last executing test programs:

1m7.661049286s ago: executing program 2 (id=433):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005880)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000000340)="$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")
mkdir(&(0x7f0000000140)='./control\x00', 0x5)
rmdir(&(0x7f0000000100)='./control\x00')

1m2.710378378s ago: executing program 2 (id=447):
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50010000", @ANYRES16, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e64"], 0x150}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b000701000000000ce2aa66027c000004000000140001"], 0x2c}}, 0x0)
r1 = syz_open_dev$media(&(0x7f0000000b40), 0x2e18, 0x100)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000640)={'dvmrp0\x00', 0x5})
r3 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x141000, 0x20, 0x28}, 0x18)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={<r4=>0x0, @remote, @private}, &(0x7f00000002c0)=0xc)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x24180}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=@gettfilter={0x5c, 0x2e, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x2, 0xf}, {0xfffe, 0xffe0}, {0x8, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0xfffffeff}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x814}, 0x40)
ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1)
ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f00000011c0), 0x0})

1m1.985099443s ago: executing program 2 (id=449):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000004900010000000000fedbdf250a"], 0x38}, 0x1, 0x0, 0x4000000}, 0x0)

1m1.351183635s ago: executing program 2 (id=450):
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000002ec0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="3000000000000000840000000100000007000b00020200000700000006730000090000000004000006000000", @ANYRES32=0x0, @ANYBLOB="180000000000000084000000000000000900040010000500"], 0x48, 0x4}], 0x1, 0x48800)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000104000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000003000000010000c25ac76300"/28], 0x50)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000480)=@generic={&(0x7f0000000280)='./file1\x00', r1}, 0x18)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x88, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "50a550d2673515ebc47528639dfca111"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "481fc9761b75b81a194d5b4614592db8"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "edfc6337c840b6f59b6fe204628df13f"}, @NL80211_ATTR_PMK={0x14, 0xfe, "d6483b02b5913e2a7e0b168720f69227"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000c00)=@newsa={0x184, 0x10, 0x1, 0xfffffffc, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x15, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x4, 0x800000000, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000002}, {0x0, 0x4, 0xfffffffffffffffc, 0x4}, {0xffffffff, 0x7fd}, 0x80000000, 0x0, 0x2, 0x1, 0x2, 0x2c}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}, @algo_aead={0x4c, 0x12, {{'authencesn(blake2s-224-x86,xts-aes-neon)\x00'}, 0x0, 0x40}}]}, 0x184}, 0x1, 0x0, 0x0, 0x4004050}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000a40)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x840)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x8}, 0x18)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x60100, 0x30)
preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000100)=""/25, 0x19}], 0x1, 0x401, 0x2)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
r7 = userfaultfd(0x801)
r8 = epoll_create(0xa4a)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000200)={0x10000018})
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f00000002c0))
r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)
r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r10)
sendmsg$nl_route(r9, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="700000001500000828bd7000fcdbdf250a3f4000", @ANYRES32=0x0, @ANYBLOB="145f1f2b023530b608910aea5d000200ff01000000000000000000000000000414000600ffff000007000000100000000400000014000100fc0100000000000000000000000000000800090000000000140006000300a600000000000300000007000000"], 0x70}, 0x1, 0x0, 0x0, 0x8}, 0x90)
ptrace$PTRACE_SETSIGMASK(0x420b, r10, 0x8, &(0x7f00000000c0)={[0x2000000011d]})
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r9, r9, 0x11, 0x0, @val=@uprobe_multi={&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=[0x5, 0x2], 0x0, 0x4, 0x2, 0x0, r10}}, 0x40)

1m0.377857439s ago: executing program 2 (id=455):
syz_mount_image$vfat(&(0x7f0000000740), &(0x7f00000002c0)='./file0\x00', 0x3024801, &(0x7f0000000a40)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f6a4854ea3dd5a00bd6df44035f5c3ae796fec6d633fd418bf2cd82df769aa2ee622c53d576287bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ec310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102", @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYRESOCT], 0x1, 0x26c, &(0x7f00000007c0)="$eJzs281OE1EYxvGHDwVBmCqKgjG+0Y1uJlCvoCGQGJtokBo/EpNBptp0aEmnwdQYYefW6yAu3ZkYb4CNV+DCHRuXLIw1nanQlhrDAibY/28zb3P6tOf0PW3OorPz6P1qMR+6ea+q/j7ToLSpXSmlfg0o1te89kf1abXa1K2J7LerDx4/uZvJZucXzRYyS7fTZjZ+7fOrNx+uf6mOPvw4/mlI26lnOz/S37cnt6d2fi29LIRWCK1Urppny+Vy1VsOfFsphEXX7H7ge6FvhVLoV9rG80F5ba1mXmllbGSt4oeheaWaFf2aVctWrdTMe+EVSua6ro2NCP+S21pc9DJJzwJHq1LJeHOSpg+M5LYSmRAAAEgU5/9exvm/FzTO/0+b3992nP8BAAAAAAAAAAAAAAAAAAAAADgJdut1p16vO3+up6ToDp968/EZSSOSRiWdlTQmaVySIykl6Zyk85ImJF2QdFHSpKRLki5Lmmp5raTXioPof2+j/72N/ve2lht3h6XVd+u59Vx8jcczeRUUyNeMHP2MetkU1wt3svMzFknpyupGM7+xnhtoz8/KaWyYbvnZOG/t+aFo3+3l03IaG6xbPt01P6ybN1ryrhx9fa6yAq1Ee3I//3bWbO5etiM/HT3vf+fanq79c92/jcf5Q+yPjs93UNODya4dUlh7XfSCwK9QUFCcnKJxMDvSt0j6lwnHYb/pSc8EAAAAAAAAAAAAAAAAAHAYx/GPxaTXCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAp98BAAD//7JLXn4=")
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
socket$kcm(0x28, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90)
r1 = socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x28, 0x1, 0x0)
sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd", 0x8}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
sendto$inet6(r0, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0x1}, 0x6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000000)

59.797942603s ago: executing program 2 (id=458):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = io_uring_setup(0x2754, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0), 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001500)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20)
ioctl$sock_bt_hci(r0, 0x400448cb, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r4 = syz_open_dev$ptys(0xc, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000600000000000000008500000007000000c5000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x7, 0x1c, 0x7ffd, 0xbffffffe, 0x2, "a4c82192e6aed8e89d0470331dabdd191e57ed"})
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e20, 0x5, @empty, 0xffffcd61}, @in6={0xa, 0x4e21, 0x5, @remote}, @in6={0xa, 0x4e23, 0x10001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x81}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}, @in6={0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}], 0xbc)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e02, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}}}, 0x0, 0x0, 0x32, 0x0, "2c814f1d5e91f2f82f16626ac71c6f613bddaf4ae2329f80214b347e70ab39dc5f252e7dbd363f54bc86180ba0b54f97e6bc612d6544359c1b1946653255a0c6e700b1fc95a181689a32da18d865ed46"}, 0xd8)
close_range(r6, 0xffffffffffffffff, 0x0)
bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0)

57.895062842s ago: executing program 32 (id=458):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = io_uring_setup(0x2754, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0), 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001500)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20)
ioctl$sock_bt_hci(r0, 0x400448cb, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r4 = syz_open_dev$ptys(0xc, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000600000000000000008500000007000000c5000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x7, 0x1c, 0x7ffd, 0xbffffffe, 0x2, "a4c82192e6aed8e89d0470331dabdd191e57ed"})
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e20, 0x5, @empty, 0xffffcd61}, @in6={0xa, 0x4e21, 0x5, @remote}, @in6={0xa, 0x4e23, 0x10001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x81}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}, @in6={0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}], 0xbc)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e02, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}}}, 0x0, 0x0, 0x32, 0x0, "2c814f1d5e91f2f82f16626ac71c6f613bddaf4ae2329f80214b347e70ab39dc5f252e7dbd363f54bc86180ba0b54f97e6bc612d6544359c1b1946653255a0c6e700b1fc95a181689a32da18d865ed46"}, 0xd8)
close_range(r6, 0xffffffffffffffff, 0x0)
bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0)

11.541767272s ago: executing program 1 (id=614):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000400)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r3, &(0x7f0000000000), &(0x7f0000000500)=""/216}, 0x20)

11.104273888s ago: executing program 1 (id=618):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00\x00'], 0x50)

11.097927746s ago: executing program 3 (id=619):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1e8}}, 0x0)

10.640814112s ago: executing program 1 (id=623):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac1414210000000000000000000000002001000000000000000000000000000000000000000000000000020000000000000000000000000000000000fe8000000000000000000000000000bb"], 0xec}}, 0x0)

10.637818044s ago: executing program 3 (id=624):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x2)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = fanotify_init(0x0, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000009c0)={0x1, @pix={0x0, 0x0, 0x55595659, 0x3, 0x4, 0x0, 0x7, 0xfffffffc}})
fanotify_mark(r2, 0x71, 0x1038, r3, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(r2, 0x455, 0x8, r3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_gstrings={0xf}})
r7 = socket(0x10, 0x803, 0x0)
r8 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000400000"], 0x0)
syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0)
getdents64(r3, &(0x7f0000000380)=""/226, 0xe2)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRES64=r8, @ANYRES32=0x0, @ANYRES16=r5, @ANYRES64=r3, @ANYBLOB='\b\x00\x00', @ANYRESOCT=r0, @ANYBLOB], 0x48}}, 0x0)

10.412558092s ago: executing program 4 (id=625):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="4c00000000080102000000000000000000000003050003002f0000000900010073797a310000000006000240001a0000140004800800014000000006080002"], 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x0)
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000180)=ANY=[@ANYBLOB='iocharset=15,novrs,unhide,gid=\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',uid=forget,longad,undelete,unhide,unhide,\x00'], 0x1, 0xc43, &(0x7f0000001040)="$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")
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
read(r2, 0x0, 0x0)
write$cgroup_pid(r2, &(0x7f00000000c0)=r1, 0x12)
close(r2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0)
r3 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x20, r5, 0x1, 0x70bd2d, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}}, 0x0)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000380)={r3, 0x9, {0x0, 0x0, 0x0, 0x8, 0x10, 0x0, 0x12, 0x4, 0x1, "124755b0cd17cb8548ca22d0c7709098988ad6eb765f6f039336af5f6e07bf1a2ab03051a2ac89cf98404c141ebdfba5349d7e60a27567bd70604147a94144c3", "36277a13f1f2b56ef7acdf60a70347d3b74d8a7f5aba92e355d5d45b85635be5b845177b4d982a96e10b22982d78e7b954ff3fb867473cf3ae24cb8ddaa94788", "2dfc7bba21f9b00e8f0bea062dd2925e7b1c95bbb52bfd8bdc1de7700bbcf3e1", [0x0, 0x2]}})
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
getdents64(0xffffffffffffffff, 0x0, 0x0)

10.186360003s ago: executing program 1 (id=627):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005880)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000000340)="$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")
mkdir(0x0, 0x5)
rmdir(&(0x7f0000000100)='./control\x00')

8.540115265s ago: executing program 1 (id=628):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x1000080002, 0x100000000000088)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c)
r2 = socket$inet6(0xa, 0x802, 0x88)
setsockopt$inet6_udp_int(r2, 0x11, 0x100000000a, &(0x7f0000000440)=0x800000001, 0x4)
sendto$inet6(r2, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x8be6, @dev={0xfe, 0x80, '\x00', 0xc}}, 0x1c)
sendto$inet6(r2, &(0x7f0000000400)="17", 0x1, 0x40000, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/24, 0x18}], 0x1}, 0x3}], 0x1, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005880)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000000340)="$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")
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000018000100000000000000000002000000fd01000900000000060015000600000014001680"], 0x38}}, 0x0)
r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
syz_fuse_handle_req(r3, &(0x7f0000000a00)="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", 0x2000, &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f0000000140)='./control\x00', 0x5)
r4 = inotify_init1(0x800)
fcntl$setstatus(r3, 0x4, 0x2c00)
gettid()
inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0xa4000960)
rmdir(&(0x7f0000000100)='./control\x00')

8.3419s ago: executing program 4 (id=631):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x1c02}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0)

7.888058282s ago: executing program 4 (id=632):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
pipe2$9p(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x18)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}})
splice(r0, 0x0, r2, 0x0, 0x200000000001, 0x0)

7.178867906s ago: executing program 3 (id=633):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x124}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x8c}}, 0x0)

7.079077044s ago: executing program 4 (id=634):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xe, 0x80000000, 0x10000000, 0xdbe, 0x300}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x0)

6.651550343s ago: executing program 3 (id=636):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff)
r1 = openat$cgroup_type(r0, &(0x7f0000000180), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)

6.621983236s ago: executing program 4 (id=637):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ptrace(0x10, r0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x20)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000)

6.209931532s ago: executing program 3 (id=640):
syz_usb_connect(0x0, 0x2b4, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0xc0, 0xe7, 0x9f, 0x10, 0x1199, 0x6859, 0xfd7d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2a2, 0x2, 0xf, 0x8, 0x60, 0x5, [{{0x9, 0x4, 0xae, 0x1, 0x9, 0xf7, 0x34, 0x51, 0x0, [], [{{0x9, 0x5, 0x5, 0x0, 0x0, 0x9, 0xf7, 0x3}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x8, 0x3, 0x4}}, {{0x9, 0x5, 0x8, 0xa, 0x20, 0x2, 0x2, 0x0, [@generic={0xe5, 0xe, "a052cbfb3cc656b28c4608c0bd92f9bda347fd10be0e9c2b13dd2ed50c46952e2c708a964e2a1e396fe540b469affc969ff306807e8bcb681b5359aae2fbec45e849314a5d207164559fa0d3a7901715c6f88637014630668338738db3f8fd5e17ceb4ac54d6bad431a34a6cd92601da9be59e9b5b2b96d7e2312264a9c265c0d23d1a49ce95baa0278e9a3ea0ed4b403c7bc6b11bdc07ab1d83fec72df41a89ef8cab1c150a5c943d58464827e246df1b4aacc305fb86626bfb9a7017aa9b278122c439a195ae57123968d87cbae01b0f4cddf3211367df225a3c0c2aa7efb65af531"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x7, 0x1, 0x8}}, {{0x9, 0x5, 0x2, 0x8, 0x3ff, 0x1, 0xb, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x8}]}}, {{0x9, 0x5, 0xc, 0x1, 0x20, 0x9, 0xc0}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x53, 0x6, 0x12, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x94, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x88}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x24, 0xac, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8e, 0x3ff}]}}, {{0x9, 0x5, 0x794fab014817e5b7, 0x8, 0x20, 0x32, 0xb, 0x4, [@generic={0x6c, 0xc, "a5c48224b081cbdaba331dc6ecfe041ab405618d2b2569dac0d8216989fbc7917aa964ca3b3dc90d160c393e40e123f3cea7ab855bd365475133b3eeebc880cca4fd1cf34ca0377fc8d2804e246d7d33256c9a16da53f21dc22f90213a70ab794d6a7aef880768d27deb"}]}}]}}, {{0x9, 0x4, 0x5, 0x80, 0x5, 0x9f, 0xaa, 0xe4, 0x2, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x0, 0x0, 0x7}, {0x6, 0x24, 0x1a, 0x3, 0x1b}}], [{{0x9, 0x5, 0x8, 0x10, 0x400, 0x3, 0x0, 0x5}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x5, 0x9f, 0x0, [@generic={0x7d, 0x3, "c1cdd47f804b8104322a950414dbb04feb4f7c21f00c0e27333004ff3d16430a7f683c18de607cc10b33c30ee8462cafabcee66dc1f200b9fd9bc3a62690db14e6df0382541276ba20dacea4c3e6df8aaeba5d62227e75f831a4822fda2f55e19e9265f2aa5139962fec399bc31fafc25c4ffeacae570a9d7a9fc9"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x4c, 0x90, 0xe, [@generic={0x2, 0x4}]}}, {{0x9, 0x5, 0xa, 0x4, 0x40, 0xe, 0xfc}}, {{0x9, 0x5, 0x8a, 0x10, 0x10, 0x5, 0xf6, 0x8}}]}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x8, 0x9, 0x7, 0x8, 0xc}, 0x0, 0x0, 0x2, [{0x51, &(0x7f0000000ac0)=@string={0x51, 0x3, "2699598513429c9cdbf122e48a3d9ba9834e262925d86acfd4190bd2a5af4eab6c6c28af74b483eb61d820e405749b4fc1db527fd173736b2c16d058a746d57067584637be015087c3ec7e0c9bae86"}}, {0x17, &(0x7f0000000140)=@string={0x17, 0x3, "67baf4a2c144ab5731d68c06bf92adaac23600e17e"}}]})
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

5.799005977s ago: executing program 4 (id=643):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x2)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = fanotify_init(0x0, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000009c0)={0x1, @pix={0x0, 0x0, 0x55595659, 0x3, 0x4, 0x0, 0x7, 0xfffffffc}})
fanotify_mark(r2, 0x71, 0x1038, r3, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(r2, 0x455, 0x8, r3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_gstrings={0xf}})
r7 = socket(0x10, 0x803, 0x0)
r8 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f010000000040000000000904010000020d"], 0x0)
syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0)
getdents64(r3, &(0x7f0000000380)=""/226, 0xe2)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRES64=r8, @ANYRES32=0x0, @ANYRES16=r5, @ANYRES64=r3, @ANYBLOB='\b\x00\x00', @ANYRESOCT=r0, @ANYBLOB], 0x48}}, 0x0)

4.548860224s ago: executing program 5 (id=646):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x124}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x8c}}, 0x0)

