last executing test programs:

4m23.264037668s ago: executing program 0 (id=160):
syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x9, 0xb0, 0x8, {0x8, 0xb, 0x0, 0x1, 0x1, 0xc, 0x20, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x4, 0x9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9, 0x7, 0xfa, {0x8, 0x25, 0x1, 0x82, 0xd, 0x13, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x3, 0x0, {0x8, 0x25, 0x1, 0x3, 0x33}}}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}})

4m21.179364938s ago: executing program 0 (id=165):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = dup(0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @generic={{0x10, 0x4, 0x1, 0x6, 0x40, 0x67, 0x0, 0x7, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x25}, @multicast1, {[@timestamp_prespec={0x44, 0x2c, 0x46, 0x3, 0xf, [{@private=0xa010101}, {@local, 0x72d}, {@local, 0x20f}, {@remote, 0xbf67}, {@loopback, 0x4}]}]}}}}}}}, 0x52)

4m20.974742643s ago: executing program 0 (id=168):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x8)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000140)={0x1, 0x3, 0x8000, 0xc0, 0x6bfb, 0xffff})
fchown(r0, 0xee00, 0xee01)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, <r2=>0x0}, &(0x7f0000000040)=0x5)
fchown(r0, r2, 0x0)

4m20.219092141s ago: executing program 0 (id=173):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1400c, &(0x7f00000000c0)={[{@errors_continue}, {@nomblk_io_submit}, {@norecovery}]}, 0x3, 0x481, &(0x7f0000000e00)="$eJzs3M1vG0UbAPBnN3Hy5m0hoZSvlo9AQVQIkqYt0AMHQCBxKAIJDnC0klCVpgU1QaJVJFIO5YQQEnfEkX+BE1wQ4oTEFe6oUoVyacvJaL27ie04bt3acYt/P8n1zH5k5vHu2M/u2A1gaE1n/yQRuyPij4iYzKvNG0znT1fXV+evra/OJ1GrvfN3Ut/uyvrqfLlpud+uxkoksb9Nu8vnzp+qLi0tni3qsyunP55dPnf+uZOnqycWTyyeOXzs2NEjcy++cPj5W4xwz1v5c1rU33j/6zePf9kUf0scPTLdaeVTtVqPmxusuxrKowPsB90ZKY5XpT7+J2Ok4ehNxuufb1Q+G1AHgb6p1Wq1XduvXqsB/2FJNNcNeRgW5Qd9ef1bPI83JgEv9zUDGazLr+QXQFncV4tHvmZ0445BpeX6tpemI+K9tX++zR7R8T5E0qceAADD5scs/3k2y3ZW57PcYzP/SOP+hu3uLuaGpiLinojYExH3xpnYGxH3RdS3fSAiHuyy/YZJknqaeWV9rCX/SS/ddHA3IMv/XirmtprzvzL7i6mReu1cXolK8sHJpcVDxWtyMCrjWX2uQxs/vfb7V9uta8z/skfWfpkLFv24NDrevM9CdaV68xE3u3whYt9ou/iTjZmALPN8KCL2tfsD6fXbOPnM9w9vt+768XfQg4mm2ncRT+fHfy1a4i8lnecnZ/8XS4uHZsuzYqtff7v49nbt31L8PZAd//+3Pf834p9KGudrl7tv4+KfX2w7tzpdKQpdnP9r1ZXqWPJuvTxWLPu0urJydi5iLDmed7px+eHNfct6uX0W/8ED7cf/nth8JfZHRHYSPxIRj0bEY8WxezwinoiIAx3i/+XVJz9sXTZRxn8bHP+Fro7/ZmEsmpekbbbJCiOnfv6hqdGpzWIR/7XO739H66WDxZIbef/b2ov2hVt9/QAAAOBOkEbE7kjSmY1yms7M5N/h35tPfWc+ObOQ/0ZgKippeadrsuF+6FxxWZ/XL0RE/tWCcv2RSOv3jb8ZmajXZ+Y/WloYaOTArm3Gf+avkUH3Dug7P9iC4WX8w/DqOP4rO9cPYOdtGf8dx/x4X/sC7Kw2n/8Tg+gHsPPa5f/+vx8YDi3j37QfDBH3/2F4Gf8wvIx/GErLE3H9H8lvFCoR0bqq/Es3sPvNFCYjuunh7VOIym3Rjb4VIu17E2P9PbX6VkjuwD5vKQzuPQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCX/g0AAP//uvzMag==")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

4m18.074378622s ago: executing program 0 (id=175):
r0 = socket$inet(0x2, 0xa, 0x1100008)
r1 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r2, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[], 0x0)
recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0)

4m15.777171497s ago: executing program 0 (id=185):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r0, 0x11, 0xa, 0x0, 0x0)
socket$unix(0x1, 0x2, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000940), 0x0, 0x400)
syz_usb_disconnect(r1)
syz_usb_connect(0x4, 0x36, &(0x7f0000000800)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)

4m15.118919393s ago: executing program 32 (id=185):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r0, 0x11, 0xa, 0x0, 0x0)
socket$unix(0x1, 0x2, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000940), 0x0, 0x400)
syz_usb_disconnect(r1)
syz_usb_connect(0x4, 0x36, &(0x7f0000000800)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)

4m7.505173095s ago: executing program 2 (id=204):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x800, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES64, @ANYBLOB="0ea1a3ed758749a35b0cf19e7301710a8a7c5e7fe9b7c49589266bd5045f15f1817fcc4e1f00000000000000beaeafc22a5a08a1a70024a159dbd9fd46d32db66594de164160662b44fa88fb14c2cf8bb55768f2d9304cb839c6ba63892e325902aaf67a7163"], 0x1, 0x2c3, &(0x7f0000000180)="$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")
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@getnexthop={0x20, 0x6a, 0x401, 0x70bd2b, 0x25dfdbfb, {}, [@NHA_ID={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x240000c0}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x42, 0x0)

4m6.979336127s ago: executing program 2 (id=208):
syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000000c0))
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x8)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000140)={0x1, 0x3, 0x8000, 0xc0, 0x6bfb, 0xffff})
fchown(r0, 0xee00, 0xee01)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, <r2=>0x0}, &(0x7f0000000040)=0x5)
fchown(r0, r2, 0x0)

4m6.732445993s ago: executing program 2 (id=210):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @generic={{0x10, 0x4, 0x1, 0x6, 0x40, 0x67, 0x0, 0x7, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x25}, @multicast1, {[@timestamp_prespec={0x44, 0x2c, 0x46, 0x3, 0xf, [{@private=0xa010101}, {@local, 0x72d}, {@local, 0x20f}, {@remote, 0xbf67}, {@loopback, 0x4}]}]}}}}}}}, 0x52)

4m6.247593715s ago: executing program 2 (id=213):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000280)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=default,gid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x153c, &(0x7f0000000440)="$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")
syz_emit_ethernet(0x89, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(0x0, 0x1, 0x183002)
socket$nl_netfilter(0x10, 0x3, 0xc)
write$evdev(r0, 0x0, 0x0)
gettid()
mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)

4m5.715474368s ago: executing program 2 (id=217):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt(r0, 0x65, 0x6, 0x0, 0x0)

4m4.680944523s ago: executing program 2 (id=219):
syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000000c0))
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x8)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000140)={0x1, 0x3, 0x8000, 0xc0, 0x6bfb, 0xffff})
fchown(r0, 0xee00, 0xee01)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, <r2=>0x0}, &(0x7f0000000040)=0x5)
fchown(r0, r2, 0x0)

4m4.106383426s ago: executing program 33 (id=219):
syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000000c0))
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x8)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000140)={0x1, 0x3, 0x8000, 0xc0, 0x6bfb, 0xffff})
fchown(r0, 0xee00, 0xee01)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, <r2=>0x0}, &(0x7f0000000040)=0x5)
fchown(r0, r2, 0x0)

1m40.035259899s ago: executing program 5 (id=921):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0xa, 0xc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)

1m39.799521885s ago: executing program 5 (id=923):
bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe2(0x0, 0x80000)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$VT_DISALLOCATE(r2, 0x5608)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
clock_gettime(0x0, &(0x7f0000000140)={<r3=>0x0, <r4=>0x0})
timer_settime(r1, 0x1, &(0x7f0000000040)={{r3, r4+10000000}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x6, 0xc)

1m39.59133498s ago: executing program 5 (id=924):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000003c0)={r0, 0x58, &(0x7f0000000300)}, 0x10)

1m39.482899783s ago: executing program 5 (id=926):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000040)={[{@test_dummy_encryption_v1}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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")
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)='./file0/file0\x00')

1m38.538118345s ago: executing program 5 (id=931):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x87b, 0x5, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa53}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

1m32.835067102s ago: executing program 5 (id=948):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2008002, &(0x7f00000000c0), 0x1, 0x560, &(0x7f0000000440)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f000000ae00)={0x6, 0x7ff, 0x2, 0x9})

1m31.743825117s ago: executing program 34 (id=948):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2008002, &(0x7f00000000c0), 0x1, 0x560, &(0x7f0000000440)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f000000ae00)={0x6, 0x7ff, 0x2, 0x9})

9.851009534s ago: executing program 7 (id=1265):
r0 = syz_usb_connect$rtl8150(0x5, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001680)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)={0x40, 0x5, 0x1, '/'}})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, &(0x7f0000000340)={0x14, &(0x7f00000000c0)={0x0, 0x23, 0x5d, {0x5d, 0xf, "96b7156c0fb289d1c8a85cb9069d733f38516d8d6a0677c0bcd0ae3dd71598a79a6b26c53093657bac4fdf3d6364bc84e69806ea5817e16fa52a0d1c3894d2d500f146f6e22253f6cc504aee57dc49d89a907a0769a78d8448f593"}}, 0x0}, &(0x7f0000001340)={0x2c, &(0x7f00000008c0)={0x20, 0xd}, 0x0, 0x0, 0x0, &(0x7f0000001300)={0x40, 0x5, 0x1, '~'}})
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$uac2(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000540)={0x14, &(0x7f0000000400)={0x20, 0xf1a74451ca988171, 0x9, {0x9, 0x5, "57f3dae9211fba"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x812}}}, 0x0)

4.889887673s ago: executing program 6 (id=1273):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x87b, 0x5, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa53}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000078085000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

4.646378259s ago: executing program 7 (id=1276):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21081e, &(0x7f0000000bc0)={[{@jqfmt_vfsv1}, {@nodelalloc}, {@grpquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}]}, 0x1, 0x516, &(0x7f00000005c0)="$eJzs3c9vI1cdAPDveNeJd5M2aekBELRLW1jQap3E20ZVD1BOCKFKiB5B2obEG0Wx4yh2ShP2kJ65IlGJExw48Adwrjhw54LgxqUckPgRgRokDoNmPEm9WXsTmsRO489HGs1782bn+95a857nOfYLYGzdioi9iJiIiLcjYqY4nhRbvNHdsvM+2n+4fLD/cDmJNH3rH0lenh2Lnn+TmSquWYmI730r4ofJ43HbO7vrS41GfavIz3Wam3Ptnd27a82l1fpqfaNWW1xYnH/t3qu1c2vrC82JIvXFD3+/97UfZ9WaLo70tuM8dZtePoqTuR4R37mIYCNwrWjPxKgrwidSiohnI+LF/P6fiWv5qwkAXGVpOhPpTG8eALjqSvkcWFKqFnMB01EqVasRU5HEc3Gz1Gi1O3cetLY3VrpzZbNRLj1Ya9Tni7nC2SgnWX4hT3+crx3L34uIZyLip5M38nx1udVYGeUbHwAYY1PHxv9/T3bHfwDgiquMugIAwNAZ/wFg/Bj/AWD8GP8BYPx0x/8bo64GADBEnv8BYPwY/wFgrHz3zTezLT0ofv965Z2d7fXWO3dX6u31anN7ubrc2tqsrrZaq/lv9jRPul6j1dpceCW23539+ma7M9fe2b3fbG1vdO7nv+t9v17Oz9obQssAgEGeeeGDPyXZiPz6jXyLnrUcyiOtGXDRSqOuADAy10ZdAWBk/s/VviwOBlfIGZ7xTQ/AFdFnid5HVPp9QShN0/TiqgRcsNufM/8P46pn/t9fAcOYMf8P48uEPoyvNE1Ou+Z/nPZEAOByM8cPDPj8/9li/+viw4EfrBw/4/2Tr+07BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFxVh+v/Vot1OqajVKpWI56KiNkoJw/WGvX5iHg6Iv44WZ7M8gsjrjMAcFalvybF+l+3Z16efqTo+amj5ERE/Ojnb/3s3aVOZ+sPERPJPycPj3feL47Xhl97AOBkh+N0vu95kP9o/+Hy4TbM+vztmxFR6cY/2J+Ig6P41+N6vq9EOSJu/isp8l1Jz9zFWey9FxGf7df+JKbzOZDuyqfH42exnxpq/NIj8Ut5WXef/V985hzqAuPmg6z/eaPf/VeKW/m+//1fyXuosyv6v+xSywd5H/hx/MP+79qA/u/WaWO88rtvd1M3Hi97L+Lz1yMOYx/09D+H8ZMB8V8+Zfw/f+H5FweVpb+IuB394/fGmus0N+faO7t315pLq/XV+kattriwOP/avVdrc/kc9Vx3NEj7DAp/f/3O04PiZ+2/OSB+5YT2f/mU7f/lf9/+/peeEP+rL/WLX4rnnhA/ezL/yinjL938TWVQWRZ/ZUD7T3r975widjY+ffiX3ceWDQcARqe9s7u+1GjUtz6tiV/9ttuQJ5yTvVe5DFWVOHMiLvFL+Y1hxZqI/kU/eal7KxwrStNPFGtQj3Ees27AZXB000fEf0ZdGQAAAAAAAAAAAAAAoK9hfGNp1G0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vpfAAAA//9BBsyD")
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

4.424453175s ago: executing program 6 (id=1279):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020030430600000000000010902240001000000000904010001030000000921000000012202000905810300"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220d00000006"], 0x0}, 0x0)
syz_usb_connect$midi(0x2, 0x45, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x8215, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x33, 0x1, 0x1, 0x9, 0xc0, 0x3c, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x30, 0x7, [@midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x77}], [{{0x9, 0x5, 0x2, 0x0, 0x40, 0x0, 0xf9, 0x7, {0x4}}}, {{0x9, 0x5, 0xf, 0x2621087a8d0ae1a6, 0x3ff, 0x4, 0x5, 0x0, {0x5, 0x25, 0x1, 0x1, "de"}}}]}}}}}]}}, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103)
syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x5c)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r1, &(0x7f0000009b40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160bd281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc002db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa8b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f0000007a80)={&(0x7f00000001c0)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871989b1dd77, 0xdcf, 0x9, 0xb, 0x9, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
lsetxattr$system_posix_acl(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="020000000100020003000000000000000000000010000300000000002000010000000000"], 0x24, 0x1)
openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0)
syz_usb_connect$uac2(0x1, 0x0, 0x0, 0x0)

4.20047603s ago: executing program 4 (id=1281):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5'])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file1\x00', 0x0, 0x800)

3.811926429s ago: executing program 7 (id=1282):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0xa, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0xfd, 0x553e, &(0x7f0000006b40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000340)=0xfffffff9)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x800800})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

