last executing test programs:

10.473637426s ago: executing program 1 (id=124):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={0x0, 0xfffffffe, 0xffff57e8, 0x1}, 0x10)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) (fail_nth: 3)

9.836295458s ago: executing program 1 (id=126):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r1 = fanotify_init(0xf00, 0x1000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r3, &(0x7f00000004c0)='./bus/file0\x00', 0x2)
renameat2(r3, &(0x7f0000000240)='./bus/file0\x00', r3, &(0x7f00000001c0)='./file0\x00', 0x2) (fail_nth: 3)

9.310824718s ago: executing program 1 (id=127):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x9, 0x0, "0006000000df0066952e0d16c708db720800"})
r1 = syz_open_pts(r0, 0x42)
r2 = dup3(r1, r0, 0x0)
write$UHID_INPUT(r2, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x51, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000000240)={{0x1, 0x0, 0xfffffffffffffcee, {0xdddd0000, 0x80af000}}, "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", "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"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

8.236477599s ago: executing program 1 (id=130):
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file2\x00', 0x8, &(0x7f0000000000)=ANY=[], 0x1, 0x1ce, &(0x7f0000000800)="$eJzslc+q00AUxr+Z1KQVn8CNCy94XZgmqYqbC3XjyoXgn+JCsNi0VFMrbRa2IOITuHfnwscQ6taHkCqIguhGXY/MnyRjaYTW1iw8P+jJN5npmTNn4AsIgvhv+fD+51L8OPpUB3ACB/DM+89OsYZb69/Vvz15c/VK5/mdV2+9pd/4PZu38f41AIvLDlIzFkIIe/7APG+A5/omOM4a3QGDb/RdcNwyOgbDbaPvW3os1/t+f5jE/r1x0pMikCGUIZKhtVrf12cMPas+Zs1PZ/MH3SSJJ3sU6zu3+JLXVweOrPrs+/Khqw2s/oXgCI1ugeG60ZfgZb3RLbHOf7JW5Hf+eH4Xf3nsjwCKN/19dtaVW231d4D9k7vfs3CgRHajldezc4HazhIKD6j6OCXidVvfX17qUz3eLE+7ZMrdMI/pfO6f4iXDGcuftJW8UB+LZjp61JzO5ueGo+4gHsQPo6h1MTgfBBeipjIiHddboMrfUP50vMjfKFvrMhePu2k6CXXMx5GO6xyXK//jODyNY3Is3dRdyfsdQLYpMz+unlIdOqXFEwRBVMgpMOXJypczYb4m+YQQ0bWK6yQIgiAIgiAIgiAIYnt+BQAA//9We18t")
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, &(0x7f00000000c0)=""/59, 0x3b)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="864cd12f8600d1b20a559569b7365a81712f4bd65975a3bfd6f996660efbabf6fbe9752ce3d056b5050506196f0b7438caaa35305f1273d478df461721cc9d")
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'})
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20042, 0x0)
r3 = dup(0xffffffffffffffff)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

7.964500214s ago: executing program 3 (id=133):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f0000000200)='m', 0x1)
ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000440))

7.646114821s ago: executing program 1 (id=134):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='cpuset.effective_mems\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000004fc0)={0x2020}, 0x2020)

7.315287277s ago: executing program 3 (id=135):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmmsg$inet6(r0, &(0x7f0000001380), 0x0, 0x20004004)
socket$inet_smc(0x2b, 0x1, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
fstat(r3, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000001000000000000010040000000600000000000007000000000c000000000080010000000059006e000000ed2a89b6efc1ee3ab2f03aedb7a5306b7892efee0a5f0f2adb6fa4ef825ce009d84443fe9dbc3ce153ec445dc92da93a595168c4cc9a1424bad249e05a0879a68efedbe5bae23b773e60bd169d053c55b8d4aafa5c211db5010e6029524df064599114f1cccbfe2f19025beec4b89d3813226b1efed82c5fcfef479244fc5590ab62c8741c77c4e5a4bd7ceef7c60d565ff1f453815b73cc014f000000000000000000000000000000b32c779c36dbc6566f2b8800ae99392bb030eb1d06cdad0c24010dcf515b8c5733b3eaea437edb3102e67b397b92d8e8c8600b99ee6f810e7fc387000f4a54ec429d062b51b9af2857ad53494727c1d58344a0083e9d0eb972f8d699134cead443c8e3"], &(0x7f0000000180)=""/6, 0x42, 0x6, 0x0, 0x0, 0x10000}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, 0x0, 0x80, 0x5c, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r6, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x9, 0xffff, 0x9, 0x7}}}, ["", ""]}, 0x30}}, 0x4040080)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r7, 0x0)
recvmmsg(r7, &(0x7f0000000080), 0x72a, 0x0, 0x0)
read(r7, &(0x7f0000000000)=""/114, 0x72)

7.193866679s ago: executing program 1 (id=136):
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
close(r0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x1)

6.807624517s ago: executing program 32 (id=136):
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
close(r0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x1)

6.737575578s ago: executing program 2 (id=139):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x88201, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, 0xede})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x42, &(0x7f0000000140)=[@vmwrite={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}], 0x1)
ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)=0xd)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6.265574178s ago: executing program 0 (id=140):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x140002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0xb}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f0000000240)={[{@nodiscard}, {@nocheckpoint_merge}, {@alloc_mode_def}, {@six_active_logs}, {@six_active_logs}, {@fault_injection={'fault_injection', 0x3d, 0x4}}, {@acl}, {@noacl}, {@compress_cache}, {@alloc_mode_def}, {@noextent_cache}, {@compress_cache}, {@fault_type={'fault_type', 0x3d, 0xc}}]}, 0x1, 0x5505, &(0x7f0000002480)="$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")

5.532322762s ago: executing program 2 (id=141):
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x6f5e, 0x40)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
fstat(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffc, 0x6, 0x10, @buffer={0x20, 0x0, 0x0}, &(0x7f0000000380)="5beeafc163c2", 0x0, 0x100004, 0x0, 0x3, 0x0})

5.459346323s ago: executing program 3 (id=142):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setsig(r1, 0xa, 0x13)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x3000000, &(0x7f00000003c0), 0x1, 0x513, &(0x7f0000000940)="$eJzs3W9rJHcdAPDvTLJp7i41WxU5C7bFVu6K3m7S2DaKtBVEHxXU+jzGZBNCNtmQ3dRLKJriCxBEVPAF+ETwBQjSlyDCgT4XFUX0Th/qjczuRPNnN1mSTfbcfD4w2d9v/n2/vyE7O39+zARwbb0QEW9FxFhEvBwR08X4tBgW8sp+Z75HD99byocksuydvyWRFOMO1pXXxyPiVmeRmIyIr38l4lvJybjN3b31xXq9tl3Uq62NrWpzd+/e2sbiam21tjk3N/va/Ovzr87PZIULtbMcEW986U8/+v7PvvzGrz7z7d8v/OXud/K0vvCxTt4RsXShAD101l1qb4sD+TbavoxgQ5K3pzQ27CwAAOhHfoz/4Yj4ZPv4fzrG2kdzAAAAwCjJ3pyKfyURGQAAADCy0oiYiiStFH0BpiJNK5VOH96Pxs203mi2Pr3S2NlczqdFlKOUrqzVazNFX+FylJK8Plv0sT2ov3KsPhcRz0TED6dvtOuVpUZ9edgXPwAAAOCauPX80fP/f06n7TIAAAAwYso9KwAAAMCocMoPAAAAo8/5PwAAAIy0r779dj5kB+/xXn53d2e98e695VpzvbKxs1RZamxvVVYbjdX2M/s2zlpfvdHY+mxs7tyvtmrNVrW5u7ew0djZbC2sHXkFNgAAAHCFnnn+g98lEbH/+RvtIYrnAAIc8cdhJwAM0tiwEwCGZnzYCQBDUzpzDnsIGHXJGdNPdt7pXCuMX19OPgAAwODd+fjJ+/8TxbSzrw0A/8/09QGA68fdPbi+SuftAXh70JkAw/KhzsdTvab3fHhHH/f/O9cYsuxciQEAAAMz1R6StFIcp09FmlYqEU+3XwtQSlbW6rWZ4vzgt9Olp/L6bHvJ5Mw+wwAAAAAAAAAAAAAAAAAAAAAAAABAR5YlkQEAAAAjLSL9c9J+mn/EnemXpo5eHTj21q+fvvPj+4ut1vZsxETy9+l81EREtH5SjH8l80oAAAAAeAJ0ztOLz9lhZwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn08L2lg+Eq4/71ixFR7hZ/PCbbn5NRioib/0hi/NBySUSMDSD+/vsRcbtb/CQeZ1lWLrLoFv/GJccvtzdN9/hpRNwaQHy4zj7I9z9vdfv+pfFC+7P792+8GC6q9/4v/e/+b6zH/ufpY/Venn3wi2rP+O9HPDveff9zED/pxD8SIq+82Gcbv/mNvb2uEw6tslv8w7GqrY2tanN3797axuJqbbW2OTc3+9r86/Ovzs9UV9bqteJv1zA/+MQvH5/W/ps94pePtv/E9n+pr9Zn8e8H9x9+pFMpdYt/98Xuv7+3e8RPi9++TxXlfPqdg/J+p3zYcz//zXOntX+5R/snz2j/3b7aH597+Wvf+0PXKSe2BgBwFZq7e+uL9Xpt+5TCZB/zXHHhzScjjQEW4slIY1iF7Lud/8eLreeCi58oZBdZfDwGkMbEie/pWJx3hUnEfr6uPv8hAQCAEfO/g/7T7iABAAAAAAAAAAAAAAAAAAAAl+mcjyWbjIi+Zz4ec384TQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONV/AgAA//8FStFZ")
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x1b, 0x0, 0x101, 0x401})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x100000, 0x1, 0xffffffffffffffff, 0x1104be28e305374d})
syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000240)="6667af2e670f011f65260f015edb66b80e0000000f23c80f21f86635000040000f23f8ff64a067805fbbb2a5f3ad660f3acf64f204b847008ee0", 0x3a}], 0x1, 0x41, 0x0, 0x0)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r5, 0x10d, 0xcf, &(0x7f0000000000), &(0x7f0000000080)=0x4)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

5.349604405s ago: executing program 2 (id=143):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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")
syz_mount_image$erofs(&(0x7f0000000100), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f0000000200)=ANY=[], 0x1, 0x209, &(0x7f0000000a80)="$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")
symlink(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
shutdown(r6, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={0x0, 0xfffffffe, 0xffff57e8, 0x1}, 0x10)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)

4.141839169s ago: executing program 3 (id=144):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f0000000200)='m', 0x1)
ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000440))

3.977386532s ago: executing program 2 (id=145):
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
close(r0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x1)

3.916075953s ago: executing program 0 (id=146):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000040000000800000001"], 0x48)
unshare(0x600)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94)

3.733346827s ago: executing program 0 (id=147):
socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffff, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x22, 0x0, 0x0, @rand_addr=0x64010102}}}}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40d0)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000000d0a0108000000edffffff000a0000010900020073797a31000000000900010073797a3100000000100003800c0000800800018004000100854e6dae63cff7d13c9c3e7602ef62feb5554867935bfeace3b19feb4d120b8405c4c8f6af95822100c1cd503d526cbb5db4e2080a2ecf9170a4ee64dddc3ee7ce4c03"], 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x4, 0x1}, 0x50)
r3 = socket$inet6(0xa, 0x80002, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r3}, 0x20)
r4 = openat$sw_sync(0xffffff9c, &(0x7f0000000080), 0x80800, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0x0, "e89c5b0900f8ff0000000007000000000000005b00", <r5=>0xffffffffffffffff})
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)={0x30000000})
read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101)
r9 = dup2(r8, r1)
write$binfmt_register(r9, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x6, 0x3a, '', 0x3a, 'wfdnok[<\xf3\x18\'\xb0\x9aV\xfb2\xb2\xf5\xb0(Q\xed\xffA\xc7\xf6\a\xeeM\n\x83\xac\xcdV\xe0M\xfb\x8ayet\xbd\xeb\x8d{s\x87N\x01u\x97j\xff\x01Q\x12\xa1\x18Z\xe2\xd7)\xe1\xc5\xce\xa4n3Jf\xf7\xb7\xed)R\xbee+\xaa\xf1\x88\xb4\xd3qK\x19\xff\x80\xb7\x83\v\xac2\x81\x05|\v\xa3q\xc2\xfcj\x1d86\xd7\x946\xd4\x0e\x10\xe8\x11P\xf9\xe2\xb7\xa0\x95\x7f\x10\x12\xcd\xa6\x15\x12\xe8#\x00\x00\x00\x00\x00\x00\x00', 0x3a, './file0', 0x3a, [0x4f, 0x50, 0x4f, 0x46, 0x4f, 0x46, 0x43, 0x50, 0x43, 0x59]}, 0xb8)
pipe(&(0x7f0000000240))
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1200800, &(0x7f0000000600)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d78fa42012c666f7263652c6769643d", @ANYRESOCT, @ANYRESOCT, @ANYRESHEX=0x0, @ANYBLOB], 0x3, 0x6c7, &(0x7f0000001500)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0x6, &(0x7f0000000180)={0x6, 0x4}, 0x0)
r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r10, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x7, 0x0, 0x7, 0x0})
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)

3.407455143s ago: executing program 2 (id=148):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (fail_nth: 3)

