Port device team_slave_0 added
[   89.372187][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.386665][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.397191][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.404788][ T5788] bridge_slave_1: entered allmulticast mode
[   89.412830][ T5788] bridge_slave_1: entered promiscuous mode
[   89.423782][ T5792] team0: Port device team_slave_1 added
[   89.491411][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.498701][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.506969][ T5784] bridge_slave_0: entered allmulticast mode
[   89.514851][ T5784] bridge_slave_0: entered promiscuous mode
[   89.547469][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.554752][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.581645][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.594329][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.602036][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.609641][ T5784] bridge_slave_1: entered allmulticast mode
[   89.616822][ T5784] bridge_slave_1: entered promiscuous mode
[   89.627533][ T5783] team0: Port device team_slave_0 added
[   89.636108][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.649004][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.659763][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.666750][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.693052][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.720058][ T5783] team0: Port device team_slave_1 added
[   89.779976][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.806719][ T5788] team0: Port device team_slave_0 added
[   89.843371][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.867141][ T5788] team0: Port device team_slave_1 added
[   89.886384][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.893861][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.920631][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.962554][ T5792] hsr_slave_0: entered promiscuous mode
[   89.969741][ T5792] hsr_slave_1: entered promiscuous mode
[   89.977484][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.984765][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.010902][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.025449][ T5784] team0: Port device team_slave_0 added
[   90.034970][ T5784] team0: Port device team_slave_1 added
[   90.055898][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.063230][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.089397][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.133753][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.141425][ T5793] Bluetooth: hci2: command tx timeout
[   90.146910][ T5790] Bluetooth: hci1: command tx timeout
[   90.147350][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.153324][ T5793] Bluetooth: hci3: command tx timeout
[   90.178901][ T5790] Bluetooth: hci0: command tx timeout
[   90.185007][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.247619][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.255110][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.281388][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.331110][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.338209][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.386894][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.427765][ T5783] hsr_slave_0: entered promiscuous mode
[   90.434963][ T5783] hsr_slave_1: entered promiscuous mode
[   90.442204][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.450385][ T5783] Cannot create hsr debugfs directory
[   90.488002][ T5788] hsr_slave_0: entered promiscuous mode
[   90.494512][ T5788] hsr_slave_1: entered promiscuous mode
[   90.501165][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.508908][ T5788] Cannot create hsr debugfs directory
[   90.596218][ T5784] hsr_slave_0: entered promiscuous mode
[   90.603535][ T5784] hsr_slave_1: entered promiscuous mode
[   90.610054][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.617658][ T5784] Cannot create hsr debugfs directory
[   90.974474][ T5792] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   90.989955][ T5792] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   91.007755][ T5792] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   91.020599][ T5792] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   91.109461][ T5783] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   91.125662][ T5783] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   91.156752][ T5783] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   91.176202][ T5783] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   91.235888][ T5788] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   91.261247][ T5788] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   91.272495][ T5788] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   91.284044][ T5788] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   91.370667][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   91.383429][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   91.397440][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   91.408382][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   91.487359][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.565665][ T5792] 8021q: adding VLAN 0 to HW filter on device team0
[   91.615595][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.637912][ T3409] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.645387][ T3409] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.664565][ T3409] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.671775][ T3409] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.702050][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.730350][ T5788] 8021q: adding VLAN 0 to HW filter on device team0
[   91.765110][ T3409] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.772398][ T3409] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.804411][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.818569][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.825738][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.845908][ T5783] 8021q: adding VLAN 0 to HW filter on device team0
[   91.877092][ T5784] 8021q: adding VLAN 0 to HW filter on device team0
[   91.893279][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.900440][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.938623][ T3409] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.945885][ T3409] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.984431][ T3409] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.991715][ T3409] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.042876][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.050166][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.220236][ T5790] Bluetooth: hci0: command tx timeout
[   92.221996][ T5793] Bluetooth: hci1: command tx timeout
[   92.225697][ T5790] Bluetooth: hci3: command tx timeout
[   92.232193][ T5793] Bluetooth: hci2: command tx timeout
[   92.245033][ T1187] cfg80211: failed to load regulatory.db
[   92.334486][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.447249][ T5792] veth0_vlan: entered promiscuous mode
[   92.486307][ T5792] veth1_vlan: entered promiscuous mode
[   92.576540][ T5792] veth0_macvtap: entered promiscuous mode
[   92.621331][ T5792] veth1_macvtap: entered promiscuous mode
[   92.674682][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.695865][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.738011][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.760071][ T5792] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.770667][ T5792] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.781297][ T5792] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.790554][ T5792] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.885412][ T5788] veth0_vlan: entered promiscuous mode
[   92.903166][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.938019][ T5788] veth1_vlan: entered promiscuous mode
[   92.961086][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.057477][ T1299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.078158][ T1299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.119417][ T5788] veth0_macvtap: entered promiscuous mode
[   93.133940][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.142456][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.148289][ T5788] veth1_macvtap: entered promiscuous mode
[   93.199539][ T5784] veth0_vlan: entered promiscuous mode
[   93.223241][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.240438][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.255210][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.284892][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.296808][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.310873][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.325786][ T5784] veth1_vlan: entered promiscuous mode
[   93.343296][ T5783] veth0_vlan: entered promiscuous mode
[   93.365452][ T5788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.381079][ T5788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.393560][ T5788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.404766][ T5788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.467918][ T5783] veth1_vlan: entered promiscuous mode
[   93.553878][ T5784] veth0_macvtap: entered promiscuous mode
[   93.636401][ T5784] veth1_macvtap: entered promiscuous mode
[   93.669101][ T5783] veth0_macvtap: entered promiscuous mode
[   93.693441][ T5783] veth1_macvtap: entered promiscuous mode
[   93.713672][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.724720][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.736419][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.749837][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.762594][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.784784][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.960204][ T5881] syz.2.3[5881]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   94.579445][ T5793] Bluetooth: hci1: command tx timeout
[   94.584943][ T5793] Bluetooth: hci0: command tx timeout
[   94.590983][ T5790] Bluetooth: hci2: command tx timeout
[   94.596449][ T5790] Bluetooth: hci3: command tx timeout
[   94.645463][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.666399][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.682280][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.695959][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.837822][ T5783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.847636][ T5881] loop2: detected capacity change from 0 to 40427
[   94.863890][ T5881] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288)
[   94.876115][ T5783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.892022][ T5881] F2FS-fs (loop2): invalid crc value
[   94.893275][ T5783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.911315][ T5783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.923480][ T5881] F2FS-fs (loop2): Found nat_bits in checkpoint
[   94.970781][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.992321][ T5881] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   95.010917][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.039408][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.061128][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.078489][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.090302][ T5880] =======================================================
[   95.090302][ T5880] WARNING: The mand mount option has been deprecated and
[   95.090302][ T5880]          and is ignored by this kernel. Remove the mand
[   95.090302][ T5880]          option from the mount to silence this warning.
[   95.090302][ T5880] =======================================================
[   95.135752][ T5880] F2FS-fs (loop2): Try to recover all the superblocks, ret: 0
[   95.136352][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.162746][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.198204][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.214106][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.214135][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.227911][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.244167][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.255212][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.266248][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.276877][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.289411][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.307801][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.318409][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.337743][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.347387][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.495477][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.510099][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.678222][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.691144][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.884629][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.913404][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.949762][ T1299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.957657][ T1299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.054709][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.071824][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.324113][ T5889] loop2: detected capacity change from 0 to 4096
[   96.352534][ T5889] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[   96.434228][ T5896] ieee802154 phy0 wpan0: encryption failed: -22
[   96.741187][ T5786] Bluetooth: hci0: command tx timeout
[   96.741366][ T5790] Bluetooth: hci2: command tx timeout
[   96.746777][ T5786] Bluetooth: hci1: command tx timeout
[   96.752690][ T5793] Bluetooth: hci3: command tx timeout
[   97.001925][ T5896] ieee802154 phy0 wpan0: encryption failed: -22
[   97.178650][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   97.193622][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   97.209563][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   97.219849][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   97.657659][ T5887] loop0: detected capacity change from 0 to 40427
[   97.715945][ T5887] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[   97.755769][ T5887] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   97.764897][ T5887] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7
[   97.774809][ T5887] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff
[   97.798527][ T5887] F2FS-fs (loop0): Image doesn't support compression
[   97.933429][ T5905] syz.3.7 uses obsolete (PF_INET,SOCK_PACKET)
[   98.056343][ T5887] F2FS-fs (loop0): invalid crc value
[   98.461685][ T5887] F2FS-fs (loop0): Found nat_bits in checkpoint
[   98.681024][ T5887] F2FS-fs (loop0): Start checkpoint disabled!
[   98.730237][ T5887] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   98.737360][ T5887] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   99.022541][ T5896] loop1: detected capacity change from 0 to 40427
[   99.042738][ T5896] F2FS-fs (loop1): Wrong NAT boundary, start(2560) end(3840) blocks(1024)
[   99.063769][ T5896] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   99.305818][ T5896] F2FS-fs (loop1): invalid crc value
[   99.575545][ T5896] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-4)
[  101.885301][ T5938] Zero length message leads to an empty skb
[  101.969853][ T5939] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13'.
[  102.184175][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  102.193247][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  102.359116][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  102.696179][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  102.705434][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  102.739232][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  103.845285][ T5930] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.14'.
[  103.855296][ T5930] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  103.988244][ T5955] loop1: detected capacity change from 0 to 4096
[  104.013924][ T5955] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  104.024199][ T5885] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  104.245897][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.304354][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.345235][ T5885] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  104.378188][ T5959] FAULT_INJECTION: forcing a failure.
[  104.378188][ T5959] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  104.400422][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.462586][ T5885] usb 1-1: config 0 descriptor??
