last executing test programs:

1m58.957072078s ago: executing program 0 (id=239):
getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz0\x00'}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x5)
set_robust_list(&(0x7f00000001c0), 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000019280)=0x80000000000003)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r4, &(0x7f00000192c0)={0x0, 0x0, &(0x7f0000019300)=[{&(0x7f0000019340)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d83104000000fda542e718f94b929ade", 0x55}], 0x1}, 0x20008810)
write(r4, &(0x7f00000193c0)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24)

1m58.176114037s ago: executing program 0 (id=242):
pipe(&(0x7f0000000340))
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./mnt\x00', 0x840, &(0x7f00000005c0)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000900)="$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")
syz_mount_image$vfat(&(0x7f0000000b40), &(0x7f0000000b80)='./bus\x00', 0x2020c1b, 0x0, 0x1, 0x0, &(0x7f0000000bc0))
chdir(&(0x7f0000000c00)='./bus\x00')
r0 = open(&(0x7f0000000c40)='.\x00', 0x8000, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c80)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000cc0)='./proc\x00', &(0x7f0000000d00)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000d80)='7', 0x1)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0)
getdents(r0, 0x0, 0x1517f)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000006c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000})
socket$phonet(0x23, 0x2, 0x1)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={0xffffffffffffffff, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000780)=[0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6b, &(0x7f0000000840)=[{}, {}], 0x10, 0x0, 0x0, 0x0, 0x0, 0xaf, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@can={{0x0, 0x0, 0x0, 0x1}, 0xff, 0x1, 0x4, 0x0, "06400000008000"}, 0x10}, 0x1, 0x0, 0x0, 0x20000801}, 0x4004080)

1m57.882548365s ago: executing program 0 (id=244):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0x6, &(0x7f0000000640)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@map=r0, r1, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000700)={r0, &(0x7f0000000740), &(0x7f0000000780)=@tcp}, 0x20)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r3 = fanotify_init(0xf00, 0x2)
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x3, 0xc, @loopback, 0xfffffffe}, 0x1c)
fanotify_mark(r3, 0x105, 0x8971, r2, 0x0)
readv(r3, &(0x7f0000000340)=[{&(0x7f0000000380), 0x3c}], 0x4c)
rename(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)='./file1\x00')
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

1m55.521846963s ago: executing program 0 (id=246):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000280), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x80002c1, 0x2, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fff, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1c1)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000c80)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
r3 = getpid()
lremovexattr(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)=@known='system.posix_acl_access\x00')
syz_pidfd_open(r3, 0x0)
close_range(r2, 0xffffffffffffffff, 0x200000000000000)

1m55.174505832s ago: executing program 0 (id=247):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f00000002c0)=[{0x20, 0x2c, 0x40, 0xfffff034}, {0x20, 0x0, 0x7, 0x39a0}, {0x6, 0xba, 0x2, 0xbfff}]}, 0x10)
syz_emit_ethernet(0x36, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a300000000048000000030a01040000000000000000010000000900010073797a30000000000900030073797a31000000001400048008000140000000040800024000000064080007006e61740040000000060a01040000000000000000010000000900010073797a30000000000900020073797a31000000001400048010000180090001006d6173710000"], 0xd0}}, 0x0)
rename(&(0x7f0000000000)='./cgroup.net/devices.allow\x00', &(0x7f00000002c0)='./cgroup.net/cgroup.procs\x00')
open(&(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x100080, 0x15)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x3b, 0x301, 0xa70bd1d, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000180)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x80}, 0x2a, 0xfffffffffffffff9)
add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200), &(0x7f0000000300), 0xca, 0xfffffffffffffffe)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000340)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '\xa9\xff\x7f\x00'}, 0x1c, 0xfffffffffffffffd)
add_key(&(0x7f0000000380)='encrypted\x00', &(0x7f00000003c0), &(0x7f0000000400), 0xca, 0xfffffffffffffffe)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x9000, 0xffffdffd, @dev={0xfe, 0x80, '\x00', 0x16}, 0x7}, 0x1c)

1m53.029526445s ago: executing program 0 (id=251):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x11fa, &(0x7f00000008c0)="$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")
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./my_debugfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./my_debugfs\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001c00)='./my_debugfs/usb/devices\x00', 0x0, 0x0)
read(r3, &(0x7f0000001c40)=""/100, 0x7ffc)
openat(0xffffffffffffff9c, &(0x7f0000001ac0)='./file1\x00', 0x48042, 0x8c)
statfs(&(0x7f0000001b00)='./file1\x00', &(0x7f0000001b40)=""/186)

1m37.157978281s ago: executing program 32 (id=251):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x11fa, &(0x7f00000008c0)="$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")
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./my_debugfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./my_debugfs\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001c00)='./my_debugfs/usb/devices\x00', 0x0, 0x0)
read(r3, &(0x7f0000001c40)=""/100, 0x7ffc)
openat(0xffffffffffffff9c, &(0x7f0000001ac0)='./file1\x00', 0x48042, 0x8c)
statfs(&(0x7f0000001b00)='./file1\x00', &(0x7f0000001b40)=""/186)

21.634175322s ago: executing program 2 (id=454):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xffff, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000340)="08001efbb07d5a6a", 0x8}], 0x1}, 0x24048890)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000008c0)={0x4c, 0x0, &(0x7f00000007c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x1, 0x0, &(0x7f0000000880)})

21.481817485s ago: executing program 2 (id=455):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0)
read$msr(r2, &(0x7f00000001c0)=""/102392, 0x18ff8)
sched_setaffinity(r1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000019240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0)

16.48114718s ago: executing program 5 (id=464):
pipe(&(0x7f0000000340))
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./mnt\x00', 0x840, &(0x7f00000005c0)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000900)="$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")
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000240)=0x7)
syz_mount_image$vfat(&(0x7f0000000b40), &(0x7f0000000b80)='./bus\x00', 0x2020c1b, 0x0, 0x1, 0x0, &(0x7f0000000bc0))
chdir(0x0)
r0 = open(0x0, 0x8000, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c80)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000cc0)='./proc\x00', &(0x7f0000000d00)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000d80)='7', 0x1)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0)
getdents(r0, 0x0, 0x1517f)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000006c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000})
socket$phonet(0x23, 0x2, 0x1)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={0xffffffffffffffff, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000780)=[0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6b, &(0x7f0000000840)=[{}, {}], 0x10, 0x0, 0x0, 0x0, 0x0, 0xaf, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@can={{0x0, 0x0, 0x0, 0x1}, 0xff, 0x1, 0x4, 0x0, "06400000008000"}, 0x10}, 0x1, 0x0, 0x0, 0x20000801}, 0x4004080)

14.545496238s ago: executing program 5 (id=467):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00')
write$yama_ptrace_scope(r1, &(0x7f00000000c0)='2\x00', 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x44, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x176}]}, 0x44}}, 0x0)

14.544212028s ago: executing program 2 (id=468):
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r2, 0x0)
syz_emit_ethernet(0x4a, 0x0, 0x0)
syz_emit_ethernet(0x56, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a84d0", 0x20, 0x6, 0x1, @remote, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x98ca}]}}}}}}}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000910000000000000000000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000000908000140000000090900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

14.291604564s ago: executing program 4 (id=469):
fsopen(0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000440), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x10106, 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000004c0), 0x121602, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000880)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000008c0)={0x0, 0x1}, 0x1}, 0x94)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000900), 0x0)
close(r6)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_ext={0x1a, 0xf, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000ac0)={0x1, &(0x7f0000000b00)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r7, 0xffffffffffffffff, 0x2000000000000)

13.011988076s ago: executing program 5 (id=471):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./proc\x00', 0x2)
mount(0x0, &(0x7f00000009c0)='./proc\x00', &(0x7f0000000a00)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r0, &(0x7f0000000a80)='9', 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x8, 0x10, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

13.005759426s ago: executing program 4 (id=472):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./mnt\x00', 0x1ff)
mount$nfs(&(0x7f0000000c40)='127.0.0.1:/export\x00', &(0x7f0000000c80)='./mnt\x00', &(0x7f0000000cc0), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mo'])

11.684274639s ago: executing program 4 (id=473):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

11.510549074s ago: executing program 5 (id=474):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000008400)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000021400)=0x7)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
landlock_restrict_self(0xffffffffffffffff, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r4, 0x0, 0x0)
r5 = add_key$keyring(&(0x7f0000021500), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$describe(0x6, r5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = syz_open_dev$radio(&(0x7f0000021740), 0x3, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000021780)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000217c0)={0x98f909, 0x4, '\x00', @p_u8=0x0}})
syz_usb_connect(0x3, 0x4e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040110750050000010203010902"], 0x0)

11.508705824s ago: executing program 4 (id=475):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x200000000000000)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x80)

6.981694607s ago: executing program 3 (id=480):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x11fa, &(0x7f00000008c0)="$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")
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./my_debugfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./my_debugfs\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001c00)='./my_debugfs/usb/devices\x00', 0x0, 0x0)
read(r3, &(0x7f0000001c40)=""/100, 0x7ffc)
openat(0xffffffffffffff9c, &(0x7f0000001ac0)='./file1\x00', 0x48042, 0x8c)
statfs(&(0x7f0000001b00)='./file1\x00', &(0x7f0000001b40)=""/186)

6.4125342s ago: executing program 5 (id=481):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xeff, 0xffffffffffffffde, &(0x7f0000000400)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)

6.178966567s ago: executing program 1 (id=482):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00')
write$yama_ptrace_scope(r1, &(0x7f00000000c0)='2\x00', 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x44, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x176}]}, 0x44}}, 0x0)

5.848817105s ago: executing program 2 (id=483):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./mnt\x00', 0x1ff)
mount$nfs(&(0x7f0000000c40)='127.0.0.1:/export\x00', &(0x7f0000000c80)='./mnt\x00', &(0x7f0000000cc0), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mo'])

5.797004346s ago: executing program 4 (id=484):
r0 = epoll_create1(0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f000000e3c0), 0x400, 0x0)
r1 = landlock_create_ruleset(&(0x7f000000e400)={0x7f6e}, 0x18, 0x0)
landlock_restrict_self(r1, 0xe)
close_range(r0, 0xffffffffffffffff, 0x100000000000000)

4.883209589s ago: executing program 3 (id=485):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000480)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.711571223s ago: executing program 1 (id=486):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1c1)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000c80)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
r3 = getpid()
openat$fuse(0xffffffffffffff9c, &(0x7f0000000d80), 0x2, 0x0)
lremovexattr(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)=@known='system.posix_acl_access\x00')
syz_pidfd_open(r3, 0x0)
close_range(r2, 0xffffffffffffffff, 0x200000000000000)

4.711422553s ago: executing program 4 (id=487):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xffff, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000340)="08001efbb07d5a6a", 0x8}], 0x1}, 0x24048890)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000008c0)={0x4c, 0x0, &(0x7f00000007c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x1, 0x0, &(0x7f0000000880)})

4.615156536s ago: executing program 2 (id=488):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000380)={0xa, 0x4e1f, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100000}, 0x1c, 0x0}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x7, &(0x7f00000000c0))
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil)
prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000480)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5c9000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0)
read$msr(r4, &(0x7f0000000540)=""/102392, 0x18ff8)
semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000019540)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "6e0818", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0)

4.272137274s ago: executing program 3 (id=489):
syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000480)=ANY=[@ANYRES16=0x0], 0x1, 0x1f5, &(0x7f0000000600)="$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")
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'xfrm0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_open_dev$sg(0x0, 0x2, 0x200000)
connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000280), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2)
recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f00000003c0)={0x0, 0x80000001})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000400)={0x0, 'erspan0\x00', {0x1}, 0x26})
r4 = openat$dsp1(0xffffff9c, 0x0, 0x80040, 0x0)
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x4000010, 0xffffffffffffffff, 0xb9ddd000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000440)=0x9, 0x4, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYRES64=r4], 0x0, 0x38}, 0x28)
keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newtaction={0x64, 0x30, 0xb, 0x5, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
ioprio_set$uid(0x3, 0x0, 0x2004)
fchmodat(0xffffffffffffff9c, 0x0, 0x17f)

4.267369634s ago: executing program 1 (id=490):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]})
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x20, 0x0, &(0x7f0000000140)=[@request_death, @request_death]})

3.801893825s ago: executing program 1 (id=491):
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x6)
semop(0x0, &(0x7f00000016c0), 0x0)
semop(0x0, &(0x7f0000001700)=[{0x1, 0xbbdd, 0x1000}], 0x1)
semctl$IPC_RMID(0x0, 0x0, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001280)={0x1, 0x0, 0x0, &(0x7f00000012c0)=""/51, 0x0})
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001300))
r2 = dup(r1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000001340)={0x1, r2})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001480)={@map=r2, 0xe, 0x0, 0x5d3, &(0x7f0000001380), 0x0, 0x0, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001440)=[0x0, 0x0], <r3=>0x0}, 0x40)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000014c0)={r2, 0x0, 0x25, 0x6, @val=@tcx={@void, @value=r2, @void, @void, r3}}, 0x1c)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
wait4(r4, 0x0, 0x8, 0x0)
ptrace$setregset(0x4205, r4, 0x1, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001640)=ANY=[@ANYBLOB="209996056a9ecb552298d69e7b41e61f70693f43b8c9de8da6b6ebd6d2"], 0x20}, 0x1, 0x0, 0x0, 0x24008040}, 0x404c042)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ptrace$setregset(0x4205, r4, 0x1, &(0x7f0000001680)={0x0})
setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff})
io_setup(0x6573, &(0x7f0000004200))

3.035970215s ago: executing program 3 (id=492):
pipe(&(0x7f0000000340))
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./mnt\x00', 0x840, &(0x7f00000005c0)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000900)="$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")
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000240)=0x7)
syz_mount_image$vfat(&(0x7f0000000b40), &(0x7f0000000b80)='./bus\x00', 0x2020c1b, 0x0, 0x1, 0x0, &(0x7f0000000bc0))
chdir(0x0)
r0 = open(&(0x7f0000000c40)='.\x00', 0x8000, 0x50)
mkdirat(0xffffffffffffff9c, 0x0, 0x180)
mount(0x0, &(0x7f0000000cc0)='./proc\x00', &(0x7f0000000d00)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000d80)='7', 0x1)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0)
getdents(r0, 0x0, 0x1517f)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000006c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000})
socket$phonet(0x23, 0x2, 0x1)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={0xffffffffffffffff, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000780)=[0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6b, &(0x7f0000000840)=[{}, {}], 0x10, 0x0, 0x0, 0x0, 0x0, 0xaf, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@can={{0x0, 0x0, 0x0, 0x1}, 0xff, 0x1, 0x4, 0x0, "06400000008000"}, 0x10}, 0x1, 0x0, 0x0, 0x20000801}, 0x4004080)

2.669267724s ago: executing program 1 (id=493):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00'})
close(r0)

2.009436881s ago: executing program 3 (id=494):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x200000000000000)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x80)

1.924067603s ago: executing program 5 (id=495):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x11fa, &(0x7f00000008c0)="$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")
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./my_debugfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./my_debugfs\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001c00)='./my_debugfs/usb/devices\x00', 0x0, 0x0)
read(r3, &(0x7f0000001c40)=""/100, 0x7ffc)
openat(0xffffffffffffff9c, &(0x7f0000001ac0)='./file1\x00', 0x48042, 0x8c)
statfs(&(0x7f0000001b00)='./file1\x00', &(0x7f0000001b40)=""/186)

1.902865863s ago: executing program 2 (id=496):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x802, 0x0)
write(r0, &(0x7f0000000140)='27', 0x2)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x2, 0xc9}}}, 0x6)
r1 = syz_open_dev$vcsa(&(0x7f0000000180), 0x2, 0x200c00)
openat(r1, &(0x7f00000001c0)='./dir0/file0\x00', 0xe80, 0x1)
syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x1)

1.595701171s ago: executing program 1 (id=497):
setns(0xc9, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000003c0), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000400)=0x2)
recvmmsg(r2, &(0x7f0000000440), 0x10106, 0x2, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="50000000050801"], 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x4)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000000c0)={[{@noinit_itable}, {@noblock_validity}, {@max_batch_time}, {@errors_remount}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@init_itable}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x1, 0x4bf, &(0x7f00000005c0)="$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")

0s ago: executing program 3 (id=498):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./mnt\x00', 0x1ff)
mount$nfs(&(0x7f0000000c40)='127.0.0.1:/export\x00', &(0x7f0000000c80)='./mnt\x00', &(0x7f0000000cc0), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto='])

kernel console output (not intermixed with test programs):

[ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.033674][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.042536][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   76.046089][   T21] Bluetooth: hci1: command 0x040f tx timeout
[   76.053232][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   76.064858][   T21] Bluetooth: hci3: command 0x040f tx timeout
[   76.064896][   T21] Bluetooth: hci2: command 0x040f tx timeout
[   76.078979][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   76.090822][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   76.102217][ T3042] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.109410][ T3042] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.119973][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   76.126233][   T21] Bluetooth: hci4: command 0x040f tx timeout
[   76.128951][ T4266] Bluetooth: hci0: command 0x040f tx timeout
[   76.140926][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   76.151630][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   76.160636][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   76.180305][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.189761][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.200341][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.210478][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.223914][ T4186] device veth0_macvtap entered promiscuous mode
[   76.241317][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.252906][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.265209][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.280103][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   76.289974][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   76.302143][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   76.311713][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   76.321414][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   76.337349][ T4198] device veth1_vlan entered promiscuous mode
[   76.347750][ T4186] device veth1_macvtap entered promiscuous mode
[   76.359706][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.370771][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.380400][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.390920][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.411383][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   76.419786][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   76.428444][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   76.438478][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   76.479682][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   76.488970][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   76.498910][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   76.510083][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   76.520035][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   76.538115][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   76.547744][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   76.576072][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.590284][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.600919][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.612129][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.624845][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.634377][ T4198] device veth0_macvtap entered promiscuous mode
[   76.645292][ T4198] device veth1_macvtap entered promiscuous mode
[   76.663775][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   76.672564][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   76.681910][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   76.692154][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   76.701701][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   76.711078][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   76.735561][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   76.750654][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.762384][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.772549][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.783714][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.796036][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.834503][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   76.843267][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   76.885284][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.894052][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.903928][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.914072][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.946319][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.966696][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.980403][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.993612][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.004025][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.015522][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.027319][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.045236][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.047794][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.057453][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.080940][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.089370][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.100334][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.111639][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.122547][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.133694][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.145053][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   77.160075][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   77.180858][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   77.190039][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   77.205684][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   77.261665][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.265229][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   77.272615][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.284623][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   77.293089][ T4198] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.303710][ T4198] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.315854][ T4198] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.326056][ T4198] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.357550][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   77.364958][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.377051][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.391767][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.435767][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.443649][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.459078][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   77.502438][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   77.525744][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   77.541021][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   77.619678][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.639079][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   77.646072][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.682686][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   77.707976][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   77.720533][ T4187] device veth0_vlan entered promiscuous mode
[   77.742769][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   77.755170][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   77.793952][ T4187] device veth1_vlan entered promiscuous mode
[   77.839286][ T3042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.874160][ T3042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.901036][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   77.901188][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.923525][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.933591][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   77.942686][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   77.951358][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   78.004446][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   78.023595][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   78.035049][ T4187] device veth0_macvtap entered promiscuous mode
[   78.061818][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.076857][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.096916][ T4187] device veth1_macvtap entered promiscuous mode
[   78.105967][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   78.118945][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   78.129243][ T1108] Bluetooth: hci2: command 0x0419 tx timeout
[   78.145495][ T1108] Bluetooth: hci3: command 0x0419 tx timeout
[   78.165041][ T1108] Bluetooth: hci1: command 0x0419 tx timeout
[   78.174199][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   78.205246][ T4267] Bluetooth: hci0: command 0x0419 tx timeout
[   78.213860][ T4323] loop1: detected capacity change from 0 to 4096
[   78.214622][ T4267] Bluetooth: hci4: command 0x0419 tx timeout
[   78.240175][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.251805][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.262207][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.273093][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.283408][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.300683][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.311568][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.329409][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.350474][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.381682][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   78.398933][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   78.436278][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.458397][ T4330] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   78.506270][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.532218][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.573809][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.586410][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.612601][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.637133][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.663655][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.724568][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.800236][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.873429][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.102375][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.243060][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.542586][ T4348] loop2: detected capacity change from 0 to 128
[   79.605906][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   79.616691][ T4340] loop3: detected capacity change from 0 to 8192
[   79.630738][ T4350] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   79.663135][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   79.689525][ T4348] =======================================================
[   79.689525][ T4348] WARNING: The mand mount option has been deprecated and
[   79.689525][ T4348]          and is ignored by this kernel. Remove the mand
[   79.689525][ T4348]          option from the mount to silence this warning.
[   79.689525][ T4348] =======================================================
[   79.731334][ T4354] autofs4:pid:4354:autofs_fill_super: called with bogus options
[   79.746042][ T4340] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   79.778942][ T4353] loop4: detected capacity change from 0 to 512
[   79.893731][ T4353] FAT-fs (loop4): Unrecognized mount option "tz=UØC" or missing value
[   79.927343][ T4359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'.
[   80.053178][ T4348] EXT4-fs (loop2): Test dummy encryption mode enabled
[   80.096483][ T4348] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[   80.120945][ T4348] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   80.229357][ T4359] device hsr_slave_1 left promiscuous mode
[   80.249307][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.289609][ T4348] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   80.305156][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.361020][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   80.389167][ T3042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.405091][ T3042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.413371][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   80.562484][ T4375] loop0: detected capacity change from 0 to 256
[   82.388811][   T23] Bluetooth: hci0: command 0x0c24 tx timeout
[   82.535202][ T4393] loop3: detected capacity change from 0 to 1024
[   82.619171][ T4393] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[   82.687660][ T4393] EXT4-fs error (device loop3): ext4_get_journal_inode:5187: inode #32: comm syz.3.20: iget: special inode unallocated
[   82.844290][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!!
[   82.879915][ T4393] EXT4-fs (loop3): no journal found
[   82.989594][ T4403] usb usb9: usbfs: process 4403 (syz.0.26) did not claim interface 0 before use
[   83.402004][   T21] rxe_eth0 speed is unknown, defaulting to 1000
[   83.514501][ T4393] EXT4-fs (loop3): can't get journal size
[   83.571495][ T4393] EXT4-fs (loop3): filesystem is read-only
[   83.755575][ T4393] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier,. Quota mode: none.
[   83.788713][ T4415] loop0: detected capacity change from 0 to 128
[   83.877832][ T4415] EXT4-fs (loop0): Test dummy encryption mode enabled
[   83.955465][ T4415] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[   84.016953][ T4415] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   84.456980][ T4431] overlayfs: failed to set xattr on upper
[   84.513978][ T4431] overlayfs: ...falling back to index=off,metacopy=off.
[   84.555532][ T4431] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[   84.597700][ T4431] overlayfs: failed to resolve './file0': -2
[   84.816910][ T4410] loop1: detected capacity change from 0 to 32768
[   84.921365][ T4410] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.28 (4410)
[   85.223579][ T4410] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[   85.244811][ T4410] BTRFS info (device loop1): setting nodatasum
[   85.263837][ T4410] BTRFS info (device loop1): force zlib compression, level 3
[   85.371214][ T4448] futex_wake_op: syz.2.36 tries to shift op by 144; fix this program
[   85.394813][ T4410] BTRFS info (device loop1): use no compression
[   85.441770][ T4410] BTRFS info (device loop1): turning on flush-on-commit
[   85.538559][ T4410] BTRFS info (device loop1): enabling auto defrag
[   85.555867][ T4452] loop3: detected capacity change from 0 to 256
[   85.562250][ T4410] BTRFS info (device loop1): max_inline at 4096
[   85.581848][ T4410] BTRFS info (device loop1): using free space tree
[   85.674448][ T4410] BTRFS info (device loop1): has skinny extents
[   86.703807][ T1110] cfg80211: failed to load regulatory.db
[   86.880924][ T4428] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000
[   86.949427][ T4466] loop4: detected capacity change from 0 to 512
[   87.019746][ T4410] BTRFS error (device loop1): open_ctree failed: -12
[   87.120290][ T4492] loop0: detected capacity change from 0 to 128
[   87.174312][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   87.194327][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   87.312103][ T4466] EXT4-fs (loop4): 1 orphan inode deleted
[   87.343229][ T4503] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   87.362172][ T4466] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   87.438225][ T4492] EXT4-fs (loop0): Test dummy encryption mode enabled
[   87.525204][ T4492] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[   87.539028][ T4502] netlink: 20 bytes leftover after parsing attributes in process `syz.2.42'.
[   87.574522][ T4492] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   87.824901][ T4492] FAULT_INJECTION: forcing a failure.
[   87.824901][ T4492] name fail_futex, interval 1, probability 0, space 0, times 1
[   88.064870][ T4492] CPU: 0 PID: 4492 Comm: syz.0.41 Not tainted syzkaller #0
[   88.072140][ T4492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   88.082247][ T4492] Call Trace:
[   88.085552][ T4492]  <TASK>
[   88.088508][ T4492]  dump_stack_lvl+0x188/0x250
[   88.093394][ T4492]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[   88.099071][ T4492]  ? show_regs_print_info+0x20/0x20
[   88.104309][ T4492]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[   88.109997][ T4492]  should_fail+0x383/0x4b0
[   88.114452][ T4492]  get_futex_key+0x1a1/0x12d0