3.341898405s ago: executing program 3 (id=149):
r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0xfffd, 0x2)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000003c0)={0xe0, 0x10, 0x50b, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc926777b669fe21edd422f2b00af873396e40f901957178d198fe05a652a16bdc714b0fc11109def305477b78db0208c2568dd44afb60e3e5a625475384f80c3187879feb486ad6852bc35ea97d8de2fb125ab05a499ff81125fd8c31339e957212a6cb9616fbba5916887b46a32dbdd9e90649bf694148fe9d7de07c14a556591744c824d4bbfd8ca6f840b2f090e04572f89e62eff6bbbe7cf63722d50e67060a24dfc935ad24236b3ceae26f051e044ddd6414291105bb0eeee188396f326e"]}, 0xe0}], 0x1}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xaa039, 0x0, 0xfe, 0x0, &(0x7f0000000240))
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000002c0)={0x4, 0x0, 0x1, 0x100000, 0x8, 0x3, 0x0, 0x72, 0x4040c405})
rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00')
getdents64(r3, &(0x7f0000002080)=""/4108, 0x100c)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
unshare(0x4bd9975dcff3bd89)
bind$inet6(r2, 0x0, 0x0)
r4 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x25e000, 0x0)
ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000040)=0x1)
ioctl$PPPIOCSFLAGS1(r5, 0x40047459, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0xfffffeb8, 0x20, 0x2, {0x1, @vbi={0x7, 0x101, 0x8000, 0x47504a4d, [0x4, 0x2d], [0x3, 0xe51d], 0x1}}, 0x1})

3.257124146s ago: executing program 0 (id=150):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00b20054942265ed59235699a175654111dda0f9c4a0f0fa24a24a895c6b4aaa964bd1aa9974d6311882be9fc6c6b6141df8d09ae1848c235295"], 0x1, 0x15d, &(0x7f0000000800)="$eJzs281KAmEUxvFn/M6+LGsTLYQWtclJpQ93dRvtRCeRxpJsowTRtrvo/grqBjIcnAlHITCayfH/W53Hw4tnFq8eFwrAwiqoIEOGksOwm8k95o2wRwIQkIGkzwGAxRR/d6vncAcBELC3C6kj6fXjoa54cmI/GPbP3X4sNdl/knYSo76RVsa/X7xI++55Y2nq+azXz07tH+y577+sFa1qTevKaUObo37DO7/9y20IWCyGiv489kJMVy3bOvJy0sklL6ecXPblipfTTi7Wb+3GXz0CgBnFfrj/cd/9T/juP4D51e31r2u2bd1FrUjpX4xBQTGfxegD4nLyNz+AaDDv2x2z2+sfttq1ptW0bspn5epJ5bh0WjWdzd8c3/8BRMf3l37YkwAAAAAAAAAAAAAAgFnltRX2CAAAAAACEsTficJ+RgAAAAAAAAAAAAAAAAAAACAqvgIAAP//rm0kLg==")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0)

847.565213ms ago: executing program 0 (id=151):
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20088004)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f320908400f300f0826f30fc7b2050000000f32660fc775022e0ffa600c980f320f3566b857000f00d0", 0x56}], 0x1, 0x15, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0)
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000380)={0x1, 0x0, 0x7})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

558.438459ms ago: executing program 3 (id=152):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
getdents64(r2, &(0x7f0000001f00)=""/4093, 0xffd)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0)
ioctl$SNDCTL_SEQ_SYNC(r3, 0x5101)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x101000, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r6, 0xc004ae02, &(0x7f0000000080))
ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[])

399.220652ms ago: executing program 2 (id=153):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, r2, 0x25, 0x4, @val=@tcx={@void, @value=r0}}, 0x1c)
socket$tipc(0x1e, 0x5, 0x0) (async)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r3, 0x0)
socket$tipc(0x1e, 0x5, 0x0) (async)
r4 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r4, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x0) (async)
sendmsg$tipc(r4, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x0)
connect$tipc(r4, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x40}, 0x2}}, 0x10)
accept4(r3, 0x0, 0x0, 0x0) (async)
accept4(r3, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000980)={@local, @random="4a26292432ca", @void, {@ipv6={0x86dd, @tipc_packet={0xe, 0x6, "e0fef6", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, {[], @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x1, 0x6, 0x1, 0x2, 0x400, 0x0, 0x1, 0xe, 0x4, 0x0, 0x8, 0x600, 0x1, 0x4e20, 0x4e22}}}}}}}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x6, 0x23, 0x0, 0x1, 0x3}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1}, 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1}, 0x50)
close(0x3)
socket$inet6(0xa, 0x80003, 0xff) (async)
r7 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
r8 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r8, 0x29, 0x16, &(0x7f0000fcb000), 0x4) (async)
setsockopt$inet6_int(r8, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
close(r8)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9}, &(0x7f0000000240), &(0x7f0000000280)=r11}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9}, &(0x7f0000000240), &(0x7f0000000280)=r11}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r11}, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r12=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r12, {}, {}, {0xfff3}}}, 0x24}}, 0x0)