4.22090182s ago: executing program 5 (id=648):
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="007301e3fd18fb9c322293c67dcde48bfeffd1843c336e09b34af65ad26aafded7da5cfeeda2b8d8d900c2195f00f646f699eeb47813177405a6a6baf786c0d14f2079a9efa9db8973bcca25eb2973856c6760a483c41d0980c78a4cb096a5affa6b980600000000000000a1eacd2c820176737d4eb55dca564820dd769d8742f6d9ab243775a67afcdf845f978e95365cdf6f30aa43423b381881433e00ccbe6353b21300d8f0ca972589398eef9487db78486fcf174990c488031f8b39cd01bb509f3ea4bcde33d4c9e305ecb4dd88204c5d7bb5e469cabfda0feca3ce70c0acbc34d13e5a5c796eab23abfe3b717834f8e9d7120e1e925c4e210b4152c75210b3e979fbe8ddf23eef2d53733209b22206e0a4afc354c33d7ca2a00116a14d686e4aa86b6ec6a4130178c3ad8c723c0d8506bd7bff780000000000000000004b2ec61cfde813cc124715aaaf5508b93d8cf0860042108b660b74f94b1e4851eeec09fdb7a617eabeeeff8ce8bb99f4b1f9c2896cf31e19c3c24155b0ea7dc3cae1b56acb1946830cad94af3f1caf43ea03b38fc08a7e19480e283a4c0d", @ANYRESOCT, @ANYRES16, @ANYRES16=0x0, @ANYRES16=0x0, @ANYRESHEX, @ANYRESOCT], 0x3, 0x1f9, &(0x7f00000001c0)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e21, 0x6, @private1, 0x2}}, 0x8, 0x6, 0x7fff, 0x0, 0x8}, &(0x7f0000000080)=0x98)

3.916026302s ago: executing program 3 (id=650):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0)
ftruncate(r0, 0xc17a)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
syz_usb_connect(0x3, 0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e9000009"], 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'})
recvmmsg(r2, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000002040)=""/73, 0x49}], 0x1}}], 0x1, 0x60, 0x0)

3.684073678s ago: executing program 5 (id=651):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x0)

2.787765488s ago: executing program 0 (id=652):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

2.744650064s ago: executing program 5 (id=653):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ptrace(0x10, r0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x20)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000)

2.582249603s ago: executing program 0 (id=654):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="c4000000190001000000000000000000e000000200000000000000000000000000000000000000000000000000000000000000004e2300000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000060000000000000000000000000000000000000000000000f6ffffffffffffffffffffffffffffff0000"], 0xc4}}, 0x14)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x200, 0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2b}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x1}}}, 0xb8}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x4c, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6", 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.243793113s ago: executing program 0 (id=655):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40814)
recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a0091000b00b80000fc005f02"], 0xfe33)

1.582596269s ago: executing program 0 (id=656):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x3}]}, {0x0, [0x30, 0x0, 0x5f]}}, 0x0, 0x29}, 0x20)

1.381103842s ago: executing program 5 (id=657):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0)

828.068376ms ago: executing program 5 (id=658):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffd}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

666.104351ms ago: executing program 0 (id=659):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb011018"], 0x0, 0x56, 0x0, 0x1, 0x4}, 0x28)

409.888913ms ago: executing program 1 (id=660):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d888f1d1c4e5ad85ce4966dbd0000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce2d712d2828da0a9423debb386f9dba4a2dba4dbe076c292c"], 0xe0}], 0x1}, 0x0)

0s ago: executing program 0 (id=661):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x14, 0x36, 0x682fe9a2f410d097, 0x70bd26, 0x27dfdbfe, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20040010)

kernel console output (not intermixed with test programs):

