last executing test programs:

6m44.899905344s ago: executing program 0 (id=187):
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r0}, 0x38)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000008c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0xc200040, 0x0, 0x8, 0x0, 0x1ff, 0x0, 0x0, 0x8}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f0000008900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000bcd4681f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b2c1ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xb, {0x0, 0x19}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
writev(r3, &(0x7f0000000780)=[{&(0x7f00000000c0)="2f647385213c4fd4cbf1de815a4bd06d48940de61e274be57369cbd8ba3cda97486f5b7d699223f868", 0x29}], 0x1000000000000104)

6m40.263500383s ago: executing program 0 (id=192):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000)
keyctl$setperm(0x5, 0x0, 0x200a0204)
r4 = memfd_create(&(0x7f0000000000)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\x1c\xe4\xd8\xb58\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\x00\b\x00\x00X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31\xb0\x87O\xc3\xa3AW\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]~\xfc1\xe5w\"\xa3\x8d\xe7\xd4x\xb3\xfa(\xc9\xc2bb\xb1\xa8\xe1\xc2\xec\xca\x7f\xe1\x1e\xb9\xd4\x80-6L\x91\x9b\xad\x85`\xf2+\xfbN+\x0e\xa6\xc4M\xda\xfc\xa1gZ)STB\xd1\xd1\xf1', 0x1)
ftruncate(r4, 0x80007)

6m38.790148282s ago: executing program 0 (id=193):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)

6m32.399595684s ago: executing program 0 (id=201):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1000, 0x1)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0xf00, 0x0)
fanotify_mark(r1, 0x1, 0x1000003a, r0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x101000, 0x128)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r6, &(0x7f0000000000)='7', 0x1)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)

6m31.289769676s ago: executing program 0 (id=202):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

6m25.509023149s ago: executing program 0 (id=207):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt(r4, 0xff, 0x1, 0xfffffffffffffffe, 0xf)
r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x902, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0)
unshare(0x400)
r6 = userfaultfd(0x1)
ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0)
ioctl$PTP_PIN_SETFUNC(r5, 0x40603d07, 0x0)

6m10.378252812s ago: executing program 32 (id=207):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt(r4, 0xff, 0x1, 0xfffffffffffffffe, 0xf)
r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x902, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0)
unshare(0x400)
r6 = userfaultfd(0x1)
ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0)
ioctl$PTP_PIN_SETFUNC(r5, 0x40603d07, 0x0)

4m37.037047912s ago: executing program 1 (id=305):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000240)={[{@minixdf}, {@usrquota}, {@nombcache}, {@nombcache}, {@user_xattr}, {@debug}]}, 0x1, 0x529, &(0x7f0000000580)="$eJzs3c9vI1cdAPCvvevEm2Q3aekBELRLW7Sg1TqJt42qHqAcEaqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU40SN/AOeeOHDjguDGpRyQ+BGBGiQOg2Y8Tp2svbGaHw7x5yON5r2ZyXzfsz3v7Tyv5wUwtu5GxH5ETETEuxExm28v5Eu81VnS4z49eLJyePBkpRBJ8s4/Ctn+dFv0/E1qOj9nOSJ+8FHEjwtPx23t7m0s1+u17Tw/325szbd29x6sN5bXamu1zWp1aXFp4Y2Hr1fPra4vNSby1Fc/+f3+N3+aFmsm39Jbj/PUqXrpKE7qZkR87yKCjcCNvD4Toy4In0sxIp6PiJez6382bmTvJgBwnSXJbCSzvXkA4LorZmNghWIlHwuYiWKxUumM4b0QU8V6s9W+/7i5s7naGSubi1Lx8Xq9tpCPFc5FqZDmF7P0Z/nqifzDiHguIn4+eSvLV1aa9dVR/sMHAMbY9In+/9+Tnf4fALjmyqMuAABw6Qb0//uXXQ4A4PK4/weA8aP/B4DxU86e4XBr1MUAAC6R+38AGD/6fwAYK99/++10SQ7z51+vvre7s9F878FqrbVRaeysVFaa21uVtWZzLXtmT+O089Wbza3F12Ln/blvbbXa863dvUeN5s5m+1H2XO9HtVJ2lF8WAMAoPffSx38qpD3ym7eyJXrmciiNtGTARSuOugDAyNwYkAauP7N9wfg6wz2+4QG4JvpM0XtMOfr8QChJkuTiigRcsHtfMv4P46pn/N//AoYxY8wfxpfxfxhfSVIYds7/GPZAAOBqM8YPDPj+//l8/ev8y4EfrZ484sOLLBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcbd35fyv5XOAzUSxWKhG3I2IuSoXH6/XaQkTciYg/TpYm0/ziiMsMAJxV8a+FfP6ve7Ovzhzb9eL0UXIiIn7yy3d+8f5yu739h4iJwj8nu9vbH+bbq5dfegDgdN1+Olv33Mh/evBkpbtcZnn+9p2IKHfiHx5MxOFR/JtxM1uXoxQRU/8q5PmOQs/YxVnsfxARX+yt/+RRhJlsDKQz8+nJ+Gns2xcSv1v/4/FvR/FY/GK2r7NOX4svxOw5lAbGy8dp+/NWv+uvGHezdf/rv5y1UGeXt3/pqVYOszbws/jd9u/GgPbv7rAxXvvtdzupW0/v+yDiyzcjurEPe9qfbvzCgPivDhn/z1958eVB+5JfRdyL/vF7Y823G1vzrd29B+uN5bXaWm2zWl1aXFp44+Hr1flsjHp+cG/w9zfv3xm0L63/1ID45VPq//Uh6//Rf9/94deeEf8br/SLX4wXnhG/FJEMGT6Wp35THrQvjb86oP6nvf/3j52pNDD+J3/Ze2racABgdFq7exvL9Xpt+1mJO4cRpx3zf5mI4Q7+Xf5ipVsmI4b8K4nzT6TvwhUoRt/Et3u2TMcFxpoYcDH+7JXOx/TERzRJPlesQS3GeYy6AVfB0UUfEf8ZdWEAAAAAAAAAAAAAAIC+LuPXUaOuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANfX/wIAAP//ucvGvQ==")
quotactl$Q_QUOTAON(0xffffffff80000202, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

4m37.019064912s ago: executing program 4 (id=306):
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x120000, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
utime(&(0x7f00000000c0)='.\x00', &(0x7f0000000180)={0x5, 0x6})
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={<r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0x1, 0x4b, 0x0, &(0x7f0000000040))
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0xffffffff, 0x4, 0x1}, 0x48)
futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000)
r4 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xfffdffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})

4m33.397726493s ago: executing program 1 (id=312):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xd0)
setresuid(0x0, 0x0, 0xee00)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8004)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0)

4m27.30873582s ago: executing program 4 (id=321):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x3, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y")
openat(0xffffffffffffff9c, &(0x7f0000000880)='./file1\x00', 0x101042, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x458, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4b8)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)

4m24.725339322s ago: executing program 1 (id=325):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c0002800500"], 0xb8}}, 0x0)

4m22.849087311s ago: executing program 4 (id=328):
r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f03e, 0x2})

4m22.580981933s ago: executing program 1 (id=329):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000200)={r0, r0, 0xc, 0x0, 0x0, 0x9, 0x1, 0x4f3, 0x1009, 0x209, 0x1, 0x1, 'syz1\x00'})
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000000)={0x2, &(0x7f00000002c0)=[{@none}, {}]})

4m20.469937212s ago: executing program 4 (id=332):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)
stat(&(0x7f00000003c0)='./file1\x00', 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsetxattr$security_capability(r4, &(0x7f0000000000), &(0x7f00000002c0)=@v2={0x2000000, [{0xbac0, 0x9}, {0x10001, 0x5}]}, 0x14, 0x1)
write$binfmt_script(r4, &(0x7f0000000080), 0x4)

4m18.867035688s ago: executing program 4 (id=333):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xd0)
setresuid(0x0, 0x0, 0xee00)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8004)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0)

4m18.786467272s ago: executing program 1 (id=334):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0xfffffffffffffffe, 0xf)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0x0)

4m15.728196716s ago: executing program 1 (id=336):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socket(0x400000000010, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="2703", 0x2}], 0x1}, 0x20040000)

4m10.023847185s ago: executing program 4 (id=341):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0xfff2, 0x4}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040089}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x7, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x880)

4m0.678177236s ago: executing program 33 (id=336):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socket(0x400000000010, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="2703", 0x2}], 0x1}, 0x20040000)

3m54.751621665s ago: executing program 34 (id=341):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0xfff2, 0x4}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040089}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x7, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x880)

13.892734666s ago: executing program 2 (id=609):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="4001"], 0x87)

13.524303523s ago: executing program 2 (id=610):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xd0)
setresuid(0x0, 0x0, 0xee00)
inotify_init1(0x800)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8004)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0)

12.287171581s ago: executing program 5 (id=613):
socket$nl_netfilter(0x10, 0x3, 0xc)
epoll_create1(0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
pipe(&(0x7f0000000200))
socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0)

12.134291649s ago: executing program 5 (id=614):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = dup3(r5, r4, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000a80), 0x0, 0x0, 0x0})

10.672466507s ago: executing program 2 (id=615):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x3adb80, 0x0)
fcntl$setflags(r1, 0x2, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = fspick(r0, &(0x7f00000000c0)='./file1\x00', 0x0)
munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000)
mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f00005d7000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0xfe, 0x53, 0x3, 0x58, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2={0xff, 0x5}, 0x8, 0x40, 0xe3e1, 0xcff}})
fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000180)='rw\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3)
r5 = syz_open_dev$evdev(&(0x7f00000006c0), 0x2, 0x2)
ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000040)=0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$PPPIOCSMRU1(r6, 0x40047452, &(0x7f0000000000)=0x4000004)

10.665921678s ago: executing program 5 (id=616):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', 0x1, 0x0)
write$binfmt_format(r0, &(0x7f0000000180)='0\x00', 0x2)

8.665018022s ago: executing program 3 (id=621):
r0 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='name', &(0x7f0000001040)='l\xa4\x9e\xab`\xf6\xfa\xfdC\x945\xa81\xad\xa2\xf4\xf5\x19\x82\xbb\x81G6\xa5\x973\xc7', 0x0)

8.590974096s ago: executing program 6 (id=622):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1000, 0x1)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0xf00, 0x0)
fanotify_mark(r1, 0x1, 0x1000003a, r0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x101000, 0x128)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r4, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r6, &(0x7f0000000000)='7', 0x1)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)

7.838018861s ago: executing program 5 (id=623):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xd0)
setresuid(0x0, 0x0, 0xee00)
inotify_init1(0x800)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8004)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0)

7.754211515s ago: executing program 2 (id=624):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x9, 0x5, 0x7, 0xfff, 0x0, 0x5, 0x4}, &(0x7f0000000580)=0x9c)

6.670117736s ago: executing program 2 (id=625):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x2, 0x6, 0xe652, 0x2, 0x4, 0x8, 0x2}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x1, 0xf06, 0x0, 0xac, 0x81, 0x5}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x401, 0x1, 0xffff1896, 0x5, 0xa6, 0x0, 0x6}, 0x9c)

6.457871986s ago: executing program 3 (id=626):
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0)
add_key$keyring(&(0x7f0000000680), 0x0, 0x0, 0x0, 0xffffffffffffffff)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x5c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x2c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0x1c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40810}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000a80)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x4, 0xfff7, 0x88, 0x4, 0x7, 0x1, "6bb7d065"}}, 0x11c)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

6.321425513s ago: executing program 5 (id=627):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000010000011400040000000000000000000000ffffffffffff08000740010000012400068014000400000000"], 0xb8}}, 0x0)
r3 = inotify_init1(0x80000)
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$NILFS_IOCTL_SET_SUINFO(r3, 0x40186e8d, 0x0)
r4 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'})

4.983679896s ago: executing program 5 (id=628):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$packet(0x11, 0x4, 0x300)
sendto$packet(r0, &(0x7f0000000000)="150120ab9dd930074f6716ac7c3c6e09c67b32664b28e037ff36e6af9fb87a9f7cf28884d91e583c2966967bcff6f24b0076ea15f6a42828e4201eb22a66e8e92211be526498151fbbc9b36af38fce1aeeea2ca56393c317a776fff8d6bd795b86d8c228834d11c74d61aa2a5a1d1ae0c759392303", 0x75, 0x40000, &(0x7f0000000080)={0x11, 0xe3, 0x0, 0x1, 0xa, 0x6, @random="481036ad4396"}, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'macsec0\x00', <r4=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @local}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r4, {0x5, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040054)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec00000010000108000000008100000000000000", @ANYRES32=r2, @ANYBLOB="0b00000000000000cc001a8018000a80140007"], 0xec}, 0x1, 0x0, 0x0, 0x20000010}, 0x200080c4)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000002f0009002abd700000000000040000002e001180e796bd6dd4254194e09d498fc605baa5fe20e0f8a725f9f47392a70f555def59"], 0x44}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
r6 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r6, 0x0, 0x0)
setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_int(r6, 0x1, 0x8, 0x0, 0x0)
bind$inet(r6, &(0x7f0000000640)={0x2, 0x4e24, @private=0xa010100}, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$tun(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="000088a80280050002000100c204fcdf600006010009aaaaaaaaaa32a9aaaaaaaaaaaa15d84d2c15228c2246"], 0x2c)
socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0x142}, {&(0x7f0000000d00)}], 0x2}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x20048040)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, 0x0, 0x8002)

4.873847971s ago: executing program 3 (id=629):
openat$nvram(0xffffffffffffff9c, 0x0, 0x120000, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
utime(&(0x7f00000000c0)='.\x00', &(0x7f0000000180)={0x5, 0x6})
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={<r3=>0xffffffffffffffff})
getsockopt$sock_cred(r3, 0x1, 0x4b, 0x0, &(0x7f0000000040))
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0xffffffff, 0x4, 0x1}, 0x48)
futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000)
r5 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xfffdffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})

3.40194963s ago: executing program 3 (id=630):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.172638561s ago: executing program 6 (id=631):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
socket$netlink(0x10, 0x3, 0x0)
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff)

2.690543604s ago: executing program 2 (id=632):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x40000142, 0x0)
sendfile(r1, r0, &(0x7f0000002080)=0x58, 0x12)
r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x90, 0x0)
write$FUSE_INIT(r3, 0x0, 0x0)
syz_fuse_handle_req(r3, &(0x7f00000063c0)="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", 0x2000, 0x0)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000000)=@rnullb, 0x0, 0x0)
pwritev(r1, &(0x7f0000000640)=[{&(0x7f0000000100)="ea8c82f9e7", 0x5}], 0x1, 0x3815, 0x1)

2.490298373s ago: executing program 6 (id=633):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x9, 0x5, 0x7, 0xfff, 0x0, 0x5, 0x4}, &(0x7f0000000580)=0x9c)

2.12598937s ago: executing program 6 (id=634):
syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000)
io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