0s ago: executing program 0 (id=154):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000040000000800000001"], 0x48)
unshare(0x600)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.168' (ED25519) to the list of known hosts.
[   64.709127][ T5773] cgroup: Unknown subsys name 'net'
[   64.850463][ T5773] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   66.188662][ T5773] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   68.085440][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   68.104985][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   68.124225][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   68.132453][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   68.140438][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   68.164044][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   68.215889][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   68.228357][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   68.254148][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   68.262675][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   68.270889][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   68.281257][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   68.288964][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   68.297731][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   68.305638][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   68.313899][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   68.339434][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   68.348745][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   68.356072][ T5106] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   68.363672][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   68.372632][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   68.374568][ T5106] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   68.393992][ T5106] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   68.401497][ T5106] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   68.655590][ T5783] chnl_net:caif_netlink_parms(): no params data found
[   68.850001][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.857935][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.865312][ T5783] bridge_slave_0: entered allmulticast mode
[   68.872831][ T5783] bridge_slave_0: entered promiscuous mode
[   68.901031][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.923969][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.931420][ T5783] bridge_slave_1: entered allmulticast mode
[   68.939154][ T5783] bridge_slave_1: entered promiscuous mode
[   68.960081][ T5786] chnl_net:caif_netlink_parms(): no params data found
[   69.005922][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.015130][ T5788] chnl_net:caif_netlink_parms(): no params data found
[   69.031610][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.040886][ T5792] chnl_net:caif_netlink_parms(): no params data found
[   69.102830][ T5783] team0: Port device team_slave_0 added
[   69.139569][ T5783] team0: Port device team_slave_1 added
[   69.202699][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.211022][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.218500][ T5786] bridge_slave_0: entered allmulticast mode
[   69.225741][ T5786] bridge_slave_0: entered promiscuous mode
[   69.233314][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.240813][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.267188][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.302351][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.309775][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.316987][ T5786] bridge_slave_1: entered allmulticast mode
[   69.323656][ T5786] bridge_slave_1: entered promiscuous mode
[   69.331244][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.338320][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.365145][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.398196][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.405427][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.412540][ T5788] bridge_slave_0: entered allmulticast mode
[   69.419356][ T5788] bridge_slave_0: entered promiscuous mode
[   69.453972][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.461105][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.468767][ T5792] bridge_slave_0: entered allmulticast mode
[   69.476344][ T5792] bridge_slave_0: entered promiscuous mode
[   69.483226][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.490770][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.498169][ T5788] bridge_slave_1: entered allmulticast mode
[   69.505179][ T5788] bridge_slave_1: entered promiscuous mode
[   69.524312][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.547196][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.554424][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.561621][ T5792] bridge_slave_1: entered allmulticast mode
[   69.568911][ T5792] bridge_slave_1: entered promiscuous mode
[   69.600460][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.643527][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.667642][ T5783] hsr_slave_0: entered promiscuous mode
[   69.674329][ T5783] hsr_slave_1: entered promiscuous mode
[   69.682865][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.695049][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.705765][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.717686][ T5786] team0: Port device team_slave_0 added
[   69.777910][ T5786] team0: Port device team_slave_1 added
[   69.802221][ T5792] team0: Port device team_slave_0 added
[   69.812023][ T5792] team0: Port device team_slave_1 added
[   69.820763][ T5788] team0: Port device team_slave_0 added
[   69.829217][ T5788] team0: Port device team_slave_1 added
[   69.882588][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.889675][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.917349][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.953243][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.960843][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.987602][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.999646][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.006722][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.033008][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.066225][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.073216][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.099326][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.122318][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.129690][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.155797][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.181472][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.188591][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.214773][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.225542][ T5106] Bluetooth: hci0: command tx timeout
[   70.267847][ T5786] hsr_slave_0: entered promiscuous mode
[   70.274518][ T5786] hsr_slave_1: entered promiscuous mode
[   70.280762][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.288641][ T5786] Cannot create hsr debugfs directory
[   70.316420][ T5792] hsr_slave_0: entered promiscuous mode
[   70.322714][ T5792] hsr_slave_1: entered promiscuous mode
[   70.329218][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.336923][ T5792] Cannot create hsr debugfs directory
[   70.374636][ T5106] Bluetooth: hci1: command tx timeout
[   70.414538][ T5788] hsr_slave_0: entered promiscuous mode
[   70.420719][ T5788] hsr_slave_1: entered promiscuous mode
[   70.427235][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.435889][ T5788] Cannot create hsr debugfs directory
[   70.454230][ T5106] Bluetooth: hci2: command tx timeout
[   70.458635][   T50] Bluetooth: hci3: command tx timeout
[   70.719691][ T5783] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   70.747849][ T5783] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   70.762475][ T5783] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   70.773154][ T5783] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   70.803400][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   70.816312][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   70.841684][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   70.853390][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   70.911618][ T5792] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   70.932233][ T5792] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   70.941516][ T5792] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   70.968776][ T5792] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   71.020041][ T5788] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.033094][ T5788] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.053507][ T5788] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.063495][ T5788] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   71.219629][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.251251][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.287789][ T5786] 8021q: adding VLAN 0 to HW filter on device team0
[   71.300592][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.308381][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.321593][ T5783] 8021q: adding VLAN 0 to HW filter on device team0
[   71.346960][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.358557][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.365687][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.375259][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.382358][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.419715][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.426936][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.441010][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.479338][ T5788] 8021q: adding VLAN 0 to HW filter on device team0
[   71.509201][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.516402][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.537353][ T5792] 8021q: adding VLAN 0 to HW filter on device team0
[   71.555940][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.563048][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.580989][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[   71.587741][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[   71.635557][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.642739][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.680193][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.687397][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.879190][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.992351][ T5786] veth0_vlan: entered promiscuous mode
[   72.023666][ T5786] veth1_vlan: entered promiscuous mode
[   72.120210][ T5786] veth0_macvtap: entered promiscuous mode
[   72.149163][ T5786] veth1_macvtap: entered promiscuous mode
[   72.177124][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.210481][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.230795][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.244859][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.281518][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.292788][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.303988][   T50] Bluetooth: hci0: command tx timeout
[   72.309461][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.318268][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.327016][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.412458][ T5783] veth0_vlan: entered promiscuous mode
[   72.425313][ T5788] veth0_vlan: entered promiscuous mode
[   72.440190][ T5783] veth1_vlan: entered promiscuous mode
[   72.455814][   T50] Bluetooth: hci1: command tx timeout
[   72.462198][ T5788] veth1_vlan: entered promiscuous mode
[   72.534742][   T50] Bluetooth: hci2: command tx timeout
[   72.540189][   T50] Bluetooth: hci3: command tx timeout
[   72.541796][ T5792] veth0_vlan: entered promiscuous mode
[   72.559414][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.561989][ T5783] veth0_macvtap: entered promiscuous mode
[   72.578448][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.603628][ T5783] veth1_macvtap: entered promiscuous mode
[   72.644945][ T5788] veth0_macvtap: entered promiscuous mode
[   72.651969][ T5792] veth1_vlan: entered promiscuous mode
[   72.660782][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.671115][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.671246][ T5788] veth1_macvtap: entered promiscuous mode
[   72.692794][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.705660][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.718300][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.740672][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.752215][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.764006][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.790195][ T5792] veth0_macvtap: entered promiscuous mode
[   72.805557][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.817571][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.827888][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.838379][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.849692][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.864633][ T5792] veth1_macvtap: entered promiscuous mode
[   72.875056][ T5783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.885126][ T5783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.895096][ T5783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.904459][ T5783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.918306][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.933409][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.968461][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.984771][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.997062][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.000937][ T5788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.001099][ T5788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.001122][ T5788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.001144][ T5788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.042110][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.080956][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.091265][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.102500][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.103297][ T5871] syz.3.4[5871]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   73.114059][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.133939][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.146268][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.235734][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.246287][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.251106][ T5871] loop3: detected capacity change from 0 to 4096
[   73.256918][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.278498][ T5871] ntfs: (device loop3): ntfs_attr_find(): Inode is corrupt.  Run chkdsk.
[   73.287793][ T5871] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x0 as bad.  Run chkdsk.
[   73.288785][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.313254][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.313434][ T5871] ntfs: (device loop3): ntfs_read_inode_mount(): ntfs_read_inode() of $MFT failed. BUG or corrupt $MFT. Run chkdsk and if no errors are found, please report you saw this message to linux-ntfs-dev@lists.sourceforge.net
[   73.324879][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.352188][ T5871] ntfs: (device loop3): ntfs_fill_super(): Failed to load essential metadata.
[   73.394908][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.437778][ T5792] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.448662][ T5871] netlink: 'syz.3.4': attribute type 1 has an invalid length.