3.811722169s ago: executing program 4 (id=1283):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7c, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88641100404863330021ac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40), 0x2}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x2b, 0x1, 0x0)
close(r0)
r1 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000001c0), 0x45)
close(r0)

3.643399723s ago: executing program 4 (id=1284):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000700000042"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4002}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001ac0)={{r2}, &(0x7f0000001a40), &(0x7f0000001a80)='%+9llu \x00'}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x6, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1000002, 0x6a}}}}}, 0x0)

3.431263918s ago: executing program 4 (id=1286):
gettid()
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x8}}]}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x0, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000400)={0x2, 0x100})

3.264139162s ago: executing program 1 (id=1287):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=@acquire={0x128, 0x17, 0x1, 0x70bd27, 0x25dfdbfe, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d5, 0xff}, @in=@private=0xa010102, {@in=@multicast2, @in6=@private0, 0x4e21, 0x100, 0x4e20, 0x3, 0x2, 0xe0, 0x20, 0x3c, 0x0, 0xffffffffffffffff}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@remote, 0x4e21, 0x9, 0x4e22, 0x83, 0x2, 0x0, 0x0, 0xc}, {0x7f, 0xec2b, 0x3, 0xa, 0xd5, 0x6, 0x6, 0x2}, {0x800000000000007, 0xa0, 0x200000000009, 0x200000000010003}, 0xba, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x3, 0x1, 0x200, 0x70bd29}}, 0x128}, 0x1, 0x0, 0x0, 0x40000}, 0x4008810)

3.084256057s ago: executing program 1 (id=1288):
timer_settime(0x0, 0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket(0x2, 0x3, 0xff)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2.827261453s ago: executing program 1 (id=1289):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x87b, 0x5, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa53}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000078085000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

2.701278846s ago: executing program 1 (id=1290):
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0)
readv(r0, 0x0, 0x0)

2.439284822s ago: executing program 1 (id=1293):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b874cd601d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799224883d08ce470220a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d5000000000000007d2bee8ed5acba62b8ce6eee44e813220ebc37ad7d422bb972c33e626d4d13827d303ee15e254c75ee569a56fa9e"], 0x25, 0x55a8, &(0x7f000000ac40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109142, 0x5)
fallocate(r0, 0x0, 0x4000, 0x10803ffc)

2.046530961s ago: executing program 3 (id=1295):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0])
chdir(&(0x7f0000000140)='./file0\x00')
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r0, 0x4, 0x40800)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r1, 0x2000009)
sendfile(r0, r1, 0x0, 0x7ffff004)

1.971306063s ago: executing program 6 (id=1296):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xba, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88641100404863330021ac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40), 0x2}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x2b, 0x1, 0x0)
close(r0)
r1 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000001c0), 0x45)
close(r0)

1.789320978s ago: executing program 3 (id=1297):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000010c0)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f0000000300)}, 0x20)

1.719816699s ago: executing program 6 (id=1298):
r0 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r1 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x5}, {0x0, 0x4000000000004, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x4, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0xffffffff, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)

1.567339753s ago: executing program 3 (id=1299):
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0)

1.427763067s ago: executing program 3 (id=1300):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x87b, 0x5, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa53}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000006"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

1.297571379s ago: executing program 3 (id=1301):
r0 = socket$inet6(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0xfffffffffffe, 0x5, 0x9}, {0x0, 0x0, 0x0, 0x2}, 0x80006c, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0xffffffff, 0x33}, 0xa, @in=@empty, 0x3507, 0x1, 0x1, 0x0, 0x40000, 0x8007c, 0xfffffffe}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0xfffffffd}, 0x1c)

1.210727851s ago: executing program 7 (id=1302):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a00"], 0x0, 0x5a}, 0x28)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)

623.364515ms ago: executing program 1 (id=1303):
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x240, 0x310)
write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000200000000000008fe", 0x1e)
ioctl(r0, 0xc138fd02, &(0x7f0000000000)="0400000000000000")
write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffe)

572.279377ms ago: executing program 6 (id=1304):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x280440e, &(0x7f00000008c0)={[{@sysvgroups}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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")
r0 = creat(&(0x7f0000000080)='./bus\x00', 0x27)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
unlink(&(0x7f0000000000)='./bus\x00')
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0x2000}])

285.333974ms ago: executing program 7 (id=1305):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c)

284.966324ms ago: executing program 3 (id=1306):
r0 = timerfd_create(0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4000009c, 0x0, 0x7f}]})
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1})
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000180)={"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"})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0x9, 0x0, 0x0, 0x0, 0x10, 0xff, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x701, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x8, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0xff}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x1, 0x54, '\x00', 0xff}, {0x2, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0x5}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x7, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}})
read(r0, &(0x7f0000002180)=""/262, 0x106)
timerfd_settime(r0, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0)

252.524424ms ago: executing program 4 (id=1307):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x80, 0x0, 0x1, 0x1}})

115.319018ms ago: executing program 7 (id=1308):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0])
r0 = socket$packet(0x11, 0x3, 0x300)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r1, 0x4, 0x40800)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r2, 0x2000009)
sendfile(r1, r2, 0x0, 0x7ffff004)

24.37024ms ago: executing program 4 (id=1309):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000010c0)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f0000000300)}, 0x20)

0s ago: executing program 6 (id=1310):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:01.0/d3cold_allowed\x00', 0x1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
setitimer(0x1, 0x0, 0x0)
write(r0, &(0x7f0000000540)='1', 0x1)

kernel console output (not intermixed with test programs):