[  104.502011][ T5959] CPU: 0 PID: 5959 Comm: syz.3.19 Not tainted syzkaller #0
[  104.509422][ T5959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  104.519520][ T5959] Call Trace:
[  104.522826][ T5959]  <TASK>
[  104.525785][ T5959]  dump_stack_lvl+0x16c/0x230
[  104.530611][ T5959]  ? show_regs_print_info+0x20/0x20
[  104.535842][ T5959]  ? load_image+0x3b0/0x3b0
[  104.540372][ T5959]  ? __might_fault+0xaa/0x120
[  104.545070][ T5959]  ? __lock_acquire+0x7c80/0x7c80
[  104.550228][ T5959]  should_fail_ex+0x39d/0x4d0
[  104.554949][ T5959]  _copy_from_user+0x2f/0xe0
[  104.559585][ T5959]  __se_sys_mount+0x179/0x3c0
[  104.564306][ T5959]  ? __x64_sys_mount+0xc0/0xc0
[  104.569155][ T5959]  ? lockdep_hardirqs_on+0x98/0x150
[  104.574388][ T5959]  ? __x64_sys_mount+0x20/0xc0
[  104.579219][ T5959]  do_syscall_64+0x55/0xb0
[  104.583685][ T5959]  ? clear_bhb_loop+0x40/0x90
[  104.588413][ T5959]  ? clear_bhb_loop+0x40/0x90
[  104.593135][ T5959]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  104.599060][ T5959] RIP: 0033:0x7f77fb58eba9
[  104.603492][ T5959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  104.623122][ T5959] RSP: 002b:00007f77fc473038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  104.631554][ T5959] RAX: ffffffffffffffda RBX: 00007f77fb7d5fa0 RCX: 00007f77fb58eba9
[  104.639547][ T5959] RDX: 00002000000001c0 RSI: 0000200000000000 RDI: 0000000000000000
[  104.647635][ T5959] RBP: 00007f77fc473090 R08: 0000200000000040 R09: 0000000000000000
[  104.655639][ T5959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  104.663641][ T5959] R13: 00007f77fb7d6038 R14: 00007f77fb7d5fa0 R15: 00007ffe8fde7578
[  104.671638][ T5959]  </TASK>
[  105.579505][ T5974] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  105.634449][ T5885] pyra 0003:1E7D:2CF6.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0
[  106.413871][ T5983] FAULT_INJECTION: forcing a failure.
[  106.413871][ T5983] name failslab, interval 1, probability 0, space 0, times 1
[  107.008896][ T5983] CPU: 1 PID: 5983 Comm: syz.1.22 Not tainted syzkaller #0
[  107.016257][ T5983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  107.026360][ T5983] Call Trace:
[  107.029675][ T5983]  <TASK>
[  107.032640][ T5983]  dump_stack_lvl+0x16c/0x230
[  107.037377][ T5983]  ? show_regs_print_info+0x20/0x20
[  107.042629][ T5983]  ? load_image+0x3b0/0x3b0
[  107.047189][ T5983]  ? __lock_acquire+0x7c80/0x7c80
[  107.052303][ T5983]  should_fail_ex+0x39d/0x4d0
[  107.057039][ T5983]  should_failslab+0x9/0x20
[  107.061600][ T5983]  slab_pre_alloc_hook+0x59/0x310
[  107.066669][ T5983]  kmem_cache_alloc+0x5a/0x2e0
[  107.071550][ T5983]  ? vm_area_alloc+0x10e/0x1d0
[  107.076336][ T5983]  vm_area_alloc+0x10e/0x1d0
[  107.080957][ T5983]  mmap_region+0xc8a/0x2020
[  107.085512][ T5983]  ? file_mmap_ok+0x170/0x170
[  107.090285][ T5983]  ? cap_mmap_addr+0x169/0x2d0
[  107.095107][ T5983]  do_mmap+0x92f/0x10a0
[  107.099384][ T5983]  ? mlock_future_ok+0xf0/0xf0
[  107.104202][ T5983]  ? down_write+0x1f0/0x1f0
[  107.108772][ T5983]  vm_mmap_pgoff+0x1c0/0x400
[  107.113438][ T5983]  ? account_locked_vm+0x210/0x210
[  107.118604][ T5983]  ? ksys_mmap_pgoff+0xea/0x700
[  107.123500][ T5983]  ? __x64_sys_mmap+0x7a/0x130
[  107.128310][ T5983]  do_syscall_64+0x55/0xb0
[  107.132760][ T5983]  ? clear_bhb_loop+0x40/0x90
[  107.137469][ T5983]  ? clear_bhb_loop+0x40/0x90
[  107.142183][ T5983]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  107.148144][ T5983] RIP: 0033:0x7f877678ebe3
[  107.152621][ T5983] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7
[  107.172267][ T5983] RSP: 002b:00007f87775d9e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  107.180769][ T5983] RAX: ffffffffffffffda RBX: 0000000000000c2b RCX: 00007f877678ebe3
[  107.188811][ T5983] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000
[  107.196836][ T5983] RBP: 0000200000001102 R08: 00000000ffffffff R09: 0000000000000000
[  107.204847][ T5983] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004
[  107.212841][ T5983] R13: 00007f87775d9ef0 R14: 00007f87775d9eb0 R15: 0000200000001040
[  107.220890][ T5983]  </TASK>
[  107.256904][ T5983] syz.1.22: attempt to access beyond end of device
[  107.256904][ T5983] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0
[  107.369802][ T5983] hfsplus: unable to find HFS+ superblock
[  107.576075][ T5987] loop2: detected capacity change from 0 to 16
[  107.732096][ T5987] erofs: Unknown parameter ''
[  108.286986][ T5994] netlink: 44 bytes leftover after parsing attributes in process `syz.1.24'.
[  111.642019][ T5885] pyra 0003:1E7D:2CF6.0001: couldn't init struct pyra_device
[  111.655510][ T5885] pyra 0003:1E7D:2CF6.0001: couldn't install mouse
[  111.715717][ T5885] pyra: probe of 0003:1E7D:2CF6.0001 failed with error -71
[  111.943216][ T5885] usb 1-1: USB disconnect, device number 2
[  113.270485][ T6015] loop1: detected capacity change from 0 to 256
[  113.313316][ T6015] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  113.444428][   T28] audit: type=1800 audit(1758096287.428:2): pid=6015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.28" name="bus" dev="loop1" ino=1048592 res=0 errno=0
[  113.607754][   T28] audit: type=1804 audit(1758096287.428:3): pid=6015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.28" name="/newroot/8/file0/bus" dev="loop1" ino=1048592 res=1 errno=0
[  113.620844][ T6022] syz.1.28 (6022) used obsolete PPPIOCDETACH ioctl
[  114.847346][ T6014] loop2: detected capacity change from 0 to 32768
[  114.866830][ T6014] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.29 (6014)
[  115.211902][ T6014] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  115.236524][ T6014] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  115.245865][ T6014] BTRFS info (device loop2): using free space tree
[  115.946387][ T6014] BTRFS info (device loop2): enabling ssd optimizations
[  115.976798][ T6014] BTRFS info (device loop2): auto enabling async discard
[  116.966982][ T5792] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  117.122716][ T6062] loop3: detected capacity change from 0 to 16
[  117.132131][ T6062] erofs: Unknown parameter ''
[  119.434310][ T6082] netlink: 44 bytes leftover after parsing attributes in process `syz.0.39'.
[  120.550053][ T6070] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.37'.
[  120.559954][ T6070] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  121.075565][ T6103] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  121.312006][ T6104] binder: 6099:6104 ioctl c0306201 200000001780 returned -14
[  121.763017][ T6116] loop0: detected capacity change from 0 to 512
[  122.288413][ T6116] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  122.335834][ T6116] EXT4-fs (loop0): Test dummy encryption mode enabled
[  122.556020][ T6116] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.48: casefold flag without casefold feature
[  122.579432][ T6116] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.48: couldn't read orphan inode 15 (err -117)
[  122.601226][ T6116] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.730062][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.107516][ T6137] 9pnet_fd: Insufficient options for proto=fd
[  124.868992][ T6143] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.53'.
[  124.892199][ T6143] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  125.475655][ T6132] loop3: detected capacity change from 0 to 65536
[  125.506596][ T6132] XFS: noikeep mount option is deprecated.
[  125.602475][ T6132] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop3": -EINTR
[  127.430620][ T6175] 9pnet_fd: Insufficient options for proto=fd
[  127.915971][ T6179] loop1: detected capacity change from 0 to 4096
[  127.974954][ T6179] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 3) do not match.  Run ntfsfix or chkdsk.
[  128.009979][ T6179] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  128.045823][ T6179] ntfs: (device loop1): load_system_files(): Failed to load $Volume.
[  128.059730][ T6179] ntfs: (device loop1): ntfs_fill_super(): Failed to load system files.
[  130.521579][ T6186] loop1: detected capacity change from 0 to 16
[  130.529670][ T6186] erofs: Unknown parameter ''
[  131.362206][ T5801] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  131.967836][ T6213] input: syz1 as /devices/virtual/input/input5
[  132.194492][ T6216] binder: 6210:6216 ioctl c0306201 0 returned -14
[  133.193382][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  133.199919][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  133.345708][ T6219] 9pnet_fd: Insufficient options for proto=fd
[  135.959589][ T6235] loop1: detected capacity change from 0 to 256
[  136.105620][ T6235] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  136.168062][ T6237] loop2: detected capacity change from 0 to 128
[  136.198471][ T6235] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  136.260393][ T6235] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  136.309376][ T6235] UDF-fs: Scanning with blocksize 512 failed
[  136.365739][ T6235] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  136.484543][ T6235] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  139.119045][ T5846] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  139.348846][ T5846] usb 1-1: Using ep0 maxpacket: 16
[  139.367329][ T5846] usb 1-1: config 1 has an invalid descriptor of length 94, skipping remainder of the config
[  139.382926][ T5846] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  139.423799][ T5846] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  139.446928][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.470326][ T5846] usb 1-1: Product: syz
[  139.480326][ T5846] usb 1-1: Manufacturer: syz
[  139.490730][ T5846] usb 1-1: SerialNumber: syz
[  139.746386][ T5846] usb 1-1: 0:2 : does not exist
[  139.764782][ T5846] usb 1-1: 5:0: failed to get current value for ch 1 (-22)
[  139.810157][ T5846] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  139.827765][ T5846] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5)
[  139.853803][ T5846] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5)
[  139.867642][ T5846] usb 1-1: 5:0: cannot get min/max values for control 8 (id 5)
[  139.920567][ T5846] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5)
[  139.953566][ T5846] usb 1-1: USB disconnect, device number 3
[  140.211145][ T6253] loop2: detected capacity change from 0 to 40427
[  140.220307][ T6253] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  140.230456][ T6253] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  140.242919][ T6253] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7
[  140.258218][ T6253] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff
[  140.284743][ T6253] F2FS-fs (loop2): Image doesn't support compression
[  140.326004][ T6253] F2FS-fs (loop2): invalid crc value
[  140.376247][ T6253] F2FS-fs (loop2): Found nat_bits in checkpoint
[  140.383994][ T6267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.83'.
[  140.660195][ T6253] F2FS-fs (loop2): Start checkpoint disabled!
[  140.683267][ T6255] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.81'.
[  140.713765][ T6255] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  140.737747][ T6253] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  140.745857][ T6253] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  141.078391][ T6280] sg_write: data in/out 91/10 bytes for SCSI command 0xc0-- guessing data in;
[  141.078391][ T6280]    program syz.1.88 not setting count and/or reply_len properly
[  141.536143][ T3409] kworker/u4:8: attempt to access beyond end of device
[  141.536143][ T3409] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  141.589599][ T3409] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  141.596945][ T3409] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  142.434772][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.100'.