[   73.453838][ T5792] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.465530][ T5792] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.466243][ T5871] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4'.
[   73.474815][ T5792] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.561703][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.572915][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.641469][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.660494][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.706663][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.737725][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.780601][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.808305][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.848612][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.879326][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.021507][ T2924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.047152][ T2924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.113471][ T5880] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2'.
[   74.374892][   T50] Bluetooth: hci0: command tx timeout
[   74.399428][ T5892] loop2: detected capacity change from 0 to 64
[   74.560651][   T50] Bluetooth: hci1: command tx timeout
[   74.621527][ T5892] overlayfs: missing 'lowerdir'
[   74.628244][ T5106] Bluetooth: hci2: command tx timeout
[   74.634956][   T50] Bluetooth: hci3: command tx timeout
[   75.486730][ T5880] loop1: detected capacity change from 0 to 8192
[   75.558079][ T5882] loop0: detected capacity change from 0 to 4096
[   75.626901][ T5880] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   75.728120][ T5880] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[   75.768883][ T5880] REISERFS (device loop1): using ordered data mode
[   75.795165][ T5880] reiserfs: using flush barriers
[   75.850307][ T5880] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   75.930014][ T5880] REISERFS (device loop1): checking transaction log (loop1)
[   76.050838][ T5900] loop3: detected capacity change from 0 to 128
[   76.093956][ T5900] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   76.123766][    C0] sched: RT throttling activated
[   76.224757][ T5900] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   76.266775][ T5880] REISERFS (device loop1): Using tea hash to sort names
[   76.278622][ T5880] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[   76.455011][   T50] Bluetooth: hci0: command tx timeout
[   76.499845][ T5778] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   76.614142][   T50] Bluetooth: hci1: command tx timeout
[   76.680289][ T5908] vlan2: entered allmulticast mode
[   76.686165][ T5908] erspan0: entered allmulticast mode
[   76.695101][   T50] Bluetooth: hci3: command tx timeout
[   76.700670][ T5106] Bluetooth: hci2: command tx timeout
[   76.813451][ T5882] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org.
[   77.712064][ T5925] loop3: detected capacity change from 0 to 1024
[   77.764376][ T5925] hfsplus: failed to load attributes file
[   77.885717][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15'.
[   78.061920][ T5929] netlink: 72 bytes leftover after parsing attributes in process `syz.3.15'.
[   78.199716][ T5940] loop1: detected capacity change from 0 to 512
[   78.276553][ T5940] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   78.324967][ T5942] xt_hashlimit: max too large, truncated to 1048576
[   78.354767][ T5940] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   78.442439][ T5940] EXT4-fs (loop1): 1 truncate cleaned up
[   78.458089][ T5940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.654650][ T5940] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.1.17: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[   78.737178][ T5940] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem
[   78.777933][ T5940] EXT4-fs warning (device loop1): ext4_rename_delete:3778: inode #2: comm syz.1.17: Deleting old file: nlink 4, error=-117
[   78.826201][ T5952] VFS: Lookup of 'file0' in ext4 loop1 would have caused loop
[   79.073641][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.543692][ T5978] loop0: detected capacity change from 0 to 512
[   79.608807][ T5978] ext4: Unknown parameter 'H À'
[   79.687340][ T5794] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   80.089945][ T5999] loop1: detected capacity change from 0 to 64
[   80.106137][ T5996] FAULT_INJECTION: forcing a failure.
[   80.106137][ T5996] name failslab, interval 1, probability 0, space 0, times 1
[   80.148175][ T5999] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   80.157278][ T5999] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   80.203191][ T5996] CPU: 1 PID: 5996 Comm: syz.2.27 Not tainted syzkaller #0
[   80.210445][ T5996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   80.220524][ T5996] Call Trace:
[   80.223810][ T5996]  <TASK>
[   80.226761][ T5996]  dump_stack_lvl+0x16c/0x230
[   80.231463][ T5996]  ? show_regs_print_info+0x20/0x20
[   80.236669][ T5996]  ? load_image+0x3b0/0x3b0
[   80.241180][ T5996]  ? __might_sleep+0xe0/0xe0
[   80.245786][ T5996]  ? __lock_acquire+0x7c80/0x7c80
[   80.250825][ T5996]  should_fail_ex+0x39d/0x4d0
[   80.255521][ T5996]  should_failslab+0x9/0x20
[   80.260035][ T5996]  slab_pre_alloc_hook+0x59/0x310
[   80.265068][ T5996]  ? sock_kmalloc+0x96/0xf0
[   80.269585][ T5996]  ? sock_kmalloc+0x96/0xf0
[   80.274096][ T5996]  __kmem_cache_alloc_node+0x53/0x260
[   80.279485][ T5996]  ? sock_kmalloc+0x96/0xf0
[   80.284171][ T5996]  __kmalloc+0xa4/0x240
[   80.288339][ T5996]  sock_kmalloc+0x96/0xf0
[   80.292683][ T5996]  af_alg_sendmsg+0xfdd/0x22c0
[   80.297480][ T5996]  ? af_alg_wait_for_data+0x710/0x710
[   80.302863][ T5996]  ? aa_af_perm+0x2b0/0x2b0
[   80.307374][ T5996]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[   80.313803][ T5996]  ? __might_fault+0xaa/0x120
[   80.318483][ T5996]  ? aa_sock_msg_perm+0x94/0x150
[   80.323429][ T5996]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[   80.328724][ T5996]  ? skcipher_sendmsg+0x26/0xf0
[   80.333589][ T5996]  __sys_sendto+0x46a/0x620
[   80.338109][ T5996]  ? __ia32_sys_getpeername+0x90/0x90
[   80.343502][ T5996]  ? __lock_acquire+0x7c80/0x7c80
[   80.348546][ T5996]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[   80.354537][ T5996]  ? lock_chain_count+0x20/0x20
[   80.359392][ T5996]  ? lock_chain_count+0x20/0x20
[   80.364257][ T5996]  __x64_sys_sendto+0xde/0xf0
[   80.368948][ T5996]  do_syscall_64+0x55/0xb0
[   80.373371][ T5996]  ? clear_bhb_loop+0x40/0x90
[   80.378055][ T5996]  ? clear_bhb_loop+0x40/0x90
[   80.382737][ T5996]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   80.388645][ T5996] RIP: 0033:0x7ff058990a3c
[   80.393063][ T5996] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[   80.412681][ T5996] RSP: 002b:00007ff0597c4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[   80.421105][ T5996] RAX: ffffffffffffffda RBX: 00007ff0597c4fc0 RCX: 00007ff058990a3c
[   80.429084][ T5996] RDX: 0000000000000020 RSI: 00007ff0597c5010 RDI: 0000000000000004
[   80.437075][ T5996] RBP: 0000000000000000 R08: 00007ff0597c4f14 R09: 000000000000000c
[   80.445072][ T5996] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004
[   80.453056][ T5996] R13: 00007ff0597c4f68 R14: 00007ff0597c5010 R15: 0000000000000000
[   80.461061][ T5996]  </TASK>
[   80.962350][ T6005] capability: warning: `syz.3.28' uses deprecated v2 capabilities in a way that may be insecure
[   80.998288][ T6000] trusted_key: syz.2.27 sent an empty control message without MSG_MORE.
[   81.100054][   T50] Bluetooth: hci3: command tx timeout
[   81.832408][   T23] cfg80211: failed to load regulatory.db
[   82.698408][ T6072] sctp: [Deprecated]: syz.0.34 (pid 6072) Use of int in max_burst socket option deprecated.
[   82.698408][ T6072] Use struct sctp_assoc_value instead
[   82.753584][ T6074] FAULT_INJECTION: forcing a failure.
[   82.753584][ T6074] name failslab, interval 1, probability 0, space 0, times 0
[   82.782752][ T6074] CPU: 0 PID: 6074 Comm: syz.1.35 Not tainted syzkaller #0
[   82.790008][ T6074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   82.800074][ T6074] Call Trace:
[   82.803345][ T6074]  <TASK>
[   82.806266][ T6074]  dump_stack_lvl+0x16c/0x230
[   82.810950][ T6074]  ? show_regs_print_info+0x20/0x20
[   82.816137][ T6074]  ? load_image+0x3b0/0x3b0
[   82.820631][ T6074]  ? __might_sleep+0xe0/0xe0
[   82.825210][ T6074]  ? __lock_acquire+0x7c80/0x7c80
[   82.830227][ T6074]  should_fail_ex+0x39d/0x4d0
[   82.834897][ T6074]  should_failslab+0x9/0x20
[   82.839391][ T6074]  slab_pre_alloc_hook+0x59/0x310
[   82.844407][ T6074]  ? sock_kmalloc+0x96/0xf0
[   82.848900][ T6074]  ? sock_kmalloc+0x96/0xf0
[   82.853389][ T6074]  __kmem_cache_alloc_node+0x53/0x260
[   82.858758][ T6074]  ? sock_kmalloc+0x96/0xf0
[   82.863251][ T6074]  __kmalloc+0xa4/0x240
[   82.867401][ T6074]  sock_kmalloc+0x96/0xf0
[   82.871722][ T6074]  af_alg_sendmsg+0xfdd/0x22c0
[   82.876502][ T6074]  ? af_alg_wait_for_data+0x710/0x710
[   82.881866][ T6074]  ? aa_af_perm+0x2b0/0x2b0
[   82.886360][ T6074]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[   82.892797][ T6074]  ? __might_fault+0xaa/0x120
[   82.897459][ T6074]  ? aa_sock_msg_perm+0x94/0x150
[   82.902384][ T6074]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[   82.907659][ T6074]  ? skcipher_sendmsg+0x26/0xf0
[   82.912495][ T6074]  __sys_sendto+0x46a/0x620
[   82.916993][ T6074]  ? __ia32_sys_getpeername+0x90/0x90
[   82.922380][ T6074]  ? __lock_acquire+0x7c80/0x7c80
[   82.927401][ T6074]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[   82.933368][ T6074]  ? lock_chain_count+0x20/0x20
[   82.938208][ T6074]  ? lock_chain_count+0x20/0x20
[   82.943046][ T6074]  __x64_sys_sendto+0xde/0xf0
[   82.947715][ T6074]  do_syscall_64+0x55/0xb0
[   82.952120][ T6074]  ? clear_bhb_loop+0x40/0x90
[   82.956782][ T6074]  ? clear_bhb_loop+0x40/0x90
[   82.961445][ T6074]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   82.967331][ T6074] RIP: 0033:0x7fccd2790a3c
[   82.971733][ T6074] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[   82.991332][ T6074] RSP: 002b:00007fccd3618ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[   82.999739][ T6074] RAX: ffffffffffffffda RBX: 00007fccd3618fc0 RCX: 00007fccd2790a3c
[   83.007702][ T6074] RDX: 0000000000000020 RSI: 00007fccd3619010 RDI: 0000000000000004
[   83.015663][ T6074] RBP: 0000000000000000 R08: 00007fccd3618f14 R09: 000000000000000c
[   83.023619][ T6074] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004
[   83.031577][ T6074] R13: 00007fccd3618f68 R14: 00007fccd3619010 R15: 0000000000000000
[   83.039549][ T6074]  </TASK>
[   83.194996][ T6080] loop1: detected capacity change from 0 to 256
[   83.261157][ T6080] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x50a6a7f9, utbl_chksum : 0xe619d30d)
[   83.572013][ T6088] loop1: detected capacity change from 0 to 64
[   83.623947][ T6088] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   83.632942][ T6088] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   84.035701][ T6090] xt_hashlimit: max too large, truncated to 1048576
[   85.788709][ T6103] loop3: detected capacity change from 0 to 256
[   85.806235][ T6103] FAT-fs (loop3): Unrecognized mount option "000000000000000000000030x0000000000000000" or missing value
[   85.838683][ T5775] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   85.859334][ T6103] overlayfs: failed to resolve './file0': -2
[   86.014258][ T5851] IPVS: starting estimator thread 0...
[   86.057901][ T5775] usb 1-1: Using ep0 maxpacket: 16
[   86.077743][ T5775] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[   86.104044][ T5775] usb 1-1: config 0 has no interface number 0
[   86.110186][ T5775] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[   86.124215][ T6111] IPVS: using max 21 ests per chain, 50400 per kthread
[   86.130395][ T5775] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   86.172605][ T5775] usb 1-1: config 0 interface 41 has no altsetting 0
[   86.195963][ T5775] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[   86.208917][ T6108] loop3: detected capacity change from 0 to 1764
[   86.237728][ T5775] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.271563][ T5775] usb 1-1: Product: syz
[   86.281685][ T5775] usb 1-1: Manufacturer: syz
[   86.299778][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   86.314288][ T5794] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   86.315455][ T5775] usb 1-1: SerialNumber: syz
[   86.369084][ T5775] usb 1-1: config 0 descriptor??
[   86.391706][ T6099] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   86.414985][ T6099] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   86.649282][ T6099] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   86.727750][ T5775] CoreChips: probe of 1-1:0.41 failed with error -71
[   86.769537][ T5775] usb 1-1: USB disconnect, device number 2
[   87.043018][ T6107] loop2: detected capacity change from 0 to 32768
[   87.278651][ T6107] (syz.2.45,6107,0):ocfs2_load_local_alloc:319 ERROR: Local alloc size is invalid (la_size = 33328)
[   87.319729][ T6128] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   87.361341][ T6107] (syz.2.45,6107,0):ocfs2_load_local_alloc:355 ERROR: status = -22
[   87.374186][ T6107] (syz.2.45,6107,1):ocfs2_check_volume:2462 ERROR: status = -22
[   87.383261][ T6107] (syz.2.45,6107,1):ocfs2_check_volume:2490 ERROR: status = -22
[   87.395607][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   87.404034][ T6128] loop0: detected capacity change from 0 to 2048
[   87.411882][ T6107] (syz.2.45,6107,1):ocfs2_mount_volume:1822 ERROR: status = -22
[   87.434089][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   87.456449][ T6128] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[   87.467863][ T6107] (syz.2.45,6107,1):ocfs2_fill_super:1178 ERROR: status = -22
[   87.495465][ T6128] NILFS (loop0): mounting unchecked fs
[   87.547087][ T5776] udevd[5776]: incorrect nilfs2 checksum on /dev/loop0
[   87.583514][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   87.695750][ T6128] NILFS (loop0): recovery complete
[   87.723230][ T6133] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   87.879055][ T6137] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[   87.924372][ T5775] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   87.944502][ T6137] Remounting filesystem read-only
[   87.953159][ T6138] x_tables: ip_tables: ah match: only valid for protocol 51
[   87.982323][ T6128] syz.0.48 (6128) used greatest stack depth: 19440 bytes left
[   88.161571][ T5775] usb 3-1: unable to get BOS descriptor or descriptor too short
[   88.173289][ T5775] usb 3-1: not running at top speed; connect to a high speed hub
[   88.197332][ T6144] loop3: detected capacity change from 0 to 64
[   88.248764][ T6144] overlayfs: missing 'lowerdir'
[   88.338128][ T5775] usb 3-1: config 5 has an invalid interface number: 246 but max is 0
[   88.474195][ T5775] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[   88.680821][ T5775] usb 3-1: config 5 has no interface number 0
[   88.844678][ T5775] usb 3-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 255, setting to 64
[   89.052660][ T5775] usb 3-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   89.135230][ T5775] usb 3-1: config 5 interface 246 has no altsetting 0
[   89.188719][ T5775] usb 3-1: string descriptor 0 read error: -71
[   89.213006][ T5775] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4
[   89.269488][ T5775] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.354049][ T5775] usb 3-1: can't set config #5, error -71
[   89.385256][ T5775] usb 3-1: USB disconnect, device number 2
[   89.955217][ T6150] loop1: detected capacity change from 0 to 32768