terface: batadv_slave_0
[  143.255303][ T4921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.299375][ T4230] Bluetooth: hci1: command 0x0409 tx timeout
[  143.376365][ T4921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  143.436899][ T4921] batman_adv: batadv0: Adding interface: batadv_slave_1
[  143.474786][ T4921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.582496][ T4921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  143.796455][ T4921] device hsr_slave_0 entered promiscuous mode
[  143.815028][ T4921] device hsr_slave_1 entered promiscuous mode
[  143.837856][ T4921] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  143.876989][ T4921] Cannot create hsr debugfs directory
[  143.909675][  T154] device hsr_slave_0 left promiscuous mode
[  143.929301][  T154] device hsr_slave_1 left promiscuous mode
[  143.948735][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.989048][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.019046][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.026635][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.059831][  T154] device bridge_slave_1 left promiscuous mode
[  144.067784][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.157254][  T154] device bridge_slave_0 left promiscuous mode
[  144.214394][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.341641][  T154] device veth1_macvtap left promiscuous mode
[  144.365770][  T154] device veth0_macvtap left promiscuous mode
[  144.400457][  T154] device veth1_vlan left promiscuous mode
[  144.406631][  T154] device veth0_vlan left promiscuous mode
[  144.497405][ T4963] loop4: detected capacity change from 0 to 40427
[  144.558561][ T4977] loop2: detected capacity change from 0 to 256
[  144.665946][ T4963] F2FS-fs (loop4): invalid crc value
[  144.704946][ T4963] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  145.033458][ T4963] F2FS-fs (loop4): Start checkpoint disabled!
[  145.069116][ T4963] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e7
[  145.209108][  T892] attempt to access beyond end of device
[  145.209108][  T892] loop4: rw=2049, want=45112, limit=40427
[  145.369009][ T4769] Bluetooth: hci1: command 0x041b tx timeout
[  145.511176][  T154] team0 (unregistering): Port device team_slave_1 removed
[  145.601238][  T154] team0 (unregistering): Port device team_slave_0 removed
[  145.658039][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  145.719242][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  146.083172][  T154] bond0 (unregistering): Released all slaves
[  146.442958][   T13] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  146.716415][ T4921] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  146.750521][ T4921] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  146.772328][ T4921] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  146.814194][   T13] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  146.835706][ T4921] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  146.852901][   T13] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  146.949112][   T13] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  146.979056][   T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  146.987231][   T13] usb 5-1: SerialNumber: syz
[  147.145672][ T5004] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  147.200617][ T4921] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.243067][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  147.261163][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  147.291572][ T4921] 8021q: adding VLAN 0 to HW filter on device team0
[  147.312708][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  147.324155][   T13] usb 5-1: 0:2 : does not exist
[  147.352096][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  147.379160][   T13] usb 5-1: USB disconnect, device number 5
[  147.385703][ T4360] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.392898][ T4360] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.449128][ T4769] Bluetooth: hci1: command 0x040f tx timeout
[  147.470084][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  147.489620][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  147.529362][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  147.568518][ T4360] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.575752][ T4360] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.624520][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  147.651717][ T4300] udevd[4300]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  147.685669][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  147.726958][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  147.762993][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  147.799621][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  147.829894][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  147.870815][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  147.910594][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  147.940171][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  147.973966][ T4921] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  148.009834][ T4921] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  148.039833][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  148.059859][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  148.173658][ T5015] netlink: 27 bytes leftover after parsing attributes in process `syz.4.203'.
[  148.265371][ T5018] loop2: detected capacity change from 0 to 128
[  148.380268][ T5018] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  148.467924][ T5018] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  148.703123][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  148.739286][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  148.761927][ T4921] 8021q: adding VLAN 0 to HW filter on device batadv0
[  149.492622][ T5060] loop2: detected capacity change from 0 to 256
[  149.529150][ T4769] Bluetooth: hci1: command 0x0419 tx timeout
[  149.632062][ T5060] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d)
[  149.863718][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  149.894641][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  150.000751][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  150.024520][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  150.067388][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  150.097792][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  150.180871][ T4921] device veth0_vlan entered promiscuous mode
[  150.269217][ T4921] device veth1_vlan entered promiscuous mode
[  150.375282][ T5072] loop4: detected capacity change from 0 to 4096
[  150.391327][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  150.427605][ T5032] loop3: detected capacity change from 0 to 40427
[  150.445220][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  150.480556][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  150.534077][ T5032] F2FS-fs (loop3): invalid crc value
[  150.543089][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  150.544169][ T5072] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  150.590542][ T5032] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  150.778592][ T4921] device veth0_macvtap entered promiscuous mode
[  150.817714][ T5032] F2FS-fs (loop3): Start checkpoint disabled!
[  150.829579][ T4921] device veth1_macvtap entered promiscuous mode
[  150.893910][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  150.908569][ T5032] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e7
[  150.920398][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  150.929235][ T5072] EXT4-fs (loop4): Test dummy encryption mode enabled
[  150.937251][ T5072] EXT4-fs (loop4): Test dummy encryption mode enabled
[  150.983064][ T5072] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5
[  150.983064][ T5072] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  150.983064][ T5072] 
[  151.029912][ T4921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.080578][ T4921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.101056][ T5072] EXT4-fs (loop4): Ignoring removed bh option
[  151.107209][ T5072] EXT4-fs (loop4): Ignoring removed orlov option
[  151.139467][ T4921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.180576][ T4921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.194446][ T5072] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84e4018, mo2=0003]
[  151.206269][ T5072] System zones: 0-5
[  151.218277][ T5067] loop1: detected capacity change from 0 to 40427
[  151.226140][ T4921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.241458][ T5072] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,test_dummy_encryption,test_dummy_encryption,noacl,journal_dev=0x0000000000000100,delalloc,usrquota,bh,orlov,,errors=continue. Quota mode: writeback.
[  151.270327][ T4921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.287553][ T4921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.298637][ T4921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.311977][ T4241] attempt to access beyond end of device
[  151.311977][ T4241] loop3: rw=2049, want=45112, limit=40427
[  151.324582][ T4921] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.329892][ T5067] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  151.343234][ T4921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.360236][ T4921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.373884][ T4921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.410145][ T5067] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  151.449106][ T4921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.470772][ T5067] F2FS-fs (loop1): invalid crc value
[  151.508965][ T4921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.541560][ T5067] F2FS-fs (loop1): Found nat_bits in checkpoint
[  151.568881][ T4921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.570277][ T5072] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  151.631593][ T4921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.705837][ T4921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.763614][ T4921] batman_adv: batadv0: Interface activated: batadv_slave_1
[  151.782632][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  151.800426][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  151.837162][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  151.842945][ T5067] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  151.870164][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  151.908140][ T5067] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  151.925650][ T4921] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.993573][ T4921] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.052587][ T5067] attempt to access beyond end of device
[  152.052587][ T5067] loop1: rw=2049, want=45104, limit=40427
[  152.059879][ T4921] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.128895][ T4921] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.247304][ T4187] attempt to access beyond end of device
[  152.247304][ T4187] loop1: rw=2049, want=40968, limit=40427
[  152.329832][ T5111] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  152.560183][ T4239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.572842][ T4239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.639741][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  152.685163][ T4239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.712793][ T4239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.956300][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  153.053376][ T5124] loop3: detected capacity change from 0 to 512
[  153.217248][ T5124] EXT4-fs (loop3): Test dummy encryption mode enabled
[  153.403500][ T5124] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2761: inode #11: comm syz.3.225: corrupted xattr block 95
[  153.425818][ T5124] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.225: bg 0: block 7: invalid block bitmap
[  153.447484][ T5124] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  153.464534][ T5124] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2928: inode #11: comm syz.3.225: corrupted xattr block 95
[  153.481021][ T5124] EXT4-fs warning (device loop3): ext4_evict_inode:304: xattr delete (err -117)
[  153.490520][ T5124] EXT4-fs (loop3): 1 orphan inode deleted
[  153.496346][ T5124] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,nogrpid,,errors=continue. Quota mode: none.
[  154.085544][ T5107] chnl_net:caif_netlink_parms(): no params data found
[  154.329347][ T4233] Bluetooth: hci0: command 0x0409 tx timeout
[  154.409816][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.451122][ T5107] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.483507][ T5107] device bridge_slave_0 entered promiscuous mode
[  154.553527][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.595681][ T5107] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.634280][ T5107] device bridge_slave_1 entered promiscuous mode
[  155.219553][ T5107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  155.285801][ T5107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  155.470724][ T5107] team0: Port device team_slave_0 added
[  155.510116][  T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.567877][ T5107] team0: Port device team_slave_1 added
[  155.632957][  T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.713917][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_0
[  155.746099][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.832204][ T5107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  155.913697][  T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.986411][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_1
[  155.995245][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.089113][ T5107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  156.139258][  T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.286662][ T5107] device hsr_slave_0 entered promiscuous mode
[  156.319258][ T5107] device hsr_slave_1 entered promiscuous mode
[  156.359197][ T5107] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  156.385996][ T5107] Cannot create hsr debugfs directory
[  156.524523][ T4769] Bluetooth: hci0: command 0x041b tx timeout
[  156.736214][ T5151] loop3: detected capacity change from 0 to 40427
[  156.922025][ T5151] F2FS-fs (loop3): invalid crc value
[  156.966787][ T5151] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  157.116688][ T5107] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  157.163795][ T5107] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  157.212894][ T5107] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  157.291426][ T5151] F2FS-fs (loop3): Start checkpoint disabled!
[  157.321991][ T5151] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e7
[  157.344285][ T5107] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  157.680641][ T5107] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.741329][ T5107] 8021q: adding VLAN 0 to HW filter on device team0
[  157.748407][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  157.760065][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  157.811202][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  157.841318][ T5165] loop5: detected capacity change from 0 to 40427
[  157.846155][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  157.881461][ T4310] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.888720][ T4310] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.912649][ T5165] F2FS-fs (loop5): Corrupted extension count (327717 + 1 > 64)
[  157.969614][ T5165] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  157.994811][ T5165] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x1ffff
[  158.040200][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  158.058488][  T892] attempt to access beyond end of device
[  158.058488][  T892] loop3: rw=2049, want=45104, limit=40427
[  158.079039][ T5165] F2FS-fs (loop5): invalid crc value
[  158.084965][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  158.117221][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  158.141789][ T5165] F2FS-fs (loop5): Found nat_bits in checkpoint
[  158.189152][ T4310] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.196291][ T4310] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.259519][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  158.309906][  T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  158.350050][  T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  158.388051][  T892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  158.427990][ T5165] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  158.431822][  T892] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  158.451976][ T5165] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  158.549335][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  158.564197][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  158.584006][ T1108] Bluetooth: hci0: command 0x040f tx timeout
[  158.610043][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  158.644500][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  158.687846][ T5107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  158.731375][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  158.791725][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  158.836306][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  158.915223][  T154] device hsr_slave_0 left promiscuous mode
[  158.979211][  T154] device hsr_slave_1 left promiscuous mode
[  158.988198][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.028970][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.062602][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.087182][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.120605][  T154] device bridge_slave_1 left promiscuous mode
[  159.127041][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.160712][  T154] device bridge_slave_0 left promiscuous mode
[  159.168758][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.228227][  T154] device veth1_macvtap left promiscuous mode
[  159.259357][  T154] device veth0_macvtap left promiscuous mode
[  159.266605][  T154] device veth1_vlan left promiscuous mode
[  159.312746][  T154] device veth0_vlan left promiscuous mode
[  159.953630][  T154] team0 (unregistering): Port device team_slave_1 removed
[  159.987141][  T154] team0 (unregistering): Port device team_slave_0 removed
[  160.005965][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  160.032394][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  160.195909][  T154] bond0 (unregistering): Released all slaves
[  160.443438][ T5223] loop3: detected capacity change from 0 to 128
[  160.549298][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  160.558527][ T5223] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  160.592986][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  160.605207][ T5223] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  160.649055][ T4229] Bluetooth: hci0: command 0x0419 tx timeout
[  160.663854][ T5107] 8021q: adding VLAN 0 to HW filter on device batadv0