1.878803822s ago: executing program 3 (id=635):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xd0)
setresuid(0x0, 0x0, 0xee00)
inotify_init1(0x800)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8004)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0)

699.274137ms ago: executing program 3 (id=636):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000240)={[{@minixdf}, {@usrquota}, {@nombcache}, {@nombcache}, {@user_xattr}, {@debug}]}, 0x1, 0x529, &(0x7f0000000580)="$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")
quotactl$Q_QUOTAON(0xffffffff80000202, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, 0x0, 0x8)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
execve(0x0, 0x0, 0x0)
sendmsg$nl_generic(r0, 0x0, 0x20000080)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x13e)

137.968034ms ago: executing program 6 (id=637):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, 0x7, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x67}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xdd2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c001}, 0x40880)

0s ago: executing program 6 (id=638):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='/dev/ram0,6', 0xb)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.25' (ED25519) to the list of known hosts.
[   74.311616][ T5763] cgroup: Unknown subsys name 'net'
[   74.445316][ T5763] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   76.164597][ T5763] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   78.383574][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   78.408247][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   78.417134][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   78.424669][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   78.460826][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   78.468909][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   78.477219][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   78.485034][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   78.493385][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   78.502562][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   78.509339][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   78.510348][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   78.517793][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   78.525056][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   78.532252][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   78.539196][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   78.568888][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   78.571281][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   78.586675][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   78.598433][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   78.606439][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   78.614436][ T5086] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   78.614662][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   78.621958][ T5086] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   79.031203][ T5778] chnl_net:caif_netlink_parms(): no params data found
[   79.157695][ T5774] chnl_net:caif_netlink_parms(): no params data found
[   79.214175][ T5783] chnl_net:caif_netlink_parms(): no params data found
[   79.234584][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.241916][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.250749][ T5778] bridge_slave_0: entered allmulticast mode
[   79.257604][ T5778] bridge_slave_0: entered promiscuous mode
[   79.301919][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.309753][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.316984][ T5778] bridge_slave_1: entered allmulticast mode
[   79.325222][ T5778] bridge_slave_1: entered promiscuous mode
[   79.383024][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.394726][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.408488][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.415615][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.424852][ T5774] bridge_slave_0: entered allmulticast mode
[   79.431823][ T5774] bridge_slave_0: entered promiscuous mode
[   79.439860][ T5784] chnl_net:caif_netlink_parms(): no params data found
[   79.467537][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.476539][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.483866][ T5774] bridge_slave_1: entered allmulticast mode
[   79.491476][ T5774] bridge_slave_1: entered promiscuous mode
[   79.544378][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.575992][ T5778] team0: Port device team_slave_0 added
[   79.585182][ T5778] team0: Port device team_slave_1 added
[   79.605443][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.627572][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.637283][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.644847][ T5783] bridge_slave_0: entered allmulticast mode
[   79.651849][ T5783] bridge_slave_0: entered promiscuous mode
[   79.660423][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.667547][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.674857][ T5783] bridge_slave_1: entered allmulticast mode
[   79.682232][ T5783] bridge_slave_1: entered promiscuous mode
[   79.715219][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.722648][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.749133][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.786333][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.793593][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.819986][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.847741][ T5774] team0: Port device team_slave_0 added
[   79.876609][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.890259][ T5774] team0: Port device team_slave_1 added
[   79.899021][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.916394][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.923757][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.931095][ T5784] bridge_slave_0: entered allmulticast mode
[   79.937889][ T5784] bridge_slave_0: entered promiscuous mode
[   79.974997][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.982520][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.989821][ T5784] bridge_slave_1: entered allmulticast mode
[   79.996679][ T5784] bridge_slave_1: entered promiscuous mode
[   80.034742][ T5778] hsr_slave_0: entered promiscuous mode
[   80.041403][ T5778] hsr_slave_1: entered promiscuous mode
[   80.079914][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.086900][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.113432][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.130452][ T5783] team0: Port device team_slave_0 added
[   80.143457][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.154187][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.161591][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.187698][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.207688][ T5783] team0: Port device team_slave_1 added
[   80.235047][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.266345][ T5784] team0: Port device team_slave_0 added
[   80.289204][ T5784] team0: Port device team_slave_1 added
[   80.313746][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.320793][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.346998][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.395634][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.402826][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.429815][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.446944][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.456368][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.484933][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.508683][ T5774] hsr_slave_0: entered promiscuous mode
[   80.514961][ T5774] hsr_slave_1: entered promiscuous mode
[   80.523927][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.531811][ T5774] Cannot create hsr debugfs directory
[   80.552024][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.559091][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.585611][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.599007][   T51] Bluetooth: hci1: command tx timeout
[   80.668412][ T5783] hsr_slave_0: entered promiscuous mode
[   80.677058][ T5783] hsr_slave_1: entered promiscuous mode
[   80.682757][   T51] Bluetooth: hci0: command tx timeout
[   80.688413][   T51] Bluetooth: hci2: command tx timeout
[   80.688728][ T5086] Bluetooth: hci3: command tx timeout
[   80.699657][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.707236][ T5783] Cannot create hsr debugfs directory
[   80.781114][ T5784] hsr_slave_0: entered promiscuous mode
[   80.787405][ T5784] hsr_slave_1: entered promiscuous mode
[   80.794139][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.801793][ T5784] Cannot create hsr debugfs directory
[   81.077519][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   81.091563][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   81.101437][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   81.116110][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   81.204133][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   81.222773][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   81.241287][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   81.252975][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   81.335900][ T5783] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   81.352288][ T5783] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   81.362535][ T5783] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   81.373674][ T5783] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   81.469733][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   81.481508][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   81.501123][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   81.513450][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   81.542940][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.602503][ T5778] 8021q: adding VLAN 0 to HW filter on device team0
[   81.631165][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.638568][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.655448][ T2980] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.662597][ T2980] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.724975][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.816185][ T5774] 8021q: adding VLAN 0 to HW filter on device team0
[   81.853354][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.873054][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.890673][ T1027] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.897964][ T1027] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.931677][ T5783] 8021q: adding VLAN 0 to HW filter on device team0
[   81.945446][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.952654][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.979832][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.987031][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.021124][ T3558] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.028359][ T3558] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.051987][ T5784] 8021q: adding VLAN 0 to HW filter on device team0
[   82.107869][ T2980] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.115077][ T2980] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.146362][ T2980] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.153560][ T2980] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.183902][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.240734][ T5784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   82.356270][ T5778] veth0_vlan: entered promiscuous mode
[   82.417041][ T5778] veth1_vlan: entered promiscuous mode
[   82.537154][ T5778] veth0_macvtap: entered promiscuous mode
[   82.565376][ T5778] veth1_macvtap: entered promiscuous mode
[   82.616953][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.637175][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.664906][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.679934][ T5086] Bluetooth: hci1: command tx timeout
[   82.695605][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.705588][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.715281][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.724596][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.758732][ T5086] Bluetooth: hci3: command tx timeout
[   82.762304][   T51] Bluetooth: hci2: command tx timeout
[   82.764173][ T5086] Bluetooth: hci0: command tx timeout
[   82.879613][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.941219][ T5774] veth0_vlan: entered promiscuous mode
[   82.962958][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.977986][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.019516][ T5774] veth1_vlan: entered promiscuous mode
[   83.036721][ T1027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.049656][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.065282][ T1027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.102244][ T5784] veth0_vlan: entered promiscuous mode
[   83.140412][ T5784] veth1_vlan: entered promiscuous mode
[   83.176788][ T5774] veth0_macvtap: entered promiscuous mode
[   83.222273][ T5774] veth1_macvtap: entered promiscuous mode
[   84.680633][ T5784] veth0_macvtap: entered promiscuous mode
[   84.754502][ T5784] veth1_macvtap: entered promiscuous mode
[   84.763841][ T5086] Bluetooth: hci1: command tx timeout
[   84.815623][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.827689][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.840115][ T5086] Bluetooth: hci0: command tx timeout
[   84.840333][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.852830][ T5086] Bluetooth: hci2: command tx timeout
[   84.852860][ T5086] Bluetooth: hci3: command tx timeout
[   84.921797][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.938813][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.957401][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.971996][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.984178][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.994462][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.006232][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.020481][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.043030][ T5783] veth0_vlan: entered promiscuous mode
[   85.053823][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.064254][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.075442][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.085085][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.113511][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.125408][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.135900][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.154010][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.176339][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.207976][ T5783] veth1_vlan: entered promiscuous mode
[   85.252960][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.262916][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.272269][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.281409][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.326159][ T5783] veth0_macvtap: entered promiscuous mode
[   85.371658][ T5783] veth1_macvtap: entered promiscuous mode