[   89.980573][ T6150] =======================================================
[   89.980573][ T6150] WARNING: The mand mount option has been deprecated and
[   89.980573][ T6150]          and is ignored by this kernel. Remove the mand
[   89.980573][ T6150]          option from the mount to silence this warning.
[   89.980573][ T6150] =======================================================
[   90.033259][ T6154] xt_hashlimit: max too large, truncated to 1048576
[   90.055389][ T6150] XFS: noattr2 mount option is deprecated.
[   90.210090][ T6150] XFS (loop1): Cannot mount a V5 filesystem as noattr2. attr2 is always enabled for V5 filesystems.
[   90.808856][ T6171] FAULT_INJECTION: forcing a failure.
[   90.808856][ T6171] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   90.842484][ T6171] CPU: 0 PID: 6171 Comm: syz.0.57 Not tainted syzkaller #0
[   90.849791][ T6171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   90.859863][ T6171] Call Trace:
[   90.863156][ T6171]  <TASK>
[   90.866090][ T6171]  dump_stack_lvl+0x16c/0x230
[   90.870786][ T6171]  ? show_regs_print_info+0x20/0x20
[   90.875994][ T6171]  ? load_image+0x3b0/0x3b0
[   90.880504][ T6171]  ? __might_fault+0xaa/0x120
[   90.885201][ T6171]  ? __lock_acquire+0x7c80/0x7c80
[   90.890228][ T6171]  ? do_vfs_ioctl+0xd31/0x1bb0
[   90.895011][ T6171]  should_fail_ex+0x39d/0x4d0
[   90.899710][ T6171]  _copy_from_user+0x2f/0xe0
[   90.904318][ T6171]  kvm_vm_ioctl+0x491/0xa60
[   90.908834][ T6171]  ? kvm_device_release+0x200/0x200
[   90.914045][ T6171]  ? __kmem_cache_free+0xba/0x1f0
[   90.919088][ T6171]  ? tomoyo_path_number_perm+0x4dc/0x590
[   90.924731][ T6171]  ? tomoyo_path_number_perm+0x1ba/0x590
[   90.930383][ T6171]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[   90.935897][ T6171]  ? __fget_files+0x28/0x4d0
[   90.940516][ T6171]  ? bpf_lsm_file_ioctl+0x9/0x10
[   90.945464][ T6171]  ? security_file_ioctl+0x80/0xa0
[   90.950606][ T6171]  ? kvm_device_release+0x200/0x200
[   90.955829][ T6171]  __se_sys_ioctl+0xfd/0x170
[   90.960461][ T6171]  do_syscall_64+0x55/0xb0
[   90.964902][ T6171]  ? clear_bhb_loop+0x40/0x90
[   90.969600][ T6171]  ? clear_bhb_loop+0x40/0x90
[   90.974293][ T6171]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   90.980295][ T6171] RIP: 0033:0x7ff92f98eba9
[   90.984724][ T6171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   91.004352][ T6171] RSP: 002b:00007ff9308d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   91.012789][ T6171] RAX: ffffffffffffffda RBX: 00007ff92fbd5fa0 RCX: 00007ff92f98eba9
[   91.020777][ T6171] RDX: 0000200000000300 RSI: 000000004020ae76 RDI: 0000000000000004
[   91.028762][ T6171] RBP: 00007ff9308d7090 R08: 0000000000000000 R09: 0000000000000000
[   91.037188][ T6171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   91.045174][ T6171] R13: 00007ff92fbd6038 R14: 00007ff92fbd5fa0 R15: 00007ffc25a178c8
[   91.053181][ T6171]  </TASK>
[   91.057540][ T5838] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   91.244087][ T5838] usb 2-1: Using ep0 maxpacket: 8
[   91.252541][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   91.268674][ T5838] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   91.296526][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.329349][ T5838] usb 2-1: config 0 descriptor??
[   91.645277][ T5838] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[   91.828472][ T5838] usb 2-1: USB disconnect, device number 2
[   91.828533][    C0] iowarrior 2-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19
[   92.134869][ T6193] FAULT_INJECTION: forcing a failure.
[   92.134869][ T6193] name failslab, interval 1, probability 0, space 0, times 0
[   92.148030][ T6193] CPU: 0 PID: 6193 Comm: syz.0.64 Not tainted syzkaller #0
[   92.155255][ T6193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   92.165329][ T6193] Call Trace:
[   92.168667][ T6193]  <TASK>
[   92.171612][ T6193]  dump_stack_lvl+0x16c/0x230
[   92.176318][ T6193]  ? show_regs_print_info+0x20/0x20
[   92.181257][ T6190] loop3: detected capacity change from 0 to 4096
[   92.181518][ T6193]  ? load_image+0x3b0/0x3b0
[   92.192454][ T6193]  should_fail_ex+0x39d/0x4d0
[   92.197164][ T6193]  should_failslab+0x9/0x20
[   92.201687][ T6193]  slab_pre_alloc_hook+0x59/0x310
[   92.206732][ T6193]  ? io_cqring_event_overflow+0xd2/0x5b0
[   92.212387][ T6193]  ? io_cqring_event_overflow+0xd2/0x5b0
[   92.218040][ T6193]  __kmem_cache_alloc_node+0x53/0x260
[   92.223430][ T6193]  ? io_cqring_event_overflow+0xd2/0x5b0
[   92.229083][ T6193]  ? io_cqring_event_overflow+0xd2/0x5b0
[   92.234779][ T6193]  __kmalloc+0xa4/0x240
[   92.238959][ T6193]  io_cqring_event_overflow+0xd2/0x5b0
[   92.244448][ T6193]  io_req_cqe_overflow+0xf4/0x150
[   92.249498][ T6193]  __io_submit_flush_completions+0x246/0xc10
[   92.255499][ T6193]  ? io_issue_sqe+0x55c/0xc90
[   92.260202][ T6193]  io_submit_sqes+0x18b1/0x1d00
[   92.265069][ T6193]  ? __mutex_lock+0x304/0xcc0
[   92.269796][ T6193]  __se_sys_io_uring_enter+0x2de/0x22e0
[   92.275359][ T6193]  ? ksys_write+0x1c1/0x250
[   92.279882][ T6193]  ? __lock_acquire+0x7c80/0x7c80
[   92.284918][ T6193]  ? file_end_write+0x159/0x250
[   92.289770][ T6193]  ? vfs_write+0x586/0x940
[   92.294192][ T6193]  ? __x64_sys_io_uring_enter+0xf0/0xf0
[   92.299742][ T6193]  ? mutex_unlock+0x10/0x10
[   92.304253][ T6193]  ? __fget_files+0x44a/0x4d0
[   92.308930][ T6193]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[   92.316464][ T6193]  ? lock_chain_count+0x20/0x20
[   92.321307][ T6193]  ? __x64_sys_io_uring_enter+0x21/0xf0
[   92.326849][ T6193]  do_syscall_64+0x55/0xb0
[   92.331259][ T6193]  ? clear_bhb_loop+0x40/0x90
[   92.335921][ T6193]  ? clear_bhb_loop+0x40/0x90
[   92.340592][ T6193]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   92.346486][ T6193] RIP: 0033:0x7ff92f98eba9
[   92.350890][ T6193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   92.370489][ T6193] RSP: 002b:00007ff9308d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[   92.378891][ T6193] RAX: ffffffffffffffda RBX: 00007ff92fbd5fa0 RCX: 00007ff92f98eba9
[   92.386853][ T6193] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000
[   92.394808][ T6193] RBP: 00007ff9308d7090 R08: 0000000000000000 R09: 0000000000000000
[   92.402765][ T6193] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001
[   92.410727][ T6193] R13: 00007ff92fbd6038 R14: 00007ff92fbd5fa0 R15: 00007ffc25a178c8
[   92.418696][ T6193]  </TASK>
[   92.477109][ T6197] FAULT_INJECTION: forcing a failure.
[   92.477109][ T6197] name failslab, interval 1, probability 0, space 0, times 0
[   92.491160][ T6197] CPU: 0 PID: 6197 Comm: syz.2.66 Not tainted syzkaller #0
[   92.498403][ T6197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   92.508476][ T6197] Call Trace:
[   92.511773][ T6197]  <TASK>
[   92.514714][ T6197]  dump_stack_lvl+0x16c/0x230
[   92.519414][ T6197]  ? show_regs_print_info+0x20/0x20
[   92.524605][ T6197]  ? load_image+0x3b0/0x3b0
[   92.529187][ T6197]  ? __might_sleep+0xe0/0xe0
[   92.534202][ T6197]  ? __lock_acquire+0x7c80/0x7c80
[   92.539216][ T6197]  should_fail_ex+0x39d/0x4d0
[   92.543894][ T6197]  should_failslab+0x9/0x20
[   92.548472][ T6197]  slab_pre_alloc_hook+0x59/0x310
[   92.553491][ T6197]  ? get_user_pages_fast_only+0xa0/0xa0
[   92.559040][ T6197]  ? kvmalloc_node+0x70/0x180
[   92.563733][ T6197]  ? kvmalloc_node+0x70/0x180
[   92.568414][ T6197]  __kmem_cache_alloc_node+0x53/0x260
[   92.573810][ T6197]  ? kvmalloc_node+0x70/0x180
[   92.578497][ T6197]  __kmalloc_node+0xa4/0x230
[   92.583087][ T6197]  kvmalloc_node+0x70/0x180
[   92.587588][ T6197]  __kvm_mmu_topup_memory_cache+0x313/0x4a0
[   92.593490][ T6197]  kvm_mmu_load+0xa1/0x21f0
[   92.597998][ T6197]  ? folio_mark_accessed+0x2ec/0x1440
[   92.603363][ T6197]  ? pfn_valid+0xf4/0x450
[   92.607687][ T6197]  ? folio_activate_fn+0x1f60/0x1f60
[   92.612970][ T6197]  ? __vmx_interrupt_blocked+0x15b/0x200
[   92.618632][ T6197]  ? kvm_apic_accept_pic_intr+0x8d/0x130
[   92.624257][ T6197]  ? vmx_enable_irq_window+0x91/0x130
[   92.629620][ T6197]  vcpu_run+0x4998/0x73b0
[   92.633998][ T6197]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[   92.639971][ T6197]  ? signal_pending+0xa0/0xa0
[   92.644642][ T6197]  ? lock_chain_count+0x20/0x20
[   92.649497][ T6197]  ? read_lock_is_recursive+0x20/0x20
[   92.654864][ T6197]  ? rcu_is_watching+0x15/0xb0
[   92.659622][ T6197]  kvm_arch_vcpu_ioctl_run+0xe4b/0x16a0
[   92.665174][ T6197]  ? kvm_arch_vcpu_ioctl_run+0x1b0/0x16a0
[   92.670888][ T6197]  ? kvm_arch_guest_memory_reclaimed+0x20/0x20
[   92.677057][ T6197]  ? __mutex_trylock_common+0x153/0x250
[   92.682599][ T6197]  ? trace_raw_output_contention_end+0xd0/0xd0
[   92.688766][ T6197]  ? tomoyo_path_number_perm+0x1ba/0x590
[   92.694432][ T6197]  ? get_task_pid+0x22/0x300
[   92.699028][ T6197]  ? __lock_acquire+0x7c80/0x7c80
[   92.704045][ T6197]  ? mutex_lock_nested+0x20/0x20
[   92.708981][ T6197]  ? get_task_pid+0x22/0x300
[   92.713561][ T6197]  ? get_task_pid+0x22/0x300
[   92.718149][ T6197]  kvm_vcpu_ioctl+0x88b/0xb80
[   92.722825][ T6197]  ? xa_release+0x50/0x50
[   92.727169][ T6197]  ? __fget_files+0x28/0x4d0
[   92.731774][ T6197]  ? bpf_lsm_file_ioctl+0x9/0x10
[   92.736711][ T6197]  ? security_file_ioctl+0x80/0xa0
[   92.741820][ T6197]  ? xa_release+0x50/0x50
[   92.746141][ T6197]  __se_sys_ioctl+0xfd/0x170
[   92.750726][ T6197]  do_syscall_64+0x55/0xb0
[   92.755134][ T6197]  ? clear_bhb_loop+0x40/0x90
[   92.759805][ T6197]  ? clear_bhb_loop+0x40/0x90
[   92.764471][ T6197]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   92.770358][ T6197] RIP: 0033:0x7ff05898eba9
[   92.774765][ T6197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   92.794362][ T6197] RSP: 002b:00007ff0597c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   92.802766][ T6197] RAX: ffffffffffffffda RBX: 00007ff058bd5fa0 RCX: 00007ff05898eba9
[   92.810724][ T6197] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   92.818693][ T6197] RBP: 00007ff0597c6090 R08: 0000000000000000 R09: 0000000000000000
[   92.826654][ T6197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   92.834618][ T6197] R13: 00007ff058bd6038 R14: 00007ff058bd5fa0 R15: 00007ffe5a1f7278
[   92.842590][ T6197]  </TASK>
[   92.872059][ T6190] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[   92.937579][ T6190] ntfs3: loop3: Failed to load $Extend (-22).
[   92.952112][ T6190] ntfs3: loop3: Failed to initialize $Extend.
[   93.242329][ T6204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.68'.
[   93.277051][ T6204] warning: `syz.2.68' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   93.277816][ T6206] xt_hashlimit: max too large, truncated to 1048576
[   93.579242][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.71'.
[   93.602370][ T6213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.70'.
[   93.605814][ T6215] program syz.1.72 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   93.944134][ T5838] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   94.134544][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   94.240582][ T5838] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   94.311457][ T5838] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   94.467154][ T5838] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   94.571804][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.744085][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   94.856711][ T5838] usb 4-1: usb_control_msg returned -32
[   94.862631][ T5838] usbtmc 4-1:16.0: can't read capabilities
[   95.393586][ T6224] loop2: detected capacity change from 0 to 32768
[   95.440732][ T6224] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[   95.496364][   T27] audit: type=1800 audit(1758221754.284:2): pid=6224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.74" name="file1" dev="loop2" ino=17059 res=0 errno=0
[   95.694807][ T5851] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   95.723378][ T6228] loop1: detected capacity change from 0 to 40427
[   95.743097][ T5792] ocfs2: Unmounting device (7,2) on (node local)
[   95.745123][ T6228] F2FS-fs (loop1): build fault injection attr: rate: 25, type: 0x7ffff
[   95.802108][ T6228] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x7698c
[   95.847562][ T6228] F2FS-fs (loop1): invalid crc value
[   95.869377][ T6228] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1d6/0x920
[   95.895350][ T6228] F2FS-fs (loop1): Found nat_bits in checkpoint
[   95.897128][ T5851] usb 1-1: Using ep0 maxpacket: 32
[   95.911695][ T5851] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.925522][ T5851] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   95.946583][ T5851] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   95.965630][ T5851] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   95.977041][ T5851] usb 1-1: Product: syz
[   95.980945][ T6228] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920
[   95.981299][ T5851] usb 1-1: Manufacturer: syz
[   96.011434][ T5851] hub 1-1:4.0: USB hub found
[   96.020041][ T6236] loop2: detected capacity change from 0 to 256
[   96.071809][ T6228] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   96.110009][ T6228] F2FS-fs (loop1): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xda/0x1d0
[   96.111085][ T6236] FAT-fs (loop2): Directory bread(block 64) failed
[   96.145489][   T27] audit: type=1800 audit(1758221754.934:3): pid=6228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.76" name="file1" dev="loop1" ino=11 res=0 errno=0
[   96.173908][ T6236] FAT-fs (loop2): Directory bread(block 65) failed
[   96.178606][ T6228] F2FS-fs (loop1): inject no more block in inc_valid_block_count of f2fs_map_blocks+0x1289/0x3d60
[   96.188587][ T6236] FAT-fs (loop2): Directory bread(block 66) failed
[   96.201508][ T6228] syz.1.76: attempt to access beyond end of device
[   96.201508][ T6228] loop1: rw=34817, sector=77824, nr_sectors = 128 limit=40427
[   96.209218][ T6236] FAT-fs (loop2): Directory bread(block 67) failed
[   96.219554][ T5851] hub 1-1:4.0: 9 ports detected
[   96.233610][ T5851] hub 1-1:4.0: insufficient power available to use all downstream ports
[   96.234554][ T6236] FAT-fs (loop2): Directory bread(block 68) failed
[   96.255983][ T6228] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_truncate_data_blocks_range+0x5a6/0xd00
[   96.259672][ T6236] FAT-fs (loop2): Directory bread(block 69) failed
[   96.277209][ T6236] FAT-fs (loop2): Directory bread(block 70) failed
[   96.284213][ T6236] FAT-fs (loop2): Directory bread(block 71) failed
[   96.290983][ T6236] FAT-fs (loop2): Directory bread(block 72) failed
[   96.299561][ T6236] FAT-fs (loop2): Directory bread(block 73) failed
[   96.340824][ T5783] syz-executor: attempt to access beyond end of device
[   96.340824][ T5783] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   96.362821][ T5783] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   96.420893][ T5851] hub 1-1:4.0: hub_hub_status failed (err = -71)
[   96.427777][ T5851] hub 1-1:4.0: config failed, can't get hub status (err -71)
[   96.508384][ T5851] usb 1-1: USB disconnect, device number 3
[   96.707670][  T786] usb 4-1: USB disconnect, device number 2
[   97.061537][ T6244] loop2: detected capacity change from 0 to 32768
[   97.109559][ T6244]  loop2: p1 p2 p3 < p5 p6 >
[   97.128134][ T6244] loop2: p1 size 242222080 extends beyond EOD, truncated
[   97.153682][ T6244] loop2: p2 start 4294967295 is beyond EOD, truncated
[   97.194043][  T786] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   97.373243][ T6257] tipc: Started in network mode
[   97.388921][  T786] usb 4-1: Using ep0 maxpacket: 16
[   97.396600][ T6257] tipc: Node identity ac1414aa, cluster identity 4711
[   97.410141][  T786] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   97.431879][ T6257] tipc: Enabled bearer <udp:syz2>, priority 10