[  160.729366][ T4228] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  161.059020][ T4290] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  161.090304][ T4228] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  161.115254][ T4228] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255
[  161.319403][ T4228] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  161.328538][ T4228] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.376513][ T4228] usb 6-1: Product: syz
[  161.415005][ T4228] usb 6-1: Manufacturer: syz
[  161.420844][ T4290] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  161.445849][ T4228] usb 6-1: SerialNumber: syz
[  161.469165][ T4290] usb 4-1: config 0 interface 0 has no altsetting 0
[  161.475877][ T4290] usb 4-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00
[  161.501288][ T4228] usb 6-1: config 0 descriptor??
[  161.519517][ T5221] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  161.526662][ T5221] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  161.551823][ T4290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.571849][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  161.595452][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  161.626474][ T4290] usb 4-1: config 0 descriptor??
[  161.644283][ T5107] device veth0_vlan entered promiscuous mode
[  161.665485][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  161.675848][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  161.708529][ T5107] device veth1_vlan entered promiscuous mode
[  161.726779][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  161.744676][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  161.757034][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  161.783774][ T5221] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  161.819081][ T5221] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  161.843046][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  161.865948][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  161.884692][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  161.916966][ T5107] device veth0_macvtap entered promiscuous mode
[  161.969579][ T5107] device veth1_macvtap entered promiscuous mode
[  162.057744][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.093215][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.123967][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.138447][ T4290] hid-generic 0003:057E:2009.0002: unknown main item tag 0x0
[  162.146101][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.146121][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.146136][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.146161][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.146175][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.153583][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_0
[  162.219080][ T4290] hid-generic 0003:057E:2009.0002: unknown main item tag 0x0
[  162.226696][ T4290] hid-generic 0003:057E:2009.0002: unknown main item tag 0x0
[  162.277805][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  162.289768][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  162.298011][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  162.306598][ T4228] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  162.327536][ T4290] hid-generic 0003:057E:2009.0002: hidraw0: USB HID v10.01 Device [HID 057e:2009] on usb-dummy_hcd.3-1/input0
[  162.340466][ T5223] EXT4-fs warning (device loop3): verify_group_input:147: Cannot add at group 5 (only 1 groups)
[  162.376795][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  162.439568][ T4290] usb 4-1: USB disconnect, device number 4
[  162.463519][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.510210][ T4228] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  162.516941][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.554144][ T4228] usb 6-1: USB disconnect, device number 2
[  162.559023][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.598905][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.628969][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.670034][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.685370][ T5259] fido_id[5259]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  162.719254][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.750384][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.789092][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_1
[  162.824033][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  162.841912][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  162.875992][ T5107] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.905485][ T5107] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.924917][ T5107] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.954497][ T5107] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.232385][ T5257] loop1: detected capacity change from 0 to 40427
[  163.323258][ T5257] F2FS-fs (loop1): invalid crc value
[  163.344376][  T892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.372366][ T5257] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  163.379911][  T892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.481708][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  163.515309][ T4375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.536690][ T4375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.579768][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  163.772809][ T5288] netlink: 'syz.4.249': attribute type 10 has an invalid length.
[  163.889354][ T5257] F2FS-fs (loop1): Start checkpoint disabled!
[  163.995468][ T5257] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e7
[  164.019976][ T5288] team0: Port device veth1_to_bond added
[  164.103044][ T5297] input: syz1 as /devices/virtual/input/input16
[  165.199694][ T5312] netlink: 2 bytes leftover after parsing attributes in process `syz.6.253'.
[  165.682660][ T5321] netlink: 'syz.6.255': attribute type 2 has an invalid length.
[  165.859078][ T5321] netlink: 'syz.6.255': attribute type 2 has an invalid length.
[  165.887312][ T5321] netlink: 198628 bytes leftover after parsing attributes in process `syz.6.255'.
[  166.112857][ T4226] attempt to access beyond end of device
[  166.112857][ T4226] loop1: rw=2049, want=45104, limit=40427
[  166.449000][ T5338] netlink: 60 bytes leftover after parsing attributes in process `syz.5.263'.
[  166.458380][ T5338] netlink: 60 bytes leftover after parsing attributes in process `syz.5.263'.
[  166.555477][ T5342] netlink: 60 bytes leftover after parsing attributes in process `syz.5.263'.
[  166.615517][ T5338] netlink: 60 bytes leftover after parsing attributes in process `syz.5.263'.
[  166.930482][ T5356] pimreg: tun_chr_ioctl cmd 1074025677
[  166.965141][ T5356] pimreg: linktype set to 0
[  167.008436][ T5360] netlink: 60 bytes leftover after parsing attributes in process `syz.1.258'.
[  167.040127][ T5360] netlink: 60 bytes leftover after parsing attributes in process `syz.1.258'.
[  167.082049][ T5362] netlink: 60 bytes leftover after parsing attributes in process `syz.1.258'.
[  167.128312][ T5360] netlink: 60 bytes leftover after parsing attributes in process `syz.1.258'.
[  167.578724][ T5372] input: syz1 as /devices/virtual/input/input17
[  169.625722][ T5349] loop3: detected capacity change from 0 to 40427
[  170.818462][ T5452] input: syz1 as /devices/virtual/input/input18
[  172.754313][ T5463] netlink: 'syz.6.304': attribute type 3 has an invalid length.
[  172.763175][ T5463] __nla_validate_parse: 5 callbacks suppressed
[  172.763193][ T5463] netlink: 152 bytes leftover after parsing attributes in process `syz.6.304'.
[  173.486309][ T5449] loop1: detected capacity change from 0 to 40427
[  173.609970][ T5449] F2FS-fs (loop1): invalid crc value
[  173.623197][ T5514] netlink: 36 bytes leftover after parsing attributes in process `syz.6.320'.
[  173.632531][ T5449] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-4)
[  173.897920][ T5520] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.322'.
[  174.019939][ T5527] input: syz1 as /devices/virtual/input/input19
[  174.165959][ T5525] netlink: 'syz.1.323': attribute type 39 has an invalid length.
[  174.410344][ T5525] device macvlan0 entered promiscuous mode
[  176.636854][ T5587] device macvtap0 entered promiscuous mode
[  177.143962][ T5604] input: syz1 as /devices/virtual/input/input20
[  178.269050][ T5615] netlink: 'syz.3.351': attribute type 15 has an invalid length.
[  178.339106][ T5615] netlink: 'syz.3.351': attribute type 7 has an invalid length.
[  178.421163][ T5615] netlink: 52 bytes leftover after parsing attributes in process `syz.3.351'.
[  180.306064][ T5682] input: syz1 as /devices/virtual/input/input21
[  181.075379][ T5683] netlink: 'syz.3.373': attribute type 1 has an invalid length.
[  181.169047][ T5683] netlink: 5 bytes leftover after parsing attributes in process `syz.3.373'.
[  181.258164][ T5687] Zero length message leads to an empty skb
[  181.988559][ T5700] netlink: 'syz.6.378': attribute type 13 has an invalid length.
[  182.037653][ T5700] netlink: 164 bytes leftover after parsing attributes in process `syz.6.378'.
[  182.613663][ T5680] loop5: detected capacity change from 0 to 40427
[  182.711369][ T5723] netlink: 'syz.6.386': attribute type 2 has an invalid length.
[  182.731655][ T5723] netlink: 'syz.6.386': attribute type 5 has an invalid length.
[  183.785057][ T5759] input: syz1 as /devices/virtual/input/input22
[  184.920331][ T5768] netlink: 'syz.5.400': attribute type 29 has an invalid length.
[  184.976028][ T5770] netlink: 60 bytes leftover after parsing attributes in process `syz.6.401'.
[  185.016997][ T5768] netlink: 'syz.5.400': attribute type 29 has an invalid length.
[  185.098235][ T5771] netlink: 'syz.5.400': attribute type 29 has an invalid length.
[  185.175556][ T5770] netlink: 60 bytes leftover after parsing attributes in process `syz.6.401'.
[  185.275890][ T5774] netlink: 60 bytes leftover after parsing attributes in process `syz.6.401'.
[  185.442329][ T5777] netlink: 60 bytes leftover after parsing attributes in process `syz.6.401'.
[  185.849134][ T5787] netlink: 60 bytes leftover after parsing attributes in process `syz.6.405'.
[  185.890714][ T5787] netlink: 60 bytes leftover after parsing attributes in process `syz.6.405'.
[  185.917074][ T5787] netlink: 60 bytes leftover after parsing attributes in process `syz.6.405'.
[  186.069378][ T5787] netlink: 60 bytes leftover after parsing attributes in process `syz.6.405'.
[  186.225505][ T5801] netlink: 'syz.5.411': attribute type 10 has an invalid length.
[  186.286362][ T5801] netlink: 40 bytes leftover after parsing attributes in process `syz.5.411'.
[  186.307514][ T5801] batman_adv: batadv0: Adding interface: veth0_vlan
[  186.317373][ T5801] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.348442][ T5801] batman_adv: batadv0: Interface activated: veth0_vlan
[  186.362617][ T5802] netlink: 144 bytes leftover after parsing attributes in process `syz.3.409'.
[  187.187740][ T5792] loop1: detected capacity change from 0 to 40427
[  187.289221][ T5837] input: syz1 as /devices/virtual/input/input23
[  187.604288][ T5792] F2FS-fs (loop1): invalid crc value
[  188.112909][ T5792] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  188.610935][ T5845] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  188.905456][ T5792] F2FS-fs (loop1): Start checkpoint disabled!
[  189.034553][ T5792] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e7
[  190.492082][ T5897] input: syz1 as /devices/virtual/input/input24
[  191.206010][ T5901] __nla_validate_parse: 4 callbacks suppressed
[  191.206033][ T5901] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.444'.
[  192.554869][ T5878] loop4: detected capacity change from 0 to 40427
[  192.605151][ T5878] F2FS-fs (loop4): invalid crc value
[  192.664769][ T5878] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  192.905723][ T5878] F2FS-fs (loop4): Start checkpoint disabled!
[  192.918565][ T5878] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e7
[  193.572189][ T5955] netlink: 'syz.5.459': attribute type 29 has an invalid length.
[  193.616198][ T5955] netlink: 'syz.5.459': attribute type 29 has an invalid length.
[  193.650728][ T5957] netlink: 'syz.5.459': attribute type 29 has an invalid length.
[  194.096945][ T5972] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.465'.
[  194.136131][ T5972] bridge_slave_1: default FDB implementation only supports local addresses
[  194.414113][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  194.424422][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  194.774387][ T5983] input: syz1 as /devices/virtual/input/input25
[  194.890218][ T5962] loop1: detected capacity change from 0 to 40427
[  194.944438][ T5962] F2FS-fs (loop1): invalid crc value
[  194.972125][ T5962] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  195.093299][ T5962] F2FS-fs (loop1): Start checkpoint disabled!
[  195.125794][ T5962] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e7
[  196.437788][ T4393] attempt to access beyond end of device
[  196.437788][ T4393] loop1: rw=2049, want=45104, limit=40427
[  196.489146][ T4269] Bluetooth: hci3: command 0x0406 tx timeout
[  196.498919][ T4269] Bluetooth: hci4: command 0x0406 tx timeout
[  196.505012][ T4269] Bluetooth: hci2: command 0x0406 tx timeout
[  196.738035][ T6010] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.476'.
[  196.797918][ T6007] netlink: 4079 bytes leftover after parsing attributes in process `syz.3.474'.
[  197.151535][ T6027] netlink: 'syz.3.483': attribute type 29 has an invalid length.
[  197.229276][ T6027] netlink: 'syz.3.483': attribute type 29 has an invalid length.
[  197.255760][ T6030] netlink: 'syz.3.483': attribute type 29 has an invalid length.
[  197.769827][ T6046] input: syz1 as /devices/virtual/input/input26
[  197.810916][ T6048] netlink: 'syz.6.488': attribute type 3 has an invalid length.
[  197.838928][ T6048] netlink: 201336 bytes leftover after parsing attributes in process `syz.6.488'.
[  198.265976][ T6020] loop4: detected capacity change from 0 to 40427
[  198.548750][ T6020] F2FS-fs (loop4): invalid crc value
[  198.595840][ T6020] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  198.964735][ T6020] F2FS-fs (loop4): Start checkpoint disabled!
[  199.044607][ T6020] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e7
[  199.411102][ T6113] input: syz1 as /devices/virtual/input/input27
[  199.507307][  T892] attempt to access beyond end of device
[  199.507307][  T892] loop4: rw=2049, want=45104, limit=40427
[  200.288265][ T6141] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  200.300196][ T4270] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  200.405850][ T6144] netlink: 'syz.4.512': attribute type 1 has an invalid length.
[  200.447090][ T6144] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.512'.
[  200.535954][ T6142] device syzkaller0 entered promiscuous mode
[  201.304138][ T6176] input: syz1 as /devices/virtual/input/input28
[  203.421607][ T6153] loop5: detected capacity change from 0 to 40427
[  203.484320][ T6153] F2FS-fs (loop5): invalid crc value
[  203.580836][ T6153] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  203.969911][ T6153] F2FS-fs (loop5): Start checkpoint disabled!
[  204.001489][ T6153] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e7
[  205.122657][ T6275] input: syz1 as /devices/virtual/input/input29
[  207.799663][ T6342] process 'syz.6.567' launched '/dev/fd/3/./file0' with NULL argv: empty string added
[  208.055111][ T6305] loop4: detected capacity change from 0 to 40427
[  208.220779][ T6305] F2FS-fs (loop4): invalid crc value
[  208.292376][ T6305] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  208.646405][ T6305] F2FS-fs (loop4): Start checkpoint disabled!
[  208.716858][ T6305] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e7
[  209.121431][ T4395] attempt to access beyond end of device
[  209.121431][ T4395] loop4: rw=2049, want=45104, limit=40427
[  210.570720][ T6410] input: syz1 as /devices/virtual/input/input30
[  214.948343][ T6431] loop4: detected capacity change from 0 to 40427
[  215.056336][ T6431] F2FS-fs (loop4): invalid crc value
[  215.156758][ T6431] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  215.432040][ T6431] F2FS-fs (loop4): Start checkpoint disabled!
[  215.506661][ T6431] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e7
[  215.884386][ T6488] input: syz1 as /devices/virtual/input/input31
[  216.085878][ T6492] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  216.485420][ T4395] attempt to access beyond end of device
[  216.485420][ T4395] loop4: rw=2049, want=45104, limit=40427
[  217.301386][ T4228] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  217.400199][ T6513] loop6: detected capacity change from 0 to 512
[  218.610902][ T6513] EXT4-fs (loop6): Test dummy encryption mode enabled
[  219.658585][ T6513] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2761: inode #11: comm syz.6.600: corrupted xattr block 95
[  219.677467][ T6513] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.600: bg 0: block 7: invalid block bitmap
[  219.698737][ T6513] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  219.714933][ T6513] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2928: inode #11: comm syz.6.600: corrupted xattr block 95
[  219.729045][ T6513] EXT4-fs warning (device loop6): ext4_evict_inode:304: xattr delete (err -117)
[  219.738451][ T6513] EXT4-fs (loop6): 1 orphan inode deleted
[  219.744353][ T6513] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,nogrpid,,errors=continue. Quota mode: none.
[  220.589029][ T4228] usb 4-1: device descriptor read/all, error -71
[  221.608695][ T6555] loop1: detected capacity change from 0 to 256
[  223.699177][ T6570] input: syz1 as /devices/virtual/input/input32
[  225.916150][ T6572] loop4: detected capacity change from 0 to 512
[  227.952978][ T6572] EXT4-fs (loop4): Test dummy encryption mode enabled
[  228.046214][ T6572] EXT4-fs: failed to create workqueue
[  228.128937][ T6572] EXT4-fs (loop4): mount failed
[  228.439013][ T4233] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  228.919155][ T4233] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  228.955094][ T4233] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255
[  229.168998][ T4233] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  229.184986][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.226246][ T4233] usb 2-1: Product: syz
[  229.241206][ T4233] usb 2-1: Manufacturer: syz
[  229.258868][ T4233] usb 2-1: SerialNumber: syz
[  229.299275][ T4233] usb 2-1: config 0 descriptor??
[  229.349477][ T6591] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  229.356630][ T6591] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  229.742470][ T6591] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  229.919090][ T6591] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  230.359142][ T4233] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  230.649487][ T4233] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  230.712638][ T4233] usb 2-1: USB disconnect, device number 3
[  233.162862][ T6676] input: syz1 as /devices/virtual/input/input33
[  235.891120][ T6730] input: syz1 as /devices/virtual/input/input34
[  237.390659][ T6709] loop4: detected capacity change from 0 to 40427
[  239.459115][ T6791] input: syz1 as /devices/virtual/input/input35
