last executing test programs:

2m41.101885903s ago: executing program 2 (id=312):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0xfffffffffffffce3, &(0x7f0000000700)}, 0x6)

2m40.80107874s ago: executing program 2 (id=315):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x3fffffffffffe75, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x3, [@bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (fail_nth: 2)

2m39.815030943s ago: executing program 2 (id=317):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r1, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

2m39.609912377s ago: executing program 2 (id=318):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@nodelalloc}, {@nobarrier}, {@errors_remount}]}, 0x1, 0x57c, &(0x7f00000129c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getpeername(r0, &(0x7f0000000380)=@caif=@dbg, &(0x7f0000000400)=0x80)
setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file2\x00', &(0x7f00000002c0), &(0x7f0000000100), 0x2, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0)
getsockopt(r2, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x1000}, 0x4)
ptrace$setopts(0x4206, r1, 0xaf, 0x58)
socket$inet(0x2, 0x4, 0x6)
mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]})
setxattr$incfs_metadata(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000240)="bfe7e1ae94f1e3e3b941fbab4a9bf6fa1e2e11a44932a9e5f53c6e2147652128af0a33d7bcf03eb0d55fcce9b47250dcf7dcb7402f4b6b8dcc64c7ab0ff0d7d8aa998698a712328a181962c2be3d0e6ae4c39fbb41b4259a50a38adcac8d9c10a8103d82f0", 0x65, 0x1)

2m37.996487852s ago: executing program 2 (id=320):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = socket(0x1, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000"], 0x48)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setscheduler(0x0, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000008c000000060a010400000000000000000100000008000b400000000064000480340001800b000100657874686472000024000280080001400000000f0800034000000001080004400000002205000200070000002c0001800a00010072656469720000001c0002800800024000000016080001400000001208000340000000020900010073797a30"], 0x100}}, 0x0)
bind$unix(r0, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r0, &(0x7f0000001680), 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0)
close(0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()

2m23.838519983s ago: executing program 2 (id=351):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff])
setgroups(0x0, 0x0)
keyctl$setperm(0x5, r3, 0x30925)
keyctl$KEYCTL_MOVE(0x3, r3, 0x0, 0x0, 0x0)

2m23.060447676s ago: executing program 32 (id=351):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff])
setgroups(0x0, 0x0)
keyctl$setperm(0x5, r3, 0x30925)
keyctl$KEYCTL_MOVE(0x3, r3, 0x0, 0x0, 0x0)

22.38683087s ago: executing program 3 (id=594):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f00000001c0)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@errors_continue}, {@orlov}, {@user_xattr}, {@quota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfff7fffffffffff5}, 0x18)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x75b, &(0x7f0000000d40)="$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")
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000400), &(0x7f00000004c0)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00')
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
read$rfkill(r0, &(0x7f00000003c0), 0x8)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = socket$netlink(0x10, 0x3, 0x2)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x44, r6, 0x615, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x44}, 0x5}, 0x0)
pwrite64(r0, &(0x7f0000000000)='6', 0x56, 0xffff)
r7 = open(&(0x7f0000000580)='./file1\x00', 0x64042, 0x169)
pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)

19.347028153s ago: executing program 3 (id=598):
r0 = socket$kcm(0x10, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x82900, 0x0)
ioctl$TIOCGLCKTRMIOS(r1, 0x5456, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, r1, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa14, 0xffffffff}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mmap(&(0x7f00009d3000/0x4000)=nil, 0x4000, 0x0, 0x50, r2, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x89, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0x15, 0x0, <r6=>0x0})
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg(r7, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="ad42", 0x2}], 0x1, &(0x7f0000000d40)=[{0x10, 0x1, 0x13}], 0x10}}], 0x2, 0x4000854)
ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f00000002c0)={0xc, r6})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r6, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2})
ioctl$IOMMU_VFIO_SET_IOMMU(r5, 0x3b66, 0x1)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff"])

14.612047399s ago: executing program 5 (id=607):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f00000001c0)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@errors_continue}, {@orlov}, {@user_xattr}, {@quota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfff7fffffffffff5}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000400), &(0x7f00000004c0)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00')
read$rfkill(r0, &(0x7f00000003c0), 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = open(&(0x7f0000000580)='./file1\x00', 0x64042, 0x169)
pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)

14.386084735s ago: executing program 0 (id=608):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

14.262369836s ago: executing program 3 (id=609):
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
socket(0x10, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r4 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x4, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0xfffffffb, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@remote, 0x1, 0x32}, 0x2, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)

12.791243987s ago: executing program 3 (id=611):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x84d20b6b)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socket$inet6(0xa, 0x3, 0x80000000)
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$setperm(0x5, 0x0, 0x52b242d)
keyctl$join(0x1, 0x0)
keyctl$join(0x1, &(0x7f0000000180)={'syz', 0x1})
r4 = memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7)
prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0)
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2800000002000000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x604, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
fcntl$addseals(r4, 0x409, 0xe)
ftruncate(r4, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x2, 0xf0}, 0x1}, 0x18)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001400010000003d1428813a2353ee0ff1bbcdc0794eec6496e70faabb389b888ffad6978b8f4949a7d8d14971c1a6b0c853ced398d6bab50b7c94eb4ddf201ef4820c5accbb01c1dce3600aac9a29ff33739c7ccc7f10ebf8c124dc3b411ef15a950d8f88bab4060738b35402"], 0x3c}}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

12.190953451s ago: executing program 5 (id=612):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

12.1235178s ago: executing program 0 (id=613):
socket$inet_udp(0x2, 0x2, 0x0) (async)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r2, 0x400448cb, 0x0)
socket(0xa, 0x2, 0x0) (async)
r3 = socket(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e20, 0x419, @mcast1, 0x4}, 0x1c) (async)
bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e20, 0x419, @mcast1, 0x4}, 0x1c)
syz_emit_ethernet(0x0, 0x0, 0x0)
r4 = epoll_create1(0x0)
epoll_pwait2(r4, &(0x7f0000000640)=[{}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x4800802, &(0x7f0000009b00), 0x4, 0x98b1, &(0x7f0000012140)="$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")
open(&(0x7f0000000040)='./file1\x00', 0x20142, 0x10)
r5 = syz_open_procfs(0x0, &(0x7f0000001080)='net/igmp\x00')
read$char_usb(r5, &(0x7f0000000040)=""/4109, 0x100d)
preadv(r5, &(0x7f0000002240)=[{&(0x7f00000010c0)=""/4099, 0x1003}], 0x1, 0x9d3, 0x6)
ioctl$SNDRV_TIMER_IOCTL_TRIGGER(r5, 0x54a6) (async)
ioctl$SNDRV_TIMER_IOCTL_TRIGGER(r5, 0x54a6)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711217000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x204001}, 0x94)
r6 = socket$alg(0x26, 0x5, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x14)
setreuid(0x0, 0xee00)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000031401"], 0x38}, 0x1, 0x0, 0x0, 0x20040854}, 0xc000)
bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
accept4(r6, 0x0, 0x0, 0x0) (async)
r8 = accept4(r6, 0x0, 0x0, 0x0)
connect$inet(r5, &(0x7f0000009ac0)={0x2, 0x4e21, @private=0xa010101}, 0x10)
sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)=@newqdisc={0xe4, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xfff2}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfff}]}}, @q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x100}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4a}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x18}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x101}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x35}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0xe4}}, 0x0)
recvmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}], 0x2}, 0x2000000}], 0x2, 0x101, 0x0)
open(&(0x7f0000000080)='./file2\x00', 0x101000, 0xa2) (async)
open(&(0x7f0000000080)='./file2\x00', 0x101000, 0xa2)

10.658183954s ago: executing program 5 (id=616):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905080300020000000904010000020d000009040101"], 0x0)
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0044a0e02e"], 0x1, 0x173, &(0x7f0000000240)="$eJzs281qE1EYBuBvkviDK8GduLNq/WmmzWitu3oppR1LcarFumkRxEvxyvQGXHgDRjo2I5kEhEhySPM8q++dl2HOLE7mbBLA6urtRhZZrF3M927e/nwnS70iYEGGiZ//awik0/2eegVAGj9eR5xExLefn/ajuzbxfb7od0d958Fk/yXibu+yzx7Go1Y//Br1tT/9+tT7bzX946n9+v3R85/E03gWG9GPPDZj67I/aO5//p+nEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABWVRb9dh670Ik3R1W52eRrdd5q8vU6D1q5aPKNOvf331cH83oFYEadf+z/bmv/91r7H1hep2fnb/eqqvxgMBgMzZD6lwmYt/zj8Ul+ena+cXS8d1gelu+KF9vFYOfV9sudvD755+Pnf+Dq+PvRT70SAAAAAAAAAGBWgyhSLwEAAFiQRfydKPU7AgAAAAAAAAAAAADAsvsdAAD//4Ptq2k=")
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = socket(0x1, 0x803, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000340)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r3, 0x0, 0x0, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r4, r5, <r6=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)})
ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r2, 0x3b8c, &(0x7f0000000100)={0x30, r6, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0})
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010003000000ffdbdf25010000001c0007800c00018008000100", @ANYRES32=r1, @ANYBLOB="0100010008000100", @ANYRES32=r1, @ANYBLOB="0c0002000300000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

10.443264744s ago: executing program 3 (id=617):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001280), 0xa681, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3, 0x1}})
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000280)='./file2\x00', 0x3200c00, &(0x7f0000000340)=ANY=[], 0x0, 0xa8a, &(0x7f0000000640)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x41009432, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)=0x5)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r3 = syz_io_uring_setup(0x18b0, &(0x7f0000000280)={0x0, 0x0, 0x200, 0x2, 0x2000000, 0x0, r2}, &(0x7f0000000200), &(0x7f0000000340))
syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040), &(0x7f0000000240))
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4810}, 0x80)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0)
close_range(r4, 0xffffffffffffffff, 0x100000000000000)
r6 = socket$kcm(0x29, 0x5, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x128a877, &(0x7f00000000c0)=ANY=[@ANYBLOB='nr_inodes=p,usrquota_block_hardlimit=5'])
sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000012c0)=[{0x110, 0x108, 0x3, "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"}, {0xa8, 0x119, 0xfffffffc, "4230e246c66eb634af187ab4cef3d6f590575e3765b9450c69f3a66f8eff26d9c5bcefbd785c7b4f10dd020ba5e5d64e9e6ab215b459b646622a4fbdd25aa3ec9976cbe38186a20610d06e45929dbbea95392ed1116ff76e37d7bea5174cb323718d4fa78600fc0000e1682fd192cfd595ee04b48bc3f3de8744ab6cdcd74db62e369015b199bfbb3695ed0756dba929f25c"}], 0x1b8}, 0x24004050)
io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r8, &(0x7f0000000080)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000440)={0x58, 0x0, 0xb, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0x8, 0x1, '\x00\x00\x00\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_NAME={0xa, 0x1, 'tmpfs\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x60004000}, 0x4042010)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r9 = accept4(r7, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001100)="f78d9ca38fff48f3be52163448412ba8", 0xfffffea6}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="0000000000000000170100000200000000000000d0e337250b3c6f792a8ae9010ce00016bc52fe535fe8689061a82689126e5c7f55d680cee19b39efc96a2eb84e8d6e58a035bdcd0587d4bdb5be4aa212fa75ee04f4956bbeef734b0bb5f910c6a7ea4fff511cf4b7e69a2399b617322bdc165729145f6aac389a"], 0x18, 0x20000000}], 0x1, 0x40800)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0)