[  142.504881][ T6288] loop3: detected capacity change from 0 to 4096
[  142.532136][ T6288] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 3) do not match.  Run ntfsfix or chkdsk.
[  142.567775][ T6288] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  142.592981][ T6288] ntfs: (device loop3): load_system_files(): Failed to load $Volume.
[  142.602211][ T6288] ntfs: (device loop3): ntfs_fill_super(): Failed to load system files.
[  143.043957][ T6302] fuse: Bad value for 'fd'
[  143.101042][ T6300] overlayfs: overlapping lowerdir path
[  143.203290][ T6305] loop3: detected capacity change from 0 to 256
[  143.212704][ T6302] sctp: [Deprecated]: syz.0.93 (pid 6302) Use of struct sctp_assoc_value in delayed_ack socket option.
[  143.212704][ T6302] Use struct sctp_sack_info instead
[  143.418262][ T6305] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  143.704861][ T6305] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  143.879420][ T6305] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  145.035997][ T6313] loop2: detected capacity change from 0 to 40427
[  145.058200][ T6313] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  145.128817][ T6313] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  145.215263][ T6313] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7
[  145.282027][ T6313] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff
[  145.333271][ T6313] F2FS-fs (loop2): Image doesn't support compression
[  145.402864][ T6313] F2FS-fs (loop2): invalid crc value
[  145.442882][ T6313] F2FS-fs (loop2): Found nat_bits in checkpoint
[  145.481135][ T6329] loop3: detected capacity change from 0 to 512
[  145.550662][ T6329] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  145.625530][ T6329] EXT4-fs (loop3): Test dummy encryption mode enabled
[  145.668276][ T6313] F2FS-fs (loop2): Start checkpoint disabled!
[  145.699727][ T6329] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.104: casefold flag without casefold feature
[  145.742350][ T6313] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  145.758882][ T6313] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  145.770430][ T6329] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.104: couldn't read orphan inode 15 (err -117)
[  145.815724][ T6316] loop1: detected capacity change from 0 to 40427
[  145.834797][ T6329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.875547][ T6316] F2FS-fs (loop1): build fault injection attr: rate: 20, type: 0x7ffff
[  146.057984][ T6316] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x7
[  146.113544][ T6316] F2FS-fs (loop1): invalid crc value
[  146.606615][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.641506][ T6316] F2FS-fs (loop1): inject kmalloc in f2fs_kmalloc of f2fs_build_segment_manager+0x2fde/0x4730
[  146.689580][ T6316] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-12)
[  146.926149][ T1082] kworker/u4:5: attempt to access beyond end of device
[  146.926149][ T1082] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  146.974423][ T1082] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  147.269747][ T6348] tmpfs: Bad value for 'size'
[  147.298627][ T6348] tmpfs: Bad value for 'size'
[  148.384438][ T6353] gfs2: not a GFS2 filesystem
[  148.756781][ T6358] sctp: failed to load transform for md5: -4
[  149.646293][ T6379] loop2: detected capacity change from 0 to 512
[  149.775059][ T5801] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  149.873534][ T6383] bridge_slave_0: left allmulticast mode
[  149.889882][ T6383] bridge_slave_0: left promiscuous mode
[  149.896369][ T6383] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.955201][ T6383] bridge_slave_1: left allmulticast mode
[  149.990965][ T6383] bridge_slave_1: left promiscuous mode
[  149.999726][ T6383] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.071283][ T6383] bond0: (slave bond_slave_0): Releasing backup interface
[  150.241957][ T6383] bond0: (slave bond_slave_1): Releasing backup interface
[  150.399542][ T6383] team0: Port device team_slave_0 removed
[  150.450037][ T6383] team0: Port device team_slave_1 removed
[  150.700166][ T6383] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  150.884284][ T6383] batman_adv: batadv0: Removing interface: batadv_slave_0
[  150.994360][ T6383] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  151.016751][ T6383] batman_adv: batadv0: Removing interface: batadv_slave_1
[  151.114202][ T6383] syz.0.116 (6383) used greatest stack depth: 20552 bytes left
[  151.156624][ T6385] team0: Mode changed to "random"
[  151.249749][ T6386] vlan0: entered promiscuous mode
[  151.323262][ T6377] loop1: detected capacity change from 0 to 40427
[  151.348559][ T6386] team0: Port device vlan0 added
[  151.366542][ T6377] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  151.395314][ T6377] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  151.432592][ T6377] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7
[  151.453668][ T6395] binder: 6394:6395 ioctl f517 0 returned -22
[  151.458903][ T6377] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff
[  151.474532][ T6395] binder: 6394:6395 unknown command 0
[  151.487358][ T6395] binder: 6394:6395 ioctl c0306201 200000000080 returned -22
[  151.495197][ T6377] F2FS-fs (loop1): Image doesn't support compression
[  151.555342][ T6377] F2FS-fs (loop1): invalid crc value
[  151.577517][ T6377] F2FS-fs (loop1): Found nat_bits in checkpoint
[  151.701400][ T6377] F2FS-fs (loop1): Start checkpoint disabled!
[  151.736327][ T6377] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  151.771659][ T6377] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  152.296017][ T1082] kworker/u4:5: attempt to access beyond end of device
[  152.296017][ T1082] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  152.312422][ T1082] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  152.326786][ T1082] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  153.811250][ T6422] netlink: 84 bytes leftover after parsing attributes in process `syz.2.126'.
[  154.565909][ T6427] FAULT_INJECTION: forcing a failure.
[  154.565909][ T6427] name failslab, interval 1, probability 0, space 0, times 0
[  154.579183][ T6427] CPU: 0 PID: 6427 Comm: syz.3.127 Not tainted syzkaller #0
[  154.586514][ T6427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  154.596596][ T6427] Call Trace:
[  154.599888][ T6427]  <TASK>
[  154.602849][ T6427]  dump_stack_lvl+0x16c/0x230
[  154.607546][ T6427]  ? show_regs_print_info+0x20/0x20
[  154.612759][ T6427]  ? load_image+0x3b0/0x3b0
[  154.617270][ T6427]  ? __might_sleep+0xe0/0xe0
[  154.621872][ T6427]  ? __lock_acquire+0x7c80/0x7c80
[  154.626933][ T6427]  should_fail_ex+0x39d/0x4d0
[  154.631653][ T6427]  should_failslab+0x9/0x20
[  154.636203][ T6427]  slab_pre_alloc_hook+0x59/0x310
[  154.641255][ T6427]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  154.647000][ T6427]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  154.652739][ T6427]  __kmem_cache_alloc_node+0x53/0x260
[  154.658134][ T6427]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  154.663873][ T6427]  __kmalloc+0xa4/0x240
[  154.668045][ T6427]  tomoyo_realpath_from_path+0xe3/0x5d0
[  154.673610][ T6427]  tomoyo_path_number_perm+0x1ea/0x590
[  154.679092][ T6427]  ? tomoyo_path_number_perm+0x1ba/0x590
[  154.684759][ T6427]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  154.690263][ T6427]  ? ksys_write+0x1c1/0x250
[  154.694839][ T6427]  ? __fget_files+0x28/0x4d0
[  154.699453][ T6427]  security_file_ioctl+0x70/0xa0
[  154.704416][ T6427]  __se_sys_ioctl+0x48/0x170
[  154.709019][ T6427]  do_syscall_64+0x55/0xb0
[  154.713534][ T6427]  ? clear_bhb_loop+0x40/0x90
[  154.718235][ T6427]  ? clear_bhb_loop+0x40/0x90
[  154.722932][ T6427]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  154.728843][ T6427] RIP: 0033:0x7f77fb58eba9
[  154.733277][ T6427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  154.752897][ T6427] RSP: 002b:00007f77fc431038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  154.761317][ T6427] RAX: ffffffffffffffda RBX: 00007f77fb7d6180 RCX: 00007f77fb58eba9
[  154.769295][ T6427] RDX: 0000200000000500 RSI: 00000000c05064a7 RDI: 0000000000000007
[  154.777301][ T6427] RBP: 00007f77fc431090 R08: 0000000000000000 R09: 0000000000000000
[  154.785279][ T6427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  154.793254][ T6427] R13: 00007f77fb7d6218 R14: 00007f77fb7d6180 R15: 00007ffe8fde7578
[  154.801244][ T6427]  </TASK>
[  154.804506][    C0] vkms_vblank_simulate: vblank timer overrun
[  154.815493][ T6427] ERROR: Out of memory at tomoyo_realpath_from_path.
[  158.253559][ T6456] loop3: detected capacity change from 0 to 764
[  158.287444][ T6456] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  158.421535][ T6459] loop2: detected capacity change from 0 to 512
[  158.479181][ T6459] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  158.515202][ T6459] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  158.542007][ T6459] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  158.552612][ T6459] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  158.565830][ T6459] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  158.574173][ T6459] EXT4-fs (loop2): orphan cleanup on readonly fs
[  158.581089][ T6459] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.137: Bad quota inum: 3, type: 1
[  158.598775][ T6459] EXT4-fs warning (device loop2): ext4_enable_quotas:7175: Failed to enable quota tracking (type=1, err=-117, ino=3). Please run e2fsck to fix.
[  158.626473][ T6459] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  158.637964][ T6459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  158.660201][ T6448] loop1: detected capacity change from 0 to 40427
[  158.681393][ T6448] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  158.715137][ T6448] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  158.728422][ T6448] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7
[  158.734044][ T6458] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.137: deleted inode referenced: 12
[  158.738456][ T6448] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff
[  158.762380][ T6448] F2FS-fs (loop1): Image doesn't support compression
[  158.806730][ T6448] F2FS-fs (loop1): invalid crc value
[  158.855171][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.877238][ T6448] F2FS-fs (loop1): Found nat_bits in checkpoint
[  159.008404][ T6448] F2FS-fs (loop1): Start checkpoint disabled!
[  159.035534][ T6448] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  159.050273][ T6448] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  159.752745][ T6473] loop2: detected capacity change from 0 to 4096
[  159.791769][ T6473] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  159.806522][ T6473] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096)
[  159.826772][ T6473] NILFS (loop2): mounting unchecked fs
[  159.852300][ T6473] NILFS (loop2): invalid segment: Checksum error in segment payload
[  159.868962][ T6473] NILFS (loop2): unable to fall back to spare super block
[  159.929154][ T6473] NILFS (loop2): error -22 while searching super root
[  160.995697][ T1082] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x5b4/0x19c0
[  161.018153][ T1082] F2FS-fs (loop1): invalid blkaddr: 4100, type: 7, run fsck to fix.