[   86.218731][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.226837][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.286603][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.328392][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.363094][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.394583][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.415010][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.427926][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.454851][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.536154][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.583899][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.608173][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.658290][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.698179][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.725681][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.751342][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.821498][ T3529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.838781][ T5777] Bluetooth: hci1: command tx timeout
[   86.887019][ T3529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.899257][ T5783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.908004][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.933089][ T5777] Bluetooth: hci3: command tx timeout
[   86.947693][ T5777] Bluetooth: hci2: command tx timeout
[   86.953268][ T5777] Bluetooth: hci0: command tx timeout
[   86.986675][ T5783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.019858][ T5783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.111311][ T3529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.157535][ T3529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.235638][ T5848] sched: RT throttling activated
[   87.428349][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.436262][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.781023][ T5866] binder: 5861:5866 ioctl c0306201 0 returned -14
[   87.792383][ T5866] binder: 5861:5866 ioctl c0306201 0 returned -14
[   87.832286][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.151156][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.601138][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.628914][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.430696][   T27] audit: type=1326 audit(1790136467.789:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.2.3" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7facd8d9e159 code=0x0
[   92.051738][ T1202] cfg80211: failed to load regulatory.db
[   92.689732][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[   96.158124][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   96.568209][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[   98.175236][ T5909] binder: 5906:5909 ioctl c0306201 0 returned -14
[   98.185661][ T5909] binder: 5906:5909 ioctl c0306201 0 returned -14
[   98.900250][ T5911] syz.3.20[5911]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   98.962812][ T5911] loop3: detected capacity change from 0 to 128
[   99.052935][ T5911] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  100.317501][ T3558] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  101.278130][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!!
[  104.299645][ T5925] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  106.808171][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  106.964362][ T5943] binder: 5939:5943 ioctl c0306201 0 returned -14
[  106.974192][ T5943] binder: 5939:5943 ioctl c0306201 0 returned -14
[  112.571303][ T5960] FAULT_INJECTION: forcing a failure.
[  112.571303][ T5960] name failslab, interval 1, probability 0, space 0, times 1
[  112.618199][ T5960] CPU: 0 PID: 5960 Comm: syz.3.34 Not tainted syzkaller #0
[  112.625481][ T5960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  112.635614][ T5960] Call Trace:
[  112.638927][ T5960]  <TASK>
[  112.641888][ T5960]  dump_stack_lvl+0x18c/0x250
[  112.646616][ T5960]  ? show_regs_print_info+0x20/0x20
[  112.651862][ T5960]  ? load_image+0x420/0x420
[  112.656409][ T5960]  ? __might_sleep+0xe0/0xe0
[  112.661039][ T5960]  ? __lock_acquire+0x7d80/0x7d80
[  112.666114][ T5960]  should_fail_ex+0x394/0x4c0
[  112.670843][ T5960]  should_failslab+0x9/0x20
[  112.675387][ T5960]  slab_pre_alloc_hook+0x59/0x300
[  112.680464][ T5960]  ? memcg_alloc_slab_cgroups+0x85/0x120
[  112.686144][ T5960]  ? memcg_alloc_slab_cgroups+0x85/0x120
[  112.691817][ T5960]  __kmem_cache_alloc_node+0x53/0x250
[  112.697238][ T5960]  ? memcg_alloc_slab_cgroups+0x85/0x120
[  112.703033][ T5960]  __kmalloc_node+0xa6/0x240
[  112.707684][ T5960]  memcg_alloc_slab_cgroups+0x85/0x120
[  112.713184][ T5960]  slab_post_alloc_hook+0xec/0x4d0
[  112.718442][ T5960]  kmem_cache_alloc_lru+0x175/0x2b0
[  112.723684][ T5960]  ? __d_alloc+0x31/0x710
[  112.728052][ T5960]  __d_alloc+0x31/0x710
[  112.732248][ T5960]  d_alloc_pseudo+0x1d/0x70
[  112.736800][ T5960]  alloc_file_pseudo+0xe4/0x210
[  112.741703][ T5960]  ? fput+0x1a0/0x1a0
[  112.745724][ T5960]  ? anon_inode_make_secure_inode+0xfb/0x160
[  112.751754][ T5960]  ? do_compat_epoll_pwait+0x1c0/0x1c0
[  112.757272][ T5960]  ? __might_fault+0xaa/0x120
[  112.761992][ T5960]  __anon_inode_getfile+0x129/0x200
[  112.767244][ T5960]  io_uring_create+0xbec/0x1330
[  112.772145][ T5960]  __se_sys_io_uring_setup+0x29f/0x2b0
[  112.777659][ T5960]  ? __x64_sys_io_uring_setup+0x60/0x60
[  112.783263][ T5960]  ? lockdep_hardirqs_on+0x98/0x150
[  112.788499][ T5960]  do_syscall_64+0x55/0xb0
[  112.792978][ T5960]  ? clear_bhb_loop+0x40/0x90
[  112.797694][ T5960]  ? clear_bhb_loop+0x40/0x90
[  112.802411][ T5960]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  112.808351][ T5960] RIP: 0033:0x7f5e5239e159
[  112.812808][ T5960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  112.832674][ T5960] RSP: 002b:00007f5e532e5fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  112.841132][ T5960] RAX: ffffffffffffffda RBX: 0000200000000180 RCX: 00007f5e5239e159
[  112.849141][ T5960] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000002
[  112.857153][ T5960] RBP: 00007f5e5243506b R08: 0000000000000000 R09: 0000000000000000
[  112.865255][ T5960] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  112.873263][ T5960] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff6b024668
[  112.881288][ T5960]  </TASK>
[  113.162260][ T5962] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  114.078138][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  115.314669][ T5973] binder: 5969:5973 ioctl c0306201 0 returned -14
[  115.324890][ T5973] binder: 5969:5973 ioctl c0306201 0 returned -14
[  116.638517][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!!
[  117.048096][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  121.758148][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  126.396191][ T6014] capability: warning: `syz.1.42' uses deprecated v2 capabilities in a way that may be insecure
[  129.198138][ T6025] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  129.848099][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  131.021938][ T6028] binder: 6027:6028 ioctl c0306201 0 returned -14
[  131.035165][ T6028] binder: 6027:6028 ioctl c0306201 0 returned -14
[  132.728871][ T6043] loop2: detected capacity change from 0 to 128
[  133.002815][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  133.013380][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  137.651340][ T6064] loop2: detected capacity change from 0 to 2048
[  137.941296][ T6064] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.314341][ T6080] EXT4-fs error (device loop2) in ext4_setattr:5695: Corrupt filesystem
[  140.198569][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.086974][ T6091] loop2: detected capacity change from 0 to 4096
[  142.520215][ T6091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.880478][   T27] audit: type=1326 audit(1790136519.569:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6101 comm="syz.1.67" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc86859e159 code=0x0
[  144.210594][ T6105] binder: 6097:6105 ioctl c0306201 0 returned -14
[  144.242132][ T6105] binder: 6097:6105 ioctl c0306201 0 returned -14
[  144.701188][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.186333][ T6128] loop1: detected capacity change from 0 to 256
[  151.262114][ T6128] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  152.019307][   T27] audit: type=1800 audit(1790136528.529:4): pid=6128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.68" name="file1" dev="loop1" ino=1048596 res=0 errno=0
[  153.878115][   T27] audit: type=1326 audit(1790136529.559:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.1.77" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc86859e159 code=0x0
[  165.238488][ T6181] 9pnet_fd: Insufficient options for proto=fd
[  174.015148][ T6215] loop2: detected capacity change from 0 to 1756
[  174.238439][ T6215] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  174.337751][ T6215] UDF-fs: Scanning with blocksize 512 failed
[  175.532100][ T6215] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  175.640166][ T6215] UDF-fs: Scanning with blocksize 1024 failed
[  175.873847][ T6215] UDF-fs: INFO Mounting volume 'CDROM', timestamp 2022/11/22 15:59 (1000)
[  178.102420][ T6232] Bluetooth: MGMT ver 1.22
[  181.878751][   T27] audit: type=1326 audit(1790136558.389:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.1.102" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc86859e159 code=0x0
[  189.738467][ T6276] 9pnet_fd: Insufficient options for proto=fd
[  194.442907][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  194.449522][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  200.326067][ T6329] 9pnet_fd: Insufficient options for proto=fd
[  202.632946][ T5788] Bluetooth: hci1: command 0x0406 tx timeout
[  202.638221][ T5786] Bluetooth: hci3: command 0x0406 tx timeout
[  202.641598][ T5788] Bluetooth: hci2: command 0x0406 tx timeout
[  202.645014][ T5782] Bluetooth: hci0: command 0x0406 tx timeout
[  250.959042][ T6505] fuse: Bad value for 'group_id'
[  256.390025][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  256.396450][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  261.832627][ T6554] fuse: Bad value for 'group_id'
[  264.504175][ T6569] binder: 6564:6569 ioctl c0306201 0 returned -14
[  264.535168][ T6569] binder: 6564:6569 ioctl c0306201 0 returned -14
[  273.272029][   T27] audit: type=1326 audit(1790136649.189:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.3.189" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e5239e159 code=0x0
[  277.547721][ T6620] binder: 6616:6620 ioctl c0306201 0 returned -14
[  277.588182][ T6620] binder: 6616:6620 ioctl c0306201 0 returned -14
[  283.076273][ T6642] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[  283.084345][ T6642] audit: out of memory in audit_log_start
[  287.934578][ T6664] binder: 6660:6664 ioctl c0306201 0 returned -14
[  287.941773][ T6664] binder: 6660:6664 ioctl c0306201 0 returned -14
[  292.191372][ T6679] loop2: detected capacity change from 0 to 512
[  292.290803][ T6679] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec099, mo2=0002]
[  292.338622][ T6679] System zones: 0-2, 18-18, 34-35
[  292.399122][ T6679] EXT4-fs error (device loop2): ext4_ext_check_inode:532: inode #4: comm syz.2.205: pblk 0 bad header/extent: invalid magic - magic d, entries 2, max 4(0), depth 0(0)
[  292.466699][ T6679] EXT4-fs error (device loop2): ext4_quota_enable:7147: comm syz.2.205: Bad quota inode: 4, type: 1
[  292.514398][ T6679] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  292.573091][ T6679] EXT4-fs (loop2): mount failed
[  298.199898][ T6702] loop2: detected capacity change from 0 to 2048
[  298.321892][ T6702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  298.529679][ T6707] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  298.631206][ T6707] EXT4-fs error (device loop2) in ext4_setattr:5695: error 28
[  298.978310][ T6711] binder: 6699:6711 ioctl c0306201 0 returned -14
[  298.986023][ T6711] binder: 6699:6711 ioctl c0306201 0 returned -14
[  299.753068][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.234420][ T6730] loop2: detected capacity change from 0 to 512
[  302.342774][ T6730] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec099, mo2=0002]
[  302.381560][ T6730] System zones: 0-2, 18-18, 34-35
[  302.452021][ T6730] EXT4-fs error (device loop2): ext4_ext_check_inode:532: inode #4: comm syz.2.219: pblk 0 bad header/extent: invalid magic - magic d, entries 2, max 4(0), depth 0(0)
[  302.524213][ T6730] EXT4-fs error (device loop2): ext4_quota_enable:7147: comm syz.2.219: Bad quota inode: 4, type: 1
[  302.570704][ T6730] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  302.645686][ T6730] EXT4-fs (loop2): mount failed
[  305.573489][ T5086] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  305.588345][ T5086] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  305.598603][ T5086] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  305.609511][ T5086] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  305.628234][ T5086] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  305.635529][ T5086] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  306.629167][ T6737] chnl_net:caif_netlink_parms(): no params data found
[  306.863870][ T1027] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.033516][ T6755] loop3: detected capacity change from 0 to 128
[  307.191335][ T1027] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.718745][   T51] Bluetooth: hci4: command tx timeout
[  308.321666][ T1027] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.438585][ T6737] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.496915][ T6737] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.527711][ T6737] bridge_slave_0: entered allmulticast mode
[  308.538764][ T6737] bridge_slave_0: entered promiscuous mode
[  308.554455][ T6737] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.568655][ T6737] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.575884][ T6737] bridge_slave_1: entered allmulticast mode
[  308.630486][ T6737] bridge_slave_1: entered promiscuous mode
[  308.802690][ T1027] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.855800][ T6737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  309.910405][ T6737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  310.038198][   T51] Bluetooth: hci4: command tx timeout
[  310.477408][ T6737] team0: Port device team_slave_0 added
[  310.497679][ T6737] team0: Port device team_slave_1 added
[  310.747746][ T6737] batman_adv: batadv0: Adding interface: batadv_slave_0
[  310.848647][ T6737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  310.958069][ T6737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  311.058110][ T6737] batman_adv: batadv0: Adding interface: batadv_slave_1
[  311.065113][ T6737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.243462][ T6737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  312.398288][   T51] Bluetooth: hci4: command tx timeout
[  313.711898][ T6737] hsr_slave_0: entered promiscuous mode
[  313.748666][ T6737] hsr_slave_1: entered promiscuous mode
[  313.788274][ T6737] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  313.795907][ T6737] Cannot create hsr debugfs directory
[  314.438131][   T51] Bluetooth: hci4: command tx timeout
[  315.979099][ T6808] FAULT_INJECTION: forcing a failure.
[  315.979099][ T6808] name failslab, interval 1, probability 0, space 0, times 0
[  315.991793][ T6808] CPU: 1 PID: 6808 Comm: syz.1.231 Not tainted syzkaller #0
[  315.999076][ T6808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  316.009145][ T6808] Call Trace:
[  316.012428][ T6808]  <TASK>
[  316.015365][ T6808]  dump_stack_lvl+0x18c/0x250
[  316.020050][ T6808]  ? show_regs_print_info+0x20/0x20
[  316.025248][ T6808]  ? load_image+0x420/0x420
[  316.029765][ T6808]  ? __might_sleep+0xe0/0xe0
[  316.034382][ T6808]  ? __lock_acquire+0x7d80/0x7d80
[  316.039408][ T6808]  should_fail_ex+0x394/0x4c0
[  316.044091][ T6808]  should_failslab+0x9/0x20