8.013534713s ago: executing program 0 (id=621):
r0 = syz_mount_image$btrfs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000001840)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x2}}, {@fatal_errors_bug}, {@nossd_spread}, {@nodiscard}, {@commit={'commit', 0x3d, 0x100}}, {@clear_cache}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x25, 0x8d, 0x31, 0x39, 0x32, 0xdf]}}], [{@measure}, {@appraise_type}, {@subj_user}, {@obj_user={'obj_user', 0x3d, 'metadata_ratio'}}, {@uid_eq}]}, 0x1, 0x5127, &(0x7f0000007680)="$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") (async, rerun: 64)
r1 = socket(0xa, 0x3, 0x3a) (rerun: 64)
setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async, rerun: 64)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xd0, 0x0, 0x0) (async, rerun: 64)
r2 = openat(r0, &(0x7f0000000540)='./file1\x00', 0x5410c1, 0x0) (async)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async, rerun: 32)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 32)
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x800, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc3c, &(0x7f0000002580)="$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") (async, rerun: 32)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async, rerun: 32)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000080)={0x200000, 0x7, 0x3, 0xac, 0x7})
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) (rerun: 32)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf2501000000000000000141"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x24040000) (async, rerun: 64)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002540)={@fallback, 0x24, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x40) (async, rerun: 64)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000003c0)={0x24, 0x23, 0x100, 0x70bd2c, 0x25dfdbff, "", [@typed={0x8, 0x5f, 0x0, 0x0, @uid}, @typed={0xc, 0x89, 0x0, 0x0, @u64=0x100000001}]}, 0x24}, {&(0x7f0000000480)={0x1c, 0x40, 0x100, 0x70bd28, 0x25dfdbfd, "", [@nested={0xc, 0xc4, 0x0, 0x1, [@nested={0x4, 0x8e}, @nested={0x4, 0x11}]}]}, 0x1c}, {&(0x7f0000002100)={0x368, 0x33, 0x400, 0x70bd28, 0x25dfdbfd, "", [@typed={0x4e, 0xcf, 0x0, 0x0, @binary="3bf89328939ff71ab8fe7206916694f69f846b2ab0b39117e98b0148b1baae76aa4f9068a7e6080e5f2a3fa0660d99c48d87497e9204426b84e9cd682e2ed3e21f32fb3e0ceed123cd0e"}, @nested={0xeb, 0x89, 0x0, 0x1, [@nested={0x4, 0xe8}, @generic="8c8d8b50753a3bc5d190edd210d3c8922aa329fd9ebb1422fb43f382114ecd84c3c91259d1a4b3694c525411921d8cc4be80d0f7bef9fc5aa3dab16737ee205036634349a830016df9702248a23e29d5d34cd8e20826072c687458321bf1f799aa421600505771eb81120a172eb94db3681510ddca5d7b5ef6e71c66790e800dabd5784af614e7c4af38fc72768fa0f73dca2097e1681ad4ffb45c2a8067db8e32d1d7e7c6b8f610487b52f2ca75a2d862c78b8d5ecccab81dc5348240b2eb1bc04f4111f32e5327756f2648b8b0cf73f757fc03463e4f38ea1e84ad27bf7050454996"]}, @typed={0x14, 0x110, 0x0, 0x0, @str='fatal_errors=bug'}, @typed={0x8, 0x11a, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="3199f206ad10a884d9c74f64155b853f6dd1f697e58882988843e6958623000475c3d537306a7d22d8fc5a1fbdbbdd5acf280ee6e853c2a1acbecd7f3191a1c64ae51267e29473fb1a871aab7e98b2b5d80ffd3148b894f30de34ecc8a", @nested={0x4c, 0x142, 0x0, 0x1, [@typed={0xc, 0xf3, 0x0, 0x0, @u64=0xffffffffffffffff}, @typed={0xc, 0xe3, 0x0, 0x0, @u64=0x5}, @nested={0x4, 0x5}, @typed={0x14, 0xe8, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @nested={0x4, 0xc2}, @nested={0x4, 0x99}, @typed={0x8, 0xaa, 0x0, 0x0, @uid}, @typed={0x8, 0xa2, 0x0, 0x0, @u32=0xff}]}, @nested={0x5a, 0xa8, 0x0, 0x1, [@typed={0x14, 0xdd, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="106395f9043f5a04ae5ffdc50103f7fbaafce6640fd7017af64f4aaa8e3cb0a7b72d729ff33309ae37df58ab9851a9867e6b3aa15b455650082fde92bf0d", @nested={0x4, 0xea}]}, @generic="1e3cc6140a989f47a32022cfe1a5dae164b4d4a11e810ef9ee680df1024d326667165efd8b9d5061e78636edc43855f68e8eeb8b674c1337aaada73100c3ecc7f2f0e4fb6ffdb3704682585af2b4386861b24d05fed75b7ef5792f9bd4b30b9c86d6d61d50fbbd00ab389ccdd4a601ea7756425784360912025f5bc9d7ddf9f108bb9c95c6862daca6d3406016116c95e7c875c4ad8ba197e556168422d137e81254db780ff8fd6a1e8e9924d17f979fc4637522b75df85f3efd9c237a5c7b86e3e30799c9de8f7455ebbcefd31f7062fc30a4f2984c8b8a83f22e914555bc3299e141a93420b09bb8e27586", @generic="1e9116577402", @typed={0x8, 0x82, 0x0, 0x0, @u32=0x4}]}, 0x368}, {&(0x7f0000005200)={0x114c, 0x39, 0x300, 0x70bd27, 0x25dfdbfb, "", [@nested={0x10ec, 0x138, 0x0, 0x1, [@nested={0x4, 0x5b}, @generic="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", @typed={0xd1, 0x130, 0x0, 0x0, @binary="a4282d51eb6b05596ac64b4324062327f4e20e3ecb7099d7113e43f113665b9c611cd9a5e4e4604432725d968c30bace2d246bd822f9cd25f8e0eae9e72be962f0fdac3eec0ee3d30ecdf58f82e484acde0355269da9d5c5dfce95448a66476609b189d925903e7cd9abd5ed052744b455286ed4cd9c49d65b26e6c9786526bbb21d465bae0f90d3d3a3cc0b98b0b0947a57e88ab8e493fa4bd41dd8d37f18f270e2276c2dc011bda04ac1401341114c38e187c881bfaf5a72ddb472e3e174ef5d1abf820b3c7026509f26cabf"}, @typed={0x4, 0xfd}, @typed={0xc, 0x2f, 0x0, 0x0, @u64}]}, @generic="aae0593a1c9da9cbeb1e69b76ff56534140da342ba857c14a583f4cfb2ba84b2d9d6a46c722c5486d41281740d39fb14356af293495974384d0cacf82ee8934280eb", @typed={0x4, 0x74}, @typed={0x8, 0xce, 0x0, 0x0, @fd=r0}]}, 0x114c}, {&(0x7f0000001dc0)={0x190, 0x3d, 0x2, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x178, 0xe4, 0x0, 0x1, [@nested={0x4, 0x14d}, @generic="2398a36ee19cdbdd16adbf67ffa3cda1d0255f9bb9ea5b6b49e9cab3e6a380ad56deb0664c96c713befd90c36a852b02fae8e41cc15319638aa19e8c951a9784e66e6d355224ca46215932c8c97b55fc3e7ee6a15cedcb46cf4d0a01a9271eb2dd18ba622b257904312ca1779412fabc734d9196e33157f8f3a34db0abb6c9322b7060bc6171dd3bd5386162b0a3f296b9100cf709721e124df9d6", @nested={0x4, 0x4d}, @typed={0x14, 0x119, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0xf7, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0xc4}, @typed={0x8, 0x11a, 0x0, 0x0, @u32=0x9}, @generic="2558ecd6ade520485940ee8d19ad699efeffb01be74ab1f1a4a1a72e327b8c088133346b9a2f40f9f7c5ec5eef195c5674da10a68741f069d16c99914313dea723c76ecf356199b8f1b0d3501219f05509867c6eefe225419d01c424d578c0ad9ad7c7842df31c7aff2d0206c4484837dde0947efd0825c89652ba0ae35c43d33d87f6627a9ba8c1e91ea2cd23f31a09461f0ad8cc1fcc6f3a45456db2c4cdf48184f40d40f0560f0b"]}, @typed={0x8, 0xd4, 0x0, 0x0, @u32=0x7ff}]}, 0x190}, {&(0x7f0000001f80)={0x150, 0x1f, 0x4, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x14, 0x3d, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="20514a8ba8a1160a2a42472703338990ea1c9a3297f5f9e65d06d19d63d5ff8be2206d22409f786aa2cd783c99c5a6978692423106ad3997b47fc1b2bd8646799048601df25a709cba9857d897f783f3c4ca2743b0f1a7f70e1b9dfc1c0a2af8c788db7cde3f77e894176ee458933f4a22400d82ed6f29305b9b797184b88e1abf0ba3d1cb4600f87e3133b9721d10e45a7683", @generic="e403de43122109862ae4a363e6921b64f7130ad3e855b3c674c76024d0702462e7df2e38d609d837f0d0ee696811ce940aba99ad09621adc388db7f7216b00f5acf9325d385d049c68fef5a9f6b365bf33125c122d486faf4cf09b6f19f09a5208faeb3318305df1d1084c0f9c35ecb239d28bfc0a99c6ab657cbe91b206ed197f52df63a4aad7a6251f4afb29913c09140c3356dc81efc541"]}, 0x150}, {&(0x7f00000004c0)={0x70, 0x34, 0x100, 0x70bd2f, 0x25dfdbff, "", [@generic="f142ff36cf3c18969176281bdc1e8c78d124235843d76cf1879ab34f51b45e8861ff88d02883a58792c1323d49d25bf5cd9f61cdd102c9acec10c0104df4763d000b3ff8be6b8f22d2cf7485bf6b1c0a435003b56f77d55635e72d4dac11"]}, 0x70}], 0x7, 0x0, 0x0, 0xc850}, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) (async)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc01, 0x0) (async)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) (async)
r7 = socket(0x18, 0x9, 0x7)
syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f00000015c0)=ANY=[@ANYBLOB="12011001020000082505a1a440000102030109025c000201a620000904000001020d0000052406000105240000000d240f010800000003004b060206241a0600160905810308008100080904010000020d00000904010102020d000009058202100002a20b090503022000060219729a8a0b089846a2098e685c473e"], 0xffffffffffffffff) (async)
r8 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
write$cgroup_int(r8, &(0x7f0000000040)=0xc, 0x12) (async)
fallocate(r8, 0x0, 0x0, 0x1001f0)
write$UHID_INPUT(r2, &(0x7f0000000580)={0x8, {"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", 0x1000}}, 0x1006) (async)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="e42bf18a00000000002000000010000000000000abcae801a455711615066502e1b2f7", @ANYRES32=r7, @ANYRESOCT, @ANYRESDEC=r5, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000dd9b38411d9aa5a2a3ba4798afdbd3ce74cb60c8ec18ef049506aa65e072f22ba07e87ac4f4c10390f1fdb4901450038c2c7d6a2c0d3584d138354d0589a6221fee55a755745f3ffb9472196c9ff6822e1a66fff61eb559691183b5e856e3b4fd82af06320b2fb0c5532404327a52ff16739b6459184fa96cc1bd75d933872be35dcf900361edc1dab2e7352bba7ca2d29c09b49b0305c58e877b34523032b809bc89db200"/204], 0x48) (async, rerun: 32)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32)
pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

7.895328835s ago: executing program 3 (id=622):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r1, &(0x7f0000000300)={0x4000000c})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2)
open_by_handle_at(r2, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES32=r3], 0x10000)
sendto$inet(r7, &(0x7f00000013c0)="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", 0xfc0, 0x0, 0x0, 0x0)
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='shortad,partition=00000000000000000005,noadinicb,uid=', @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0], 0xfd, 0x49b, &(0x7f0000000f00)="$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")
mkdir(&(0x7f0000002bc0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
getpeername$ax25(r7, &(0x7f0000000280)={{0x3, @null}, [@bcast, @netrom, @remote, @default, @null, @bcast, @rose, @rose]}, &(0x7f00000001c0)=0x48)
ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000740)={{0x80, 0x5}, 'port0\x00', 0xc, 0x100001, 0x8, 0x401, 0x10, 0x2, 0xf347, 0x0, 0x5, 0xd7})

6.92858682s ago: executing program 4 (id=623):
fsopen(&(0x7f00000003c0)='omfs\x00', 0x0) (fail_nth: 2)

6.808872394s ago: executing program 1 (id=624):
syz_usb_connect(0x0, 0x7f, &(0x7f00000000c0)=ANY=[@ANYBLOB="120110018e7db320711301940d70382b03010902970000008000000004d90000d7c0954656f30fb7b72f320000210100ff012207050024020108040505f6"], 0x0) (async)
syz_usb_connect(0x0, 0x7f, &(0x7f00000000c0)=ANY=[@ANYBLOB="120110018e7db320711301940d70382b03010902970000008000000004d90000d7c0954656f30fb7b72f320000210100ff012207050024020108040505f6"], 0x0)
r0 = socket(0x1e, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid() (async)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)}], 0x1) (async)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)}], 0x1)
getpid() (async)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x1, &(0x7f0000000400)=0x7) (async)
sched_setscheduler(r6, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) (async)
connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) (async)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
syz_pidfd_open(r6, 0x0)
keyctl$session_to_parent(0x12)
open_by_handle_at(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe00"], 0x1)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50)
getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, 0x0, 0x0) (async)
getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, 0x0, 0x0)

6.706623523s ago: executing program 5 (id=625):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x808500, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYRES8], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x56aaa7a79eba33be, 0x2b}, 0x94)
prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_cache\x00')
pread64(r5, &(0x7f0000000040)=""/102400, 0x19000, 0x9)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000001b80)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001a40)={0xd8, 0x1403, 0x800, 0x70bd27, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'hsr0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x804}, 0x10)
syz_emit_ethernet(0xb6, &(0x7f0000000e00)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60f7d8ff00403c0020010000000000000000000000000002ff0200000000000000000000000000010004000000000000c910ff010000000000000000000000000001c910fc00000000000000000000000000000000977c0000000000001090780200000000000000a8df1c6eab6ed26af73b86e656d49d42223414d005ca29c8e51814f914da5a09a263080269371cc7a3fcfe485611f2dcd126f75e24539fdc094e5fa11ddb0897ec8a486cf01bba8544dfa6c49e0bd1b3ff6660914bf8458f1afc6a5a0b"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f08864", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
mount(&(0x7f0000000080)=@nullb, 0x0, &(0x7f0000000040)='qnx4\x00', 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000005340))
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c)
bind$packet(r6, &(0x7f0000000280)={0x11, 0x10, 0x0, 0x1, 0x3, 0x6, @link_local}, 0x14)

6.559590131s ago: executing program 0 (id=626):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100000000004032150e0100000000000109022400010000c00009040000010300020009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f000009e740)={0x2c, &(0x7f000009e440)={0x40, 0xc, 0xa1, {0xa1, 0x30, "365a76b622b178d2dc2e17965d96ede61ac2066abcfba63890f892cf95a65a373564c8cc6cad16ad11228c698191bcdd0fa7e74d82177c08b573e63dc6599946ed83be8e6cad4d14e0586d77c515bba36dfce344af35c5041d65ae8c7cb1544d81f59328793f13409adc4f6a7716244949446ddc722f38191d5b779a464bc73cfe8e0bf2ee2f309a191cfaa265366bb3098404a2d50f835b34d83fac56d479"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

6.438297498s ago: executing program 4 (id=627):
fsopen(&(0x7f00000003c0)='omfs\x00', 0x0)