[  161.183205][ T1082] kworker/u4:5: attempt to access beyond end of device
[  161.183205][ T1082] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  161.537484][ T1082] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  161.553245][ T1082] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  161.856259][ T6483] loop3: detected capacity change from 0 to 1024
[  161.945858][ T6483] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  161.964024][ T6481] loop2: detected capacity change from 0 to 8192
[  162.026800][ T6481] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  162.049299][ T6481] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  162.070049][ T6481] REISERFS (device loop2): using ordered data mode
[  162.112738][ T6481] reiserfs: using flush barriers
[  162.131575][ T6481] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  162.172951][ T6481] REISERFS (device loop2): checking transaction log (loop2)
[  162.218384][ T6481] REISERFS (device loop2): Using r5 hash to sort names
[  162.270380][ T6481] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  162.415186][ T6490] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.141'.
[  162.429017][ T6490] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  167.879440][ T6516] loop2: detected capacity change from 0 to 40427
[  168.005621][ T6516] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  168.108408][ T6516] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  168.222934][ T6516] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7
[  168.316007][ T6516] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff
[  168.416822][ T6516] F2FS-fs (loop2): Image doesn't support compression
[  168.662638][ T6516] F2FS-fs (loop2): invalid crc value
[  168.897657][ T6536] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.154'.
[  168.907247][ T6536] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  168.917432][ T6516] F2FS-fs (loop2): Found nat_bits in checkpoint
[  169.133794][ T6538] loop0: detected capacity change from 0 to 1024
[  169.209809][ T6516] F2FS-fs (loop2): Start checkpoint disabled!
[  169.429168][ T6538] process 'syz.0.156' launched './file1' with NULL argv: empty string added
[  169.515303][ T6543] loop1: detected capacity change from 0 to 8192
[  169.531236][ T6543] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  169.550305][ T6543] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  169.570236][ T6543] REISERFS (device loop1): using ordered data mode
[  169.576997][ T6543] reiserfs: using flush barriers
[  169.590290][ T6543] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  169.611344][ T6543] REISERFS (device loop1): checking transaction log (loop1)
[  169.624167][ T6543] REISERFS (device loop1): Using r5 hash to sort names
[  169.635716][ T6543] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  170.394313][ T6562] netlink: 'syz.0.164': attribute type 10 has an invalid length.
[  170.492732][ T6562] team0: Port device wlan1 added
[  173.525664][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'.
[  173.535151][ T6584] netlink: 3 bytes leftover after parsing attributes in process `syz.2.170'.
[  173.556536][ T6584] batadv1: entered promiscuous mode
[  173.567065][ T6584] batadv1: entered allmulticast mode
[  173.824012][ T6588] FAULT_INJECTION: forcing a failure.
[  173.824012][ T6588] name failslab, interval 1, probability 0, space 0, times 0
[  173.837211][ T6588] CPU: 1 PID: 6588 Comm: syz.2.173 Not tainted syzkaller #0
[  173.844550][ T6588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  173.854711][ T6588] Call Trace:
[  173.858125][ T6588]  <TASK>
[  173.861101][ T6588]  dump_stack_lvl+0x16c/0x230
[  173.865841][ T6588]  ? show_regs_print_info+0x20/0x20
[  173.871099][ T6588]  ? load_image+0x3b0/0x3b0
[  173.875657][ T6588]  ? is_bpf_text_address+0x26/0x2a0
[  173.880949][ T6588]  ? __lock_acquire+0x7c80/0x7c80
[  173.886034][ T6588]  should_fail_ex+0x39d/0x4d0
[  173.890777][ T6588]  should_failslab+0x9/0x20
[  173.895342][ T6588]  slab_pre_alloc_hook+0x59/0x310
[  173.900442][ T6588]  kmem_cache_alloc+0x5a/0x2e0
[  173.905277][ T6588]  ? fib6_add_1+0x9ab/0x1430
[  173.909931][ T6588]  fib6_add_1+0x9ab/0x1430
[  173.914434][ T6588]  fib6_add+0x1da/0x3d20
[  173.918753][ T6588]  ? kasan_set_track+0x4e/0x70
[  173.923586][ T6588]  ? fib6_update_sernum_stub+0x1e0/0x1e0
[  173.929285][ T6588]  ? do_raw_spin_lock+0x121/0x2c0
[  173.934370][ T6588]  ? __rwlock_init+0x150/0x150
[  173.939221][ T6588]  ? ip6_ins_rt+0xb3/0x120
[  173.943733][ T6588]  ip6_ins_rt+0xc9/0x120
[  173.948032][ T6588]  ? rt6_lookup+0x1d0/0x1d0
[  173.952591][ T6588]  ? do_raw_spin_unlock+0x121/0x230
[  173.957822][ T6588]  __ipv6_dev_ac_inc+0x62c/0x830
[  173.962803][ T6588]  ipv6_sock_ac_join+0x4a4/0x6c0
[  173.967814][ T6588]  do_ipv6_setsockopt+0x1ed8/0x3c30
[  173.973142][ T6588]  ? sk_dst_reset+0xa0/0xa0
[  173.977681][ T6588]  ? verify_lock_unused+0x140/0x140
[  173.982916][ T6588]  ? mark_lock+0x94/0x320
[  173.987287][ T6588]  ? __lock_acquire+0x1260/0x7c80
[  173.992350][ T6588]  ? aa_label_sk_perm+0x3ec/0x500
[  173.997406][ T6588]  ? get_pid_task+0x20/0x1e0
[  174.002107][ T6588]  ? aa_sk_perm+0x930/0x930
[  174.006652][ T6588]  ? __might_sleep+0xe0/0xe0
[  174.011283][ T6588]  ? aa_sk_perm+0x7fc/0x930
[  174.015847][ T6588]  ? __fget_files+0x28/0x4d0
[  174.020493][ T6588]  ? aa_sock_opt_perm+0x74/0x100
[  174.025455][ T6588]  ipv6_setsockopt+0x59/0x190
[  174.030164][ T6588]  ? sock_common_recvmsg+0x1b0/0x1b0
[  174.035476][ T6588]  do_sock_setsockopt+0x175/0x1a0
[  174.040529][ T6588]  ? __fdget+0x180/0x210
[  174.044794][ T6588]  __x64_sys_setsockopt+0x184/0x200
[  174.050016][ T6588]  do_syscall_64+0x55/0xb0
[  174.054549][ T6588]  ? clear_bhb_loop+0x40/0x90
[  174.059255][ T6588]  ? clear_bhb_loop+0x40/0x90
[  174.063952][ T6588]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  174.069876][ T6588] RIP: 0033:0x7ff3c2b8eba9
[  174.074311][ T6588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  174.093935][ T6588] RSP: 002b:00007ff3c39cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  174.102368][ T6588] RAX: ffffffffffffffda RBX: 00007ff3c2dd5fa0 RCX: 00007ff3c2b8eba9
[  174.110390][ T6588] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000003
[  174.118384][ T6588] RBP: 00007ff3c39cd090 R08: 0000000000000014 R09: 0000000000000000
[  174.126366][ T6588] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[  174.134358][ T6588] R13: 00007ff3c2dd6038 R14: 00007ff3c2dd5fa0 R15: 00007ffefab84b18
[  174.142523][ T6588]  </TASK>
[  174.571855][ T6592] loop1: detected capacity change from 0 to 128
[  174.685201][ T6592] VFS: Found a Xenix FS (block size = 512) on device loop1
[  174.959210][ T6581] loop0: detected capacity change from 0 to 40427
[  175.018083][ T6581] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  175.054396][ T6581] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  175.077726][ T6581] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7
[  175.121583][ T6581] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff
[  175.166361][ T6581] F2FS-fs (loop0): Image doesn't support compression
[  175.217174][ T6581] F2FS-fs (loop0): invalid crc value
[  175.257106][ T6581] F2FS-fs (loop0): Found nat_bits in checkpoint
[  175.289880][ T5783] sysv_free_block: trying to free block not in datazone
[  175.337352][ T5783] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  175.396773][ T6581] F2FS-fs (loop0): Start checkpoint disabled!
[  175.454455][ T6581] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  175.464718][ T6581] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  177.056587][   T42] F2FS-fs (loop0): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x5b4/0x19c0
[  177.107313][   T42] F2FS-fs (loop0): invalid blkaddr: 4100, type: 7, run fsck to fix.
[  177.132443][   T42] kworker/u4:2: attempt to access beyond end of device
[  177.132443][   T42] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  177.169165][   T42] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  177.208898][   T42] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  177.336334][ T6620] loop2: detected capacity change from 0 to 8192
[  177.366727][ T6620] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  177.395404][ T6612] loop1: detected capacity change from 0 to 32768
[  177.404741][ T6620] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  177.415205][ T6620] REISERFS (device loop2): using ordered data mode
[  177.422475][ T6620] reiserfs: using flush barriers
[  177.437549][ T6620] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  177.458441][ T6620] REISERFS (device loop2): checking transaction log (loop2)
[  177.476871][ T6620] REISERFS (device loop2): Using r5 hash to sort names
[  177.497797][ T6612] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  177.510853][ T6620] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  177.787855][ T6612] XFS (loop1): Ending clean mount
[  177.830965][ T6612] XFS (loop1): Quotacheck needed: Please wait.
[  177.933515][ T6612] XFS (loop1): Quotacheck: Done.
[  177.980770][ T6612] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  178.495489][ T6612] overlay: ./file0 is not a directory
[  178.550091][ T5820] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  178.768849][ T5820] usb 1-1: Using ep0 maxpacket: 8
[  178.804790][ T5820] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  178.870743][ T5820] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  178.909943][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.228092][ T5820] usb 1-1: string descriptor 0 read error: -71
[  179.244436][ T5820] hub 1-1:32.0: USB hub found
[  179.263573][ T5820] hub 1-1:32.0: config failed, can't read hub descriptor (err -22)
[  179.414350][ T5820] usb 1-1: USB disconnect, device number 4
[  179.639776][ T6643] loop3: detected capacity change from 0 to 8192
[  179.667950][ T6643] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "uid=00000000000000000000"
[  179.681261][   T27] IPVS: starting estimator thread 0...
[  179.703781][ T6641] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  179.779250][ T6652] IPVS: using max 16 ests per chain, 38400 per kthread
[  180.638345][ T6654] loop2: detected capacity change from 0 to 32768
[  181.432696][ T1187] XFS (loop2): Metadata CRC error detected at xfs_sb_read_verify+0x3dd/0x4d0, xfs_sb block 0x0 
[  181.482723][ T1187] XFS (loop2): Unmount and run xfs_repair
[  181.512309][ T1187] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  181.544511][ T1187] 00000000: 58 46 53 42 00 00 08 00 00 00 00 00 00 00 20 00  XFSB.......... .
[  181.585708][ T1187] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  181.623113][ T1187] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  181.654724][ T1187] 00000030: 00 00 00 00 00 00 00 10 00 00 00 00 00 00 24 40  ..............$@
[  181.925808][ T1187] 00000040: 00 00 00 00 00 00 24 41 00 00 00 00 00 00 24 42  ......$A......$B
[  181.935429][ T1187] 00000050: 00 00 00 02 00 00 20 00 00 00 00 01 00 00 00 00  ...... .........