[   88.119165][ T4492]  ? __lock_acquire+0x13b3/0x7d40
[   88.124225][ T4492]  ? futex_wait_restart+0x250/0x250
[   88.129470][ T4492]  futex_wake+0x101/0x540
[   88.133847][ T4492]  ? futex_wait+0x680/0x680
[   88.138383][ T4492]  ? verify_lock_unused+0x140/0x140
[   88.143624][ T4492]  ? verify_lock_unused+0x140/0x140
[   88.148871][ T4492]  do_futex+0xd83/0x12b0
[   88.153184][ T4492]  ? futex_exit_release+0x1c0/0x1c0
[   88.158454][ T4492]  ? __context_tracking_exit+0x4c/0x80
[   88.163999][ T4492]  __se_sys_futex+0x389/0x420
[   88.168725][ T4492]  ? __x64_sys_futex+0xf0/0xf0
[   88.173541][ T4492]  ? __x64_sys_futex+0x1d/0xf0
[   88.178344][ T4492]  do_syscall_64+0x4c/0xa0
[   88.182805][ T4492]  ? clear_bhb_loop+0x30/0x80
[   88.187531][ T4492]  ? clear_bhb_loop+0x30/0x80
[   88.192247][ T4492]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   88.198191][ T4492] RIP: 0033:0x7f869c488559
[   88.202669][ T4492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   88.222324][ T4492] RSP: 002b:00007f869a6e00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   88.230801][ T4492] RAX: ffffffffffffffda RBX: 00007f869c70ffa8 RCX: 00007f869c488559
[   88.238844][ T4492] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f869c70ffac
[   88.246855][ T4492] RBP: 00007f869c70ffa0 R08: 002ee1e9552aa300 R09: 0000000000000000
[   88.254862][ T4492] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[   88.262887][ T4492] R13: 00007f869c710038 R14: 00007fff8d70d490 R15: 00007fff8d70d578
[   88.270942][ T4492]  </TASK>
[   89.750613][ T4529] binder: 4528:4529 ioctl c0306201 2000000005c0 returned -14
[   89.790680][ T4529] binder_alloc: 4528: pid 4528 spamming oneway? 2 buffers allocated for a total size of 5120
[   89.814313][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!!
[   89.843199][ T4531] futex_wake_op: syz.3.51 tries to shift op by 144; fix this program
[   89.853201][ T4532] binder_alloc: 4528: pid 4528 spamming oneway? 3 buffers allocated for a total size of 5128
[   90.244277][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[   90.414268][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   90.444272][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   90.464275][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   90.484271][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   90.494281][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   91.031339][ T4546] FAULT_INJECTION: forcing a failure.
[   91.031339][ T4546] name fail_futex, interval 1, probability 0, space 0, times 0
[   91.044347][ T4546] CPU: 0 PID: 4546 Comm: syz.4.53 Not tainted syzkaller #0
[   91.051598][ T4546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   91.061797][ T4546] Call Trace:
[   91.065211][ T4546]  <TASK>
[   91.068181][ T4546]  dump_stack_lvl+0x188/0x250
[   91.072908][ T4546]  ? show_regs_print_info+0x20/0x20
[   91.078148][ T4546]  ? load_image+0x410/0x410
[   91.082691][ T4546]  ? verify_lock_unused+0x140/0x140
[   91.087937][ T4546]  should_fail+0x383/0x4b0
[   91.092435][ T4546]  get_futex_key+0x1a1/0x12d0
[   91.097374][ T4546]  ? __lock_acquire+0x13b3/0x7d40
[   91.102446][ T4546]  ? futex_wait_restart+0x250/0x250
[   91.107814][ T4546]  futex_wake+0x101/0x540
[   91.112305][ T4546]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[   91.118351][ T4546]  ? futex_wait+0x680/0x680
[   91.122908][ T4546]  ? verify_lock_unused+0x140/0x140
[   91.128149][ T4546]  ? finish_lock_switch+0x12d/0x290
[   91.133391][ T4546]  ? lockdep_hardirqs_on+0x94/0x140
[   91.138640][ T4546]  do_futex+0xd83/0x12b0
[   91.142936][ T4546]  ? finish_task_switch+0x1e4/0x650
[   91.148189][ T4546]  ? __schedule+0x11cb/0x4350
[   91.153033][ T4546]  ? futex_exit_release+0x1c0/0x1c0
[   91.158291][ T4546]  ? __context_tracking_exit+0x4c/0x80
[   91.163807][ T4546]  __se_sys_futex+0x389/0x420
[   91.168537][ T4546]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[   91.174578][ T4546]  ? __x64_sys_futex+0xf0/0xf0
[   91.179413][ T4546]  ? __x64_sys_futex+0x1d/0xf0
[   91.184220][ T4546]  do_syscall_64+0x4c/0xa0
[   91.188670][ T4546]  ? clear_bhb_loop+0x30/0x80
[   91.193392][ T4546]  ? clear_bhb_loop+0x30/0x80
[   91.198113][ T4546]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   91.204043][ T4546] RIP: 0033:0x7fb17e18d559
[   91.208496][ T4546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   91.228309][ T4546] RSP: 002b:00007fb17c3a30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   91.236770][ T4546] RAX: ffffffffffffffda RBX: 00007fb17e415188 RCX: 00007fb17e18d559
[   91.244810][ T4546] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb17e41518c
[   91.252815][ T4546] RBP: 00007fb17e415180 R08: 003a92477d827f3a R09: 0000000000000000
[   91.260924][ T4546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   91.268965][ T4546] R13: 00007fb17e415218 R14: 00007ffdbadaf750 R15: 00007ffdbadaf838
[   91.277013][ T4546]  </TASK>
[   91.326351][ T4545] binder: BINDER_SET_CONTEXT_MGR already set
[   91.333566][ T4545] binder: 4538:4545 ioctl 4018620d 200000000780 returned -16
[   92.443474][ T4562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.60'.
[   93.246836][ T4570] ptp ptp0: new virtual clock ptp1
[   93.252348][ T4570] ptp ptp0: guarantee physical clock free running
[   93.827414][ T4579] loop1: detected capacity change from 0 to 4096
[   93.870084][ T4580] loop0: detected capacity change from 0 to 128
[   93.997165][ T4580] EXT4-fs (loop0): Test dummy encryption mode enabled
[   94.061379][ T4583] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   94.136938][ T4580] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[   94.149904][ T4580] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   94.243518][ T4580] FAULT_INJECTION: forcing a failure.
[   94.243518][ T4580] name failslab, interval 1, probability 0, space 0, times 1
[   94.316317][ T4580] CPU: 0 PID: 4580 Comm: syz.0.64 Not tainted syzkaller #0
[   94.323725][ T4580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   94.333843][ T4580] Call Trace:
[   94.337277][ T4580]  <TASK>
[   94.340247][ T4580]  dump_stack_lvl+0x188/0x250
[   94.345071][ T4580]  ? show_regs_print_info+0x20/0x20
[   94.350353][ T4580]  ? load_image+0x410/0x410
[   94.354913][ T4580]  ? __might_sleep+0xf0/0xf0
[   94.359577][ T4580]  ? __lock_acquire+0x7d40/0x7d40
[   94.364657][ T4580]  should_fail+0x383/0x4b0
[   94.369128][ T4580]  should_failslab+0x5/0x20
[   94.373992][ T4580]  slab_pre_alloc_hook+0x51/0xc0
[   94.378987][ T4580]  ? sk_prot_alloc+0x57/0x210
[   94.383717][ T4580]  kmem_cache_alloc+0x3d/0x280
[   94.388539][ T4580]  sk_prot_alloc+0x57/0x210
[   94.393210][ T4580]  ? sk_alloc+0x1d/0x310
[   94.397497][ T4580]  sk_alloc+0x2f/0x310
[   94.401678][ T4580]  pn_socket_create+0xf1/0x510
[   94.406494][ T4580]  __sock_create+0x473/0x910
[   94.411176][ T4580]  __sys_socket+0xe2/0x170
[   94.415720][ T4580]  __x64_sys_socket+0x76/0x80
[   94.420549][ T4580]  do_syscall_64+0x4c/0xa0
[   94.425140][ T4580]  ? clear_bhb_loop+0x30/0x80
[   94.429859][ T4580]  ? clear_bhb_loop+0x30/0x80
[   94.434578][ T4580]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   94.440543][ T4580] RIP: 0033:0x7f869c488559
[   94.445041][ T4580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   94.464687][ T4580] RSP: 002b:00007f869a6e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   94.473169][ T4580] RAX: ffffffffffffffda RBX: 00007f869c70ffa0 RCX: 00007f869c488559
[   94.481267][ T4580] RDX: 0000000000000001 RSI: 0000000000000002 RDI: 0000000000000023
[   94.489300][ T4580] RBP: 00007f869c51f8b0 R08: 0000000000000000 R09: 0000000000000000
[   94.497338][ T4580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   94.505352][ T4580] R13: 00007f869c710038 R14: 00007f869c70ffa0 R15: 00007fff8d70d578
[   94.513390][ T4580]  </TASK>
[   96.665934][ T4620] fuse: Bad value for 'fd'
[   96.861019][ T4627] ptp ptp0: guarantee physical clock free running
[   97.654391][ T4622] loop4: detected capacity change from 0 to 4096
[   97.884698][ T4628] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   99.369037][ T4644] loop4: detected capacity change from 0 to 128
[   99.522025][ T4644] EXT4-fs (loop4): Test dummy encryption mode enabled
[   99.581138][ T4644] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[   99.697440][ T4648] loop3: detected capacity change from 0 to 8192
[   99.705604][ T4644] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   99.769199][ T4644] FAULT_INJECTION: forcing a failure.
[   99.769199][ T4644] name failslab, interval 1, probability 0, space 0, times 0
[  100.001616][ T4644] CPU: 1 PID: 4644 Comm: syz.4.88 Not tainted syzkaller #0
[  100.008894][ T4644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  100.019092][ T4644] Call Trace:
[  100.022407][ T4644]  <TASK>
[  100.025367][ T4644]  dump_stack_lvl+0x188/0x250
[  100.030094][ T4644]  ? show_regs_print_info+0x20/0x20
[  100.035367][ T4644]  ? load_image+0x410/0x410
[  100.039950][ T4644]  ? __might_sleep+0xf0/0xf0
[  100.044617][ T4644]  ? __lock_acquire+0x7d40/0x7d40
[  100.049694][ T4644]  should_fail+0x383/0x4b0
[  100.054171][ T4644]  should_failslab+0x5/0x20
[  100.058715][ T4644]  slab_pre_alloc_hook+0x51/0xc0
[  100.063703][ T4644]  ? sk_prot_alloc+0x57/0x210
[  100.068425][ T4644]  kmem_cache_alloc+0x3d/0x280
[  100.073235][ T4644]  sk_prot_alloc+0x57/0x210
[  100.077781][ T4644]  ? sk_alloc+0x1d/0x310
[  100.082077][ T4644]  sk_alloc+0x2f/0x310
[  100.086226][ T4644]  pn_socket_create+0xf1/0x510
[  100.091038][ T4644]  __sock_create+0x473/0x910
[  100.095769][ T4644]  __sys_socket+0xe2/0x170
[  100.100244][ T4644]  __x64_sys_socket+0x76/0x80
[  100.104969][ T4644]  do_syscall_64+0x4c/0xa0
[  100.109456][ T4644]  ? clear_bhb_loop+0x30/0x80
[  100.114171][ T4644]  ? clear_bhb_loop+0x30/0x80
[  100.119067][ T4644]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  100.125008][ T4644] RIP: 0033:0x7fb17e18d559
[  100.129466][ T4644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  100.149109][ T4644] RSP: 002b:00007fb17c3e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  100.157568][ T4644] RAX: ffffffffffffffda RBX: 00007fb17e414fa0 RCX: 00007fb17e18d559
[  100.165578][ T4644] RDX: 0000000000000001 RSI: 0000000000000002 RDI: 0000000000000023
[  100.173589][ T4644] RBP: 00007fb17e2248b0 R08: 0000000000000000 R09: 0000000000000000
[  100.181604][ T4644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  100.189639][ T4644] R13: 00007fb17e415038 R14: 00007fb17e414fa0 R15: 00007ffdbadaf838
[  100.197670][ T4644]  </TASK>
[  105.505986][ T4695] loop3: detected capacity change from 0 to 128
[  105.759132][ T4695] EXT4-fs (loop3): Test dummy encryption mode enabled
[  105.926870][ T4695] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[  105.987159][ T4695] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  106.075489][ T4695] FAULT_INJECTION: forcing a failure.
[  106.075489][ T4695] name failslab, interval 1, probability 0, space 0, times 0
[  106.130853][ T4695] CPU: 1 PID: 4695 Comm: syz.3.103 Not tainted syzkaller #0
[  106.138220][ T4695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  106.148324][ T4695] Call Trace:
[  106.151653][ T4695]  <TASK>
[  106.154651][ T4695]  dump_stack_lvl+0x188/0x250
[  106.159381][ T4695]  ? show_regs_print_info+0x20/0x20
[  106.164625][ T4695]  ? load_image+0x410/0x410
[  106.169172][ T4695]  ? __might_sleep+0xf0/0xf0
[  106.173789][ T4695]  ? __lock_acquire+0x7d40/0x7d40
[  106.178862][ T4695]  ? ext4fs_dirhash+0x2e0/0x2e0
[  106.183741][ T4695]  should_fail+0x383/0x4b0
[  106.188226][ T4695]  should_failslab+0x5/0x20
[  106.192760][ T4695]  slab_pre_alloc_hook+0x51/0xc0
[  106.197745][ T4695]  __kmalloc+0x6b/0x340
[  106.201920][ T4695]  ? ext4_htree_store_dirent+0x80/0x550
[  106.207668][ T4695]  ext4_htree_store_dirent+0x80/0x550
[  106.213169][ T4695]  htree_dirblock_to_tree+0x8cc/0xee0
[  106.218559][ T4695]  ? unwind_get_return_address+0x49/0x80
[  106.224238][ T4695]  ? stack_trace_save+0xf0/0xf0
[  106.229134][ T4695]  ? ext4_htree_fill_tree+0x1100/0x1100
[  106.234805][ T4695]  ? __lock_acquire+0x13b3/0x7d40
[  106.239863][ T4695]  ext4_htree_fill_tree+0x60f/0x1100
[  106.245188][ T4695]  ? ext4_handle_dirty_dirblock+0x650/0x650
[  106.251214][ T4695]  ext4_readdir+0x2c78/0x3ac0
[  106.255962][ T4695]  ? ext4_dir_llseek+0x4b0/0x4b0
[  106.260921][ T4695]  ? aa_path_link+0x8a0/0x8a0
[  106.265616][ T4695]  ? read_lock_is_recursive+0x10/0x10
[  106.271103][ T4695]  ? mutex_lock_io_nested+0x60/0x60
[  106.276379][ T4695]  ? end_current_label_crit_section+0x14b/0x170
[  106.282641][ T4695]  ? iterate_dir+0x10d/0x550
[  106.287253][ T4695]  ? down_read_killable+0x1ce/0x340
[  106.292481][ T4695]  ? fsnotify_perm+0x254/0x560
[  106.297271][ T4695]  iterate_dir+0x213/0x550
[  106.301735][ T4695]  ? ext4_dir_llseek+0x4b0/0x4b0
[  106.306701][ T4695]  __se_sys_getdents+0xf2/0x260
[  106.311594][ T4695]  ? __x64_sys_getdents+0x80/0x80
[  106.316642][ T4695]  ? fillonedir+0x4c0/0x4c0
[  106.321188][ T4695]  ? lockdep_hardirqs_on+0x94/0x140
[  106.326437][ T4695]  do_syscall_64+0x4c/0xa0
[  106.330900][ T4695]  ? clear_bhb_loop+0x30/0x80
[  106.335627][ T4695]  ? clear_bhb_loop+0x30/0x80
[  106.340354][ T4695]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  106.346276][ T4695] RIP: 0033:0x7ff7d3ebd559
[  106.350820][ T4695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  106.370448][ T4695] RSP: 002b:00007ff7d2115028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  106.378915][ T4695] RAX: ffffffffffffffda RBX: 00007ff7d4144fa0 RCX: 00007ff7d3ebd559
[  106.387020][ T4695] RDX: 000000000001517f RSI: 0000000000000000 RDI: 0000000000000006
[  106.395011][ T4695] RBP: 00007ff7d3f548b0 R08: 0000000000000000 R09: 0000000000000000
[  106.403002][ T4695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  106.411011][ T4695] R13: 00007ff7d4145038 R14: 00007ff7d4144fa0 R15: 00007ffd4d203d88
[  106.419041][ T4695]  </TASK>
[  106.426709][   T23] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  107.478338][ T4735] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[  107.499504][ T4735] loop3: detected capacity change from 0 to 512
[  108.560988][ T4732] sched: RT throttling activated
[  109.636491][ T4735] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  109.650045][ T4735] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  109.744261][ T4735] EXT4-fs error (device loop3): ext4_init_orphan_info:623: comm syz.3.110: orphan file block 0: bad magic
[  109.780087][ T4735] EXT4-fs (loop3): mount failed
[  110.495291][   T23] usb 2-1: device descriptor read/all, error -71
[  110.666666][ T4760] loop4: detected capacity change from 0 to 128
[  110.842259][ T4760] EXT4-fs (loop4): Test dummy encryption mode enabled
[  111.495523][ T4760] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[  111.563881][ T4760] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  111.704694][ T4774] loop1: detected capacity change from 0 to 4096
[  112.296730][   T26] audit: type=1326 audit(2000000019.500:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4773 comm="syz.1.125" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5543559 code=0x0
[  112.367676][ T4782] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  112.420092][ T4760] FAULT_INJECTION: forcing a failure.
[  112.420092][ T4760] name failslab, interval 1, probability 0, space 0, times 0
[  112.515903][ T4760] CPU: 1 PID: 4760 Comm: syz.4.120 Not tainted syzkaller #0
[  112.523268][ T4760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  112.533452][ T4760] Call Trace:
[  112.536840][ T4760]  <TASK>
[  112.539831][ T4760]  dump_stack_lvl+0x188/0x250
[  112.544569][ T4760]  ? show_regs_print_info+0x20/0x20
[  112.549826][ T4760]  ? load_image+0x410/0x410
[  112.554376][ T4760]  ? __might_sleep+0xf0/0xf0
[  112.559013][ T4760]  ? __lock_acquire+0x7d40/0x7d40
[  112.564085][ T4760]  ? ext4fs_dirhash+0x2e0/0x2e0
[  112.569326][ T4760]  should_fail+0x383/0x4b0
[  112.573797][ T4760]  should_failslab+0x5/0x20
[  112.578344][ T4760]  slab_pre_alloc_hook+0x51/0xc0
[  112.583332][ T4760]  __kmalloc+0x6b/0x340
[  112.587530][ T4760]  ? ext4_htree_store_dirent+0x80/0x550
[  112.593131][ T4760]  ext4_htree_store_dirent+0x80/0x550
[  112.598784][ T4760]  htree_dirblock_to_tree+0x8cc/0xee0
[  112.604290][ T4760]  ? unwind_get_return_address+0x49/0x80
[  112.610077][ T4760]  ? stack_trace_save+0xf0/0xf0
[  112.615011][ T4760]  ? ext4_htree_fill_tree+0x1100/0x1100
[  112.620611][ T4760]  ? __lock_acquire+0x13b3/0x7d40
[  112.625827][ T4760]  ext4_htree_fill_tree+0x60f/0x1100
[  112.631191][ T4760]  ? ext4_handle_dirty_dirblock+0x650/0x650
[  112.637178][ T4760]  ext4_readdir+0x2c78/0x3ac0
[  112.642184][ T4760]  ? ext4_dir_llseek+0x4b0/0x4b0
[  112.647186][ T4760]  ? aa_path_link+0x8a0/0x8a0
[  112.651919][ T4760]  ? read_lock_is_recursive+0x10/0x10
[  112.657349][ T4760]  ? mutex_lock_io_nested+0x60/0x60