6.18504449s ago: executing program 4 (id=628):
syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000100)='./file1\x00', 0xa08800, &(0x7f0000000000)=ANY=[], 0x4, 0x67b, &(0x7f00000010c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) (async)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) (async)
setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r1, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) (async)
sendmmsg$inet6(r1, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/17, 0x11}}], 0x774, 0x21e0, 0x0) (async)
recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/17, 0x11}}], 0x774, 0x21e0, 0x0)
setxattr$incfs_metadata(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000540), 0x0, 0x0, 0x1)

4.853379382s ago: executing program 1 (id=629):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000030000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x62}, 0x94)

4.852646952s ago: executing program 4 (id=630):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f00000001c0)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@errors_continue}, {@orlov}, {@user_xattr}, {@quota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfff7fffffffffff5}, 0x18)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x75b, &(0x7f0000000d40)="$eJzs3M9rHOUbAPBnptmmP/L9bgTBHwcRWmihdJM0IO2p8eKtUCh4rSGZhJBJNmQ3tRsLtp6F2lwUBFHPHr0Kpf4B3qSg4F0QrfEgXlZms0lpmt1um6Qr6ecDk3ne+fW8T3Z4swN5J4AX1pvFjyRiKCIuR0S5vT2NiMOt6EjEzY3j1h/cmCqWJJrNK78nxWmx3ixvXStpr49H65R4NSLulSLOfPR43lpjdX4yz7PldnukvrA0Umusnp1bmJzNZrPFsfELo+fHx8+Pjj+xhld6rPXkuxeO3vnhnbW1H7+t335j4GwSE626o11bj5d5Khu/k1JMtNuH2uvF/UjWR0m/OwAAQE/S9nfSgda31HIcakUAAADAQdIcbAIAAAAHXhL97gEAAACwvzb/D2Bzbu9+zYPt5Le3I2J4p/wDrTnEEUeiFBHH1pNHZiYkG6fBrty8FRF3J7bff18Xd9jNXV57dFv70TnSh3d5dfbC3WL8mdhp/Em3xp/YYfwZ2Hx3wi51Hv8e5j/UYfy73GOO7754rdQx/62I1wcey//Ww/v/SCvXTvnf6zH/7bWP73Ta1/wq4tSOf3+SR3J1eT/ExMxc3vX1A/f+OX2/W/3HOuVPute/1GP9H6z/Od9pLCnynz7R/fPfKX9xT3zS7kcaEXfa66K9ti3HiYWfvu9W/3REc6f6n/T5f9lj/b98M3i9x0MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgJY2IoUjSylacppVKxPGIeDmOpXm1Vj8zU11ZnC72RQxHKZ2Zy7PRiChvtJOiPdaKH7bPbWuPR8RLPx/dSDqXZ5Wpaj7d7+IBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYcjwihiJJKxGRRsRf5TStVCIGejh38Dn0DwAAANgjw/3uAAAAALDvPP8DAADAwfesz//JHvcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONAuX7pULM31Bzemivb0tcbKfPXa2emsNl9ZWJmqTFWXlyqz1epsnlWmqgtPul5erS6NXYiV6yP1rFYfqTVWry5UVxbrV+cWJmezq1npuVQFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA0xpqLUlaiYi0FadppRLxv4gYjlIyM5dnoxHx/4i4Xy4NFu2xfncaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPVdrrM5P5nm2LBAInlvwYUT8B7rRJej3yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQD/UGqvzk3meLdf63RMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6K/01iYhiOVU+ObR97+Hk73JrHRHvf37l0+uT9fryWLH9j63t9c/a28/1o/8AAADwQrj4NAdvPqdvPscDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0qtZYnZ/M82x5d8HFaKw2kw7H9LtGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg2fwbAAD//2Wnx3E=")
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000400), &(0x7f00000004c0)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00')
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
read$rfkill(r0, &(0x7f00000003c0), 0x8)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = socket$netlink(0x10, 0x3, 0x2)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x44, r6, 0x615, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x44}, 0x5}, 0x0)
pwrite64(r0, &(0x7f0000000000)='6', 0x56, 0xffff)
r7 = open(&(0x7f0000000580)='./file1\x00', 0x64042, 0x169)
pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)

4.667697086s ago: executing program 1 (id=631):
r0 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xfad9, 0x10000, 0x3}, &(0x7f0000000240)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}})
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)

4.39310736s ago: executing program 1 (id=632):
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, 0x0}, 0x20)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x200002, 0x8, "ff00054fa93e008000295894c900ffff00"})
syz_open_pts(r5, 0x1)

3.151459741s ago: executing program 1 (id=633):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})

3.071059265s ago: executing program 0 (id=634):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='io_uring_create\x00', r1, 0x0, 0x43}, 0x18) (async)
socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) (async)
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000340)={'bond0\x00', @ifru_names='ip6_vti0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x21a)

2.610696702s ago: executing program 5 (id=635):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001200010000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x28}}, 0x802)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000005c0)=ANY=[@ANYBLOB="01000000000000001b0001"])

2.588971479s ago: executing program 1 (id=636):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @reserved})
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58)
r3 = accept$alg(r2, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="b6", 0x1}], 0x1, 0x0, 0x0, 0x20040091}, 0x8000)
accept4(r3, 0x0, 0x0, 0x80000)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40081271, &(0x7f0000000980)=0x4000)
syz_usb_connect(0x0, 0x1a2, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES64=r6, @ANYRES64=r4, @ANYRES16=r5], 0x0)
lsm_list_modules(0x0, 0x0, 0x0)
ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})

2.561483636s ago: executing program 4 (id=637):
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0)
socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000)
socket$inet6(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)

1.466616274s ago: executing program 0 (id=638):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)={0xc0000008})
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)

149.926172ms ago: executing program 5 (id=639):
syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = memfd_secret(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1b2e})
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000000ecff11"])
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={<r4=>0x0}, &(0x7f0000000580)=0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000380)={&(0x7f0000000000)="3fddaa90d9b27ff815793277d05abf4c426342b37ccb52f03483c519eeb87225e9d57ae68d8ea76642a125a703e8de", &(0x7f0000000300)=""/88, &(0x7f00000004c0)="4beb5ea8109d7956542ed402349c382fa2d296a4bf1ec99e21ba6ea1f31d7f17a91a2749f35950c7492a07af426e0110c8f2abe3f0c246a483e96b92cc86f5afbb715c24da7f72b24e108c1a072c0d99a9876ceb294845c920e033fdb80116a3a34c182a5fc44093c94a5d79a466aa51bad8bd4e23eb7543bc8b59144f2f31c1c5c6eec019c14a07c49a8a85327757", &(0x7f0000000080)="33b06833d4bfa0644d3e9d829ed03c5a5c08509c5ef704c320", 0x0, r0}, 0x38)
socket$kcm(0x10, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a3000"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000eb6cbbcb2205a229b7739ebca69601d48af66dd85396eeca77b8cd456d8f53edc1e2704c2a41a097c355a300fd2746494f2fa5566d119682584697118fd5eeb6c72003a69ee8577f4e3b10b4052be967840fba0a7a7247d8b0bdb8f2c438ac0ef9edd3cf14e39cb20f9484a21664b5243fc927b8", @ANYRES16=r8, @ANYBLOB="05072bbd7000ffdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0)

0s ago: executing program 4 (id=640):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100"], 0x0)
ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185)
r2 = socket$xdp(0x2c, 0x3, 0x0)
pread64(r2, &(0x7f0000000080)=""/243, 0xf3, 0x100000000)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r3, &(0x7f0000004200), 0x0, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20000000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

kernel console output (not intermixed with test programs):