UASHFS error: Unable to read metadata cache entry [2fa]
[  396.977086][ T7635] SQUASHFS error: read_indexes: reading block [2fa:0]
[  396.984657][ T7635] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  396.992354][ T7635] SQUASHFS error: read_indexes: reading block [2fa:0]
[  397.000188][ T7635] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  397.007793][ T7635] SQUASHFS error: read_indexes: reading block [2fa:0]
[  397.015321][ T7635] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  397.023012][ T7635] SQUASHFS error: read_indexes: reading block [2fa:0]
[  397.070720][   T30] audit: type=1800 audit(1755255469.483:298): pid=7635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.383" name="file1" dev="loop2" ino=5 res=0 errno=0
[  397.380118][   T11] gspca_sunplus: reg_r err -110
[  397.385561][   T11] sunplus 5-1:0.0: probe with driver sunplus failed with error -110
[  397.526769][ T7634] loop1: detected capacity change from 0 to 32768
[  397.692038][ T7634] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  397.692185][ T7634]   allowing incompatible features above 0.0: (unknown version)
[  397.692275][ T7634]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  397.735775][ T7634] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  397.745517][ T7634] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  397.759818][ T7634] bcachefs (loop1): Version upgrade required:
[  397.759818][ T7634] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  397.759818][ T7634] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  397.759818][ T7634]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  397.869368][ T7634] bcachefs (loop1): dropping and reconstructing all alloc info
[  397.984890][ T7634] bcachefs (loop1): accounting_read... done
[  398.001759][ T7634] bcachefs (loop1): alloc_read... done
[  398.012080][ T7634] bcachefs (loop1): snapshots_read... done
[  398.022838][ T7634] bcachefs (loop1): check_allocations... done
[  398.138398][ T7634] bcachefs (loop1): going read-write
[  398.193020][ T7634] bcachefs (loop1): done starting filesystem
[  398.330232][ T5813] bcachefs (loop1): shutting down
[  398.335664][ T5813] bcachefs (loop1): going read-only
[  398.342383][ T5813] bcachefs (loop1): finished waiting for writes to stop
[  398.426979][ T5813] bcachefs (loop1): flushing journal and stopping allocators, journal seq 10
[  398.489995][ T5813] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 10
[  398.526655][ T5813] bcachefs (loop1): unclean shutdown complete, journal seq 11
[  398.547081][ T5813] bcachefs (loop1): done going read-only, filesystem not clean
[  398.598088][ T5813] bcachefs (loop1): shutdown complete
[  398.738620][ T7654] loop3: detected capacity change from 0 to 1024
[  398.812730][ T7654] hfsplus: Bad value for 'uid'
[  398.855106][   T11] usb 5-1: USB disconnect, device number 13
[  398.947509][ T7654] netlink: 16 bytes leftover after parsing attributes in process `syz.3.398'.
[  399.149639][ T7660] loop4: detected capacity change from 0 to 256
[  399.252212][ T7665] loop3: detected capacity change from 0 to 512
[  399.279563][ T7665] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 3: comm syz.3.403: lblock 0 mapped to illegal pblock 3 (length 1)
[  399.301759][ T7660] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  399.324928][ T7665] EXT4-fs (loop3): Remounting filesystem read-only
[  399.336312][ T7665] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.403: error -117 reading directory block
[  399.368342][ T7665] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  399.379372][ T7665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  399.634729][ T1593] usb 5-1: new low-speed USB device number 14 using dummy_hcd
[  399.665868][ T7672] fuse: Bad value for 'user_id'
[  399.674730][ T7672] fuse: Bad value for 'user_id'
[  399.682326][ T7672] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffb,4)
[  399.690579][ T7672] comedi comedi3: 8255: I/O port conflict (0x7,4)
[  399.697409][ T7672] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  399.708707][ T7672] comedi comedi3: 8255: I/O port conflict (0x100000,4)
[  399.716017][ T7672] comedi comedi3: 8255: I/O port conflict (0x40088d6,4)
[  399.723373][ T7672] comedi comedi3: 8255: I/O port conflict (0x8f,4)
[  399.730396][ T7672] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[  399.738413][ T7672] comedi comedi3: 8255: I/O port conflict (0x100810,4)
[  399.745695][ T7672] comedi comedi3: 8255: I/O port conflict (0x1000002,4)
[  399.753052][ T7672] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4)
[  399.761367][ T7672] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  399.768051][ T7672] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  399.774900][ T7672] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  399.781752][ T7672] comedi comedi3: 8255: I/O port conflict (0x7,4)
[  399.788520][ T7672] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  399.795482][ T7672] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  399.802366][ T7672] comedi comedi3: 8255: I/O port conflict (0x100,4)
[  399.813559][ T7672] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  399.836127][ T1593] usb 5-1: config index 0 descriptor too short (expected 1307, got 27)
[  399.845920][ T1593] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  399.855273][ T1593] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  399.865303][ T1593] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  399.877247][ T1593] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  399.887599][ T1593] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  400.044216][ T1593] usb 5-1: string descriptor 0 read error: -22
[  400.051186][ T1593] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  400.060688][ T1593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  400.114557][ T1593] usb 5-1: config 0 descriptor??
[  400.123078][ T7660] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  400.161067][ T1593] hub 5-1:0.0: bad descriptor, ignoring hub
[  400.167403][ T1593] hub 5-1:0.0: probe with driver hub failed with error -5
[  400.183429][ T1593] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11
[  400.821636][ T7672] loop2: detected capacity change from 0 to 40427
[  400.910348][ T7672] F2FS-fs (loop2): Image doesn't support compression
[  400.917593][ T7672] F2FS-fs (loop2): build fault injection rate: 19
[  400.924430][ T7672] F2FS-fs (loop2): build fault injection type: 0x3bfe8c
[  401.085502][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  401.206302][   T30] audit: type=1800 audit(1755255473.823:299): pid=7660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.401" name="bus" dev="loop4" ino=1048603 res=0 errno=0
[  401.227531][    C0] vkms_vblank_simulate: vblank timer overrun
[  401.230576][ T7678] loop0: detected capacity change from 0 to 40427
[  401.281484][ T7672] F2FS-fs (loop2): invalid crc value
[  401.282600][ T7678] F2FS-fs (loop0): build fault injection rate: 14
[  401.293633][ T7678] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[  401.304537][ T7678] F2FS-fs (loop0): invalid crc value
[  401.306909][ T7660] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253
[  401.317118][ T7660] PKCS7: Only support pkcs7_signedData type
[  401.510450][    C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of bio_endio+0xe24/0xf80
[  401.528752][    C1] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of bio_endio+0xe24/0xf80
[  401.652942][ T7672] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xd0b/0x1e80
[  401.935897][ T7678] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  401.945548][ T7678] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_get_tmp_folio+0x38/0x50
[  401.977928][ T7678] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  401.994542][ T7678] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x831/0x19b0
[  402.183907][ T7684] loop3: detected capacity change from 0 to 32768
[  402.222597][ T7678] F2FS-fs (loop0): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x129f/0x2fc0
[  402.235299][ T7678] F2FS-fs (loop0): inconsistent node block, node_type:0, nid:11, node_footer[nid:11,ino:3,ofs:2041,cpver:0,blkaddr:0]
[  402.238178][ T7672] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x1d2/0x4b0
[  402.315401][ T7672] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  402.334630][ T7672] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  402.360297][    C0] F2FS-fs (loop0): inject write IO error in f2fs_write_end_io of bio_endio+0xe24/0xf80
[  402.370414][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(none) 
[  402.370575][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  402.370660][    C0] Call Trace:
[  402.370710][    C0]  <TASK>
[  402.370762][    C0]  __dump_stack+0x26/0x30
[  402.370943][    C0]  dump_stack_lvl+0x1df/0x270
[  402.371117][    C0]  dump_stack+0x1e/0x25
[  402.371273][    C0]  f2fs_handle_critical_error+0xa6f/0xc20
[  402.371497][    C0]  f2fs_stop_checkpoint+0x65/0x80
[  402.371687][    C0]  f2fs_write_end_io+0x101c/0x1bc0
[  402.371922][    C0]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  402.372111][    C0]  bio_endio+0xe24/0xf80
[  402.372322][    C0]  blk_update_request+0xf4c/0x1a90
[  402.372552][    C0]  blk_mq_end_request+0x50/0xb0
[  402.372743][    C0]  blk_flush_complete_seq+0xb1d/0x1940
[  402.372897][    C0]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  402.373072][    C0]  flush_end_io+0x12c3/0x17b0
[  402.373234][    C0]  ? __pfx_flush_end_io+0x10/0x10
[  402.373368][    C0]  __blk_mq_end_request+0x5a3/0x940
[  402.373577][    C0]  blk_mq_end_request+0x6e/0xb0
[  402.373769][    C0]  lo_complete_rq+0x188/0x3a0
[  402.373925][    C0]  ? __pfx_lo_complete_rq+0x10/0x10
[  402.374077][    C0]  blk_done_softirq+0x112/0x1f0
[  402.374247][    C0]  ? __pfx_blk_done_softirq+0x10/0x10
[  402.374415][    C0]  handle_softirqs+0x166/0x6e0
[  402.374581][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  402.374731][    C0]  run_ksoftirqd+0x29/0x50
[  402.374886][    C0]  smpboot_thread_fn+0x56c/0xa30
[  402.375101][    C0]  kthread+0xd59/0xf00
[  402.375235][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  402.375444][    C0]  ? __pfx_kthread+0x10/0x10
[  402.375586][    C0]  ret_from_fork+0x1e3/0x310
[  402.375721][    C0]  ? __pfx_kthread+0x10/0x10
[  402.375865][    C0]  ret_from_fork_asm+0x1a/0x30
[  402.376072][    C0]  </TASK>
[  402.376122][    C0] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  402.563731][    C0] vkms_vblank_simulate: vblank timer overrun
[  402.590793][ T5818] F2FS-fs (loop0): do_checkpoint failed err:-5, stop checkpoint
[  402.733635][ T7684] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  402.733785][ T7684]   allowing incompatible features above 0.0: (unknown version)
[  402.733874][ T7684]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  402.779389][ T7684] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  402.788469][ T7684] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  402.798606][ T7684] bcachefs (loop3): Version upgrade required:
[  402.798606][ T7684] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  402.798606][ T7684] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  402.798606][ T7684]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  402.900670][ T7684] bcachefs (loop3): dropping and reconstructing all alloc info
[  402.922184][ T7672] syz.2.405: attempt to access beyond end of device
[  402.922184][ T7672] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  402.987967][ T7684] bcachefs (loop3): accounting_read... done
[  403.016253][ T7684] bcachefs (loop3): alloc_read... done
[  403.026693][ T7684] bcachefs (loop3): snapshots_read... done
[  403.094482][ T7684] bcachefs (loop3): check_allocations...
[  403.178604][ T1593] usb 5-1: USB disconnect, device number 14
[  403.302229][ T7684]  done
[  403.338700][ T7684] bcachefs (loop3): going read-write
[  403.565939][ T7684] bcachefs (loop3): done starting filesystem
[  403.680336][ T5827] bcachefs (loop3): shutting down
[  403.685539][ T5827] bcachefs (loop3): going read-only
[  403.691486][ T5827] bcachefs (loop3): finished waiting for writes to stop
[  403.771980][ T5827] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10
[  403.791053][ T5827] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 10
[  403.866416][ T5827] bcachefs (loop3): unclean shutdown complete, journal seq 11
[  403.917284][ T5827] bcachefs (loop3): done going read-only, filesystem not clean
[  404.054859][ T5827] bcachefs (loop3): shutdown complete
[  405.052953][ T7708] loop4: detected capacity change from 0 to 512
[  405.063121][ T7710] loop1: detected capacity change from 0 to 128
[  405.086574][ T7710] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  405.153949][ T7710] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  405.175747][ T7708] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.414: bg 0: block 248: padding at end of block bitmap is not set
[  405.194812][ T7708] Quota error (device loop4): write_blk: dquota write failed
[  405.203343][ T7708] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  405.215422][ T7708] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.414: Failed to acquire dquot type 1
[  405.242802][ T7708] EXT4-fs (loop4): 1 truncate cleaned up
[  405.251728][ T7708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  405.264853][ T7708] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  405.300298][ T7717] loop2: detected capacity change from 0 to 128
[  405.529857][ T5817] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  405.543914][   T14] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5
[  405.554021][   T14] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1
[  405.893916][ T7726] FAULT_INJECTION: forcing a failure.
[  405.893916][ T7726] name failslab, interval 1, probability 0, space 0, times 0
[  405.907124][ T7726] CPU: 0 UID: 0 PID: 7726 Comm: syz.4.417 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(none) 
[  405.907279][ T7726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  405.907361][ T7726] Call Trace:
[  405.907414][ T7726]  <TASK>
[  405.907464][ T7726]  __dump_stack+0x26/0x30
[  405.907638][ T7726]  dump_stack_lvl+0x1df/0x270
[  405.907820][ T7726]  dump_stack+0x1e/0x25
[  405.907976][ T7726]  should_fail_ex+0x7dc/0x8a0
[  405.908182][ T7726]  should_failslab+0x15b/0x200
[  405.908351][ T7726]  kmem_cache_alloc_noprof+0xf0/0xec0
[  405.908526][ T7726]  ? skb_clone+0x3ca/0x580
[  405.908684][ T7726]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  405.908851][ T7726]  ? kmsan_get_metadata+0xfb/0x160
[  405.909020][ T7726]  skb_clone+0x3ca/0x580
[  405.909177][ T7726]  __netlink_deliver_tap+0x695/0xdd0
[  405.909350][ T7726]  ? kmsan_get_metadata+0xfb/0x160
[  405.909514][ T7726]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  405.909687][ T7726]  netlink_sendskb+0x224/0x270
[  405.909841][ T7726]  netlink_unicast+0x768/0x12b0
[  405.910004][ T7726]  netlink_ack+0xacc/0xf80
[  405.910142][ T7726]  ? stack_depot_save_flags+0x35/0x7b0
[  405.910365][ T7726]  netlink_rcv_skb+0x3f9/0x680
[  405.910534][ T7726]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  405.910735][ T7726]  rtnetlink_rcv+0x35/0x40
[  405.910892][ T7726]  ? __pfx_rtnetlink_rcv+0x10/0x10
[  405.911053][ T7726]  netlink_unicast+0xf01/0x12b0
[  405.911215][ T7726]  netlink_sendmsg+0x10b3/0x1250
[  405.911395][ T7726]  ? __pfx_netlink_sendmsg+0x10/0x10
[  405.911541][ T7726]  ? __pfx_netlink_sendmsg+0x10/0x10
[  405.911695][ T7726]  __sock_sendmsg+0x333/0x3d0
[  405.911885][ T7726]  ____sys_sendmsg+0x7e0/0xd80
[  405.912073][ T7726]  ___sys_sendmsg+0x271/0x3b0
[  405.912250][ T7726]  ? __rcu_read_unlock+0x6d/0xd0
[  405.912395][ T7726]  ? __fget_files+0x3b4/0x4a0
[  405.912563][ T7726]  ? __fget_files+0x3b9/0x4a0
[  405.912747][ T7726]  ? kmsan_get_metadata+0xfb/0x160
[  405.912903][ T7726]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  405.913075][ T7726]  __x64_sys_sendmsg+0x211/0x3e0
[  405.913244][ T7726]  ? kmsan_get_metadata+0xfb/0x160
[  405.913418][ T7726]  x64_sys_call+0x1dfd/0x3e20
[  405.913599][ T7726]  do_syscall_64+0xd9/0x210
[  405.913767][ T7726]  ? irqentry_exit+0x16/0x60
[  405.913911][ T7726]  ? clear_bhb_loop+0x40/0x90
[  405.914082][ T7726]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.914230][ T7726] RIP: 0033:0x7f0f8bb8ebe9
[  405.914331][ T7726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  405.914448][ T7726] RSP: 002b:00007f0f8cac3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  405.914576][ T7726] RAX: ffffffffffffffda RBX: 00007f0f8bdb5fa0 RCX: 00007f0f8bb8ebe9
[  405.914676][ T7726] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000006
[  405.914768][ T7726] RBP: 00007f0f8cac3090 R08: 0000000000000000 R09: 0000000000000000
[  405.914854][ T7726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  405.914950][ T7726] R13: 00007f0f8bdb6038 R14: 00007f0f8bdb5fa0 R15: 00007ffce713ece8
[  405.915080][ T7726]  </TASK>
[  406.783894][ T7724] loop0: detected capacity change from 0 to 40427
[  406.813361][ T7724] F2FS-fs (loop0): build fault injection rate: 14
[  406.820107][ T7724] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[  406.894447][ T7724] F2FS-fs (loop0): invalid crc value
[  406.919677][ T5871] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  406.963653][    C1] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of bio_endio+0xe24/0xf80
[  406.995330][    C1] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of bio_endio+0xe24/0xf80
[  407.325519][ T7724] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  407.335160][ T7724] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_get_tmp_folio+0x38/0x50
[  407.357752][ T7724] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  407.368354][ T5871] usb 3-1: Using ep0 maxpacket: 32
[  407.407486][ T7732] loop1: detected capacity change from 0 to 32768
[  407.415641][ T7724] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x831/0x19b0
[  407.447263][ T7724] F2FS-fs (loop0): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x129f/0x2fc0
[  407.461181][ T7724] F2FS-fs (loop0): inconsistent node block, node_type:0, nid:11, node_footer[nid:11,ino:3,ofs:2041,cpver:0,blkaddr:0]
[  407.477346][ T5871] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  407.490917][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.608722][    C1] F2FS-fs (loop0): inject write IO error in f2fs_write_end_io of bio_endio+0xe24/0xf80
[  407.618844][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(none) 
[  407.618993][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  407.619071][    C1] Call Trace:
[  407.619120][    C1]  <TASK>
[  407.619171][    C1]  __dump_stack+0x26/0x30
[  407.619335][    C1]  dump_stack_lvl+0x1df/0x270
[  407.619505][    C1]  dump_stack+0x1e/0x25
[  407.619661][    C1]  f2fs_handle_critical_error+0xa6f/0xc20
[  407.619872][    C1]  f2fs_stop_checkpoint+0x65/0x80
[  407.620053][    C1]  f2fs_write_end_io+0x101c/0x1bc0
[  407.620276][    C1]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  407.620456][    C1]  bio_endio+0xe24/0xf80
[  407.620657][    C1]  blk_update_request+0xf4c/0x1a90
[  407.620884][    C1]  blk_mq_end_request+0x50/0xb0
[  407.621064][    C1]  blk_flush_complete_seq+0xb1d/0x1940
[  407.621205][    C1]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  407.621368][    C1]  flush_end_io+0x12c3/0x17b0
[  407.621520][    C1]  ? __pfx_flush_end_io+0x10/0x10
[  407.621652][    C1]  __blk_mq_end_request+0x5a3/0x940
[  407.621854][    C1]  blk_mq_end_request+0x6e/0xb0
[  407.622033][    C1]  lo_complete_rq+0x188/0x3a0
[  407.622206][    C1]  ? __pfx_lo_complete_rq+0x10/0x10
[  407.622354][    C1]  blk_done_softirq+0x112/0x1f0
[  407.622517][    C1]  ? __pfx_blk_done_softirq+0x10/0x10
[  407.622682][    C1]  handle_softirqs+0x166/0x6e0
[  407.622835][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  407.622981][    C1]  run_ksoftirqd+0x29/0x50
[  407.623119][    C1]  smpboot_thread_fn+0x56c/0xa30
[  407.623324][    C1]  kthread+0xd59/0xf00
[  407.623450][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  407.623656][    C1]  ? __pfx_kthread+0x10/0x10
[  407.623788][    C1]  ret_from_fork+0x1e3/0x310
[  407.623917][    C1]  ? __pfx_kthread+0x10/0x10
[  407.624052][    C1]  ret_from_fork_asm+0x1a/0x30
[  407.624252][    C1]  </TASK>
[  407.624300][    C1] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  407.829303][ T5871] usb 3-1: config 0 descriptor??
[  407.846527][ T5818] F2FS-fs (loop0): do_checkpoint failed err:-5, stop checkpoint
[  407.886549][ T7732] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  407.886694][ T7732]   allowing incompatible features above 0.0: (unknown version)