[  316.048597][ T6808]  slab_pre_alloc_hook+0x59/0x300
[  316.053625][ T6808]  ? __kasan_slab_alloc+0x6c/0x80
[  316.058656][ T6808]  kmem_cache_alloc_node+0x5e/0x310
[  316.063871][ T6808]  ? __alloc_skb+0x103/0x2c0
[  316.068480][ T6808]  __alloc_skb+0x103/0x2c0
[  316.072897][ T6808]  audit_log_start+0x15e/0x890
[  316.077666][ T6808]  ? audit_serial+0x30/0x30
[  316.082170][ T6808]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  316.088153][ T6808]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  316.094134][ T6808]  audit_seccomp+0x63/0x180
[  316.098640][ T6808]  __secure_computing+0x22c/0x2f0
[  316.103667][ T6808]  syscall_trace_enter+0xab/0x150
[  316.108702][ T6808]  do_syscall_64+0x28/0xb0
[  316.113135][ T6808]  ? clear_bhb_loop+0x40/0x90
[  316.117842][ T6808]  ? clear_bhb_loop+0x40/0x90
[  316.122521][ T6808]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  316.128432][ T6808] RIP: 0033:0x7fc86859e159
[  316.132861][ T6808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  316.152498][ T6808] RSP: 002b:00007fc8693d99f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  316.160913][ T6808] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007fc86859e159
[  316.168914][ T6808] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000b
[  316.176879][ T6808] RBP: 00007fc8693da030 R08: 0000000000000000 R09: 000000000000000b
[  316.184843][ T6808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010
[  316.192807][ T6808] R13: 00007fc868826038 R14: 00007ffce8177080 R15: 000000000000ef8c
[  316.200805][ T6808]  </TASK>
[  316.204689][ T6808] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64
[  316.212355][ T6808] audit: out of memory in audit_log_start
[  316.473976][ T6813] loop2: detected capacity change from 0 to 512
[  316.515605][ T6813] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec099, mo2=0002]
[  316.524522][ T6813] System zones: 0-2, 18-18, 34-35
[  316.618257][ T6813] EXT4-fs error (device loop2): ext4_ext_check_inode:532: inode #4: comm syz.2.228: pblk 0 bad header/extent: invalid magic - magic d, entries 2, max 4(0), depth 0(0)
[  316.688879][ T6813] EXT4-fs error (device loop2): ext4_quota_enable:7147: comm syz.2.228: Bad quota inode: 4, type: 1
[  316.720665][ T6737] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  316.749293][ T6813] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  316.776392][ T6737] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  316.877342][ T6813] EXT4-fs (loop2): mount failed
[  317.098877][ T6737] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  317.167656][ T6737] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  317.328290][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  317.339437][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  318.589905][ T6737] 8021q: adding VLAN 0 to HW filter on device bond0
[  318.810769][ T6737] 8021q: adding VLAN 0 to HW filter on device team0
[  320.709731][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.716838][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state
[  320.800880][ T3558] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.808102][ T3558] bridge0: port 2(bridge_slave_1) entered forwarding state
[  321.048573][ T1027] hsr_slave_0: left promiscuous mode
[  321.149126][ T1027] hsr_slave_1: left promiscuous mode
[  321.199526][ T1027] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  321.206977][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0
[  321.319735][ T1027] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  321.327213][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1
[  321.476309][ T1027] bridge_slave_1: left allmulticast mode
[  321.507763][ T1027] bridge_slave_1: left promiscuous mode
[  321.534235][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.676965][ T1027] bridge_slave_0: left allmulticast mode
[  321.706638][ T1027] bridge_slave_0: left promiscuous mode
[  321.737266][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.860165][ T1027] veth1_macvtap: left promiscuous mode
[  321.879933][ T1027] veth0_macvtap: left promiscuous mode
[  321.885660][ T1027] veth1_vlan: left promiscuous mode
[  321.917091][ T1027] veth0_vlan: left promiscuous mode
[  326.294822][ T6871] FAULT_INJECTION: forcing a failure.
[  326.294822][ T6871] name failslab, interval 1, probability 0, space 0, times 0
[  326.307506][ T6871] CPU: 1 PID: 6871 Comm: syz.3.240 Not tainted syzkaller #0
[  326.314790][ T6871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  326.324841][ T6871] Call Trace:
[  326.328118][ T6871]  <TASK>
[  326.331057][ T6871]  dump_stack_lvl+0x18c/0x250
[  326.335739][ T6871]  ? show_regs_print_info+0x20/0x20
[  326.340937][ T6871]  ? load_image+0x420/0x420
[  326.345441][ T6871]  ? __might_sleep+0xe0/0xe0
[  326.350032][ T6871]  ? __lock_acquire+0x7d80/0x7d80
[  326.355063][ T6871]  should_fail_ex+0x394/0x4c0
[  326.359782][ T6871]  should_failslab+0x9/0x20
[  326.364311][ T6871]  slab_pre_alloc_hook+0x59/0x300
[  326.369337][ T6871]  ? __kasan_slab_alloc+0x6c/0x80
[  326.374365][ T6871]  kmem_cache_alloc_node+0x5e/0x310
[  326.379567][ T6871]  ? __alloc_skb+0x103/0x2c0
[  326.384160][ T6871]  __alloc_skb+0x103/0x2c0
[  326.388581][ T6871]  audit_log_start+0x15e/0x890
[  326.393354][ T6871]  ? audit_serial+0x30/0x30
[  326.397858][ T6871]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  326.403845][ T6871]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  326.409830][ T6871]  audit_seccomp+0x63/0x180
[  326.414333][ T6871]  __secure_computing+0x22c/0x2f0
[  326.419383][ T6871]  syscall_trace_enter+0xab/0x150
[  326.424413][ T6871]  do_syscall_64+0x28/0xb0
[  326.428834][ T6871]  ? clear_bhb_loop+0x40/0x90
[  326.433515][ T6871]  ? clear_bhb_loop+0x40/0x90
[  326.438200][ T6871]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  326.444092][ T6871] RIP: 0033:0x7f5e5239e159
[  326.448526][ T6871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  326.468174][ T6871] RSP: 002b:00007f5e532e59f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  326.476594][ T6871] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f5e5239e159
[  326.484561][ T6871] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000b
[  326.492526][ T6871] RBP: 00007f5e532e6030 R08: 0000000000000000 R09: 000000000000000b
[  326.500491][ T6871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010
[  326.508478][ T6871] R13: 00007f5e52626038 R14: 00007fff6b0ba080 R15: 000000000000f74c
[  326.516453][ T6871]  </TASK>
[  326.520126][ T6871] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64
[  326.527754][ T6871] audit: out of memory in audit_log_start
[  328.836362][ T1027] team0 (unregistering): Port device team_slave_1 removed
[  329.080456][ T1027] team0 (unregistering): Port device team_slave_0 removed
[  330.709792][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  330.923790][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  331.339897][ T6886] loop3: detected capacity change from 0 to 512
[  331.354753][ T6886] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec099, mo2=0002]
[  331.403080][ T6886] System zones: 0-2, 18-18, 34-35
[  331.497717][ T6886] EXT4-fs error (device loop3): ext4_ext_check_inode:532: inode #4: comm syz.3.242: pblk 0 bad header/extent: invalid magic - magic d, entries 2, max 4(0), depth 0(0)
[  331.554093][ T6886] EXT4-fs error (device loop3): ext4_quota_enable:7147: comm syz.3.242: Bad quota inode: 4, type: 1
[  331.591200][ T6886] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  331.668864][ T6886] EXT4-fs (loop3): mount failed
[  332.760831][ T1027] bond0 (unregistering): Released all slaves
[  337.121653][ T6737] 8021q: adding VLAN 0 to HW filter on device batadv0
[  338.343181][ T6917] FAULT_INJECTION: forcing a failure.
[  338.343181][ T6917] name failslab, interval 1, probability 0, space 0, times 0
[  338.355855][ T6917] CPU: 1 PID: 6917 Comm: syz.2.249 Not tainted syzkaller #0
[  338.363139][ T6917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  338.373187][ T6917] Call Trace:
[  338.376463][ T6917]  <TASK>
[  338.379393][ T6917]  dump_stack_lvl+0x18c/0x250
[  338.384074][ T6917]  ? show_regs_print_info+0x20/0x20
[  338.389274][ T6917]  ? load_image+0x420/0x420
[  338.393791][ T6917]  ? __might_sleep+0xe0/0xe0
[  338.398403][ T6917]  ? __lock_acquire+0x7d80/0x7d80
[  338.403433][ T6917]  should_fail_ex+0x394/0x4c0
[  338.408135][ T6917]  should_failslab+0x9/0x20
[  338.412639][ T6917]  slab_pre_alloc_hook+0x59/0x300
[  338.417666][ T6917]  ? __kasan_slab_alloc+0x6c/0x80
[  338.422712][ T6917]  kmem_cache_alloc_node+0x5e/0x310
[  338.427946][ T6917]  ? __alloc_skb+0x103/0x2c0
[  338.432549][ T6917]  __alloc_skb+0x103/0x2c0
[  338.436968][ T6917]  audit_log_start+0x15e/0x890
[  338.441739][ T6917]  ? audit_serial+0x30/0x30
[  338.446243][ T6917]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  338.452227][ T6917]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  338.458213][ T6917]  audit_seccomp+0x63/0x180
[  338.462742][ T6917]  __secure_computing+0x22c/0x2f0
[  338.467778][ T6917]  syscall_trace_enter+0xab/0x150
[  338.472806][ T6917]  do_syscall_64+0x28/0xb0
[  338.477233][ T6917]  ? clear_bhb_loop+0x40/0x90
[  338.481912][ T6917]  ? clear_bhb_loop+0x40/0x90
[  338.486590][ T6917]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  338.492500][ T6917] RIP: 0033:0x7facd8d9e159
[  338.496932][ T6917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  338.516567][ T6917] RSP: 002b:00007facd9d159f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  338.524978][ T6917] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007facd8d9e159
[  338.532966][ T6917] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000b
[  338.540936][ T6917] RBP: 00007facd9d16030 R08: 0000000000000000 R09: 000000000000000b
[  338.548920][ T6917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010
[  338.556886][ T6917] R13: 00007facd9026038 R14: 00007ffeb87ab080 R15: 000000000001004c
[  338.564876][ T6917]  </TASK>
[  338.568816][ T6917] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64
[  338.576449][ T6917] audit: out of memory in audit_log_start
[  339.659196][ T6737] veth0_vlan: entered promiscuous mode
[  339.709294][ T6737] veth1_vlan: entered promiscuous mode
[  339.797554][ T6737] veth0_macvtap: entered promiscuous mode
[  339.999319][   T27] audit: type=1326 audit(1790136716.499:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.1.248" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc86859e159 code=0x0
[  340.066180][ T6737] veth1_macvtap: entered promiscuous mode
[  340.913640][ T6737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  340.928512][ T6737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.958003][ T6737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  340.983255][ T6737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.003510][ T6737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  341.038031][ T6737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.089897][ T6737] batman_adv: batadv0: Interface activated: batadv_slave_0
[  341.174166][ T6737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  341.202571][ T6737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.236932][ T6737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  341.278052][ T6737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.312994][ T6737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  341.338103][ T6737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.361270][ T6737] batman_adv: batadv0: Interface activated: batadv_slave_1
[  341.399220][ T6737] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  341.448036][ T6737] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  341.456807][ T6737] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  341.519191][ T6737] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  341.949084][ T2967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  341.981320][ T2967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  342.159554][ T2980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  342.167437][ T2980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  342.900071][ T6959] loop3: detected capacity change from 0 to 512
[  342.968203][ T6959] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec099, mo2=0002]
[  344.490997][ T6959] System zones: 0-2, 18-18, 34-35
[  344.581262][ T6959] EXT4-fs error (device loop3): ext4_ext_check_inode:532: inode #4: comm syz.3.252: pblk 0 bad header/extent: invalid magic - magic d, entries 2, max 4(0), depth 0(0)
[  344.706938][ T6959] EXT4-fs error (device loop3): ext4_quota_enable:7147: comm syz.3.252: Bad quota inode: 4, type: 1
[  344.878435][ T6959] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  345.079680][ T6959] EXT4-fs (loop3): mount failed
[  349.298450][ T6996] FAULT_INJECTION: forcing a failure.
[  349.298450][ T6996] name failslab, interval 1, probability 0, space 0, times 0
[  349.311191][ T6996] CPU: 1 PID: 6996 Comm: syz.3.257 Not tainted syzkaller #0
[  349.318477][ T6996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  349.328528][ T6996] Call Trace:
[  349.331848][ T6996]  <TASK>
[  349.334821][ T6996]  dump_stack_lvl+0x18c/0x250
[  349.339601][ T6996]  ? show_regs_print_info+0x20/0x20
[  349.344823][ T6996]  ? load_image+0x420/0x420
[  349.349336][ T6996]  ? __might_sleep+0xe0/0xe0
[  349.353984][ T6996]  ? __lock_acquire+0x7d80/0x7d80
[  349.359025][ T6996]  should_fail_ex+0x394/0x4c0
[  349.363732][ T6996]  should_failslab+0x9/0x20
[  349.368267][ T6996]  slab_pre_alloc_hook+0x59/0x300
[  349.373353][ T6996]  kmem_cache_alloc+0x5a/0x2c0
[  349.378139][ T6996]  ? audit_log_start+0x13b/0x890
[  349.383092][ T6996]  audit_log_start+0x13b/0x890
[  349.387862][ T6996]  ? audit_serial+0x30/0x30
[  349.392376][ T6996]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  349.398365][ T6996]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  349.404347][ T6996]  audit_seccomp+0x63/0x180
[  349.408852][ T6996]  __secure_computing+0x22c/0x2f0
[  349.413880][ T6996]  syscall_trace_enter+0xab/0x150
[  349.418910][ T6996]  do_syscall_64+0x28/0xb0
[  349.423334][ T6996]  ? clear_bhb_loop+0x40/0x90
[  349.428111][ T6996]  ? clear_bhb_loop+0x40/0x90
[  349.432795][ T6996]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  349.438687][ T6996] RIP: 0033:0x7f5e5239e159
[  349.443132][ T6996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  349.462770][ T6996] RSP: 002b:00007f5e532e59f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  349.471227][ T6996] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f5e5239e159
[  349.479207][ T6996] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000b
[  349.487181][ T6996] RBP: 00007f5e532e6030 R08: 0000000000000000 R09: 000000000000000b
[  349.495163][ T6996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010
[  349.503159][ T6996] R13: 00007f5e52626038 R14: 00007fff6b0ba080 R15: 000000000001088a
[  349.511138][ T6996]  </TASK>
[  349.515984][ T6996] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64
[  349.523669][ T6996] audit: out of memory in audit_log_start
[  350.679765][ T7004] device-mapper: ioctl: Invalid ioctl structure: name c, dev f801
[  359.132621][ T7050] FAULT_INJECTION: forcing a failure.
[  359.132621][ T7050] name failslab, interval 1, probability 0, space 0, times 0
[  359.145296][ T7050] CPU: 1 PID: 7050 Comm: syz.1.266 Not tainted syzkaller #0
[  359.152579][ T7050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  359.162640][ T7050] Call Trace:
[  359.165915][ T7050]  <TASK>
[  359.168870][ T7050]  dump_stack_lvl+0x18c/0x250
[  359.173556][ T7050]  ? show_regs_print_info+0x20/0x20
[  359.178753][ T7050]  ? load_image+0x420/0x420
[  359.183258][ T7050]  ? __might_sleep+0xe0/0xe0
[  359.187848][ T7050]  ? __lock_acquire+0x7d80/0x7d80
[  359.192877][ T7050]  should_fail_ex+0x394/0x4c0