] F2FS-fs (loop3): invalid crc value
[  257.704820][ T7458] F2FS-fs (loop3): Current segment's next free block offset is inconsistent with bitmap, logtype:3, segno:0, type:0, next_blkoff:3, blkofs:6
[  257.774756][ T7458] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117)
[  257.886550][ T5875] Bluetooth: hci2: command tx timeout
[  257.896801][ T7484] FAULT_INJECTION: forcing a failure.
[  257.896801][ T7484] name failslab, interval 1, probability 0, space 0, times 0
[  257.939660][ T7484] CPU: 0 UID: 0 PID: 7484 Comm: syz.1.370 Not tainted 6.16.0-next-20250806-syzkaller #0 PREEMPT(full) 
[  257.939691][ T7484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  257.939703][ T7484] Call Trace:
[  257.939712][ T7484]  <TASK>
[  257.939721][ T7484]  dump_stack_lvl+0x189/0x250
[  257.939752][ T7484]  ? __pfx____ratelimit+0x10/0x10
[  257.939779][ T7484]  ? __pfx_dump_stack_lvl+0x10/0x10
[  257.939803][ T7484]  ? __pfx__printk+0x10/0x10
[  257.939838][ T7484]  ? __pfx___might_resched+0x10/0x10
[  257.939855][ T7484]  ? fs_reclaim_acquire+0x7d/0x100
[  257.939892][ T7484]  should_fail_ex+0x414/0x560
[  257.939924][ T7484]  should_failslab+0xa8/0x100
[  257.939955][ T7484]  kmem_cache_alloc_noprof+0x73/0x3c0
[  257.939981][ T7484]  ? io_submit_one+0x11f/0x1310
[  257.940007][ T7484]  io_submit_one+0x11f/0x1310
[  257.940045][ T7484]  ? __pfx_io_submit_one+0x10/0x10
[  257.940067][ T7484]  ? __might_fault+0xb0/0x130
[  257.940108][ T7484]  ? __might_fault+0xb0/0x130
[  257.940139][ T7484]  __se_sys_io_submit+0x185/0x2f0
[  257.940173][ T7484]  ? __pfx___se_sys_io_submit+0x10/0x10
[  257.940200][ T7484]  ? ksys_write+0x22a/0x250
[  257.940239][ T7484]  ? do_syscall_64+0xbe/0x3b0
[  257.940271][ T7484]  do_syscall_64+0xfa/0x3b0
[  257.940306][ T7484]  ? lockdep_hardirqs_on+0x9c/0x150
[  257.940334][ T7484]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.940353][ T7484]  ? clear_bhb_loop+0x60/0xb0
[  257.940379][ T7484]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.940398][ T7484] RIP: 0033:0x7fd803b8ebe9
[  257.940418][ T7484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  257.940436][ T7484] RSP: 002b:00007fd801df6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  257.940458][ T7484] RAX: ffffffffffffffda RBX: 00007fd803db5fa0 RCX: 00007fd803b8ebe9
[  257.940473][ T7484] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007fd80490a000
[  257.940487][ T7484] RBP: 00007fd801df6090 R08: 0000000000000000 R09: 0000000000000000
[  257.940500][ T7484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  257.940512][ T7484] R13: 00007fd803db6038 R14: 00007fd803db5fa0 R15: 00007ffed6469808
[  257.940546][ T7484]  </TASK>
[  258.161652][    C0] vkms_vblank_simulate: vblank timer overrun
[  259.018209][ T5996] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  259.036615][ T7502] CIFS: Unable to determine destination address
[  259.368268][ T7502] overlayfs: missing 'lowerdir'
[  259.525386][ T5996] usb 4-1: config 4 has an invalid interface number: 39 but max is 1
[  259.560365][ T5996] usb 4-1: config 4 has an invalid interface number: 49 but max is 1
[  259.965422][ T5875] Bluetooth: hci2: command tx timeout
[  260.105058][ T5996] usb 4-1: config 4 has no interface number 0
[  260.111204][ T5996] usb 4-1: config 4 has no interface number 1
[  260.133575][ T5996] usb 4-1: config 4 interface 39 has no altsetting 0
[  260.148434][   T49] hsr_slave_0: left promiscuous mode
[  260.175612][ T5996] usb 4-1: config 4 interface 49 has no altsetting 0
[  260.195467][ T5996] usb 4-1: New USB device found, idVendor=05e3, idProduct=0503, bcdDevice=25.79
[  260.209298][ T5996] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.235158][   T49] hsr_slave_1: left promiscuous mode
[  260.250793][ T5996] usb 4-1: Product: syz
[  260.258945][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  260.280490][ T5996] usb 4-1: Manufacturer: syz
[  260.286095][ T5996] usb 4-1: SerialNumber: syz
[  260.290854][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  260.363478][   T49] veth1_macvtap: left promiscuous mode
[  260.371164][   T49] veth0_macvtap: left promiscuous mode
[  260.377806][   T49] veth1_vlan: left promiscuous mode
[  260.383460][   T49] veth0_vlan: left promiscuous mode
[  260.568553][ T5924] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  260.840927][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  260.958571][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  261.030383][ T5924] usb 1-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00
[  261.093834][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.168181][ T5924] usb 1-1: config 0 descriptor??
[  262.240885][ T5875] Bluetooth: hci2: command tx timeout
[  262.497563][ T5996] usb 4-1: USB disconnect, device number 12
[  262.499430][ T5924] usbhid 1-1:0.0: can't add hid device: -71
[  262.532157][ T5924] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  262.572831][ T5924] usb 1-1: USB disconnect, device number 17
[  262.777157][   T49] team0 (unregistering): Port device team_slave_1 removed
[  262.891421][   T49] team0 (unregistering): Port device team_slave_0 removed
[  263.200599][ T7516] loop1: detected capacity change from 0 to 32768
[  263.236642][ T7518] loop3: detected capacity change from 0 to 32768
[  263.364716][ T7518] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.377 (7518)
[  263.423892][ T7516] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  263.450266][ T7518] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  263.465638][ T7518] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  263.688448][ T7518] BTRFS info (device loop3): disk space caching is enabled
[  263.851967][ T7518] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  264.190706][ T7516] XFS (loop1): Ending clean mount
[  264.569245][ T7518] BTRFS info (device loop3): rebuilding free space tree
[  264.618282][ T7518] BTRFS info (device loop3): disabling free space tree
[  264.637050][ T7518] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  264.671271][ T7518] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  265.062639][ T5860] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  265.173636][ T7518] netlink: 182 bytes leftover after parsing attributes in process `syz.3.377'.
[  265.770174][ T5865] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  266.157759][ T7562] FAULT_INJECTION: forcing a failure.
[  266.157759][ T7562] name failslab, interval 1, probability 0, space 0, times 0
[  266.170833][ T7562] CPU: 0 UID: 0 PID: 7562 Comm: syz.3.381 Not tainted 6.16.0-next-20250806-syzkaller #0 PREEMPT(full) 
[  266.170862][ T7562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  266.170874][ T7562] Call Trace:
[  266.170883][ T7562]  <TASK>
[  266.170891][ T7562]  dump_stack_lvl+0x189/0x250
[  266.170920][ T7562]  ? __pfx____ratelimit+0x10/0x10
[  266.170947][ T7562]  ? __pfx_dump_stack_lvl+0x10/0x10
[  266.170971][ T7562]  ? __pfx__printk+0x10/0x10
[  266.171001][ T7562]  ? __pfx___might_resched+0x10/0x10
[  266.171019][ T7562]  ? fs_reclaim_acquire+0x7d/0x100
[  266.171056][ T7562]  should_fail_ex+0x414/0x560
[  266.171087][ T7562]  should_failslab+0xa8/0x100
[  266.171117][ T7562]  __kmalloc_noprof+0xcb/0x4f0
[  266.171143][ T7562]  ? tomoyo_encode+0x28b/0x550
[  266.171167][ T7562]  tomoyo_encode+0x28b/0x550
[  266.171192][ T7562]  tomoyo_realpath_from_path+0x58d/0x5d0
[  266.171225][ T7562]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  266.171260][ T7562]  tomoyo_path_number_perm+0x1e8/0x5a0
[  266.171290][ T7562]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  266.171316][ T7562]  ? irqentry_exit+0x74/0x90
[  266.171342][ T7562]  ? lockdep_hardirqs_on+0x9c/0x150
[  266.171383][ T7562]  ? rcu_is_watching+0x15/0xb0
[  266.171424][ T7562]  ? lockdep_hardirqs_on+0x9c/0x150
[  266.171468][ T7562]  security_file_ioctl+0xcb/0x2d0
[  266.171496][ T7562]  __se_sys_ioctl+0x47/0x170
[  266.171523][ T7562]  do_syscall_64+0xfa/0x3b0
[  266.171552][ T7562]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.171570][ T7562]  ? asm_sysvec_call_function_single+0x1a/0x20
[  266.171589][ T7562]  ? clear_bhb_loop+0x60/0xb0
[  266.171613][ T7562]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.171632][ T7562] RIP: 0033:0x7f50bed8ebe9
[  266.171650][ T7562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  266.171667][ T7562] RSP: 002b:00007f50bfbe9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  266.171691][ T7562] RAX: ffffffffffffffda RBX: 00007f50befb6180 RCX: 00007f50bed8ebe9
[  266.171706][ T7562] RDX: 00002000000005c0 RSI: 00000000000089f1 RDI: 0000000000000003
[  266.171719][ T7562] RBP: 00007f50bfbe9090 R08: 0000000000000000 R09: 0000000000000000
[  266.171732][ T7562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  266.171743][ T7562] R13: 00007f50befb6218 R14: 00007f50befb6180 R15: 00007ffd3d2900f8
[  266.171777][ T7562]  </TASK>
[  266.172472][ T7562] ERROR: Out of memory at tomoyo_realpath_from_path.
[  266.674943][ T7565] FAULT_INJECTION: forcing a failure.
[  266.674943][ T7565] name failslab, interval 1, probability 0, space 0, times 0
[  266.688103][ T7565] CPU: 1 UID: 0 PID: 7565 Comm: syz.1.380 Not tainted 6.16.0-next-20250806-syzkaller #0 PREEMPT(full) 
[  266.688130][ T7565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  266.688142][ T7565] Call Trace:
[  266.688152][ T7565]  <TASK>
[  266.688161][ T7565]  dump_stack_lvl+0x189/0x250
[  266.688200][ T7565]  ? __pfx____ratelimit+0x10/0x10
[  266.688227][ T7565]  ? __pfx_dump_stack_lvl+0x10/0x10
[  266.688251][ T7565]  ? __pfx__printk+0x10/0x10
[  266.688286][ T7565]  ? __pfx___might_resched+0x10/0x10
[  266.688312][ T7565]  should_fail_ex+0x414/0x560
[  266.688344][ T7565]  should_failslab+0xa8/0x100
[  266.688375][ T7565]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  266.688402][ T7565]  ? __alloc_skb+0x112/0x2d0
[  266.688436][ T7565]  __alloc_skb+0x112/0x2d0
[  266.688469][ T7565]  netlink_sendmsg+0x5c6/0xb30
[  266.688510][ T7565]  ? __pfx_netlink_sendmsg+0x10/0x10
[  266.688540][ T7565]  ? rcu_is_watching+0x15/0xb0
[  266.688559][ T7565]  ? aa_sock_msg_perm+0xf1/0x1d0
[  266.688591][ T7565]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  266.688614][ T7565]  ? __pfx_netlink_sendmsg+0x10/0x10
[  266.688643][ T7565]  __sock_sendmsg+0x219/0x270
[  266.688672][ T7565]  ____sys_sendmsg+0x505/0x830
[  266.688700][ T7565]  ? __pfx_____sys_sendmsg+0x10/0x10
[  266.688731][ T7565]  ? import_iovec+0x74/0xa0
[  266.688759][ T7565]  ___sys_sendmsg+0x21f/0x2a0
[  266.688781][ T7565]  ? __pfx____sys_sendmsg+0x10/0x10
[  266.688798][ T7565]  ? preempt_schedule_common+0x83/0xd0
[  266.688867][ T7565]  ? __fget_files+0x2a/0x420
[  266.688895][ T7565]  ? __fget_files+0x3a0/0x420
[  266.688935][ T7565]  __x64_sys_sendmsg+0x19b/0x260
[  266.688960][ T7565]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  266.688992][ T7565]  ? __pfx_ksys_write+0x10/0x10
[  266.689023][ T7565]  ? do_syscall_64+0xbe/0x3b0
[  266.689056][ T7565]  do_syscall_64+0xfa/0x3b0
[  266.689083][ T7565]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.689101][ T7565]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  266.689120][ T7565]  ? clear_bhb_loop+0x60/0xb0
[  266.689144][ T7565]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.689163][ T7565] RIP: 0033:0x7fd803b8ebe9
[  266.689182][ T7565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  266.689206][ T7565] RSP: 002b:00007fd801db4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  266.689230][ T7565] RAX: ffffffffffffffda RBX: 00007fd803db6180 RCX: 00007fd803b8ebe9
[  266.689245][ T7565] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000005
[  266.689258][ T7565] RBP: 00007fd801db4090 R08: 0000000000000000 R09: 0000000000000000
[  266.689271][ T7565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  266.689282][ T7565] R13: 00007fd803db6218 R14: 00007fd803db6180 R15: 00007ffed6469808
[  266.689316][ T7565]  </TASK>
[  268.113102][ T7580] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  268.171061][ T7575] syzkaller0: entered promiscuous mode
[  268.178603][ T7575] syzkaller0: entered allmulticast mode
[  268.193341][ T7559] loop0: detected capacity change from 0 to 32768
[  268.222594][ T7580] tipc: Resetting bearer <eth:syzkaller0>
[  268.245560][ T5924] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  268.260583][ T7574] tipc: Resetting bearer <eth:syzkaller0>
[  268.307895][ T7559] netlink: 40 bytes leftover after parsing attributes in process `syz.0.383'.
[  268.347362][   T24] usb 5-1: USB disconnect, device number 11
[  268.377052][ T7574] tipc: Disabling bearer <eth:syzkaller0>
[  268.449440][ T5924] usb 2-1: config 4 has an invalid interface number: 39 but max is 1
[  268.477032][ T5924] usb 2-1: config 4 has an invalid interface number: 49 but max is 1
[  268.494391][ T7435] chnl_net:caif_netlink_parms(): no params data found
[  268.507474][ T5924] usb 2-1: config 4 has no interface number 0
[  268.513692][ T5924] usb 2-1: config 4 has no interface number 1
[  268.560450][ T5924] usb 2-1: config 4 interface 39 has no altsetting 0
[  268.645341][ T5924] usb 2-1: config 4 interface 49 has no altsetting 0
[  269.689289][ T5924] usb 2-1: New USB device found, idVendor=05e3, idProduct=0503, bcdDevice=25.79
[  269.818753][ T7592] netlink: 56 bytes leftover after parsing attributes in process `syz.4.387'.
[  269.846227][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.896308][ T7588] dvmrp1: entered allmulticast mode
[  269.973670][ T5924] usb 2-1: Product: syz
[  270.016031][ T5924] usb 2-1: Manufacturer: syz
[  270.021210][ T5924] usb 2-1: SerialNumber: syz