[   97.445182][  T786] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   97.470243][  T786] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   97.489119][  T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.509292][ T6257] bridge_slave_0: left allmulticast mode
[   97.520853][  T786] usb 4-1: Product: syz
[   97.527200][ T6257] bridge_slave_0: left promiscuous mode
[   97.538314][  T786] usb 4-1: Manufacturer: syz
[   97.549272][ T6257] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.560170][  T786] usb 4-1: SerialNumber: syz
[   97.598233][ T6249] loop1: detected capacity change from 0 to 32768
[   97.648311][ T6257] bridge_slave_1: left allmulticast mode
[   97.660284][ T6249]  loop1: p1 p2 p3 < p5 p6 >
[   97.672796][ T6261] loop0: detected capacity change from 0 to 164
[   97.675843][ T6249] loop1: p1 size 242222080 extends beyond EOD, 
[   97.691960][ T6257] bridge_slave_1: left promiscuous mode
[   97.699751][ T6249] truncated
[   97.704663][ T6257] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.744540][ T6249] loop1: p2 start 4294967295 is beyond EOD, truncated
[   97.764144][ T5794] udevd[5794]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   97.799037][ T6257] bond0: (slave bond_slave_0): Releasing backup interface
[   97.820795][ T6262] udevd[6262]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[   97.848878][  T786] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   97.852166][ T6263] udevd[6263]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory
[   97.894152][ T6257] bond0: (slave bond_slave_1): Releasing backup interface
[   97.895293][ T6264] udevd[6264]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory
[   97.924898][ T6261] loop0: detected capacity change from 164 to 0
[   98.008850][ T6257] team0: Failed to send options change via netlink (err -105)
[   98.053205][  T786] usb 4-1: USB disconnect, device number 3
[   98.074459][ T6257] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[   98.098564][ T6257] team0: Port device team_slave_0 removed
[   98.141518][ T5794] udevd[5794]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   98.236220][ T6257] team0: Port device team_slave_1 removed
[   98.256334][ T6257] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.283924][ T6257] batman_adv: batadv0: Removing interface: batadv_slave_0
[   98.316415][ T6257] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.337410][ T6264] udevd[6264]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory
[   98.337553][ T5794] udevd[5794]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   98.361185][ T6263] udevd[6263]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory
[   98.364377][ T6257] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.374794][ T5776] udevd[5776]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[   98.518829][ T6258] team0: Mode changed to "loadbalance"
[   98.554368][ T5775] tipc: Node number set to 2886997162
[   98.652658][ T6273] loop0: detected capacity change from 0 to 4096
[   98.675299][ T6273] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt.  Run chkdsk.
[   98.689863][ T6273] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x0 as bad.  Run chkdsk.
[   98.728566][ T6273] ntfs: (device loop0): ntfs_read_inode_mount(): ntfs_read_inode() of $MFT failed. BUG or corrupt $MFT. Run chkdsk and if no errors are found, please report you saw this message to linux-ntfs-dev@lists.sourceforge.net
[   98.790664][ T6273] ntfs: (device loop0): ntfs_fill_super(): Failed to load essential metadata.
[   98.857891][ T6273] netlink: 'syz.0.86': attribute type 1 has an invalid length.
[   98.886182][ T6273] netlink: 224 bytes leftover after parsing attributes in process `syz.0.86'.
[   99.231329][ T6292] FAULT_INJECTION: forcing a failure.
[   99.231329][ T6292] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   99.281199][ T6292] CPU: 0 PID: 6292 Comm: syz.2.90 Not tainted syzkaller #0
[   99.288453][ T6292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   99.298525][ T6292] Call Trace:
[   99.301822][ T6292]  <TASK>
[   99.304763][ T6292]  dump_stack_lvl+0x16c/0x230
[   99.309470][ T6292]  ? show_regs_print_info+0x20/0x20
[   99.314714][ T6292]  ? load_image+0x3b0/0x3b0
[   99.319235][ T6292]  ? __might_fault+0xaa/0x120
[   99.323963][ T6292]  ? __lock_acquire+0x7c80/0x7c80
[   99.329010][ T6292]  should_fail_ex+0x39d/0x4d0
[   99.333709][ T6292]  _copy_from_user+0x2f/0xe0
[   99.338316][ T6292]  scsi_ioctl+0x48d/0x1f60
[   99.342753][ T6292]  ? get_sg_io_hdr+0x820/0x820
[   99.347543][ T6292]  ? mark_lock+0x94/0x320
[   99.351887][ T6292]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[   99.357896][ T6292]  ? __might_sleep+0xe0/0xe0
[   99.362498][ T6292]  ? slab_free_freelist_hook+0x130/0x1b0
[   99.368145][ T6292]  ? __kmem_cache_free+0xba/0x1f0
[   99.373172][ T6292]  ? scsi_block_when_processing_errors+0x2a3/0x360
[   99.379685][ T6292]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[   99.385157][ T6292]  ? scsi_timeout+0x9c0/0x9c0
[   99.389852][ T6292]  sg_ioctl+0x195a/0x2240
[   99.394187][ T6292]  ? sg_poll+0x410/0x410
[   99.398425][ T6292]  ? __fget_files+0x28/0x4d0
[   99.403013][ T6292]  ? bpf_lsm_file_ioctl+0x9/0x10
[   99.407941][ T6292]  ? security_file_ioctl+0x80/0xa0
[   99.413045][ T6292]  ? sg_poll+0x410/0x410
[   99.417282][ T6292]  __se_sys_ioctl+0xfd/0x170
[   99.421865][ T6292]  do_syscall_64+0x55/0xb0
[   99.426273][ T6292]  ? clear_bhb_loop+0x40/0x90
[   99.430940][ T6292]  ? clear_bhb_loop+0x40/0x90
[   99.435606][ T6292]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   99.441493][ T6292] RIP: 0033:0x7ff05898eba9
[   99.445914][ T6292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   99.465532][ T6292] RSP: 002b:00007ff0597c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   99.473958][ T6292] RAX: ffffffffffffffda RBX: 00007ff058bd5fa0 RCX: 00007ff05898eba9
[   99.481936][ T6292] RDX: 0000200000000000 RSI: 0000000000005393 RDI: 0000000000000003
[   99.489906][ T6292] RBP: 00007ff0597c6090 R08: 0000000000000000 R09: 0000000000000000
[   99.497872][ T6292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   99.505833][ T6292] R13: 00007ff058bd6038 R14: 00007ff058bd5fa0 R15: 00007ffe5a1f7278
[   99.513807][ T6292]  </TASK>
[   99.795056][ T6300] FAULT_INJECTION: forcing a failure.
[   99.795056][ T6300] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   99.827826][ T6283] loop3: detected capacity change from 0 to 32768
[   99.844003][ T6300] CPU: 0 PID: 6300 Comm: syz.0.93 Not tainted syzkaller #0
[   99.851276][ T6300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   99.861348][ T6300] Call Trace:
[   99.864640][ T6300]  <TASK>
[   99.867585][ T6300]  dump_stack_lvl+0x16c/0x230
[   99.872285][ T6300]  ? show_regs_print_info+0x20/0x20
[   99.877500][ T6300]  ? load_image+0x3b0/0x3b0
[   99.882028][ T6300]  ? __lock_acquire+0x7c80/0x7c80
[   99.887069][ T6300]  ? snprintf+0xdb/0x120
[   99.891322][ T6300]  should_fail_ex+0x39d/0x4d0
[   99.896031][ T6300]  _copy_to_user+0x2f/0xa0
[   99.900468][ T6300]  simple_read_from_buffer+0xe7/0x150
[   99.905862][ T6300]  proc_fail_nth_read+0x1e3/0x250
[   99.910909][ T6300]  ? proc_fault_inject_write+0x340/0x340
[   99.916573][ T6300]  ? fsnotify_perm+0x271/0x5e0
[   99.921439][ T6300]  ? proc_fault_inject_write+0x340/0x340
[   99.927088][ T6300]  vfs_read+0x27e/0x920
[   99.931242][ T6300]  ? kernel_read+0x1e0/0x1e0
[   99.935824][ T6300]  ? __fget_files+0x28/0x4d0
[   99.940437][ T6300]  ? __fget_files+0x44a/0x4d0
[   99.945109][ T6300]  ? __fdget_pos+0x2a3/0x330
[   99.949693][ T6300]  ? ksys_read+0x75/0x250
[   99.954018][ T6300]  ksys_read+0x147/0x250
[   99.958254][ T6300]  ? vfs_write+0x940/0x940
[   99.962661][ T6300]  ? lockdep_hardirqs_on+0x98/0x150
[   99.967853][ T6300]  do_syscall_64+0x55/0xb0
[   99.972261][ T6300]  ? clear_bhb_loop+0x40/0x90
[   99.976926][ T6300]  ? clear_bhb_loop+0x40/0x90
[   99.981593][ T6300]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   99.987483][ T6300] RIP: 0033:0x7ff92f98d5bc
[   99.991895][ T6300] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  100.011532][ T6300] RSP: 002b:00007ff9308b6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  100.019936][ T6300] RAX: ffffffffffffffda RBX: 00007ff92fbd6090 RCX: 00007ff92f98d5bc
[  100.027897][ T6300] RDX: 000000000000000f RSI: 00007ff9308b60a0 RDI: 0000000000000005
[  100.035864][ T6300] RBP: 00007ff9308b6090 R08: 0000000000000000 R09: 0000000000000000
[  100.043825][ T6300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  100.051783][ T6300] R13: 00007ff92fbd6128 R14: 00007ff92fbd6090 R15: 00007ffc25a178c8
[  100.059758][ T6300]  </TASK>
[  100.071491][ T6283] JBD2: Ignoring recovery information on journal
[  100.165062][ T6283] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  100.508436][ T6309] syz_tun: entered promiscuous mode
[  100.695334][ T6310] loop1: detected capacity change from 0 to 64
[  101.654749][ T6310] overlayfs: missing 'lowerdir'
[  102.356068][ T5786] ocfs2: Unmounting device (7,3) on (node local)
[  102.926483][ T6326] loop0: detected capacity change from 0 to 256
[  102.934296][ T6325] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  103.005693][ T6326] FAT-fs (loop0): Unrecognized mount option "iocharbet=cp860" or missing value
[  103.272063][ T6329] syz.0.100 uses obsolete (PF_INET,SOCK_PACKET)
[  103.314340][ T6321] loop2: detected capacity change from 0 to 4096
[  103.384658][ T6321] ntfs: (device loop2): ntfs_attr_find(): Inode is corrupt.  Run chkdsk.
[  103.428572][ T6333] loop3: detected capacity change from 0 to 256
[  103.436835][ T6321] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x0 as bad.  Run chkdsk.
[  103.465060][ T6333] FAT-fs (loop3): Unrecognized mount option "iocharbet=cp860" or missing value
[  103.516549][ T6321] ntfs: (device loop2): ntfs_read_inode_mount(): ntfs_read_inode() of $MFT failed. BUG or corrupt $MFT. Run chkdsk and if no errors are found, please report you saw this message to linux-ntfs-dev@lists.sourceforge.net
[  103.558103][ T6321] ntfs: (device loop2): ntfs_fill_super(): Failed to load essential metadata.
[  103.575019][ T5776] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  103.668691][ T6321] netlink: 'syz.2.98': attribute type 1 has an invalid length.
[  103.710346][ T6321] netlink: 224 bytes leftover after parsing attributes in process `syz.2.98'.
[  104.070916][ T6344] loop1: detected capacity change from 0 to 64
[  104.163424][ T6344] overlayfs: missing 'workdir'
[  104.898032][ T6346] FAULT_INJECTION: forcing a failure.
[  104.898032][ T6346] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  104.985034][ T6346] CPU: 0 PID: 6346 Comm: syz.3.105 Not tainted syzkaller #0
[  104.992383][ T6346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  105.002453][ T6346] Call Trace:
[  105.005740][ T6346]  <TASK>
[  105.008723][ T6346]  dump_stack_lvl+0x16c/0x230
[  105.013426][ T6346]  ? show_regs_print_info+0x20/0x20
[  105.018637][ T6346]  ? load_image+0x3b0/0x3b0
[  105.023149][ T6346]  ? __might_fault+0xaa/0x120
[  105.027832][ T6346]  ? __lock_acquire+0x7c80/0x7c80
[  105.032873][ T6346]  should_fail_ex+0x39d/0x4d0
[  105.037565][ T6346]  _copy_from_iter+0x1d3/0x1290
[  105.042427][ T6346]  ? __virt_addr_valid+0x18c/0x540
[  105.047572][ T6346]  ? __lock_acquire+0x7c80/0x7c80
[  105.052607][ T6346]  ? sock_alloc_send_pskb+0x875/0x990
[  105.057995][ T6346]  ? copyout_mc+0x70/0x70
[  105.062352][ T6346]  ? __virt_addr_valid+0x18c/0x540
[  105.067499][ T6346]  ? __virt_addr_valid+0x18c/0x540
[  105.072630][ T6346]  ? __virt_addr_valid+0x469/0x540
[  105.077757][ T6346]  ? __check_object_size+0x506/0xa30
[  105.083067][ T6346]  skb_copy_datagram_from_iter+0xf4/0x6e0
[  105.088799][ T6346]  ? skb_put+0x11b/0x210
[  105.093065][ T6346]  tun_get_user+0x1583/0x3bf0
[  105.097764][ T6346]  ? aa_file_perm+0x120/0xec0
[  105.102467][ T6346]  ? aa_file_perm+0x3e8/0xec0
[  105.107159][ T6346]  ? rcu_read_unlock+0xa0/0xa0
[  105.111947][ T6346]  ? tun_get+0x1c/0x2e0
[  105.116118][ T6346]  ? __lock_acquire+0x7c80/0x7c80
[  105.121164][ T6346]  ? tun_get+0x1c/0x2e0
[  105.125342][ T6346]  tun_chr_write_iter+0x119/0x200
[  105.130387][ T6346]  vfs_write+0x43b/0x940
[  105.134654][ T6346]  ? file_end_write+0x250/0x250
[  105.139529][ T6346]  ? __fget_files+0x44a/0x4d0
[  105.144229][ T6346]  ? __fdget_pos+0x1d8/0x330
[  105.148830][ T6346]  ? ksys_write+0x75/0x250
[  105.153257][ T6346]  ksys_write+0x147/0x250
[  105.157603][ T6346]  ? __ia32_sys_read+0x90/0x90
[  105.162388][ T6346]  ? lockdep_hardirqs_on+0x98/0x150
[  105.167611][ T6346]  do_syscall_64+0x55/0xb0
[  105.172039][ T6346]  ? clear_bhb_loop+0x40/0x90
[  105.176725][ T6346]  ? clear_bhb_loop+0x40/0x90
[  105.181417][ T6346]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  105.187331][ T6346] RIP: 0033:0x7fa46bf8d65f
[  105.191758][ T6346] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  105.211382][ T6346] RSP: 002b:00007fa46ce3f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  105.219827][ T6346] RAX: ffffffffffffffda RBX: 00007fa46c1d5fa0 RCX: 00007fa46bf8d65f
[  105.227823][ T6346] RDX: 0000000000000eff RSI: 00002000000011c0 RDI: 00000000000000c8
[  105.235817][ T6346] RBP: 00007fa46ce3f090 R08: 0000000000000000 R09: 0000000000000000
[  105.243805][ T6346] R10: 0000000000000eff R11: 0000000000000293 R12: 0000000000000001
[  105.251793][ T6346] R13: 00007fa46c1d6038 R14: 00007fa46c1d5fa0 R15: 00007fffdf13ed68
[  105.259800][ T6346]  </TASK>
[  105.473516][ T6326] loop0: detected capacity change from 0 to 32768
[  105.598304][ T6351] netlink: 'syz.2.106': attribute type 1 has an invalid length.
[  105.630079][ T6351] netlink: 236 bytes leftover after parsing attributes in process `syz.2.106'.
[  105.794832][ T6326] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  105.862021][ T6326] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop0": -EINTR
[  105.869467][ T6326] XFS (loop0): log mount failed
[  106.464039][ T6361] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  106.492167][ T6361] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  106.854445][ T6369] loop1: detected capacity change from 0 to 4096
[  107.080293][ T5852] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  107.280234][ T5852] usb 3-1: Using ep0 maxpacket: 16
[  107.302347][ T5852] usb 3-1: unable to get BOS descriptor or descriptor too short
[  107.321236][ T5852] usb 3-1: config 15 has an invalid interface number: 174 but max is 1
[  107.329543][ T5852] usb 3-1: config 15 has an invalid interface number: 5 but max is 1
[  107.348192][ T5852] usb 3-1: config 15 has an invalid interface descriptor of length 2, skipping
[  107.370298][ T6378] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073072017407)
[  107.378073][ T5852] usb 3-1: config 15 has no interface number 0
[  107.388120][ T6378] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  107.398515][ T5852] usb 3-1: config 15 has no interface number 1
[  107.398841][ T5852] usb 3-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0
[  107.398913][ T5852] usb 3-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0
[  107.398992][ T5852] usb 3-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0x2, skipping
[  107.399065][ T5852] usb 3-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping
[  107.399135][ T5852] usb 3-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64
[  107.399209][ T5852] usb 3-1: config 15 interface 174 altsetting 1 has an invalid endpoint with address 0xB7, skipping
[  107.399778][ T5852] usb 3-1: config 15 interface 5 altsetting 128 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[  107.489391][ T6378] smb3: Unknown parameter 'rdma:'
[  107.553894][ T6378] netlink: 'syz.1.111': attribute type 10 has an invalid length.
[  107.563029][ T6378] netlink: 156 bytes leftover after parsing attributes in process `syz.1.111'.