[  407.886781][ T7732]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  407.903650][ T5871] gspca_main: sq930x-2.14.0 probing 041e:403c
[  407.911005][ T7732] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  407.946223][ T7732] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  407.955880][ T7732] bcachefs (loop1): Version upgrade required:
[  407.955880][ T7732] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  407.955880][ T7732] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  407.955880][ T7732]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  408.043069][ T7732] bcachefs (loop1): dropping and reconstructing all alloc info
[  408.427330][ T5871] gspca_sq930x: reg_r 001f failed -110
[  408.433552][ T5871] sq930x 3-1:0.0: probe with driver sq930x failed with error -110
[  408.443090][ T7727] loop2: detected capacity change from 0 to 764
[  408.463441][ T7732] bcachefs (loop1): accounting_read...
[  408.468497][ T7745] loop4: detected capacity change from 0 to 1024
[  408.488746][ T7732]  done
[  408.492161][ T7732] bcachefs (loop1): alloc_read...
[  408.513258][ T7732]  done
[  408.516365][ T7732] bcachefs (loop1): snapshots_read... done
[  408.575718][ T7732] bcachefs (loop1): check_allocations...
[  408.576611][ T7745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  408.598850][ T7727] Symlink component flag not implemented
[  408.605043][ T7727] Symlink component flag not implemented (101)
[  408.686991][ T7745] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #14: comm syz.4.422: attempt to clear invalid blocks 1886221359 len 1
[  408.741358][ T7732]  done
[  408.757099][ T7732] bcachefs (loop1): going read-write
[  408.847522][ T7732] bcachefs (loop1): done starting filesystem
[  408.962123][ T5817] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  408.974482][ T5813] bcachefs (loop1): shutting down
[  408.980885][ T5813] bcachefs (loop1): going read-only
[  408.987694][ T5813] bcachefs (loop1): finished waiting for writes to stop
[  409.054263][ T5813] bcachefs (loop1): flushing journal and stopping allocators, journal seq 10
[  409.098542][ T5813] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 10
[  409.170394][ T5813] bcachefs (loop1): unclean shutdown complete, journal seq 11
[  409.231497][ T5813] bcachefs (loop1): done going read-only, filesystem not clean
[  409.330132][ T5813] bcachefs (loop1): shutdown complete
[  409.459976][ T7758] ------------[ cut here ]------------
[  409.465784][ T7758] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0xfffffffefffff630, 0xffffffff00000000] s64=[0xfffffffefffff630, 0xffffffff00000000] u32=[0x30, 0x8000050] s32=[0x30, 0x0] var_off=(0xfffffffe00000030, 0x10fffffc0)(1)
[  409.491028][ T7758] WARNING: CPU: 0 PID: 7758 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0xb26/0x14b0
[  409.501897][ T7758] Modules linked in:
[  409.506042][ T7758] CPU: 0 UID: 0 PID: 7758 Comm: syz.4.424 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(none) 
[  409.518338][ T7758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  409.529256][ T7758] RIP: 0010:reg_bounds_sanity_check+0xb26/0x14b0
[  409.540220][ T7758] Code: ff ff ff b5 20 ff ff ff ff b5 18 ff ff ff ff b5 48 ff ff ff ff b5 10 ff ff ff ff b5 08 ff ff ff e8 6f 17 02 ff 48 83 c4 38 90 <0f> 0b 90 90 4c 8b bd 70 ff ff ff e9 83 f8 ff ff 8b 3a e8 03 5b 79
[  409.561739][ T7758] RSP: 0018:ffff88813eb82f58 EFLAGS: 00010282
[  409.568096][ T7758] RAX: ffffffff81207e8e RBX: ffff888067491968 RCX: ffff88804dd920c0
[  409.576525][ T7758] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000002
[  409.584856][ T7758] RBP: ffff88813eb830d8 R08: 00000000000154db R09: 0000000000400000
[  409.593172][ T7758] R10: 00000000002a9b68 R11: ffff88823f263620 R12: 0000000000000000
[  409.601491][ T7758] R13: ffff88804dd92c20 R14: 0000000000000000 R15: 0000000000000000
[  409.609895][ T7758] FS:  00007f0f8cac36c0(0000) GS:ffff8881aa698000(0000) knlGS:0000000000000000
[  409.619663][ T7758] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  409.626453][ T7758] CR2: 0000001b30314ff8 CR3: 0000000116fae000 CR4: 00000000003526f0
[  409.638542][ T7758] Call Trace:
[  409.643453][ T7758]  <TASK>
[  409.646545][ T7758]  ? kmsan_get_metadata+0xfb/0x160
[  409.652230][ T7758]  reg_set_min_max+0x3a8/0x440
[  409.657253][ T7758]  check_cond_jmp_op+0x3187/0x4820
[  409.662850][ T7758]  do_check+0x2374/0x15760
[  409.667492][ T7758]  ? kmsan_get_metadata+0xfb/0x160
[  409.673034][ T7758]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  409.679668][ T7758]  do_check_common+0x2482/0x3740
[  409.684882][ T7758]  bpf_check+0x61f8/0x2a100
[  409.689794][ T7758]  ? pcpu_block_refresh_hint+0x450/0x580
[  409.695658][ T7758]  ? kmsan_get_metadata+0xfb/0x160
[  409.701175][ T7758]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  409.707245][ T7758]  ? pcpu_block_update_hint_alloc+0x12df/0x1390
[  409.714270][ T7758]  ? kmsan_get_metadata+0x150/0x160
[  409.719858][ T7758]  ? kmsan_get_metadata+0xfb/0x160
[  409.725212][ T7758]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  409.732034][ T7758]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  409.742618][ T7758]  ? kmsan_get_metadata+0xfb/0x160
[  409.748015][ T7758]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  409.755617][ T7758]  ? kmsan_get_metadata+0xfb/0x160
[  409.761388][ T7758]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  409.767473][ T7758]  ? strncpy_from_user+0xb1/0x470
[  409.772989][ T7758]  ? stack_depot_save_flags+0x35/0x7b0
[  409.778727][ T7758]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  409.785411][ T7758]  ? kmsan_get_metadata+0xfb/0x160
[  409.790948][ T7758]  ? kmsan_get_metadata+0xfb/0x160
[  409.796294][ T7758]  ? kmsan_get_metadata+0xfb/0x160
[  409.801812][ T7758]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  409.808420][ T7758]  ? kmsan_get_metadata+0xfb/0x160
[  409.814071][ T7758]  ? kmsan_get_metadata+0xfb/0x160
[  409.819557][ T7758]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  409.825645][ T7758]  bpf_prog_load+0x28e6/0x2e50
[  409.830829][ T7758]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  409.837396][ T7758]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  409.847805][ T7758]  ? security_bpf+0x88/0x620
[  409.854014][ T7758]  ? _copy_from_user+0xcb/0x100
[  409.859255][ T7758]  __sys_bpf+0x7f4/0xed0
[  409.863767][ T7758]  __x64_sys_bpf+0xa4/0xf0
[  409.868465][ T7758]  x64_sys_call+0x3550/0x3e20
[  409.873678][ T7758]  do_syscall_64+0xd9/0x210
[  409.875676][ T7763] netlink: 28 bytes leftover after parsing attributes in process `syz.3.427'.
[  409.878397][ T7758]  ? irqentry_exit+0x16/0x60
[  409.878554][ T7758]  ? clear_bhb_loop+0x40/0x90
[  409.888031][ T7763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.427'.
[  409.892350][ T7758]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.912170][ T7758] RIP: 0033:0x7f0f8bb8ebe9
[  409.916774][ T7758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  409.937832][ T7758] RSP: 002b:00007f0f8cac3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  409.950702][ T7758] RAX: ffffffffffffffda RBX: 00007f0f8bdb5fa0 RCX: 00007f0f8bb8ebe9
[  409.958892][ T7758] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005
[  409.968727][ T7758] RBP: 00007f0f8bc11e19 R08: 0000000000000000 R09: 0000000000000000
[  409.977071][ T7758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  409.985399][ T7758] R13: 00007f0f8bdb6038 R14: 00007f0f8bdb5fa0 R15: 00007ffce713ece8
[  409.993852][ T7758]  </TASK>
[  409.997009][ T7758] ---[ end trace 0000000000000000 ]---
[  410.319726][   T11] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  410.470439][   T11] usb 4-1: device descriptor read/64, error -71
[  410.609191][ T7771] loop4: detected capacity change from 0 to 128
[  410.719307][   T11] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  410.839734][ T5871] usb 3-1: USB disconnect, device number 11
[  410.881042][   T11] usb 4-1: device descriptor read/64, error -71
[  410.897378][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.430'.
[  410.907101][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.430'.
[  411.020890][   T11] usb usb4-port1: attempt power cycle
[  411.152222][ T7774] loop0: detected capacity change from 0 to 2048
[  411.370643][ T7774] iocharset 15 not found
[  411.419378][   T11] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  411.451399][   T11] usb 4-1: device descriptor read/8, error -71
[  411.699504][   T11] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  411.791483][   T11] usb 4-1: device descriptor read/8, error -71
[  411.869304][    T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  411.904622][   T11] usb usb4-port1: unable to enumerate USB device
[  412.662179][ T7786] loop0: detected capacity change from 0 to 32768
[  412.772367][    T9] usb 5-1: Using ep0 maxpacket: 32
[  412.821443][ T7786] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  412.821590][ T7786]   allowing incompatible features above 0.0: (unknown version)
[  412.821703][ T7786]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  412.864876][ T7786] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  412.874104][ T7786] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[  412.883688][ T7786] bcachefs (loop0): Version upgrade required:
[  412.883688][ T7786] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  412.883688][ T7786] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  412.883688][ T7786]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  412.983356][ T7786] bcachefs (loop0): dropping and reconstructing all alloc info
[  412.996806][    T9] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  413.006249][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.073659][    T9] usb 5-1: config 0 descriptor??
[  413.088161][ T7786] bcachefs (loop0): accounting_read...
[  413.110069][    T9] gspca_main: nw80x-2.14.0 probing 055f:d001
[  413.140891][ T7786]  done
[  413.143961][ T7786] bcachefs (loop0): alloc_read... done
[  413.156838][ T7786] bcachefs (loop0): snapshots_read... done
[  413.170432][ T7786] bcachefs (loop0): check_allocations... done
[  413.458223][ T7786] bcachefs (loop0): going read-write
[  413.465814][ T7784] loop4: detected capacity change from 0 to 1024
[  413.470855][ T7799] FAULT_INJECTION: forcing a failure.
[  413.470855][ T7799] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  413.485821][ T7799] CPU: 0 UID: 0 PID: 7799 Comm: syz.1.425 Tainted: G        W           6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(none) 
[  413.486003][ T7799] Tainted: [W]=WARN
[  413.486057][ T7799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  413.486134][ T7799] Call Trace:
[  413.486184][ T7799]  <TASK>
[  413.486233][ T7799]  __dump_stack+0x26/0x30
[  413.486403][ T7799]  dump_stack_lvl+0x1df/0x270
[  413.486580][ T7799]  dump_stack+0x1e/0x25
[  413.486731][ T7799]  should_fail_ex+0x7dc/0x8a0
[  413.486947][ T7799]  should_fail+0x2a/0x40
[  413.487122][ T7799]  should_fail_usercopy+0x2e/0x40
[  413.487257][ T7799]  _copy_from_user+0x33/0x100
[  413.487398][ T7799]  __sys_bpf+0x2c8/0xed0
[  413.487573][ T7799]  __x64_sys_bpf+0xa4/0xf0
[  413.487755][ T7799]  x64_sys_call+0x3550/0x3e20
[  413.487933][ T7799]  do_syscall_64+0xd9/0x210
[  413.488101][ T7799]  ? irqentry_exit+0x16/0x60
[  413.488245][ T7799]  ? clear_bhb_loop+0x40/0x90
[  413.488394][ T7799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.488537][ T7799] RIP: 0033:0x7f02a438ebe9
[  413.488640][ T7799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  413.488761][ T7799] RSP: 002b:00007f02a5135038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  413.488891][ T7799] RAX: ffffffffffffffda RBX: 00007f02a45b5fa0 RCX: 00007f02a438ebe9
[  413.488990][ T7799] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005
[  413.489081][ T7799] RBP: 00007f02a5135090 R08: 0000000000000000 R09: 0000000000000000
[  413.489166][ T7799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  413.489245][ T7799] R13: 00007f02a45b6038 R14: 00007f02a45b5fa0 R15: 00007ffe72618ce8
[  413.489371][ T7799]  </TASK>
[  413.749760][ T7786] bcachefs (loop0): done starting filesystem
[  413.875383][    T9] gspca_nw80x: reg_r err -32
[  413.875557][ T5818] bcachefs (loop0): shutting down
[  413.880598][    T9] nw80x 5-1:0.0: probe with driver nw80x failed with error -32
[  413.885524][ T5818] bcachefs (loop0): going read-only
[  413.898497][ T5818] bcachefs (loop0): finished waiting for writes to stop
[  413.990557][ T5868] usb 5-1: USB disconnect, device number 15
[  414.021119][ T5818] bcachefs (loop0): flushing journal and stopping allocators, journal seq 10
[  414.048693][ T5818] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 10
[  414.074229][ T5818] bcachefs (loop0): unclean shutdown complete, journal seq 11
[  414.092682][ T5818] bcachefs (loop0): done going read-only, filesystem not clean
[  414.126284][ T5818] bcachefs (loop0): shutdown complete
[  414.153795][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.437'.
[  414.184951][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  414.942475][ T7812] loop4: detected capacity change from 0 to 8
[  414.957078][ T7813] loop3: detected capacity change from 0 to 128
[  415.046971][ T7815] netlink: 240 bytes leftover after parsing attributes in process `syz.1.443'.
[  415.056423][ T7815] NCSI netlink: No device for ifindex 1024
[  415.748677][ T7820] loop3: detected capacity change from 0 to 256
[  415.773972][ T7820] exfat: Deprecated parameter 'namecase'
[  415.783121][ T7820] exfat: Deprecated parameter 'utf8'
[  415.922864][ T7820] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  416.026694][ T5868] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  416.051106][ T7822] process 'syz.3.445' launched '/dev/fd/5' with NULL argv: empty string added
[  416.191084][ T5868] usb 5-1: Using ep0 maxpacket: 32
[  416.231538][ T5868] usb 5-1: config 0 has an invalid interface number: 133 but max is 0
[  416.241844][ T5868] usb 5-1: config 0 has an invalid descriptor of length 65, skipping remainder of the config
[  416.252388][ T5868] usb 5-1: config 0 has no interface number 0
[  416.265949][ T5868] usb 5-1: config 0 interface 133 altsetting 0 has an endpoint descriptor with address 0x44, changing to 0x4
[  416.278072][ T5868] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0x4 has an invalid bInterval 68, changing to 10
[  416.291575][ T5868] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0x4 has invalid maxpacket 16706, setting to 1024
[  416.303730][ T5868] usb 5-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  416.426061][ T5868] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e
[  416.439146][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.447371][ T5868] usb 5-1: Product: syz
[  416.451939][ T5868] usb 5-1: Manufacturer: syz
[  416.456704][ T5868] usb 5-1: SerialNumber: syz
[  416.535366][ T5868] usb 5-1: config 0 descriptor??
[  416.838452][ T5868] usb 5-1: probing VID:PID(0424:012C)   
[  416.847002][ T5868] usb 5-1: vub300 testing UNKNOWN EndPoint(0) 04
[  416.853758][ T5868] usb 5-1: vub300 ignoring EndPoint(0) 04
[  416.859931][ T5868] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs
[  416.868060][ T5868] vub300 5-1:0.133: probe with driver vub300 failed with error -22
[  417.117979][ T5868] usb 5-1: USB disconnect, device number 16
[  417.399280][ T7829] loop1: detected capacity change from 0 to 32768
[  417.583435][ T7829] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  417.583585][ T7829]   allowing incompatible features above 0.0: (unknown version)
[  417.583671][ T7829]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  417.630789][ T7829] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  417.641221][ T7829] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  417.650734][ T7829] bcachefs (loop1): Version upgrade required:
[  417.650734][ T7829] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  417.650734][ T7829] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  417.650734][ T7829]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  417.752870][ T7829] bcachefs (loop1): dropping and reconstructing all alloc info
[  417.873597][ T7829] bcachefs (loop1): accounting_read... done
[  417.892951][ T7829] bcachefs (loop1): alloc_read... done
[  417.904029][ T7829] bcachefs (loop1): snapshots_read... done
[  417.915723][ T7829] bcachefs (loop1): check_allocations... done
[  418.169881][ T7829] bcachefs (loop1): going read-write
[  418.210173][ T7829] bcachefs (loop1): done starting filesystem
[  418.366219][ T5813] bcachefs (loop1): shutting down
[  418.375416][ T5813] bcachefs (loop1): going read-only
[  418.381030][ T5813] bcachefs (loop1): finished waiting for writes to stop
[  418.450655][ T5813] bcachefs (loop1): flushing journal and stopping allocators, journal seq 10
[  418.472723][ T5813] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 10
[  418.549561][ T5813] bcachefs (loop1): unclean shutdown complete, journal seq 11
[  418.625934][ T7852] netlink: 'syz.4.454': attribute type 10 has an invalid length.
[  418.634994][ T7852] bridge0: port 1(bridge_slave_0) entered disabled state
[  418.663105][ T7852] bridge0: port 1(bridge_slave_0) entered blocking state
[  418.670976][ T7852] bridge0: port 1(bridge_slave_0) entered listening state
[  418.690865][ T7852] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  418.715158][ T5813] bcachefs (loop1): done going read-only, filesystem not clean
[  418.756914][ T5813] bcachefs (loop1): shutdown complete
[  419.114938][ T4013] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.270375][ T4013] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.286005][ T7859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'.
[  419.398293][ T7859] loop0: detected capacity change from 0 to 2048
[  419.478118][ T4013] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.621277][ T4013] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.712182][ T7859] iocharset 15 not found
[  419.964017][ T4013] bridge_slave_1: left allmulticast mode
[  419.970014][ T4013] bridge_slave_1: left promiscuous mode
[  419.981530][ T4013] bridge0: port 2(bridge_slave_1) entered disabled state
[  420.000938][ T4013] bridge_slave_0: left allmulticast mode
[  420.006931][ T4013] bridge_slave_0: left promiscuous mode
[  420.014090][ T4013] bridge0: port 1(bridge_slave_0) entered disabled state
[  420.494451][ T4013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  420.530809][ T4013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  420.555598][ T4013] bond0 (unregistering): Released all slaves
[  421.025864][ T4013] hsr_slave_0: left promiscuous mode
[  421.057527][ T4013] hsr_slave_1: left promiscuous mode
[  421.066527][ T4013] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  421.074408][ T4013] batman_adv: batadv0: Removing interface: batadv_slave_0
[  421.089333][ T4013] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  421.096903][ T4013] batman_adv: batadv0: Removing interface: batadv_slave_1
[  421.212770][ T4013] veth1_macvtap: left promiscuous mode
[  421.218521][ T4013] veth0_macvtap: left promiscuous mode
[  421.226049][ T4013] veth1_vlan: left promiscuous mode
[  421.233674][ T4013] veth0_vlan: left promiscuous mode
[  422.406831][ T7868] loop4: detected capacity change from 0 to 32768
[  422.505875][ T5819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  422.559518][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  422.580364][ T7877] loop3: detected capacity change from 0 to 8
[  422.594142][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  422.675658][ T7868] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  422.675806][ T7868]   allowing incompatible features above 0.0: (unknown version)
[  422.675902][ T7868]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  422.721421][ T7868] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  422.730623][ T7868] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  422.742891][ T7868] bcachefs (loop4): Version upgrade required:
[  422.742891][ T7868] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  422.742891][ T7868] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  422.742891][ T7868]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  422.840010][ T5819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  422.855733][ T5819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  422.955373][ T7877] SQUASHFS error: Unable to read inode 0x11f
[  422.975793][ T7868] bcachefs (loop4): dropping and reconstructing all alloc info
[  423.032990][ T4013] team0 (unregistering): Port device team_slave_1 removed