[  273.211761][ T7435] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.265221][ T7435] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.325584][ T7435] bridge_slave_0: entered allmulticast mode
[  273.351001][ T5924] usb 2-1: USB disconnect, device number 8
[  273.887215][ T7435] bridge_slave_0: entered promiscuous mode
[  273.926884][ T7626] loop4: detected capacity change from 0 to 4096
[  273.934415][ T7626] ntfs3: Unknown parameter 'nohide_dot_files'
[  273.937927][ T7435] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.049509][ T7435] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.178442][ T7435] bridge_slave_1: entered allmulticast mode
[  274.197243][ T7435] bridge_slave_1: entered promiscuous mode
[  275.566908][ T7435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  275.665450][ T7435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  275.941084][ T7645] process 'syz.3.398' launched '/dev/fd/7' with NULL argv: empty string added
[  276.936233][ T5924] usb 4-1: new low-speed USB device number 13 using dummy_hcd
[  277.159295][ T5924] usb 4-1: config 3 has an invalid interface number: 4 but max is 0
[  277.251861][ T5924] usb 4-1: config 3 has no interface number 0
[  277.272796][ T7435] team0: Port device team_slave_0 added
[  277.304900][ T5924] usb 4-1: config 3 interface 4 has no altsetting 0
[  277.310476][ T7435] team0: Port device team_slave_1 added
[  277.351225][ T5924] usb 4-1: string descriptor 0 read error: -22
[  277.384422][ T5924] usb 4-1: New USB device found, idVendor=2019, idProduct=ab2a, bcdDevice=bb.df
[  277.438547][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.518800][ T7652] loop4: detected capacity change from 0 to 1024
[  277.561088][ T7652] EXT4-fs: Ignoring removed oldalloc option
[  277.618758][ T7435] batman_adv: batadv0: Adding interface: batadv_slave_0
[  277.632019][ T7652] EXT4-fs: Ignoring removed orlov option
[  277.641436][ T7435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  277.795975][ T7435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  277.816766][ T7652] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  277.891484][ T7435] batman_adv: batadv0: Adding interface: batadv_slave_1
[  277.910797][ T7652] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  277.935900][ T7435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  277.977141][ T7435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  278.127005][ T7661] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.400: Allocating blocks 497-513 which overlap fs metadata
[  278.176772][   T30] audit: type=1800 audit(1754528436.621:47): pid=7661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.400" name="file1" dev="loop4" ino=16 res=0 errno=0
[  278.252134][ T7661] EXT4-fs (loop4): pa ffff8880312090e8: logic 384, phys. 481, len 2
[  278.260982][ T7661] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[  278.847548][ T7435] hsr_slave_0: entered promiscuous mode
[  278.854396][ T7435] hsr_slave_1: entered promiscuous mode
[  278.876214][ T7435] debugfs: 'hsr0' already exists in 'hsr'
[  278.882092][ T7435] Cannot create hsr debugfs directory
[  278.893849][ T5947] usb 4-1: USB disconnect, device number 13
[  279.012441][ T5866] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.417283][ T7674] loop6: detected capacity change from 0 to 524287999
[  279.475553][ T6452] Buffer I/O error on dev loop6, logical block 0, async page read
[  279.504843][ T6452] Buffer I/O error on dev loop6, logical block 0, async page read
[  279.524865][ T6452] Buffer I/O error on dev loop6, logical block 0, async page read
[  279.540077][ T6452] Buffer I/O error on dev loop6, logical block 0, async page read
[  279.586596][ T6452] Buffer I/O error on dev loop6, logical block 0, async page read
[  279.620031][ T6452] Buffer I/O error on dev loop6, logical block 0, async page read
[  279.760327][ T6452] Buffer I/O error on dev loop6, logical block 0, async page read
[  280.149112][ T6452] Buffer I/O error on dev loop6, logical block 0, async page read
[  280.455529][ T7681] loop3: detected capacity change from 0 to 40427
[  280.463942][ T6452] ldm_validate_partition_table(): Disk read failed.
[  280.475422][ T6452] Buffer I/O error on dev loop6, logical block 0, async page read
[  280.486996][ T6452] Buffer I/O error on dev loop6, logical block 0, async page read
[  280.495405][ T6452] Dev loop6: unable to read RDB block 0
[  280.505691][ T6452]  loop6: unable to read partition table
[  280.577633][ T7681] F2FS-fs (loop3): invalid crc value
[  280.657680][ T7681] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  280.670058][ T7681] F2FS-fs (loop3): Start checkpoint disabled!
[  280.695067][ T7681] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  280.954912][   T30] audit: type=1800 audit(1754528439.451:48): pid=7691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.407" name="bus" dev="loop3" ino=14 res=0 errno=0
[  281.174854][ T5871] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  282.174999][ T5871] usb 2-1: Using ep0 maxpacket: 8
[  282.206881][ T5871] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  283.853995][ T7691] syz.3.407: attempt to access beyond end of device
[  283.853995][ T7691] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  283.906614][ T7435] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  283.996603][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  284.101395][ T7691] syz.3.407: attempt to access beyond end of device
[  284.101395][ T7691] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  284.131157][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  284.139702][ T7435] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  284.163749][ T5871] usb 2-1: string descriptor 0 read error: -71
[  284.170328][ T5871] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  284.186908][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.190620][ T7691] syz.3.407: attempt to access beyond end of device
[  284.190620][ T7691] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  284.220914][ T7691] syz.3.407: attempt to access beyond end of device
[  284.220914][ T7691] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  284.235791][ T7691] syz.3.407: attempt to access beyond end of device
[  284.235791][ T7691] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  284.246072][ T5871] usb 2-1: config 0 descriptor??
[  284.267307][ T5871] usb 2-1: can't set config #0, error -71
[  284.294527][ T7435] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  284.303657][ T7691] syz.3.407: attempt to access beyond end of device
[  284.303657][ T7691] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  284.319358][ T7691] syz.3.407: attempt to access beyond end of device
[  284.319358][ T7691] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  284.354802][ T7691] syz.3.407: attempt to access beyond end of device
[  284.354802][ T7691] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  284.374891][ T5871] usb 2-1: USB disconnect, device number 9
[  284.410336][ T7435] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  284.494262][ T7691] syz.3.407: attempt to access beyond end of device
[  284.494262][ T7691] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  284.603547][ T7691] syz.3.407: attempt to access beyond end of device
[  284.603547][ T7691] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  284.667536][ T7705] loop0: detected capacity change from 0 to 4096
[  284.687350][ T7720] Bluetooth: MGMT ver 1.23
[  284.700178][ T7705] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  284.709642][ T7720] Bluetooth: hci0: invalid length 0, exp 2 for type 12
[  284.724268][ T7718] loop4: detected capacity change from 0 to 1024
[  284.778509][ T7718] EXT4-fs: Ignoring removed oldalloc option
[  284.820780][ T7718] EXT4-fs: Ignoring removed orlov option
[  284.882400][ T7718] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  284.888039][ T7705] ntfs3(loop0): ino=19, mi_enum_attr
[  284.911326][ T7705] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  284.928681][ T6211] CPU: 1 UID: 0 PID: 6211 Comm: kworker/u8:10 Not tainted 6.16.0-next-20250806-syzkaller #0 PREEMPT(full) 
[  284.928713][ T6211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  284.928727][ T6211] Workqueue: writeback wb_workfn (flush-7:3)
[  284.928758][ T6211] Call Trace:
[  284.928767][ T6211]  <TASK>
[  284.928777][ T6211]  dump_stack_lvl+0x189/0x250
[  284.928828][ T6211]  ? __pfx_dump_stack_lvl+0x10/0x10
[  284.928853][ T6211]  ? __pfx_queue_work_on+0x10/0x10
[  284.928872][ T6211]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  284.928899][ T6211]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  284.928941][ T6211]  f2fs_handle_critical_error+0x37c/0x540
[  284.928981][ T6211]  f2fs_write_end_io+0x886/0xb60
[  284.929026][ T6211]  __submit_merged_bio+0x27a/0x6a0
[  284.929063][ T6211]  __submit_merged_write_cond+0x255/0x530
[  284.929102][ T6211]  f2fs_write_data_pages+0x261d/0x3000
[  284.929183][ T6211]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  284.929278][ T6211]  ? __lock_acquire+0xab9/0xd20
[  284.929339][ T6211]  ? unwind_next_frame+0xa5/0x2390
[  284.929369][ T6211]  ? unwind_next_frame+0xa5/0x2390
[  284.929388][ T6211]  ? unwind_next_frame+0x19ae/0x2390
[  284.929424][ T6211]  ? ret_from_fork_asm+0x1a/0x30
[  284.929457][ T6211]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  284.929488][ T6211]  do_writepages+0x32b/0x550
[  284.929523][ T6211]  ? reacquire_held_locks+0x127/0x1d0
[  284.929543][ T6211]  ? writeback_sb_inodes+0x384/0x1010
[  284.929581][ T6211]  __writeback_single_inode+0x145/0xff0
[  284.929607][ T6211]  ? do_raw_spin_unlock+0x122/0x240
[  284.929637][ T6211]  writeback_sb_inodes+0x6c7/0x1010
[  284.929697][ T6211]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  284.929784][ T6211]  ? rcu_is_watching+0x15/0xb0
[  284.929828][ T6211]  wb_writeback+0x43b/0xaf0
[  284.929866][ T6211]  ? queue_io+0x3b1/0x590
[  284.929895][ T6211]  ? __pfx_wb_writeback+0x10/0x10
[  284.929934][ T6211]  ? _raw_spin_unlock_irq+0x23/0x50
[  284.929967][ T6211]  wb_workfn+0x409/0xef0
[  284.930012][ T6211]  ? __pfx_wb_workfn+0x10/0x10
[  284.930042][ T6211]  ? __lock_acquire+0xab9/0xd20
[  284.930087][ T6211]  ? process_scheduled_works+0x9ef/0x17b0
[  284.930117][ T6211]  ? _raw_spin_unlock_irq+0x23/0x50
[  284.930139][ T6211]  ? process_scheduled_works+0x9ef/0x17b0
[  284.930158][ T6211]  ? process_scheduled_works+0x9ef/0x17b0
[  284.930184][ T6211]  process_scheduled_works+0xade/0x17b0
[  284.930249][ T6211]  ? __pfx_process_scheduled_works+0x10/0x10
[  284.930297][ T6211]  worker_thread+0x8a0/0xda0
[  284.930323][ T6211]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  284.930358][ T6211]  ? __kthread_parkme+0x7b/0x200
[  284.930394][ T6211]  kthread+0x70e/0x8a0
[  284.930423][ T6211]  ? __pfx_worker_thread+0x10/0x10
[  284.930443][ T6211]  ? __pfx_kthread+0x10/0x10
[  284.930471][ T6211]  ? _raw_spin_unlock_irq+0x23/0x50
[  284.930495][ T6211]  ? lockdep_hardirqs_on+0x9c/0x150
[  284.930518][ T6211]  ? __pfx_kthread+0x10/0x10
[  284.930544][ T6211]  ret_from_fork+0x3f9/0x770
[  284.930570][ T6211]  ? __pfx_ret_from_fork+0x10/0x10
[  284.930600][ T6211]  ? __switch_to_asm+0x39/0x70
[  284.930622][ T6211]  ? __switch_to_asm+0x33/0x70
[  284.930644][ T6211]  ? __pfx_kthread+0x10/0x10
[  284.930670][ T6211]  ret_from_fork_asm+0x1a/0x30
[  284.930720][ T6211]  </TASK>
[  284.953378][ T7435] 8021q: adding VLAN 0 to HW filter on device bond0
[  284.986135][ T6211] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  285.081458][ T7718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  285.105602][ T6211] CPU: 1 UID: 0 PID: 6211 Comm: kworker/u8:10 Not tainted 6.16.0-next-20250806-syzkaller #0 PREEMPT(full) 
[  285.105632][ T6211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  285.105641][ T6211] Workqueue: writeback wb_workfn (flush-7:3)
[  285.105662][ T6211] Call Trace:
[  285.105668][ T6211]  <TASK>
[  285.105673][ T6211]  dump_stack_lvl+0x189/0x250
[  285.105703][ T6211]  ? __pfx_dump_stack_lvl+0x10/0x10
[  285.105726][ T6211]  ? __pfx_queue_work_on+0x10/0x10
[  285.105743][ T6211]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  285.105767][ T6211]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  285.105814][ T6211]  f2fs_handle_critical_error+0x37c/0x540
[  285.105849][ T6211]  f2fs_write_end_io+0x886/0xb60
[  285.105891][ T6211]  __submit_merged_bio+0x27a/0x6a0
[  285.105926][ T6211]  __submit_merged_write_cond+0x255/0x530
[  285.105961][ T6211]  f2fs_write_data_pages+0x261d/0x3000
[  285.106033][ T6211]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  285.106120][ T6211]  ? __lock_acquire+0xab9/0xd20
[  285.106174][ T6211]  ? unwind_next_frame+0xa5/0x2390
[  285.106201][ T6211]  ? unwind_next_frame+0xa5/0x2390
[  285.106218][ T6211]  ? unwind_next_frame+0x19ae/0x2390
[  285.106250][ T6211]  ? ret_from_fork_asm+0x1a/0x30
[  285.106284][ T6211]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  285.106313][ T6211]  do_writepages+0x32b/0x550
[  285.106345][ T6211]  ? reacquire_held_locks+0x127/0x1d0
[  285.106363][ T6211]  ? writeback_sb_inodes+0x384/0x1010
[  285.106398][ T6211]  __writeback_single_inode+0x145/0xff0
[  285.106423][ T6211]  ? do_raw_spin_unlock+0x122/0x240
[  285.106451][ T6211]  writeback_sb_inodes+0x6c7/0x1010
[  285.106510][ T6211]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  285.106588][ T6211]  ? rcu_is_watching+0x15/0xb0
[  285.106619][ T6211]  wb_writeback+0x43b/0xaf0
[  285.106654][ T6211]  ? queue_io+0x3b1/0x590
[  285.106681][ T6211]  ? __pfx_wb_writeback+0x10/0x10