[  242.993255][ T6878] input: syz1 as /devices/virtual/input/input36
[  246.310175][ T6941] input: syz1 as /devices/virtual/input/input37
[  247.346672][ T6965] x_tables: duplicate underflow at hook 3
[  248.861864][ T6993] input: syz1 as /devices/virtual/input/input38
[  251.412152][ T7041] input: syz1 as /devices/virtual/input/input39
[  255.786536][ T7116] input: syz1 as /devices/virtual/input/input40
[  255.869494][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  255.877060][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  260.126541][ T7171] input: syz1 as /devices/virtual/input/input41
[  264.309148][ T6800] syz.6.678 (6800) used greatest stack depth: 19344 bytes left
[  265.077313][ T7237] input: syz1 as /devices/virtual/input/input42
[  267.904180][ T7279] loop6: detected capacity change from 0 to 1024
[  268.304863][ T7282] loop4: detected capacity change from 0 to 512
[  268.710440][ T7282] EXT4-fs (loop4): Test dummy encryption mode enabled
[  268.728890][ T4269] Bluetooth: hci1: command 0x0406 tx timeout
[  268.779050][ T7279] EXT4-fs (loop6): Mount option "nouser_xattr" will be removed by 3.5
[  268.779050][ T7279] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  268.779050][ T7279] 
[  268.918645][ T7282] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  269.210502][ T7279] EXT4-fs (loop6): Ignoring removed orlov option
[  269.256947][ T7282] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.839: bad orphan inode 131083
[  269.382082][ T7279] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,bsddf,nouser_xattr,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x000000000000000e,orlov,nogrpid,min_batch_time=0x0000000000000007,grpjquota=,,errors=continue. Quota mode: none.
[  269.509739][ T7282] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,init_itable,dioread_lock,,errors=continue. Quota mode: none.
[  269.811527][ T7302] loop5: detected capacity change from 0 to 512
[  269.852077][   T26] audit: type=1800 audit(1788713252.005:2): pid=7279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.838" name="file1" dev="loop6" ino=15 res=0 errno=0
[  269.939930][   T26] audit: type=1800 audit(1788713252.075:3): pid=7279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.838" name="file1" dev="loop6" ino=15 res=0 errno=0
[  269.984543][ T7303] retu-mfd 0-0001: could not read Retu revision: -5
[  270.032703][ T7303] retu-mfd: probe of 0-0001 failed with error -5
[  270.089857][ T7303] i2c i2c-0: new_device: Instantiated device retu at 0x01
[  270.147454][ T7304] retu-mfd 0-0002: could not read Tahvo revision: -5
[  270.203318][ T7304] retu-mfd: probe of 0-0002 failed with error -5
[  270.239148][ T7304] i2c i2c-0: new_device: Instantiated device tahvo at 0x02
[  270.828940][ T7302] EXT4-fs (loop5): Test dummy encryption mode enabled
[  270.959892][ T7282] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  271.309135][ T7319] input: syz1 as /devices/virtual/input/input43
[  271.898946][ T4269] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  272.359025][ T4269] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00
[  272.368153][ T4269] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  272.438062][ T4269] usb 4-1: Product: syz
[  272.457159][ T7302] loop5: detected capacity change from 0 to 512
[  272.484147][ T4269] usb 4-1: config 0 descriptor??
[  272.570775][ T4269] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  272.588193][ T4269] usb 4-1: Detected FT232H
[  272.889088][ T4269] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  273.170961][ T7302] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.845: missing EA_INODE flag
[  273.355232][ T7302] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.845: error while reading EA inode 12 err=-117
[  273.409210][ T4269] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71
[  273.429801][ T4269] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  273.471169][ T4269] usb 4-1: USB disconnect, device number 7
[  273.506537][ T4269] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  273.530678][ T4269] ftdi_sio 4-1:0.0: device disconnected
[  273.694093][ T7302] EXT4-fs (loop5): 1 orphan inode deleted
[  274.009122][ T7302] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  274.671647][ T7350] loop1: detected capacity change from 0 to 128
[  274.759222][ T7351] loop3: detected capacity change from 0 to 256
[  275.327409][ T7351] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  278.510998][ T4233] Bluetooth: hci0: command 0x0406 tx timeout
[  279.157612][ T7387] loop5: detected capacity change from 0 to 2048
[  279.167669][ T7385] loop1: detected capacity change from 0 to 1024
[  279.354185][ T7387] EXT4-fs (loop5): Unrecognized mount option "measure" or missing value
[  279.379071][ T7385] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  279.522601][ T7385] EXT4-fs (loop1): Ignoring removed orlov option
[  279.793909][ T4270] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0
[  279.839270][ T4270] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0
[  279.846768][ T4270] hid-generic 0006:0008:0008.0003: unknown main item tag 0x2
[  279.874543][ T4270] hid-generic 0006:0008:0008.0003: unknown main item tag 0x1
[  279.945735][ T4270] hid-generic 0006:0008:0008.0003: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz1
[  280.000627][ T7385] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,mblk_io_submit,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none.
[  280.102081][ T7398] loop6: detected capacity change from 0 to 128
[  280.710348][ T7401] loop3: detected capacity change from 0 to 256
[  280.903306][ T7401] FAT-fs (loop3): IO charset none not found
[  282.551725][ T7417] loop1: detected capacity change from 0 to 2048
[  283.039427][ T7417]  loop1: p1 < > p4
[  283.039427][ T7417]  p4: <solaris: [s0] p5 [s1] p6 [s2] p7 [s3] p8 >
[  283.145909][ T7421] loop5: detected capacity change from 0 to 8192
[  283.223758][ T7417] loop1: p4 size 722688 extends beyond EOD, truncated
[  283.327418][   T26] audit: type=1800 audit(1788713265.475:4): pid=7421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.881" name="file2" dev="loop5" ino=1048607 res=0 errno=0
[  283.622548][ T7417] loop1: p7 size 2304 extends beyond EOD, truncated
[  283.759639][ T7417] loop1: p8 start 101056512 is beyond EOD, truncated
[  284.833334][ T4284] udevd[4284]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory
[  284.835759][ T4314] udevd[4314]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[  284.854916][ T4315] udevd[4315]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  284.866354][ T4299] udevd[4299]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory
[  284.884601][ T4300] udevd[4300]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  285.589787][ T6898] syz.4.712 (6898) used greatest stack depth: 18832 bytes left
[  285.980101][ T7181] syz.6.806 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  286.116537][ T7181] CPU: 1 PID: 7181 Comm: syz.6.806 Not tainted syzkaller #0
[  286.123928][ T7181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  286.134140][ T7181] Call Trace:
[  286.137485][ T7181]  <TASK>
[  286.140455][ T7181]  dump_stack_lvl+0x188/0x250
[  286.145244][ T7181]  ? show_regs_print_info+0x20/0x20
[  286.150514][ T7181]  ? load_image+0x410/0x410
[  286.155085][ T7181]  ? local_lock_release+0x170/0x170
[  286.160325][ T7181]  ? __rwlock_init+0x140/0x140
[  286.165138][ T7181]  dump_header+0xd9/0x780
[  286.169521][ T7181]  oom_kill_process+0x20e/0x3d0
[  286.174451][ T7181]  out_of_memory+0xdb2/0x1190
[  286.179215][ T7181]  ? mem_cgroup_out_of_memory+0xbd/0x3b0
[  286.184919][ T7181]  ? mutex_lock_io_nested+0x60/0x60
[  286.190287][ T7181]  ? unregister_oom_notifier+0x20/0x20
[  286.195813][ T7181]  mem_cgroup_out_of_memory+0x2b9/0x3b0
[  286.201419][ T7181]  ? mem_cgroup_oom_trylock+0x210/0x210
[  286.207034][ T7181]  ? do_raw_spin_unlock+0x11d/0x230
[  286.212294][ T7181]  try_charge_memcg+0x1075/0x15b0
[  286.217689][ T7181]  ? get_mem_cgroup_from_objcg+0x120/0x120
[  286.223571][ T7181]  ? rcu_lock_acquire+0x30/0x30
[  286.228746][ T7181]  charge_memcg+0x100/0x300
[  286.233299][ T7181]  ? __mem_cgroup_charge+0x80/0x80
[  286.238501][ T7181]  __mem_cgroup_charge+0x21/0x80
[  286.243594][ T7181]  shmem_add_to_page_cache+0xa8a/0x14d0
[  286.249296][ T7181]  ? put_page+0x200/0x200
[  286.253684][ T7181]  ? mark_lock+0x94/0x320
[  286.258049][ T7181]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  286.264076][ T7181]  shmem_getpage_gfp+0x1735/0x2c10
[  286.269266][ T7181]  shmem_write_begin+0xcd/0x1a0
[  286.274246][ T7181]  generic_perform_write+0x2b6/0x550
[  286.279753][ T7181]  ? grab_cache_page_write_begin+0xa0/0xa0
[  286.285611][ T7181]  ? file_remove_privs+0x5d0/0x5d0
[  286.290871][ T7181]  ? rwsem_write_trylock+0x135/0x1c0
[  286.296204][ T7181]  ? clear_nonspinnable+0x60/0x60
[  286.301278][ T7181]  __generic_file_write_iter+0x261/0x4e0
[  286.306964][ T7181]  ? generic_write_checks+0x3be/0x460
[  286.312389][ T7181]  generic_file_write_iter+0xa6/0x1b0
[  286.317815][ T7181]  __kernel_write+0x522/0x980
[  286.322549][ T7181]  ? vfs_read+0xd50/0xd50
[  286.326930][ T7181]  ? get_dump_page+0xee/0x670
[  286.331649][ T7181]  ? down_read_killable+0x1ce/0x340
[  286.336904][ T7181]  __dump_emit+0x258/0x380
[  286.341379][ T7181]  ? wait_for_dump_helpers+0x3e0/0x3e0
[  286.346907][ T7181]  ? dump_emit+0x145/0x3d0
[  286.351367][ T7181]  ? dump_user_range+0x1ce/0x340
[  286.356357][ T7181]  dump_user_range+0x84/0x340
[  286.361094][ T7181]  elf_core_dump+0x2fe0/0x3530
[  286.365930][ T7181]  ? load_elf_library+0x980/0x980
[  286.371009][ T7181]  ? verify_lock_unused+0x140/0x140
[  286.376257][ T7181]  ? dump_vma_snapshot+0xaf1/0xe40
[  286.381462][ T7181]  ? rcu_read_lock_any_held+0xb0/0x130
[  286.386978][ T7181]  ? getname_kernel+0x142/0x2e0
[  286.391898][ T7181]  do_coredump+0x14e8/0x2a40
[  286.396557][ T7181]  ? nfs_stat_to_errno+0x170/0x170
[  286.401743][ T7181]  ? lock_chain_count+0x20/0x20
[  286.406649][ T7181]  ? _raw_spin_unlock_irq+0x1f/0x40
[  286.411894][ T7181]  ? lockdep_hardirqs_on+0x94/0x140
[  286.417146][ T7181]  get_signal+0x531/0x12e0
[  286.421631][ T7181]  arch_do_signal_or_restart+0xe6/0x12a0
[  286.427312][ T7181]  ? _raw_spin_unlock+0x40/0x40
[  286.432208][ T7181]  ? force_sig_info_to_task+0x318/0x3c0
[  286.437812][ T7181]  ? get_sigframe_size+0x10/0x10
[  286.442813][ T7181]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  286.448850][ T7181]  ? exit_to_user_mode_loop+0x3b/0x130
[  286.454358][ T7181]  exit_to_user_mode_loop+0x9e/0x130
[  286.459686][ T7181]  exit_to_user_mode_prepare+0xee/0x180
[  286.465286][ T7181]  irqentry_exit_to_user_mode+0x5/0x30
[  286.470796][ T7181]  exc_page_fault+0x88/0x100
[  286.475528][ T7181]  asm_exc_page_fault+0x22/0x30
[  286.480449][ T7181] RIP: 0033:0x7f4f05a7cbd7
[  286.484914][ T7181] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 5d 4f 1b 00 48 8d 35 c3 0a 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8
[  286.504686][ T7181] RSP: 002b:00007f4f03e00120 EFLAGS: 00010202
[  286.510800][ T7181] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f4f05bc7159
[  286.518812][ T7181] RDX: 00007f4f03e00140 RSI: 00007f4f03e00270 RDI: 000000000000000b
[  286.526829][ T7181] RBP: 00007f4f05c5e024 R08: 0000000000000000 R09: 0000000000000000
[  286.534894][ T7181] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  286.542911][ T7181] R13: 00007f4f05e4f038 R14: 00007f4f05e4efa0 R15: 00007ffee466d6b8
[  286.550947][ T7181]  </TASK>
[  287.235529][ T7181] memory: usage 307160kB, limit 307200kB, failcnt 8331
[  287.256449][ T7181] memory+swap: usage 372920kB, limit 9007199254740988kB, failcnt 0
[  287.264603][ T7181] kmem: usage 3264kB, limit 9007199254740988kB, failcnt 0
[  287.273260][ T7181] Memory cgroup stats for /syz6:
[  287.277291][ T7181] anon 1150976
[  287.277291][ T7181] file 305823744
[  287.277291][ T7181] kernel_stack 196608
[  287.277291][ T7181] pagetables 1048576
[  287.277291][ T7181] percpu 0
[  287.277291][ T7181] sock 0
[  287.277291][ T7181] shmem 305819648
[  287.277291][ T7181] file_mapped 129228800
[  287.277291][ T7181] file_dirty 0
[  287.277291][ T7181] file_writeback 0
[  287.277291][ T7181] swapcached 67387392
[  287.277291][ T7181] anon_thp 0
[  287.277291][ T7181] file_thp 0
[  287.277291][ T7181] shmem_thp 0
[  287.277291][ T7181] inactive_anon 306794496
[  287.277291][ T7181] active_anon 4390912
[  287.277291][ T7181] inactive_file 4096
[  287.277291][ T7181] active_file 0
[  287.277291][ T7181] unevictable 0
[  287.277291][ T7181] slab_reclaimable 1203032
[  287.277291][ T7181] slab_unreclaimable 732272
[  287.277291][ T7181] slab 1935304
[  287.277291][ T7181] workingset_refault_anon 7
[  287.277291][ T7181] workingset_refault_file 351
[  287.277291][ T7181] workingset_activate_anon 4
[  287.436010][ T7181] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.546,pid=6239,uid=0
[  287.462277][ T7181] Memory cgroup out of memory: Killed process 6239 (syz.6.546) total-vm:200684kB, anon-rss:1380kB, file-rss:20652kB, shmem-rss:111796kB, UID:0 pgtables:324kB oom_score_adj:1000
[  287.622479][ T6651] syz.4.627 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  287.668962][ T6651] CPU: 0 PID: 6651 Comm: syz.4.627 Not tainted syzkaller #0
[  287.676341][ T6651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  287.686538][ T6651] Call Trace:
[  287.689858][ T6651]  <TASK>
[  287.692826][ T6651]  dump_stack_lvl+0x188/0x250
[  287.697568][ T6651]  ? show_regs_print_info+0x20/0x20
[  287.702820][ T6651]  ? load_image+0x410/0x410
[  287.707393][ T6651]  ? local_lock_release+0x170/0x170
[  287.712645][ T6651]  ? __rwlock_init+0x140/0x140
[  287.717471][ T6651]  dump_header+0xd9/0x780
[  287.721889][ T6651]  oom_kill_process+0x20e/0x3d0
[  287.726800][ T6651]  out_of_memory+0xdb2/0x1190
[  287.731522][ T6651]  ? mem_cgroup_out_of_memory+0xbd/0x3b0
[  287.737239][ T6651]  ? mutex_lock_io_nested+0x60/0x60
[  287.742496][ T6651]  ? unregister_oom_notifier+0x20/0x20
[  287.748012][ T6651]  mem_cgroup_out_of_memory+0x2b9/0x3b0
[  287.753605][ T6651]  ? mem_cgroup_oom_trylock+0x210/0x210
[  287.759210][ T6651]  ? do_raw_spin_unlock+0x11d/0x230
[  287.764488][ T6651]  try_charge_memcg+0x1075/0x15b0
[  287.769569][ T6651]  ? get_mem_cgroup_from_objcg+0x120/0x120
[  287.775440][ T6651]  ? rcu_lock_acquire+0x30/0x30
[  287.780355][ T6651]  charge_memcg+0x100/0x300
[  287.784909][ T6651]  ? __mem_cgroup_charge+0x80/0x80
[  287.790078][ T6651]  __mem_cgroup_charge+0x21/0x80
[  287.795087][ T6651]  shmem_add_to_page_cache+0xa8a/0x14d0
[  287.800746][ T6651]  ? put_page+0x200/0x200
[  287.805159][ T6651]  ? verify_lock_unused+0x140/0x140
[  287.810448][ T6651]  ? mark_lock+0x94/0x320
[  287.814840][ T6651]  shmem_getpage_gfp+0x1735/0x2c10
[  287.820080][ T6651]  shmem_fault+0x1ac/0x550
[  287.824668][ T6651]  ? shmem_fallocate+0xec0/0xec0
[  287.829673][ T6651]  ? filemap_read_page+0x4b0/0x4b0
[  287.834834][ T6651]  ? count_memcg_event_mm+0x324/0x370
[  287.840267][ T6651]  __do_fault+0x141/0x330
[  287.844657][ T6651]  handle_mm_fault+0x2982/0x4440
[  287.849656][ T6651]  ? get_page+0xe0/0xe0
[  287.853894][ T6651]  ? follow_page_mask+0xa51/0x12b0
[  287.859076][ T6651]  __get_user_pages+0x952/0x11e0
[  287.864074][ T6651]  ? read_lock_is_recursive+0x10/0x10
[  287.869504][ T6651]  ? populate_vma_page_range+0x290/0x290
[  287.875197][ T6651]  ? get_dump_page+0xee/0x670
[  287.880046][ T6651]  ? down_read_killable+0x1ce/0x340
[  287.885318][ T6651]  get_dump_page+0x18c/0x670
[  287.890117][ T6651]  ? fault_in_readable+0x150/0x150
[  287.895296][ T6651]  ? wait_for_dump_helpers+0x3e0/0x3e0
[  287.900824][ T6651]  ? dump_user_range+0x1ce/0x340
[  287.905892][ T6651]  ? dump_emit+0x145/0x3d0
[  287.910376][ T6651]  dump_user_range+0x54/0x340
[  287.915124][ T6651]  elf_core_dump+0x2fe0/0x3530
[  287.919963][ T6651]  ? load_elf_library+0x980/0x980
[  287.925149][ T6651]  ? verify_lock_unused+0x140/0x140
[  287.930400][ T6651]  ? dump_vma_snapshot+0xaf1/0xe40
[  287.935623][ T6651]  ? rcu_read_lock_any_held+0xb0/0x130
[  287.941150][ T6651]  ? getname_kernel+0x142/0x2e0
[  287.946159][ T6651]  do_coredump+0x14e8/0x2a40
[  287.950819][ T6651]  ? nfs_stat_to_errno+0x170/0x170
[  287.956000][ T6651]  ? lock_chain_count+0x20/0x20
[  287.960985][ T6651]  ? _raw_spin_unlock_irq+0x1f/0x40
[  287.966239][ T6651]  ? lockdep_hardirqs_on+0x94/0x140
[  287.971491][ T6651]  get_signal+0x531/0x12e0
[  287.975999][ T6651]  arch_do_signal_or_restart+0xe6/0x12a0
[  287.981697][ T6651]  ? _raw_spin_unlock+0x40/0x40
[  287.986606][ T6651]  ? force_sig_info_to_task+0x318/0x3c0
[  287.992235][ T6651]  ? get_sigframe_size+0x10/0x10
[  287.997365][ T6651]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  288.003425][ T6651]  ? exit_to_user_mode_loop+0x3b/0x130
[  288.008954][ T6651]  exit_to_user_mode_loop+0x9e/0x130
[  288.014306][ T6651]  exit_to_user_mode_prepare+0xee/0x180
[  288.019916][ T6651]  irqentry_exit_to_user_mode+0x5/0x30
[  288.025432][ T6651]  exc_page_fault+0x88/0x100
[  288.030087][ T6651]  asm_exc_page_fault+0x22/0x30
[  288.034991][ T6651] RIP: 0033:0x7f279869ebd7
[  288.039460][ T6651] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 5d 4f 1b 00 48 8d 35 c3 0a 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8
[  288.059118][ T6651] RSP: 002b:00007f2796a22120 EFLAGS: 00010202
[  288.065359][ T6651] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f27987e9159
[  288.073417][ T6651] RDX: 00007f2796a22140 RSI: 00007f2796a22270 RDI: 000000000000000b
[  288.081443][ T6651] RBP: 00007f2798880024 R08: 0000000000000000 R09: 0000000000000000
[  288.089468][ T6651] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  288.097491][ T6651] R13: 00007f2798a71038 R14: 00007f2798a70fa0 R15: 00007ffe2af72cf8
[  288.105570][ T6651]  </TASK>
[  288.163629][ T7450] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.172616][ T7450] bridge0: port 1(bridge_slave_0) entered forwarding state
[  288.255993][ T7450] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.268569][ T6651] memory: usage 307156kB, limit 307200kB, failcnt 8836
[  288.314457][ T6651] memory+swap: usage 366308kB, limit 9007199254740988kB, failcnt 0
[  288.338343][ T6651] kmem: usage 3244kB, limit 9007199254740988kB, failcnt 0
[  288.363880][ T6651] Memory cgroup stats for /syz4:
[  288.365151][ T6651] anon 1011712
[  288.365151][ T6651] file 307580928
[  288.365151][ T6651] kernel_stack 196608
[  288.365151][ T6651] pagetables 925696
[  288.365151][ T6651] percpu 7184
[  288.365151][ T6651] sock 0
[  288.365151][ T6651] shmem 307580928
[  288.365151][ T6651] file_mapped 130465792
[  288.365151][ T6651] file_dirty 0
[  288.365151][ T6651] file_writeback 0
[  288.365151][ T6651] swapcached 81776640
[  288.365151][ T6651] anon_thp 0
[  288.365151][ T6651] file_thp 0
[  288.365151][ T6651] shmem_thp 0
[  288.365151][ T6651] inactive_anon 311169024
[  288.365151][ T6651] active_anon 36864
[  288.365151][ T6651] inactive_file 0
[  288.365151][ T6651] active_file 0
[  288.365151][ T6651] unevictable 0
[  288.365151][ T6651] slab_reclaimable 1438768
[  288.365151][ T6651] slab_unreclaimable 637280
[  288.365151][ T6651] slab 2076048
[  288.365151][ T6651] workingset_refault_anon 71
[  288.365151][ T6651] workingset_refault_file 907
[  288.365151][ T6651] workingset_activate_anon 0