[  112.662591][ T4760]  ? end_current_label_crit_section+0x14b/0x170
[  112.668888][ T4760]  ? iterate_dir+0x10d/0x550
[  112.673575][ T4760]  ? down_read_killable+0x1ce/0x340
[  112.678817][ T4760]  ? fsnotify_perm+0x254/0x560
[  112.683622][ T4760]  iterate_dir+0x213/0x550
[  112.688078][ T4760]  ? ext4_dir_llseek+0x4b0/0x4b0
[  112.693069][ T4760]  __se_sys_getdents+0xf2/0x260
[  112.697968][ T4760]  ? __x64_sys_getdents+0x80/0x80
[  112.703031][ T4760]  ? fillonedir+0x4c0/0x4c0
[  112.707590][ T4760]  ? lockdep_hardirqs_on+0x94/0x140
[  112.712843][ T4760]  do_syscall_64+0x4c/0xa0
[  112.717301][ T4760]  ? clear_bhb_loop+0x30/0x80
[  112.722026][ T4760]  ? clear_bhb_loop+0x30/0x80
[  112.726771][ T4760]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  112.732752][ T4760] RIP: 0033:0x7fb17e18d559
[  112.737235][ T4760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  112.756893][ T4760] RSP: 002b:00007fb17c3e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  112.765364][ T4760] RAX: ffffffffffffffda RBX: 00007fb17e414fa0 RCX: 00007fb17e18d559
[  112.773380][ T4760] RDX: 000000000001517f RSI: 0000000000000000 RDI: 0000000000000006
[  112.781397][ T4760] RBP: 00007fb17e2248b0 R08: 0000000000000000 R09: 0000000000000000
[  112.789480][ T4760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  112.797502][ T4760] R13: 00007fb17e415038 R14: 00007fb17e414fa0 R15: 00007ffdbadaf838
[  112.805540][ T4760]  </TASK>
[  114.072936][ T4809] loop3: detected capacity change from 0 to 4096
[  117.595524][ T4809] NILFS (loop3): error -4 creating segctord thread
[  118.073611][ T4823] FAULT_INJECTION: forcing a failure.
[  118.073611][ T4823] name failslab, interval 1, probability 0, space 0, times 0
[  119.000973][ T4823] CPU: 1 PID: 4823 Comm: syz.3.142 Not tainted syzkaller #0
[  119.008346][ T4823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  119.018577][ T4823] Call Trace:
[  119.021925][ T4823]  <TASK>
[  119.024898][ T4823]  dump_stack_lvl+0x188/0x250
[  119.029620][ T4823]  ? show_regs_print_info+0x20/0x20
[  119.034860][ T4823]  ? load_image+0x410/0x410
[  119.039410][ T4823]  ? __might_sleep+0xf0/0xf0
[  119.044047][ T4823]  ? __lock_acquire+0x7d40/0x7d40
[  119.049120][ T4823]  should_fail+0x383/0x4b0
[  119.053594][ T4823]  should_failslab+0x5/0x20
[  119.058141][ T4823]  slab_pre_alloc_hook+0x51/0xc0
[  119.063123][ T4823]  ? sockfs_init_fs_context+0xa0/0xa0
[  119.068543][ T4823]  ? sock_alloc_inode+0x17/0xb0
[  119.073455][ T4823]  kmem_cache_alloc+0x3d/0x280
[  119.078295][ T4823]  ? sockfs_init_fs_context+0xa0/0xa0
[  119.083728][ T4823]  sock_alloc_inode+0x17/0xb0
[  119.088453][ T4823]  ? sockfs_init_fs_context+0xa0/0xa0
[  119.093875][ T4823]  new_inode_pseudo+0x5f/0x210
[  119.098701][ T4823]  __sock_create+0x128/0x910
[  119.103382][ T4823]  __sys_socket+0xe2/0x170
[  119.107854][ T4823]  __x64_sys_socket+0x76/0x80
[  119.112587][ T4823]  do_syscall_64+0x4c/0xa0
[  119.117052][ T4823]  ? clear_bhb_loop+0x30/0x80
[  119.121789][ T4823]  ? clear_bhb_loop+0x30/0x80
[  119.126526][ T4823]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  119.132476][ T4823] RIP: 0033:0x7ff7d3ebd559
[  119.136933][ T4823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.156598][ T4823] RSP: 002b:00007ff7d2115028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  119.165070][ T4823] RAX: ffffffffffffffda RBX: 00007ff7d4144fa0 RCX: 00007ff7d3ebd559
[  119.173089][ T4823] RDX: 0000000000000001 RSI: 0000000000000002 RDI: 0000000000000023
[  119.181103][ T4823] RBP: 00007ff7d3f548b0 R08: 0000000000000000 R09: 0000000000000000
[  119.189149][ T4823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  119.197189][ T4823] R13: 00007ff7d4145038 R14: 00007ff7d4144fa0 R15: 00007ffd4d203d88
[  119.205308][ T4823]  </TASK>
[  119.290934][ T4823] socket: no more sockets
[  119.448827][ T4836] loop3: detected capacity change from 0 to 4096
[  119.684799][ T4840] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  119.700545][ T4839] trusted_key: encrypted_key: key trusted:syz not found
[  120.004003][   T26] audit: type=1326 audit(2000000027.250:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4831 comm="syz.3.146" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7d3ebd559 code=0x0
[  120.603100][ T4852] loop1: detected capacity change from 0 to 4096
[  120.891590][ T4861] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  122.229726][   T26] audit: type=1326 audit(2000000029.370:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4851 comm="syz.1.153" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5543559 code=0x0
[  122.693715][ T4868] loop3: detected capacity change from 0 to 256
[  122.759209][ T4873] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[  124.402990][ T4195] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:200'
[  124.418993][ T4195] CPU: 0 PID: 4195 Comm: kworker/u5:2 Not tainted syzkaller #0
[  124.426802][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  124.437794][ T4195] Workqueue: hci3 hci_rx_work
[  124.442527][ T4195] Call Trace:
[  124.445925][ T4195]  <TASK>
[  124.448893][ T4195]  dump_stack_lvl+0x188/0x250
[  124.453612][ T4195]  ? show_regs_print_info+0x20/0x20
[  124.458848][ T4195]  ? load_image+0x410/0x410
[  124.463415][ T4195]  sysfs_create_dir_ns+0x26a/0x290
[  124.468572][ T4195]  ? sysfs_warn_dup+0xa0/0xa0
[  124.473435][ T4195]  ? ret_from_fork+0x1f/0x30
[  124.478033][ T4195]  ? do_raw_spin_unlock+0x11d/0x230
[  124.483256][ T4195]  kobject_add_internal+0x5ba/0xcd0
[  124.488497][ T4195]  kobject_add+0x160/0x230
[  124.493181][ T4195]  ? kobject_init+0x1c0/0x1c0
[  124.497991][ T4195]  ? __raw_spin_lock_init+0x41/0x100
[  124.503312][ T4195]  ? get_device_parent+0x121/0x3e0
[  124.508466][ T4195]  device_add+0x470/0x1050
[  124.512906][ T4195]  hci_conn_add_sysfs+0xd1/0x1e0
[  124.517876][ T4195]  hci_sync_conn_complete_evt+0x647/0x9d0
[  124.523638][ T4195]  ? __rwlock_init+0x140/0x140
[  124.528437][ T4195]  hci_event_packet+0x8cf/0x1310
[  124.533555][ T4195]  ? _raw_spin_unlock+0x40/0x40
[  124.538432][ T4195]  ? rcu_lock_release+0x20/0x20
[  124.543309][ T4195]  ? hci_send_to_monitor+0x9c/0x4a0
[  124.548533][ T4195]  hci_rx_work+0x255/0xa10
[  124.552991][ T4195]  process_one_work+0x867/0xff0
[  124.557904][ T4195]  ? worker_detach_from_pool+0x240/0x240
[  124.563576][ T4195]  ? lockdep_hardirqs_off+0x70/0x100
[  124.568996][ T4195]  ? _raw_spin_lock_irq+0xb7/0xf0
[  124.574048][ T4195]  ? _raw_spin_lock_irqsave+0x100/0x100
[  124.579625][ T4195]  ? wq_worker_running+0x97/0x170
[  124.584668][ T4195]  worker_thread+0xad7/0x12a0
[  124.589374][ T4195]  kthread+0x42e/0x520
[  124.593454][ T4195]  ? rcu_lock_release+0x20/0x20
[  124.598332][ T4195]  ? kthread_blkcg+0xd0/0xd0
[  124.602934][ T4195]  ret_from_fork+0x1f/0x30
[  124.607371][ T4195]  </TASK>
[  124.624426][ T4195] kobject_add_internal failed for hci3:200 with -EEXIST, don't try to register things with the same name in the same directory.
[  124.637793][ T4195] Bluetooth: hci3: failed to register connection device
[  124.653674][ T4897] loop4: detected capacity change from 0 to 4096
[  124.806558][ T4902] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  124.826879][ T4901] autofs4:pid:4901:autofs_fill_super: called with bogus options
[  125.082352][   T26] audit: type=1326 audit(2000000032.330:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4895 comm="syz.4.163" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb17e18d559 code=0x0
[  126.136073][ T4901] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2]
[  126.226561][ T4917] autofs4:pid:4917:autofs_fill_super: called with bogus options
[  126.244541][ T4901] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2]
[  126.443789][ T4901] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2]
[  127.164201][ T4490] Bluetooth: hci3: command 0x0409 tx timeout
[  127.183086][ T4901] Error parsing options; rc = [-22]
[  127.190062][ T4922] loop4: detected capacity change from 0 to 512
[  127.232467][ T4922] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  127.285227][ T4917] Error parsing options; rc = [-22]
[  127.291549][ T4922] EXT4-fs error (device loop4): ext4_init_orphan_info:623: comm syz.4.167: orphan file block 0: bad magic
[  127.317382][   T26] audit: type=1800 audit(2000000034.570:6): pid=4930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.170" name="idVendor" dev="configfs" ino=33747 res=0 errno=0
[  127.320963][ T4922] EXT4-fs (loop4): mount failed
[  127.482278][   T26] audit: type=1800 audit(2000000034.600:7): pid=4930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.170" name="idProduct" dev="configfs" ino=33748 res=0 errno=0
[  127.516007][   T26] audit: type=1800 audit(2000000034.600:8): pid=4930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.170" name="serialnumber" dev="configfs" ino=33750 res=0 errno=0
[  127.824370][ T1108] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  128.629491][   T26] audit: type=1800 audit(2000000034.620:9): pid=4930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.170" name="report_length" dev="configfs" ino=33752 res=0 errno=0
[  128.964604][ T4945] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  129.519659][ T4490] Bluetooth: hci3: command 0x0406 tx timeout
[  129.583007][   T26] audit: type=1800 audit(2000000034.640:10): pid=4930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.170" name="report_desc" dev="configfs" ino=33753 res=0 errno=0
[  129.637853][ T4932] loop1: detected capacity change from 0 to 8192
[  129.654330][   T26] audit: type=1800 audit(2000000034.650:11): pid=4930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.170" name="UDC" dev="configfs" ino=33755 res=0 errno=0
[  129.674447][ T1108] usb 1-1: Dual-Role OTG device on HNP port
[  129.704436][ T1108] usb 1-1: New USB device found, idVendor=0012, idProduct=0000, bcdDevice= 5.15
[  129.717334][ T4937] loop3: detected capacity change from 0 to 8192
[  129.720817][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.761932][ T1108] usb 1-1: SerialNumber: 1234
[  130.724989][ T1108] usbhid 1-1:1.0: can't add hid device: -22
[  130.731376][ T1108] usbhid: probe of 1-1:1.0 failed with error -22
[  133.551613][ T4971] usb usb9: usbfs: process 4971 (syz.4.182) did not claim interface 0 before use
[  133.612369][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  133.618764][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  134.637083][ T4175] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  134.770154][ T4175] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  134.937147][ T5000] futex_wake_op: syz.0.192 tries to shift op by 144; fix this program
[  135.285794][ T5002] 8021q: VLANs not supported on sit0
[  135.305896][ T5006] netlink: 20 bytes leftover after parsing attributes in process `syz.3.194'.
[  135.330801][ T5006] netlink: 20 bytes leftover after parsing attributes in process `syz.3.194'.
[  135.406879][ T4175] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  135.433019][ T4991] ceph: No mds server is up or the cluster is laggy
[  136.884759][ T4175] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  137.294688][ T4175] usb 2-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping
[  137.326722][ T4175] usb 2-1: config 0 interface 0 has no altsetting 0
[  137.452851][ T5038] loop4: detected capacity change from 0 to 512
[  137.565447][ T4175] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  137.640719][ T5038] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  137.749119][ T4175] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  137.837308][ T5038] EXT4-fs error (device loop4): ext4_init_orphan_info:623: comm syz.4.200: orphan file block 0: bad magic
[  137.892065][ T5038] EXT4-fs (loop4): mount failed
[  137.974771][ T4175] usb 2-1: Product: syz
[  138.109017][ T4175] usb 2-1: Manufacturer: syz
[  138.109371][ T4175] usb 2-1: SerialNumber: syz
[  138.302907][ T4175] usb 2-1: config 0 descriptor??
[  138.562018][ T4175] snd-usb-audio: probe of 2-1:0.0 failed with error -22
[  139.518030][ T4197] udevd[4197]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  139.615127][ T4261] usb 2-1: USB disconnect, device number 4
[  139.732084][ T5055] futex_wake_op: syz.4.207 tries to shift op by 144; fix this program
[  140.094483][ T4261] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  140.514839][ T4261] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  140.560054][ T4261] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  140.624626][ T4261] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  140.664797][ T4261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.910376][ T5061] loop4: detected capacity change from 0 to 256
[  143.178574][ T4261] usb 2-1: USB disconnect, device number 5
[  143.360180][ T5073] binder: BINDER_SET_CONTEXT_MGR already set
[  143.379592][ T5073] binder: 5072:5073 ioctl 4018620d 200000004a80 returned -16
[  143.552680][ T5081] loop3: detected capacity change from 0 to 512
[  143.588922][ T5081] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  144.615510][ T5081] EXT4-fs error (device loop3): ext4_init_orphan_info:623: comm syz.3.215: orphan file block 0: bad magic
[  144.628785][ T5081] EXT4-fs (loop3): mount failed
[  147.243471][ T5096] usb usb9: usbfs: process 5096 (syz.1.211) did not claim interface 0 before use
[  148.020396][ T5103] loop3: detected capacity change from 0 to 8192
[  149.460247][ T5128] loop4: detected capacity change from 0 to 128
[  149.572346][ T5128] EXT4-fs (loop4): Test dummy encryption mode enabled
[  149.680015][ T5128] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[  149.794684][ T5128] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  149.932179][ T5128] FAULT_INJECTION: forcing a failure.
[  149.932179][ T5128] name fail_futex, interval 1, probability 0, space 0, times 0
[  149.955573][ T5128] CPU: 1 PID: 5128 Comm: syz.4.228 Not tainted syzkaller #0
[  149.962903][ T5128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  149.972990][ T5128] Call Trace:
[  149.976316][ T5128]  <TASK>
[  149.979282][ T5128]  dump_stack_lvl+0x188/0x250
[  149.984022][ T5128]  ? show_regs_print_info+0x20/0x20
[  149.989250][ T5128]  ? load_image+0x410/0x410
[  149.993785][ T5128]  should_fail+0x383/0x4b0
[  149.998218][ T5128]  get_futex_key+0x1a1/0x12d0
[  150.002931][ T5128]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  150.008940][ T5128]  ? futex_wait_restart+0x250/0x250
[  150.014210][ T5128]  ? lock_chain_count+0x20/0x20
[  150.019119][ T5128]  futex_wait_setup+0x4b/0x520
[  150.023936][ T5128]  ? lockdep_hardirqs_on+0x94/0x140
[  150.029175][ T5128]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  150.035081][ T5128]  futex_wait+0x22f/0x680
[  150.039421][ T5128]  ? __lock_acquire+0x13b3/0x7d40
[  150.044554][ T5128]  ? do_futex+0x12b0/0x12b0
[  150.049104][ T5128]  ? verify_lock_unused+0x140/0x140
[  150.054320][ T5128]  ? tomoyo_path_number_perm+0x5f7/0x6b0
[  150.059992][ T5128]  ? verify_lock_unused+0x140/0x140
[  150.065219][ T5128]  do_futex+0xdc2/0x12b0
[  150.069497][ T5128]  ? futex_exit_release+0x1c0/0x1c0
[  150.074719][ T5128]  ? __context_tracking_exit+0x4c/0x80
[  150.080197][ T5128]  __se_sys_futex+0x389/0x420
[  150.084886][ T5128]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  150.091133][ T5128]  ? __x64_sys_futex+0xf0/0xf0
[  150.095921][ T5128]  ? __x64_sys_futex+0x1d/0xf0
[  150.100698][ T5128]  do_syscall_64+0x4c/0xa0
[  150.105149][ T5128]  ? clear_bhb_loop+0x30/0x80
[  150.109839][ T5128]  ? clear_bhb_loop+0x30/0x80
[  150.114651][ T5128]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  150.120599][ T5128] RIP: 0033:0x7fb17e18d559
[  150.125050][ T5128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  150.144688][ T5128] RSP: 002b:00007fb17c3e50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  150.153182][ T5128] RAX: ffffffffffffffda RBX: 00007fb17e414fa8 RCX: 00007fb17e18d559
[  150.161185][ T5128] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb17e414fa8
[  150.169176][ T5128] RBP: 00007fb17e414fa0 R08: 0000000000000000 R09: 0000000000000000
[  150.177513][ T5128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  150.185517][ T5128] R13: 00007fb17e415038 R14: 00007ffdbadaf750 R15: 00007ffdbadaf838
[  150.193530][ T5128]  </TASK>
[  150.332850][ T5132] autofs4:pid:5132:autofs_fill_super: called with bogus options
[  151.464663][ T5132] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2]
[  151.515472][ T5132] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2]
[  151.544974][ T5132] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2]
[  151.584766][ T5132] Error parsing options; rc = [-22]
[  155.219899][ T5164] futex_wake_op: syz.1.238 tries to shift op by 144; fix this program
[  156.317171][ T5169] netlink: 'syz.0.239': attribute type 4 has an invalid length.
[  156.325173][ T5169] netlink: 17 bytes leftover after parsing attributes in process `syz.0.239'.