[  285.106715][ T6211]  ? _raw_spin_unlock_irq+0x23/0x50
[  285.106747][ T6211]  wb_workfn+0x409/0xef0
[  285.106790][ T6211]  ? __pfx_wb_workfn+0x10/0x10
[  285.106828][ T6211]  ? __lock_acquire+0xab9/0xd20
[  285.106873][ T6211]  ? process_scheduled_works+0x9ef/0x17b0
[  285.106901][ T6211]  ? _raw_spin_unlock_irq+0x23/0x50
[  285.106921][ T6211]  ? process_scheduled_works+0x9ef/0x17b0
[  285.106938][ T6211]  ? process_scheduled_works+0x9ef/0x17b0
[  285.106959][ T6211]  process_scheduled_works+0xade/0x17b0
[  285.107016][ T6211]  ? __pfx_process_scheduled_works+0x10/0x10
[  285.107058][ T6211]  worker_thread+0x8a0/0xda0
[  285.107081][ T6211]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  285.107116][ T6211]  ? __kthread_parkme+0x7b/0x200
[  285.107150][ T6211]  kthread+0x70e/0x8a0
[  285.107177][ T6211]  ? __pfx_worker_thread+0x10/0x10
[  285.107196][ T6211]  ? __pfx_kthread+0x10/0x10
[  285.107222][ T6211]  ? _raw_spin_unlock_irq+0x23/0x50
[  285.107243][ T6211]  ? lockdep_hardirqs_on+0x9c/0x150
[  285.107265][ T6211]  ? __pfx_kthread+0x10/0x10
[  285.107289][ T6211]  ret_from_fork+0x3f9/0x770
[  285.107313][ T6211]  ? __pfx_ret_from_fork+0x10/0x10
[  285.107341][ T6211]  ? __switch_to_asm+0x39/0x70
[  285.107362][ T6211]  ? __switch_to_asm+0x33/0x70
[  285.107383][ T6211]  ? __pfx_kthread+0x10/0x10
[  285.107407][ T6211]  ret_from_fork_asm+0x1a/0x30
[  285.107453][ T6211]  </TASK>
[  285.107461][ T6211] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  285.151141][ T7705] ntfs3(loop0): failed to convert "c46c" to macturkish
[  285.308259][ T7435] 8021q: adding VLAN 0 to HW filter on device team0
[  285.402075][ T7705] ntfs3(loop0): ino=20, mi_enum_attr
[  285.526471][ T6016] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.636903][ T6016] bridge0: port 1(bridge_slave_0) entered forwarding state
[  285.740121][ T6016] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.747372][ T6016] bridge0: port 2(bridge_slave_1) entered forwarding state
[  286.011103][   T30] audit: type=1800 audit(1754528444.512:49): pid=7734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.415" name="file1" dev="loop4" ino=16 res=0 errno=0
[  286.055438][ T7734] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.415: Allocating blocks 433-513 which overlap fs metadata
[  286.691980][ T7716] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 161:freeing already freed block (bit 10); block bitmap corrupt.
[  286.853286][ T5866] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.256321][ T7744] loop0: detected capacity change from 0 to 4096
[  287.305211][ T7744] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  287.481993][ T7744] ntfs3(loop0): ino=19, mi_enum_attr
[  287.508213][ T7435] 8021q: adding VLAN 0 to HW filter on device batadv0
[  287.515698][ T7744] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  288.602898][ T7759] loop3: detected capacity change from 0 to 512
[  289.276032][ T7772] ip6gre2: entered allmulticast mode
[  289.938162][ T7771] loop3: detected capacity change from 0 to 256
[  290.330230][ T7778] loop0: detected capacity change from 0 to 1024
[  290.388578][ T7778] EXT4-fs: Ignoring removed oldalloc option
[  290.426664][ T7778] EXT4-fs: Ignoring removed orlov option
[  290.460964][ T7778] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  290.610967][ T7778] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  291.113317][ T7435] veth0_vlan: entered promiscuous mode
[  291.122584][   T30] audit: type=1800 audit(1754528449.623:50): pid=7795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.427" name="file1" dev="loop0" ino=16 res=0 errno=0
[  291.152913][ T7795] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.427: Allocating blocks 449-513 which overlap fs metadata
[  291.401002][ T7777] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 15: block 417:freeing already freed block (bit 26); block bitmap corrupt.
[  291.424578][ T7435] veth1_vlan: entered promiscuous mode
[  291.537397][ T7435] veth0_macvtap: entered promiscuous mode
[  291.641824][ T5861] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.654599][ T7435] veth1_macvtap: entered promiscuous mode
[  291.693402][ T5947] usb 5-1: new low-speed USB device number 12 using dummy_hcd
[  291.772430][ T7435] batman_adv: batadv0: Interface activated: batadv_slave_0
[  291.801092][ T7435] batman_adv: batadv0: Interface activated: batadv_slave_1
[  291.823106][ T5947] usb 5-1: device descriptor read/64, error -71
[  291.828278][ T1163] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  291.901930][ T1163] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  291.984139][ T7807] FAULT_INJECTION: forcing a failure.
[  291.984139][ T7807] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  291.998400][ T1163] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  292.040876][ T1163] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  292.077155][ T7807] CPU: 1 UID: 0 PID: 7807 Comm: syz.0.431 Not tainted 6.16.0-next-20250806-syzkaller #0 PREEMPT(full) 
[  292.077177][ T7807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  292.077185][ T7807] Call Trace:
[  292.077190][ T7807]  <TASK>
[  292.077196][ T7807]  dump_stack_lvl+0x189/0x250
[  292.077216][ T7807]  ? __pfx____ratelimit+0x10/0x10
[  292.077234][ T7807]  ? __pfx_dump_stack_lvl+0x10/0x10
[  292.077247][ T7807]  ? __pfx__printk+0x10/0x10
[  292.077264][ T7807]  ? __might_fault+0xb0/0x130
[  292.077288][ T7807]  should_fail_ex+0x414/0x560
[  292.077307][ T7807]  _copy_from_user+0x2d/0xb0
[  292.077321][ T7807]  snd_seq_oss_write+0x515/0x930
[  292.077347][ T7807]  ? __pfx_snd_seq_oss_write+0x10/0x10
[  292.077367][ T7807]  ? security_file_permission+0x75/0x290
[  292.077385][ T7807]  odev_write+0x5a/0x80
[  292.077397][ T7807]  ? __pfx_odev_write+0x10/0x10
[  292.077409][ T7807]  vfs_write+0x27b/0xb30
[  292.077430][ T7807]  ? __pfx_vfs_write+0x10/0x10
[  292.077446][ T7807]  ? __fget_files+0x2a/0x420
[  292.077465][ T7807]  ? __fget_files+0x2a/0x420
[  292.077481][ T7807]  ? __fget_files+0x3a0/0x420
[  292.077497][ T7807]  ? __fget_files+0x2a/0x420
[  292.077519][ T7807]  ksys_write+0x145/0x250
[  292.077551][ T7807]  ? __pfx_ksys_write+0x10/0x10
[  292.077564][ T7807]  ? rcu_is_watching+0x15/0xb0
[  292.077580][ T7807]  ? do_syscall_64+0xbe/0x3b0
[  292.077599][ T7807]  do_syscall_64+0xfa/0x3b0
[  292.077614][ T7807]  ? lockdep_hardirqs_on+0x9c/0x150
[  292.077630][ T7807]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.077642][ T7807]  ? clear_bhb_loop+0x60/0xb0
[  292.077656][ T7807]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.077667][ T7807] RIP: 0033:0x7fdf8e58ebe9
[  292.077680][ T7807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  292.077694][ T7807] RSP: 002b:00007fdf8f347038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  292.077709][ T7807] RAX: ffffffffffffffda RBX: 00007fdf8e7b6090 RCX: 00007fdf8e58ebe9
[  292.077718][ T7807] RDX: 0000000000000230 RSI: 0000200000000580 RDI: 0000000000000003
[  292.077726][ T7807] RBP: 00007fdf8f347090 R08: 0000000000000000 R09: 0000000000000000
[  292.077733][ T7807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  292.077740][ T7807] R13: 00007fdf8e7b6128 R14: 00007fdf8e7b6090 R15: 00007fff9e9913f8
[  292.077772][ T7807]  </TASK>
[  292.343267][ T5947] usb 5-1: new low-speed USB device number 13 using dummy_hcd
[  292.713362][ T5947] usb 5-1: device descriptor read/64, error -71
[  292.835319][ T5947] usb usb5-port1: attempt power cycle
[  293.253167][ T5947] usb 5-1: new low-speed USB device number 14 using dummy_hcd
[  293.310852][ T6016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  293.320762][ T5947] usb 5-1: device descriptor read/8, error -71
[  293.337547][ T7806] loop1: detected capacity change from 0 to 32768
[  293.353305][ T6016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  293.393487][ T7806] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.432 (7806)
[  293.468303][ T7806] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  293.513656][ T7806] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  293.523774][ T7806] BTRFS info (device loop1): disk space caching is enabled
[  293.531021][ T7806] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  293.553739][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  293.564517][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  293.794939][ T5947] usb 5-1: new low-speed USB device number 15 using dummy_hcd
[  293.824335][ T5947] usb 5-1: device descriptor read/8, error -71
[  293.872952][ T7818] ip6gre3: entered allmulticast mode
[  293.895656][ T7806] BTRFS info (device loop1): rebuilding free space tree
[  293.954279][ T5947] usb usb5-port1: unable to enumerate USB device
[  293.984920][ T7806] BTRFS info (device loop1): disabling free space tree
[  294.005381][ T7806] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  294.061163][ T7806] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  294.225135][ T7835] FAULT_INJECTION: forcing a failure.
[  294.225135][ T7835] name failslab, interval 1, probability 0, space 0, times 0
[  294.238188][ T7835] CPU: 0 UID: 0 PID: 7835 Comm: syz.3.435 Not tainted 6.16.0-next-20250806-syzkaller #0 PREEMPT(full) 
[  294.238219][ T7835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  294.238231][ T7835] Call Trace:
[  294.238240][ T7835]  <TASK>
[  294.238248][ T7835]  dump_stack_lvl+0x189/0x250
[  294.238281][ T7835]  ? __pfx____ratelimit+0x10/0x10
[  294.238308][ T7835]  ? __pfx_dump_stack_lvl+0x10/0x10
[  294.238332][ T7835]  ? __pfx__printk+0x10/0x10
[  294.238364][ T7835]  ? __pfx___might_resched+0x10/0x10
[  294.238383][ T7835]  ? fs_reclaim_acquire+0x7d/0x100
[  294.238419][ T7835]  should_fail_ex+0x414/0x560
[  294.238452][ T7835]  should_failslab+0xa8/0x100
[  294.238482][ T7835]  __kmalloc_noprof+0xcb/0x4f0
[  294.238508][ T7835]  ? tomoyo_encode+0x28b/0x550
[  294.238534][ T7835]  tomoyo_encode+0x28b/0x550
[  294.238561][ T7835]  tomoyo_realpath_from_path+0x58d/0x5d0
[  294.238595][ T7835]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  294.238622][ T7835]  tomoyo_path_number_perm+0x1e8/0x5a0
[  294.238652][ T7835]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  294.238708][ T7835]  ? __lock_acquire+0xab9/0xd20
[  294.238760][ T7835]  ? __fget_files+0x2a/0x420
[  294.238799][ T7835]  ? __fget_files+0x2a/0x420
[  294.238826][ T7835]  ? __fget_files+0x3a0/0x420
[  294.238853][ T7835]  ? __fget_files+0x2a/0x420
[  294.238887][ T7835]  security_file_ioctl+0xcb/0x2d0
[  294.238916][ T7835]  __se_sys_ioctl+0x47/0x170
[  294.238944][ T7835]  do_syscall_64+0xfa/0x3b0
[  294.238973][ T7835]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.238992][ T7835]  ? asm_sysvec_call_function_single+0x1a/0x20
[  294.239012][ T7835]  ? clear_bhb_loop+0x60/0xb0
[  294.239037][ T7835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.239056][ T7835] RIP: 0033:0x7f50bed8ebe9
[  294.239075][ T7835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  294.239092][ T7835] RSP: 002b:00007f50bfc0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  294.239115][ T7835] RAX: ffffffffffffffda RBX: 00007f50befb6090 RCX: 00007f50bed8ebe9
[  294.239130][ T7835] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000007
[  294.239143][ T7835] RBP: 00007f50bfc0a090 R08: 0000000000000000 R09: 0000000000000000
[  294.239161][ T7835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  294.239173][ T7835] R13: 00007f50befb6128 R14: 00007f50befb6090 R15: 00007ffd3d2900f8
[  294.239207][ T7835]  </TASK>
[  294.545038][ T7835] ERROR: Out of memory at tomoyo_realpath_from_path.
[  295.197784][ T7842] binder: 7837:7842 ioctl c0306201 0 returned -14
[  295.284654][ T5860] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  295.326614][ T7843] FAULT_INJECTION: forcing a failure.
[  295.326614][ T7843] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  295.340112][ T7843] CPU: 0 UID: 0 PID: 7843 Comm: syz.0.436 Not tainted 6.16.0-next-20250806-syzkaller #0 PREEMPT(full) 
[  295.340141][ T7843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  295.340153][ T7843] Call Trace:
[  295.340161][ T7843]  <TASK>
[  295.340168][ T7843]  dump_stack_lvl+0x189/0x250
[  295.340197][ T7843]  ? irqentry_exit+0x74/0x90
[  295.340224][ T7843]  ? __pfx_dump_stack_lvl+0x10/0x10
[  295.340269][ T7843]  should_fail_ex+0x414/0x560
[  295.340301][ T7843]  _copy_from_iter+0x1db/0x16f0
[  295.340330][ T7843]  ? __pfx__copy_from_iter+0x10/0x10
[  295.340350][ T7843]  ? preempt_schedule_thunk+0x16/0x30
[  295.340383][ T7843]  ? rcu_is_watching+0x15/0xb0
[  295.340404][ T7843]  ? trace_kmalloc+0x1f/0xd0
[  295.340425][ T7843]  ? __kmalloc_noprof+0x29b/0x4f0
[  295.340448][ T7843]  ? qrtr_tun_write_iter+0xbf/0x180
[  295.340477][ T7843]  qrtr_tun_write_iter+0xdf/0x180
[  295.340503][ T7843]  vfs_write+0x5c9/0xb30
[  295.340534][ T7843]  ? __pfx_qrtr_tun_write_iter+0x10/0x10
[  295.340559][ T7843]  ? __pfx_vfs_write+0x10/0x10
[  295.340595][ T7843]  ? __fget_files+0x2a/0x420
[  295.340633][ T7843]  ksys_write+0x145/0x250
[  295.340669][ T7843]  ? __pfx_ksys_write+0x10/0x10
[  295.340708][ T7843]  do_syscall_64+0xfa/0x3b0
[  295.340736][ T7843]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.340755][ T7843]  ? asm_sysvec_call_function_single+0x1a/0x20
[  295.340775][ T7843]  ? clear_bhb_loop+0x60/0xb0
[  295.340799][ T7843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.340818][ T7843] RIP: 0033:0x7fdf8e58ebe9
[  295.340836][ T7843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  295.340855][ T7843] RSP: 002b:00007fdf8f347038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  295.340878][ T7843] RAX: ffffffffffffffda RBX: 00007fdf8e7b6090 RCX: 00007fdf8e58ebe9