[  359.197563][ T7050]  should_failslab+0x9/0x20
[  359.202070][ T7050]  slab_pre_alloc_hook+0x59/0x300
[  359.207096][ T7050]  ? __kasan_slab_alloc+0x6c/0x80
[  359.212122][ T7050]  kmem_cache_alloc_node+0x5e/0x310
[  359.217322][ T7050]  ? __alloc_skb+0x103/0x2c0
[  359.221979][ T7050]  __alloc_skb+0x103/0x2c0
[  359.226402][ T7050]  audit_log_start+0x15e/0x890
[  359.231179][ T7050]  ? audit_serial+0x30/0x30
[  359.235701][ T7050]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  359.241684][ T7050]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  359.247668][ T7050]  audit_seccomp+0x63/0x180
[  359.252173][ T7050]  __secure_computing+0x22c/0x2f0
[  359.257244][ T7050]  syscall_trace_enter+0xab/0x150
[  359.262285][ T7050]  do_syscall_64+0x28/0xb0
[  359.266708][ T7050]  ? clear_bhb_loop+0x40/0x90
[  359.271391][ T7050]  ? clear_bhb_loop+0x40/0x90
[  359.276075][ T7050]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  359.281979][ T7050] RIP: 0033:0x7fc86859e159
[  359.286416][ T7050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  359.306052][ T7050] RSP: 002b:00007fc8693d99f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  359.314467][ T7050] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007fc86859e159
[  359.322434][ T7050] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000b
[  359.330400][ T7050] RBP: 00007fc8693da030 R08: 0000000000000000 R09: 000000000000000b
[  359.338370][ T7050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010
[  359.346336][ T7050] R13: 00007fc868826038 R14: 00007ffce8177080 R15: 0000000000011010
[  359.354317][ T7050]  </TASK>
[  359.358483][ T7050] audit: audit_lost=6 audit_rate_limit=0 audit_backlog_limit=64
[  359.366119][ T7050] audit: out of memory in audit_log_start
[  359.496743][ T7057] loop3: detected capacity change from 0 to 512
[  359.563858][ T7057] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec099, mo2=0002]
[  359.588331][ T7057] System zones: 0-2, 18-18, 34-35
[  359.658261][ T7057] EXT4-fs error (device loop3): ext4_ext_check_inode:532: inode #4: comm syz.3.265: pblk 0 bad header/extent: invalid magic - magic d, entries 2, max 4(0), depth 0(0)
[  359.725981][ T7057] EXT4-fs error (device loop3): ext4_quota_enable:7147: comm syz.3.265: Bad quota inode: 4, type: 1
[  359.832516][ T7057] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  359.924486][ T7057] EXT4-fs (loop3): mount failed
[  364.030658][ T7082] loop4: detected capacity change from 0 to 256
[  367.872316][ T7109] FAULT_INJECTION: forcing a failure.
[  367.872316][ T7109] name failslab, interval 1, probability 0, space 0, times 0
[  367.885282][ T7109] CPU: 1 PID: 7109 Comm: syz.4.276 Not tainted syzkaller #0
[  367.892563][ T7109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  367.902612][ T7109] Call Trace:
[  367.905887][ T7109]  <TASK>
[  367.908815][ T7109]  dump_stack_lvl+0x18c/0x250
[  367.913542][ T7109]  ? show_regs_print_info+0x20/0x20
[  367.918744][ T7109]  ? load_image+0x420/0x420
[  367.923254][ T7109]  ? __might_sleep+0xe0/0xe0
[  367.927870][ T7109]  ? __lock_acquire+0x7d80/0x7d80
[  367.932922][ T7109]  should_fail_ex+0x394/0x4c0
[  367.937617][ T7109]  should_failslab+0x9/0x20
[  367.942134][ T7109]  slab_pre_alloc_hook+0x59/0x300
[  367.947187][ T7109]  ? __kasan_slab_alloc+0x6c/0x80
[  367.952216][ T7109]  kmem_cache_alloc_node+0x5e/0x310
[  367.957416][ T7109]  ? __alloc_skb+0x103/0x2c0
[  367.962010][ T7109]  __alloc_skb+0x103/0x2c0
[  367.966431][ T7109]  audit_log_start+0x15e/0x890
[  367.971222][ T7109]  ? audit_serial+0x30/0x30
[  367.975724][ T7109]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  367.981706][ T7109]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  367.987691][ T7109]  audit_seccomp+0x63/0x180
[  367.992219][ T7109]  __secure_computing+0x22c/0x2f0
[  367.997248][ T7109]  syscall_trace_enter+0xab/0x150
[  368.002278][ T7109]  do_syscall_64+0x28/0xb0
[  368.006694][ T7109]  ? clear_bhb_loop+0x40/0x90
[  368.011377][ T7109]  ? clear_bhb_loop+0x40/0x90
[  368.016055][ T7109]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  368.021947][ T7109] RIP: 0033:0x7fc461b9e159
[  368.026378][ T7109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  368.046010][ T7109] RSP: 002b:00007fc462aaf9f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  368.054443][ T7109] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007fc461b9e159
[  368.062411][ T7109] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000b
[  368.070377][ T7109] RBP: 00007fc462ab0030 R08: 0000000000000000 R09: 000000000000000b
[  368.078343][ T7109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010
[  368.086309][ T7109] R13: 00007fc461e26038 R14: 00007ffd265fa080 R15: 00000000000116b8
[  368.094286][ T7109]  </TASK>
[  368.098100][ T7109] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64
[  368.105750][ T7109] audit: out of memory in audit_log_start
[  376.606880][ T7165] loop3: detected capacity change from 0 to 512
[  376.702834][ T7165] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec099, mo2=0002]
[  376.728107][ T7165] System zones: 0-2, 18-18, 34-35
[  376.768252][ T7165] EXT4-fs error (device loop3): ext4_ext_check_inode:532: inode #4: comm syz.3.279: pblk 0 bad header/extent: invalid magic - magic d, entries 2, max 4(0), depth 0(0)
[  376.858333][ T7165] EXT4-fs error (device loop3): ext4_quota_enable:7147: comm syz.3.279: Bad quota inode: 4, type: 1
[  376.938026][ T7165] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  376.990292][ T7165] EXT4-fs (loop3): mount failed
[  378.823105][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  378.829639][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  385.765609][ T7232] loop3: detected capacity change from 0 to 512
[  385.861019][ T7232] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec099, mo2=0002]
[  385.878054][ T7232] System zones: 0-2, 18-18, 34-35
[  385.908832][ T7232] EXT4-fs error (device loop3): ext4_ext_check_inode:532: inode #4: comm syz.3.293: pblk 0 bad header/extent: invalid magic - magic d, entries 2, max 4(0), depth 0(0)
[  385.934836][ T7232] EXT4-fs error (device loop3): ext4_quota_enable:7147: comm syz.3.293: Bad quota inode: 4, type: 1
[  385.989392][ T7232] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  386.019425][ T7232] EXT4-fs (loop3): mount failed
[  398.220738][ T7310] loop1: detected capacity change from 0 to 512
[  398.450541][ T7310] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec099, mo2=0002]
[  398.549453][ T7310] System zones: 0-2, 18-18, 34-35
[  398.596160][ T7310] EXT4-fs error (device loop1): ext4_ext_check_inode:532: inode #4: comm syz.1.305: pblk 0 bad header/extent: invalid magic - magic d, entries 2, max 4(0), depth 0(0)
[  398.699200][ T7310] EXT4-fs error (device loop1): ext4_quota_enable:7147: comm syz.1.305: Bad quota inode: 4, type: 1
[  398.798015][ T7310] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  398.874083][ T7310] EXT4-fs (loop1): mount failed
[  409.400610][ T7396] loop4: detected capacity change from 0 to 2048
[  409.726558][ T7404] FAULT_INJECTION: forcing a failure.
[  409.726558][ T7404] name fail_futex, interval 1, probability 0, space 0, times 1
[  409.878086][ T7404] CPU: 0 PID: 7404 Comm: syz.3.323 Not tainted syzkaller #0
[  409.885464][ T7404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  409.895578][ T7404] Call Trace:
[  409.898880][ T7404]  <TASK>
[  409.901838][ T7404]  dump_stack_lvl+0x18c/0x250
[  409.906581][ T7404]  ? show_regs_print_info+0x20/0x20
[  409.911832][ T7404]  ? load_image+0x420/0x420
[  409.916397][ T7404]  should_fail_ex+0x394/0x4c0
[  409.921136][ T7404]  get_futex_key+0x136/0x1030
[  409.925852][ T7404]  ? __bpf_trace_rcu_stall_warning+0x160/0x160
[  409.932052][ T7404]  ? futex_setup_timer+0xc0/0xc0
[  409.937024][ T7404]  ? fd_install+0x2d8/0x4e0
[  409.941595][ T7404]  futex_wake+0x127/0x4f0
[  409.945943][ T7404]  ? futex_wake_mark+0x150/0x150
[  409.950897][ T7404]  ? udmabuf_ioctl+0x300/0x300
[  409.955717][ T7404]  do_futex+0x35d/0x3e0
[  409.959887][ T7404]  ? __ia32_sys_get_robust_list+0x110/0x110
[  409.965789][ T7404]  ? udmabuf_ioctl+0x1f7/0x300
[  409.970569][ T7404]  __se_sys_futex+0x3a9/0x440
[  409.975259][ T7404]  ? __x64_sys_futex+0xf0/0xf0
[  409.980041][ T7404]  ? __x64_sys_futex+0x21/0xf0
[  409.984827][ T7404]  do_syscall_64+0x55/0xb0
[  409.989260][ T7404]  ? clear_bhb_loop+0x40/0x90
[  409.993950][ T7404]  ? clear_bhb_loop+0x40/0x90
[  409.998641][ T7404]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  410.004553][ T7404] RIP: 0033:0x7f5e5239e159
[  410.008981][ T7404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  410.028602][ T7404] RSP: 002b:00007f5e532e60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  410.037026][ T7404] RAX: ffffffffffffffda RBX: 00007f5e52625fa8 RCX: 00007f5e5239e159
[  410.045007][ T7404] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5e52625fac
[  410.052987][ T7404] RBP: 00007f5e52625fa0 R08: 0000000000745d1e R09: 0000000000000000
[  410.060966][ T7404] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000
[  410.068947][ T7404] R13: 00007f5e52626038 R14: 00007fff6b024580 R15: 00007fff6b024668
[  410.076940][ T7404]  </TASK>
[  410.178795][ T7396] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  411.583493][ T7423] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  411.691471][ T7423] EXT4-fs error (device loop4) in ext4_setattr:5695: error 28
[  411.798932][ T7422] netlink: 44 bytes leftover after parsing attributes in process `syz.1.325'.
[  411.958120][ T7422] netlink: 44 bytes leftover after parsing attributes in process `syz.1.325'.
[  412.186313][ T6737] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.013791][ T7434] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  420.459973][ T7457] syzkaller0: entered promiscuous mode
[  420.465523][ T7457] syzkaller0: entered allmulticast mode
[  420.516245][ T7457] tipc: Started in network mode
[  420.548760][ T7457] tipc: Node identity fe6da08a6589, cluster identity 4711
[  420.598848][ T7457] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  420.740991][ T7458] tipc: Resetting bearer <eth:syzkaller0>
[  420.838439][ T7456] tipc: Resetting bearer <eth:syzkaller0>
[  420.973386][ T7456] tipc: Disabling bearer <eth:syzkaller0>
[  421.289749][ T7460] netlink: 44 bytes leftover after parsing attributes in process `syz.2.337'.
[  421.328007][ T7460] netlink: 44 bytes leftover after parsing attributes in process `syz.2.337'.
[  425.048637][ T7478] process 'syz.2.340' launched '/dev/fd/4' with NULL argv: empty string added
[  425.130703][ T7473] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  425.198687][ T7473] syzkaller0: entered promiscuous mode
[  425.258051][ T7473] syzkaller0: entered allmulticast mode
[  426.699783][ T7483] binder: 7480:7483 ioctl c0306201 0 returned -14
[  426.908296][ T7485] loop3: detected capacity change from 0 to 512
[  427.128005][ T7485] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec099, mo2=0002]
[  427.160736][ T7485] System zones: 0-2, 18-18, 34-35
[  427.195990][ T7485] EXT4-fs error (device loop3): ext4_ext_check_inode:532: inode #4: comm syz.3.339: pblk 0 bad header/extent: invalid magic - magic d, entries 2, max 4(0), depth 0(0)
[  427.268841][ T7485] EXT4-fs error (device loop3): ext4_quota_enable:7147: comm syz.3.339: Bad quota inode: 4, type: 1
[  427.288378][ T7485] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  427.339181][ T7485] EXT4-fs (loop3): mount failed
[  432.586609][ T7508] CacheFiles: Failed to register: -95
[  432.923716][ T7512] netlink: 44 bytes leftover after parsing attributes in process `syz.3.346'.
[  432.947468][ T7512] netlink: 44 bytes leftover after parsing attributes in process `syz.3.346'.
[  435.868877][ T5086] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  435.879342][ T5086] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  435.887211][ T5086] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  435.905376][ T5086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  435.922083][ T5086] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  435.929821][ T5086] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  437.959125][ T5086] Bluetooth: hci1: command tx timeout
[  438.857129][ T7536] binder: 7533:7536 ioctl c0306201 0 returned -14
[  438.937083][ T7538] loop2: detected capacity change from 0 to 512
[  438.967683][ T7538] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec099, mo2=0002]
[  438.986136][ T7538] System zones: 0-2, 18-18, 34-35
[  439.038139][ T7538] EXT4-fs error (device loop2): ext4_ext_check_inode:532: inode #4: comm syz.2.351: pblk 0 bad header/extent: invalid magic - magic d, entries 2, max 4(0), depth 0(0)
[  439.134127][ T7538] EXT4-fs error (device loop2): ext4_quota_enable:7147: comm syz.2.351: Bad quota inode: 4, type: 1
[  439.158413][ T7538] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  439.196554][ T7538] EXT4-fs (loop2): mount failed
[  440.038114][ T5086] Bluetooth: hci1: command tx timeout
[  440.202427][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  440.208937][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  440.444827][ T7524] chnl_net:caif_netlink_parms(): no params data found
[  440.806244][ T7524] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.825136][ T7524] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.858282][ T7524] bridge_slave_0: entered allmulticast mode
[  440.879341][ T7524] bridge_slave_0: entered promiscuous mode
[  440.901488][ T7524] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.926328][ T7524] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.988434][ T7524] bridge_slave_1: entered allmulticast mode
[  441.018922][ T7524] bridge_slave_1: entered promiscuous mode
[  441.188959][   T27] audit: type=1326 audit(1790136817.699:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7552 comm="syz.3.353" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e5239e159 code=0x0
[  441.316468][ T7524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  441.332977][ T7561] netlink: 44 bytes leftover after parsing attributes in process `syz.2.356'.
[  441.347154][ T7524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  441.390581][ T1140] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.495886][ T7524] team0: Port device team_slave_0 added
[  441.537044][ T1140] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.573023][ T7524] team0: Port device team_slave_1 added
[  441.579698][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  441.589074][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  441.613925][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  441.623650][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  441.630186][ T1140] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.776661][   T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  441.784952][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  442.036380][ T7524] batman_adv: batadv0: Adding interface: batadv_slave_0
[  442.043797][ T7524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  442.118185][   T51] Bluetooth: hci1: command tx timeout
[  442.124063][ T7524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  442.292275][ T7524] batman_adv: batadv0: Adding interface: batadv_slave_1
[  442.341100][ T7524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  442.518955][ T7524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  443.019337][ T1140] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.872595][ T7524] hsr_slave_0: entered promiscuous mode
[  443.879590][ T5086] Bluetooth: hci0: command tx timeout
[  443.920624][ T7524] hsr_slave_1: entered promiscuous mode
[  444.198303][ T5086] Bluetooth: hci1: command tx timeout
[  445.960368][ T5086] Bluetooth: hci0: command tx timeout
[  446.024390][ T7562] chnl_net:caif_netlink_parms(): no params data found