[  156.825076][ T5186] loop3: detected capacity change from 0 to 512
[  158.599019][ T5186] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  158.671495][ T5186] EXT4-fs error (device loop3): ext4_init_orphan_info:623: comm syz.3.240: orphan file block 0: bad magic
[  158.685102][ T5186] EXT4-fs (loop3): mount failed
[  159.294855][ T5196] fuse: Bad value for 'fd'
[  160.465445][ T5202] trusted_key: encrypted_key: insufficient parameters specified
[  160.489184][ T5202] trusted_key: encrypted_key: insufficient parameters specified
[  164.811552][ T5241] loop3: detected capacity change from 0 to 512
[  164.821968][ T5243] loop1: detected capacity change from 0 to 256
[  164.884483][ T5241] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  165.425575][ T5241] EXT4-fs error (device loop3): ext4_init_orphan_info:623: comm syz.3.256: orphan file block 0: bad magic
[  165.438892][ T5241] EXT4-fs (loop3): mount failed
[  166.505729][ T5262] loop3: detected capacity change from 0 to 4096
[  167.004817][ T5264] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  170.155693][   T26] audit: type=1800 audit(2000000017.450:12): pid=5272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.265" name="idVendor" dev="configfs" ino=36084 res=0 errno=0
[  170.217064][   T26] audit: type=1800 audit(2000000017.450:13): pid=5272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.265" name="idProduct" dev="configfs" ino=36085 res=0 errno=0
[  170.360904][   T26] audit: type=1800 audit(2000000017.450:14): pid=5272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.265" name="serialnumber" dev="configfs" ino=36086 res=0 errno=0
[  171.697636][   T26] audit: type=1800 audit(2000000017.450:15): pid=5272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.265" name="report_length" dev="configfs" ino=36087 res=0 errno=0
[  171.733722][   T26] audit: type=1800 audit(2000000017.450:16): pid=5272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.265" name="report_desc" dev="configfs" ino=36088 res=0 errno=0
[  171.807105][   T26] audit: type=1800 audit(2000000017.450:17): pid=5272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.265" name="UDC" dev="configfs" ino=36089 res=0 errno=0
[  173.547381][ T5290] FAULT_INJECTION: forcing a failure.
[  173.547381][ T5290] name failslab, interval 1, probability 0, space 0, times 0
[  173.642119][ T5290] CPU: 0 PID: 5290 Comm: syz.1.263 Not tainted syzkaller #0
[  173.649515][ T5290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  173.659630][ T5290] Call Trace:
[  173.662975][ T5290]  <TASK>
[  173.665946][ T5290]  dump_stack_lvl+0x188/0x250
[  173.670679][ T5290]  ? show_regs_print_info+0x20/0x20
[  173.675952][ T5290]  ? load_image+0x410/0x410
[  173.680510][ T5290]  ? __might_sleep+0xf0/0xf0
[  173.685147][ T5290]  ? __lock_acquire+0x7d40/0x7d40
[  173.690233][ T5290]  should_fail+0x383/0x4b0
[  173.694798][ T5290]  should_failslab+0x5/0x20
[  173.699370][ T5290]  slab_pre_alloc_hook+0x51/0xc0
[  173.704357][ T5290]  kmem_cache_alloc_node_trace+0x4a/0x2f0
[  173.710641][ T5290]  ? mempool_create+0x5a/0xc0
[  173.715376][ T5290]  ? mempool_init_node+0x3c0/0x480
[  173.720527][ T5290]  ? msgpool_alloc+0x1b0/0x1b0
[  173.725320][ T5290]  ? ceph_msgpool_init+0x180/0x180
[  173.730472][ T5290]  mempool_create+0x5a/0xc0
[  173.735559][ T5290]  ceph_msgpool_init+0xa3/0x180
[  173.740541][ T5290]  ceph_osdc_init+0x52c/0x8a0
[  173.745269][ T5290]  ceph_create_client+0x242/0x300
[  173.750329][ T5290]  ceph_get_tree+0xf6/0x1290
[  173.754940][ T5290]  ? bpf_lsm_capable+0x5/0x10
[  173.759628][ T5290]  ? security_capable+0x85/0xb0
[  173.764522][ T5290]  vfs_get_tree+0x88/0x270
[  173.769011][ T5290]  vfs_fsconfig_locked+0x22f/0x400
[  173.774285][ T5290]  __se_sys_fsconfig+0x69e/0x7e0
[  173.779299][ T5290]  ? __x64_sys_fsconfig+0xc0/0xc0
[  173.784366][ T5290]  ? lockdep_hardirqs_on+0x94/0x140
[  173.789631][ T5290]  ? __x64_sys_fsconfig+0x1c/0xc0
[  173.794832][ T5290]  do_syscall_64+0x4c/0xa0
[  173.799295][ T5290]  ? clear_bhb_loop+0x30/0x80
[  173.803995][ T5290]  ? clear_bhb_loop+0x30/0x80
[  173.808701][ T5290]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  173.814653][ T5290] RIP: 0033:0x7fa9e5543559
[  173.819150][ T5290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  173.838817][ T5290] RSP: 002b:00007fa9e379b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  173.847329][ T5290] RAX: ffffffffffffffda RBX: 00007fa9e57cafa0 RCX: 00007fa9e5543559
[  173.855469][ T5290] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[  173.863480][ T5290] RBP: 00007fa9e55da8b0 R08: 0800000000000000 R09: 0000000000000000
[  173.871478][ T5290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  173.879472][ T5290] R13: 00007fa9e57cb038 R14: 00007fa9e57cafa0 R15: 00007ffd4ef3fca8
[  173.887501][ T5290]  </TASK>
[  178.948188][ T5322] loop4: detected capacity change from 0 to 512
[  179.064661][ T5322] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  179.309245][ T5322] EXT4-fs (loop4): 1 truncate cleaned up
[  179.324498][ T5322] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  179.355348][   T26] audit: type=1326 audit(2000000026.640:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5323 comm="syz.2.266" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d75eaf559 code=0x0
[  180.011682][ T5339] ptp ptp0: guarantee physical clock free running
[  180.613378][ T5334] rxe_eth0 speed is unknown, defaulting to 1000
[  182.817182][ T4297] Bluetooth: hci5: command 0x0409 tx timeout
[  183.212490][ T5356] binder: BINDER_SET_CONTEXT_MGR already set
[  183.218631][ T5356] binder: 5350:5356 ioctl 4018620d 200000001000 returned -16
[  185.164855][ T4299] Bluetooth: hci5: command 0x041b tx timeout
[  185.810306][ T5370] process 'syz.3.288' launched '/dev/fd/3' with NULL argv: empty string added
[  185.944375][  T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.074426][  T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.115485][ T5334] chnl_net:caif_netlink_parms(): no params data found
[  188.045093][ T5388] usb usb9: usbfs: process 5388 (syz.1.293) did not claim interface 0 before use
[  188.498844][ T4297] Bluetooth: hci5: command 0x040f tx timeout
[  188.815788][ T5394] loop1: detected capacity change from 0 to 4096
[  188.832192][  T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.721480][ T5402] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  190.164360][   T26] audit: type=1326 audit(2000000010.100:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5393 comm="syz.1.296" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5543559 code=0x0
[  190.598147][  T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.722682][ T4175] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  190.744477][ T4299] Bluetooth: hci5: command 0x0419 tx timeout
[  191.281895][ T5334] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.328302][ T5334] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.341349][ T5334] device bridge_slave_0 entered promiscuous mode
[  191.352764][ T5334] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.365877][ T5334] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.384554][ T5334] device bridge_slave_1 entered promiscuous mode
[  191.401290][ T4175] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  191.421264][ T5334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  191.442402][ T5334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  191.454519][ T4175] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  191.494321][ T4175] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.589164][ T4175] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected
[  191.620900][ T5334] team0: Port device team_slave_0 added
[  191.621146][ T4175] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81
[  191.669491][ T5334] team0: Port device team_slave_1 added
[  191.680123][ T4175] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1
[  191.715070][ T4175] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84
[  191.723122][ T4175] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2
[  191.770021][ T5334] batman_adv: batadv0: Adding interface: batadv_slave_0
[  191.788984][ T5334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.814940][ T4175] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  191.824984][ T4175] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88
[  191.832726][ T4175] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6
[  191.867879][ T4175] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  191.895213][ T5334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  191.947086][ T5334] batman_adv: batadv0: Adding interface: batadv_slave_1
[  192.000909][ T5334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.110549][ T5334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  192.308595][ T5334] device hsr_slave_0 entered promiscuous mode
[  192.340713][ T5334] device hsr_slave_1 entered promiscuous mode
[  192.386705][ T5334] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  192.404243][ T5334] Cannot create hsr debugfs directory
[  192.454166][ T5027] usb 4-1: USB disconnect, device number 2
[  192.495324][ T5027] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  192.522824][ T5027] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  192.557054][ T5027] keyspan 4-1:1.0: device disconnected
[  193.741778][ T5334] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  193.840554][ T5334] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  193.876986][ T5334] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  194.686382][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  194.692739][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  194.775409][ T5475] ptp ptp0: guarantee physical clock free running
[  194.807909][ T5334] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  194.986318][ T5465] loop1: detected capacity change from 0 to 8192
[  196.385415][ T5334] 8021q: adding VLAN 0 to HW filter on device bond0
[  196.520172][  T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  196.546777][  T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  196.566666][ T5494] loop1: detected capacity change from 0 to 128
[  196.597520][ T5334] 8021q: adding VLAN 0 to HW filter on device team0
[  196.684879][ T5494] EXT4-fs (loop1): Test dummy encryption mode enabled
[  196.704462][ T5500] futex_wake_op: syz.4.320 tries to shift op by 144; fix this program
[  196.765226][ T4357] Bluetooth: hci2: command 0x0406 tx timeout
[  196.785753][ T4357] Bluetooth: hci3: command 0x0406 tx timeout
[  196.875773][ T4357] Bluetooth: hci1: command 0x0406 tx timeout
[  196.968055][ T5494] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[  197.502252][  T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  197.517475][ T5494] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  197.576625][  T162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  197.625754][  T162] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.632909][  T162] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.667332][ T5494] FAULT_INJECTION: forcing a failure.
[  197.667332][ T5494] name failslab, interval 1, probability 0, space 0, times 0
[  197.811228][  T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  197.893820][ T5494] CPU: 0 PID: 5494 Comm: syz.1.316 Not tainted syzkaller #0
[  197.901193][ T5494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  197.911287][ T5494] Call Trace:
[  197.914602][ T5494]  <TASK>
[  197.917595][ T5494]  dump_stack_lvl+0x188/0x250
[  197.922313][ T5494]  ? show_regs_print_info+0x20/0x20
[  197.927546][ T5494]  ? load_image+0x410/0x410
[  197.932087][ T5494]  ? __might_sleep+0xf0/0xf0
[  197.936716][ T5494]  ? __lock_acquire+0x7d40/0x7d40
[  197.941787][ T5494]  ? ext4fs_dirhash+0x2e0/0x2e0
[  197.946674][ T5494]  should_fail+0x383/0x4b0
[  197.951137][ T5494]  should_failslab+0x5/0x20
[  197.955676][ T5494]  slab_pre_alloc_hook+0x51/0xc0
[  197.960654][ T5494]  __kmalloc+0x6b/0x340
[  197.964843][ T5494]  ? ext4_htree_store_dirent+0x80/0x550
[  197.970435][ T5494]  ext4_htree_store_dirent+0x80/0x550
[  197.975857][ T5494]  htree_dirblock_to_tree+0x9df/0xee0
[  197.981264][ T5494]  ? unwind_get_return_address+0x49/0x80
[  197.986938][ T5494]  ? stack_trace_save+0xf0/0xf0
[  197.991840][ T5494]  ? ext4_htree_fill_tree+0x1100/0x1100
[  197.997427][ T5494]  ? __lock_acquire+0x13b3/0x7d40
[  198.002512][ T5494]  ext4_htree_fill_tree+0x60f/0x1100
[  198.007854][ T5494]  ? ext4_handle_dirty_dirblock+0x650/0x650
[  198.013820][ T5494]  ext4_readdir+0x2c78/0x3ac0
[  198.018658][ T5494]  ? ext4_dir_llseek+0x4b0/0x4b0
[  198.023631][ T5494]  ? aa_path_link+0x8a0/0x8a0
[  198.028350][ T5494]  ? read_lock_is_recursive+0x10/0x10
[  198.033786][ T5494]  ? mutex_lock_io_nested+0x60/0x60
[  198.039042][ T5494]  ? end_current_label_crit_section+0x14b/0x170
[  198.045334][ T5494]  ? iterate_dir+0x10d/0x550
[  198.049959][ T5494]  ? down_read_killable+0x1ce/0x340
[  198.055218][ T5494]  ? fsnotify_perm+0x254/0x560
[  198.060020][ T5494]  iterate_dir+0x213/0x550
[  198.064514][ T5494]  ? ext4_dir_llseek+0x4b0/0x4b0
[  198.069495][ T5494]  __se_sys_getdents+0xf2/0x260
[  198.074389][ T5494]  ? __x64_sys_getdents+0x80/0x80
[  198.079745][ T5494]  ? fillonedir+0x4c0/0x4c0
[  198.084312][ T5494]  ? lockdep_hardirqs_on+0x94/0x140
[  198.089591][ T5494]  do_syscall_64+0x4c/0xa0
[  198.094053][ T5494]  ? clear_bhb_loop+0x30/0x80
[  198.098764][ T5494]  ? clear_bhb_loop+0x30/0x80
[  198.103479][ T5494]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  198.109501][ T5494] RIP: 0033:0x7fa9e5543559
[  198.113953][ T5494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  198.133689][ T5494] RSP: 002b:00007fa9e379b028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  198.142165][ T5494] RAX: ffffffffffffffda RBX: 00007fa9e57cafa0 RCX: 00007fa9e5543559
[  198.150183][ T5494] RDX: 000000000001517f RSI: 0000000000000000 RDI: 0000000000000004
[  198.158187][ T5494] RBP: 00007fa9e55da8b0 R08: 0000000000000000 R09: 0000000000000000
[  198.166183][ T5494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  198.174183][ T5494] R13: 00007fa9e57cb038 R14: 00007fa9e57cafa0 R15: 00007ffd4ef3fca8
[  198.182203][ T5494]  </TASK>
[  198.220767][  T162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  198.229402][  T162] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.236532][  T162] bridge0: port 2(bridge_slave_1) entered forwarding state
[  198.246151][  T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  198.255276][  T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  198.269333][  T162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  199.287238][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  199.352932][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  199.361967][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  199.372659][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  199.388085][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  199.400784][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  199.423403][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  199.440892][ T5334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  199.490031][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  199.514509][  T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  199.523166][  T162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  200.690839][  T144] device hsr_slave_0 left promiscuous mode
[  200.717363][  T144] device hsr_slave_1 left promiscuous mode
[  200.751191][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  200.769730][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  200.813754][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  200.842986][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  200.858433][  T144] device bridge_slave_1 left promiscuous mode
[  200.920395][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.942714][  T144] device bridge_slave_0 left promiscuous mode
[  200.952161][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.102346][  T144] device veth1_macvtap left promiscuous mode
[  201.114827][  T144] device veth0_macvtap left promiscuous mode
[  201.120982][  T144] device veth1_vlan left promiscuous mode
[  201.157875][  T144] device veth0_vlan left promiscuous mode
[  202.327223][   T26] audit: type=1326 audit(2000000007.360:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5548 comm="syz.2.329" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d75eaf559 code=0x0
[  203.535505][ T5564] loop3: detected capacity change from 0 to 256
[  205.193685][  T144] team0 (unregistering): Port device team_slave_1 removed
[  205.252533][  T144] team0 (unregistering): Port device team_slave_0 removed
[  206.063523][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  206.121736][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  206.211370][ T5583] loop3: detected capacity change from 0 to 8192