[  181.945126][ T1187] 00000060: 00 00 12 00 b4 b5 02 00 04 00 00 02 00 00 00 00  ................
[  181.955991][ T1187] 00000070: 00 00 00 00 00 00 00 00 0b 09 0a 01 0d 00 00 32  ...............2
[  181.967362][ T6654] XFS (loop2): SB validate failed with error -74.
[  182.436342][ T6684] loop1: detected capacity change from 0 to 128
[  182.526221][   T28] audit: type=1804 audit(1758096356.508:4): pid=6684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.190" name="/newroot/48/bus/bus" dev="loop1" ino=1048594 res=1 errno=0
[  182.734123][ T6686] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000)
[  182.754597][ T6686] FAT-fs (loop1): Filesystem has been set read-only
[  183.087060][ T6678] loop3: detected capacity change from 0 to 40427
[  183.098988][ T6678] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  183.115599][ T6678] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  183.128606][ T6678] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7
[  183.143074][ T6678] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff
[  183.151856][ T6678] F2FS-fs (loop3): Image doesn't support compression
[  183.202273][ T6678] F2FS-fs (loop3): invalid crc value
[  183.226338][ T6678] F2FS-fs (loop3): Found nat_bits in checkpoint
[  183.352268][ T6678] F2FS-fs (loop3): Start checkpoint disabled!
[  183.380478][ T6678] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  183.388004][ T6678] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  184.179130][   T42] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x5b4/0x19c0
[  184.216512][   T42] F2FS-fs (loop3): invalid blkaddr: 4100, type: 7, run fsck to fix.
[  184.240567][ T6699] loop1: detected capacity change from 0 to 8192
[  184.249508][   T42] kworker/u4:2: attempt to access beyond end of device
[  184.249508][   T42] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  184.253978][ T6699] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  184.277359][ T6699] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  184.285780][   T42] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  184.287873][ T6699] REISERFS (device loop1): using ordered data mode
[  184.300352][ T6699] reiserfs: using flush barriers
[  184.310154][ T6699] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  184.327004][ T6699] REISERFS (device loop1): checking transaction log (loop1)
[  184.337427][ T6699] REISERFS (device loop1): Using r5 hash to sort names
[  184.346115][ T6699] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  184.360037][   T42] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  186.233166][ T6710] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.198'.
[  186.269202][ T6710] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  188.249414][ T6729] loop1: detected capacity change from 0 to 40427
[  188.272793][ T6729] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  188.291110][ T6729] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  188.306632][ T6729] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7
[  188.316757][ T6729] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff
[  188.334971][ T6729] F2FS-fs (loop1): Image doesn't support compression
[  188.356970][ T6729] F2FS-fs (loop1): invalid crc value
[  188.375960][ T6729] F2FS-fs (loop1): Found nat_bits in checkpoint
[  188.555797][ T6729] F2FS-fs (loop1): Start checkpoint disabled!
[  188.568183][ T6745] loop2: detected capacity change from 0 to 8192
[  188.590566][ T6729] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  188.597681][ T6729] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  189.234259][ T6753] loop0: detected capacity change from 0 to 256
[  189.407446][ T6757] loop2: detected capacity change from 0 to 256
[  189.484748][ T6757] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d)
[  189.656966][   T28] audit: type=1800 audit(1758096363.638:5): pid=6757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.209" name="file2" dev="loop2" ino=1048597 res=0 errno=0
[  190.852255][ T6761] loop0: detected capacity change from 0 to 8192
[  190.874599][ T6761] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  190.895588][ T6761] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  190.927452][ T6761] REISERFS (device loop0): using ordered data mode
[  190.943824][ T6761] reiserfs: using flush barriers
[  190.961720][ T6761] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  191.018056][ T6761] REISERFS (device loop0): checking transaction log (loop0)
[  191.065379][ T6761] REISERFS (device loop0): Using r5 hash to sort names
[  191.106395][ T6761] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  191.495755][ T6771] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.214'.
[  191.513622][ T6771] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  192.424199][ T6785] TCP: TCP_TX_DELAY enabled
[  192.697996][ T6790] loop2: detected capacity change from 0 to 256
[  192.764548][ T6790] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d)
[  192.912934][ T6790] mkiss: ax0: crc mode is auto.
[  192.967069][   T28] audit: type=1800 audit(1758096366.928:6): pid=6791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.218" name="file0" dev="loop2" ino=1048599 res=0 errno=0
[  193.491074][ T6786] loop1: detected capacity change from 0 to 40427
[  193.667555][ T6786] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  193.692407][ T6786] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  193.701228][ T6786] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7
[  193.710295][ T6786] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff
[  193.720789][ T6786] F2FS-fs (loop1): Image doesn't support compression
[  193.734252][ T6786] F2FS-fs (loop1): invalid crc value
[  193.745562][ T6786] F2FS-fs (loop1): Found nat_bits in checkpoint
[  193.867620][ T6786] F2FS-fs (loop1): Start checkpoint disabled!
[  193.893736][ T6786] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  193.911701][ T6786] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  193.958961][   T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  194.164842][   T23] usb 1-1: Using ep0 maxpacket: 32
[  194.182696][   T23] usb 1-1: unable to get BOS descriptor or descriptor too short
[  194.199745][   T23] usb 1-1: config 5 has an invalid interface number: 92 but max is 1
[  194.216261][   T23] usb 1-1: config 5 has no interface number 1
[  194.237587][   T23] usb 1-1: config 5 interface 0 altsetting 1 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  194.278097][   T23] usb 1-1: config 5 interface 92 has no altsetting 0
[  194.296783][   T23] usb 1-1: config 5 interface 0 has no altsetting 0
[  194.320285][   T23] usb 1-1: New USB device found, idVendor=0424, idProduct=b832, bcdDevice=16.3c
[  194.330077][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.338211][   T23] usb 1-1: Product: syz
[  194.342935][   T23] usb 1-1: Manufacturer: syz
[  194.348088][   T23] usb 1-1: SerialNumber: syz
[  194.628220][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  194.635216][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  194.702040][   T23] usb 1-1: USB disconnect, device number 5
[  194.916035][ T6812] loop3: detected capacity change from 0 to 136
[  194.938545][ T6812] Attempt to read inode for relocated directory
[  195.726069][ T6821] loop2: detected capacity change from 0 to 8192
[  195.768282][ T6821] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  195.793633][ T6821] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  195.803369][ T6821] REISERFS (device loop2): using ordered data mode
[  195.816699][ T6821] reiserfs: using flush barriers
[  195.824709][ T6821] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  195.849378][ T6821] REISERFS (device loop2): checking transaction log (loop2)
[  195.866826][ T6821] REISERFS (device loop2): Using r5 hash to sort names
[  195.875760][ T6821] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  196.709285][ T6818] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.226'.
[  196.725759][ T6818] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  197.696675][ T6843] FAULT_INJECTION: forcing a failure.
[  197.696675][ T6843] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  197.715200][ T6843] CPU: 1 PID: 6843 Comm: syz.0.233 Not tainted syzkaller #0
[  197.722558][ T6843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  197.732666][ T6843] Call Trace:
[  197.735986][ T6843]  <TASK>
[  197.738950][ T6843]  dump_stack_lvl+0x16c/0x230
[  197.743859][ T6843]  ? show_regs_print_info+0x20/0x20
[  197.749110][ T6843]  ? load_image+0x3b0/0x3b0
[  197.753660][ T6843]  ? __lock_acquire+0x7c80/0x7c80
[  197.758817][ T6843]  ? snprintf+0xdb/0x120
[  197.763120][ T6843]  should_fail_ex+0x39d/0x4d0
[  197.767937][ T6843]  _copy_to_user+0x2f/0xa0
[  197.772429][ T6843]  simple_read_from_buffer+0xe7/0x150
[  197.777848][ T6843]  proc_fail_nth_read+0x1e3/0x250
[  197.782930][ T6843]  ? proc_fault_inject_write+0x340/0x340
[  197.788590][ T6843]  ? fsnotify_perm+0x271/0x5e0
[  197.793382][ T6843]  ? proc_fault_inject_write+0x340/0x340
[  197.799030][ T6843]  vfs_read+0x27e/0x920
[  197.803227][ T6843]  ? kernel_read+0x1e0/0x1e0
[  197.807867][ T6843]  ? __fget_files+0x28/0x4d0
[  197.812496][ T6843]  ? __fget_files+0x44a/0x4d0
[  197.817221][ T6843]  ? __fdget_pos+0x2a3/0x330
[  197.821851][ T6843]  ? ksys_read+0x75/0x250
[  197.826218][ T6843]  ksys_read+0x147/0x250
[  197.830500][ T6843]  ? vfs_write+0x940/0x940
[  197.834941][ T6843]  ? lockdep_hardirqs_on+0x98/0x150
[  197.840167][ T6843]  do_syscall_64+0x55/0xb0
[  197.844607][ T6843]  ? clear_bhb_loop+0x40/0x90
[  197.849306][ T6843]  ? clear_bhb_loop+0x40/0x90
[  197.854052][ T6843]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  197.860000][ T6843] RIP: 0033:0x7fbae0f8d5bc
[  197.864441][ T6843] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  197.884198][ T6843] RSP: 002b:00007fbae1e5c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  197.892635][ T6843] RAX: ffffffffffffffda RBX: 00007fbae11d5fa0 RCX: 00007fbae0f8d5bc
[  197.900626][ T6843] RDX: 000000000000000f RSI: 00007fbae1e5c0a0 RDI: 0000000000000006
[  197.908624][ T6843] RBP: 00007fbae1e5c090 R08: 0000000000000000 R09: 0000000000000000
[  197.916621][ T6843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  197.924618][ T6843] R13: 00007fbae11d6038 R14: 00007fbae11d5fa0 R15: 00007ffdb7ec7cc8
[  197.932634][ T6843]  </TASK>
[  198.486314][ T6852] Bluetooth: MGMT ver 1.22
[  199.356909][ T6838] loop1: detected capacity change from 0 to 40427
[  199.377554][ T6838] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  199.396566][ T6838] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  199.423388][ T6838] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7
[  199.453001][ T6838] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff
[  199.480560][ T6838] F2FS-fs (loop1): Image doesn't support compression
[  199.517507][ T6838] F2FS-fs (loop1): invalid crc value
[  199.546515][ T6838] F2FS-fs (loop1): Found nat_bits in checkpoint
[  199.777786][ T6838] F2FS-fs (loop1): Start checkpoint disabled!
[  199.831922][ T6838] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  199.908899][ T6838] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  200.099784][ T6863] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  200.393855][ T6863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.238'.