[  446.495024][ T7592] loop3: detected capacity change from 0 to 512
[  446.578272][ T7592] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec099, mo2=0002]
[  446.608267][ T7592] System zones: 0-2, 18-18, 34-35
[  446.745182][ T7592] EXT4-fs error (device loop3): ext4_ext_check_inode:532: inode #4: comm syz.3.360: pblk 0 bad header/extent: invalid magic - magic d, entries 2, max 4(0), depth 0(0)
[  446.851866][ T7592] EXT4-fs error (device loop3): ext4_quota_enable:7147: comm syz.3.360: Bad quota inode: 4, type: 1
[  446.929682][ T7592] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  447.025140][ T7592] EXT4-fs (loop3): mount failed
[  447.034457][ T7562] bridge0: port 1(bridge_slave_0) entered blocking state
[  447.052250][ T7562] bridge0: port 1(bridge_slave_0) entered disabled state
[  447.105738][ T7562] bridge_slave_0: entered allmulticast mode
[  447.250561][ T7562] bridge_slave_0: entered promiscuous mode
[  447.284927][ T7524] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  447.912242][ T7524] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  447.956668][ T7562] bridge0: port 2(bridge_slave_1) entered blocking state
[  447.968165][ T7562] bridge0: port 2(bridge_slave_1) entered disabled state
[  447.975441][ T7562] bridge_slave_1: entered allmulticast mode
[  447.983054][ T7562] bridge_slave_1: entered promiscuous mode
[  448.038221][ T5086] Bluetooth: hci0: command tx timeout
[  448.155331][ T7524] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  448.172353][ T7524] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  448.765613][ T7562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  448.776499][   T27] audit: type=1326 audit(1790136824.859:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.3.362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e5239e159 code=0x0
[  449.670186][ T7562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  449.888507][ T7562] team0: Port device team_slave_0 added
[  449.907716][ T7562] team0: Port device team_slave_1 added
[  450.118129][ T5086] Bluetooth: hci0: command tx timeout
[  450.278880][ T7562] batman_adv: batadv0: Adding interface: batadv_slave_0
[  450.285903][ T7562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  450.368190][ T7562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  450.458636][ T7562] batman_adv: batadv0: Adding interface: batadv_slave_1
[  450.497922][ T7562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  450.593694][ T7562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  451.147671][ T7562] hsr_slave_0: entered promiscuous mode
[  451.186383][ T7629] loop2: detected capacity change from 0 to 512
[  451.202821][ T7562] hsr_slave_1: entered promiscuous mode
[  451.228770][ T7562] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  451.236400][ T7562] Cannot create hsr debugfs directory
[  451.303200][ T7629] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec099, mo2=0002]
[  451.358136][ T7629] System zones: 0-2, 18-18, 34-35
[  451.490490][ T7629] EXT4-fs error (device loop2): ext4_ext_check_inode:532: inode #4: comm syz.2.361: pblk 0 bad header/extent: invalid magic - magic d, entries 2, max 4(0), depth 0(0)
[  451.560651][ T7636] netlink: 44 bytes leftover after parsing attributes in process `syz.3.363'.
[  451.613227][ T7629] EXT4-fs error (device loop2): ext4_quota_enable:7147: comm syz.2.361: Bad quota inode: 4, type: 1
[  451.661403][ T7629] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  451.702243][ T1140] hsr_slave_0: left promiscuous mode
[  451.719693][ T1140] hsr_slave_1: left promiscuous mode
[  451.738361][ T7629] EXT4-fs (loop2): mount failed
[  451.805689][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  451.815588][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0
[  451.893539][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  451.907308][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1
[  451.948890][ T1140] bridge_slave_1: left allmulticast mode
[  451.954609][ T1140] bridge_slave_1: left promiscuous mode
[  451.971571][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state
[  452.054525][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state
[  452.133586][ T1140] veth1_macvtap: left promiscuous mode
[  452.140389][ T1140] veth0_macvtap: left promiscuous mode
[  452.168181][ T1140] veth1_vlan: left promiscuous mode
[  452.183689][ T1140] veth0_vlan: left promiscuous mode
[  455.610467][ T7653] loop2: detected capacity change from 0 to 512
[  455.622043][ T1140] team0 (unregistering): Port device team_slave_1 removed
[  455.678335][ T7653] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec099, mo2=0002]
[  455.704407][ T7653] System zones: 0-2, 18-18, 34-35
[  455.745024][ T7653] EXT4-fs error (device loop2): ext4_ext_check_inode:532: inode #4: comm syz.2.368: pblk 0 bad header/extent: invalid magic - magic d, entries 2, max 4(0), depth 0(0)
[  455.811933][ T1140] team0 (unregistering): Port device team_slave_0 removed
[  455.860288][ T7653] EXT4-fs error (device loop2): ext4_quota_enable:7147: comm syz.2.368: Bad quota inode: 4, type: 1
[  455.936248][ T7653] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  455.961310][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  455.998769][ T7653] EXT4-fs (loop2): mount failed
[  456.281779][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  458.240071][ T1140] bond0 (unregistering): Released all slaves
[  458.559339][ T7524] 8021q: adding VLAN 0 to HW filter on device bond0
[  458.631364][ T7524] 8021q: adding VLAN 0 to HW filter on device team0
[  458.700939][ T7659] bridge0: port 1(bridge_slave_0) entered blocking state
[  458.708189][ T7659] bridge0: port 1(bridge_slave_0) entered forwarding state
[  458.774737][ T7659] bridge0: port 2(bridge_slave_1) entered blocking state
[  458.781998][ T7659] bridge0: port 2(bridge_slave_1) entered forwarding state
[  459.062115][ T7679] netlink: 44 bytes leftover after parsing attributes in process `syz.3.371'.
[  459.308956][ T7685] CacheFiles: Failed to register: -95
[  460.461309][ T1140] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.580556][ T7562] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  460.680236][ T7562] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  460.711544][ T7562] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  460.866509][ T1140] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.933490][ T7562] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  460.976244][ T7702] loop2: detected capacity change from 0 to 512
[  461.073038][ T1140] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.099805][ T7702] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec099, mo2=0002]
[  461.230604][ T7702] System zones: 0-2, 18-18, 34-35
[  461.279071][ T7702] EXT4-fs error (device loop2): ext4_ext_check_inode:532: inode #4: comm syz.2.375: pblk 0 bad header/extent: invalid magic - magic d, entries 2, max 4(0), depth 0(0)
[  461.290524][ T7524] 8021q: adding VLAN 0 to HW filter on device batadv0
[  461.408698][ T7702] EXT4-fs error (device loop2): ext4_quota_enable:7147: comm syz.2.375: Bad quota inode: 4, type: 1
[  461.428115][ T7702] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  461.490894][ T7702] EXT4-fs (loop2): mount failed
[  461.501139][ T1140] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.645506][ T7562] 8021q: adding VLAN 0 to HW filter on device bond0
[  462.923962][ T7562] 8021q: adding VLAN 0 to HW filter on device team0
[  462.971690][ T1027] bridge0: port 1(bridge_slave_0) entered blocking state
[  462.978904][ T1027] bridge0: port 1(bridge_slave_0) entered forwarding state
[  463.193682][ T7659] bridge0: port 2(bridge_slave_1) entered blocking state
[  463.200979][ T7659] bridge0: port 2(bridge_slave_1) entered forwarding state
[  463.348013][ T7720] loop3: detected capacity change from 0 to 512
[  463.408302][ T7720] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec099, mo2=0002]
[  463.416451][ T7720] System zones: 0-2, 18-18, 34-35
[  463.449460][ T7720] EXT4-fs error (device loop3): ext4_ext_check_inode:532: inode #4: comm syz.3.374: pblk 0 bad header/extent: invalid magic - magic d, entries 2, max 4(0), depth 0(0)
[  463.587422][ T7720] EXT4-fs error (device loop3): ext4_quota_enable:7147: comm syz.3.374: Bad quota inode: 4, type: 1
[  463.631085][ T7720] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  463.663063][ T7720] EXT4-fs (loop3): mount failed
[  464.206490][ T7524] veth0_vlan: entered promiscuous mode
[  464.362703][ T7524] veth1_vlan: entered promiscuous mode
[  465.037431][ T7562] 8021q: adding VLAN 0 to HW filter on device batadv0
[  465.068606][ T7524] veth0_macvtap: entered promiscuous mode
[  465.092389][ T7524] veth1_macvtap: entered promiscuous mode
[  465.348732][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  465.378081][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  465.404148][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  465.417907][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  465.427792][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  465.457997][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  465.477290][ T7524] batman_adv: batadv0: Interface activated: batadv_slave_0
[  465.504169][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  465.531384][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  465.547915][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  465.578123][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  465.598094][ T7524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  465.629384][ T7524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  465.666500][ T7524] batman_adv: batadv0: Interface activated: batadv_slave_1
[  467.221711][ T7524] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  467.250543][ T7524] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  467.270638][ T7524] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  467.280535][ T7524] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  469.316938][ T7562] veth0_vlan: entered promiscuous mode
[  469.365642][ T7562] veth1_vlan: entered promiscuous mode
[  469.490446][ T1140] hsr_slave_0: left promiscuous mode
[  469.508859][ T1140] hsr_slave_1: left promiscuous mode
[  469.623533][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  469.631265][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0
[  469.664995][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  469.691324][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1
[  469.719365][ T1140] bridge_slave_1: left allmulticast mode
[  469.725082][ T1140] bridge_slave_1: left promiscuous mode
[  469.758169][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state
[  469.801941][ T1140] bridge_slave_0: left allmulticast mode
[  469.807654][ T1140] bridge_slave_0: left promiscuous mode
[  469.838155][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state
[  469.995033][ T1140] veth1_macvtap: left promiscuous mode
[  470.008415][ T1140] veth0_macvtap: left promiscuous mode
[  470.014125][ T1140] veth1_vlan: left promiscuous mode
[  470.044676][ T7771] program syz.2.377 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  470.048076][ T1140] veth0_vlan: left promiscuous mode
[  473.206836][ T7781] CacheFiles: Failed to register: -95
[  473.359321][ T7783] loop3: detected capacity change from 0 to 512
[  473.367027][ T1140] team0 (unregistering): Port device team_slave_1 removed
[  473.386180][ T7783] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec099, mo2=0002]
[  473.419226][ T7783] System zones: 0-2, 18-18, 34-35
[  473.445573][ T1140] team0 (unregistering): Port device team_slave_0 removed
[  473.454171][ T7783] EXT4-fs error (device loop3): ext4_ext_check_inode:532: inode #4: comm syz.3.382: pblk 0 bad header/extent: invalid magic - magic d, entries 2, max 4(0), depth 0(0)
[  473.494293][ T7783] EXT4-fs error (device loop3): ext4_quota_enable:7147: comm syz.3.382: Bad quota inode: 4, type: 1
[  473.523783][ T7783] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  473.524195][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  473.580027][ T7783] EXT4-fs (loop3): mount failed
[  473.627576][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  475.244399][ T1140] bond0 (unregistering): Released all slaves
[  475.370707][ T2967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  475.403110][ T2967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  475.416835][ T7805] loop3: detected capacity change from 0 to 512
[  475.445037][ T7805] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec099, mo2=0002]
[  475.479010][ T7805] System zones: 0-2, 18-18, 34-35
[  475.509474][ T7805] EXT4-fs error (device loop3): ext4_ext_check_inode:532: inode #4: comm syz.3.384: pblk 0 bad header/extent: invalid magic - magic d, entries 2, max 4(0), depth 0(0)
[  475.545379][ T7805] EXT4-fs error (device loop3): ext4_quota_enable:7147: comm syz.3.384: Bad quota inode: 4, type: 1
[  475.575042][ T7805] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  475.595982][ T7805] EXT4-fs (loop3): mount failed
[  475.623869][ T7562] veth0_macvtap: entered promiscuous mode
[  475.637039][ T7146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  475.639900][ T7562] veth1_macvtap: entered promiscuous mode
[  475.676865][ T7146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  475.760765][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  475.792483][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.813448][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  475.825064][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.848258][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  475.861314][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.904307][ T7562] batman_adv: batadv0: Interface activated: batadv_slave_0
[  475.979561][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  475.997474][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  476.008686][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  476.019748][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  476.038151][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  476.087904][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  476.124581][ T7562] batman_adv: batadv0: Interface activated: batadv_slave_1
[  476.206382][ T7562] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  476.255938][ T7562] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  476.295423][ T7562] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  476.332828][ T7562] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  477.516740][ T7659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  477.552498][ T7659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  477.602348][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.387'.
[  477.897227][ T3529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  477.930832][ T3529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  480.172668][ T7854] Bluetooth: MGMT ver 1.22
[  480.529712][ T7862] loop6: detected capacity change from 0 to 512
[  482.018130][ T7862] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec099, mo2=0002]
[  483.454397][ T7862] System zones: 0-2, 18-18, 34-35
[  483.487173][ T7862] EXT4-fs: error -4 creating inode table initialization thread
[  483.528272][ T7862] EXT4-fs (loop6): mount failed
[  486.919596][ T7905] binder: 7903:7905 ioctl c0306201 0 returned -14
[  486.970345][ T7905] binder: 7903:7905 ioctl c0306201 0 returned -14
[  491.739586][ T7954] binder: 7951:7954 ioctl c0306201 0 returned -14
[  491.778742][ T7954] binder: 7951:7954 ioctl c0306201 0 returned -14
[  492.842956][ T7961] loop2: detected capacity change from 0 to 512
[  492.913833][ T7961] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec099, mo2=0002]
[  492.970454][ T7961] System zones: 0-2, 18-18, 34-35