[  206.278557][  T144] bond0 (unregistering): Released all slaves
[  206.552065][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  206.580018][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  206.771552][ T5334] 8021q: adding VLAN 0 to HW filter on device batadv0
[  206.828335][ T5590] futex_wake_op: syz.1.340 tries to shift op by 144; fix this program
[  208.141816][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  208.165285][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  208.252713][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  208.277374][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  208.329175][ T5334] device veth0_vlan entered promiscuous mode
[  208.342801][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  208.378436][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  208.421365][ T5334] device veth1_vlan entered promiscuous mode
[  208.537417][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  208.556451][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  208.582989][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  208.615421][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  208.655780][ T5334] device veth0_macvtap entered promiscuous mode
[  208.679629][ T5334] device veth1_macvtap entered promiscuous mode
[  208.789101][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  208.838086][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.919552][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  208.980902][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.991501][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.002120][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.012550][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.023137][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.034598][ T5334] batman_adv: batadv0: Interface activated: batadv_slave_0
[  209.177603][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  209.286901][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  209.520379][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  209.715219][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  209.955746][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.984298][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.111605][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.159121][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.169438][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.180182][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.197392][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.209197][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.232168][ T5334] batman_adv: batadv0: Interface activated: batadv_slave_1
[  210.262985][  T162] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  210.309109][  T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  210.335247][ T5334] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  210.364304][ T5334] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  210.437586][ T5334] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  211.068725][ T5334] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.115110][ T5641] loop1: detected capacity change from 0 to 256
[  211.222546][ T5636] sctp: failed to load transform for md5: -2
[  211.355678][ T5655] loop4: detected capacity change from 0 to 128
[  212.053312][ T5655] EXT4-fs (loop4): Test dummy encryption mode enabled
[  212.225259][ T5655] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[  212.340919][ T5655] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  212.516693][ T5655] FAULT_INJECTION: forcing a failure.
[  212.516693][ T5655] name failslab, interval 1, probability 0, space 0, times 0
[  212.631794][ T5655] CPU: 0 PID: 5655 Comm: syz.4.348 Not tainted syzkaller #0
[  212.639156][ T5655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  212.649253][ T5655] Call Trace:
[  212.652567][ T5655]  <TASK>
[  212.655529][ T5655]  dump_stack_lvl+0x188/0x250
[  212.660264][ T5655]  ? show_regs_print_info+0x20/0x20
[  212.665505][ T5655]  ? load_image+0x410/0x410
[  212.670059][ T5655]  ? __might_sleep+0xf0/0xf0
[  212.674729][ T5655]  ? __lock_acquire+0x7d40/0x7d40
[  212.679808][ T5655]  should_fail+0x383/0x4b0
[  212.684275][ T5655]  should_failslab+0x5/0x20
[  212.688820][ T5655]  slab_pre_alloc_hook+0x51/0xc0
[  212.693810][ T5655]  __kmalloc+0x6b/0x340
[  212.698011][ T5655]  ? fscrypt_fname_alloc_buffer+0x3a/0xb0
[  212.703896][ T5655]  ? __ext4_read_dirblock+0x6af/0x8a0
[  212.709339][ T5655]  fscrypt_fname_alloc_buffer+0x3a/0xb0
[  212.714926][ T5655]  htree_dirblock_to_tree+0x414/0xee0
[  212.720330][ T5655]  ? unwind_get_return_address+0x49/0x80
[  212.726015][ T5655]  ? stack_trace_save+0xf0/0xf0
[  212.730957][ T5655]  ? stack_trace_save+0xa6/0xf0
[  212.735868][ T5655]  ? ext4_htree_fill_tree+0x1100/0x1100
[  212.735923][ T5655]  ? __lock_acquire+0x13b3/0x7d40
[  212.735973][ T5655]  ext4_htree_fill_tree+0x60f/0x1100
[  212.736103][ T5655]  ? ext4_handle_dirty_dirblock+0x650/0x650
[  212.758071][ T5655]  ext4_readdir+0x2c78/0x3ac0
[  212.762830][ T5655]  ? ext4_dir_llseek+0x4b0/0x4b0
[  212.767820][ T5655]  ? aa_path_link+0x8a0/0x8a0
[  212.772538][ T5655]  ? read_lock_is_recursive+0x10/0x10
[  212.777957][ T5655]  ? mutex_lock_io_nested+0x60/0x60
[  212.783207][ T5655]  ? end_current_label_crit_section+0x14b/0x170
[  212.789506][ T5655]  ? iterate_dir+0x10d/0x550
[  212.794139][ T5655]  ? down_read_killable+0x1ce/0x340
[  212.799379][ T5655]  ? fsnotify_perm+0x254/0x560
[  212.804218][ T5655]  iterate_dir+0x213/0x550
[  212.808672][ T5655]  ? ext4_dir_llseek+0x4b0/0x4b0
[  212.813661][ T5655]  __se_sys_getdents+0xf2/0x260
[  212.818563][ T5655]  ? __x64_sys_getdents+0x80/0x80
[  212.823628][ T5655]  ? fillonedir+0x4c0/0x4c0
[  212.828183][ T5655]  ? lockdep_hardirqs_on+0x94/0x140
[  212.833431][ T5655]  do_syscall_64+0x4c/0xa0
[  212.837889][ T5655]  ? clear_bhb_loop+0x30/0x80
[  212.842607][ T5655]  ? clear_bhb_loop+0x30/0x80
[  212.847331][ T5655]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  212.853273][ T5655] RIP: 0033:0x7fb17e18d559
[  212.857726][ T5655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  212.877365][ T5655] RSP: 002b:00007fb17c3e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  212.885821][ T5655] RAX: ffffffffffffffda RBX: 00007fb17e414fa0 RCX: 00007fb17e18d559
[  212.893840][ T5655] RDX: 000000000001517f RSI: 0000000000000000 RDI: 0000000000000004
[  212.902007][ T5655] RBP: 00007fb17e2248b0 R08: 0000000000000000 R09: 0000000000000000
[  212.910020][ T5655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  212.918035][ T5655] R13: 00007fb17e415038 R14: 00007fb17e414fa0 R15: 00007ffdbadaf838
[  212.926080][ T5655]  </TASK>
[  213.015389][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.023266][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.060879][ T5676] futex_wake_op: syz.1.351 tries to shift op by 144; fix this program
[  213.071580][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  213.150577][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.180866][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.214761][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  214.764520][ T5690] loop5: detected capacity change from 0 to 256
[  217.461003][ T5710] loop5: detected capacity change from 0 to 8192
[  217.789641][ T5716] loop4: detected capacity change from 0 to 8192
[  218.574440][ T5735] loop1: detected capacity change from 0 to 4096
[  218.628430][ T5737] loop4: detected capacity change from 0 to 128
[  218.718880][ T5741] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  218.727945][ T5737] EXT4-fs (loop4): Test dummy encryption mode enabled
[  218.738413][ T5744] futex_wake_op: syz.3.365 tries to shift op by 144; fix this program
[  218.792526][ T5743] loop5: detected capacity change from 0 to 2048
[  218.851010][ T5743] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  218.886453][ T5737] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[  219.050271][ T5737] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  219.169018][ T5743] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  219.625469][ T5737] FAULT_INJECTION: forcing a failure.
[  219.625469][ T5737] name failslab, interval 1, probability 0, space 0, times 0
[  219.735028][ T5737] CPU: 1 PID: 5737 Comm: syz.4.364 Not tainted syzkaller #0
[  219.742395][ T5737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  219.752498][ T5737] Call Trace:
[  219.755816][ T5737]  <TASK>
[  219.758785][ T5737]  dump_stack_lvl+0x188/0x250
[  219.763512][ T5737]  ? show_regs_print_info+0x20/0x20
[  219.768752][ T5737]  ? load_image+0x410/0x410
[  219.773298][ T5737]  ? __might_sleep+0xf0/0xf0
[  219.777920][ T5737]  ? __lock_acquire+0x7d40/0x7d40
[  219.783024][ T5737]  ? ext4fs_dirhash+0x2e0/0x2e0
[  219.787948][ T5737]  should_fail+0x383/0x4b0
[  219.792416][ T5737]  should_failslab+0x5/0x20
[  219.796964][ T5737]  slab_pre_alloc_hook+0x51/0xc0
[  219.801943][ T5737]  __kmalloc+0x6b/0x340
[  219.806136][ T5737]  ? ext4_htree_store_dirent+0x80/0x550
[  219.811763][ T5737]  ext4_htree_store_dirent+0x80/0x550
[  219.817189][ T5737]  htree_dirblock_to_tree+0x9df/0xee0
[  219.822604][ T5737]  ? unwind_get_return_address+0x49/0x80
[  219.828275][ T5737]  ? stack_trace_save+0xf0/0xf0
[  219.833240][ T5737]  ? ext4_htree_fill_tree+0x1100/0x1100
[  219.838839][ T5737]  ? __lock_acquire+0x13b3/0x7d40
[  219.843929][ T5737]  ext4_htree_fill_tree+0x60f/0x1100
[  219.849266][ T5737]  ? ext4_handle_dirty_dirblock+0x650/0x650
[  219.855240][ T5737]  ext4_readdir+0x2c78/0x3ac0
[  219.859988][ T5737]  ? ext4_dir_llseek+0x4b0/0x4b0
[  219.864967][ T5737]  ? aa_path_link+0x8a0/0x8a0
[  219.869774][ T5737]  ? read_lock_is_recursive+0x10/0x10
[  219.875195][ T5737]  ? mutex_lock_io_nested+0x60/0x60
[  219.880430][ T5737]  ? end_current_label_crit_section+0x14b/0x170
[  219.886852][ T5737]  ? iterate_dir+0x10d/0x550
[  219.891498][ T5737]  ? down_read_killable+0x1ce/0x340
[  219.896736][ T5737]  ? fsnotify_perm+0x254/0x560
[  219.901544][ T5737]  iterate_dir+0x213/0x550
[  219.906009][ T5737]  ? ext4_dir_llseek+0x4b0/0x4b0
[  219.911002][ T5737]  __se_sys_getdents+0xf2/0x260
[  219.915917][ T5737]  ? __x64_sys_getdents+0x80/0x80
[  219.920986][ T5737]  ? fillonedir+0x4c0/0x4c0
[  219.925531][ T5737]  ? lockdep_hardirqs_on+0x94/0x140
[  219.930784][ T5737]  do_syscall_64+0x4c/0xa0
[  219.935236][ T5737]  ? clear_bhb_loop+0x30/0x80
[  219.939976][ T5737]  ? clear_bhb_loop+0x30/0x80
[  219.944786][ T5737]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  219.950734][ T5737] RIP: 0033:0x7fb17e18d559
[  219.955188][ T5737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  219.974831][ T5737] RSP: 002b:00007fb17c3e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  219.983287][ T5737] RAX: ffffffffffffffda RBX: 00007fb17e414fa0 RCX: 00007fb17e18d559
[  219.991300][ T5737] RDX: 000000000001517f RSI: 0000000000000000 RDI: 0000000000000006
[  219.999321][ T5737] RBP: 00007fb17e2248b0 R08: 0000000000000000 R09: 0000000000000000
[  220.007343][ T5737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  220.015358][ T5737] R13: 00007fb17e415038 R14: 00007fb17e414fa0 R15: 00007ffdbadaf838
[  220.023387][ T5737]  </TASK>
[  220.153360][ T5759] loop3: detected capacity change from 0 to 256
[  222.182258][ T5759] Zero length message leads to an empty skb
[  222.272849][ T5770] loop4: detected capacity change from 0 to 4096
[  224.351920][ T5783] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  224.414611][   T26] audit: type=1800 audit(2000000029.640:21): pid=5786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.372" name="idVendor" dev="configfs" ino=37984 res=0 errno=0
[  224.470436][   T26] audit: type=1800 audit(2000000029.670:22): pid=5786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.372" name="idProduct" dev="configfs" ino=37985 res=0 errno=0
[  224.498833][   T26] audit: type=1800 audit(2000000029.690:23): pid=5786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.372" name="serialnumber" dev="configfs" ino=37986 res=0 errno=0
[  224.664758][   T26] audit: type=1800 audit(2000000029.690:24): pid=5786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.372" name="report_length" dev="configfs" ino=37987 res=0 errno=0
[  224.779780][   T26] audit: type=1800 audit(2000000029.690:25): pid=5786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.372" name="report_desc" dev="configfs" ino=37988 res=0 errno=0
[  224.900297][   T26] audit: type=1800 audit(2000000029.730:26): pid=5786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.372" name="UDC" dev="configfs" ino=37989 res=0 errno=0
[  225.026902][ T5794] netlink: 14 bytes leftover after parsing attributes in process `syz.3.373'.
[  225.038133][ T5803] futex_wake_op: syz.4.377 tries to shift op by 144; fix this program
[  225.081117][ T5804] loop5: detected capacity change from 0 to 128
[  225.314051][ T5804] EXT4-fs (loop5): Test dummy encryption mode enabled
[  225.629339][ T5804] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[  225.803670][ T5804] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  225.875015][ T5804] FAULT_INJECTION: forcing a failure.
[  225.875015][ T5804] name failslab, interval 1, probability 0, space 0, times 0
[  225.888747][ T5804] CPU: 1 PID: 5804 Comm: syz.5.378 Not tainted syzkaller #0
[  225.896096][ T5804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  225.906199][ T5804] Call Trace:
[  225.909625][ T5804]  <TASK>
[  225.912603][ T5804]  dump_stack_lvl+0x188/0x250
[  225.917328][ T5804]  ? show_regs_print_info+0x20/0x20
[  225.922578][ T5804]  ? load_image+0x410/0x410
[  225.927216][ T5804]  ? __might_sleep+0xf0/0xf0
[  225.931817][ T5804]  ? __lock_acquire+0x7d40/0x7d40
[  225.936859][ T5804]  ? ext4fs_dirhash+0x2e0/0x2e0
[  225.941720][ T5804]  should_fail+0x383/0x4b0
[  225.946150][ T5804]  should_failslab+0x5/0x20
[  225.950664][ T5804]  slab_pre_alloc_hook+0x51/0xc0
[  225.955899][ T5804]  __kmalloc+0x6b/0x340
[  225.960071][ T5804]  ? ext4_htree_store_dirent+0x80/0x550
[  225.965633][ T5804]  ext4_htree_store_dirent+0x80/0x550
[  225.971044][ T5804]  htree_dirblock_to_tree+0x9df/0xee0
[  225.976452][ T5804]  ? unwind_get_return_address+0x49/0x80
[  225.982119][ T5804]  ? stack_trace_save+0xf0/0xf0
[  225.987087][ T5804]  ? ext4_htree_fill_tree+0x1100/0x1100
[  225.992650][ T5804]  ? __lock_acquire+0x13b3/0x7d40
[  225.997706][ T5804]  ext4_htree_fill_tree+0x60f/0x1100
[  226.003045][ T5804]  ? ext4_handle_dirty_dirblock+0x650/0x650
[  226.008979][ T5804]  ext4_readdir+0x2c78/0x3ac0
[  226.013707][ T5804]  ? ext4_dir_llseek+0x4b0/0x4b0
[  226.018701][ T5804]  ? aa_path_link+0x8a0/0x8a0
[  226.023430][ T5804]  ? read_lock_is_recursive+0x10/0x10
[  226.028830][ T5804]  ? mutex_lock_io_nested+0x60/0x60
[  226.034066][ T5804]  ? end_current_label_crit_section+0x14b/0x170
[  226.040333][ T5804]  ? iterate_dir+0x10d/0x550
[  226.044935][ T5804]  ? down_read_killable+0x1ce/0x340
[  226.050145][ T5804]  ? fsnotify_perm+0x254/0x560
[  226.054932][ T5804]  iterate_dir+0x213/0x550
[  226.059386][ T5804]  ? ext4_dir_llseek+0x4b0/0x4b0
[  226.064374][ T5804]  __se_sys_getdents+0xf2/0x260
[  226.069259][ T5804]  ? __x64_sys_getdents+0x80/0x80
[  226.074297][ T5804]  ? fillonedir+0x4c0/0x4c0
[  226.078831][ T5804]  ? lockdep_hardirqs_on+0x94/0x140
[  226.084053][ T5804]  do_syscall_64+0x4c/0xa0
[  226.088484][ T5804]  ? clear_bhb_loop+0x30/0x80
[  226.093214][ T5804]  ? clear_bhb_loop+0x30/0x80
[  226.097935][ T5804]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  226.103873][ T5804] RIP: 0033:0x7faba9caf559
[  226.108323][ T5804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  226.127954][ T5804] RSP: 002b:00007faba7f07028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  226.136396][ T5804] RAX: ffffffffffffffda RBX: 00007faba9f36fa0 RCX: 00007faba9caf559
[  226.144433][ T5804] RDX: 000000000001517f RSI: 0000000000000000 RDI: 0000000000000006
[  226.152445][ T5804] RBP: 00007faba9d468b0 R08: 0000000000000000 R09: 0000000000000000
[  226.160463][ T5804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  226.168454][ T5804] R13: 00007faba9f37038 R14: 00007faba9f36fa0 R15: 00007ffe5d489578
[  226.176453][ T5804]  </TASK>
[  226.311632][ T5815] loop4: detected capacity change from 0 to 4096
[  226.396091][ T5817] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  226.634648][   T26] audit: type=1326 audit(2000000031.780:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz.4.380" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb17e18d559 code=0x0
[  227.132727][ T5825] loop5: detected capacity change from 0 to 256
[  228.504362][ T4299] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  228.864622][ T4299] usb 5-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping
[  228.906459][ T4299] usb 5-1: config 0 interface 0 has no altsetting 0