[  200.632125][ T6868] capability: warning: `syz.2.240' uses deprecated v2 capabilities in a way that may be insecure
[  201.879627][ T6874] loop1: detected capacity change from 0 to 32768
[  201.893000][ T6874] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.239 (6874)
[  201.932741][ T6870] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.241'.
[  201.935471][ T6880] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  201.956188][ T6874] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  201.971743][ T6870] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  201.988950][ T6874] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  201.998123][ T6874] BTRFS info (device loop1): using free space tree
[  202.042626][ T6878] loop0: detected capacity change from 0 to 8192
[  202.054311][ T6878] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  202.069703][ T6878] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  202.079623][ T6878] REISERFS (device loop0): using ordered data mode
[  202.086395][ T6878] reiserfs: using flush barriers
[  202.094364][ T6878] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  202.148951][ T6878] REISERFS (device loop0): checking transaction log (loop0)
[  202.168390][ T6878] REISERFS (device loop0): Using r5 hash to sort names
[  202.176027][ T6878] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  202.388878][ T6874] BTRFS info (device loop1): enabling ssd optimizations
[  202.397874][ T6874] BTRFS info (device loop1): auto enabling async discard
[  202.482908][ T6903] syz.3.245: attempt to access beyond end of device
[  202.482908][ T6903] loop3: rw=0, sector=1, nr_sectors = 1 limit=0
[  202.496817][ T6903] qnx4: unable to read the superblock
[  202.595395][ T6903] loop3: detected capacity change from 0 to 1024
[  202.646741][ T6903] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  202.659108][ T6903] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  202.716492][ T6903] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  202.728487][ T6903] EXT4-fs (loop3): orphan cleanup on readonly fs
[  202.766610][ T6903] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.245: Inode bitmap for bg 0 marked uninitialized
[  202.793372][ T6903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  203.078534][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.608799][ T1187] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  203.808823][ T1187] usb 2-1: Using ep0 maxpacket: 16
[  203.830556][ T1187] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  203.856908][ T1187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.888188][ T1187] usb 2-1: Product: syz
[  203.900587][ T1187] usb 2-1: Manufacturer: syz
[  203.920884][ T1187] usb 2-1: SerialNumber: syz
[  203.942352][ T1187] usb 2-1: config 0 descriptor??
[  204.292267][ T6910] loop2: detected capacity change from 0 to 40427
[  204.314768][ T6910] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  204.324180][ T6910] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  204.344550][ T6910] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7
[  204.353464][ T6910] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff
[  204.362401][ T6910] F2FS-fs (loop2): Image doesn't support compression
[  204.364745][ T1187] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  204.380435][ T6910] F2FS-fs (loop2): invalid crc value
[  204.409334][ T6910] F2FS-fs (loop2): Found nat_bits in checkpoint
[  204.429615][ T1187] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  204.461775][ T1187] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  204.488569][ T1187] usb 2-1: media controller created
[  204.514937][ T6910] F2FS-fs (loop2): Start checkpoint disabled!
[  204.554962][ T6910] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  204.558885][ T6874] dtv5100: wlen = 0, aborting.
[  204.569573][ T1187] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  204.572460][ T6910] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  204.587742][ T6874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  204.614143][ T6874] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.671384][ T1187] zl10353_read_register: readreg error (reg=127, ret==0)
[  204.708887][ T1187] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  204.727582][ T1187] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  204.758779][ T1187] usb 2-1: USB disconnect, device number 2
[  204.914398][ T1187] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  205.263546][ T5783] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  207.623007][ T6937] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.255'.
[  207.648820][ T6937] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  207.662149][ T6949] loop2: detected capacity change from 0 to 8192
[  207.683547][ T6949] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  207.726517][ T6949] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  207.745626][ T6949] REISERFS (device loop2): using ordered data mode
[  207.752572][ T6949] reiserfs: using flush barriers
[  207.770559][ T6949] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  207.787449][ T6949] REISERFS (device loop2): checking transaction log (loop2)
[  207.838466][ T6949] REISERFS (device loop2): Using r5 hash to sort names
[  207.859434][ T6949] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  208.300977][ T6956] FAULT_INJECTION: forcing a failure.
[  208.300977][ T6956] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  208.363088][ T6956] CPU: 0 PID: 6956 Comm: syz.0.260 Not tainted syzkaller #0
[  208.370534][ T6956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  208.380625][ T6956] Call Trace:
[  208.383921][ T6956]  <TASK>
[  208.386882][ T6956]  dump_stack_lvl+0x16c/0x230
[  208.391602][ T6956]  ? show_regs_print_info+0x20/0x20
[  208.396840][ T6956]  ? load_image+0x3b0/0x3b0
[  208.401402][ T6956]  ? __lock_acquire+0x7c80/0x7c80
[  208.406458][ T6956]  ? snprintf+0xdb/0x120
[  208.410713][ T6956]  should_fail_ex+0x39d/0x4d0
[  208.415409][ T6956]  _copy_to_user+0x2f/0xa0
[  208.419839][ T6956]  simple_read_from_buffer+0xe7/0x150
[  208.425273][ T6956]  proc_fail_nth_read+0x1e3/0x250
[  208.430330][ T6956]  ? proc_fault_inject_write+0x340/0x340
[  208.436006][ T6956]  ? fsnotify_perm+0x271/0x5e0
[  208.440797][ T6956]  ? proc_fault_inject_write+0x340/0x340
[  208.446452][ T6956]  vfs_read+0x27e/0x920
[  208.450809][ T6956]  ? kernel_read+0x1e0/0x1e0
[  208.455459][ T6956]  ? __fget_files+0x28/0x4d0
[  208.460070][ T6956]  ? __fget_files+0x44a/0x4d0
[  208.464772][ T6956]  ? __fdget_pos+0x2a3/0x330
[  208.469387][ T6956]  ? ksys_read+0x75/0x250
[  208.473730][ T6956]  ksys_read+0x147/0x250
[  208.477994][ T6956]  ? vfs_write+0x940/0x940
[  208.482448][ T6956]  ? lockdep_hardirqs_on+0x98/0x150
[  208.487679][ T6956]  do_syscall_64+0x55/0xb0
[  208.492123][ T6956]  ? clear_bhb_loop+0x40/0x90
[  208.496829][ T6956]  ? clear_bhb_loop+0x40/0x90
[  208.501537][ T6956]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  208.507458][ T6956] RIP: 0033:0x7fbae0f8d5bc
[  208.511888][ T6956] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  208.531517][ T6956] RSP: 002b:00007fbae1e5c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  208.539947][ T6956] RAX: ffffffffffffffda RBX: 00007fbae11d5fa0 RCX: 00007fbae0f8d5bc
[  208.547932][ T6956] RDX: 000000000000000f RSI: 00007fbae1e5c0a0 RDI: 0000000000000004
[  208.555916][ T6956] RBP: 00007fbae1e5c090 R08: 0000000000000000 R09: 0000000000000000
[  208.563906][ T6956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  208.571913][ T6956] R13: 00007fbae11d6038 R14: 00007fbae11d5fa0 R15: 00007ffdb7ec7cc8
[  208.579916][ T6956]  </TASK>
[  209.838507][ T6954] loop1: detected capacity change from 0 to 40427
[  209.848185][ T6954] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  209.877941][ T6954] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  209.907577][ T6954] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7
[  209.922472][ T6954] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff
[  209.976424][ T6954] F2FS-fs (loop1): Image doesn't support compression
[  210.065087][ T6954] F2FS-fs (loop1): invalid crc value
[  210.160600][ T6954] F2FS-fs (loop1): Found nat_bits in checkpoint
[  210.473781][ T6954] F2FS-fs (loop1): Start checkpoint disabled!
[  210.581035][ T6954] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  210.637605][ T6954] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  211.377114][ T6971] loop3: detected capacity change from 0 to 32768
[  211.449998][ T6971] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  211.539925][ T6971] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  212.196104][ T5786] Bluetooth: hci1: command 0x0406 tx timeout
[  212.202428][ T5799] Bluetooth: hci0: command 0x0406 tx timeout
[  212.237854][ T5798] Bluetooth: hci2: command 0x0406 tx timeout
[  212.249458][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.266'.
[  212.422699][ T6978] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.269'.
[  212.432738][ T6978] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  213.587457][ T5784] ocfs2: Unmounting device (7,3) on (node local)
[  215.324814][ T7005] loop0: detected capacity change from 0 to 40427
[  215.361290][ T7005] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff
[  215.388781][ T7005] F2FS-fs (loop0): Image doesn't support compression
[  215.406434][ T7005] F2FS-fs (loop0): Image doesn't support compression
[  215.427832][ T7005] F2FS-fs (loop0): invalid crc value
[  215.458358][ T7005] F2FS-fs (loop0): Found nat_bits in checkpoint
[  215.594550][ T7005] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  215.698948][ T7005] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_page+0x1d7/0x910
[  215.725705][ T7005] syz.0.275: attempt to access beyond end of device
[  215.725705][ T7005] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  215.881091][ T7016] loop2: detected capacity change from 0 to 8192
[  215.919758][ T7016] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  215.948994][ T7016] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  216.028849][ T7016] REISERFS (device loop2): using ordered data mode
[  216.035434][ T7016] reiserfs: using flush barriers
[  216.103434][ T5788] syz-executor: attempt to access beyond end of device
[  216.103434][ T5788] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  216.124617][ T7016] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  216.168111][ T5788] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  216.177272][ T7016] REISERFS (device loop2): checking transaction log (loop2)
[  216.196452][ T5788] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  216.210086][ T7016] REISERFS (device loop2): Using r5 hash to sort names
[  216.217595][ T7016] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  216.616145][ T7018] loop1: detected capacity change from 0 to 40427
[  216.633001][ T7018] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  216.647504][ T7018] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  216.662993][ T7018] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7
[  216.676766][ T7018] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff
[  216.691954][ T7018] F2FS-fs (loop1): Image doesn't support compression
[  216.706971][ T7018] F2FS-fs (loop1): invalid crc value
[  216.752101][ T7018] F2FS-fs (loop1): Found nat_bits in checkpoint
[  216.916794][ T7018] F2FS-fs (loop1): Start checkpoint disabled!
[  216.978755][ T7018] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  216.997700][ T7018] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  217.579430][ T5820] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  217.808870][ T7031] loop1: detected capacity change from 0 to 2048
[  217.826239][ T7031] EXT4-fs warning (device loop1): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop1.
[  218.179366][ T5820] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  218.206518][ T5820] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00
[  218.228735][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35
[  218.237291][ T5820] usb 1-1: Product: syz
[  218.258760][ T5820] usb 1-1: SerialNumber: syz
[  218.274769][ T5820] usb 1-1: config 0 descriptor??