[  423.072594][ T4013] team0 (unregistering): Port device team_slave_0 removed
[  423.207109][ T7868] bcachefs (loop4): accounting_read... done
[  423.293337][ T7868] bcachefs (loop4): alloc_read... done
[  423.345664][ T7868] bcachefs (loop4): snapshots_read... done
[  423.360082][ T7868] bcachefs (loop4): check_allocations...
[  423.590546][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.452'.
[  423.652738][ T7868]  done
[  423.849836][ T7868] bcachefs (loop4): going read-write
[  424.037574][ T7868] bcachefs (loop4): done starting filesystem
[  424.192056][ T5817] bcachefs (loop4): shutting down
[  424.197258][ T5817] bcachefs (loop4): going read-only
[  424.202932][ T5817] bcachefs (loop4): finished waiting for writes to stop
[  424.334458][ T5817] bcachefs (loop4): flushing journal and stopping allocators, journal seq 10
[  424.350321][ T5817] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 10
[  424.373988][ T5817] bcachefs (loop4): unclean shutdown complete, journal seq 11
[  424.518278][ T5817] bcachefs (loop4): done going read-only, filesystem not clean
[  424.574818][ T5817] bcachefs (loop4): shutdown complete
[  424.889242][ T7874] chnl_net:caif_netlink_parms(): no params data found
[  425.129623][ T5831] Bluetooth: hci0: command tx timeout
[  425.697622][ T7919] FAULT_INJECTION: forcing a failure.
[  425.697622][ T7919] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  425.714507][ T7919] CPU: 0 UID: 0 PID: 7919 Comm: syz.3.472 Tainted: G        W           6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(none) 
[  425.714691][ T7919] Tainted: [W]=WARN
[  425.714742][ T7919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  425.714833][ T7919] Call Trace:
[  425.714883][ T7919]  <TASK>
[  425.714932][ T7919]  __dump_stack+0x26/0x30
[  425.715105][ T7919]  dump_stack_lvl+0x1df/0x270
[  425.715283][ T7919]  dump_stack+0x1e/0x25
[  425.715439][ T7919]  should_fail_ex+0x7dc/0x8a0
[  425.715647][ T7919]  should_fail+0x2a/0x40
[  425.715824][ T7919]  should_fail_usercopy+0x2e/0x40
[  425.715959][ T7919]  _copy_from_user+0x33/0x100
[  425.716101][ T7919]  ___sys_sendmsg+0x11b/0x3b0
[  425.716274][ T7919]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  425.716451][ T7919]  ? __rcu_read_unlock+0x6d/0xd0
[  425.716598][ T7919]  ? __fget_files+0x3b4/0x4a0
[  425.716777][ T7919]  ? __fget_files+0x3b9/0x4a0
[  425.716954][ T7919]  ? kmsan_get_metadata+0xfb/0x160
[  425.717113][ T7919]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  425.717286][ T7919]  __x64_sys_sendmsg+0x211/0x3e0
[  425.717440][ T7919]  ? fput+0x113/0x160
[  425.717560][ T7919]  ? kmsan_get_metadata+0xfb/0x160
[  425.717716][ T7919]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  425.717882][ T7919]  ? kmsan_get_metadata+0xfb/0x160
[  425.718055][ T7919]  x64_sys_call+0x1dfd/0x3e20
[  425.718234][ T7919]  do_syscall_64+0xd9/0x210
[  425.718402][ T7919]  ? clear_bhb_loop+0x40/0x90
[  425.718556][ T7919]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.718700][ T7919] RIP: 0033:0x7fd25878ebe9
[  425.718809][ T7919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  425.718928][ T7919] RSP: 002b:00007fd259615038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  425.719057][ T7919] RAX: ffffffffffffffda RBX: 00007fd2589b5fa0 RCX: 00007fd25878ebe9
[  425.719157][ T7919] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  425.719245][ T7919] RBP: 00007fd259615090 R08: 0000000000000000 R09: 0000000000000000
[  425.719331][ T7919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  425.719409][ T7919] R13: 00007fd2589b6038 R14: 00007fd2589b5fa0 R15: 00007fff34c33c18
[  425.719533][ T7919]  </TASK>
[  426.012983][ T7916] tap0: tun_chr_ioctl cmd 1074025677
[  426.023432][ T7916] tap0: linktype set to 6
[  426.827005][ T7874] bridge0: port 1(bridge_slave_0) entered blocking state
[  426.834762][ T7874] bridge0: port 1(bridge_slave_0) entered disabled state
[  426.845043][ T7874] bridge_slave_0: entered allmulticast mode
[  426.852487][ T7932] FAULT_INJECTION: forcing a failure.
[  426.852487][ T7932] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  426.852655][ T7932] CPU: 0 UID: 0 PID: 7932 Comm: syz.1.475 Tainted: G        W           6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(none) 
[  426.852833][ T7932] Tainted: [W]=WARN
[  426.852884][ T7932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  426.852964][ T7932] Call Trace:
[  426.853013][ T7932]  <TASK>
[  426.853061][ T7932]  __dump_stack+0x26/0x30
[  426.853234][ T7932]  dump_stack_lvl+0x1df/0x270
[  426.853410][ T7932]  dump_stack+0x1e/0x25
[  426.853558][ T7932]  should_fail_ex+0x7dc/0x8a0
[  426.853767][ T7932]  should_fail+0x2a/0x40
[  426.853940][ T7932]  should_fail_usercopy+0x2e/0x40
[  426.854078][ T7932]  _copy_from_iter+0x1ba/0x3350
[  426.854267][ T7932]  ? kmsan_get_metadata+0xfb/0x160
[  426.854426][ T7932]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  426.854585][ T7932]  ? kmsan_get_metadata+0xfb/0x160
[  426.854746][ T7932]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  426.854945][ T7932]  netlink_sendmsg+0xc64/0x1250
[  426.855128][ T7932]  ? __pfx_netlink_sendmsg+0x10/0x10
[  426.855276][ T7932]  ? __pfx_netlink_sendmsg+0x10/0x10
[  426.855427][ T7932]  __sock_sendmsg+0x333/0x3d0
[  426.855614][ T7932]  ____sys_sendmsg+0x7e0/0xd80
[  426.855809][ T7932]  ___sys_sendmsg+0x271/0x3b0
[  426.855987][ T7932]  ? __rcu_read_unlock+0x6d/0xd0
[  426.856128][ T7932]  ? __fget_files+0x3b4/0x4a0
[  426.856300][ T7932]  ? __fget_files+0x3b9/0x4a0
[  426.856478][ T7932]  ? kmsan_get_metadata+0xfb/0x160
[  426.856636][ T7932]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  426.856813][ T7932]  __x64_sys_sendmsg+0x211/0x3e0
[  426.856984][ T7932]  ? kmsan_get_metadata+0xfb/0x160
[  426.857158][ T7932]  x64_sys_call+0x1dfd/0x3e20
[  426.857338][ T7932]  do_syscall_64+0xd9/0x210
[  426.857500][ T7932]  ? irqentry_exit+0x16/0x60
[  426.857643][ T7932]  ? clear_bhb_loop+0x40/0x90
[  426.857795][ T7932]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.857942][ T7932] RIP: 0033:0x7f02a438ebe9
[  426.858045][ T7932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  426.858170][ T7932] RSP: 002b:00007f02a5135038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  426.858303][ T7932] RAX: ffffffffffffffda RBX: 00007f02a45b5fa0 RCX: 00007f02a438ebe9
[  426.858402][ T7932] RDX: 000000000404c080 RSI: 0000200000000040 RDI: 0000000000000003
[  426.858493][ T7932] RBP: 00007f02a5135090 R08: 0000000000000000 R09: 0000000000000000
[  426.858581][ T7932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  426.858667][ T7932] R13: 00007f02a45b6038 R14: 00007f02a45b5fa0 R15: 00007ffe72618ce8
[  426.858804][ T7932]  </TASK>
[  427.165477][ T7874] bridge_slave_0: entered promiscuous mode
[  427.184278][ T7874] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.195838][ T7874] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.204452][ T7874] bridge_slave_1: entered allmulticast mode
[  427.216332][ T7874] bridge_slave_1: entered promiscuous mode
[  427.216847][ T5831] Bluetooth: hci0: command tx timeout
[  427.334759][ T7874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  427.361676][ T7874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  427.521614][ T7874] team0: Port device team_slave_0 added
[  427.570197][ T7874] team0: Port device team_slave_1 added
[  427.985961][ T7874] batman_adv: batadv0: Adding interface: batadv_slave_0
[  427.997073][ T7874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  428.026117][ T7874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  428.236662][ T7936] loop1: detected capacity change from 0 to 32768
[  428.248757][ T7874] batman_adv: batadv0: Adding interface: batadv_slave_1
[  428.258843][ T7874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  428.289784][ T7874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  428.481688][ T7936] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  428.481835][ T7936]   allowing incompatible features above 0.0: (unknown version)
[  428.481921][ T7936]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  428.525566][ T7936] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  428.534784][ T7936] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  428.544428][ T7936] bcachefs (loop1): Version upgrade required:
[  428.544428][ T7936] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  428.544428][ T7936] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  428.544428][ T7936]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  428.632985][ T7936] bcachefs (loop1): dropping and reconstructing all alloc info
[  428.690806][ T7936] bcachefs (loop1): accounting_read...
[  428.736017][ T7874] hsr_slave_0: entered promiscuous mode
[  428.752071][ T7874] hsr_slave_1: entered promiscuous mode
[  428.760839][ T7874] debugfs: 'hsr0' already exists in 'hsr'
[  428.766727][ T7874] Cannot create hsr debugfs directory
[  428.775617][ T7936]  done
[  428.778531][ T7936] bcachefs (loop1): alloc_read... done
[  428.841216][ T7936] bcachefs (loop1): snapshots_read... done
[  428.853880][ T7936] bcachefs (loop1): check_allocations...
[  428.894305][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.478'.
[  428.978393][ T7936]  done
[  428.996805][ T7936] bcachefs (loop1): going read-write
[  429.135852][ T7936] bcachefs (loop1): done starting filesystem
[  429.290652][ T5831] Bluetooth: hci0: command tx timeout
[  429.307464][ T5813] bcachefs (loop1): shutting down
[  429.313829][ T5813] bcachefs (loop1): going read-only
[  429.319536][ T5813] bcachefs (loop1): finished waiting for writes to stop
[  429.371498][ T5813] bcachefs (loop1): flushing journal and stopping allocators, journal seq 10
[  429.381119][ T5871] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  429.414552][ T5813] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 10
[  429.434097][ T5813] bcachefs (loop1): unclean shutdown complete, journal seq 11
[  429.526042][ T5813] bcachefs (loop1): done going read-only, filesystem not clean
[  429.583604][ T5871] usb 5-1: Using ep0 maxpacket: 16
[  429.653354][ T5871] usb 5-1: unable to get BOS descriptor or descriptor too short
[  429.751693][ T5871] usb 5-1: config 15 has an invalid interface number: 174 but max is 1
[  429.762707][ T5871] usb 5-1: config 15 has an invalid interface number: 5 but max is 1
[  429.771270][ T5871] usb 5-1: config 15 has an invalid interface descriptor of length 2, skipping
[  429.777270][ T5813] bcachefs (loop1): shutdown complete
[  429.782079][ T5871] usb 5-1: config 15 has no interface number 0
[  429.794911][ T5871] usb 5-1: config 15 has no interface number 1
[  429.801503][ T5871] usb 5-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0
[  429.813628][ T5871] usb 5-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32
[  429.826894][ T5871] usb 5-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping
[  429.838041][ T5871] usb 5-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  429.851862][ T5871] usb 5-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping
[  429.863050][ T5871] usb 5-1: config 15 interface 174 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64
[  429.874387][ T5871] usb 5-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64
[  429.888071][ T5871] usb 5-1: config 15 interface 174 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87
[  429.897262][ T7874] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  429.900199][ T5871] usb 5-1: config 15 interface 5 altsetting 128 has a duplicate endpoint with address 0x8, skipping
[  429.900341][ T5871] usb 5-1: config 15 interface 5 altsetting 128 has a duplicate endpoint with address 0x8, skipping
[  429.900477][ T5871] usb 5-1: config 15 interface 5 altsetting 128 has an invalid descriptor for endpoint zero, skipping
[  429.946458][ T5871] usb 5-1: config 15 interface 5 altsetting 128 has 3 endpoint descriptors, different from the interface descriptor's value: 5
[  429.962378][ T5871] usb 5-1: config 15 interface 174 has no altsetting 0
[  429.969583][ T5871] usb 5-1: config 15 interface 5 has no altsetting 0
[  430.000384][ T7956] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.481'.
[  430.067681][ T7874] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  430.126323][ T7956] netlink: 44 bytes leftover after parsing attributes in process `syz.3.481'.
[  430.184723][ T7874] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  430.252150][ T7956] netlink: 52 bytes leftover after parsing attributes in process `syz.3.481'.
[  430.345325][ T7874] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  430.493129][ T7956] loop3: detected capacity change from 0 to 1024
[  431.091238][ T7957] loop0: detected capacity change from 0 to 40427
[  431.100236][ T7957] f2fs: Unknown parameter '_read 0
[  431.100236][ T7957] '
[  431.376580][ T5831] Bluetooth: hci0: command tx timeout
[  431.665229][ T5871] usb 5-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d
[  431.677638][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  431.686216][ T5871] usb 5-1: Product: syz
[  431.690677][ T5871] usb 5-1: SerialNumber: syz
[  431.840057][ T7952] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  431.938633][ T7874] 8021q: adding VLAN 0 to HW filter on device bond0
[  431.987815][ T7962] loop3: detected capacity change from 0 to 256
[  432.228808][ T7874] 8021q: adding VLAN 0 to HW filter on device team0
[  432.301222][ T4782] bridge0: port 1(bridge_slave_0) entered blocking state
[  432.308833][ T4782] bridge0: port 1(bridge_slave_0) entered forwarding state
[  432.313516][ T7962] FAT-fs (loop3): Directory bread(block 64) failed
[  432.323756][ T7962] FAT-fs (loop3): Directory bread(block 65) failed
[  432.331896][ T7962] FAT-fs (loop3): Directory bread(block 66) failed
[  432.338738][ T7962] FAT-fs (loop3): Directory bread(block 67) failed
[  432.348540][ T7962] FAT-fs (loop3): Directory bread(block 68) failed
[  432.355468][ T7962] FAT-fs (loop3): Directory bread(block 69) failed
[  432.362716][ T7962] FAT-fs (loop3): Directory bread(block 70) failed
[  432.373888][ T7962] FAT-fs (loop3): Directory bread(block 71) failed
[  432.381709][ T7962] FAT-fs (loop3): Directory bread(block 72) failed
[  432.388433][ T7962] FAT-fs (loop3): Directory bread(block 73) failed
[  432.437850][ T5871] sierra 5-1:15.174: Sierra USB modem converter detected
[  432.483794][ T3625] bridge0: port 2(bridge_slave_1) entered blocking state
[  432.491509][ T3625] bridge0: port 2(bridge_slave_1) entered forwarding state
[  432.510630][ T5871] usb 5-1: Sierra USB modem converter now attached to ttyUSB0
[  432.598556][ T5871] usb 5-1: Sierra USB modem converter now attached to ttyUSB1
[  432.652593][ T5871] usb 5-1: Sierra USB modem converter now attached to ttyUSB2
[  432.715179][ T5871] sierra 5-1:15.5: Sierra USB modem converter detected
[  432.786755][ T5871] usb 5-1: Sierra USB modem converter now attached to ttyUSB3
[  432.831033][ T5871] usb 5-1: USB disconnect, device number 17
[  432.963295][ T5871] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  433.001146][ T5871] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[  433.060812][ T5871] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2
[  433.071808][ T5871] sierra 5-1:15.174: device disconnected
[  433.160742][ T5871] sierra ttyUSB3: Sierra USB modem converter now disconnected from ttyUSB3
[  433.173077][ T5871] sierra 5-1:15.5: device disconnected
[  433.386036][ T7966] loop4: detected capacity change from 0 to 4096
[  433.467782][ T7970] loop3: detected capacity change from 0 to 512
[  433.557080][ T7971] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  433.584826][ T7970] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 3: comm syz.3.485: lblock 0 mapped to illegal pblock 3 (length 1)
[  433.672537][ T7970] EXT4-fs (loop3): Remounting filesystem read-only
[  433.679619][ T7970] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.485: error -117 reading directory block
[  433.760641][ T7970] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  433.771593][ T7970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  434.507596][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  434.530544][ T7874] 8021q: adding VLAN 0 to HW filter on device batadv0
[  435.492874][ T7994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'.
[  435.710671][ T7987] loop4: detected capacity change from 0 to 32768
[  435.856251][ T8003] FAULT_INJECTION: forcing a failure.
[  435.856251][ T8003] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  435.867639][ T7987] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  435.869937][ T8003] CPU: 0 UID: 0 PID: 8003 Comm: syz.3.490 Tainted: G        W           6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(none) 
[  435.870113][ T8003] Tainted: [W]=WARN
[  435.870164][ T8003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  435.870244][ T8003] Call Trace:
[  435.870294][ T8003]  <TASK>
[  435.870346][ T8003]  __dump_stack+0x26/0x30
[  435.870522][ T8003]  dump_stack_lvl+0x1df/0x270
[  435.870696][ T8003]  dump_stack+0x1e/0x25
[  435.870850][ T8003]  should_fail_ex+0x7dc/0x8a0
[  435.871057][ T8003]  should_fail+0x2a/0x40
[  435.871225][ T8003]  should_fail_usercopy+0x2e/0x40
[  435.871357][ T8003]  _copy_to_iter+0x1d9/0x33f0
[  435.871564][ T8003]  ? kmsan_get_metadata+0xfb/0x160
[  435.871721][ T8003]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  435.871901][ T8003]  ? kmsan_get_metadata+0xfb/0x160
[  435.872062][ T8003]  get_random_bytes_user+0x23f/0x5f0
[  435.872283][ T8003]  __x64_sys_getrandom+0x210/0x450
[  435.872481][ T8003]  x64_sys_call+0x2615/0x3e20
[  435.872659][ T8003]  do_syscall_64+0xd9/0x210
[  435.872823][ T8003]  ? irqentry_exit+0x16/0x60
[  435.872966][ T8003]  ? clear_bhb_loop+0x40/0x90
[  435.873113][ T8003]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.873259][ T8003] RIP: 0033:0x7fd25878ebe9
[  435.873360][ T8003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  435.873492][ T8003] RSP: 002b:00007fd259615038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e
[  435.873625][ T8003] RAX: ffffffffffffffda RBX: 00007fd2589b5fa0 RCX: 00007fd25878ebe9
[  435.873726][ T8003] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000000240
[  435.873818][ T8003] RBP: 00007fd259615090 R08: 0000000000000000 R09: 0000000000000000
[  435.873904][ T8003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  435.873988][ T8003] R13: 00007fd2589b6038 R14: 00007fd2589b5fa0 R15: 00007fff34c33c18
[  435.874120][ T8003]  </TASK>
[  436.111988][ T7987]   allowing incompatible features above 0.0: (unknown version)
[  436.119904][ T7987]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  436.134623][ T7987] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  436.146052][ T7987] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  436.157852][ T7987] bcachefs (loop4): Version upgrade required:
[  436.157852][ T7987] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  436.157852][ T7987] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  436.157852][ T7987]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  436.281977][ T7987] bcachefs (loop4): dropping and reconstructing all alloc info
[  436.427809][ T7987] bcachefs (loop4): accounting_read... done
[  436.482240][ T7987] bcachefs (loop4): alloc_read... done
[  436.504398][ T7987] bcachefs (loop4): snapshots_read... done
[  436.545475][ T7987] bcachefs (loop4): check_allocations...
[  436.748751][ T8010] loop3: detected capacity change from 0 to 64
[  436.782667][ T7987]  done
[  436.839889][ T7987] bcachefs (loop4): going read-write
[  436.866572][   T30] audit: type=1804 audit(1755255509.473:300): pid=8010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.492" name="/newroot/100/file1/file0" dev="loop3" ino=21 res=1 errno=0
[  436.962650][ T7987] bcachefs (loop4): done starting filesystem
[  437.072139][ T5817] bcachefs (loop4): shutting down
[  437.081175][ T5817] bcachefs (loop4): going read-only
[  437.088536][ T5817] bcachefs (loop4): finished waiting for writes to stop
[  437.110216][ T1593] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  437.119827][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.491'.
[  437.161406][ T5817] bcachefs (loop4): flushing journal and stopping allocators, journal seq 10
[  437.187789][ T8017] loop0: detected capacity change from 0 to 512
[  437.196961][ T5817] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 10
[  437.214627][ T8017] EXT4-fs: inline encryption not supported
[  437.225426][ T8017] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  437.241542][ T8017] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  437.254738][ T5817] bcachefs (loop4): unclean shutdown complete, journal seq 11