[  288.550510][ T7453] netlink: 3 bytes leftover after parsing attributes in process `syz.3.894'.
[  288.725912][ T6651] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.627,pid=6651,uid=0
[  288.790770][ T6651] Memory cgroup out of memory: Killed process 6651 (syz.4.627) total-vm:200552kB, anon-rss:1384kB, file-rss:20644kB, shmem-rss:100180kB, UID:0 pgtables:300kB oom_score_adj:1000
[  288.888328][ T5107] syz-executor invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[  289.005757][ T5107] CPU: 0 PID: 5107 Comm: syz-executor Not tainted syzkaller #0
[  289.013539][ T5107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  289.023646][ T5107] Call Trace:
[  289.026970][ T5107]  <TASK>
[  289.029934][ T5107]  dump_stack_lvl+0x188/0x250
[  289.034678][ T5107]  ? show_regs_print_info+0x20/0x20
[  289.039944][ T5107]  ? load_image+0x410/0x410
[  289.044519][ T5107]  ? local_lock_release+0x170/0x170
[  289.049768][ T5107]  ? __rwlock_init+0x140/0x140
[  289.054589][ T5107]  dump_header+0xd9/0x780
[  289.058978][ T5107]  oom_kill_process+0x20e/0x3d0
[  289.063886][ T5107]  out_of_memory+0xdb2/0x1190
[  289.068611][ T5107]  ? mem_cgroup_out_of_memory+0xbd/0x3b0
[  289.074306][ T5107]  ? mutex_lock_io_nested+0x60/0x60
[  289.079562][ T5107]  ? unregister_oom_notifier+0x20/0x20
[  289.085090][ T5107]  mem_cgroup_out_of_memory+0x2b9/0x3b0
[  289.090699][ T5107]  ? mem_cgroup_oom_trylock+0x210/0x210
[  289.096300][ T5107]  ? do_raw_spin_unlock+0x11d/0x230
[  289.101630][ T5107]  try_charge_memcg+0x1075/0x15b0
[  289.106744][ T5107]  ? get_mem_cgroup_from_objcg+0x120/0x120
[  289.112609][ T5107]  ? rcu_lock_acquire+0x30/0x30
[  289.117539][ T5107]  ? copy_page_range+0x2f28/0x32c0
[  289.122830][ T5107]  obj_cgroup_charge_pages+0x87/0x190
[  289.128249][ T5107]  ? __memcg_kmem_charge_page+0x380/0x380
[  289.134032][ T5107]  ? rcu_lock_acquire+0x30/0x30
[  289.138942][ T5107]  obj_cgroup_charge+0x19f/0x320
[  289.144012][ T5107]  ? mod_objcg_mlstate+0x2e0/0x2e0
[  289.149200][ T5107]  slab_pre_alloc_hook+0x9d/0xc0
[  289.154318][ T5107]  ? copy_mm+0x8b6/0x13d0
[  289.158705][ T5107]  kmem_cache_alloc+0x3d/0x280
[  289.163552][ T5107]  copy_mm+0x8b6/0x13d0
[  289.167782][ T5107]  ? copy_signal+0x610/0x610
[  289.172429][ T5107]  ? __init_rwsem+0x11e/0x160
[  289.177181][ T5107]  ? copy_signal+0x501/0x610
[  289.181824][ T5107]  copy_process+0x17a7/0x3e70
[  289.186848][ T5107]  ? __pidfd_prepare+0x140/0x140
[  289.191845][ T5107]  ? verify_lock_unused+0x140/0x140
[  289.197107][ T5107]  kernel_clone+0x23f/0x990
[  289.201685][ T5107]  ? create_io_thread+0x180/0x180
[  289.206794][ T5107]  __x64_sys_clone+0x19a/0x210
[  289.211624][ T5107]  ? __ia32_sys_vfork+0x130/0x130
[  289.216737][ T5107]  ? lockdep_hardirqs_on+0x94/0x140
[  289.221995][ T5107]  do_syscall_64+0x4c/0xa0
[  289.226463][ T5107]  ? clear_bhb_loop+0x30/0x80
[  289.231192][ T5107]  ? clear_bhb_loop+0x30/0x80
[  289.235925][ T5107]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  289.241907][ T5107] RIP: 0033:0x7f4f05befbd2
[  289.246366][ T5107] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[  289.266018][ T5107] RSP: 002b:00007ffee466d8d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  289.274487][ T5107] RAX: ffffffffffffffda RBX: 00007ffee466d8d0 RCX: 00007f4f05befbd2
[  289.282516][ T5107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  289.290532][ T5107] RBP: 00007ffee466da5c R08: 0000000000000000 R09: 0000000000000001
[  289.298544][ T5107] R10: 000055555fc667d0 R11: 0000000000000246 R12: 0000000000000001
[  289.306611][ T5107] R13: 0000000000000024 R14: 000000000004539a R15: 00007ffee466dab0
[  289.314675][ T5107]  </TASK>
[  289.516611][ T7463] loop3: detected capacity change from 0 to 128
[  289.587437][ T7463] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  289.640628][ T7463] ext4 filesystem being mounted at /208/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  289.710982][ T7463] syz.3.900 (pid 7463) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  290.034757][ T7451] loop5: detected capacity change from 0 to 128
[  290.572294][ T7480] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  290.684150][ T7480] overlayfs: failed to look up (tracing) for ino (-66)
[  292.225845][ T5107] memory: usage 288320kB, limit 307200kB, failcnt 9116
[  292.232870][ T5107] memory+swap: usage 354236kB, limit 9007199254740988kB, failcnt 0
[  292.240901][ T5107] kmem: usage 2736kB, limit 9007199254740988kB, failcnt 0
[  292.248051][ T5107] Memory cgroup stats for /syz6:
[  292.249201][ T5107] anon 1019904
[  292.249201][ T5107] file 286453760
[  292.249201][ T5107] kernel_stack 196608
[  292.249201][ T5107] pagetables 753664
[  292.249201][ T5107] percpu 0
[  292.249201][ T5107] sock 0
[  292.249201][ T5107] shmem 279130112
[  292.249201][ T5107] file_mapped 22470656
[  292.249201][ T5107] file_dirty 0
[  292.249201][ T5107] file_writeback 0
[  292.249201][ T5107] swapcached 67719168
[  292.249201][ T5107] anon_thp 0
[  292.249201][ T5107] file_thp 0
[  292.249201][ T5107] shmem_thp 0
[  292.249201][ T5107] inactive_anon 279707648
[  292.249201][ T5107] active_anon 4644864
[  292.249201][ T5107] inactive_file 7065600
[  292.249201][ T5107] active_file 225280
[  292.249201][ T5107] unevictable 0
[  292.249201][ T5107] slab_reclaimable 1194568
[  292.249201][ T5107] slab_unreclaimable 545264
[  292.249201][ T5107] slab 1739832
[  292.249201][ T5107] workingset_refault_anon 7
[  292.249201][ T5107] workingset_refault_file 2421
[  292.249201][ T5107] workingset_activate_anon 4
[  292.699413][ T5107] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.777,pid=7093,uid=0
[  292.770720][ T5107] Memory cgroup out of memory: Killed process 7093 (syz.6.777) total-vm:102244kB, anon-rss:1504kB, file-rss:47788kB, shmem-rss:2312kB, UID:0 pgtables:212kB oom_score_adj:1000
[  294.414042][ T7508] binder: 7499:7508 unknown command 25363
[  294.600897][ T7508] binder: 7499:7508 ioctl c0306201 200000001a80 returned -22
[  295.073023][ T7514] loop1: detected capacity change from 0 to 4096
[  296.283114][ T7544] loop5: detected capacity change from 0 to 512
[  296.468907][ T4230] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  296.485285][ T7544] EXT4-fs (loop5): Test dummy encryption mode enabled
[  296.535384][ T7544] EXT4-fs (loop5): orphan cleanup on readonly fs
[  296.559056][ T7544] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13
[  296.567964][ T7544] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  296.591785][ T7544] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.926: attempt to clear invalid blocks 2 len 1
[  296.609855][ T7544] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.926: invalid indirect mapped block 1819239214 (level 0)
[  296.677073][ T7544] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.926: invalid indirect mapped block 1819239214 (level 1)
[  296.759030][ T4230] usb 2-1: Using ep0 maxpacket: 16
[  296.779665][ T7544] EXT4-fs (loop5): 1 truncate cleaned up
[  296.829941][ T7544] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,jqfmt=vfsv0,abort,bsddf,noquota,usrjquota=..,errors=continue. Quota mode: writeback.
[  296.909130][ T4230] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  296.929607][ T4230] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  297.117487][ T4921] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: inode out of bounds - offset=24, inode=85, rec_len=20, size=1024 fake=0
[  297.280013][ T4230] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  297.483991][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.814201][ T4230] usb 2-1: Product: syz
[  297.828895][ T4230] usb 2-1: Manufacturer: syz
[  297.833575][ T4230] usb 2-1: SerialNumber: syz
[  298.215903][ T4230] usb 2-1: 0:2 : does not exist
[  298.316792][ T4230] usb 2-1: USB disconnect, device number 4
[  298.650970][ T4300] udevd[4300]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  299.257959][ T7571] loop1: detected capacity change from 0 to 512
[  302.594575][ T7594] loop1: detected capacity change from 0 to 512
[  302.671175][ T7594] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  302.678564][ T7594] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  302.846162][ T7594] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.944: corrupted in-inode xattr
[  302.923549][ T7600] loop4: detected capacity change from 0 to 512
[  302.929284][ T7594] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.944: couldn't read orphan inode 15 (err -117)
[  302.985471][ T7594] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,inode_readahead_blks=0x0000000008000000,noload,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none.
[  303.062131][ T7605] kvm: emulating exchange as write
[  303.081498][ T7600] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[  304.575388][ T7622] device syzkaller0 entered promiscuous mode
[  306.658938][ T4769] Bluetooth: hci1: command 0x0409 tx timeout
[  307.761224][ T6239] syz.6.546 (6239) used greatest stack depth: 17520 bytes left
[  308.333779][ T4769] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  309.153001][ T4510] Bluetooth: hci5: Frame reassembly failed (-90)
[  309.231627][ T4510] Bluetooth: hci5: Frame reassembly failed (-84)
[  309.396695][ T4233] Bluetooth: hci1: command 0x041b tx timeout
[  309.509717][ T4769] usb 2-1: not running at top speed; connect to a high speed hub
[  309.650178][ T4769] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  309.879693][ T4769] usb 2-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad
[  309.946835][ T4769] usb 2-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0
[  310.098667][ T4769] usb 2-1: Product: syz
[  310.187801][ T4769] usb 2-1: Manufacturer: syz
[  310.478403][ T4233] Bluetooth: hci5: command 0x1003 tx timeout
[  310.491882][ T4200] Bluetooth: hci5: sending frame failed (-49)
[  310.710826][ T4769] usb 2-1: Found UVC 1.00 device syz (225a:e1d4)
[  310.819103][ T4769] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  310.843715][ T7626] chnl_net:caif_netlink_parms(): no params data found
[  310.855770][ T7644] loop3: detected capacity change from 0 to 512
[  310.910798][ T4769] uvcvideo 2-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26).
[  310.974045][ T7644] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  310.984132][ T4769] uvcvideo 2-1:1.1: Failed to initialize the device (-5).
[  311.079256][ T4769] usb 2-1: USB disconnect, device number 5
[  311.152430][ T7644] EXT4-fs (loop3): 1 truncate cleaned up
[  311.215338][ T7644] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback.
[  311.298668][ T7626] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.450945][ T7626] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.464416][ T4233] Bluetooth: hci1: command 0x040f tx timeout
[  311.484817][ T7659] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  311.721675][ T7626] device bridge_slave_0 entered promiscuous mode
[  311.951056][ T7626] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.958197][ T7626] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.099570][ T7626] device bridge_slave_1 entered promiscuous mode
[  312.196977][ T7662] loop1: detected capacity change from 0 to 256
[  312.306978][ T7662] exfat: Deprecated parameter 'utf8'
[  312.330732][ T7626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  312.453032][ T7626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  312.507658][ T7662] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  312.578949][ T4769] Bluetooth: hci5: command 0x1001 tx timeout
[  312.594103][ T4200] Bluetooth: hci5: sending frame failed (-49)
[  312.617199][ T7626] team0: Port device team_slave_0 added
[  313.102522][ T7626] team0: Port device team_slave_1 added
[  313.566755][ T1108] Bluetooth: hci1: command 0x0419 tx timeout
[  313.591969][ T7626] batman_adv: batadv0: Adding interface: batadv_slave_0
[  313.643484][ T7626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  313.746369][ T7626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  313.788604][ T7626] batman_adv: batadv0: Adding interface: batadv_slave_1
[  313.839002][ T7626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  313.940650][ T7676] loop4: detected capacity change from 0 to 512
[  313.961033][ T7626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  314.958831][ T4769] Bluetooth: hci5: command 0x1009 tx timeout
[  315.060944][ T7676] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  315.118072][ T7626] device hsr_slave_0 entered promiscuous mode
[  315.208924][ T7676] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  315.227905][ T7626] device hsr_slave_1 entered promiscuous mode
[  315.258204][ T7626] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  315.308831][ T7626] Cannot create hsr debugfs directory
[  315.448890][ T7676] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.972: corrupted in-inode xattr
[  315.562923][ T7676] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.972: couldn't read orphan inode 15 (err -117)
[  315.828885][ T7676] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,inode_readahead_blks=0x0000000008000000,noload,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none.
[  316.156737][ T7626] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  316.284846][ T7626] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  316.385155][ T7626] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  316.412091][ T7695] loop1: detected capacity change from 0 to 512
[  316.473487][ T7626] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  316.527660][ T7695] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  317.082601][ T7695] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.977: corrupted in-inode xattr
[  317.177991][ T7695] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.977: couldn't read orphan inode 15 (err -117)
[  317.264272][ T7695] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,nodiscard,noload,user_xattr,mblk_io_submit,noinit_itable,journal_ioprio=0x0000000000000006,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000001,errors=continue. Quota mode: none.
[  317.311400][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  317.317758][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  317.453971][ T7702] loop3: detected capacity change from 0 to 256
[  317.497942][ T7702] exfat: Deprecated parameter 'utf8'
[  317.531330][ T7626] 8021q: adding VLAN 0 to HW filter on device bond0
[  317.570353][ T7702] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  317.604066][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  317.669586][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  317.680794][ T7626] 8021q: adding VLAN 0 to HW filter on device team0
[  317.713809][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  317.737222][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  317.782424][ T4395] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.789656][ T4395] bridge0: port 1(bridge_slave_0) entered forwarding state
[  317.851392][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  317.931796][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  317.970657][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  318.017429][ T4393] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.024661][ T4393] bridge0: port 2(bridge_slave_1) entered forwarding state
[  318.066160][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  318.102999][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  318.143680][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  318.166082][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  318.189663][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  318.213060][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  318.227848][ T7716] loop3: detected capacity change from 0 to 128
[  318.262831][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  318.289169][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  318.336047][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  318.394391][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  318.430881][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  318.464416][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  318.488498][ T7721] loop1: detected capacity change from 0 to 1024
[  318.790964][ T7721] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  320.324944][ T7744] loop6: detected capacity change from 0 to 512
[  320.473846][ T7744] EXT4-fs (loop6): Ignoring removed mblk_io_submit option
[  320.548385][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  320.566680][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  320.599457][ T7744] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  320.626020][ T7626] 8021q: adding VLAN 0 to HW filter on device batadv0
[  320.741744][ T7744] EXT4-fs error (device loop6): ext4_iget_extra_inode:4573: inode #15: comm syz.6.990: corrupted in-inode xattr
[  320.836377][ T7744] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.990: couldn't read orphan inode 15 (err -117)
[  320.918595][ T7752] loop4: detected capacity change from 0 to 256
[  320.949275][ T7744] EXT4-fs (loop6): mounted filesystem without journal. Opts: nolazytime,inode_readahead_blks=0x0000000008000000,noload,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none.
[  321.807312][ T7752] exfat: Deprecated parameter 'utf8'
[  321.963379][ T7752] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  322.585028][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  322.624406][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  322.755306][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  322.884489][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  322.952001][ T7626] device veth0_vlan entered promiscuous mode
[  322.979746][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  323.020581][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  323.079423][ T7626] device veth1_vlan entered promiscuous mode
[  323.197216][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  323.210040][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  323.238737][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  323.257160][ T7779] loop4: detected capacity change from 0 to 512
[  323.270408][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  323.293127][ T7626] device veth0_macvtap entered promiscuous mode
[  323.308393][ T7779] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  323.308634][ T7626] device veth1_macvtap entered promiscuous mode
[  323.365752][ T7779] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended
[  323.414283][ T7626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  323.454162][ T7626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.473158][ T4769] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  323.494862][ T7626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  323.517322][ T7779] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1002: inode #15: comm syz.4.1002: iget: illegal inode #
[  323.536474][ T7626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.565257][ T7779] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.1002: couldn't read orphan inode 15 (err -117)
[  323.569342][ T7626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  323.605601][ T7779] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  323.641202][ T7626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.658205][ T7779] EXT4-fs error (device loop4): ext4_lookup:1858: comm syz.4.1002: inode #15: comm syz.4.1002: iget: illegal inode #