[  493.031089][ T7961] EXT4-fs error (device loop2): ext4_ext_check_inode:532: inode #4: comm syz.2.408: pblk 0 bad header/extent: invalid magic - magic d, entries 2, max 4(0), depth 0(0)
[  493.116943][ T7961] EXT4-fs error (device loop2): ext4_quota_enable:7147: comm syz.2.408: Bad quota inode: 4, type: 1
[  493.218043][ T7961] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  493.298468][ T7961] EXT4-fs (loop2): mount failed
[  496.188798][ T7989] 9pnet_fd: Insufficient options for proto=fd
[  498.616340][ T7999] FAULT_INJECTION: forcing a failure.
[  498.616340][ T7999] name failslab, interval 1, probability 0, space 0, times 0
[  498.629309][ T7999] CPU: 0 PID: 7999 Comm: syz.3.420 Not tainted syzkaller #0
[  498.636646][ T7999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  498.646705][ T7999] Call Trace:
[  498.649984][ T7999]  <TASK>
[  498.652911][ T7999]  dump_stack_lvl+0x18c/0x250
[  498.657599][ T7999]  ? show_regs_print_info+0x20/0x20
[  498.662804][ T7999]  ? load_image+0x420/0x420
[  498.667311][ T7999]  ? __might_sleep+0xe0/0xe0
[  498.671905][ T7999]  ? __lock_acquire+0x7d80/0x7d80
[  498.676948][ T7999]  ? lock_chain_count+0x20/0x20
[  498.681800][ T7999]  should_fail_ex+0x394/0x4c0
[  498.686485][ T7999]  should_failslab+0x9/0x20
[  498.690992][ T7999]  slab_pre_alloc_hook+0x59/0x300
[  498.696025][ T7999]  kmem_cache_alloc_node+0x5e/0x310
[  498.701224][ T7999]  ? __alloc_skb+0x2b2/0x2c0
[  498.705833][ T7999]  ? __alloc_skb+0x103/0x2c0
[  498.710431][ T7999]  __alloc_skb+0x103/0x2c0
[  498.714849][ T7999]  audit_log_start+0x15e/0x890
[  498.719645][ T7999]  ? audit_serial+0x30/0x30
[  498.724146][ T7999]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  498.730147][ T7999]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  498.736130][ T7999]  audit_seccomp+0x63/0x180
[  498.740632][ T7999]  __secure_computing+0x22c/0x2f0
[  498.745660][ T7999]  syscall_trace_enter+0xab/0x150
[  498.750688][ T7999]  do_syscall_64+0x28/0xb0
[  498.755104][ T7999]  ? clear_bhb_loop+0x40/0x90
[  498.759782][ T7999]  ? clear_bhb_loop+0x40/0x90
[  498.764476][ T7999]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  498.770368][ T7999] RIP: 0033:0x7f5e5239e159
[  498.774802][ T7999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  498.794425][ T7999] RSP: 002b:00007f5e532c49f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  498.802867][ T7999] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f5e5239e159
[  498.810836][ T7999] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000b
[  498.818800][ T7999] RBP: 00007f5e532c5030 R08: 0000000000000000 R09: 000000000000000b
[  498.826772][ T7999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010
[  498.834738][ T7999] R13: 00007f5e52626128 R14: 00007fff6b0ba080 R15: 0000000000017a90
[  498.842718][ T7999]  </TASK>
[  498.850521][ T7999] audit: audit_lost=8 audit_rate_limit=0 audit_backlog_limit=64
[  498.859078][ T7999] audit: out of memory in audit_log_start
[  501.877574][ T8021] binder: 8017:8021 ioctl c0306201 0 returned -14
[  501.884837][ T8021] binder: 8017:8021 ioctl c0306201 0 returned -14
[  502.492001][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  502.498472][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  504.329751][ T8062] binder: 8060:8062 unknown command 1074553619
[  504.379510][ T8062] binder: 8060:8062 ioctl c0306201 200000000040 returned -22
[  504.384016][ T8064] binder: 8060:8064 unknown command 1074291477
[  504.457949][ T8064] binder: 8060:8064 ioctl c0306201 200000000640 returned -22
[  505.412447][ T8068] loop6: detected capacity change from 0 to 512
[  505.613086][ T8068] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec099, mo2=0002]
[  505.643163][ T8068] System zones: 0-2, 18-18, 34-35
[  507.069063][ T8068] EXT4-fs error (device loop6): ext4_ext_check_inode:532: inode #4: comm syz.6.430: pblk 0 bad header/extent: invalid magic - magic d, entries 2, max 4(0), depth 0(0)
[  507.143611][ T8068] EXT4-fs error (device loop6): ext4_quota_enable:7147: comm syz.6.430: Bad quota inode: 4, type: 1
[  507.249370][ T8068] EXT4-fs warning (device loop6): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  507.366349][ T8068] EXT4-fs (loop6): mount failed
[  509.280823][ T8093] loop3: detected capacity change from 0 to 512
[  509.409136][ T8093] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec099, mo2=0002]
[  509.478635][ T8093] System zones: 0-2, 18-18, 34-35
[  509.585333][ T8093] EXT4-fs error (device loop3): ext4_ext_check_inode:532: inode #4: comm syz.3.424: pblk 0 bad header/extent: invalid magic - magic d, entries 2, max 4(0), depth 0(0)
[  509.678928][ T8093] EXT4-fs error (device loop3): ext4_quota_enable:7147: comm syz.3.424: Bad quota inode: 4, type: 1
[  509.721538][ T8093] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  511.359563][ T8108] binder: 8106:8108 ioctl c0306201 0 returned -14
[  511.368715][ T8108] binder: 8106:8108 ioctl c0306201 0 returned -14
[  512.178484][ T8093] EXT4-fs (loop3): mount failed
[  513.226153][   T27] audit: type=1326 audit(1790136889.529:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8117 comm="syz.3.437" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e5239e159 code=0x0
[  517.711943][ T8149] FAULT_INJECTION: forcing a failure.
[  517.711943][ T8149] name failslab, interval 1, probability 0, space 0, times 0
[  517.724622][ T8149] CPU: 0 PID: 8149 Comm: syz.3.438 Not tainted syzkaller #0
[  517.731904][ T8149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  517.741958][ T8149] Call Trace:
[  517.745232][ T8149]  <TASK>
[  517.748163][ T8149]  dump_stack_lvl+0x18c/0x250
[  517.752842][ T8149]  ? show_regs_print_info+0x20/0x20
[  517.758037][ T8149]  ? load_image+0x420/0x420
[  517.762537][ T8149]  ? __might_sleep+0xe0/0xe0
[  517.767124][ T8149]  ? __lock_acquire+0x7d80/0x7d80
[  517.772147][ T8149]  should_fail_ex+0x394/0x4c0
[  517.776824][ T8149]  should_failslab+0x9/0x20
[  517.781325][ T8149]  slab_pre_alloc_hook+0x59/0x300
[  517.786346][ T8149]  ? __kasan_slab_alloc+0x6c/0x80
[  517.791368][ T8149]  kmem_cache_alloc_node+0x5e/0x310
[  517.796562][ T8149]  ? __alloc_skb+0x103/0x2c0
[  517.801151][ T8149]  __alloc_skb+0x103/0x2c0
[  517.805571][ T8149]  audit_log_start+0x15e/0x890
[  517.810338][ T8149]  ? audit_serial+0x30/0x30
[  517.814838][ T8149]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  517.820817][ T8149]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  517.826795][ T8149]  audit_seccomp+0x63/0x180
[  517.831297][ T8149]  __secure_computing+0x22c/0x2f0
[  517.836319][ T8149]  syscall_trace_enter+0xab/0x150
[  517.841363][ T8149]  do_syscall_64+0x28/0xb0
[  517.845801][ T8149]  ? clear_bhb_loop+0x40/0x90
[  517.850475][ T8149]  ? clear_bhb_loop+0x40/0x90
[  517.855150][ T8149]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  517.861039][ T8149] RIP: 0033:0x7f5e5239e159
[  517.865469][ T8149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  517.885073][ T8149] RSP: 002b:00007f5e532e59f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  517.893487][ T8149] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f5e5239e159
[  517.901452][ T8149] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000b
[  517.909418][ T8149] RBP: 00007f5e532e6030 R08: 0000000000000000 R09: 000000000000000b
[  517.917380][ T8149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010
[  517.925344][ T8149] R13: 00007f5e52626038 R14: 00007fff6b0ba080 R15: 0000000000018966
[  517.933342][ T8149]  </TASK>
[  517.936866][ T8149] audit: audit_lost=9 audit_rate_limit=0 audit_backlog_limit=64
[  517.944713][ T8149] audit: out of memory in audit_log_start
[  518.668778][ T8160] loop6: detected capacity change from 0 to 2048
[  518.827380][ T8160] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  519.030057][ T8166] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #2: block 16: comm syz.6.439: lblock 0 mapped to illegal pblock 16 (length 1)
[  519.500285][ T7562] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  519.805000][ T8169] loop5: detected capacity change from 0 to 512
[  519.945079][ T8169] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec099, mo2=0002]
[  520.072687][ T8169] System zones: 0-2, 18-18, 34-35
[  520.152681][ T8169] EXT4-fs error (device loop5): ext4_ext_check_inode:532: inode #4: comm syz.5.442: pblk 0 bad header/extent: invalid magic - magic d, entries 2, max 4(0), depth 0(0)
[  520.271406][ T8169] EXT4-fs error (device loop5): ext4_quota_enable:7147: comm syz.5.442: Bad quota inode: 4, type: 1
[  520.323405][ T8169] EXT4-fs warning (device loop5): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  520.489059][ T8169] EXT4-fs (loop5): mount failed
[  521.588765][ T8194] binder: 8192:8194 ioctl c0306201 0 returned -14
[  521.598711][ T8194] binder: 8192:8194 ioctl c0306201 0 returned -14
[  523.072909][ T8207] loop2: detected capacity change from 0 to 512
[  523.141077][ T8207] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec099, mo2=0002]
[  523.227047][ T8207] System zones: 0-2, 18-18, 34-35
[  523.308830][ T8207] EXT4-fs error (device loop2): ext4_ext_check_inode:532: inode #4: comm syz.2.445: pblk 0 bad header/extent: invalid magic - magic d, entries 2, max 4(0), depth 0(0)
[  523.442715][ T8207] EXT4-fs error (device loop2): ext4_quota_enable:7147: comm syz.2.445: Bad quota inode: 4, type: 1
[  523.474543][ T8207] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  523.525826][ T8207] EXT4-fs (loop2): mount failed
[  525.368922][ T8222] loop6: detected capacity change from 0 to 2048
[  526.253484][ T8222] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  526.489397][ T8232] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #2: block 16: comm syz.6.450: lblock 0 mapped to illegal pblock 16 (length 1)
[  526.926279][ T7562] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  527.848437][ T8247] binder: 8244:8247 ioctl c0306201 0 returned -14
[  528.143816][ T8249] binder: 8244:8249 ioctl c0306201 0 returned -14
[  528.590180][ T8250] CacheFiles: Failed to register: -95
[  529.056949][ T8260] loop2: detected capacity change from 0 to 512
[  529.153629][ T8260] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec099, mo2=0002]
[  529.227976][ T8260] System zones: 0-2, 18-18, 34-35
[  529.247477][ T8260] EXT4-fs error (device loop2): ext4_ext_check_inode:532: inode #4: comm syz.2.457: pblk 0 bad header/extent: invalid magic - magic d, entries 2, max 4(0), depth 0(0)
[  529.336946][ T8260] EXT4-fs error (device loop2): ext4_quota_enable:7147: comm syz.2.457: Bad quota inode: 4, type: 1
[  529.381655][ T8260] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  529.456654][ T8260] EXT4-fs (loop2): mount failed
[  538.788839][ T8327] CacheFiles: Failed to register: -95
[  539.523972][ T8334] binder: 8331:8334 ioctl c0306201 0 returned -14
[  539.524698][ T8336] binder: 8331:8336 ioctl c0306201 0 returned -14
[  548.503897][ T8379] loop5: detected capacity change from 0 to 2048
[  548.576277][ T8379] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  548.839974][ T7524] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  549.578751][ T8389] binder: 8387:8389 ioctl c0306201 0 returned -14
[  549.629495][ T8389] binder: 8387:8389 ioctl c0306201 0 returned -14
[  550.448527][ T1202] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  550.658259][ T1202] usb 7-1: Using ep0 maxpacket: 16
[  550.687803][ T1202] usb 7-1: config 0 interface 0 has no altsetting 0
[  550.715407][ T1202] usb 7-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00
[  550.748838][ T1202] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  552.142439][ T1202] usb 7-1: config 0 descriptor??
[  552.635803][ T1202] usbhid 7-1:0.0: can't add hid device: -71
[  552.658796][ T1202] usbhid: probe of 7-1:0.0 failed with error -71
[  553.453814][ T1202] usb 7-1: USB disconnect, device number 2
[  560.456126][ T8453] loop2: detected capacity change from 0 to 512
[  560.515135][ T8453] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec099, mo2=0002]
[  560.555029][ T8453] System zones: 0-2, 18-18, 34-35
[  560.593222][ T8453] EXT4-fs error (device loop2): ext4_ext_check_inode:532: inode #4: comm syz.2.488: pblk 0 bad header/extent: invalid magic - magic d, entries 2, max 4(0), depth 0(0)
[  560.668333][ T8453] EXT4-fs error (device loop2): ext4_quota_enable:7147: comm syz.2.488: Bad quota inode: 4, type: 1
[  560.704844][ T8453] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  560.763581][ T8453] EXT4-fs (loop2): mount failed
[  560.967874][ T8446] Bluetooth: hci1: command 0x0406 tx timeout
[  561.038427][ T8462] loop6: detected capacity change from 0 to 2048
[  561.171068][ T8462] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  562.005432][ T7562] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  562.773089][ T8482] binder: 8477:8482 ioctl c0306201 0 returned -14
[  562.785573][ T8482] binder: 8477:8482 ioctl c0306201 0 returned -14
[  563.891901][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  563.898293][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  567.249678][ T8446] Bluetooth: hci0: command 0x0406 tx timeout
[  573.028350][ T8567] binder: 8564:8567 ioctl c0306201 0 returned -14
[  573.057894][ T8567] binder: 8564:8567 ioctl c0306201 0 returned -14
[  583.808094][ T8633] binder: 8632:8633 ioctl c0306201 0 returned -14
[  584.040108][ T8633] binder: 8632:8633 ioctl c0306201 0 returned -14
[  592.138024][ T5836] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  592.220502][ T8690] xt_hashlimit: size too large, truncated to 1048576
[  593.679241][ T5836] usb 3-1: Using ep0 maxpacket: 16
[  593.707335][ T5836] usb 3-1: config 0 interface 0 has no altsetting 0
[  593.718028][ T5836] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00
[  593.748193][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  593.804325][ T5836] usb 3-1: config 0 descriptor??
[  594.040382][ T5836] usbhid 3-1:0.0: can't add hid device: -71
[  594.046452][ T5836] usbhid: probe of 3-1:0.0 failed with error -71
[  595.498230][ T5836] usb 3-1: USB disconnect, device number 2
[  599.427044][ T8736] binder: 8733:8736 ioctl c0306201 0 returned -14
[  599.443563][ T8736] binder: 8733:8736 ioctl c0306201 0 returned -14
[  614.221159][ T8839] binder: 8834:8839 ioctl c0306201 0 returned -14
[  614.235013][ T8839] binder: 8834:8839 ioctl c0306201 0 returned -14
[  616.898121][ T8868] capability: warning: `syz.2.546' uses 32-bit capabilities (legacy support in use)
[  616.983508][ T8872] overlayfs: failed to resolve './file1': -2
[  617.035880][ T8874] CacheFiles: Failed to register: -95
[  622.254259][ T8920] overlayfs: failed to resolve './file0': -2
[  622.275725][ T8920] CacheFiles: Failed to register: -95
[  624.634639][ T8938] binder: 8933:8938 ioctl c0306201 0 returned -14
[  625.399667][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  625.406036][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  629.472587][ T8983] overlayfs: failed to resolve './file0': -2
[  630.874251][ T8991] CacheFiles: Failed to register: -95
[  634.992172][ T9028] binder: 9023:9028 ioctl c0306201 0 returned -14
[  637.766714][ T9042] netlink: 44 bytes leftover after parsing attributes in process `syz.3.575'.
[  637.775902][ T9042] netlink: 44 bytes leftover after parsing attributes in process `syz.3.575'.
[  638.549457][ T9045] overlayfs: failed to resolve './file0': -2
[  638.618426][ T9048] CacheFiles: Failed to register: -95
[  643.029050][ T9075] FAULT_INJECTION: forcing a failure.
[  643.029050][ T9075] name failslab, interval 1, probability 0, space 0, times 0
[  643.083021][ T9075] CPU: 1 PID: 9075 Comm: syz.3.586 Not tainted syzkaller #0
[  643.090394][ T9075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  643.100489][ T9075] Call Trace:
[  643.103800][ T9075]  <TASK>
[  643.106745][ T9075]  dump_stack_lvl+0x18c/0x250
[  643.111440][ T9075]  ? show_regs_print_info+0x20/0x20