[  437.304625][ T5817] bcachefs (loop4): done going read-only, filesystem not clean
[  437.342444][ T1593] usb 2-1: Using ep0 maxpacket: 16
[  437.388533][ T8017] EXT4-fs (loop0): 1 truncate cleaned up
[  437.401531][ T8017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  437.445924][ T7874] veth0_vlan: entered promiscuous mode
[  437.463250][ T1593] usb 2-1: unable to get BOS descriptor or descriptor too short
[  437.480678][ T1593] usb 2-1: config 15 has an invalid interface number: 174 but max is 1
[  437.493538][ T1593] usb 2-1: config 15 has an invalid interface number: 5 but max is 1
[  437.502612][ T1593] usb 2-1: config 15 has an invalid interface descriptor of length 2, skipping
[  437.511934][ T1593] usb 2-1: config 15 has no interface number 0
[  437.518291][ T1593] usb 2-1: config 15 has no interface number 1
[  437.519175][ T7874] veth1_vlan: entered promiscuous mode
[  437.527097][ T1593] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0
[  437.540440][ T1593] usb 2-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32
[  437.553201][ T1593] usb 2-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping
[  437.565008][ T1593] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  437.577154][ T1593] usb 2-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping
[  437.593319][ T1593] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64
[  437.605910][ T1593] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64
[  437.618023][ T1593] usb 2-1: config 15 interface 174 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87
[  437.633072][ T1593] usb 2-1: config 15 interface 5 altsetting 128 has a duplicate endpoint with address 0x8, skipping
[  437.644909][ T1593] usb 2-1: config 15 interface 5 altsetting 128 has a duplicate endpoint with address 0x8, skipping
[  437.656548][ T1593] usb 2-1: config 15 interface 5 altsetting 128 has an invalid descriptor for endpoint zero, skipping
[  437.671013][ T1593] usb 2-1: config 15 interface 5 altsetting 128 has 3 endpoint descriptors, different from the interface descriptor's value: 5
[  437.685177][ T1593] usb 2-1: config 15 interface 174 has no altsetting 0
[  437.695702][ T1593] usb 2-1: config 15 interface 5 has no altsetting 0
[  437.725082][ T5817] bcachefs (loop4): shutdown complete
[  437.902401][ T1593] usb 2-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d
[  437.914251][ T1593] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.922700][ T1593] usb 2-1: Product: syz
[  437.927033][ T1593] usb 2-1: SerialNumber: syz
[  437.946964][ T7874] veth0_macvtap: entered promiscuous mode
[  438.005524][ T7874] veth1_macvtap: entered promiscuous mode
[  438.026364][ T8012] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  438.136335][ T7874] batman_adv: batadv0: Interface activated: batadv_slave_0
[  438.200701][ T7874] batman_adv: batadv0: Interface activated: batadv_slave_1
[  438.266989][ T5818] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  438.325654][ T3767] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  438.335697][ T1593] sierra 2-1:15.174: Sierra USB modem converter detected
[  438.362797][ T3767] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  438.384128][ T8024] loop3: detected capacity change from 0 to 512
[  438.417421][ T1593] usb 2-1: Sierra USB modem converter now attached to ttyUSB0
[  438.417733][ T3767] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  438.466627][ T3767] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  438.476808][ T1593] usb 2-1: Sierra USB modem converter now attached to ttyUSB1
[  438.495299][ T8024] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 3: comm syz.3.496: lblock 0 mapped to illegal pblock 3 (length 1)
[  438.537834][ T1593] usb 2-1: Sierra USB modem converter now attached to ttyUSB2
[  438.607401][ T1593] sierra 2-1:15.5: Sierra USB modem converter detected
[  438.636306][ T8024] EXT4-fs (loop3): Remounting filesystem read-only
[  438.643353][ T8024] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.496: error -117 reading directory block
[  438.685482][ T1593] usb 2-1: Sierra USB modem converter now attached to ttyUSB3
[  438.703448][ T8031] capability: warning: `syz.0.498' uses deprecated v2 capabilities in a way that may be insecure
[  438.722405][ T8024] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  438.733266][ T8024] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  438.764714][ T1593] usb 2-1: USB disconnect, device number 7
[  438.801739][ T1593] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  438.862490][ T1593] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[  438.974482][ T1593] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2
[  438.985283][ T1593] sierra 2-1:15.174: device disconnected
[  439.122235][ T1593] sierra ttyUSB3: Sierra USB modem converter now disconnected from ttyUSB3
[  439.134423][ T1593] sierra 2-1:15.5: device disconnected
[  439.498596][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.169731][ T8042] loop1: detected capacity change from 0 to 1024
[  440.274262][ T8042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  440.287229][ T8042] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  440.332105][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.502'.
[  440.702673][ T5813] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  441.453640][ T8058] netlink: 'syz.0.504': attribute type 5 has an invalid length.
[  441.461941][ T8058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.504'.
[  441.872692][ T8055] loop1: detected capacity change from 0 to 32768
[  441.965210][ T8067] loop4: detected capacity change from 0 to 64
[  442.033453][ T8055] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  442.033594][ T8055]   allowing incompatible features above 0.0: (unknown version)
[  442.033683][ T8055]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  442.077686][ T8055] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  442.086957][ T8055] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  442.101073][ T8055] bcachefs (loop1): Version upgrade required:
[  442.101073][ T8055] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  442.101073][ T8055] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  442.101073][ T8055]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  442.141822][ T8067] FAULT_INJECTION: forcing a failure.
[  442.141822][ T8067] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  442.178574][   T30] audit: type=1804 audit(1755255514.723:301): pid=8067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.494" name="/newroot/103/file1/file0" dev="loop4" ino=21 res=1 errno=0
[  442.191037][ T8067] CPU: 1 UID: 0 PID: 8067 Comm: syz.4.494 Tainted: G        W           6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(none) 
[  442.191216][ T8067] Tainted: [W]=WARN
[  442.191265][ T8067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  442.191345][ T8067] Call Trace:
[  442.191395][ T8067]  <TASK>
[  442.191445][ T8067]  __dump_stack+0x26/0x30
[  442.191617][ T8067]  dump_stack_lvl+0x1df/0x270
[  442.191794][ T8067]  dump_stack+0x1e/0x25
[  442.191954][ T8067]  should_fail_ex+0x7dc/0x8a0
[  442.192164][ T8067]  should_fail_alloc_page+0x222/0x240
[  442.192343][ T8067]  __alloc_frozen_pages_noprof+0x30f/0xf00
[  442.192535][ T8067]  alloc_pages_mpol+0x328/0x860
[  442.192707][ T8067]  folio_alloc_noprof+0x109/0x360
[  442.192877][ T8067]  filemap_alloc_folio_noprof+0x9d/0x420
[  442.193049][ T8067]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  442.193219][ T8067]  __filemap_get_folio+0xb45/0x1930
[  442.193442][ T8067]  cont_write_begin+0x1054/0x1bc0
[  442.193620][ T8067]  ? kmsan_get_metadata+0xfb/0x160
[  442.193779][ T8067]  ? kmsan_get_metadata+0xfb/0x160
[  442.193953][ T8067]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  442.194146][ T8067]  hfs_write_begin+0x85/0x130
[  442.194322][ T8067]  ? __pfx_hfs_get_block+0x10/0x10
[  442.194502][ T8067]  ? __pfx_hfs_write_begin+0x10/0x10
[  442.194682][ T8067]  generic_perform_write+0x365/0x1050
[  442.194916][ T8067]  ? kmsan_get_metadata+0xfb/0x160
[  442.195083][ T8067]  __generic_file_write_iter+0x213/0x460
[  442.195297][ T8067]  generic_file_write_iter+0x131/0x980
[  442.195493][ T8067]  ? kmsan_get_metadata+0xfb/0x160
[  442.195648][ T8067]  ? kmsan_get_metadata+0xfb/0x160
[  442.195801][ T8067]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  442.195975][ T8067]  ? vfs_write+0x481/0x15d0
[  442.196127][ T8067]  ? filter_irq_stacks+0x49/0x190
[  442.196333][ T8067]  ? stack_depot_save_flags+0x35/0x7b0
[  442.196515][ T8067]  ? kmsan_get_metadata+0xfb/0x160
[  442.196671][ T8067]  ? kmsan_get_metadata+0xfb/0x160
[  442.196826][ T8067]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  442.197002][ T8067]  vfs_write+0xbe2/0x15d0
[  442.197180][ T8067]  ? __pfx_generic_file_write_iter+0x10/0x10
[  442.197394][ T8067]  __x64_sys_write+0x1fb/0x4d0
[  442.197578][ T8067]  x64_sys_call+0x3014/0x3e20
[  442.197759][ T8067]  do_syscall_64+0xd9/0x210
[  442.197928][ T8067]  ? irqentry_exit+0x16/0x60
[  442.198069][ T8067]  ? clear_bhb_loop+0x40/0x90
[  442.198216][ T8067]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.198363][ T8067] RIP: 0033:0x7f0f8bb8ebe9
[  442.198464][ T8067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  442.198586][ T8067] RSP: 002b:00007f0f8cac3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  442.198739][ T8067] RAX: ffffffffffffffda RBX: 00007f0f8bdb5fa0 RCX: 00007f0f8bb8ebe9
[  442.198838][ T8067] RDX: 000000000000ffe3 RSI: 0000200000000380 RDI: 0000000000000004
[  442.198932][ T8067] RBP: 00007f0f8cac3090 R08: 0000000000000000 R09: 0000000000000000
[  442.199019][ T8067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  442.199098][ T8067] R13: 00007f0f8bdb6038 R14: 00007f0f8bdb5fa0 R15: 00007ffce713ece8
[  442.199228][ T8067]  </TASK>
[  442.553865][ T8055] bcachefs (loop1): dropping and reconstructing all alloc info
[  442.743031][ T8055] bcachefs (loop1): accounting_read... done
[  442.770584][ T8055] bcachefs (loop1): alloc_read... done
[  442.788120][ T8055] bcachefs (loop1): snapshots_read... done
[  442.825888][ T8055] bcachefs (loop1): check_allocations... done
[  442.983783][ T8055] bcachefs (loop1): going read-write
[  443.033156][ T8055] bcachefs (loop1): done starting filesystem
[  443.197276][ T5813] bcachefs (loop1): shutting down
[  443.202748][ T5813] bcachefs (loop1): going read-only
[  443.208138][ T5813] bcachefs (loop1): finished waiting for writes to stop
[  443.264134][ T5813] bcachefs (loop1): flushing journal and stopping allocators, journal seq 10
[  443.308537][ T5813] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 10
[  443.388558][ T5813] bcachefs (loop1): unclean shutdown complete, journal seq 11
[  443.442177][ T5813] bcachefs (loop1): done going read-only, filesystem not clean
[  443.575804][ T5813] bcachefs (loop1): shutdown complete
[  443.832570][ T8088] net_ratelimit: 25 callbacks suppressed
[  443.832637][ T8088] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  444.527012][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.513'.
[  444.706442][ T8105] loop3: detected capacity change from 0 to 8
[  445.152735][   T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  445.160997][   T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  445.322012][ T3625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  445.330285][ T3625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  445.369255][ T8109] loop4: detected capacity change from 0 to 128
[  445.434930][ T8109] qnx6: superblock #1 checksum error
[  445.555859][ T8109] loop4: detected capacity change from 0 to 1024
[  445.661650][ T8109] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  445.674532][ T8109] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  445.868744][ T5817] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  445.959694][   T11] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  446.132519][   T11] usb 4-1: Using ep0 maxpacket: 8
[  446.157487][ T8120] pim6reg: entered allmulticast mode
[  446.200783][   T11] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  446.212318][   T11] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  446.222446][   T11] usb 4-1: config 0 interface 0 has no altsetting 0
[  446.229436][   T11] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  446.238696][   T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.253684][ T8122] pim6reg: left allmulticast mode
[  446.313996][   T11] usb 4-1: config 0 descriptor??
[  446.765606][   T11] steelseries 0003:1038:1410.0002: item fetching failed at offset 1/5
[  446.817780][   T11] steelseries 0003:1038:1410.0002: parse failed
[  446.825193][   T11] steelseries 0003:1038:1410.0002: probe with driver steelseries failed with error -22
[  447.139468][    T9] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  447.325427][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  447.336025][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  447.402783][    T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  447.412789][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.425032][    T9] usb 5-1: Product: syz
[  447.425170][ T1593] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  447.430904][    T9] usb 5-1: Manufacturer: syz
[  447.441859][    T9] usb 5-1: SerialNumber: syz
[  447.587674][ T5871] usb 4-1: USB disconnect, device number 17
[  447.649722][ T1593] usb 2-1: Using ep0 maxpacket: 16
[  447.677562][ T1593] usb 2-1: unable to get BOS descriptor or descriptor too short
[  447.711640][ T1593] usb 2-1: config 15 has an invalid interface number: 174 but max is 1
[  447.720840][ T1593] usb 2-1: config 15 has an invalid interface number: 5 but max is 1
[  447.734586][ T1593] usb 2-1: config 15 has an invalid interface descriptor of length 2, skipping
[  447.745283][ T1593] usb 2-1: config 15 has no interface number 0
[  447.752452][ T1593] usb 2-1: config 15 has no interface number 1
[  447.758837][ T1593] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0
[  447.772719][ T1593] usb 2-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32
[  447.783742][ T1593] usb 2-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping
[  447.797764][ T1593] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  447.809851][ T1593] usb 2-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping
[  447.823891][ T1593] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64
[  447.838321][ T1593] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64
[  447.853906][ T1593] usb 2-1: config 15 interface 174 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87
[  447.866755][ T1593] usb 2-1: config 15 interface 5 altsetting 128 has a duplicate endpoint with address 0x8, skipping
[  447.878723][ T1593] usb 2-1: config 15 interface 5 altsetting 128 has a duplicate endpoint with address 0x8, skipping
[  447.893566][ T1593] usb 2-1: config 15 interface 5 altsetting 128 has an invalid descriptor for endpoint zero, skipping
[  447.904884][ T1593] usb 2-1: config 15 interface 5 altsetting 128 has 3 endpoint descriptors, different from the interface descriptor's value: 5
[  447.920989][ T1593] usb 2-1: config 15 interface 174 has no altsetting 0
[  447.928070][ T1593] usb 2-1: config 15 interface 5 has no altsetting 0
[  447.966567][    T9] usb 5-1: 0:2 : does not exist
[  447.988802][ T1593] usb 2-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d
[  447.999297][ T1593] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.007523][ T1593] usb 2-1: Product: syz
[  448.014325][ T1593] usb 2-1: SerialNumber: syz
[  448.075372][    T9] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  448.085826][ T8131] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  448.263109][    T9] usb 5-1: USB disconnect, device number 18
[  448.463873][ T1593] sierra 2-1:15.174: Sierra USB modem converter detected
[  448.520771][ T1593] usb 2-1: Sierra USB modem converter now attached to ttyUSB0
[  448.555339][ T1593] usb 2-1: Sierra USB modem converter now attached to ttyUSB1
[  448.590587][ T1593] usb 2-1: Sierra USB modem converter now attached to ttyUSB2
[  448.662640][ T8142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.525'.
[  448.665255][ T1593] sierra 2-1:15.5: Sierra USB modem converter detected
[  448.739484][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[  448.767416][ T1593] usb 2-1: Sierra USB modem converter now attached to ttyUSB3
[  448.800835][ T1593] usb 2-1: USB disconnect, device number 8
[  448.866776][ T1593] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  448.923687][ T1593] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[  448.981223][ T1593] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2
[  448.995301][ T1593] sierra 2-1:15.174: device disconnected
[  449.091645][ T1593] sierra ttyUSB3: Sierra USB modem converter now disconnected from ttyUSB3
[  449.101763][ T1593] sierra 2-1:15.5: device disconnected
[  449.315826][ T8145] loop4: detected capacity change from 0 to 1024
[  449.385386][ T8148] loop5: detected capacity change from 0 to 256
[  449.439883][ T8145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  449.809710][    T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  449.977004][ T8157] netlink: 16 bytes leftover after parsing attributes in process `syz.3.530'.
[  450.028517][    T9] usb 5-1: Using ep0 maxpacket: 8
[  450.042712][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  450.121421][    T9] usb 5-1: config 4 interface 0 has no altsetting 0
[  450.252087][    T9] usb 5-1: string descriptor 0 read error: -22
[  450.258887][    T9] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  450.268640][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.420721][    T9] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  450.518655][    T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  450.531002][    T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  450.538447][    T9] usb 5-1: media controller created
[  450.670276][ T8146] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #14: comm syz.4.526: attempt to clear invalid blocks 1886221359 len 1
[  450.888484][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  451.039783][   T11] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  451.802846][ T8162] loop0: detected capacity change from 0 to 65536
[  451.904732][ T8162] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  451.962562][    T9] zl10353_read_register: readreg error (reg=127, ret==0)
[  452.123991][ T8162] XFS (loop0): Ending clean mount
[  452.502656][ T5818] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  452.826417][ T8186] loop1: detected capacity change from 0 to 1024
[  452.877277][ T5817] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  453.034198][ T8181] loop3: detected capacity change from 0 to 40427
[  453.044780][ T8181] f2fs: Unknown parameter 'whint_mode'
[  453.085234][ T8186] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  453.133109][ T8186] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  453.322907][ T8186] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  453.329764][ T8186] hfsplus: xattr searching failed
[  453.356974][   T30] audit: type=1800 audit(1755255525.953:302): pid=8186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.537" name="bus" dev="loop1" ino=26 res=0 errno=0
[  453.581789][ T5819] Bluetooth: hci2: unexpected event 0x04 length: 83 > 10
[  453.582002][ T5819] Bluetooth: hci2: connection err: -111
[  453.640171][    T9] usb 5-1: USB disconnect, device number 19
[  453.696522][   T30] audit: type=1326 audit(1755255526.313:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.4.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8bb8ebe9 code=0x7ffc0000
[  453.696759][   T11] usb 6-1: device descriptor read/64, error -71
[  453.776364][   T30] audit: type=1326 audit(1755255526.343:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.4.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0f8bb8ebe9 code=0x7ffc0000
[  453.802272][   T30] audit: type=1326 audit(1755255526.343:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.4.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8bb8ebe9 code=0x7ffc0000
[  453.824971][   T30] audit: type=1326 audit(1755255526.343:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.4.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0f8bb8ebe9 code=0x7ffc0000
[  453.851171][   T30] audit: type=1326 audit(1755255526.343:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.4.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8bb8ebe9 code=0x7ffc0000
[  453.876979][   T30] audit: type=1326 audit(1755255526.343:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.4.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f0f8bb8ebe9 code=0x7ffc0000