[  323.684594][ T7626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  323.710757][ T7626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.731383][ T7626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  323.747627][ T7626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.765864][ T4769] usb 4-1: Using ep0 maxpacket: 16
[  323.798076][ T7626] batman_adv: batadv0: Interface activated: batadv_slave_0
[  323.831543][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  323.850548][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  323.883928][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  323.919196][ T4769] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[  323.927886][ T4769] usb 4-1: config 0 has no interface number 0
[  323.966611][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  323.984870][ T4769] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  324.000546][ T4769] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  324.013227][ T7626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  324.058945][ T7626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.087500][ T7626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  324.109044][ T7626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.157219][ T7626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  324.178946][ T7626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.198949][ T7626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  324.213530][ T7786] loop1: detected capacity change from 0 to 512
[  324.219069][ T7626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.221808][ T4769] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  324.239983][ T7626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  324.248965][ T4769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.258589][ T4769] usb 4-1: Product: syz
[  324.268748][ T4769] usb 4-1: Manufacturer: syz
[  324.268972][ T7626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.289682][ T7626] batman_adv: batadv0: Interface activated: batadv_slave_1
[  324.302368][ T4769] usb 4-1: SerialNumber: syz
[  324.318316][ T4769] usb 4-1: config 0 descriptor??
[  324.331716][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  324.342985][ T7777] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  324.371842][ T7786] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  324.399271][ T7777] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  324.410302][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  324.449033][ T7786] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  324.478473][ T7626] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  324.499713][ T7626] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  324.508503][ T7626] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  324.527696][ T7626] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  324.666117][ T7777] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  324.679103][ T7777] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  324.709112][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.727216][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.805937][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  324.888230][ T4393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.907897][ T4393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.926805][ T4769] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  324.946224][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  326.029006][ T4769] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  326.041232][ T7805] loop6: detected capacity change from 0 to 256
[  326.048302][ T4769] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  326.089405][ T4769] asix: probe of 4-1:0.34 failed with error -71
[  326.128953][ T4769] usb 4-1: USB disconnect, device number 8
[  326.145624][ T7805] exfat: Deprecated parameter 'utf8'
[  326.192054][ T7805] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  326.679467][ T4269] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  326.711436][ T7818] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  326.737712][ T7821] loop7: detected capacity change from 0 to 512
[  326.756558][ T7819] loop3: detected capacity change from 0 to 1024
[  326.793458][ T7818] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  326.843736][ T7819] EXT4-fs (loop3): Unrecognized mount option "subj_type=init_itable" or missing value
[  326.878101][ T7821] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  326.916418][ T7818] netlink: 'syz.3.1016': attribute type 13 has an invalid length.
[  326.945964][ T7821] EXT4-fs (loop7): 1 truncate cleaned up
[  326.959068][ T7821] EXT4-fs (loop7): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback.
[  327.058990][ T4269] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  327.066317][ T7818] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  327.078826][ T4269] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  327.143510][ T7818] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  327.189749][ T7818] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  327.268975][ T4269] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  327.278142][ T4269] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.372463][ T4269] usb 5-1: Product: syz
[  327.397820][ T4269] usb 5-1: Manufacturer: syz
[  327.415104][ T4269] usb 5-1: SerialNumber: syz
[  328.565101][ T7831] loop7: detected capacity change from 0 to 1024
[  328.655423][ T7831] EXT4-fs (loop7): Ignoring removed orlov option
[  328.707938][ T4269] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  328.730746][ T7831] EXT4-fs (loop7): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,resgid=0x0000000000000000,,errors=continue. Quota mode: none.
[  328.783079][   T26] audit: type=1804 audit(1788713310.935:5): pid=7831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1020" name="/newroot/5/bus/bus" dev="loop7" ino=18 res=1 errno=0
[  328.918343][   T26] audit: type=1804 audit(1788713310.975:6): pid=7831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1020" name="/newroot/5/bus/bus" dev="loop7" ino=18 res=1 errno=0
[  329.013619][ T7848] loop3: detected capacity change from 0 to 2048
[  329.047773][ T7846] kernel profiling enabled (shift: 5)
[  329.160137][ T7848] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  329.175526][ T1111] usb 5-1: USB disconnect, device number 6
[  329.179558][ T7848] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  329.257869][ T1111] usblp0: removed
[  329.622324][ T7848] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1026: bg 0: block 345: padding at end of block bitmap is not set
[  330.101740][ T7848] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 284 with error 117
[  330.114974][ T7848] EXT4-fs (loop3): This should not happen!! Data will be lost
[  330.114974][ T7848] 
[  330.562331][ T4510] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28
[  330.631078][ T4510] EXT4-fs (loop3): This should not happen!! Data will be lost
[  330.631078][ T4510] 
[  330.660385][ T4510] EXT4-fs (loop3): Total free blocks count 0
[  330.678876][ T4510] EXT4-fs (loop3): Free/Dirty block details
[  330.722948][ T4510] EXT4-fs (loop3): free_blocks=0
[  330.728210][ T4510] EXT4-fs (loop3): dirty_blocks=32
[  330.768956][ T4510] EXT4-fs (loop3): Block reservation details
[  330.775036][ T4510] EXT4-fs (loop3): i_reserved_data_blocks=2
[  330.897673][ T7875] syz.4.1034 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  332.239713][ T1111] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  332.261664][ T7902] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  332.287697][ T7902] overlayfs: missing 'lowerdir'
[  332.609914][ T1111] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  332.633853][ T1111] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  334.131422][ T7891] loop1: detected capacity change from 0 to 40427
[  334.180834][ T7891] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  334.226959][ T7891] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  334.292861][ T7891] F2FS-fs (loop1): invalid crc value
[  334.365467][ T7891] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  334.771389][ T7891] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  334.778517][ T7891] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  334.799879][ T1111] usb 8-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  334.836812][ T1111] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.886480][ T1111] usb 8-1: Product: syz
[  334.898988][ T1111] usb 8-1: Manufacturer: syz
[  334.903667][ T1111] usb 8-1: SerialNumber: syz
[  334.923066][   T26] audit: type=1800 audit(1788713317.075:7): pid=7891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1040" name="file1" dev="loop1" ino=10 res=0 errno=0
[  334.969098][ T1111] usb 8-1: can't set config #1, error -71
[  334.996091][ T1111] usb 8-1: USB disconnect, device number 2
[  335.151625][ T7941] loop3: detected capacity change from 0 to 8192
[  335.458901][ T1111] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  335.651507][ T4187] attempt to access beyond end of device
[  335.651507][ T4187] loop1: rw=2049, want=45104, limit=40427
[  335.651697][ T7941] FAT-fs (loop3): Unrecognized mount option "ÿ18446744073709551615" or missing value
[  335.829143][ T1111] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  335.871467][ T1111] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  335.908855][ T1111] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.957400][ T1111] usb 8-1: config 0 descriptor??
[  336.053414][ T7953] loop3: detected capacity change from 0 to 512
[  336.220991][ T7953] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,noquota,nouid32,,errors=continue. Quota mode: writeback.
[  336.277409][ T7953] ext4 filesystem being mounted at /255/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  336.530692][ T1111] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor
[  336.599986][ T1111] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0004/input/input44
[  338.638046][ T1111] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0
[  339.119440][ T1111] usb 8-1: USB disconnect, device number 3
[  339.299058][ T4270] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  339.311125][ T7997] tipc: Started in network mode
[  339.316079][ T7997] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  339.334534][ T7997] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  339.417504][ T8001] loop4: detected capacity change from 0 to 512
[  339.519308][ T8001] EXT4-fs (loop4): orphan cleanup on readonly fs
[  339.573603][ T8001] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  339.589177][ T8001] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  339.597127][ T8001] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #13: comm syz.4.1073: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  339.617801][ T8001] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.1073: couldn't read orphan inode 13 (err -117)
[  339.701029][ T4270] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  339.721851][ T4270] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  339.741746][ T8001] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  339.921352][ T8001] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  339.931800][ T4270] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  339.941954][ T8009] fido_id[8009]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  339.960226][ T4270] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  339.999817][ T4270] usb 7-1: Product: syz
[  340.011897][ T4270] usb 7-1: Manufacturer: syz
[  340.028771][ T8001] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  340.056530][ T4270] usb 7-1: SerialNumber: syz
[  340.098046][ T4270] usb 7-1: can't set config #1, error -71
[  340.130939][ T4270] usb 7-1: USB disconnect, device number 2
[  340.456320][ T8027] loop7: detected capacity change from 0 to 128
[  341.814112][ T8027] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  341.891595][ T8027] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  344.042571][ T4270] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  344.076836][ T8068] dccp_invalid_packet: P.Data Offset(4) too small
[  344.290999][ T8074] loop1: detected capacity change from 0 to 512
[  344.312538][ T8073] loop7: detected capacity change from 0 to 256
[  344.338698][ T8074] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  344.415412][ T4270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  344.440219][ T4270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  344.459531][ T4270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  344.471320][ T4270] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  344.483751][ T4270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.517431][ T8073] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  344.543115][ T4270] usb 5-1: config 0 descriptor??
[  344.681150][   T26] audit: type=1800 audit(1788713326.776:8): pid=8073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1098" name="file1" dev="loop7" ino=1048620 res=0 errno=0
[  344.712348][ T8056] loop3: detected capacity change from 0 to 40427
[  344.749881][ T8056] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  344.757971][ T8056] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  344.844536][ T8056] F2FS-fs (loop3): invalid crc value
[  344.892835][ T8056] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  345.053153][ T4270] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  345.069100][ T8056] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  345.076620][ T8056] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  345.134070][ T4270] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  347.330794][ T8093] loop4: detected capacity change from 0 to 1024
[  347.461852][ T4769] usb 5-1: USB disconnect, device number 7
[  347.899749][ T4191] attempt to access beyond end of device
[  347.899749][ T4191] loop3: rw=2049, want=45104, limit=40427
[  348.016242][ T8093] EXT4-fs (loop4): Ignoring removed bh option
[  348.168869][ T8093] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,grpid,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none.
[  348.387694][ T8093] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  348.488859][ T8093] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: block 3: comm syz.4.1108: lblock 3 mapped to illegal pblock 3 (length 3)
[  348.524609][ T8093] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  348.548236][ T8093] EXT4-fs (loop4): This should not happen!! Data will be lost
[  348.548236][ T8093] 
[  348.901271][ T4396] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:13: lblock 8 mapped to illegal pblock 8 (length 8)
[  348.955659][ T4396] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  348.993033][ T4396] EXT4-fs (loop4): This should not happen!! Data will be lost
[  348.993033][ T4396] 
[  349.500671][ T8120] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  350.018227][ T8113] loop1: detected capacity change from 0 to 40427
[  350.063765][ T8113] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288)
[  350.119929][ T8113] F2FS-fs (loop1): invalid crc value
[  350.129902][ T8113] F2FS-fs (loop1): invalid crc value
[  350.140577][ T8113] F2FS-fs (loop1): Failed to get valid F2FS checkpoint
[  350.152819][ T8138] FAULT_INJECTION: forcing a failure.
[  350.152819][ T8138] name failslab, interval 1, probability 0, space 0, times 1
[  350.166080][ T8138] CPU: 1 PID: 8138 Comm: syz.6.1123 Not tainted syzkaller #0
[  350.173503][ T8138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  350.183670][ T8138] Call Trace:
[  350.186995][ T8138]  <TASK>
[  350.189969][ T8138]  dump_stack_lvl+0x188/0x250
[  350.194713][ T8138]  ? show_regs_print_info+0x20/0x20
[  350.200107][ T8138]  ? load_image+0x410/0x410
[  350.204694][ T8138]  ? __might_sleep+0xf0/0xf0
[  350.209377][ T8138]  ? __lock_acquire+0x7b50/0x7b50
[  350.214455][ T8138]  should_fail+0x383/0x4b0
[  350.218935][ T8138]  should_failslab+0x5/0x20
[  350.223584][ T8138]  slab_pre_alloc_hook+0x51/0xc0
[  350.228683][ T8138]  ? sockfs_init_fs_context+0xa0/0xa0
[  350.234226][ T8138]  ? sock_alloc_inode+0x17/0xb0
[  350.239139][ T8138]  kmem_cache_alloc+0x3d/0x280
[  350.243961][ T8138]  ? sockfs_init_fs_context+0xa0/0xa0
[  350.249393][ T8138]  sock_alloc_inode+0x17/0xb0
[  350.254123][ T8138]  ? sockfs_init_fs_context+0xa0/0xa0
[  350.259552][ T8138]  new_inode_pseudo+0x5f/0x210
[  350.264575][ T8138]  __sock_create+0x128/0x910
[  350.269327][ T8138]  __sys_socket+0xe2/0x170
[  350.273804][ T8138]  __x64_sys_socket+0x76/0x80
[  350.278540][ T8138]  do_syscall_64+0x4c/0xa0
[  350.283161][ T8138]  ? clear_bhb_loop+0x30/0x80
[  350.287943][ T8138]  ? clear_bhb_loop+0x30/0x80
[  350.292687][ T8138]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  350.298693][ T8138] RIP: 0033:0x7f4f05bc7159
[  350.303188][ T8138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  350.322851][ T8138] RSP: 002b:00007f4f03e1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  350.331321][ T8138] RAX: ffffffffffffffda RBX: 00007f4f05e4efa0 RCX: 00007f4f05bc7159
[  350.339382][ T8138] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010
[  350.347539][ T8138] RBP: 00007f4f05c5e024 R08: 0000000000000000 R09: 0000000000000000
[  350.355599][ T8138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  350.363626][ T8138] R13: 00007f4f05e4f038 R14: 00007f4f05e4efa0 R15: 00007ffee466d6b8
[  350.371683][ T8138]  </TASK>
[  350.376496][ T8138] socket: no more sockets
[  353.609024][ T8171] loop3: detected capacity change from 0 to 8192
[  354.378453][ T8193] FAULT_INJECTION: forcing a failure.
[  354.378453][ T8193] name failslab, interval 1, probability 0, space 0, times 0
[  354.419929][ T8193] CPU: 0 PID: 8193 Comm: syz.1.1143 Not tainted syzkaller #0
[  354.427396][ T8193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  354.437494][ T8193] Call Trace:
[  354.440818][ T8193]  <TASK>
[  354.443807][ T8193]  dump_stack_lvl+0x188/0x250
[  354.448548][ T8193]  ? show_regs_print_info+0x20/0x20
[  354.453800][ T8193]  ? load_image+0x410/0x410
[  354.458364][ T8193]  ? __might_sleep+0xf0/0xf0
[  354.463003][ T8193]  ? __lock_acquire+0x7b50/0x7b50
[  354.468081][ T8193]  should_fail+0x383/0x4b0
[  354.472560][ T8193]  should_failslab+0x5/0x20
[  354.477109][ T8193]  slab_pre_alloc_hook+0x51/0xc0
[  354.482083][ T8193]  ? getname_flags+0xb7/0x4f0
[  354.486807][ T8193]  kmem_cache_alloc+0x3d/0x280
[  354.491718][ T8193]  getname_flags+0xb7/0x4f0
[  354.496283][ T8193]  __x64_sys_execveat+0xa9/0xe0
[  354.501200][ T8193]  do_syscall_64+0x4c/0xa0
[  354.505662][ T8193]  ? clear_bhb_loop+0x30/0x80
[  354.510390][ T8193]  ? clear_bhb_loop+0x30/0x80
[  354.515115][ T8193]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  354.521203][ T8193] RIP: 0033:0x7f206b0a5159
[  354.525817][ T8193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  354.545478][ T8193] RSP: 002b:00007f20692fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[  354.553943][ T8193] RAX: ffffffffffffffda RBX: 00007f206b32cfa0 RCX: 00007f206b0a5159
[  354.561965][ T8193] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: ffffffffffffffff