[  228.934338][   T26] audit: type=1800 audit(2000000034.070:28): pid=5848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.386" name="idVendor" dev="configfs" ino=38048 res=0 errno=0
[  228.999725][   T26] audit: type=1800 audit(2000000034.070:29): pid=5848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.386" name="idProduct" dev="configfs" ino=38049 res=0 errno=0
[  229.021534][   T26] audit: type=1800 audit(2000000034.080:30): pid=5848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.386" name="serialnumber" dev="configfs" ino=38050 res=0 errno=0
[  229.095047][ T4299] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  229.114793][ T4299] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  229.143618][ T4299] usb 5-1: Product: syz
[  229.154289][ T4299] usb 5-1: Manufacturer: syz
[  229.169543][ T4299] usb 5-1: SerialNumber: syz
[  229.222108][ T4299] usb 5-1: config 0 descriptor??
[  229.364785][ T4299] snd-usb-audio: probe of 5-1:0.0 failed with error -22
[  229.405664][ T5860] loop5: detected capacity change from 0 to 512
[  229.438788][ T5864] futex_wake_op: syz.3.390 tries to shift op by 144; fix this program
[  229.517584][ T5860] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  229.560780][ T5585] udevd[5585]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  229.756756][ T5860] EXT4-fs (loop5): 1 truncate cleaned up
[  229.831318][ T5860] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  230.558087][ T5027] usb 5-1: USB disconnect, device number 2
[  231.369356][ T5878] loop4: detected capacity change from 0 to 128
[  231.446740][ T5878] EXT4-fs (loop4): Test dummy encryption mode enabled
[  231.480933][ T5878] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[  231.500087][ T5878] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  231.617048][ T5878] FAULT_INJECTION: forcing a failure.
[  231.617048][ T5878] name failslab, interval 1, probability 0, space 0, times 0
[  231.665579][ T5885] loop3: detected capacity change from 0 to 256
[  231.728861][ T5878] CPU: 1 PID: 5878 Comm: syz.4.392 Not tainted syzkaller #0
[  231.736241][ T5878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  231.746624][ T5878] Call Trace:
[  231.749950][ T5878]  <TASK>
[  231.752992][ T5878]  dump_stack_lvl+0x188/0x250
[  231.757816][ T5878]  ? show_regs_print_info+0x20/0x20
[  231.763072][ T5878]  ? load_image+0x410/0x410
[  231.767632][ T5878]  ? __might_sleep+0xf0/0xf0
[  231.772285][ T5878]  ? __lock_acquire+0x7d40/0x7d40
[  231.777669][ T5878]  ? ext4fs_dirhash+0x2e0/0x2e0
[  231.782580][ T5878]  should_fail+0x383/0x4b0
[  231.787101][ T5878]  should_failslab+0x5/0x20
[  231.791661][ T5878]  slab_pre_alloc_hook+0x51/0xc0
[  231.796689][ T5878]  __kmalloc+0x6b/0x340
[  231.800906][ T5878]  ? ext4_htree_store_dirent+0x80/0x550
[  231.806536][ T5878]  ext4_htree_store_dirent+0x80/0x550
[  231.812034][ T5878]  htree_dirblock_to_tree+0x9df/0xee0
[  231.817458][ T5878]  ? unwind_get_return_address+0x49/0x80
[  231.823154][ T5878]  ? stack_trace_save+0xf0/0xf0
[  231.828090][ T5878]  ? ext4_htree_fill_tree+0x1100/0x1100
[  231.833716][ T5878]  ? __lock_acquire+0x13b3/0x7d40
[  231.838820][ T5878]  ext4_htree_fill_tree+0x60f/0x1100
[  231.844335][ T5878]  ? ext4_handle_dirty_dirblock+0x650/0x650
[  231.850309][ T5878]  ext4_readdir+0x2c78/0x3ac0
[  231.855098][ T5878]  ? ext4_dir_llseek+0x4b0/0x4b0
[  231.860087][ T5878]  ? aa_path_link+0x8a0/0x8a0
[  231.864813][ T5878]  ? read_lock_is_recursive+0x10/0x10
[  231.870247][ T5878]  ? mutex_lock_io_nested+0x60/0x60
[  231.875491][ T5878]  ? end_current_label_crit_section+0x14b/0x170
[  231.881780][ T5878]  ? iterate_dir+0x10d/0x550
[  231.886416][ T5878]  ? down_read_killable+0x1ce/0x340
[  231.891654][ T5878]  ? fsnotify_perm+0x254/0x560
[  231.896466][ T5878]  iterate_dir+0x213/0x550
[  231.900933][ T5878]  ? ext4_dir_llseek+0x4b0/0x4b0
[  231.905920][ T5878]  __se_sys_getdents+0xf2/0x260
[  231.910823][ T5878]  ? __x64_sys_getdents+0x80/0x80
[  231.916032][ T5878]  ? fillonedir+0x4c0/0x4c0
[  231.920601][ T5878]  ? lockdep_hardirqs_on+0x94/0x140
[  231.925854][ T5878]  do_syscall_64+0x4c/0xa0
[  231.930315][ T5878]  ? clear_bhb_loop+0x30/0x80
[  231.935042][ T5878]  ? clear_bhb_loop+0x30/0x80
[  231.939779][ T5878]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  231.945810][ T5878] RIP: 0033:0x7fb17e18d559
[  231.950269][ T5878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  231.970452][ T5878] RSP: 002b:00007fb17c3e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  231.978916][ T5878] RAX: ffffffffffffffda RBX: 00007fb17e414fa0 RCX: 00007fb17e18d559
[  231.986937][ T5878] RDX: 000000000001517f RSI: 0000000000000000 RDI: 0000000000000006
[  231.994949][ T5878] RBP: 00007fb17e2248b0 R08: 0000000000000000 R09: 0000000000000000
[  232.002971][ T5878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  232.011037][ T5878] R13: 00007fb17e415038 R14: 00007fb17e414fa0 R15: 00007ffdbadaf838
[  232.019080][ T5878]  </TASK>
[  234.042379][   T26] kauditd_printk_skb: 3 callbacks suppressed
[  234.042395][   T26] audit: type=1800 audit(2000000039.260:34): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.398" name="idVendor" dev="configfs" ino=38133 res=0 errno=0
[  234.925370][ T5907] loop1: detected capacity change from 0 to 8192
[  234.935550][   T26] audit: type=1800 audit(2000000040.150:35): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.398" name="idProduct" dev="configfs" ino=37237 res=0 errno=0
[  235.062646][ T5910] usb usb9: usbfs: process 5910 (syz.3.399) did not claim interface 0 before use
[  235.113730][   T26] audit: type=1800 audit(2000000040.160:36): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.398" name="serialnumber" dev="configfs" ino=38134 res=0 errno=0
[  235.338852][   T26] audit: type=1800 audit(2000000040.210:37): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.398" name="report_length" dev="configfs" ino=37238 res=0 errno=0
[  235.463598][   T26] audit: type=1800 audit(2000000040.210:38): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.398" name="report_desc" dev="configfs" ino=38135 res=0 errno=0
[  235.631090][   T26] audit: type=1800 audit(2000000040.220:39): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.398" name="UDC" dev="configfs" ino=38136 res=0 errno=0
[  237.592169][ T5941] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001
[  238.894458][   T26] audit: type=1800 audit(2000000043.210:40): pid=5949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.405" name="c_chmask" dev="configfs" ino=38185 res=0 errno=0
[  239.132353][ T5946] IPVS: rr: TCP 172.20.20.187:20480 - no destination available
[  239.512645][   T26] audit: type=1800 audit(2000000044.730:41): pid=5961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.410" name="idVendor" dev="configfs" ino=38202 res=0 errno=0
[  239.556787][   T26] audit: type=1800 audit(2000000044.740:42): pid=5961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.410" name="idProduct" dev="configfs" ino=38203 res=0 errno=0
[  239.622954][   T26] audit: type=1800 audit(2000000044.760:43): pid=5961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.410" name="serialnumber" dev="configfs" ino=38204 res=0 errno=0
[  239.763013][   T26] audit: type=1800 audit(2000000044.760:44): pid=5961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.410" name="report_length" dev="configfs" ino=38205 res=0 errno=0
[  239.794395][   T26] audit: type=1800 audit(2000000044.890:45): pid=5966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.410" name="report_desc" dev="configfs" ino=37279 res=0 errno=0
[  239.880190][ T5970] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  240.075695][   T26] audit: type=1800 audit(2000000044.890:46): pid=5961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.410" name="UDC" dev="configfs" ino=37280 res=0 errno=0
[  240.123954][ T5970] netlink: 116 bytes leftover after parsing attributes in process `syz.1.412'.
[  241.197056][ T5994] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  241.516310][ T5996] nfs: Bad value for 'mountport'
[  241.594381][   T23] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  242.064707][ T1110] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  242.324381][   T23] usb 5-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping
[  242.530557][   T23] usb 5-1: config 0 interface 0 has no altsetting 0
[  242.634456][ T1110] usb 4-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping
[  242.668968][ T1110] usb 4-1: config 0 interface 0 has no altsetting 0
[  242.834788][   T23] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  242.860160][   T23] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  242.884603][ T1110] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  242.898409][ T6007] loop1: detected capacity change from 0 to 256
[  242.937347][ T1110] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  242.964641][   T23] usb 5-1: Product: syz
[  243.041713][   T23] usb 5-1: Manufacturer: syz
[  243.046958][ T1110] usb 4-1: Product: syz
[  243.051176][ T1110] usb 4-1: Manufacturer: syz
[  243.062461][   T23] usb 5-1: SerialNumber: syz
[  243.242010][   T23] usb 5-1: config 0 descriptor??
[  243.247506][ T1110] usb 4-1: SerialNumber: syz
[  243.255325][ T1110] usb 4-1: config 0 descriptor??
[  243.668837][ T1110] snd-usb-audio: probe of 4-1:0.0 failed with error -22
[  243.847732][ T6017] udevd[6017]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  244.494771][   T23] usb 5-1: can't set config #0, error -71
[  244.511410][   T23] usb 5-1: USB disconnect, device number 3
[  244.561004][    T7] usb 4-1: USB disconnect, device number 3
[  245.440218][ T6051] loop4: detected capacity change from 0 to 4096
[  245.734332][ T6052] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  245.838572][   T26] audit: type=1326 audit(2000000051.060:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="syz.4.428" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb17e18d559 code=0x0
[  246.263335][ T6040] loop5: detected capacity change from 0 to 8192
[  246.674806][ T6068] loop4: detected capacity change from 0 to 512
[  246.703928][ T6071] loop3: detected capacity change from 0 to 128
[  247.098284][ T6071] EXT4-fs (loop3): Test dummy encryption mode enabled
[  247.199661][ T6068] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  247.394455][ T4266] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  247.714744][ T6068] EXT4-fs (loop4): 1 truncate cleaned up
[  247.720472][ T6068] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  247.765570][ T6071] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[  247.979564][ T6071] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  248.004422][ T4266] usb 2-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping
[  248.030316][ T4266] usb 2-1: config 0 interface 0 has no altsetting 0
[  248.068625][ T6071] FAULT_INJECTION: forcing a failure.
[  248.068625][ T6071] name failslab, interval 1, probability 0, space 0, times 0
[  248.107527][ T6071] CPU: 1 PID: 6071 Comm: syz.3.433 Not tainted syzkaller #0
[  248.115108][ T6071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  248.125226][ T6071] Call Trace:
[  248.128663][ T6071]  <TASK>
[  248.131633][ T6071]  dump_stack_lvl+0x188/0x250
[  248.136355][ T6071]  ? show_regs_print_info+0x20/0x20
[  248.141601][ T6071]  ? load_image+0x410/0x410
[  248.146171][ T6071]  ? __might_sleep+0xf0/0xf0
[  248.150805][ T6071]  ? __lock_acquire+0x7d40/0x7d40
[  248.155974][ T6071]  should_fail+0x383/0x4b0
[  248.160478][ T6071]  should_failslab+0x5/0x20
[  248.165026][ T6071]  slab_pre_alloc_hook+0x51/0xc0
[  248.170013][ T6071]  kmem_cache_alloc_trace+0x47/0x290
[  248.175439][ T6071]  ? ext4_readdir+0x4ba/0x3ac0
[  248.180263][ T6071]  ext4_readdir+0x4ba/0x3ac0
[  248.184903][ T6071]  ? __lock_acquire+0x7d40/0x7d40
[  248.189976][ T6071]  ? preempt_schedule+0xbc/0xd0
[  248.194901][ T6071]  ? ext4_dir_llseek+0x4b0/0x4b0
[  248.199894][ T6071]  ? aa_path_link+0x8a0/0x8a0
[  248.204618][ T6071]  ? read_lock_is_recursive+0x10/0x10
[  248.210047][ T6071]  ? mutex_lock_io_nested+0x60/0x60
[  248.215302][ T6071]  ? end_current_label_crit_section+0x14b/0x170
[  248.221599][ T6071]  ? iterate_dir+0x10d/0x550
[  248.226325][ T6071]  ? down_read_killable+0x1ce/0x340
[  248.231585][ T6071]  ? fsnotify_perm+0x254/0x560
[  248.236402][ T6071]  iterate_dir+0x213/0x550
[  248.240862][ T6071]  ? ext4_dir_llseek+0x4b0/0x4b0
[  248.245851][ T6071]  __se_sys_getdents+0xf2/0x260
[  248.250767][ T6071]  ? __x64_sys_getdents+0x80/0x80
[  248.255840][ T6071]  ? fillonedir+0x4c0/0x4c0
[  248.260415][ T6071]  ? lockdep_hardirqs_on+0x94/0x140
[  248.265672][ T6071]  do_syscall_64+0x4c/0xa0
[  248.270140][ T6071]  ? clear_bhb_loop+0x30/0x80
[  248.274863][ T6071]  ? clear_bhb_loop+0x30/0x80
[  248.279583][ T6071]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  248.285513][ T6071] RIP: 0033:0x7ff7d3ebd559
[  248.289976][ T6071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  248.309624][ T6071] RSP: 002b:00007ff7d2115028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  248.318083][ T6071] RAX: ffffffffffffffda RBX: 00007ff7d4144fa0 RCX: 00007ff7d3ebd559
[  248.326140][ T6071] RDX: 000000000001517f RSI: 0000000000000000 RDI: 0000000000000006
[  248.334262][ T6071] RBP: 00007ff7d3f548b0 R08: 0000000000000000 R09: 0000000000000000
[  248.342279][ T6071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  248.350297][ T6071] R13: 00007ff7d4145038 R14: 00007ff7d4144fa0 R15: 00007ffd4d203d88
[  248.358333][ T6071]  </TASK>
[  248.416259][ T4266] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  248.431374][ T4266] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  248.463326][ T4266] usb 2-1: Product: syz
[  248.481116][ T4266] usb 2-1: Manufacturer: syz
[  248.494286][ T4266] usb 2-1: SerialNumber: syz
[  248.522380][ T4266] usb 2-1: config 0 descriptor??
[  248.612617][ T4266] snd-usb-audio: probe of 2-1:0.0 failed with error -22
[  248.787900][ T6017] udevd[6017]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  249.262264][ T6114] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  249.914614][   T13] usb 2-1: USB disconnect, device number 6
[  250.273916][ T6127] loop3: detected capacity change from 0 to 4096
[  250.356589][ T6128] nfs: Bad value for 'mountport'
[  251.095930][ T6130] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  251.183049][   T26] audit: type=1326 audit(2000000056.400:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.3.443" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7d3ebd559 code=0x0
[  252.062468][ T6153] loop5: detected capacity change from 0 to 512
[  252.231563][ T6153] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  252.467207][ T6153] EXT4-fs (loop5): 1 truncate cleaned up
[  252.474327][ T6153] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  252.725454][ T5027] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  253.144968][ T5027] usb 4-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping
[  253.174069][ T6154] loop1: detected capacity change from 0 to 32768
[  253.184600][ T5027] usb 4-1: config 0 interface 0 has no altsetting 0
[  253.494922][ T5027] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  253.513742][ T5027] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  253.522623][ T5027] usb 4-1: Product: syz
[  253.527940][ T5027] usb 4-1: Manufacturer: syz
[  253.543584][ T5027] usb 4-1: SerialNumber: syz
[  253.575251][ T5027] usb 4-1: config 0 descriptor??
[  253.792458][ T5027] snd-usb-audio: probe of 4-1:0.0 failed with error -22
[  255.754540][   T13] usb 4-1: USB disconnect, device number 4
[  255.792551][ T5990] udevd[5990]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  256.414548][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  256.420899][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  257.155013][ T6199] nfs: Unknown parameter 'mo'
[  257.869203][ T6197] loop3: detected capacity change from 0 to 4096
[  258.187741][ T6208] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  258.261297][ T6212] loop5: detected capacity change from 0 to 128
[  259.285283][ T6212] EXT4-fs (loop5): Test dummy encryption mode enabled
[  259.434977][ T6212] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[  259.447749][ T6212] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  259.468274][ T6212] FAULT_INJECTION: forcing a failure.
[  259.468274][ T6212] name failslab, interval 1, probability 0, space 0, times 0
[  259.486134][ T6212] CPU: 1 PID: 6212 Comm: syz.5.464 Not tainted syzkaller #0
[  259.493495][ T6212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  259.503590][ T6212] Call Trace:
[  259.506911][ T6212]  <TASK>
[  259.509871][ T6212]  dump_stack_lvl+0x188/0x250
[  259.514591][ T6212]  ? show_regs_print_info+0x20/0x20
[  259.519829][ T6212]  ? load_image+0x410/0x410
[  259.524403][ T6212]  ? __might_sleep+0xf0/0xf0