[  218.301894][ T5820] usb 1-1: selecting invalid altsetting 1
[  218.318797][ T5820] usb 1-1: Can not set alternate setting to 1, error: -22
[  218.333832][ T5820] synaptics_usb: probe of 1-1:0.0 failed with error -22
[  218.639119][ T5820] usb 1-1: USB disconnect, device number 6
[  219.586979][   T28] audit: type=1326 audit(1758096393.558:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae0f8eba9 code=0x7ffc0000
[  219.647627][   T28] audit: type=1326 audit(1758096393.598:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae0f8eba9 code=0x7ffc0000
[  219.716568][   T28] audit: type=1326 audit(1758096393.608:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fbae0f8eba9 code=0x7ffc0000
[  219.805168][   T28] audit: type=1326 audit(1758096393.608:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae0f8eba9 code=0x7ffc0000
[  219.872351][   T28] audit: type=1326 audit(1758096393.608:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbae0f8eba9 code=0x7ffc0000
[  219.941187][ T7046] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.282'.
[  219.947929][   T28] audit: type=1326 audit(1758096393.618:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae0f8eba9 code=0x7ffc0000
[  219.989993][ T7046] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  219.993146][   T28] audit: type=1326 audit(1758096393.618:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fbae0f8eba9 code=0x7ffc0000
[  220.023992][   T28] audit: type=1326 audit(1758096393.618:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae0f8eba9 code=0x7ffc0000
[  220.126953][ T7060] FAULT_INJECTION: forcing a failure.
[  220.126953][ T7060] name failslab, interval 1, probability 0, space 0, times 0
[  220.152801][   T28] audit: type=1326 audit(1758096393.628:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbae0f8eba9 code=0x7ffc0000
[  220.210778][ T7060] CPU: 0 PID: 7060 Comm: syz.0.287 Not tainted syzkaller #0
[  220.218124][ T7060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  220.228227][ T7060] Call Trace:
[  220.231586][ T7060]  <TASK>
[  220.234554][ T7060]  dump_stack_lvl+0x16c/0x230
[  220.239280][ T7060]  ? show_regs_print_info+0x20/0x20
[  220.244533][ T7060]  ? load_image+0x3b0/0x3b0
[  220.249080][ T7060]  ? __might_sleep+0xe0/0xe0
[  220.253714][ T7060]  ? __lock_acquire+0x7c80/0x7c80
[  220.258791][ T7060]  should_fail_ex+0x39d/0x4d0
[  220.263542][ T7060]  should_failslab+0x9/0x20
[  220.268063][ T7060]  slab_pre_alloc_hook+0x59/0x310
[  220.273112][ T7060]  kmem_cache_alloc+0x5a/0x2e0
[  220.277891][ T7060]  ? __anon_vma_prepare+0x68/0x430
[  220.283107][ T7060]  __anon_vma_prepare+0x68/0x430
[  220.288062][ T7060]  handle_mm_fault+0x3cf1/0x4920
[  220.293022][ T7060]  ? handle_mm_fault+0xd1/0x4920
[  220.297989][ T7060]  ? numa_migrate_prep+0x350/0x350
[  220.303116][ T7060]  ? follow_page_pte+0x6fb/0x1a70
[  220.308162][ T7060]  ? pmd_lock+0x60/0x60
[  220.312343][ T7060]  __get_user_pages+0x5ea/0x1470
[  220.317305][ T7060]  ? mtree_destroy+0x30/0x30
[  220.321913][ T7060]  ? populate_vma_page_range+0x370/0x370
[  220.327565][ T7060]  populate_vma_page_range+0x2b6/0x370
[  220.333041][ T7060]  ? fixup_user_fault+0x710/0x710
[  220.338073][ T7060]  ? userfaultfd_unmap_complete+0x279/0x2d0
[  220.338864][   T28] audit: type=1326 audit(1758096393.628:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae0f8eba9 code=0x7ffc0000
[  220.343982][ T7060]  ? down_read+0x1ac/0x2e0
[  220.370484][ T7060]  __mm_populate+0x24c/0x380
[  220.375090][ T7060]  ? faultin_page_range+0x8f0/0x8f0
[  220.380301][ T7060]  ? up_write+0x1c3/0x410
[  220.384645][ T7060]  vm_mmap_pgoff+0x2e7/0x400
[  220.389252][ T7060]  ? account_locked_vm+0x210/0x210
[  220.394403][ T7060]  ? ksys_mmap_pgoff+0xea/0x700
[  220.399303][ T7060]  ? __x64_sys_mmap+0x7a/0x130
[  220.404111][ T7060]  do_syscall_64+0x55/0xb0
[  220.408538][ T7060]  ? clear_bhb_loop+0x40/0x90
[  220.413223][ T7060]  ? clear_bhb_loop+0x40/0x90
[  220.417907][ T7060]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  220.423815][ T7060] RIP: 0033:0x7fbae0f8eba9
[  220.428239][ T7060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  220.447856][ T7060] RSP: 002b:00007fbae1e5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  220.456320][ T7060] RAX: ffffffffffffffda RBX: 00007fbae11d5fa0 RCX: 00007fbae0f8eba9
[  220.464319][ T7060] RDX: 0000000001000007 RSI: 000000000000a000 RDI: 0000200000000000
[  220.472310][ T7060] RBP: 00007fbae1e5c090 R08: ffffffffffffffff R09: 0000000000000000
[  220.480313][ T7060] R10: 0000000000002172 R11: 0000000000000246 R12: 0000000000000001
[  220.488323][ T7060] R13: 00007fbae11d6038 R14: 00007fbae11d5fa0 R15: 00007ffdb7ec7cc8
[  220.496329][ T7060]  </TASK>
[  221.441131][ T7065] loop3: detected capacity change from 0 to 8192
[  221.461451][ T7065] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  221.478487][ T7067] loop2: detected capacity change from 0 to 512
[  221.496919][ T7065] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  221.524960][ T7065] REISERFS (device loop3): using ordered data mode
[  221.546729][ T7065] reiserfs: using flush barriers
[  221.557137][ T7067] EXT4-fs error (device loop2): ext4_get_journal_inode:5807: comm syz.2.290: inode #1792: comm syz.2.290: iget: illegal inode #
[  221.596474][ T7065] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  221.627889][ T7067] EXT4-fs (loop2): Remounting filesystem read-only
[  221.647743][ T7065] REISERFS (device loop3): checking transaction log (loop3)
[  221.662008][ T7067] EXT4-fs (loop2): no journal found
[  221.678014][ T7067] EXT4-fs (loop2): can't get journal size
[  221.693187][ T7065] REISERFS (device loop3): Using r5 hash to sort names
[  221.693337][ T7067] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  221.716892][ T7067] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[  221.725348][ T7065] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  221.730356][ T7067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.821229][ T7063] loop0: detected capacity change from 0 to 40427
[  221.910492][ T7063] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  221.940738][ T7063] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  221.974540][ T7063] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7
[  222.012308][ T7063] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff
[  222.021591][ T7063] F2FS-fs (loop0): Image doesn't support compression
[  222.039414][ T7063] F2FS-fs (loop0): invalid crc value
[  222.060981][ T7063] F2FS-fs (loop0): Found nat_bits in checkpoint
[  222.415832][ T7076] EXT4-fs: error -4 creating inode table initialization thread
[  222.424091][ T7076] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  222.484278][ T7063] F2FS-fs (loop0): Start checkpoint disabled!
[  222.507825][ T7063] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  222.530940][ T7063] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  222.622233][ T5793] Bluetooth: hci3: command 0x0406 tx timeout
[  222.809973][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.924942][ T7091] loop2: detected capacity change from 0 to 32768
[  227.073230][ T7110] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.300'.
[  227.128827][ T7110] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  227.380272][ T7114] netlink: 'syz.2.302': attribute type 7 has an invalid length.
[  227.500032][ T7117] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  228.090133][ T7126] warning: `syz.0.306' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  228.376807][ T7129] loop2: detected capacity change from 0 to 8192
[  228.392544][ T7129] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  228.428737][ T7129] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  228.438036][ T7129] REISERFS (device loop2): using ordered data mode
[  228.601928][ T7129] reiserfs: using flush barriers
[  228.618902][ T7129] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  228.664098][ T7129] REISERFS (device loop2): checking transaction log (loop2)
[  228.701835][ T7129] REISERFS (device loop2): Using r5 hash to sort names
[  228.723812][ T7129] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  230.913140][ T7151] loop0: detected capacity change from 0 to 40427
[  230.945100][ T7151] F2FS-fs (loop0): invalid crc value
[  230.956352][ T7151] F2FS-fs (loop0): Found nat_bits in checkpoint
[  230.997814][ T7151] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  232.714499][ T7170] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.315'.
[  232.768870][ T7170] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  233.548700][    C0] hrtimer: interrupt took 63667 ns
[  234.717185][ T7192] loop0: detected capacity change from 0 to 1024
[  234.725078][ T7192] EXT4-fs: inline encryption not supported
[  234.763879][ T7192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  234.864487][ T7192] netlink: 32 bytes leftover after parsing attributes in process `syz.0.322'.