[  453.903195][   T30] audit: type=1326 audit(1755255526.343:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.4.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8bb8ebe9 code=0x7ffc0000
[  453.925909][   T30] audit: type=1326 audit(1755255526.353:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.4.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f0f8bb8ebe9 code=0x7ffc0000
[  453.952559][   T30] audit: type=1326 audit(1755255526.353:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.4.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8bb8ebe9 code=0x7ffc0000
[  453.979479][   T11] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  454.101711][ T3767] hfsplus: b-tree write err: -5, ino 4
[  454.129798][   T11] usb 6-1: Using ep0 maxpacket: 8
[  454.209406][   T11] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  454.220689][   T11] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  454.231314][   T11] usb 6-1: config 0 interface 0 has no altsetting 0
[  454.238211][   T11] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  454.248333][   T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.422289][   T11] usb 6-1: config 0 descriptor??
[  454.551812][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.540'.
[  454.860701][   T11] steelseries 0003:1038:1410.0003: item fetching failed at offset 1/5
[  454.919620][   T11] steelseries 0003:1038:1410.0003: parse failed
[  454.926897][   T11] steelseries 0003:1038:1410.0003: probe with driver steelseries failed with error -22
[  455.323251][ T1593] usb 6-1: USB disconnect, device number 3
[  456.850942][ T8215] loop3: detected capacity change from 0 to 32768
[  456.862272][ T8215] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.546 (8215)
[  456.887794][ T8215] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  456.898467][ T8215] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  456.909719][ T8215] BTRFS info (device loop3): using free-space-tree
[  457.412097][ T5827] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  457.787106][ T8238] loop5: detected capacity change from 0 to 256
[  458.111748][ T8238] FAT-fs (loop5): Directory bread(block 64) failed
[  458.118616][ T8238] FAT-fs (loop5): Directory bread(block 65) failed
[  458.125860][ T8238] FAT-fs (loop5): Directory bread(block 66) failed
[  458.132765][ T8238] FAT-fs (loop5): Directory bread(block 67) failed
[  458.139758][ T8238] FAT-fs (loop5): Directory bread(block 68) failed
[  458.146464][ T8238] FAT-fs (loop5): Directory bread(block 69) failed
[  458.153454][ T8238] FAT-fs (loop5): Directory bread(block 70) failed
[  458.160304][ T8238] FAT-fs (loop5): Directory bread(block 71) failed
[  458.167145][ T8238] FAT-fs (loop5): Directory bread(block 72) failed
[  458.178720][ T8238] FAT-fs (loop5): Directory bread(block 73) failed
[  458.495598][ T5819] Bluetooth: hci2: unexpected event 0x04 length: 83 > 10
[  458.495756][ T5819] Bluetooth: hci2: connection err: -111
[  458.568811][ T8211] loop1: detected capacity change from 0 to 32768
[  458.586016][ T8211] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.545 (8211)
[  458.627460][ T8211] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  458.640739][ T8211] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  458.652041][ T8211] BTRFS info (device loop1): using free-space-tree
[  458.665658][   T30] kauditd_printk_skb: 31 callbacks suppressed
[  458.665739][   T30] audit: type=1326 audit(1755255531.283:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.4.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8bb8ebe9 code=0x7ffc0000
[  458.782467][   T30] audit: type=1326 audit(1755255531.343:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.4.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0f8bb8ebe9 code=0x7ffc0000
[  458.809905][   T30] audit: type=1326 audit(1755255531.353:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.4.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8bb8ebe9 code=0x7ffc0000
[  458.811261][ T8211] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  458.833600][ T8211] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  458.835665][   T30] audit: type=1326 audit(1755255531.353:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.4.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8bb8ebe9 code=0x7ffc0000
[  458.843949][ T8211] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  458.851898][   T30] audit: type=1326 audit(1755255531.363:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.4.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f0f8bb8ebe9 code=0x7ffc0000
[  458.875371][ T8211] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  458.876219][ T8211] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  458.877152][ T8211] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  458.886325][   T30] audit: type=1326 audit(1755255531.363:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.4.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8bb8ebe9 code=0x7ffc0000
[  458.913966][ T8211] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  458.924150][   T30] audit: type=1326 audit(1755255531.373:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.4.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f0f8bb8ebe9 code=0x7ffc0000
[  458.924409][   T30] audit: type=1326 audit(1755255531.373:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.4.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8bb8ebe9 code=0x7ffc0000
[  458.924636][   T30] audit: type=1326 audit(1755255531.393:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.4.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0f8bb8ebe9 code=0x7ffc0000
[  459.056971][   T30] audit: type=1326 audit(1755255531.393:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.4.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8bb8ebe9 code=0x7ffc0000
[  459.105359][ T8211] BTRFS error (device loop1): open_ctree failed: -12
[  459.211896][ T5871] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  459.375537][ T5871] usb 6-1: Using ep0 maxpacket: 32
[  459.387897][ T5871] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  459.397665][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  459.467355][ T5871] usb 6-1: config 0 descriptor??
[  459.493551][ T5871] gspca_main: sq930x-2.14.0 probing 041e:403c
[  459.753669][ T8264] loop4: detected capacity change from 0 to 512
[  459.777184][ T8251] loop5: detected capacity change from 0 to 764
[  459.917516][ T8264] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 17. Delete some EAs or run e2fsck.
[  459.931183][ T8264] EXT4-fs (loop4): 1 truncate cleaned up
[  459.939098][ T8264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  459.953363][ T8251] Symlink component flag not implemented
[  459.959604][ T8251] Symlink component flag not implemented (101)
[  460.020744][ T5871] gspca_sq930x: reg_r 001f failed -110
[  460.026651][ T5871] sq930x 6-1:0.0: probe with driver sq930x failed with error -110
[  460.167177][ T8264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  460.990191][ T8279] netlink: 'syz.0.559': attribute type 2 has an invalid length.
[  462.325987][   T11] usb 6-1: USB disconnect, device number 4
[  462.576255][ T8295] syzkaller0: entered promiscuous mode
[  462.583032][ T8295] syzkaller0: entered allmulticast mode
[  462.613407][ T8300] netlink: 16 bytes leftover after parsing attributes in process `syz.1.568'.
[  463.609603][ T8313] netlink: 28 bytes leftover after parsing attributes in process `syz.1.576'.
[  465.267405][ T8345] netlink: 'syz.4.591': attribute type 1 has an invalid length.
[  466.312827][ T8367] netlink: 40 bytes leftover after parsing attributes in process `syz.1.602'.
[  466.322288][ T8367] netlink: 40 bytes leftover after parsing attributes in process `syz.1.602'.
[  466.720182][ T8367] netlink: 40 bytes leftover after parsing attributes in process `syz.1.602'.
[  466.729619][ T8367] netlink: 40 bytes leftover after parsing attributes in process `syz.1.602'.
[  468.389563][   T11] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  468.563935][   T11] usb 6-1: Using ep0 maxpacket: 16
[  468.615355][   T11] usb 6-1: unable to get BOS descriptor or descriptor too short
[  468.664488][   T11] usb 6-1: config 15 has an invalid interface number: 174 but max is 1
[  468.673290][   T11] usb 6-1: config 15 has an invalid interface number: 5 but max is 1
[  468.681779][   T11] usb 6-1: config 15 has an invalid interface descriptor of length 2, skipping
[  468.691160][   T11] usb 6-1: config 15 has no interface number 0
[  468.700570][   T11] usb 6-1: config 15 has no interface number 1
[  468.706960][   T11] usb 6-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0
[  468.717286][   T11] usb 6-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32
[  468.731905][   T11] usb 6-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping
[  468.745072][   T11] usb 6-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  468.756900][   T11] usb 6-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping
[  468.768088][   T11] usb 6-1: config 15 interface 174 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64
[  468.779730][   T11] usb 6-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64
[  468.791181][   T11] usb 6-1: config 15 interface 174 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87
[  468.803311][   T11] usb 6-1: config 15 interface 5 altsetting 128 has a duplicate endpoint with address 0x8, skipping
[  468.814611][   T11] usb 6-1: config 15 interface 5 altsetting 128 has a duplicate endpoint with address 0x8, skipping
[  468.829884][   T11] usb 6-1: config 15 interface 5 altsetting 128 has an invalid descriptor for endpoint zero, skipping
[  468.842704][   T11] usb 6-1: config 15 interface 5 altsetting 128 has 3 endpoint descriptors, different from the interface descriptor's value: 5
[  468.856315][   T11] usb 6-1: config 15 interface 174 has no altsetting 0
[  468.863566][   T11] usb 6-1: config 15 interface 5 has no altsetting 0
[  468.887378][   T11] usb 6-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d
[  468.896915][   T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  468.905358][   T11] usb 6-1: Product: syz
[  468.909775][   T11] usb 6-1: Manufacturer: 멧ꋴ䓁垫혱ڌ銿ꪭ㛂᭾෋㪞曗慵⚫ꡇ
[  468.918908][   T11] usb 6-1: SerialNumber: syz
[  468.931655][    T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  468.980581][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.625'.
[  469.135037][    T9] usb 4-1: Using ep0 maxpacket: 8
[  469.163759][ T8406] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  469.186499][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  469.197311][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  469.206836][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  469.472539][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  469.482739][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  469.491230][    T9] usb 4-1: Product: syz
[  469.495694][    T9] usb 4-1: Manufacturer: syz
[  469.500658][    T9] usb 4-1: SerialNumber: syz
[  469.563168][ T8416] loop4: detected capacity change from 0 to 2048
[  469.638230][   T11] sierra 6-1:15.174: Sierra USB modem converter detected
[  469.739790][   T11] usb 6-1: Sierra USB modem converter now attached to ttyUSB0
[  469.780120][    T9] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[  469.787654][    T9] cdc_ncm 4-1:1.0: bind() failure
[  469.843327][   T11] usb 6-1: Sierra USB modem converter now attached to ttyUSB1
[  469.855956][ T8419] loop1: detected capacity change from 0 to 40427
[  469.881696][ T8419] F2FS-fs (loop1): build fault injection rate: 14
[  469.888336][ T8419] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  469.912445][ T8419] F2FS-fs (loop1): invalid crc value
[  469.917564][   T11] usb 6-1: Sierra USB modem converter now attached to ttyUSB2
[  469.946304][ T8416] iocharset 15 not found
[  469.967208][    C1] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of bio_endio+0xe24/0xf80
[  469.977891][   T11] sierra 6-1:15.5: Sierra USB modem converter detected
[  469.991532][    C1] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of bio_endio+0xe24/0xf80
[  470.023739][   T11] usb 6-1: Sierra USB modem converter now attached to ttyUSB3
[  470.046638][   T11] usb 6-1: USB disconnect, device number 5
[  470.200565][   T11] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  470.286633][ T8419] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  470.296023][ T8419] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_get_tmp_folio+0x38/0x50
[  470.309885][   T11] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[  470.324814][ T8419] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  470.395982][   T11] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2
[  470.407015][   T11] sierra 6-1:15.174: device disconnected
[  470.512750][    C0] F2FS-fs (loop1): inject write IO error in f2fs_write_end_io of bio_endio+0xe24/0xf80
[  470.522987][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G        W           6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(none) 
[  470.523214][    C0] Tainted: [W]=WARN
[  470.523263][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  470.523341][    C0] Call Trace:
[  470.523391][    C0]  <TASK>
[  470.523442][    C0]  __dump_stack+0x26/0x30
[  470.523618][    C0]  dump_stack_lvl+0x1df/0x270
[  470.523794][    C0]  dump_stack+0x1e/0x25
[  470.523952][    C0]  f2fs_handle_critical_error+0xa6f/0xc20
[  470.524180][    C0]  f2fs_stop_checkpoint+0x65/0x80
[  470.524368][    C0]  f2fs_write_end_io+0x101c/0x1bc0
[  470.524597][    C0]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  470.524780][    C0]  bio_endio+0xe24/0xf80
[  470.524976][    C0]  blk_update_request+0xf4c/0x1a90
[  470.525207][    C0]  blk_mq_end_request+0x50/0xb0
[  470.525389][    C0]  lo_complete_rq+0x188/0x3a0
[  470.525537][    C0]  ? __pfx_lo_complete_rq+0x10/0x10
[  470.525681][    C0]  blk_done_softirq+0x112/0x1f0
[  470.525846][    C0]  ? __pfx_blk_done_softirq+0x10/0x10
[  470.526007][    C0]  handle_softirqs+0x166/0x6e0
[  470.526170][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  470.526315][    C0]  run_ksoftirqd+0x29/0x50
[  470.526453][    C0]  smpboot_thread_fn+0x56c/0xa30
[  470.526657][    C0]  kthread+0xd59/0xf00
[  470.526785][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  470.526988][    C0]  ? __pfx_kthread+0x10/0x10
[  470.527131][    C0]  ret_from_fork+0x1e3/0x310
[  470.527262][    C0]  ? __pfx_kthread+0x10/0x10
[  470.527398][    C0]  ret_from_fork_asm+0x1a/0x30
[  470.527595][    C0]  </TASK>
[  470.527651][    C0] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  470.690978][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G        W           6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(none) 
[  470.691168][    C0] Tainted: [W]=WARN
[  470.691217][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  470.691298][    C0] Call Trace:
[  470.691351][    C0]  <TASK>
[  470.691401][    C0]  __dump_stack+0x26/0x30
[  470.691573][    C0]  dump_stack_lvl+0x1df/0x270
[  470.691750][    C0]  dump_stack+0x1e/0x25
[  470.691902][    C0]  f2fs_handle_critical_error+0xa6f/0xc20
[  470.692128][    C0]  f2fs_stop_checkpoint+0x65/0x80
[  470.692318][    C0]  f2fs_write_end_io+0x101c/0x1bc0
[  470.692552][    C0]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  470.692742][    C0]  bio_endio+0xe24/0xf80
[  470.692946][    C0]  blk_update_request+0xf4c/0x1a90
[  470.693234][    C0]  blk_mq_end_request+0x50/0xb0
[  470.693424][    C0]  lo_complete_rq+0x188/0x3a0
[  470.693577][    C0]  ? __pfx_lo_complete_rq+0x10/0x10
[  470.693728][    C0]  blk_done_softirq+0x112/0x1f0
[  470.693899][    C0]  ? __pfx_blk_done_softirq+0x10/0x10
[  470.694076][    C0]  handle_softirqs+0x166/0x6e0
[  470.694243][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  470.694393][    C0]  run_ksoftirqd+0x29/0x50
[  470.694543][    C0]  smpboot_thread_fn+0x56c/0xa30
[  470.694753][    C0]  kthread+0xd59/0xf00
[  470.694885][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  470.695101][    C0]  ? __pfx_kthread+0x10/0x10
[  470.695242][    C0]  ret_from_fork+0x1e3/0x310
[  470.695373][    C0]  ? __pfx_kthread+0x10/0x10
[  470.695511][    C0]  ret_from_fork_asm+0x1a/0x30
[  470.695723][    C0]  </TASK>
[  470.695774][    C0] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  470.859073][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G        W           6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(none) 
[  470.859250][    C0] Tainted: [W]=WARN
[  470.859302][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  470.859383][    C0] Call Trace:
[  470.859432][    C0]  <TASK>
[  470.859482][    C0]  __dump_stack+0x26/0x30
[  470.859654][    C0]  dump_stack_lvl+0x1df/0x270
[  470.859831][    C0]  dump_stack+0x1e/0x25
[  470.859991][    C0]  f2fs_handle_critical_error+0xa6f/0xc20
[  470.860218][    C0]  f2fs_stop_checkpoint+0x65/0x80
[  470.860405][    C0]  f2fs_write_end_io+0x101c/0x1bc0
[  470.860641][    C0]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  470.860829][    C0]  bio_endio+0xe24/0xf80
[  470.861036][    C0]  blk_update_request+0xf4c/0x1a90
[  470.861268][    C0]  blk_mq_end_request+0x50/0xb0
[  470.861455][    C0]  lo_complete_rq+0x188/0x3a0
[  470.861608][    C0]  ? __pfx_lo_complete_rq+0x10/0x10
[  470.861756][    C0]  blk_done_softirq+0x112/0x1f0
[  470.861927][    C0]  ? __pfx_blk_done_softirq+0x10/0x10
[  470.862099][    C0]  handle_softirqs+0x166/0x6e0
[  470.862267][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  470.862418][    C0]  run_ksoftirqd+0x29/0x50
[  470.862564][    C0]  smpboot_thread_fn+0x56c/0xa30
[  470.862773][    C0]  kthread+0xd59/0xf00
[  470.862902][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  470.863119][    C0]  ? __pfx_kthread+0x10/0x10
[  470.863258][    C0]  ret_from_fork+0x1e3/0x310
[  470.863395][    C0]  ? __pfx_kthread+0x10/0x10
[  470.863534][    C0]  ret_from_fork_asm+0x1a/0x30
[  470.863745][    C0]  </TASK>
[  470.863802][    C0] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  470.903535][ T8430] loop5: detected capacity change from 0 to 512
[  470.907372][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G        W           6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(none) 
[  470.907547][    C0] Tainted: [W]=WARN
[  470.907599][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  470.907680][    C0] Call Trace:
[  470.907729][    C0]  <TASK>
[  470.907778][    C0]  __dump_stack+0x26/0x30
[  470.907948][    C0]  dump_stack_lvl+0x1df/0x270
[  470.908138][    C0]  dump_stack+0x1e/0x25
[  470.908289][    C0]  f2fs_handle_critical_error+0xa6f/0xc20
[  470.908515][    C0]  f2fs_stop_checkpoint+0x65/0x80
[  470.908707][    C0]  f2fs_write_end_io+0x101c/0x1bc0
[  470.908947][    C0]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  470.909143][    C0]  bio_endio+0xe24/0xf80
[  470.909351][    C0]  blk_update_request+0xf4c/0x1a90
[  470.909588][    C0]  blk_mq_end_request+0x50/0xb0
[  470.909780][    C0]  lo_complete_rq+0x188/0x3a0
[  470.909932][    C0]  ? __pfx_lo_complete_rq+0x10/0x10
[  470.910091][    C0]  blk_done_softirq+0x112/0x1f0
[  470.910270][    C0]  ? __pfx_blk_done_softirq+0x10/0x10
[  470.910439][    C0]  handle_softirqs+0x166/0x6e0
[  470.910605][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  470.910758][    C0]  run_ksoftirqd+0x29/0x50
[  470.910904][    C0]  smpboot_thread_fn+0x56c/0xa30
[  470.911123][    C0]  kthread+0xd59/0xf00
[  470.911256][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  470.911467][    C0]  ? __pfx_kthread+0x10/0x10
[  470.911602][    C0]  ret_from_fork+0x1e3/0x310
[  470.911734][    C0]  ? __pfx_kthread+0x10/0x10
[  470.911869][    C0]  ret_from_fork_asm+0x1a/0x30
[  470.912079][    C0]  </TASK>
[  470.912263][    C0] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  471.172691][ T8430] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #2: block 3: comm syz.5.629: lblock 0 mapped to illegal pblock 3 (length 1)
[  471.176689][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G        W           6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(none) 
[  471.176871][    C0] Tainted: [W]=WARN
[  471.176916][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  471.177006][    C0] Call Trace:
[  471.177057][    C0]  <TASK>
[  471.177105][    C0]  __dump_stack+0x26/0x30
[  471.177278][    C0]  dump_stack_lvl+0x1df/0x270
[  471.177450][    C0]  dump_stack+0x1e/0x25
[  471.177602][    C0]  f2fs_handle_critical_error+0xa6f/0xc20
[  471.177826][    C0]  f2fs_stop_checkpoint+0x65/0x80