[  107.698845][ T5852] usb 3-1: config 15 interface 5 altsetting 128 has an invalid endpoint with address 0x0, skipping
[  107.709930][ T5852] usb 3-1: config 15 interface 5 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  107.739885][ T5852] usb 3-1: config 15 interface 174 has no altsetting 0
[  107.747385][ T5852] usb 3-1: config 15 interface 5 has no altsetting 0
[  107.759114][ T5852] usb 3-1: language id specifier not provided by device, defaulting to English
[  107.817777][ T5852] usb 3-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d
[  107.827576][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.839909][ T5852] usb 3-1: Product: syz
[  107.844197][ T5852] usb 3-1: Manufacturer: syz
[  107.849392][ T5852] usb 3-1: SerialNumber: syz
[  108.099684][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  108.119629][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  108.129953][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  108.139959][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  109.201468][ T6368] loop3: detected capacity change from 0 to 32768
[  109.284827][ T6368] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  109.488705][   T27] audit: type=1800 audit(1758222024.271:4): pid=6368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.112" name="file1" dev="loop3" ino=17059 res=0 errno=0
[  109.512785][ T6399] FAULT_INJECTION: forcing a failure.
[  109.512785][ T6399] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  109.560007][ T6399] CPU: 1 PID: 6399 Comm: syz.0.118 Not tainted syzkaller #0
[  109.567442][ T6399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  109.577540][ T6399] Call Trace:
[  109.580833][ T6399]  <TASK>
[  109.583767][ T6399]  dump_stack_lvl+0x16c/0x230
[  109.588465][ T6399]  ? show_regs_print_info+0x20/0x20
[  109.593695][ T6399]  ? load_image+0x3b0/0x3b0
[  109.598219][ T6399]  ? __lock_acquire+0x7c80/0x7c80
[  109.603262][ T6399]  ? snprintf+0xdb/0x120
[  109.607523][ T6399]  should_fail_ex+0x39d/0x4d0
[  109.612229][ T6399]  _copy_to_user+0x2f/0xa0
[  109.616678][ T6399]  simple_read_from_buffer+0xe7/0x150
[  109.622083][ T6399]  proc_fail_nth_read+0x1e3/0x250
[  109.627145][ T6399]  ? proc_fault_inject_write+0x340/0x340
[  109.632827][ T6399]  ? fsnotify_perm+0x271/0x5e0
[  109.637618][ T6399]  ? proc_fault_inject_write+0x340/0x340
[  109.643268][ T6399]  vfs_read+0x27e/0x920
[  109.647449][ T6399]  ? kernel_read+0x1e0/0x1e0
[  109.652069][ T6399]  ? __fget_files+0x28/0x4d0
[  109.656717][ T6399]  ? __fget_files+0x44a/0x4d0
[  109.661418][ T6399]  ? __fdget_pos+0x2a3/0x330
[  109.666112][ T6399]  ? ksys_read+0x75/0x250
[  109.670461][ T6399]  ksys_read+0x147/0x250
[  109.674728][ T6399]  ? vfs_write+0x940/0x940
[  109.679176][ T6399]  ? lockdep_hardirqs_on+0x98/0x150
[  109.684396][ T6399]  do_syscall_64+0x55/0xb0
[  109.688826][ T6399]  ? clear_bhb_loop+0x40/0x90
[  109.693523][ T6399]  ? clear_bhb_loop+0x40/0x90
[  109.698213][ T6399]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  109.704126][ T6399] RIP: 0033:0x7ff92f98d5bc
[  109.708548][ T6399] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  109.728168][ T6399] RSP: 002b:00007ff9308d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  109.736602][ T6399] RAX: ffffffffffffffda RBX: 00007ff92fbd5fa0 RCX: 00007ff92f98d5bc
[  109.744590][ T6399] RDX: 000000000000000f RSI: 00007ff9308d70a0 RDI: 0000000000000005
[  109.752581][ T6399] RBP: 00007ff9308d7090 R08: 0000000000000000 R09: 0000000000000000
[  109.760576][ T6399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  109.768571][ T6399] R13: 00007ff92fbd6038 R14: 00007ff92fbd5fa0 R15: 00007ffc25a178c8
[  109.776578][ T6399]  </TASK>
[  109.934135][ T6403] process 'syz.1.120' launched './file1' with NULL argv: empty string added
[  109.948493][ T5786] ocfs2: Unmounting device (7,3) on (node local)
[  110.177378][ T6410] FAULT_INJECTION: forcing a failure.
[  110.177378][ T6410] name failslab, interval 1, probability 0, space 0, times 0
[  110.199172][ T6410] CPU: 0 PID: 6410 Comm: syz.1.124 Not tainted syzkaller #0
[  110.206504][ T6410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  110.216576][ T6410] Call Trace:
[  110.219865][ T6410]  <TASK>
[  110.222806][ T6410]  dump_stack_lvl+0x16c/0x230
[  110.227504][ T6410]  ? show_regs_print_info+0x20/0x20
[  110.232717][ T6410]  ? load_image+0x3b0/0x3b0
[  110.237248][ T6410]  ? __might_sleep+0xe0/0xe0
[  110.241854][ T6410]  ? __lock_acquire+0x7c80/0x7c80
[  110.246899][ T6410]  should_fail_ex+0x39d/0x4d0
[  110.251601][ T6410]  should_failslab+0x9/0x20
[  110.256122][ T6410]  slab_pre_alloc_hook+0x59/0x310
[  110.261166][ T6410]  ? sctp_association_new+0x89/0x25c0
[  110.266560][ T6410]  __kmem_cache_alloc_node+0x53/0x260
[  110.271954][ T6410]  ? sctp_association_new+0x89/0x25c0
[  110.277339][ T6410]  kmalloc_trace+0x2a/0xe0
[  110.281781][ T6410]  sctp_association_new+0x89/0x25c0
[  110.287001][ T6410]  ? sctp_has_association+0x1cd/0x1e0
[  110.292382][ T6410]  ? sctp_has_association+0x2f/0x1e0
[  110.297667][ T6410]  ? __ipv6_addr_type+0x242/0x2f0
[  110.302694][ T6410]  sctp_connect_new_asoc+0x2bf/0x690
[  110.307989][ T6410]  ? __sctp_connect+0xd20/0xd20
[  110.312837][ T6410]  ? __local_bh_enable_ip+0x12e/0x1c0
[  110.318220][ T6410]  ? _local_bh_enable+0xa0/0xa0
[  110.323059][ T6410]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  110.328860][ T6410]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  110.334673][ T6410]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  110.340209][ T6410]  ? security_sctp_bind_connect+0x89/0xb0
[  110.345921][ T6410]  sctp_sendmsg+0x155c/0x27e0
[  110.350598][ T6410]  ? sctp_getsockopt+0xb60/0xb60
[  110.355529][ T6410]  ? aa_sk_perm+0x7fc/0x930
[  110.360025][ T6410]  ? aa_af_perm+0x2b0/0x2b0
[  110.364516][ T6410]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  110.370935][ T6410]  ? sock_rps_record_flow+0x19/0x400
[  110.376210][ T6410]  ? inet_send_prepare+0x260/0x260
[  110.381308][ T6410]  ? inet_sendmsg+0x7c/0x2f0
[  110.385892][ T6410]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  110.391170][ T6410]  ? security_socket_sendmsg+0x80/0xa0
[  110.396625][ T6410]  ? inet_send_prepare+0x260/0x260
[  110.401733][ T6410]  ____sys_sendmsg+0x5bf/0x950
[  110.406497][ T6410]  ? __asan_memset+0x22/0x40
[  110.411078][ T6410]  ? __sys_sendmsg_sock+0x30/0x30
[  110.416094][ T6410]  ? __import_iovec+0x5f2/0x860
[  110.420944][ T6410]  ? import_iovec+0x73/0xa0
[  110.425443][ T6410]  ___sys_sendmsg+0x220/0x290
[  110.430116][ T6410]  ? __sys_sendmsg+0x270/0x270
[  110.434885][ T6410]  ? __lock_acquire+0x7c80/0x7c80
[  110.439918][ T6410]  __se_sys_sendmsg+0x1a5/0x270
[  110.444769][ T6410]  ? __x64_sys_sendmsg+0x80/0x80
[  110.449712][ T6410]  ? lockdep_hardirqs_on+0x98/0x150
[  110.455059][ T6410]  do_syscall_64+0x55/0xb0
[  110.459480][ T6410]  ? clear_bhb_loop+0x40/0x90
[  110.464157][ T6410]  ? clear_bhb_loop+0x40/0x90
[  110.468837][ T6410]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  110.474739][ T6410] RIP: 0033:0x7fccd278eba9
[  110.479148][ T6410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  110.498753][ T6410] RSP: 002b:00007fccd361a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  110.507159][ T6410] RAX: ffffffffffffffda RBX: 00007fccd29d5fa0 RCX: 00007fccd278eba9
[  110.515123][ T6410] RDX: 0000000004048043 RSI: 0000200000000800 RDI: 0000000000000003
[  110.523088][ T6410] RBP: 00007fccd361a090 R08: 0000000000000000 R09: 0000000000000000
[  110.531052][ T6410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  110.539012][ T6410] R13: 00007fccd29d6038 R14: 00007fccd29d5fa0 R15: 00007ffc8af52c78
[  110.546999][ T6410]  </TASK>
[  110.853653][ T6413] kAFS: No cell specified
[  110.860844][ T6413] loop3: detected capacity change from 0 to 128
[  110.890694][ T6413] FAT-fs (loop3): bogus sectors per cluster 0
[  110.896819][ T6413] FAT-fs (loop3): Can't find a valid FAT filesystem
[  110.979517][ T6417] FAULT_INJECTION: forcing a failure.
[  110.979517][ T6417] name failslab, interval 1, probability 0, space 0, times 0
[  111.000271][ T6417] CPU: 1 PID: 6417 Comm: syz.1.126 Not tainted syzkaller #0
[  111.007606][ T6417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  111.017677][ T6417] Call Trace:
[  111.020975][ T6417]  <TASK>
[  111.022079][ T6415] kvm: pic: non byte read
[  111.023912][ T6417]  dump_stack_lvl+0x16c/0x230
[  111.028957][ T6415] kvm: pic: level sensitive irq not supported
[  111.032887][ T6417]  ? show_regs_print_info+0x20/0x20
[  111.032920][ T6417]  ? load_image+0x3b0/0x3b0
[  111.033732][ T6415] kvm: pic: non byte read
[  111.039114][ T6417]  ? __lock_acquire+0x7c80/0x7c80
[  111.039142][ T6417]  should_fail_ex+0x39d/0x4d0
[  111.039168][ T6417]  should_failslab+0x9/0x20
[  111.039188][ T6417]  slab_pre_alloc_hook+0x59/0x310
[  111.046528][ T6415] kvm: pic: single mode not supported
[  111.048855][ T6417]  ? __check_object_size+0x506/0xa30
[  111.048885][ T6417]  kmem_cache_alloc+0x5a/0x2e0
[  111.048904][ T6417]  ? getname_flags+0xbb/0x500
[  111.048931][ T6417]  getname_flags+0xbb/0x500
[  111.048954][ T6417]  __x64_sys_renameat2+0xbf/0xe0
[  111.048972][ T6417]  do_syscall_64+0x55/0xb0
[  111.048989][ T6417]  ? clear_bhb_loop+0x40/0x90
[  111.049004][ T6417]  ? clear_bhb_loop+0x40/0x90
[  111.049021][ T6417]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  111.049044][ T6417] RIP: 0033:0x7fccd278eba9
[  111.049061][ T6417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  111.049073][ T6417] RSP: 002b:00007fccd361a038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[  111.049091][ T6417] RAX: ffffffffffffffda RBX: 00007fccd29d5fa0 RCX: 00007fccd278eba9
[  111.049104][ T6417] RDX: 0000000000000006 RSI: 0000200000000240 RDI: 0000000000000006
[  111.049114][ T6417] RBP: 00007fccd361a090 R08: 0000000000000002 R09: 0000000000000000
[  111.049125][ T6417] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001
[  111.049135][ T6417] R13: 00007fccd29d6038 R14: 00007fccd29d5fa0 R15: 00007ffc8af52c78
[  111.049161][ T6417]  </TASK>
[  111.200296][ T6415] kvm: pic: level sensitive irq not supported
[  111.268358][ T6415] kvm: pic: non byte read
[  111.288882][ T6415] kvm: pic: non byte read
[  111.296056][ T6415] kvm: pic: non byte read
[  111.304770][ T5852] sierra 3-1:15.174: Sierra USB modem converter detected
[  111.312793][ T6415] kvm: pic: non byte read
[  111.346185][ T6415] kvm: pic: non byte read
[  111.357025][ T5852] usb 3-1: Sierra USB modem converter now attached to ttyUSB0
[  111.368413][ T6415] kvm: pic: single mode not supported
[  111.368473][ T6415] kvm: pic: non byte read
[  111.405536][ T6415] kvm: pic: single mode not supported
[  111.405597][ T6415] kvm: pic: non byte read
[  111.425099][ T5852] usb 3-1: Sierra USB modem converter now attached to ttyUSB1
[  111.584478][ T5852] sierra 3-1:15.5: Sierra USB modem converter detected
[  111.885998][ T6426] loop2: detected capacity change from 0 to 512
[  111.961519][ T5852] usb 3-1: Sierra USB modem converter now attached to ttyUSB2
[  112.024088][ T5852] usb 3-1: USB disconnect, device number 3
[  112.042619][ T6426] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.128: iget: bad extended attribute block 1
[  112.061659][ T6426] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.128: couldn't read orphan inode 15 (err -117)
[  112.080147][ T6426] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.351783][ T5852] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  112.471999][ T5852] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[  112.539629][ T5852] sierra 3-1:15.174: device disconnected
[  112.586225][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.613532][ T6435] loop1: detected capacity change from 0 to 16
[  112.632040][ T5852] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2
[  112.704077][ T5852] sierra 3-1:15.5: device disconnected
[  112.776060][ T6435] erofs: (device loop1): mounted with root inode @ nid 36.
[  112.981731][ T5783] erofs: (device loop1): erofs_read_inode: bogus i_mode (4355) @ nid 46
[  112.991397][ T5783] erofs: (device loop1): erofs_read_inode: bogus i_mode (4355) @ nid 46
[  113.200419][ T6437] loop0: detected capacity change from 0 to 32768
[  113.228066][ T6437] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  113.275622][   T27] audit: type=1800 audit(1758222028.062:5): pid=6437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.131" name="file1" dev="loop0" ino=17059 res=0 errno=0
[  113.485770][ T6050] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.611547][ T5788] ocfs2: Unmounting device (7,0) on (node local)
[  113.741203][ T6050] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.998094][ T6050] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.184267][ T6050] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.698082][ T5106] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  114.718758][ T5106] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  114.729609][ T5106] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  114.745915][ T5106] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  114.759037][ T5106] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  114.766755][ T5106] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  115.075561][ T6448] syz.3.135 (6448): drop_caches: 2
[  115.391066][ T6481] loop2: detected capacity change from 0 to 1024
[  115.396412][ T6478] loop3: detected capacity change from 0 to 512
[  115.610848][ T6478] EXT4-fs (loop3): 1 orphan inode deleted
[  115.618060][ T6478] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.629759][ T6458] loop0: detected capacity change from 0 to 40427
[  115.635039][   T12] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  115.667420][ T6478] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.686655][   T12] EXT4-fs error (device loop3): ext4_release_dquot:6976: comm kworker/u4:1: Failed to release dquot type 1
[  115.709633][ T6458] F2FS-fs (loop0): build fault injection attr: rate: 4, type: 0x7ffff
[  115.735187][ T6458] F2FS-fs (loop0): Image doesn't support compression
[  115.744687][ T6458] F2FS-fs (loop0): Image doesn't support compression
[  115.756391][ T6458] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0xa
[  115.771814][ T6458] F2FS-fs (loop0): invalid crc value
[  115.817287][ T6458] F2FS-fs (loop0): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x4552/0x6c20
[  115.874614][ T6458] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-12)
[  116.487437][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.683677][ T6060] hfsplus: b-tree write err: -5, ino 3
[  116.849391][   T50] Bluetooth: hci0: command tx timeout
[  116.969864][ T6508] fuse: Unknown parameter '000000000000000000000050x0000000000000005'
[  117.044027][ T6508] loop0: detected capacity change from 0 to 1024
[  117.075004][ T6508] hfsplus: unable to parse mount options
[  117.119695][ T6461] chnl_net:caif_netlink_parms(): no params data found
[  117.286147][   T27] audit: type=1326 audit(1758222032.075:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05898eba9 code=0x7ffc0000
[  117.357172][   T27] audit: type=1326 audit(1758222032.075:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05898eba9 code=0x7ffc0000
[  117.384835][ T6516] FAULT_INJECTION: forcing a failure.
[  117.384835][ T6516] name failslab, interval 1, probability 0, space 0, times 0
[  117.423249][ T6516] CPU: 1 PID: 6516 Comm: syz.2.148 Not tainted syzkaller #0
[  117.430598][ T6516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  117.433415][   T27] audit: type=1326 audit(1758222032.105:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7ff05898eba9 code=0x7ffc0000
[  117.440644][ T6516] Call Trace:
[  117.440654][ T6516]  <TASK>
[  117.440662][ T6516]  dump_stack_lvl+0x16c/0x230
[  117.440689][ T6516]  ? show_regs_print_info+0x20/0x20
[  117.440708][ T6516]  ? load_image+0x3b0/0x3b0
[  117.483231][ T6516]  ? __might_sleep+0xe0/0xe0