[  234.885747][ T7190] loop3: detected capacity change from 0 to 8192
[  234.904753][ T7190] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  234.928732][ T7190] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  234.952092][ T7190] REISERFS (device loop3): using ordered data mode
[  234.959521][ T7190] reiserfs: using flush barriers
[  234.991916][ T7190] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  235.022107][ T7190] REISERFS (device loop3): checking transaction log (loop3)
[  235.112461][ T7190] REISERFS (device loop3): Using r5 hash to sort names
[  235.122280][ T7196] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  235.190876][ T7190] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  235.362320][   T28] kauditd_printk_skb: 8 callbacks suppressed
[  235.362335][   T28] audit: type=1800 audit(1758096409.348:25): pid=7192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.322" name="file1" dev="loop0" ino=15 res=0 errno=0
[  235.448829][   T28] audit: type=1800 audit(1758096409.348:26): pid=7193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.322" name="file1" dev="loop0" ino=15 res=0 errno=0
[  235.469186][    C0] vkms_vblank_simulate: vblank timer overrun
[  235.897028][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.286483][   T23] ==================================================================
[  236.294621][   T23] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x47c/0x800
[  236.302744][   T23] Write of size 8 at addr ffff88802e8d7830 by task kworker/1:0/23
[  236.310588][   T23] 
[  236.312946][   T23] CPU: 1 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0
[  236.320282][   T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  236.330379][   T23] Workqueue: events xfrm_state_gc_task
[  236.335888][   T23] Call Trace:
[  236.339196][   T23]  <TASK>
[  236.342159][   T23]  dump_stack_lvl+0x16c/0x230
[  236.346921][   T23]  ? __lock_acquire+0x7c80/0x7c80
[  236.351988][   T23]  ? show_regs_print_info+0x20/0x20
[  236.357353][   T23]  ? load_image+0x3b0/0x3b0
[  236.361900][   T23]  ? __virt_addr_valid+0x469/0x540
[  236.367061][   T23]  print_report+0xac/0x220
[  236.371535][   T23]  ? __xfrm_state_delete+0x47c/0x800
[  236.376897][   T23]  kasan_report+0x117/0x150
[  236.381450][   T23]  ? __xfrm_state_delete+0x47c/0x800
[  236.386789][   T23]  __xfrm_state_delete+0x47c/0x800
[  236.391953][   T23]  xfrm_state_delete_tunnel+0x9e/0x1e0
[  236.397456][   T23]  ipcomp_destroy+0x4a/0x80
[  236.401993][   T23]  ___xfrm_state_destroy+0x1fd/0x4d0
[  236.407319][   T23]  xfrm_state_gc_task+0x10a/0x160
[  236.412392][   T23]  ? xfrm_audit_state_icvfail+0x470/0x470
[  236.418158][   T23]  ? process_scheduled_works+0x957/0x15b0
[  236.424015][   T23]  ? process_scheduled_works+0x957/0x15b0
[  236.429783][   T23]  process_scheduled_works+0xa45/0x15b0
[  236.435389][   T23]  ? assign_work+0x400/0x400
[  236.440032][   T23]  ? assign_work+0x39e/0x400
[  236.444685][   T23]  worker_thread+0xa55/0xfc0
[  236.449347][   T23]  kthread+0x2fa/0x390
[  236.453458][   T23]  ? pr_cont_work+0x560/0x560
[  236.458196][   T23]  ? kthread_blkcg+0xd0/0xd0
[  236.462830][   T23]  ret_from_fork+0x48/0x80
[  236.467315][   T23]  ? kthread_blkcg+0xd0/0xd0
[  236.471948][   T23]  ret_from_fork_asm+0x11/0x20
[  236.476763][   T23]  </TASK>
[  236.479816][   T23] 
[  236.482300][   T23] Allocated by task 7091:
[  236.486660][   T23]  kasan_set_track+0x4e/0x70
[  236.491294][   T23]  __kasan_slab_alloc+0x6c/0x80
[  236.496190][   T23]  slab_post_alloc_hook+0x6e/0x4d0
[  236.501349][   T23]  kmem_cache_alloc+0x11e/0x2e0
[  236.506440][   T23]  xfrm_state_alloc+0x22/0x2a0
[  236.511249][   T23]  __find_acq_core+0x7d8/0x19d0
[  236.516288][   T23]  xfrm_find_acq+0x6a/0x90
[  236.520748][   T23]  xfrm_alloc_userspi+0x57a/0xa90
[  236.525809][   T23]  xfrm_user_rcv_msg+0x596/0x870
[  236.530787][   T23]  netlink_rcv_skb+0x216/0x480
[  236.535591][   T23]  xfrm_netlink_rcv+0x79/0x90
[  236.540299][   T23]  netlink_unicast+0x751/0x8d0
[  236.545124][   T23]  netlink_sendmsg+0x8c1/0xbe0
[  236.549943][   T23]  ____sys_sendmsg+0x5bf/0x950
[  236.554759][   T23]  ___sys_sendmsg+0x220/0x290
[  236.559483][   T23]  __se_sys_sendmsg+0x1a5/0x270
[  236.564376][   T23]  do_syscall_64+0x55/0xb0
[  236.568839][   T23]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  236.574797][   T23] 
[  236.577151][   T23] Freed by task 23:
[  236.580986][   T23]  kasan_set_track+0x4e/0x70
[  236.585611][   T23]  kasan_save_free_info+0x2e/0x50
[  236.590670][   T23]  ____kasan_slab_free+0x126/0x1e0
[  236.595820][   T23]  slab_free_freelist_hook+0x130/0x1b0
[  236.601330][   T23]  kmem_cache_free+0xf8/0x280
[  236.606050][   T23]  xfrm_state_gc_task+0x10a/0x160
[  236.611122][   T23]  process_scheduled_works+0xa45/0x15b0
[  236.616710][   T23]  worker_thread+0xa55/0xfc0
[  236.621347][   T23]  kthread+0x2fa/0x390
[  236.625451][   T23]  ret_from_fork+0x48/0x80
[  236.629912][   T23]  ret_from_fork_asm+0x11/0x20
[  236.634734][   T23] 
[  236.637085][   T23] The buggy address belongs to the object at ffff88802e8d7800
[  236.637085][   T23]  which belongs to the cache xfrm_state of size 848
[  236.651088][   T23] The buggy address is located 48 bytes inside of
[  236.651088][   T23]  freed 848-byte region [ffff88802e8d7800, ffff88802e8d7b50)
[  236.664834][   T23] 
[  236.667189][   T23] The buggy address belongs to the physical page:
[  236.673637][   T23] page:ffffea0000ba3500 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802e8d4000 pfn:0x2e8d4
[  236.685136][   T23] head:ffffea0000ba3500 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  236.694110][   T23] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  236.702141][   T23] page_type: 0xffffffff()
[  236.706508][   T23] raw: 00fff00000000840 ffff8880182aadc0 ffffea0000943f00 0000000000000002
[  236.715138][   T23] raw: ffff88802e8d4000 000000008010000e 00000001ffffffff 0000000000000000
[  236.723757][   T23] page dumped because: kasan: bad access detected
[  236.730211][   T23] page_owner tracks the page as allocated
[  236.735964][   T23] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 6922, tgid 6916 (syz.0.249), ts 205335016802, free_ts 204605055882
[  236.756581][   T23]  post_alloc_hook+0x1cd/0x210
[  236.761394][   T23]  get_page_from_freelist+0x195c/0x19f0
[  236.766987][   T23]  __alloc_pages+0x1e3/0x460
[  236.771622][   T23]  alloc_slab_page+0x5d/0x170
[  236.776338][   T23]  new_slab+0x87/0x2e0
[  236.780448][   T23]  ___slab_alloc+0xc6d/0x1300
[  236.785168][   T23]  kmem_cache_alloc+0x1b7/0x2e0
[  236.790062][   T23]  xfrm_state_alloc+0x22/0x2a0
[  236.794864][   T23]  ipcomp6_init_state+0x2bd/0x7f0
[  236.799937][   T23]  __xfrm_init_state+0xd8b/0x11c0
[  236.804995][   T23]  xfrm_init_state+0x1f/0x80
[  236.809624][   T23]  pfkey_add+0x1cee/0x2da0
[  236.814185][   T23]  pfkey_sendmsg+0xbed/0x1050
[  236.818903][   T23]  ____sys_sendmsg+0x5bf/0x950
[  236.823701][   T23]  ___sys_sendmsg+0x220/0x290
[  236.828410][   T23]  __sys_sendmmsg+0x275/0x4a0
[  236.833128][   T23] page last free stack trace:
[  236.837817][   T23]  free_unref_page_prepare+0x7ce/0x8e0
[  236.843325][   T23]  free_unref_page+0x32/0x2e0
[  236.848041][   T23]  free_large_kmalloc+0x101/0x1a0
[  236.853110][   T23]  bpf_check+0x62c6/0xe970
[  236.857560][   T23]  bpf_prog_load+0x11cb/0x16d0
[  236.862352][   T23]  __sys_bpf+0x55a/0x800
[  236.866718][   T23]  __x64_sys_bpf+0x7c/0x90
[  236.871177][   T23]  do_syscall_64+0x55/0xb0
[  236.875634][   T23]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  236.881579][   T23] 
[  236.883925][   T23] Memory state around the buggy address:
[  236.889584][   T23]  ffff88802e8d7700: fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc
[  236.897677][   T23]  ffff88802e8d7780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  236.905767][   T23] >ffff88802e8d7800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  236.913860][   T23]                                      ^
[  236.919544][   T23]  ffff88802e8d7880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  236.927647][   T23]  ffff88802e8d7900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  236.935739][   T23] ==================================================================
[  236.943928][   T23] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  236.951173][   T23] CPU: 1 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0
[  236.958493][   T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  236.968588][   T23] Workqueue: events xfrm_state_gc_task
[  236.974108][   T23] Call Trace:
[  236.977418][   T23]  <TASK>
[  236.980383][   T23]  dump_stack_lvl+0x16c/0x230
[  236.985109][   T23]  ? show_regs_print_info+0x20/0x20
[  236.990348][   T23]  ? load_image+0x3b0/0x3b0
[  236.994897][   T23]  panic+0x2c0/0x710
[  236.998849][   T23]  ? bpf_jit_dump+0xd0/0xd0
[  237.003404][   T23]  ? _raw_spin_unlock_irqrestore+0xa9/0x110
[  237.009333][   T23]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  237.015267][   T23]  ? _raw_spin_unlock+0x40/0x40
[  237.020153][   T23]  ? print_memory_metadata+0x314/0x400
[  237.025662][   T23]  ? __xfrm_state_delete+0x47c/0x800
[  237.031081][   T23]  check_panic_on_warn+0x84/0xa0
[  237.036061][   T23]  ? __xfrm_state_delete+0x47c/0x800
[  237.041398][   T23]  end_report+0x6f/0x140
[  237.045701][   T23]  kasan_report+0x128/0x150
[  237.050259][   T23]  ? __xfrm_state_delete+0x47c/0x800
[  237.055604][   T23]  __xfrm_state_delete+0x47c/0x800
[  237.060837][   T23]  xfrm_state_delete_tunnel+0x9e/0x1e0
[  237.066362][   T23]  ipcomp_destroy+0x4a/0x80
[  237.070914][   T23]  ___xfrm_state_destroy+0x1fd/0x4d0
[  237.076251][   T23]  xfrm_state_gc_task+0x10a/0x160
[  237.081336][   T23]  ? xfrm_audit_state_icvfail+0x470/0x470
[  237.087117][   T23]  ? process_scheduled_works+0x957/0x15b0
[  237.092896][   T23]  ? process_scheduled_works+0x957/0x15b0
[  237.098666][   T23]  process_scheduled_works+0xa45/0x15b0
[  237.104284][   T23]  ? assign_work+0x400/0x400
[  237.108948][   T23]  ? assign_work+0x39e/0x400
[  237.113593][   T23]  worker_thread+0xa55/0xfc0
[  237.118266][   T23]  kthread+0x2fa/0x390
[  237.122381][   T23]  ? pr_cont_work+0x560/0x560
[  237.127103][   T23]  ? kthread_blkcg+0xd0/0xd0
[  237.131744][   T23]  ret_from_fork+0x48/0x80
[  237.136217][   T23]  ? kthread_blkcg+0xd0/0xd0
[  237.140859][   T23]  ret_from_fork_asm+0x11/0x20
[  237.145684][   T23]  </TASK>
[  237.149073][   T23] Kernel Offset: disabled
[  237.153429][   T23] Rebooting in 86400 seconds..