[  471.178018][    C0]  f2fs_write_end_io+0x101c/0x1bc0
[  471.178253][    C0]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  471.178440][    C0]  bio_endio+0xe24/0xf80
[  471.178643][    C0]  blk_update_request+0xf4c/0x1a90
[  471.178876][    C0]  blk_mq_end_request+0x50/0xb0
[  471.179069][    C0]  lo_complete_rq+0x188/0x3a0
[  471.179221][    C0]  ? __pfx_lo_complete_rq+0x10/0x10
[  471.179369][    C0]  blk_done_softirq+0x112/0x1f0
[  471.179535][    C0]  ? __pfx_blk_done_softirq+0x10/0x10
[  471.179705][    C0]  handle_softirqs+0x166/0x6e0
[  471.179864][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  471.180018][    C0]  run_ksoftirqd+0x29/0x50
[  471.180161][    C0]  smpboot_thread_fn+0x56c/0xa30
[  471.180370][    C0]  kthread+0xd59/0xf00
[  471.180504][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  471.180710][    C0]  ? __pfx_kthread+0x10/0x10
[  471.180852][    C0]  ret_from_fork+0x1e3/0x310
[  471.180993][    C0]  ? __pfx_kthread+0x10/0x10
[  471.181132][    C0]  ret_from_fork_asm+0x1a/0x30
[  471.181341][    C0]  </TASK>
[  471.181520][    C0] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  471.204697][ T8430] EXT4-fs (loop5): Remounting filesystem read-only
[  471.215620][   T11] sierra ttyUSB3: Sierra USB modem converter now disconnected from ttyUSB3
[  471.227899][ T8430] EXT4-fs warning (device loop5): dx_probe:791: inode #2: lblock 0: comm syz.5.629: error -117 reading directory block
[  471.259659][ T5813] F2FS-fs (loop1): do_checkpoint failed err:-5, stop checkpoint
[  471.263683][   T11] sierra 6-1:15.5: device disconnected
[  471.460128][ T8430] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  471.470692][ T8430] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  471.679518][   T11] usb 4-1: USB disconnect, device number 18
[  472.479343][ T7874] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  473.199278][   T11] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  473.270031][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.641'.
[  473.342455][ T8467] netlink: 12 bytes leftover after parsing attributes in process `syz.5.642'.
[  473.389361][   T11] usb 4-1: Using ep0 maxpacket: 16
[  473.414247][   T11] usb 4-1: unable to get BOS descriptor or descriptor too short
[  473.436702][   T11] usb 4-1: config 15 has an invalid interface number: 174 but max is 1
[  473.445497][   T11] usb 4-1: config 15 has an invalid interface number: 5 but max is 1
[  473.454035][   T11] usb 4-1: config 15 has an invalid interface descriptor of length 2, skipping
[  473.463299][   T11] usb 4-1: config 15 has no interface number 0
[  473.469738][   T11] usb 4-1: config 15 has no interface number 1
[  473.476104][   T11] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0
[  473.486363][   T11] usb 4-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32
[  473.488366][ T8466] loop0: detected capacity change from 0 to 2048
[  473.496782][   T11] usb 4-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping
[  473.496932][   T11] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  473.497085][   T11] usb 4-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping
[  473.497220][   T11] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64
[  473.497376][   T11] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64
[  473.565381][   T11] usb 4-1: config 15 interface 174 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87
[  473.569694][ T1593] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  473.577463][   T11] usb 4-1: config 15 interface 5 altsetting 128 has a duplicate endpoint with address 0x8, skipping
[  473.596157][   T11] usb 4-1: config 15 interface 5 altsetting 128 has a duplicate endpoint with address 0x8, skipping
[  473.607296][   T11] usb 4-1: config 15 interface 5 altsetting 128 has an invalid descriptor for endpoint zero, skipping
[  473.618829][   T11] usb 4-1: config 15 interface 5 altsetting 128 has 3 endpoint descriptors, different from the interface descriptor's value: 5
[  473.632551][   T11] usb 4-1: config 15 interface 174 has no altsetting 0
[  473.643695][   T11] usb 4-1: config 15 interface 5 has no altsetting 0
[  473.757512][ T8466] iocharset 15 not found
[  473.782302][ T1593] usb 5-1: Using ep0 maxpacket: 8
[  473.804673][ T1593] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  473.817932][ T1593] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  473.856078][ T1593] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  473.865555][ T1593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.876347][ T1593] usb 5-1: Product: syz
[  473.880826][ T1593] usb 5-1: Manufacturer: syz
[  473.885605][ T1593] usb 5-1: SerialNumber: syz
[  473.906319][   T11] usb 4-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d
[  473.916339][   T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.924680][   T11] usb 4-1: Product: syz
[  473.929114][   T11] usb 4-1: Manufacturer: 멧ꋴ䓁垫혱ڌ銿ꪭ㛂
[  473.936149][   T11] usb 4-1: SerialNumber: syz
[  473.975467][ T8461] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  473.980420][ T1593] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing
[  473.993062][ T1593] cdc_ncm 5-1:1.0: bind() failure
[  474.009404][ T1593] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  474.016525][ T1593] cdc_ncm 5-1:1.1: bind() failure
[  474.293376][   T11] sierra 4-1:15.174: Sierra USB modem converter detected
[  474.340318][   T11] usb 4-1: Sierra USB modem converter now attached to ttyUSB0
[  474.389488][   T11] usb 4-1: Sierra USB modem converter now attached to ttyUSB1
[  474.439203][   T11] usb 4-1: Sierra USB modem converter now attached to ttyUSB2
[  474.507417][   T11] sierra 4-1:15.5: Sierra USB modem converter detected
[  474.566805][   T11] usb 4-1: Sierra USB modem converter now attached to ttyUSB3
[  474.585633][   T11] usb 4-1: USB disconnect, device number 19
[  474.609698][   T11] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  474.624842][   T11] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[  474.641788][   T11] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2
[  474.653952][   T11] sierra 4-1:15.174: device disconnected
[  474.701378][   T11] sierra ttyUSB3: Sierra USB modem converter now disconnected from ttyUSB3
[  474.712847][   T11] sierra 4-1:15.5: device disconnected
[  474.929166][ T8485] loop5: detected capacity change from 0 to 8
[  475.641863][ T1593] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  475.774446][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  475.821752][ T1593] usb 4-1: Using ep0 maxpacket: 16
[  475.845835][ T1593] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  475.858614][ T1593] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  476.124614][ T1593] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  476.134445][ T1593] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.142770][ T1593] usb 4-1: Product: syz
[  476.147118][ T1593] usb 4-1: Manufacturer: syz
[  476.154629][ T1593] usb 4-1: SerialNumber: syz
[  476.212798][ T1593] usb 4-1: config 0 descriptor??
[  476.255330][ T1593] appledisplay 4-1:0.0: Could not find int-in endpoint
[  476.266038][ T1593] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  476.443504][ T8496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.654'.
[  476.602580][ T1593] usb 5-1: USB disconnect, device number 20
[  476.925157][ T8499] netlink: 'syz.0.655': attribute type 6 has an invalid length.
[  476.933307][ T8499] netlink: 'syz.0.655': attribute type 25 has an invalid length.
[  476.941391][ T8499] netlink: 'syz.0.655': attribute type 27 has an invalid length.
[  476.951731][ T8499] netlink: 'syz.0.655': attribute type 28 has an invalid length.
[  476.959853][ T8499] netlink: 'syz.0.655': attribute type 29 has an invalid length.
[  476.967723][ T8499] netlink: 'syz.0.655': attribute type 30 has an invalid length.
[  478.809448][    C1] bridge0: port 1(bridge_slave_0) entered forwarding state
[  478.816945][    C1] bridge0: topology change detected, propagating
[  478.934729][ T8489] =====================================================
[  478.942156][ T8489] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xf0e/0x33f0
[  478.949769][ T8489]  _copy_to_iter+0xf0e/0x33f0
[  478.954658][ T8489]  rng_recvmsg+0x1af/0x2d0
[  478.963925][ T8489]  sock_recvmsg+0x2df/0x390
[  478.968643][ T8489]  ____sys_recvmsg+0x193/0x610
[  478.975145][ T8489]  ___sys_recvmsg+0x20b/0x850
[  478.980231][ T8489]  do_recvmmsg+0x40e/0xdf0
[  478.984810][ T8489]  __x64_sys_recvmmsg+0x383/0x500
[  478.990169][ T8489]  x64_sys_call+0x2f74/0x3e20
[  478.995056][ T8489]  do_syscall_64+0xd9/0x210
[  478.999931][ T8489]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.005977][ T8489] 
[  479.008361][ T8489] <Zero or more stacks not recorded to save memory>
[  479.008361][ T8489] 
[  479.017361][ T8489] Uninit was stored to memory at:
[  479.022769][ T8489]  crypto_sha3_finup+0x136/0xe00
[  479.027864][ T8489]  crypto_shash_finup+0x324/0xe80
[  479.033239][ T8489]  jent_hash_time+0x247/0x590
[  479.038098][ T8489]  jent_condition_data+0x4f0/0x510
[  479.043644][ T8489]  jent_measure_jitter+0x547/0x770
[  479.049055][ T8489]  jent_gen_entropy+0x209/0x450
[  479.054078][ T8489]  jent_read_entropy+0x353/0xeb0
[  479.059355][ T8489]  jent_kcapi_random+0x6c/0x250
[  479.068872][ T8489]  rng_recvmsg+0x146/0x2d0
[  479.075043][ T8489]  sock_recvmsg+0x2df/0x390
[  479.079924][ T8489]  ____sys_recvmsg+0x193/0x610
[  479.084867][ T8489]  ___sys_recvmsg+0x20b/0x850
[  479.089853][ T8489]  do_recvmmsg+0x40e/0xdf0
[  479.094433][ T8489]  __x64_sys_recvmmsg+0x383/0x500
[  479.099915][ T8489]  x64_sys_call+0x2f74/0x3e20
[  479.104776][ T8489]  do_syscall_64+0xd9/0x210
[  479.109617][ T8489]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.115669][ T8489] 
[  479.118056][ T8489] Uninit was stored to memory at:
[  479.123499][ T8489]  crypto_shash_finup+0xc5a/0xe80
[  479.128712][ T8489]  jent_hash_time+0x1de/0x590
[  479.133804][ T8489]  jent_condition_data+0x4f0/0x510
[  479.139227][ T8489]  jent_measure_jitter+0x547/0x770
[  479.144514][ T8489]  jent_gen_entropy+0x209/0x450
[  479.149689][ T8489]  jent_read_entropy+0x353/0xeb0
[  479.154798][ T8489]  jent_kcapi_random+0x6c/0x250
[  479.159990][ T8489]  rng_recvmsg+0x146/0x2d0
[  479.169112][ T8489]  sock_recvmsg+0x2df/0x390
[  479.173818][ T8489]  ____sys_recvmsg+0x193/0x610
[  479.178741][ T8489]  ___sys_recvmsg+0x20b/0x850
[  479.185337][ T8489]  do_recvmmsg+0x40e/0xdf0
[  479.190176][ T8489]  __x64_sys_recvmmsg+0x383/0x500
[  479.195373][ T8489]  x64_sys_call+0x2f74/0x3e20
[  479.200421][ T8489]  do_syscall_64+0xd9/0x210
[  479.205096][ T8489]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.211305][ T8489] 
[  479.213693][ T8489] Uninit was stored to memory at:
[  479.218900][ T8489]  crypto_sha3_finup+0xc98/0xe00
[  479.224113][ T8489]  crypto_shash_finup+0x324/0xe80
[  479.229519][ T8489]  jent_hash_time+0x247/0x590
[  479.234375][ T8489]  jent_condition_data+0x4f0/0x510
[  479.239845][ T8489]  jent_measure_jitter+0x547/0x770
[  479.245131][ T8489]  jent_gen_entropy+0x209/0x450
[  479.250400][ T8489]  jent_read_entropy+0x353/0xeb0
[  479.255534][ T8489]  jent_kcapi_random+0x6c/0x250
[  479.260781][ T8489]  rng_recvmsg+0x146/0x2d0
[  479.270252][ T8489]  sock_recvmsg+0x2df/0x390
[  479.275004][ T8489]  ____sys_recvmsg+0x193/0x610
[  479.281495][ T8489]  ___sys_recvmsg+0x20b/0x850
[  479.286358][ T8489]  do_recvmmsg+0x40e/0xdf0
[  479.291125][ T8489]  __x64_sys_recvmmsg+0x383/0x500
[  479.296337][ T8489]  x64_sys_call+0x2f74/0x3e20
[  479.301389][ T8489]  do_syscall_64+0xd9/0x210
[  479.306066][ T8489]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.312376][ T8489] 
[  479.314770][ T8489] Uninit was stored to memory at:
[  479.320082][ T8489]  keccakf+0x1efb/0x2110
[  479.324476][ T8489]  crypto_sha3_finup+0x772/0xe00
[  479.329726][ T8489]  crypto_shash_finup+0x324/0xe80
[  479.334956][ T8489]  jent_hash_time+0x247/0x590
[  479.339991][ T8489]  jent_condition_data+0x4f0/0x510
[  479.345281][ T8489]  jent_measure_jitter+0x547/0x770
[  479.350734][ T8489]  jent_gen_entropy+0x209/0x450
[  479.355748][ T8489]  jent_read_entropy+0x353/0xeb0
[  479.361016][ T8489]  jent_kcapi_random+0x6c/0x250
[  479.366051][ T8489]  rng_recvmsg+0x146/0x2d0
[  479.375306][ T8489]  sock_recvmsg+0x2df/0x390
[  479.381541][ T8489]  ____sys_recvmsg+0x193/0x610
[  479.386478][ T8489]  ___sys_recvmsg+0x20b/0x850
[  479.391478][ T8489]  do_recvmmsg+0x40e/0xdf0
[  479.396058][ T8489]  __x64_sys_recvmmsg+0x383/0x500
[  479.401457][ T8489]  x64_sys_call+0x2f74/0x3e20
[  479.406332][ T8489]  do_syscall_64+0xd9/0x210
[  479.411159][ T8489]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.417208][ T8489] 
[  479.419767][ T8489] Uninit was stored to memory at:
[  479.424976][ T8489]  crypto_sha3_finup+0x5be/0xe00
[  479.430303][ T8489]  crypto_shash_finup+0x324/0xe80
[  479.435533][ T8489]  jent_hash_time+0x247/0x590
[  479.440638][ T8489]  jent_condition_data+0x4f0/0x510
[  479.445936][ T8489]  jent_measure_jitter+0x547/0x770
[  479.451395][ T8489]  jent_gen_entropy+0x209/0x450
[  479.456420][ T8489]  jent_read_entropy+0x353/0xeb0
[  479.461674][ T8489]  jent_kcapi_random+0x6c/0x250
[  479.466708][ T8489]  rng_recvmsg+0x146/0x2d0
[  479.475865][ T8489]  sock_recvmsg+0x2df/0x390
[  479.482066][ T8489]  ____sys_recvmsg+0x193/0x610
[  479.487011][ T8489]  ___sys_recvmsg+0x20b/0x850
[  479.492296][ T8489]  do_recvmmsg+0x40e/0xdf0
[  479.496884][ T8489]  __x64_sys_recvmmsg+0x383/0x500
[  479.502235][ T8489]  x64_sys_call+0x2f74/0x3e20
[  479.507101][ T8489]  do_syscall_64+0xd9/0x210
[  479.511923][ T8489]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.517969][ T8489] 
[  479.520554][ T8489] Uninit was stored to memory at:
[  479.525797][ T8489]  crypto_sha3_finup+0x136/0xe00
[  479.531671][ T8489]  crypto_shash_finup+0x324/0xe80
[  479.536898][ T8489]  jent_hash_time+0x247/0x590
[  479.541932][ T8489]  jent_condition_data+0x4f0/0x510
[  479.547229][ T8489]  jent_measure_jitter+0x547/0x770
[  479.552677][ T8489]  jent_gen_entropy+0x209/0x450
[  479.557705][ T8489]  jent_read_entropy+0x353/0xeb0
[  479.562969][ T8489]  jent_kcapi_random+0x6c/0x250
[  479.568007][ T8489]  rng_recvmsg+0x146/0x2d0
[  479.577209][ T8489]  sock_recvmsg+0x2df/0x390
[  479.584128][ T8489]  ____sys_recvmsg+0x193/0x610
[  479.589249][ T8489]  ___sys_recvmsg+0x20b/0x850
[  479.594109][ T8489]  do_recvmmsg+0x40e/0xdf0
[  479.598690][ T8489]  __x64_sys_recvmmsg+0x383/0x500
[  479.604047][ T8489]  x64_sys_call+0x2f74/0x3e20
[  479.609734][ T8489]  do_syscall_64+0xd9/0x210
[  479.614421][ T8489]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.620638][ T8489] 
[  479.623027][ T8489] Uninit was stored to memory at:
[  479.628340][ T8489]  crypto_shash_finup+0xc5a/0xe80
[  479.633731][ T8489]  jent_hash_time+0x1de/0x590
[  479.638607][ T8489]  jent_condition_data+0x4f0/0x510
[  479.644122][ T8489]  jent_measure_jitter+0x547/0x770
[  479.649551][ T8489]  jent_gen_entropy+0x209/0x450
[  479.654591][ T8489]  jent_read_entropy+0x353/0xeb0
[  479.659852][ T8489]  jent_kcapi_random+0x6c/0x250
[  479.664887][ T8489]  rng_recvmsg+0x146/0x2d0
[  479.669670][ T8489]  sock_recvmsg+0x2df/0x390
[  479.674358][ T8489]  ____sys_recvmsg+0x193/0x610
[  479.683940][ T8489]  ___sys_recvmsg+0x20b/0x850
[  479.688810][ T8489]  do_recvmmsg+0x40e/0xdf0
[  479.694993][ T8489]  __x64_sys_recvmmsg+0x383/0x500
[  479.700359][ T8489]  x64_sys_call+0x2f74/0x3e20
[  479.705224][ T8489]  do_syscall_64+0xd9/0x210
[  479.710084][ T8489]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.716138][ T8489] 
[  479.718529][ T8489] Local variable intermediary created at:
[  479.724480][ T8489]  jent_hash_time+0x9b/0x590
[  479.729439][ T8489]  jent_condition_data+0x4f0/0x510
[  479.734734][ T8489] 
[  479.737122][ T8489] Bytes 64-72 of 73 are uninitialized
[  479.742781][ T8489] Memory access of size 73 starts at ffff888125207910
[  479.749776][ T8489] Data copied to user address 0000200000002040
[  479.756022][ T8489] 
[  479.758452][ T8489] CPU: 0 UID: 0 PID: 8489 Comm: syz.3.650 Tainted: G        W           6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(none) 
[  479.772356][ T8489] Tainted: [W]=WARN
[  479.776260][ T8489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  479.791068][ T8489] =====================================================
[  479.798115][ T8489] Disabling lock debugging due to kernel taint
[  479.806001][ T8489] Kernel panic - not syncing: kmsan.panic set ...
[  479.812569][ T8489] CPU: 0 UID: 0 PID: 8489 Comm: syz.3.650 Tainted: G    B   W           6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(none) 
[  479.826243][ T8489] Tainted: [B]=BAD_PAGE, [W]=WARN
[  479.831362][ T8489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  479.841544][ T8489] Call Trace:
[  479.844920][ T8489]  <TASK>
[  479.847941][ T8489]  __dump_stack+0x26/0x30
[  479.852470][ T8489]  dump_stack_lvl+0x53/0x270
[  479.857251][ T8489]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  479.863255][ T8489]  dump_stack+0x1e/0x25
[  479.867589][ T8489]  vpanic+0x361/0xc50
[  479.871777][ T8489]  panic+0x15d/0x160
[  479.875939][ T8489]  kmsan_report+0x31c/0x320
[  479.880640][ T8489]  ? kmsan_internal_check_memory+0x1e1/0x230
[  479.886778][ T8489]  ? kmsan_copy_to_user+0xf1/0x190
[  479.892049][ T8489]  ? _copy_to_iter+0xf0e/0x33f0
[  479.897099][ T8489]  ? rng_recvmsg+0x1af/0x2d0
[  479.901846][ T8489]  ? sock_recvmsg+0x2df/0x390
[  479.906717][ T8489]  ? ____sys_recvmsg+0x193/0x610
[  479.911824][ T8489]  ? ___sys_recvmsg+0x20b/0x850
[  479.916835][ T8489]  ? do_recvmmsg+0x40e/0xdf0
[  479.921596][ T8489]  ? __x64_sys_recvmmsg+0x383/0x500
[  479.926968][ T8489]  ? x64_sys_call+0x2f74/0x3e20
[  479.932019][ T8489]  ? do_syscall_64+0xd9/0x210
[  479.936920][ T8489]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.943157][ T8489]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  479.949664][ T8489]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  479.955953][ T8489]  ? __msan_memset+0xf6/0x1b0
[  479.960800][ T8489]  ? jent_read_random_block+0x231/0x270
[  479.966544][ T8489]  ? kmsan_get_metadata+0xfb/0x160
[  479.971834][ T8489]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  479.977839][ T8489]  ? jent_read_entropy+0xe7b/0xeb0
[  479.983199][ T8489]  ? kmsan_get_metadata+0xfb/0x160
[  479.988491][ T8489]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  479.994515][ T8489]  kmsan_internal_check_memory+0x1e1/0x230
[  480.000536][ T8489]  kmsan_copy_to_user+0xf1/0x190
[  480.005653][ T8489]  _copy_to_iter+0xf0e/0x33f0
[  480.010552][ T8489]  ? kmsan_get_metadata+0xfb/0x160
[  480.015865][ T8489]  ? kmsan_internal_unpoison_memory+0x11/0x20
[  480.022219][ T8489]  rng_recvmsg+0x1af/0x2d0
[  480.026831][ T8489]  ? kmsan_get_metadata+0xfb/0x160
[  480.032129][ T8489]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  480.038130][ T8489]  ? __pfx_rng_recvmsg+0x10/0x10
[  480.043235][ T8489]  ? __pfx_rng_recvmsg+0x10/0x10
[  480.048322][ T8489]  sock_recvmsg+0x2df/0x390
[  480.053041][ T8489]  ____sys_recvmsg+0x193/0x610
[  480.057990][ T8489]  ? setup_fault_attr+0x2e0/0x300
[  480.063221][ T8489]  ? stack_depot_save_flags+0x35/0x7b0
[  480.068957][ T8489]  ___sys_recvmsg+0x20b/0x850
[  480.073904][ T8489]  ? kmsan_get_metadata+0xfb/0x160
[  480.079199][ T8489]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  480.085202][ T8489]  do_recvmmsg+0x40e/0xdf0
[  480.089828][ T8489]  ? stack_depot_save_flags+0x35/0x7b0
[  480.095489][ T8489]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  480.101482][ T8489]  ? kmsan_get_metadata+0xfb/0x160
[  480.106836][ T8489]  __x64_sys_recvmmsg+0x383/0x500
[  480.112099][ T8489]  x64_sys_call+0x2f74/0x3e20
[  480.116975][ T8489]  do_syscall_64+0xd9/0x210
[  480.121665][ T8489]  ? irqentry_exit+0x16/0x60
[  480.126504][ T8489]  ? clear_bhb_loop+0x40/0x90
[  480.131353][ T8489]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.137409][ T8489] RIP: 0033:0x7fd25878ebe9
[  480.141956][ T8489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  480.161738][ T8489] RSP: 002b:00007fd259615038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  480.170307][ T8489] RAX: ffffffffffffffda RBX: 00007fd2589b5fa0 RCX: 00007fd25878ebe9
[  480.178357][ T8489] RDX: 0000000000000001 RSI: 0000200000002780 RDI: 0000000000000005
[  480.186394][ T8489] RBP: 00007fd258811e19 R08: 0000000000000000 R09: 0000000000000000
[  480.194434][ T8489] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000000
[  480.202474][ T8489] R13: 00007fd2589b6038 R14: 00007fd2589b5fa0 R15: 00007fff34c33c18
[  480.210588][ T8489]  </TASK>
[  480.213991][ T8489] Kernel Offset: disabled
[  480.218366][ T8489] Rebooting in 86400 seconds..