[  295.340892][ T7843] RDX: 00000000000000c8 RSI: 0000000000000000 RDI: 0000000000000004
[  295.340903][ T7843] RBP: 00007fdf8f347090 R08: 0000000000000000 R09: 0000000000000000
[  295.340915][ T7843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  295.340926][ T7843] R13: 00007fdf8e7b6128 R14: 00007fdf8e7b6090 R15: 00007fff9e9913f8
[  295.340959][ T7843]  </TASK>
[  296.356896][ T7856] loop0: detected capacity change from 0 to 1024
[  296.413697][ T7856] EXT4-fs: Ignoring removed oldalloc option
[  296.432599][ T7856] EXT4-fs: Ignoring removed orlov option
[  296.486204][ T7856] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  296.664667][ T7856] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  297.203675][ T5949] IPVS: starting estimator thread 0...
[  297.512477][ T7873] IPVS: using max 22 ests per chain, 52800 per kthread
[  297.637620][ T7874] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.440: Allocating blocks 497-513 which overlap fs metadata
[  297.651937][   T30] audit: type=1800 audit(1754528456.114:51): pid=7874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.440" name="file1" dev="loop0" ino=16 res=0 errno=0
[  297.785475][ T7874] EXT4-fs (loop0): pa ffff888057516658: logic 384, phys. 481, len 2
[  297.793778][ T7874] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[  299.257220][ T5861] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  299.708893][ T7897] loop0: detected capacity change from 0 to 1024
[  299.740696][ T7897] EXT4-fs: Ignoring removed oldalloc option
[  299.762318][ T7897] EXT4-fs: Ignoring removed orlov option
[  299.817837][ T7897] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  300.066773][ T7899] FAULT_INJECTION: forcing a failure.
[  300.066773][ T7899] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  300.080396][ T7899] CPU: 1 UID: 0 PID: 7899 Comm: syz.4.446 Not tainted 6.16.0-next-20250806-syzkaller #0 PREEMPT(full) 
[  300.080426][ T7899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  300.080438][ T7899] Call Trace:
[  300.080447][ T7899]  <TASK>
[  300.080456][ T7899]  dump_stack_lvl+0x189/0x250
[  300.080486][ T7899]  ? __pfx____ratelimit+0x10/0x10
[  300.080515][ T7899]  ? __pfx_dump_stack_lvl+0x10/0x10
[  300.080540][ T7899]  ? __pfx__printk+0x10/0x10
[  300.080568][ T7899]  ? __might_fault+0xb0/0x130
[  300.080609][ T7899]  should_fail_ex+0x414/0x560
[  300.080642][ T7899]  _copy_from_user+0x2d/0xb0
[  300.080666][ T7899]  do_ip_getsockopt+0x25f/0x1b60
[  300.080705][ T7899]  ? __pfx_do_ip_getsockopt+0x10/0x10
[  300.080731][ T7899]  ? __local_bh_enable_ip+0x30/0x1c0
[  300.080758][ T7899]  ? ima_match_policy+0x10b/0x2150
[  300.080783][ T7899]  ? look_up_lock_class+0x74/0x170
[  300.080813][ T7899]  ? register_lock_class+0x51/0x320
[  300.080851][ T7899]  ? __lock_acquire+0xab9/0xd20
[  300.080911][ T7899]  ? __lock_acquire+0xab9/0xd20
[  300.080951][ T7899]  ip_getsockopt+0xbb/0x220
[  300.080977][ T7899]  ? __local_bh_enable_ip+0x30/0x1c0
[  300.081002][ T7899]  ? __local_bh_enable_ip+0x30/0x1c0
[  300.081022][ T7899]  ? __pfx_ip_getsockopt+0x10/0x10
[  300.081061][ T7899]  mptcp_getsockopt+0x1406/0x1be0
[  300.081088][ T7899]  ? __pfx_process_measurement+0x10/0x10
[  300.081110][ T7899]  ? tomoyo_check_open_permission+0x16a/0x3b0
[  300.081137][ T7899]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  300.081166][ T7899]  ? __pfx_mptcp_getsockopt+0x10/0x10
[  300.081198][ T7899]  ? __lock_acquire+0xab9/0xd20
[  300.081234][ T7899]  ? __lock_acquire+0xab9/0xd20
[  300.081277][ T7899]  ? __lock_acquire+0xab9/0xd20
[  300.081325][ T7899]  ? __lock_acquire+0xab9/0xd20
[  300.081371][ T7899]  ? __lock_acquire+0xab9/0xd20
[  300.081412][ T7899]  ? __might_fault+0xb0/0x130
[  300.081442][ T7899]  ? _parse_integer_limit+0x1ae/0x1f0
[  300.081473][ T7899]  ? aa_label_sk_perm+0x4cd/0x630
[  300.081507][ T7899]  ? __lock_acquire+0xab9/0xd20
[  300.081538][ T7899]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  300.081600][ T7899]  ? __lock_acquire+0xab9/0xd20
[  300.081640][ T7899]  ? __might_fault+0xb0/0x130
[  300.081686][ T7899]  ? sock_common_getsockopt+0x2d/0xb0
[  300.081712][ T7899]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  300.081741][ T7899]  do_sock_getsockopt+0x372/0x450
[  300.081765][ T7899]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  300.081784][ T7899]  ? do_syscall_64+0x60/0x3b0
[  300.081811][ T7899]  ? __fget_files+0x3a0/0x420
[  300.081840][ T7899]  ? __fget_files+0x2a/0x420
[  300.081887][ T7899]  __x64_sys_getsockopt+0x1a5/0x250
[  300.081906][ T7899]  ? do_syscall_64+0x60/0x3b0
[  300.081936][ T7899]  ? do_syscall_64+0x60/0x3b0
[  300.081973][ T7899]  do_syscall_64+0xfa/0x3b0
[  300.081997][ T7899]  ? lockdep_hardirqs_on+0x9c/0x150
[  300.082023][ T7899]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.082044][ T7899]  ? clear_bhb_loop+0x60/0xb0
[  300.082069][ T7899]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.082088][ T7899] RIP: 0033:0x7fd37b78ebe9
[  300.082107][ T7899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  300.082125][ T7899] RSP: 002b:00007fd3799b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  300.082150][ T7899] RAX: ffffffffffffffda RBX: 00007fd37b9b6180 RCX: 00007fd37b78ebe9
[  300.082165][ T7899] RDX: 0000000000000019 RSI: 0000000000000000 RDI: 0000000000000003
[  300.082178][ T7899] RBP: 00007fd3799b4090 R08: 0000200000002140 R09: 0000000000000000
[  300.082191][ T7899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  300.082203][ T7899] R13: 00007fd37b9b6218 R14: 00007fd37b9b6180 R15: 00007ffdb627d168
[  300.082237][ T7899]  </TASK>
[  300.633975][ T7897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  301.105714][ T7897] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.448: Allocating blocks 433-513 which overlap fs metadata
[  301.120156][   T30] audit: type=1800 audit(1754528459.614:52): pid=7897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.448" name="file1" dev="loop0" ino=16 res=0 errno=0
[  301.144169][ T7896] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 15: block 161:freeing already freed block (bit 10); block bitmap corrupt.
[  301.272184][ T5924] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  301.366588][ T5861] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.520401][ T5924] usb 5-1: unable to get BOS descriptor or descriptor too short
[  301.529670][ T5924] usb 5-1: not running at top speed; connect to a high speed hub
[  301.561490][ T5924] usb 5-1: config 56 has an invalid interface number: 129 but max is 0
[  301.581846][ T5924] usb 5-1: config 56 has no interface number 0
[  301.607008][ T5924] usb 5-1: config 56 interface 129 altsetting 224 endpoint 0x86 has invalid maxpacket 512, setting to 64
[  301.641864][ T5924] usb 5-1: config 56 interface 129 has no altsetting 0
[  301.670863][ T5924] usb 5-1: New USB device found, idVendor=1410, idProduct=9011, bcdDevice=e5.d2
[  301.685775][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.732022][ T5924] usb 5-1: Product: syz
[  301.746547][ T5924] usb 5-1: Manufacturer: syz
[  301.751281][ T5924] usb 5-1: SerialNumber: syz
[  301.816293][ T7908] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  302.824347][ T7918] loop4: detected capacity change from 0 to 1024
[  302.868573][ T7905] loop5: detected capacity change from 0 to 32768
[  302.910362][ T7905] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.449 (7905)
[  302.979345][ T7905] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  303.018890][ T7905] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  303.065325][ T7905] BTRFS info (device loop5): disk space caching is enabled
[  303.111752][ T7905] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  303.431292][ T7940] FAULT_INJECTION: forcing a failure.
[  303.431292][ T7940] name failslab, interval 1, probability 0, space 0, times 0
[  303.474992][ T7940] CPU: 0 UID: 0 PID: 7940 Comm: syz.1.454 Not tainted 6.16.0-next-20250806-syzkaller #0 PREEMPT(full) 
[  303.475022][ T7940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  303.475034][ T7940] Call Trace:
[  303.475042][ T7940]  <TASK>
[  303.475051][ T7940]  dump_stack_lvl+0x189/0x250
[  303.475081][ T7940]  ? __pfx____ratelimit+0x10/0x10
[  303.475109][ T7940]  ? __pfx_dump_stack_lvl+0x10/0x10
[  303.475133][ T7940]  ? __pfx__printk+0x10/0x10
[  303.475167][ T7940]  ? __pfx___might_resched+0x10/0x10
[  303.475192][ T7940]  should_fail_ex+0x414/0x560
[  303.475225][ T7940]  should_failslab+0xa8/0x100
[  303.475256][ T7940]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  303.475284][ T7940]  ? __alloc_skb+0x112/0x2d0
[  303.475316][ T7940]  __alloc_skb+0x112/0x2d0
[  303.475350][ T7940]  netlink_sendmsg+0x5c6/0xb30
[  303.475392][ T7940]  ? __pfx_netlink_sendmsg+0x10/0x10
[  303.475424][ T7940]  ? aa_sock_msg_perm+0xf1/0x1d0
[  303.475461][ T7940]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  303.475483][ T7940]  ? __pfx_netlink_sendmsg+0x10/0x10
[  303.475512][ T7940]  __sock_sendmsg+0x219/0x270
[  303.475543][ T7940]  ____sys_sendmsg+0x505/0x830
[  303.475569][ T7940]  ? __pfx_____sys_sendmsg+0x10/0x10
[  303.475599][ T7940]  ? import_iovec+0x74/0xa0
[  303.475626][ T7940]  ___sys_sendmsg+0x21f/0x2a0
[  303.475649][ T7940]  ? __pfx____sys_sendmsg+0x10/0x10
[  303.475713][ T7940]  ? __fget_files+0x2a/0x420
[  303.475741][ T7940]  ? __fget_files+0x3a0/0x420
[  303.475782][ T7940]  __x64_sys_sendmsg+0x19b/0x260
[  303.475806][ T7940]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  303.475848][ T7940]  ? __pfx_ksys_write+0x10/0x10
[  303.475872][ T7940]  ? rcu_is_watching+0x15/0xb0
[  303.475898][ T7940]  ? do_syscall_64+0xbe/0x3b0
[  303.475931][ T7940]  do_syscall_64+0xfa/0x3b0
[  303.475957][ T7940]  ? lockdep_hardirqs_on+0x9c/0x150
[  303.475984][ T7940]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.476004][ T7940]  ? clear_bhb_loop+0x60/0xb0
[  303.476029][ T7940]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.476047][ T7940] RIP: 0033:0x7fd803b8ebe9
[  303.476065][ T7940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  303.476082][ T7940] RSP: 002b:00007fd801df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  303.476106][ T7940] RAX: ffffffffffffffda RBX: 00007fd803db5fa0 RCX: 00007fd803b8ebe9
[  303.476120][ T7940] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  303.476134][ T7940] RBP: 00007fd801df6090 R08: 0000000000000000 R09: 0000000000000000
[  303.476146][ T7940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  303.476157][ T7940] R13: 00007fd803db6038 R14: 00007fd803db5fa0 R15: 00007ffed6469808
[  303.476189][ T7940]  </TASK>
[  303.842666][ T7905] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  303.843207][ T7905] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  304.758997][ T5924] option 5-1:56.129: GSM modem (1-port) converter detected
[  304.833893][ T7905] BTRFS error (device loop5): open_ctree failed: -12
[  304.880692][ T7951] loop0: detected capacity change from 0 to 1024
[  304.937928][ T7951] ext4: Unknown parameter 'nouser_xattr'
[  304.938250][ T5924] usb 5-1: USB disconnect, device number 16
[  305.022978][ T5924] option 5-1:56.129: device disconnected
[  305.335424][ T7956] loop4: detected capacity change from 0 to 32768
[  305.357031][ T7956] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.456 (7956)
[  305.426343][ T7956] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  305.436941][ T7956] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  305.602184][ T7974] loop3: detected capacity change from 0 to 1024
[  305.625006][ T7974] EXT4-fs: Ignoring removed oldalloc option
[  305.671723][ T7956] BTRFS info (device loop4): rebuilding free space tree
[  305.728921][ T7956] BTRFS info (device loop4): disabling free space tree
[  305.736115][ T7956] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  305.745991][ T7956] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  305.773493][ T7974] EXT4-fs: Ignoring removed orlov option
[  305.848375][ T7974] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  306.219453][ T7974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  307.244584][   T30] audit: type=1800 audit(1754528465.755:53): pid=7994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.458" name="file1" dev="loop3" ino=16 res=0 errno=0
[  307.270461][ T7994] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.458: Allocating blocks 449-513 which overlap fs metadata
[  307.504266][ T7968] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 417:freeing already freed block (bit 26); block bitmap corrupt.
[  307.640808][ T5865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.728545][ T5866] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  310.891982][ T8033] loop0: detected capacity change from 0 to 1024
[  310.899578][ T8033] ext4: Unknown parameter 'nouser_xattr'
[  310.978053][ T8037] loop1: detected capacity change from 0 to 1024
[  311.003087][ T8037] EXT4-fs: Ignoring removed oldalloc option
[  311.009180][ T8037] EXT4-fs: Ignoring removed orlov option
[  311.048007][ T8037] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  311.096487][ T8037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  311.220879][ T1573] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  311.415550][ T1573] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  311.526874][ T1573] usb 6-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00
[  311.596279][ T1573] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.282961][ T1573] usb 6-1: config 0 descriptor??