[  643.116641][ T9075]  ? load_image+0x420/0x420
[  643.121149][ T9075]  ? __might_sleep+0xe0/0xe0
[  643.125742][ T9075]  ? __lock_acquire+0x7d80/0x7d80
[  643.130803][ T9075]  should_fail_ex+0x394/0x4c0
[  643.135487][ T9075]  should_failslab+0x9/0x20
[  643.140001][ T9075]  slab_pre_alloc_hook+0x59/0x300
[  643.145033][ T9075]  kmem_cache_alloc+0x5a/0x2c0
[  643.149815][ T9075]  ? dup_fd+0x56/0xa20
[  643.153885][ T9075]  dup_fd+0x56/0xa20
[  643.157778][ T9075]  ? __ia32_sys_get_robust_list+0x110/0x110
[  643.163694][ T9075]  __close_range+0x19d/0x690
[  643.168286][ T9075]  ? pick_file+0x1e0/0x1e0
[  643.172706][ T9075]  __x64_sys_close_range+0x7a/0x90
[  643.177829][ T9075]  do_syscall_64+0x55/0xb0
[  643.182254][ T9075]  ? clear_bhb_loop+0x40/0x90
[  643.186965][ T9075]  ? clear_bhb_loop+0x40/0x90
[  643.191641][ T9075]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  643.197534][ T9075] RIP: 0033:0x7f5e5239e159
[  643.201948][ T9075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  643.221549][ T9075] RSP: 002b:00007f5e532e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  643.229975][ T9075] RAX: ffffffffffffffda RBX: 00007f5e52625fa0 RCX: 00007f5e5239e159
[  643.237945][ T9075] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: ffffffffffffffff
[  643.245924][ T9075] RBP: 00007f5e5243506b R08: 0000000000000000 R09: 0000000000000000
[  643.253909][ T9075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  643.261874][ T9075] R13: 00007f5e52626038 R14: 00007f5e52625fa0 R15: 00007fff6b024668
[  643.269851][ T9075]  </TASK>
[  644.252033][ T9087] binder: 9080:9087 ioctl c0306201 0 returned -14
[  648.039471][ T9102] netlink: 16 bytes leftover after parsing attributes in process `syz.3.589'.
[  652.886684][ T9126] binder: 9121:9126 ioctl c0306201 0 returned -14
[  654.051636][ T9130] loop6: detected capacity change from 0 to 512
[  654.144177][ T9130] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec099, mo2=0002]
[  654.189637][ T9130] System zones: 0-2, 18-18, 34-35
[  654.226085][ T9130] EXT4-fs error (device loop6): ext4_ext_check_inode:532: inode #4: comm syz.6.598: pblk 0 bad header/extent: invalid magic - magic d, entries 2, max 4(0), depth 0(0)
[  654.277948][ T5086] Bluetooth: hci0: command 0x0406 tx timeout
[  654.363412][ T9130] EXT4-fs error (device loop6): ext4_quota_enable:7147: comm syz.6.598: Bad quota inode: 4, type: 1
[  654.398233][ T9130] EXT4-fs warning (device loop6): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  654.446076][ T9130] EXT4-fs (loop6): mount failed
[  657.440291][    T8] usb 3-1: new low-speed USB device number 3 using dummy_hcd
[  658.366641][    T8] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  658.395352][    T8] usb 3-1: config 0 has no interface number 0
[  658.415885][    T8] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  658.447571][    T8] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  658.478012][    T8] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  658.487122][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  658.525660][    T8] usb 3-1: config 0 descriptor??
[  658.539606][ T9140] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  658.570402][    T8] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  658.711883][ T9150] netlink: 28 bytes leftover after parsing attributes in process `syz.6.599'.
[  658.768051][ T9150] netlink: 28 bytes leftover after parsing attributes in process `syz.6.599'.
[  658.813567][ T9150] gretap0: entered promiscuous mode
[  658.844077][ T9150] gretap0: left promiscuous mode
[  659.014831][ T5779] usb 3-1: USB disconnect, device number 3
[  659.926400][ T9158] binder: 9154:9158 ioctl c0306201 0 returned -14
[  660.853490][ T9160] ieee802154 phy0 wpan0: encryption failed: -22
[  660.989641][ T9163] binder: 9161:9163 ioctl c0306201 200000000680 returned -14
[  663.462927][ T9199] binder: 9195:9199 ioctl c0306201 0 returned -14
[  667.158392][ T9214] FAULT_INJECTION: forcing a failure.
[  667.158392][ T9214] name failslab, interval 1, probability 0, space 0, times 0
[  667.383176][ T9214] CPU: 0 PID: 9214 Comm: syz.6.622 Not tainted syzkaller #0
[  667.390536][ T9214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  667.400612][ T9214] Call Trace:
[  667.403937][ T9214]  <TASK>
[  667.406897][ T9214]  dump_stack_lvl+0x18c/0x250
[  667.411621][ T9214]  ? show_regs_print_info+0x20/0x20
[  667.416824][ T9214]  ? load_image+0x420/0x420
[  667.421326][ T9214]  ? __might_sleep+0xe0/0xe0
[  667.425934][ T9214]  ? __lock_acquire+0x7d80/0x7d80
[  667.431001][ T9214]  should_fail_ex+0x394/0x4c0
[  667.435690][ T9214]  should_failslab+0x9/0x20
[  667.440205][ T9214]  slab_pre_alloc_hook+0x59/0x300
[  667.445238][ T9214]  ? __kasan_slab_alloc+0x6c/0x80
[  667.450299][ T9214]  kmem_cache_alloc_node+0x5e/0x310
[  667.455517][ T9214]  ? __alloc_skb+0x103/0x2c0
[  667.460120][ T9214]  __alloc_skb+0x103/0x2c0
[  667.464569][ T9214]  audit_log_start+0x15e/0x890
[  667.469388][ T9214]  ? audit_serial+0x30/0x30
[  667.473944][ T9214]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  667.479976][ T9214]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  667.486343][ T9214]  audit_seccomp+0x63/0x180
[  667.490884][ T9214]  __secure_computing+0x22c/0x2f0
[  667.495944][ T9214]  syscall_trace_enter+0xab/0x150
[  667.501019][ T9214]  do_syscall_64+0x28/0xb0
[  667.505459][ T9214]  ? clear_bhb_loop+0x40/0x90
[  667.510154][ T9214]  ? clear_bhb_loop+0x40/0x90
[  667.514850][ T9214]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  667.520764][ T9214] RIP: 0033:0x7f780319e159
[  667.525189][ T9214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  667.544830][ T9214] RSP: 002b:00007f78013d49f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  667.553258][ T9214] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f780319e159
[  667.561246][ T9214] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000b
[  667.569227][ T9214] RBP: 00007f78013d5030 R08: 0000000000000000 R09: 000000000000000b
[  667.577207][ T9214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010
[  667.585184][ T9214] R13: 00007f7803426128 R14: 00007ffe60d12080 R15: 000000000001fd68
[  667.593177][ T9214]  </TASK>
[  668.629045][ T9214] audit: audit_lost=10 audit_rate_limit=0 audit_backlog_limit=64
[  668.637319][ T9214] audit: out of memory in audit_log_start
[  668.941085][ T9242] netlink: 12 bytes leftover after parsing attributes in process `syz.5.627'.
[  673.247073][ T1202] usb 7-1: new low-speed USB device number 3 using dummy_hcd
[  673.486321][ T1202] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  673.514263][ T1202] usb 7-1: config 0 has no interface number 0
[  673.543852][ T1202] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  673.557478][ T1202] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  673.608460][ T1202] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  673.618165][ T1202] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  673.974070][ T1202] usb 7-1: config 0 descriptor??
[  673.981002][ T9257] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  673.999159][ T1202] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  674.229735][ T1202] usb 7-1: USB disconnect, device number 3
[  674.394412][ T9266] macsec0: entered promiscuous mode
[  674.445807][ T9267] loop3: detected capacity change from 0 to 512
[  674.453822][ T9266] netlink: 4 bytes leftover after parsing attributes in process `syz.5.628'.
[  674.516895][ T9266] veth1_macvtap: left promiscuous mode
[  674.599739][ T9267] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec099, mo2=0002]
[  674.622056][ T9269] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[  674.638319][ T9267] System zones: 0-2, 18-18, 34-35
[  674.696983][ T9267] EXT4-fs error (device loop3): ext4_ext_check_inode:532: inode #4: comm syz.3.636: pblk 0 bad header/extent: invalid magic - magic d, entries 2, max 4(0), depth 0(0)
[  674.834571][ T9267] EXT4-fs error (device loop3): ext4_quota_enable:7147: comm syz.3.636: Bad quota inode: 4, type: 1
[  674.895740][ T9267] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  674.941904][ T9266] macsec0 (unregistering): left promiscuous mode
[  675.003762][ T9267] EXT4-fs (loop3): mount failed
[  675.094026][ T9278] block2mtd: erasesize must be a divisor of device size
[  675.196298][ T9278] ------------[ cut here ]------------
[  675.202496][ T9278] WARNING: CPU: 1 PID: 9278 at block/bdev.c:643 blkdev_flush_mapping+0xac/0x290
[  675.211666][ T9278] Modules linked in:
[  675.215605][ T9278] CPU: 1 PID: 9278 Comm: syz.6.638 Not tainted syzkaller #0
[  675.223060][ T9278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  675.233988][ T9278] RIP: 0010:blkdev_flush_mapping+0xac/0x290
[  675.240192][ T9278] Code: 42 80 3c 28 00 74 08 4c 89 f7 e8 4f d2 cb fd 49 8b 3e 48 ba ff ff ff ff ff ff ff 7f 31 f6 e8 4b 57 a1 fd eb 11 e8 14 46 73 fd <0f> 0b 48 85 db 75 9f e8 08 46 73 fd 48 89 1c 24 4c 8d b3 80 00 00
[  675.259910][ T9278] RSP: 0018:ffffc90003adf970 EFLAGS: 00010287
[  675.265987][ T9278] RAX: ffffffff8414453c RBX: ffff888020228000 RCX: 0000000000080000
[  675.274398][ T9278] RDX: ffffc9000cff1000 RSI: 000000000000b371 RDI: 000000000000b372
[  675.282497][ T9278] RBP: 0000000000000002 R08: ffff88802022803b R09: 1ffff11004045007
[  675.290515][ T9278] R10: dffffc0000000000 R11: ffffed1004045008 R12: dffffc0000000000
[  675.298526][ T9278] R13: dffffc0000000000 R14: ffff888020228134 R15: ffff888020228038
[  675.306501][ T9278] FS:  00007f78013f66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  675.315486][ T9278] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  675.322237][ T9278] CR2: 00007fbeec33323d CR3: 000000002da9a000 CR4: 00000000003506e0
[  675.330286][ T9278] Call Trace:
[  675.334173][ T9278]  <TASK>
[  675.337104][ T9278]  ? blkdev_put+0x492/0x7a0
[  675.341769][ T9278]  blkdev_put+0x49a/0x7a0
[  675.346262][ T9278]  block2mtd_setup2+0x98f/0xe30
[  675.351202][ T9278]  ? block2mtd_setup+0xd0/0xd0
[  675.355968][ T9278]  ? rcu_is_watching+0x15/0xb0
[  675.360767][ T9278]  ? mutex_lock_nested+0x20/0x20
[  675.365772][ T9278]  ? __virt_addr_valid+0x10c/0x380
[  675.370932][ T9278]  ? kernfs_fop_write_iter+0x1dc/0x520
[  675.376407][ T9278]  block2mtd_setup+0x27/0xd0
[  675.381037][ T9278]  param_attr_store+0x20e/0x300
[  675.385890][ T9278]  ? param_attr_show+0x170/0x170
[  675.390862][ T9278]  ? sysfs_kf_read+0x360/0x360
[  675.395622][ T9278]  module_attr_store+0x5f/0x80
[  675.400466][ T9278]  kernfs_fop_write_iter+0x3a4/0x520
[  675.405752][ T9278]  vfs_write+0x474/0x9a0
[  675.410037][ T9278]  ? file_end_write+0x250/0x250
[  675.414894][ T9278]  ? __fget_files+0x3fc/0x460
[  675.419662][ T9278]  ? __fdget_pos+0x2a3/0x330
[  675.424274][ T9278]  ? ksys_write+0x74/0x260
[  675.428772][ T9278]  ksys_write+0x151/0x260
[  675.433132][ T9278]  ? __ia32_sys_read+0x90/0x90
[  675.438526][ T9278]  ? lockdep_hardirqs_on+0x98/0x150
[  675.443785][ T9278]  do_syscall_64+0x55/0xb0
[  675.448351][ T9278]  ? clear_bhb_loop+0x40/0x90
[  675.453035][ T9278]  ? clear_bhb_loop+0x40/0x90
[  675.457730][ T9278]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  675.463674][ T9278] RIP: 0033:0x7f780319e159
[  675.468127][ T9278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  675.488608][ T9278] RSP: 002b:00007f78013f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  675.497025][ T9278] RAX: ffffffffffffffda RBX: 00007f7803425fa0 RCX: 00007f780319e159
[  675.505087][ T9278] RDX: 000000000000000b RSI: 0000200000000200 RDI: 0000000000000003
[  675.513111][ T9278] RBP: 00007f780323506b R08: 0000000000000000 R09: 0000000000000000
[  675.521122][ T9278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  675.529132][ T9278] R13: 00007f7803426038 R14: 00007f7803425fa0 R15: 00007ffe60c670b8
[  675.537729][ T9278]  </TASK>
[  675.540875][ T9278] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  675.548149][ T9278] CPU: 1 PID: 9278 Comm: syz.6.638 Not tainted syzkaller #0
[  675.555423][ T9278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  675.565471][ T9278] Call Trace:
[  675.568771][ T9278]  <TASK>
[  675.571699][ T9278]  dump_stack_lvl+0x18c/0x250
[  675.576378][ T9278]  ? show_regs_print_info+0x20/0x20
[  675.581576][ T9278]  ? load_image+0x420/0x420
[  675.586079][ T9278]  panic+0x2ca/0x720
[  675.589974][ T9278]  ? bpf_jit_dump+0xd0/0xd0
[  675.594498][ T9278]  __warn+0x2e0/0x470
[  675.598472][ T9278]  ? blkdev_flush_mapping+0xac/0x290
[  675.603756][ T9278]  ? blkdev_flush_mapping+0xac/0x290
[  675.609036][ T9278]  report_bug+0x2be/0x4f0
[  675.613414][ T9278]  ? blkdev_flush_mapping+0xac/0x290
[  675.618697][ T9278]  ? blkdev_flush_mapping+0xac/0x290
[  675.623977][ T9278]  ? blkdev_flush_mapping+0xae/0x290
[  675.629258][ T9278]  handle_bug+0xcf/0x120
[  675.633499][ T9278]  exc_invalid_op+0x1a/0x50
[  675.638017][ T9278]  asm_exc_invalid_op+0x1a/0x20
[  675.642866][ T9278] RIP: 0010:blkdev_flush_mapping+0xac/0x290
[  675.648759][ T9278] Code: 42 80 3c 28 00 74 08 4c 89 f7 e8 4f d2 cb fd 49 8b 3e 48 ba ff ff ff ff ff ff ff 7f 31 f6 e8 4b 57 a1 fd eb 11 e8 14 46 73 fd <0f> 0b 48 85 db 75 9f e8 08 46 73 fd 48 89 1c 24 4c 8d b3 80 00 00
[  675.668367][ T9278] RSP: 0018:ffffc90003adf970 EFLAGS: 00010287
[  675.674429][ T9278] RAX: ffffffff8414453c RBX: ffff888020228000 RCX: 0000000000080000
[  675.682415][ T9278] RDX: ffffc9000cff1000 RSI: 000000000000b371 RDI: 000000000000b372
[  675.690382][ T9278] RBP: 0000000000000002 R08: ffff88802022803b R09: 1ffff11004045007
[  675.698347][ T9278] R10: dffffc0000000000 R11: ffffed1004045008 R12: dffffc0000000000
[  675.706318][ T9278] R13: dffffc0000000000 R14: ffff888020228134 R15: ffff888020228038
[  675.714291][ T9278]  ? blkdev_flush_mapping+0xac/0x290
[  675.719600][ T9278]  ? blkdev_put+0x492/0x7a0
[  675.724125][ T9278]  blkdev_put+0x49a/0x7a0
[  675.728458][ T9278]  block2mtd_setup2+0x98f/0xe30
[  675.733316][ T9278]  ? block2mtd_setup+0xd0/0xd0
[  675.738082][ T9278]  ? rcu_is_watching+0x15/0xb0
[  675.742857][ T9278]  ? mutex_lock_nested+0x20/0x20
[  675.747804][ T9278]  ? __virt_addr_valid+0x10c/0x380
[  675.752943][ T9278]  ? kernfs_fop_write_iter+0x1dc/0x520
[  675.758403][ T9278]  block2mtd_setup+0x27/0xd0
[  675.762988][ T9278]  param_attr_store+0x20e/0x300
[  675.767851][ T9278]  ? param_attr_show+0x170/0x170
[  675.772804][ T9278]  ? sysfs_kf_read+0x360/0x360
[  675.777560][ T9278]  module_attr_store+0x5f/0x80
[  675.782325][ T9278]  kernfs_fop_write_iter+0x3a4/0x520
[  675.787620][ T9278]  vfs_write+0x474/0x9a0
[  675.791868][ T9278]  ? file_end_write+0x250/0x250
[  675.796720][ T9278]  ? __fget_files+0x3fc/0x460
[  675.801400][ T9278]  ? __fdget_pos+0x2a3/0x330
[  675.806002][ T9278]  ? ksys_write+0x74/0x260
[  675.810450][ T9278]  ksys_write+0x151/0x260
[  675.814783][ T9278]  ? __ia32_sys_read+0x90/0x90
[  675.819548][ T9278]  ? lockdep_hardirqs_on+0x98/0x150
[  675.824761][ T9278]  do_syscall_64+0x55/0xb0
[  675.829178][ T9278]  ? clear_bhb_loop+0x40/0x90
[  675.833852][ T9278]  ? clear_bhb_loop+0x40/0x90
[  675.838527][ T9278]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  675.844418][ T9278] RIP: 0033:0x7f780319e159
[  675.848834][ T9278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  675.868437][ T9278] RSP: 002b:00007f78013f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  675.876846][ T9278] RAX: ffffffffffffffda RBX: 00007f7803425fa0 RCX: 00007f780319e159
[  675.884811][ T9278] RDX: 000000000000000b RSI: 0000200000000200 RDI: 0000000000000003
[  675.892794][ T9278] RBP: 00007f780323506b R08: 0000000000000000 R09: 0000000000000000
[  675.900759][ T9278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  675.908723][ T9278] R13: 00007f7803426038 R14: 00007f7803425fa0 R15: 00007ffe60c670b8
[  675.916694][ T9278]  </TASK>
[  675.919842][ T9278] Kernel Offset: disabled
[  675.924221][ T9278] Rebooting in 86400 seconds..