[  117.487846][ T6516]  ? __lock_acquire+0x7c80/0x7c80
[  117.492894][ T6516]  ? deref_stack_reg+0x1bd/0x240
[  117.497862][ T6516]  should_fail_ex+0x39d/0x4d0
[  117.502564][ T6516]  should_failslab+0x9/0x20
[  117.507083][ T6516]  slab_pre_alloc_hook+0x59/0x310
[  117.512131][ T6516]  ? is_bpf_text_address+0x26/0x2a0
[  117.517342][ T6516]  ? __get_vm_area_node+0x125/0x370
[  117.522555][ T6516]  __kmem_cache_alloc_node+0x53/0x260
[  117.527951][ T6516]  ? __get_vm_area_node+0x125/0x370
[  117.533163][ T6516]  kmalloc_node_trace+0x26/0xe0
[  117.538034][ T6516]  __get_vm_area_node+0x125/0x370
[  117.543078][ T6516]  __vmalloc_node_range+0x36e/0x1320
[  117.548385][ T6516]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  117.553943][ T6516]  ? __stack_depot_save+0x1f/0x630
[  117.559100][ T6516]  ? kasan_set_track+0x5f/0x70
[  117.563876][ T6516]  ? kasan_set_track+0x4e/0x70
[  117.568658][ T6516]  ? do_seccomp+0x76a/0xd90
[  117.573351][ T6516]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  117.579444][ T6516]  ? free_vm_area+0x50/0x50
[  117.583968][ T6516]  ? __asan_memset+0x22/0x40
[  117.588575][ T6516]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  117.594139][ T6516]  __vmalloc+0x7a/0x90
[  117.598229][ T6516]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  117.603788][ T6516]  bpf_prog_alloc_no_stats+0x47/0x440
[  117.609176][ T6516]  ? bpf_prog_alloc+0x2b/0x1b0
[  117.613954][ T6516]  bpf_prog_alloc+0x3d/0x1b0
[  117.618554][ T6516]  ? bpf_prepare_filter+0x12a1/0x12f0
[  117.623946][ T6516]  bpf_prog_create_from_user+0xa6/0x420
[  117.629508][ T6516]  ? seccomp_notify_detach+0x220/0x220
[  117.634990][ T6516]  do_seccomp+0x7ac/0xd90
[  117.639343][ T6516]  ? prctl_set_seccomp+0x60/0x60
[  117.644302][ T6516]  ? __secure_computing+0x111/0x2f0
[  117.649525][ T6516]  do_syscall_64+0x55/0xb0
[  117.653954][ T6516]  ? clear_bhb_loop+0x40/0x90
[  117.658643][ T6516]  ? clear_bhb_loop+0x40/0x90
[  117.663335][ T6516]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  117.669247][ T6516] RIP: 0033:0x7ff05898eba9
[  117.673671][ T6516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  117.693379][ T6516] RSP: 002b:00007ff0597a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000013d
[  117.701815][ T6516] RAX: ffffffffffffffda RBX: 00007ff058bd6090 RCX: 00007ff05898eba9
[  117.709805][ T6516] RDX: 0000200000000100 RSI: 0000000000000007 RDI: 0000000000000001
[  117.717794][ T6516] RBP: 00007ff0597a5090 R08: 0000000000000000 R09: 0000000000000000
[  117.725780][ T6516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  117.733766][ T6516] R13: 00007ff058bd6128 R14: 00007ff058bd6090 R15: 00007ffe5a1f7278
[  117.741771][ T6516]  </TASK>
[  117.809945][ T6522] loop0: detected capacity change from 0 to 64
[  117.910800][ T6522] overlayfs: missing 'workdir'
[  117.927635][ T6516] syz.2.148: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1
[  118.202724][ T6516] CPU: 0 PID: 6516 Comm: syz.2.148 Not tainted syzkaller #0
[  118.210076][ T6516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  118.220146][ T6516] Call Trace:
[  118.223434][ T6516]  <TASK>
[  118.226372][ T6516]  dump_stack_lvl+0x16c/0x230
[  118.231074][ T6516]  ? show_regs_print_info+0x20/0x20
[  118.236285][ T6516]  ? load_image+0x3b0/0x3b0
[  118.240801][ T6516]  ? __rcu_read_unlock+0x7c/0xd0
[  118.245765][ T6516]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  118.252201][ T6516]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[  118.258729][ T6516]  warn_alloc+0x210/0x300
[  118.263078][ T6516]  ? __get_vm_area_node+0x125/0x370
[  118.268297][ T6516]  ? zone_watermark_ok_safe+0x230/0x230
[  118.273852][ T6516]  ? rcu_is_watching+0x15/0xb0
[  118.278633][ T6516]  ? __get_vm_area_node+0x356/0x370
[  118.283849][ T6516]  __vmalloc_node_range+0x393/0x1320
[  118.289145][ T6516]  ? __stack_depot_save+0x1f/0x630
[  118.294267][ T6516]  ? kasan_set_track+0x5f/0x70
[  118.299042][ T6516]  ? kasan_set_track+0x4e/0x70
[  118.303814][ T6516]  ? do_seccomp+0x76a/0xd90
[  118.308327][ T6516]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  118.314417][ T6516]  ? free_vm_area+0x50/0x50
[  118.318929][ T6516]  ? __asan_memset+0x22/0x40
[  118.323526][ T6516]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  118.329081][ T6516]  __vmalloc+0x7a/0x90
[  118.333163][ T6516]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  118.338719][ T6516]  bpf_prog_alloc_no_stats+0x47/0x440
[  118.344098][ T6516]  ? bpf_prog_alloc+0x2b/0x1b0
[  118.348876][ T6516]  bpf_prog_alloc+0x3d/0x1b0
[  118.353469][ T6516]  ? bpf_prepare_filter+0x12a1/0x12f0
[  118.358849][ T6516]  bpf_prog_create_from_user+0xa6/0x420
[  118.364407][ T6516]  ? seccomp_notify_detach+0x220/0x220
[  118.369879][ T6516]  do_seccomp+0x7ac/0xd90
[  118.374228][ T6516]  ? prctl_set_seccomp+0x60/0x60
[  118.379180][ T6516]  ? __secure_computing+0x111/0x2f0
[  118.384394][ T6516]  do_syscall_64+0x55/0xb0
[  118.388818][ T6516]  ? clear_bhb_loop+0x40/0x90
[  118.393498][ T6516]  ? clear_bhb_loop+0x40/0x90
[  118.398209][ T6516]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  118.404118][ T6516] RIP: 0033:0x7ff05898eba9
[  118.408544][ T6516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  118.428169][ T6516] RSP: 002b:00007ff0597a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000013d
[  118.436596][ T6516] RAX: ffffffffffffffda RBX: 00007ff058bd6090 RCX: 00007ff05898eba9
[  118.444577][ T6516] RDX: 0000200000000100 RSI: 0000000000000007 RDI: 0000000000000001
[  118.452562][ T6516] RBP: 00007ff0597a5090 R08: 0000000000000000 R09: 0000000000000000
[  118.460550][ T6516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  118.468541][ T6516] R13: 00007ff058bd6128 R14: 00007ff058bd6090 R15: 00007ffe5a1f7278
[  118.476544][ T6516]  </TASK>
[  118.808784][ T6518] loop3: detected capacity change from 0 to 32768
[  118.817311][ T6516] Mem-Info:
[  118.820461][ T6516] active_anon:11919 inactive_anon:0 isolated_anon:0
[  118.820461][ T6516]  active_file:11794 inactive_file:39889 isolated_file:0
[  118.820461][ T6516]  unevictable:768 dirty:231 writeback:19
[  118.820461][ T6516]  slab_reclaimable:10469 slab_unreclaimable:89307
[  118.820461][ T6516]  mapped:26496 shmem:5467 pagetables:631
[  118.820461][ T6516]  sec_pagetables:0 bounce:0
[  118.820461][ T6516]  kernel_misc_reclaimable:0
[  118.820461][ T6516]  free:1356630 free_pcp:6866 free_cma:0
[  118.909105][ T6518] (syz.3.149,6518,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  118.940591][   T50] Bluetooth: hci0: command tx timeout
[  119.004399][ T6516] Node 0 active_anon:49376kB inactive_anon:0kB active_file:47176kB inactive_file:159352kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:105984kB dirty:920kB writeback:76kB shmem:20332kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11900kB pagetables:2524kB sec_pagetables:0kB all_unreclaimable? no
[  119.046491][ T6518] (syz.3.149,6518,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  119.202606][ T6518] JBD2: Ignoring recovery information on journal
[  119.261685][ T6516] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  119.437178][ T6518] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  119.462394][ T6516] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  119.504458][ T6461] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.552279][ T6461] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.598164][ T6461] bridge_slave_0: entered allmulticast mode
[  119.635284][ T6461] bridge_slave_0: entered promiscuous mode
[  119.661104][ T6516] lowmem_reserve[]: 0 2525 2526 2526 2526
[  119.667085][ T6516] Node 0 DMA32 free:1506172kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:56788kB inactive_anon:0kB active_file:47176kB inactive_file:158536kB unevictable:1536kB writepending:904kB present:3129332kB managed:2589592kB mlocked:0kB bounce:0kB free_pcp:7548kB local_pcp:5632kB free_cma:0kB
[  119.718401][ T6461] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.756776][ T6461] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.778593][ T6516] lowmem_reserve[]: 0 0 1 1 1
[  119.783563][ T6516] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  119.799875][ T6461] bridge_slave_1: entered allmulticast mode
[  119.837051][ T6461] bridge_slave_1: entered promiscuous mode
[  119.844906][ T6516] lowmem_reserve[]: 0 0 0 0 0
[  119.849670][ T6516] Node 1 Normal free:3894404kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20480kB local_pcp:10400kB free_cma:0kB
[  119.879477][ T6516] lowmem_reserve[]: 0 0 0 0 0
[  119.884531][ T6516] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  119.897289][ T6516] Node 0 DMA32: 1*4kB (U) 2*8kB (UE) 11*16kB (ME) 376*32kB (UME) 317*64kB (UME) 119*128kB (UME) 36*256kB (UME) 20*512kB (UME) 5*1024kB (UM) 4*2048kB (UM) 348*4096kB (UM) = 1505924kB
[  119.935547][ T6516] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB
[  119.969734][ T6516] Node 1 Normal: 249*4kB (UME) 66*8kB (UME) 45*16kB (UME) 60*32kB (UME) 23*64kB (UME) 9*128kB (UME) 2*256kB (ME) 2*512kB (UE) 1*1024kB (E) 1*2048kB (E) 948*4096kB (M) = 3894404kB
[  119.995923][ T6516] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  120.012400][ T6516] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  120.022381][ T6516] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  120.031112][ T6518] syz.3.149 (6518) used greatest stack depth: 18736 bytes left
[  120.053755][ T6516] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  120.070674][ T6516] 57268 total pagecache pages
[  120.075867][ T6516] 0 pages in swap cache
[  120.093171][ T6516] Free swap  = 124996kB
[  120.097830][ T6516] Total swap = 124996kB
[  120.102106][ T6516] 2097051 pages RAM
[  120.113021][ T6050] hsr_slave_0: left promiscuous mode
[  120.115379][ T6516] 0 pages HighMem/MovableOnly
[  120.127041][ T6516] 416139 pages reserved
[  120.131226][ T6516] 0 pages cma reserved
[  120.140878][ T5786] ocfs2: Unmounting device (7,3) on (node local)
[  120.148595][ T6050] hsr_slave_1: left promiscuous mode
[  120.162695][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.194097][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.265359][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.272797][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.318920][ T6050] bridge_slave_1: left allmulticast mode
[  120.329005][ T6050] bridge_slave_1: left promiscuous mode
[  120.340294][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.362154][ T6050] bridge_slave_0: left allmulticast mode
[  120.394212][ T6050] bridge_slave_0: left promiscuous mode
[  120.399987][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.519330][ T6050] veth1_macvtap: left promiscuous mode
[  120.528114][ T6050] veth0_macvtap: left promiscuous mode
[  120.543868][ T6050] veth1_vlan: left promiscuous mode
[  120.563938][ T6050] veth0_vlan: left promiscuous mode
[  121.020948][   T50] Bluetooth: hci0: command tx timeout
[  121.617792][ T6050] team0 (unregistering): Port device team_slave_1 removed
[  121.658504][ T6050] team0 (unregistering): Port device team_slave_0 removed
[  121.702307][ T6050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  121.742464][ T6050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  122.184886][ T6050] bond0 (unregistering): Released all slaves
[  122.258252][ T6461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  123.190236][ T6050] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.281573][ T6050] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.367201][ T6050] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.444385][ T6050] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.700951][ T6050] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.778359][ T6050] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.833512][ T6050] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.891004][ T6050] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.471389][ T6050] bridge_slave_1: left allmulticast mode
[  125.477098][ T6050] bridge_slave_1: left promiscuous mode
[  125.494198][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.503712][ T6050] bridge_slave_0: left allmulticast mode
[  125.509404][ T6050] bridge_slave_0: left promiscuous mode
[  125.516572][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.535484][ T6050] hsr_slave_0: left promiscuous mode
[  125.545964][ T6050] hsr_slave_1: left promiscuous mode
[  125.555387][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  125.567678][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_0
[  125.575989][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  125.583551][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_1
[  125.592411][ T6050] bridge_slave_1: left allmulticast mode
[  125.598098][ T6050] bridge_slave_1: left promiscuous mode
[  125.604468][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.615809][ T6050] bridge_slave_0: left allmulticast mode
[  125.622079][ T6050] bridge_slave_0: left promiscuous mode
[  125.627820][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.644746][ T6050] hsr_slave_0: left promiscuous mode
[  125.651174][ T6050] hsr_slave_1: left promiscuous mode
[  125.659480][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  125.667365][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_0
[  125.677710][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  125.686630][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_1
[  125.696651][ T6050] bridge_slave_1: left allmulticast mode
[  125.705810][ T6050] bridge_slave_1: left promiscuous mode
[  125.713165][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.725517][ T6050] bridge_slave_0: left allmulticast mode
[  125.734749][ T6050] bridge_slave_0: left promiscuous mode
[  125.740498][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.810476][ T6050] veth1_macvtap: left promiscuous mode
[  125.818342][ T6050] veth0_macvtap: left promiscuous mode
[  125.824140][ T6050] veth1_vlan: left promiscuous mode
[  125.829485][ T6050] veth0_vlan: left promiscuous mode
[  125.841419][ T6050] veth1_macvtap: left promiscuous mode
[  125.846993][ T6050] veth0_macvtap: left promiscuous mode
[  125.857424][ T6050] veth1_vlan: left promiscuous mode
[  125.865175][ T6050] veth0_vlan: left promiscuous mode
[  126.100574][ T6050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  126.189383][ T6050] bond0 (unregistering): Released all slaves
[  126.603552][ T6050] team0 (unregistering): Port device team_slave_1 removed
[  126.645836][ T6050] team0 (unregistering): Port device team_slave_0 removed
[  126.686234][ T6050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  126.728046][ T6050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  127.049303][ T6050] bond0 (unregistering): Released all slaves
[  127.452961][ T6050] team0 (unregistering): Port device team_slave_1 removed
[  127.489695][ T6050] team0 (unregistering): Port device team_slave_0 removed
[  127.528161][ T6050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  127.572663][ T6050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  127.965584][ T6050] bond0 (unregistering): Released all slaves
[  128.744471][ T6050] IPVS: stop unused estimator thread 0...
[  128.913376][   T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.012720][   T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.083680][   T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.181006][   T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.368446][   T42] tipc: Disabling bearer <udp:syz2>
[  129.381067][   T42] tipc: Left network mode
[  130.316014][   T42] hsr_slave_0: left promiscuous mode
[  130.324102][   T42] hsr_slave_1: left promiscuous mode
[  130.346780][   T42] veth1_macvtap: left promiscuous mode
[  130.352497][   T42] veth0_macvtap: left promiscuous mode
[  130.358150][   T42] veth1_vlan: left promiscuous mode
[  130.364994][   T42] veth0_vlan: left promiscuous mode