[  354.570073][ T8193] RBP: 00007f206b13c024 R08: 0000000000000800 R09: 0000000000000000
[  354.578096][ T8193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  354.586152][ T8193] R13: 00007f206b32d038 R14: 00007f206b32cfa0 R15: 00007fff06ea1d38
[  354.594205][ T8193]  </TASK>
[  357.763808][ T8230] loop1: detected capacity change from 0 to 128
[  358.138765][ T8230] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  358.151695][ T8230] ext4 filesystem being mounted at /229/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  358.221293][ T8230] fscrypt (loop1, inode 12): Direct key flag not allowed with different contents and filenames modes
[  358.257526][ T8230] syz.1.1149 uses obsolete (PF_INET,SOCK_PACKET)
[  359.519310][   T21] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  359.714682][ T8241] loop1: detected capacity change from 0 to 40427
[  359.756010][ T8241] F2FS-fs (loop1): invalid crc value
[  359.798709][ T8241] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  359.810867][   T21] usb 4-1: Using ep0 maxpacket: 16
[  359.931965][   T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  359.952651][   T21] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  360.018944][ T8241] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  360.173279][   T21] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  360.194387][   T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.225691][   T21] usb 4-1: Product: syz
[  360.239503][   T21] usb 4-1: Manufacturer: syz
[  360.279352][   T21] usb 4-1: SerialNumber: syz
[  360.657232][   T21] usb 4-1: 0:2 : does not exist
[  360.714930][   T21] usb 4-1: USB disconnect, device number 9
[  360.974239][ T4300] udevd[4300]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  361.366626][ T8237] loop6: detected capacity change from 0 to 131072
[  361.386570][ T8237] F2FS-fs (loop6): Test dummy encryption mode enabled
[  361.418200][ T8237] F2FS-fs (loop6): invalid crc value
[  361.489470][ T8237] F2FS-fs (loop6): Found nat_bits in checkpoint
[  361.620726][ T8237] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  364.025832][ T8283] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1177'.
[  364.724414][  T892] Bluetooth: hci5: Frame reassembly failed (-90)
[  364.879516][  T892] Bluetooth: hci5: Frame reassembly failed (-84)
[  366.751114][ T4231] Bluetooth: hci5: command 0x1003 tx timeout
[  366.888318][ T4200] Bluetooth: hci5: sending frame failed (-49)
[  367.737445][ T8309] loop3: detected capacity change from 0 to 512
[  367.781260][ T8311] loop6: detected capacity change from 0 to 256
[  367.870316][ T8318] input: syz1 as /devices/virtual/input/input47
[  368.204436][ T8309] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  368.232793][ T8309] ext4 filesystem being mounted at /280/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  368.722187][ T8338] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1197'.
[  368.938333][ T4230] Bluetooth: hci5: command 0x1001 tx timeout
[  368.959242][ T4200] Bluetooth: hci5: sending frame failed (-49)
[  370.525034][ T4233] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  370.956536][ T4233] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  370.977050][ T4233] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  370.986932][ T4233] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  371.017363][ T4233] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  371.026487][ T4233] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.059154][ T4230] Bluetooth: hci5: command 0x1009 tx timeout
[  371.073954][ T4233] usb 8-1: config 0 descriptor??
[  371.605748][ T4233] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving
[  371.636447][ T4233] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  372.181017][ T8379] loop3: detected capacity change from 0 to 256
[  372.241065][ T8379] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  372.573097][ T8387] loop3: detected capacity change from 0 to 512
[  372.588500][ T8387] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  372.623752][ T8387] EXT4-fs (loop3): 1 truncate cleaned up
[  372.642452][ T8387] EXT4-fs (loop3): mounted filesystem without journal. Opts: acl,errors=remount-ro,. Quota mode: none.
[  373.590817][ T8400] loop6: detected capacity change from 0 to 40427
[  374.402514][ T4290] usb 8-1: reset high-speed USB device number 4 using dummy_hcd
[  374.748328][ T8400] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  374.787040][ T8400] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  374.848229][ T8400] F2FS-fs (loop6): Found nat_bits in checkpoint
[  374.976617][ T8400] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  374.983974][ T8400] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  375.295576][ T8415] loop3: detected capacity change from 0 to 16
[  376.953842][ T8415] erofs: (device loop3): mounted with root inode @ nid 36.
[  377.178701][   T26] audit: type=1800 audit(1788713359.079:9): pid=8415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1226" name="file2" dev="loop3" ino=89 res=0 errno=0
[  377.207570][ T4197] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[9000]
[  377.354317][ T4231] usb 8-1: USB disconnect, device number 4
[  378.258878][ T2286] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  378.620525][ T2286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  378.650468][ T2286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  378.690704][ T2286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  378.705400][ T8445] loop6: detected capacity change from 0 to 256
[  378.739176][ T2286] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  378.769285][ T2286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.800345][ T2286] usb 2-1: config 0 descriptor??
[  378.977787][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  378.984214][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  379.297709][ T2286] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[  379.329383][ T2286] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  379.531704][ T8443] loop4: detected capacity change from 0 to 40427
[  381.335354][ T8443] F2FS-fs (loop4): invalid crc value
[  381.344439][ T8443] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  381.509044][ T8451] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  381.561916][ T8451] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  381.591349][ T8457] loop6: detected capacity change from 0 to 1024
[  381.598293][ T8456] loop1: detected capacity change from 0 to 256
[  381.652205][ T8443] F2FS-fs (loop4): Start checkpoint disabled!
[  381.683726][ T8457] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  381.694833][ T8457] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  381.718486][ T8456] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  381.762427][   T21] usb 2-1: USB disconnect, device number 6
[  381.793371][ T8443] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e7
[  381.886758][ T8457] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1242: bg 0: block 112: padding at end of block bitmap is not set
[  381.909007][ T4241] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  381.949608][ T8457] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 21 with max blocks 44 with error 28
[  382.034335][ T8457] EXT4-fs (loop6): This should not happen!! Data will be lost
[  382.034335][ T8457] 
[  382.084206][ T8457] EXT4-fs (loop6): Total free blocks count 0
[  382.112025][ T8457] EXT4-fs (loop6): Free/Dirty block details
[  382.122789][ T8457] EXT4-fs (loop6): free_blocks=0
[  382.150473][ T8457] EXT4-fs (loop6): dirty_blocks=64
[  382.158510][ T8457] EXT4-fs (loop6): Block reservation details
[  382.164997][ T8457] EXT4-fs (loop6): i_reserved_data_blocks=4
[  382.523323][ T8479] fido_id[8479]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  383.006294][ T8486] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only
[  386.120228][ T4269] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  387.319725][ T8497] loop1: detected capacity change from 0 to 40427
[  387.407644][ T8497] F2FS-fs (loop1): invalid crc value
[  387.452824][ T8497] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  387.464586][ T4269] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  387.474738][ T4269] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.482937][ T4269] usb 8-1: Product: syz
[  387.521454][ T4269] usb 8-1: Manufacturer: syz
[  387.546985][ T4269] usb 8-1: SerialNumber: syz
[  387.815467][ T8528] loop6: detected capacity change from 0 to 16
[  388.447935][ T8530] loop4: detected capacity change from 0 to 4096
[  389.354436][ T8497] F2FS-fs (loop1): Start checkpoint disabled!
[  389.506985][ T8497] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e7
[  389.991424][ T8533] udc-core: couldn't find an available UDC or it's busy
[  390.060403][ T8533] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  390.159179][ T8528] erofs: (device loop6): mounted with root inode @ nid 36.
[  390.316655][ T4269] (unnamed net_device) (uninitialized): Assigned a random MAC address: fa:01:46:14:d0:41
[  390.338062][ T4269] rtl8150 8-1:1.0: eth9: rtl8150 is detected
[  390.354897][   T26] audit: type=1800 audit(1788713372.169:10): pid=8528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1268" name="file2" dev="loop6" ino=89 res=0 errno=0
[  390.416275][ T4197] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[9000]
[  390.726871][ T8538] loop4: detected capacity change from 0 to 256
[  390.921675][ T8538] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  390.941933][ T4269] usb 8-1: USB disconnect, device number 5
[  390.999277][   T26] audit: type=1800 audit(1788713372.857:11): pid=8538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1271" name="file1" dev="loop4" ino=1048623 res=0 errno=0
[  391.089534][ T8547] loop7: detected capacity change from 0 to 512
[  391.242435][ T8547] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled
[  391.431839][ T8547] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsv1,nodelalloc,grpquota,auto_da_alloc=0x0000000000000003,,errors=continue. Quota mode: writeback.
[  391.580573][ T8547] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  391.588667][ T4229] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  391.849333][ T4229] usb 7-1: Using ep0 maxpacket: 32
[  391.969807][ T4229] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  391.989779][ T4229] usb 7-1: config 0 has no interface number 0
[  391.996121][ T4229] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  392.087700][ T4229] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  392.127922][ T4229] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  392.157765][ T4229] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.238140][ T4229] usb 7-1: config 0 descriptor??
[  392.631868][   T13] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  392.715855][ T4229] ft260 0003:0403:6030.0008: item fetching failed at offset 0/2
[  392.762703][ T4229] ft260 0003:0403:6030.0008: failed to parse HID
[  392.769158][ T4229] ft260: probe of 0003:0403:6030.0008 failed with error -22
[  392.917496][ T8554] udc-core: couldn't find an available UDC or it's busy
[  392.943730][ T8554] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  393.003430][   T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  393.039601][   T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  393.066791][ T4229] usb 7-1: USB disconnect, device number 3
[  393.088959][   T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  393.151275][   T13] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  393.212578][   T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.255992][ T8576] loop7: detected capacity change from 0 to 40427
[  393.263015][   T13] usb 5-1: config 0 descriptor??
[  393.366427][ T8576] F2FS-fs (loop7): invalid crc value
[  393.406566][ T8576] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  393.714175][ T8576] F2FS-fs (loop7): Start checkpoint disabled!
[  393.777349][ T8576] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e7
[  393.782834][   T13] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[  393.858348][   T13] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  394.459649][ T8529] attempt to access beyond end of device
[  394.459649][ T8529] loop7: rw=2049, want=45104, limit=40427
[  394.517135][ T8610] loop1: detected capacity change from 0 to 40427
[  394.577818][ T8610] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  394.635287][ T8610] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  394.693898][ T8610] F2FS-fs (loop1): invalid crc value
[  394.724384][ T8610] F2FS-fs (loop1): Found nat_bits in checkpoint
[  394.801859][ T8610] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  394.814322][ T8610] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  395.258507][ T8642] loop6: detected capacity change from 0 to 4096
[  395.462396][ T8642] EXT4-fs (loop6): mounted filesystem without journal. Opts: sysvgroups,,errors=continue. Quota mode: writeback.
[  395.634531][ T8650] ------------[ cut here ]------------
[  395.665780][ T8650] WARNING: CPU: 1 PID: 8650 at arch/x86/kvm/x86.c:10384 kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40
[  395.721834][ T8650] Modules linked in:
[  395.725837][ T8650] CPU: 0 PID: 8650 Comm: syz.3.1306 Not tainted syzkaller #0
[  395.733979][ T8654] kvm: apic: phys broadcast and lowest prio
[  395.773216][ T8650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  395.867105][ T8650] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40
[  395.923010][ T8650] Code: e8 81 06 af 00 e9 a9 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c f1 f7 ff ff 4c 89 ff e8 66 06 af 00 e9 e4 f7 ff ff e8 bc d8 69 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c ea f7 ff ff 4c
[  395.971122][ T8650] RSP: 0018:ffffc90003e37ca0 EFLAGS: 00010287
[  395.979134][ T8650] RAX: ffffffff810f36e4 RBX: 1ffff1100bee9062 RCX: 0000000000080000
[  395.996657][ T8650] RDX: ffffc90006099000 RSI: 0000000000000405 RDI: 0000000000000406
[  396.010164][ T8650] RBP: 0000000000000000 R08: ffffffff8d8b122f R09: 1ffffffff1b16245
[  396.030694][ T8650] R10: dffffc0000000000 R11: fffffbfff1b16246 R12: ffff8880a5c05001
[  396.046275][ T8650] R13: ffff88805f7480f0 R14: ffff88805f748000 R15: ffff8880a5c05000
[  396.057262][ T8650] FS:  00007f58393296c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  396.078302][ T8650] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  396.087643][ T8650] CR2: 00007f206b2f4158 CR3: 00000000a5eb0000 CR4: 00000000003526f0
[  396.099581][ T8650] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000009951
[  396.109568][ T8650] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  396.122193][ T8650] Call Trace:
[  396.127380][ T8650]  <TASK>
[  396.130378][ T8650]  kvm_vcpu_ioctl+0x8f2/0xc10
[  396.139762][ T8650]  ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0
[  396.146760][ T8650]  ? bpf_lsm_file_ioctl+0x5/0x10
[  396.151816][ T8650]  ? security_file_ioctl+0x7c/0xa0
[  396.157271][ T8650]  ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0
[  396.162968][ T8650]  __se_sys_ioctl+0xfa/0x170
[  396.168122][ T8650]  do_syscall_64+0x4c/0xa0
[  396.172588][ T8650]  ? clear_bhb_loop+0x30/0x80
[  396.177802][ T8650]  ? clear_bhb_loop+0x30/0x80
[  396.182540][ T8650]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  396.189115][ T8650] RIP: 0033:0x7f583b0d1159
[  396.193923][ T8650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  396.214736][ T4269] usb 5-1: USB disconnect, device number 8
[  396.225802][ T8650] RSP: 002b:00007f5839329028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  396.238932][ T8650] RAX: ffffffffffffffda RBX: 00007f583b358fa0 RCX: 00007f583b0d1159
[  396.249753][ T8650] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008
[  396.258303][ T8650] RBP: 00007f583b168024 R08: 0000000000000000 R09: 0000000000000000
[  396.273640][ T8650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  396.293566][ T8650] R13: 00007f583b359038 R14: 00007f583b358fa0 R15: 00007ffee1fd88f8
[  396.301862][ T8650]  </TASK>
[  396.306121][ T8650] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  396.313464][ T8650] CPU: 0 PID: 8650 Comm: syz.3.1306 Not tainted syzkaller #0
[  396.320881][ T8650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  396.331016][ T8650] Call Trace:
[  396.334355][ T8650]  <TASK>
[  396.337325][ T8650]  dump_stack_lvl+0x188/0x250
[  396.342052][ T8650]  ? show_regs_print_info+0x20/0x20
[  396.347279][ T8650]  ? load_image+0x410/0x410
[  396.351850][ T8650]  panic+0x2f8/0x850
[  396.355774][ T8650]  ? bpf_jit_dump+0xd0/0xd0
[  396.360346][ T8650]  ? kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40
[  396.366206][ T8650]  __warn+0x248/0x2b0
[  396.370234][ T8650]  ? kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40
[  396.376093][ T8650]  report_bug+0x1b9/0x2e0
[  396.380520][ T8650]  handle_bug+0x3a/0x70
[  396.384719][ T8650]  exc_invalid_op+0x16/0x40
[  396.389274][ T8650]  asm_exc_invalid_op+0x16/0x20
[  396.394174][ T8650] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40
[  396.400639][ T8650] Code: e8 81 06 af 00 e9 a9 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c f1 f7 ff ff 4c 89 ff e8 66 06 af 00 e9 e4 f7 ff ff e8 bc d8 69 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c ea f7 ff ff 4c
[  396.420297][ T8650] RSP: 0018:ffffc90003e37ca0 EFLAGS: 00010287
[  396.426422][ T8650] RAX: ffffffff810f36e4 RBX: 1ffff1100bee9062 RCX: 0000000000080000
[  396.434613][ T8650] RDX: ffffc90006099000 RSI: 0000000000000405 RDI: 0000000000000406
[  396.442637][ T8650] RBP: 0000000000000000 R08: ffffffff8d8b122f R09: 1ffffffff1b16245
[  396.450670][ T8650] R10: dffffc0000000000 R11: fffffbfff1b16246 R12: ffff8880a5c05001
[  396.458837][ T8650] R13: ffff88805f7480f0 R14: ffff88805f748000 R15: ffff8880a5c05000
[  396.466872][ T8650]  ? kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40
[  396.472756][ T8650]  kvm_vcpu_ioctl+0x8f2/0xc10
[  396.477486][ T8650]  ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0
[  396.483195][ T8650]  ? bpf_lsm_file_ioctl+0x5/0x10
[  396.488189][ T8650]  ? security_file_ioctl+0x7c/0xa0
[  396.493350][ T8650]  ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0
[  396.498999][ T8650]  __se_sys_ioctl+0xfa/0x170
[  396.503636][ T8650]  do_syscall_64+0x4c/0xa0
[  396.508070][ T8650]  ? clear_bhb_loop+0x30/0x80
[  396.512831][ T8650]  ? clear_bhb_loop+0x30/0x80
[  396.517530][ T8650]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  396.523467][ T8650] RIP: 0033:0x7f583b0d1159
[  396.527923][ T8650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  396.547579][ T8650] RSP: 002b:00007f5839329028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  396.556288][ T8650] RAX: ffffffffffffffda RBX: 00007f583b358fa0 RCX: 00007f583b0d1159
[  396.564478][ T8650] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008
[  396.572509][ T8650] RBP: 00007f583b168024 R08: 0000000000000000 R09: 0000000000000000
[  396.580811][ T8650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  396.588835][ T8650] R13: 00007f583b359038 R14: 00007f583b358fa0 R15: 00007ffee1fd88f8
[  396.596870][ T8650]  </TASK>
[  396.600233][ T8650] Kernel Offset: disabled
[  396.604910][ T8650] Rebooting in 86400 seconds..