[  259.529030][ T6212]  ? __lock_acquire+0x7d40/0x7d40
[  259.534105][ T6212]  should_fail+0x383/0x4b0
[  259.538572][ T6212]  should_failslab+0x5/0x20
[  259.543113][ T6212]  slab_pre_alloc_hook+0x51/0xc0
[  259.548114][ T6212]  ? sk_prot_alloc+0x57/0x210
[  259.552835][ T6212]  kmem_cache_alloc+0x3d/0x280
[  259.557641][ T6212]  sk_prot_alloc+0x57/0x210
[  259.562195][ T6212]  ? sk_alloc+0x1d/0x310
[  259.566484][ T6212]  sk_alloc+0x2f/0x310
[  259.570606][ T6212]  pn_socket_create+0xf1/0x510
[  259.575431][ T6212]  __sock_create+0x473/0x910
[  259.580071][ T6212]  __sys_socket+0xe2/0x170
[  259.584531][ T6212]  __x64_sys_socket+0x76/0x80
[  259.589250][ T6212]  do_syscall_64+0x4c/0xa0
[  259.593805][ T6212]  ? clear_bhb_loop+0x30/0x80
[  259.598537][ T6212]  ? clear_bhb_loop+0x30/0x80
[  259.603254][ T6212]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  259.609182][ T6212] RIP: 0033:0x7faba9caf559
[  259.613635][ T6212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  259.633281][ T6212] RSP: 002b:00007faba7f07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  259.641760][ T6212] RAX: ffffffffffffffda RBX: 00007faba9f36fa0 RCX: 00007faba9caf559
[  259.649781][ T6212] RDX: 0000000000000001 RSI: 0000000000000002 RDI: 0000000000000023
[  259.657792][ T6212] RBP: 00007faba9d468b0 R08: 0000000000000000 R09: 0000000000000000
[  259.665801][ T6212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  259.673803][ T6212] R13: 00007faba9f37038 R14: 00007faba9f36fa0 R15: 00007ffe5d489578
[  259.681834][ T6212]  </TASK>
[  259.757647][ T6211] loop4: detected capacity change from 0 to 8192
[  260.355607][ T6231] loop5: detected capacity change from 0 to 512
[  260.424764][ T6231] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  260.511209][ T6231] EXT4-fs (loop5): 1 truncate cleaned up
[  260.584356][ T6231] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  262.034590][ T6250] nfs: Unknown parameter 'mo'
[  262.373633][ T6249] FAULT_INJECTION: forcing a failure.
[  262.373633][ T6249] name failslab, interval 1, probability 0, space 0, times 0
[  262.665816][ T6249] CPU: 0 PID: 6249 Comm: syz.5.471 Not tainted syzkaller #0
[  262.673187][ T6249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  262.683438][ T6249] Call Trace:
[  262.686754][ T6249]  <TASK>
[  262.689719][ T6249]  dump_stack_lvl+0x188/0x250
[  262.694535][ T6249]  ? show_regs_print_info+0x20/0x20
[  262.699912][ T6249]  ? load_image+0x410/0x410
[  262.704452][ T6249]  ? __lock_acquire+0x7d40/0x7d40
[  262.709518][ T6249]  should_fail+0x383/0x4b0
[  262.714089][ T6249]  should_failslab+0x5/0x20
[  262.718628][ T6249]  slab_pre_alloc_hook+0x51/0xc0
[  262.723615][ T6249]  kmem_cache_alloc_trace+0x47/0x290
[  262.728944][ T6249]  ? bpf_prog_alloc_no_stats+0xac/0x2c0
[  262.734544][ T6249]  bpf_prog_alloc_no_stats+0xac/0x2c0
[  262.739958][ T6249]  bpf_prog_alloc+0x1a/0x1e0
[  262.744585][ T6249]  bpf_prog_load+0x7d1/0x14e0
[  262.749311][ T6249]  ? map_freeze+0x360/0x360
[  262.753856][ T6249]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  262.759542][ T6249]  ? lockdep_hardirqs_on+0x94/0x140
[  262.764801][ T6249]  ? bpf_lsm_audit_rule_free+0x10/0x10
[  262.770314][ T6249]  ? bpf_lsm_bpf+0x5/0x10
[  262.774681][ T6249]  ? security_bpf+0x7a/0xa0
[  262.779229][ T6249]  __sys_bpf+0x532/0x6f0
[  262.783642][ T6249]  ? bpf_link_show_fdinfo+0x380/0x380
[  262.789074][ T6249]  __x64_sys_bpf+0x78/0x90
[  262.793531][ T6249]  do_syscall_64+0x4c/0xa0
[  262.797997][ T6249]  ? clear_bhb_loop+0x30/0x80
[  262.802748][ T6249]  ? clear_bhb_loop+0x30/0x80
[  262.807558][ T6249]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  262.813502][ T6249] RIP: 0033:0x7faba9caf559
[  262.817953][ T6249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  262.837807][ T6249] RSP: 002b:00007faba7f07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  262.846277][ T6249] RAX: ffffffffffffffda RBX: 00007faba9f36fa0 RCX: 00007faba9caf559
[  262.854284][ T6249] RDX: 0000000000000094 RSI: 0000200000000c00 RDI: 0000000000000005
[  262.862291][ T6249] RBP: 00007faba9d468b0 R08: 0000000000000000 R09: 0000000000000000
[  262.870298][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  262.878313][ T6249] R13: 00007faba9f37038 R14: 00007faba9f36fa0 R15: 00007ffe5d489578
[  262.886334][ T6249]  </TASK>
[  263.084346][ T5027] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  264.345708][ T5027] usb 4-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping
[  264.718214][ T5027] usb 4-1: config 0 interface 0 has no altsetting 0
[  264.804437][ T5027] usb 4-1: string descriptor 0 read error: -71
[  264.810899][ T5027] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  264.874406][ T5027] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  264.954700][ T5027] usb 4-1: config 0 descriptor??
[  264.972325][ T6280] loop1: detected capacity change from 0 to 256
[  264.989135][ T5027] usb 4-1: can't set config #0, error -71
[  265.031184][ T5027] usb 4-1: USB disconnect, device number 5
[  267.550818][ T6294] loop1: detected capacity change from 0 to 128
[  267.598893][ T6294] EXT4-fs (loop1): Test dummy encryption mode enabled
[  267.666550][ T6294] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[  267.704402][ T4297] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  267.722898][ T6299] loop3: detected capacity change from 0 to 8192
[  267.736286][ T6294] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  267.844877][ T6294] FAULT_INJECTION: forcing a failure.
[  267.844877][ T6294] name failslab, interval 1, probability 0, space 0, times 0
[  267.920120][ T6294] CPU: 0 PID: 6294 Comm: syz.1.478 Not tainted syzkaller #0
[  267.927504][ T6294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  267.937606][ T6294] Call Trace:
[  267.940944][ T6294]  <TASK>
[  267.943918][ T6294]  dump_stack_lvl+0x188/0x250
[  267.948826][ T6294]  ? show_regs_print_info+0x20/0x20
[  267.954109][ T6294]  ? load_image+0x410/0x410
[  267.958666][ T6294]  ? __might_sleep+0xf0/0xf0
[  267.963320][ T6294]  ? __lock_acquire+0x7d40/0x7d40
[  267.968411][ T6294]  should_fail+0x383/0x4b0
[  267.972908][ T6294]  should_failslab+0x5/0x20
[  267.977462][ T6294]  slab_pre_alloc_hook+0x51/0xc0
[  267.982462][ T6294]  ? sk_prot_alloc+0x57/0x210
[  267.987186][ T6294]  kmem_cache_alloc+0x3d/0x280
[  267.992052][ T6294]  sk_prot_alloc+0x57/0x210
[  267.996600][ T6294]  ? sk_alloc+0x1d/0x310
[  268.000919][ T6294]  sk_alloc+0x2f/0x310
[  268.005048][ T6294]  pn_socket_create+0xf1/0x510
[  268.009880][ T6294]  __sock_create+0x473/0x910
[  268.014538][ T6294]  __sys_socket+0xe2/0x170
[  268.019015][ T6294]  __x64_sys_socket+0x76/0x80
[  268.023749][ T6294]  do_syscall_64+0x4c/0xa0
[  268.028223][ T6294]  ? clear_bhb_loop+0x30/0x80
[  268.032964][ T6294]  ? clear_bhb_loop+0x30/0x80
[  268.037732][ T6294]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  268.043727][ T6294] RIP: 0033:0x7fa9e5543559
[  268.048380][ T6294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  268.068042][ T6294] RSP: 002b:00007fa9e379b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  268.076525][ T6294] RAX: ffffffffffffffda RBX: 00007fa9e57cafa0 RCX: 00007fa9e5543559
[  268.084543][ T6294] RDX: 0000000000000001 RSI: 0000000000000002 RDI: 0000000000000023
[  268.092558][ T6294] RBP: 00007fa9e55da8b0 R08: 0000000000000000 R09: 0000000000000000
[  268.100578][ T6294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  268.108621][ T6294] R13: 00007fa9e57cb038 R14: 00007fa9e57cafa0 R15: 00007ffd4ef3fca8
[  268.116673][ T6294]  </TASK>
[  268.119862][    C0] vkms_vblank_simulate: vblank timer overrun
[  268.244423][ T4297] usb 6-1: device descriptor read/all, error -71
[  268.706293][ T6313] loop1: detected capacity change from 0 to 512
[  268.749042][ T6313] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  268.845338][ T6313] EXT4-fs (loop1): 1 truncate cleaned up
[  268.851228][ T6313] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  269.163923][ T6322] nfs: Unknown parameter 'mo'
[  270.524065][ T6343] loop3: detected capacity change from 0 to 256
[  271.810788][ T6360] loop3: detected capacity change from 0 to 128
[  271.922564][ T6360] EXT4-fs (loop3): Test dummy encryption mode enabled
[  272.016992][ T6360] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[  272.144469][ T6360] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  273.594941][ T6385] netlink: 64 bytes leftover after parsing attributes in process `syz.1.497'.
[  273.604731][ T6385] netlink: 64 bytes leftover after parsing attributes in process `syz.1.497'.
[  273.613629][ T6385] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22)
[  273.787446][ T6385] loop1: detected capacity change from 0 to 512
[  275.196121][ T6385] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #2: comm syz.1.497: corrupted xattr block 255
[  275.216820][ T6385] EXT4-fs (loop1): Remounting filesystem read-only
[  275.223420][ T6385] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  275.231907][ T6385] EXT4-fs (loop1): mounted filesystem without journal. Opts: noinit_itable,noblock_validity,max_batch_time=0x0000000000000000,errors=remount-ro,auto_da_alloc,grpjquota=.init_itable,barrier=0x0000000000000003,jqfmt=vfsv1,grpid,,. Quota mode: writeback.
[  275.256721][ T6385] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #2: comm syz.1.497: corrupted xattr block 255
[  275.272066][ T6385] EXT4-fs (loop1): Remounting filesystem read-only
[  275.287526][ T6378] loop5: detected capacity change from 0 to 8192
[  275.296288][ T4195] 
[  275.298643][ T4195] ======================================================
[  275.305676][ T4195] WARNING: possible circular locking dependency detected
[  275.312704][ T4195] syzkaller #0 Not tainted
[  275.317119][ T4195] ------------------------------------------------------
[  275.324135][ T4195] kworker/u5:2/4195 is trying to acquire lock:
[  275.330314][ T4195] ffffffff8e3b4048 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_security_cfm+0x95/0x780
[  275.339678][ T4195] 
[  275.339678][ T4195] but task is already holding lock:
[  275.347059][ T4195] ffffffff8e3946c8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_auth_complete_evt+0x308/0xbb0
[  275.357073][ T4195] 
[  275.357073][ T4195] which lock already depends on the new lock.
[  275.357073][ T4195] 
[  275.367506][ T4195] 
[  275.367506][ T4195] the existing dependency chain (in reverse order) is:
[  275.376540][ T4195] 
[  275.376540][ T4195] -> #2 (hci_cb_list_lock){+.+.}-{3:3}:
[  275.384312][ T4195]        __mutex_lock_common+0x1e5/0x2400
[  275.390065][ T4195]        mutex_lock_nested+0x17/0x20
[  275.395368][ T4195]        hci_remote_features_evt+0x5d9/0xa10
[  275.401373][ T4195]        hci_event_packet+0x600/0x1310
[  275.406847][ T4195]        hci_rx_work+0x255/0xa10
[  275.411805][ T4195]        process_one_work+0x867/0xff0
[  275.417189][ T4195]        worker_thread+0xad7/0x12a0
[  275.422408][ T4195]        kthread+0x42e/0x520
[  275.427017][ T4195]        ret_from_fork+0x1f/0x30
[  275.431975][ T4195] 
[  275.431975][ T4195] -> #1 (&hdev->lock){+.+.}-{3:3}:
[  275.439290][ T4195]        __mutex_lock_common+0x1e5/0x2400
[  275.445030][ T4195]        mutex_lock_nested+0x17/0x20
[  275.450329][ T4195]        l2cap_chan_connect+0xfb/0xe20
[  275.455805][ T4195]        l2cap_sock_connect+0x5a3/0x770
[  275.461367][ T4195]        kernel_connect+0x11c/0x180
[  275.466596][ T4195]        rfcomm_dlc_open+0x600/0x10c0
[  275.471992][ T4195]        rfcomm_sock_connect+0x2e9/0x600
[  275.477636][ T4195]        __sys_connect+0x3cb/0x450
[  275.482780][ T4195]        __x64_sys_connect+0x76/0x80
[  275.488101][ T4195]        do_syscall_64+0x4c/0xa0
[  275.493056][ T4195]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  275.499494][ T4195] 
[  275.499494][ T4195] -> #0 (rfcomm_mutex){+.+.}-{3:3}:
[  275.506889][ T4195]        __lock_acquire+0x38f7/0x7d40
[  275.512278][ T4195]        lock_acquire+0x19f/0x400
[  275.517318][ T4195]        __mutex_lock_common+0x1e5/0x2400
[  275.523068][ T4195]        mutex_lock_nested+0x17/0x20
[  275.528384][ T4195]        rfcomm_security_cfm+0x95/0x780
[  275.533954][ T4195]        hci_auth_complete_evt+0x388/0xbb0
[  275.539770][ T4195]        hci_event_packet+0x701/0x1310
[  275.545243][ T4195]        hci_rx_work+0x255/0xa10
[  275.550193][ T4195]        process_one_work+0x867/0xff0
[  275.555579][ T4195]        worker_thread+0xad7/0x12a0
[  275.560789][ T4195]        kthread+0x42e/0x520
[  275.565389][ T4195]        ret_from_fork+0x1f/0x30
[  275.570341][ T4195] 
[  275.570341][ T4195] other info that might help us debug this:
[  275.570341][ T4195] 
[  275.580574][ T4195] Chain exists of:
[  275.580574][ T4195]   rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock
[  275.580574][ T4195] 
[  275.593094][ T4195]  Possible unsafe locking scenario:
[  275.593094][ T4195] 
[  275.600550][ T4195]        CPU0                    CPU1
[  275.605922][ T4195]        ----                    ----
[  275.611297][ T4195]   lock(hci_cb_list_lock);
[  275.615815][ T4195]                                lock(&hdev->lock);
[  275.622422][ T4195]                                lock(hci_cb_list_lock);
[  275.629457][ T4195]   lock(rfcomm_mutex);
[  275.633625][ T4195] 
[  275.633625][ T4195]  *** DEADLOCK ***
[  275.633625][ T4195] 
[  275.641779][ T4195] 4 locks held by kworker/u5:2/4195:
[  275.647082][ T4195]  #0: ffff888076d6b138 ((wq_completion)hci4#2){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0
[  275.657388][ T4195]  #1: ffffc90002fbfd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0
[  275.668833][ T4195]  #2: ffff888062d94478 (&hdev->lock){+.+.}-{3:3}, at: hci_auth_complete_evt+0xbc/0xbb0
[  275.678605][ T4195]  #3: ffffffff8e3946c8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_auth_complete_evt+0x308/0xbb0
[  275.688899][ T4195] 
[  275.688899][ T4195] stack backtrace:
[  275.694800][ T4195] CPU: 1 PID: 4195 Comm: kworker/u5:2 Not tainted syzkaller #0
[  275.702354][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  275.712565][ T4195] Workqueue: hci4 hci_rx_work
[  275.717277][ T4195] Call Trace:
[  275.720690][ T4195]  <TASK>
[  275.723664][ T4195]  dump_stack_lvl+0x188/0x250
[  275.728366][ T4195]  ? load_image+0x410/0x410
[  275.732900][ T4195]  ? show_regs_print_info+0x20/0x20
[  275.738116][ T4195]  ? print_circular_bug+0x12b/0x1a0
[  275.743338][ T4195]  check_noncircular+0x2f8/0x400
[  275.748315][ T4195]  ? print_deadlock_bug+0x5d0/0x5d0
[  275.753530][ T4195]  ? lockdep_lock+0xf1/0x1f0
[  275.758141][ T4195]  ? mark_lock+0x94/0x320
[  275.762497][ T4195]  ? _find_first_zero_bit+0xd1/0xf0
[  275.767715][ T4195]  __lock_acquire+0x38f7/0x7d40
[  275.772600][ T4195]  ? verify_lock_unused+0x140/0x140
[  275.777845][ T4195]  lock_acquire+0x19f/0x400
[  275.782374][ T4195]  ? rfcomm_security_cfm+0x95/0x780
[  275.787589][ T4195]  ? __might_sleep+0xf0/0xf0
[  275.792192][ T4195]  ? read_lock_is_recursive+0x10/0x10
[  275.797586][ T4195]  __mutex_lock_common+0x1e5/0x2400
[  275.802816][ T4195]  ? rfcomm_security_cfm+0x95/0x780
[  275.808036][ T4195]  ? rcu_lock_release+0x20/0x20
[  275.813007][ T4195]  ? lockdep_hardirqs_on+0x94/0x140
[  275.818225][ T4195]  ? rfcomm_security_cfm+0x95/0x780
[  275.823460][ T4195]  ? mutex_lock_io_nested+0x60/0x60
[  275.828682][ T4195]  ? l2cap_security_cfm+0x12b4/0x1340
[  275.834089][ T4195]  ? kmem_cache_free+0x14c/0x210
[  275.839052][ T4195]  ? l2cap_disconn_cfm+0xc0/0xc0
[  275.844021][ T4195]  mutex_lock_nested+0x17/0x20
[  275.848888][ T4195]  rfcomm_security_cfm+0x95/0x780
[  275.853927][ T4195]  ? rfcomm_send_msc+0x340/0x340
[  275.858896][ T4195]  ? rfcomm_send_msc+0x340/0x340
[  275.863852][ T4195]  hci_auth_complete_evt+0x388/0xbb0
[  275.869166][ T4195]  ? hci_disconn_complete_evt+0xae0/0xae0
[  275.874906][ T4195]  ? lock_chain_count+0x20/0x20
[  275.879776][ T4195]  ? __rwlock_init+0x140/0x140
[  275.884581][ T4195]  hci_event_packet+0x701/0x1310
[  275.889537][ T4195]  ? _raw_spin_unlock+0x40/0x40
[  275.894405][ T4195]  ? rcu_lock_release+0x20/0x20
[  275.899281][ T4195]  ? hci_send_to_monitor+0x9c/0x4a0
[  275.904506][ T4195]  hci_rx_work+0x255/0xa10
[  275.908949][ T4195]  process_one_work+0x867/0xff0
[  275.913828][ T4195]  ? worker_detach_from_pool+0x240/0x240
[  275.919491][ T4195]  ? lockdep_hardirqs_off+0x70/0x100
[  275.924805][ T4195]  ? _raw_spin_lock_irq+0xb7/0xf0
[  275.929957][ T4195]  ? _raw_spin_lock_irqsave+0x100/0x100
[  275.935549][ T4195]  ? wq_worker_running+0x97/0x170
[  275.940616][ T4195]  worker_thread+0xad7/0x12a0
[  275.945341][ T4195]  kthread+0x42e/0x520
[  275.949439][ T4195]  ? rcu_lock_release+0x20/0x20
[  275.954417][ T4195]  ? kthread_blkcg+0xd0/0xd0
[  275.959060][ T4195]  ret_from_fork+0x1f/0x30
[  275.963534][ T4195]  </TASK>
[  276.305869][ T6397] nfs: Bad value for 'mountproto'
[  282.124393][ T5027] Bluetooth: hci4: command 0x0406 tx timeout