[  312.307201][ T1573] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  312.511092][ T8052] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.471: Allocating blocks 433-513 which overlap fs metadata
[  312.576727][   T30] audit: type=1800 audit(1754528471.005:54): pid=8052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.471" name="file1" dev="loop1" ino=16 res=0 errno=0
[  312.947437][ T8034] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 161:freeing already freed block (bit 10); block bitmap corrupt.
[  313.127477][ T5860] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.468517][ T8031] loop3: detected capacity change from 0 to 32768
[  313.521649][ T8031] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.469 (8031)
[  313.586793][ T8031] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  313.638274][ T8031] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  313.694210][ T8031] BTRFS info (device loop3): disk space caching is enabled
[  313.743132][ T8031] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  313.830817][ T8031] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  313.831240][ T8031] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  313.906465][ T8031] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  313.910559][ T5947] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  313.963438][ T8031] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  313.963964][ T8031] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  313.973671][ T8031] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  313.984139][ T8031] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  313.995226][ T8031] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  314.005736][ T8031] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  314.045756][ T8031] BTRFS error (device loop3): open_ctree failed: -12
[  314.117101][   T24] usb 6-1: USB disconnect, device number 2
[  314.153907][ T5947] usb 2-1: unable to get BOS descriptor or descriptor too short
[  314.205832][ T5947] usb 2-1: not running at top speed; connect to a high speed hub
[  314.252895][ T5947] usb 2-1: config 56 has an invalid interface number: 129 but max is 0
[  314.290797][ T5947] usb 2-1: config 56 has no interface number 0
[  314.297117][ T5947] usb 2-1: config 56 interface 129 altsetting 224 endpoint 0x86 has invalid maxpacket 512, setting to 64
[  314.340329][ T5947] usb 2-1: config 56 interface 129 has no altsetting 0
[  314.375167][ T5947] usb 2-1: New USB device found, idVendor=1410, idProduct=9011, bcdDevice=e5.d2
[  314.395647][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.430074][ T5947] usb 2-1: Product: syz
[  314.436833][ T8086] loop4: detected capacity change from 0 to 4096
[  314.459228][ T5947] usb 2-1: Manufacturer: syz
[  314.474211][ T8086] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  314.492791][ T5947] usb 2-1: SerialNumber: syz
[  314.525666][ T8065] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  315.426207][ T8095] loop1: detected capacity change from 0 to 1024
[  315.468703][ T8086] ntfs3(loop4): ino=19, mi_enum_attr
[  315.506373][ T8086] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  316.173275][ T8103] loop3: detected capacity change from 0 to 512
[  316.212142][ T8103] ext4: Unknown parameter 'subj_type'
[  317.275308][ T5947] option 2-1:56.129: GSM modem (1-port) converter detected
[  317.302346][ T5947] usb 2-1: USB disconnect, device number 10
[  317.315217][ T5947] option 2-1:56.129: device disconnected
[  317.344259][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  317.350811][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  317.536254][ T8114] FAULT_INJECTION: forcing a failure.
[  317.536254][ T8114] name failslab, interval 1, probability 0, space 0, times 0
[  317.551949][ T8114] CPU: 0 UID: 0 PID: 8114 Comm: syz.0.483 Not tainted 6.16.0-next-20250806-syzkaller #0 PREEMPT(full) 
[  317.551979][ T8114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  317.551989][ T8114] Call Trace:
[  317.551996][ T8114]  <TASK>
[  317.552002][ T8114]  dump_stack_lvl+0x189/0x250
[  317.552029][ T8114]  ? __pfx____ratelimit+0x10/0x10
[  317.552052][ T8114]  ? __pfx_dump_stack_lvl+0x10/0x10
[  317.552070][ T8114]  ? __pfx__printk+0x10/0x10
[  317.552098][ T8114]  ? __pfx___might_resched+0x10/0x10
[  317.552118][ T8114]  should_fail_ex+0x414/0x560
[  317.552143][ T8114]  should_failslab+0xa8/0x100
[  317.552168][ T8114]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  317.552190][ T8114]  ? __alloc_skb+0x112/0x2d0
[  317.552218][ T8114]  __alloc_skb+0x112/0x2d0
[  317.552245][ T8114]  netlink_sendmsg+0x5c6/0xb30
[  317.552277][ T8114]  ? __pfx_netlink_sendmsg+0x10/0x10
[  317.552303][ T8114]  ? aa_sock_msg_perm+0xf1/0x1d0
[  317.552329][ T8114]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  317.552347][ T8114]  ? __pfx_netlink_sendmsg+0x10/0x10
[  317.552371][ T8114]  __sock_sendmsg+0x219/0x270
[  317.552394][ T8114]  ____sys_sendmsg+0x505/0x830
[  317.552415][ T8114]  ? __pfx_____sys_sendmsg+0x10/0x10
[  317.552438][ T8114]  ? import_iovec+0x74/0xa0
[  317.552460][ T8114]  ___sys_sendmsg+0x21f/0x2a0
[  317.552478][ T8114]  ? __pfx____sys_sendmsg+0x10/0x10
[  317.552526][ T8114]  ? __fget_files+0x2a/0x420
[  317.552549][ T8114]  ? __fget_files+0x3a0/0x420
[  317.552581][ T8114]  __x64_sys_sendmsg+0x19b/0x260
[  317.552599][ T8114]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  317.552624][ T8114]  ? __pfx_ksys_write+0x10/0x10
[  317.552649][ T8114]  ? do_syscall_64+0xbe/0x3b0
[  317.552674][ T8114]  do_syscall_64+0xfa/0x3b0
[  317.552705][ T8114]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.552720][ T8114]  ? asm_sysvec_call_function_single+0x1a/0x20
[  317.552736][ T8114]  ? clear_bhb_loop+0x60/0xb0
[  317.552755][ T8114]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.552770][ T8114] RIP: 0033:0x7fdf8e58ebe9
[  317.552785][ T8114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  317.552800][ T8114] RSP: 002b:00007fdf8f347038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  317.552819][ T8114] RAX: ffffffffffffffda RBX: 00007fdf8e7b6090 RCX: 00007fdf8e58ebe9
[  317.552831][ T8114] RDX: 0000000000004850 RSI: 0000200000000100 RDI: 0000000000000006
[  317.552842][ T8114] RBP: 00007fdf8f347090 R08: 0000000000000000 R09: 0000000000000000
[  317.552852][ T8114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  317.552861][ T8114] R13: 00007fdf8e7b6128 R14: 00007fdf8e7b6090 R15: 00007fff9e9913f8
[  317.552887][ T8114]  </TASK>
[  318.467419][ T8118] loop5: detected capacity change from 0 to 1024
[  318.551491][ T8118] EXT4-fs: Ignoring removed oldalloc option
[  319.310959][ T8118] EXT4-fs: Ignoring removed orlov option
[  319.369739][ T8118] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  319.408034][ T8124] loop1: detected capacity change from 0 to 1024
[  319.491804][ T8124] ext4: Unknown parameter 'nouser_xattr'
[  319.582753][ T8118] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  319.871450][ T8134] loop3: detected capacity change from 0 to 64
[  320.005013][   T30] audit: type=1800 audit(1754528478.516:55): pid=8136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.486" name="file1" dev="loop5" ino=16 res=0 errno=0
[  320.055254][ T8136] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.486: Allocating blocks 497-513 which overlap fs metadata
[  320.666276][ T8136] EXT4-fs (loop5): pa ffff8880642f19f8: logic 384, phys. 481, len 2
[  320.674449][ T8136] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[  320.771902][ T8138] netlink: 5240 bytes leftover after parsing attributes in process `syz.1.490'.
[  320.797447][ T8134] FAULT_INJECTION: forcing a failure.
[  320.797447][ T8134] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  320.814334][ T8134] CPU: 0 UID: 0 PID: 8134 Comm: syz.3.488 Not tainted 6.16.0-next-20250806-syzkaller #0 PREEMPT(full) 
[  320.814365][ T8134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  320.814377][ T8134] Call Trace:
[  320.814385][ T8134]  <TASK>
[  320.814394][ T8134]  dump_stack_lvl+0x189/0x250
[  320.814425][ T8134]  ? __pfx____ratelimit+0x10/0x10
[  320.814452][ T8134]  ? __pfx_dump_stack_lvl+0x10/0x10
[  320.814475][ T8134]  ? __pfx__printk+0x10/0x10
[  320.814505][ T8134]  ? fs_reclaim_acquire+0x7d/0x100
[  320.814547][ T8134]  should_fail_ex+0x414/0x560
[  320.814580][ T8134]  prepare_alloc_pages+0x213/0x610
[  320.814610][ T8134]  __alloc_frozen_pages_noprof+0x123/0x370
[  320.814636][ T8134]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  320.814670][ T8134]  ? policy_nodemask+0x27c/0x720
[  320.814695][ T8134]  ? __lock_acquire+0xab9/0xd20
[  320.814739][ T8134]  alloc_pages_mpol+0x232/0x4a0
[  320.814774][ T8134]  vma_alloc_folio_noprof+0xe4/0x200
[  320.814806][ T8134]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  320.814850][ T8134]  folio_prealloc+0x30/0x180
[  320.814881][ T8134]  __handle_mm_fault+0x2ab9/0x5440
[  320.814927][ T8134]  ? __pfx___handle_mm_fault+0x10/0x10
[  320.814975][ T8134]  ? find_vma+0xe7/0x160
[  320.814999][ T8134]  ? __pfx_find_vma+0x10/0x10
[  320.815029][ T8134]  handle_mm_fault+0x40a/0x8e0
[  320.815069][ T8134]  do_user_addr_fault+0x764/0x1390
[  320.815120][ T8134]  exc_page_fault+0x76/0xf0
[  320.815150][ T8134]  asm_exc_page_fault+0x26/0x30
[  320.815168][ T8134] RIP: 0010:filldir+0x2bc/0x6c0
[  320.815193][ T8134] Code: 87 73 02 00 00 0f 01 cb 0f ae e8 48 8b 44 24 50 49 89 44 24 08 48 8b 4c 24 08 48 8b 44 24 58 48 89 01 48 8b 04 24 8b 54 24 1c <66> 89 41 10 80 e2 0f 41 89 c7 42 88 54 39 ff 49 63 ee c6 44 29 12
[  320.815211][ T8134] RSP: 0018:ffffc9000dba7a68 EFLAGS: 00050283
[  320.815231][ T8134] RAX: 0000000000000020 RBX: ffffc9000dba7e38 RCX: 0000200000001ff0
[  320.815246][ T8134] RDX: 0000000000000008 RSI: 0000200000001fd8 RDI: 0000200000002010
[  320.815260][ T8134] RBP: 00007ffffffff000 R08: ffff88802cf7da07 R09: 1ffff110059efb40
[  320.815274][ T8134] R10: dffffc0000000000 R11: ffffed10059efb41 R12: 0000200000001fd8
[  320.815289][ T8134] R13: ffffc9000dba7b80 R14: 0000000000000009 R15: 0000200000002010
[  320.815325][ T8134]  ? filldir+0x285/0x6c0
[  320.815361][ T8134]  ? __pfx_filldir+0x10/0x10
[  320.815387][ T8134]  hfs_readdir+0x78e/0xae0
[  320.815428][ T8134]  ? __pfx_hfs_readdir+0x10/0x10
[  320.815471][ T8134]  ? __lock_acquire+0xab9/0xd20
[  320.815512][ T8134]  ? iterate_dir+0x292/0x570
[  320.815555][ T8134]  ? down_read_killable+0x1d1/0x350
[  320.815590][ T8134]  iterate_dir+0x399/0x570
[  320.815623][ T8134]  __se_sys_getdents+0xe4/0x250
[  320.815651][ T8134]  ? __pfx___se_sys_getdents+0x10/0x10
[  320.815674][ T8134]  ? ksys_write+0x22a/0x250
[  320.815696][ T8134]  ? __pfx_filldir+0x10/0x10
[  320.815730][ T8134]  ? __pfx_ksys_write+0x10/0x10
[  320.815753][ T8134]  ? rcu_is_watching+0x15/0xb0
[  320.815779][ T8134]  ? do_syscall_64+0xbe/0x3b0
[  320.815813][ T8134]  do_syscall_64+0xfa/0x3b0
[  320.815838][ T8134]  ? lockdep_hardirqs_on+0x9c/0x150
[  320.815863][ T8134]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.815882][ T8134]  ? clear_bhb_loop+0x60/0xb0
[  320.815906][ T8134]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.815925][ T8134] RIP: 0033:0x7f50bed8ebe9
[  320.815943][ T8134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  320.815959][ T8134] RSP: 002b:00007f50bfc2b038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  320.815978][ T8134] RAX: ffffffffffffffda RBX: 00007f50befb5fa0 RCX: 00007f50bed8ebe9
[  320.815992][ T8134] RDX: 0000000020002078 RSI: 0000200000001fc0 RDI: 0000000000000004
[  320.816005][ T8134] RBP: 00007f50bfc2b090 R08: 0000000000000000 R09: 0000000000000000
[  320.816017][ T8134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  320.816029][ T8134] R13: 00007f50befb6038 R14: 00007f50befb5fa0 R15: 00007ffd3d2900f8
[  320.816065][ T8134]  </TASK>
[  321.288753][ T7435] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.595201][ T8132] loop4: detected capacity change from 0 to 32768
[  321.619625][ T8126] loop0: detected capacity change from 0 to 40427
[  321.634766][ T8126] F2FS-fs (loop0): build fault injection rate: 14
[  321.669532][ T8126] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[  321.681843][ T8132] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.489 (8132)
[  321.740691][ T8126] F2FS-fs (loop0): invalid crc value
[  321.775916][    C1] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  321.799167][ T8132] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  321.868524][    C1] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  321.900500][ T8132] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  321.918478][ T8132] BTRFS info (device loop4): disk space caching is enabled
[  321.965924][ T8132] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  322.096766][ T8153] loop3: detected capacity change from 0 to 4096
[  322.164244][ T8153] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  323.118602][ T8126] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  323.217293][ T8126] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  323.219651][ T8153] ntfs3(loop3): ino=19, mi_enum_attr
[  323.294093][ T8153] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  323.430861][ T8132] BTRFS error (device loop4): open_ctree failed: -4
[  323.889495][ T5996] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  323.947946][ T8126] delete_channel: no stack
[  324.082299][ T5996] usb 2-1: unable to get BOS descriptor or descriptor too short
[  324.115636][ T5996] usb 2-1: not running at top speed; connect to a high speed hub
[  324.169947][ T5996] usb 2-1: config 56 has an invalid interface number: 129 but max is 0
[  324.211325][ T5996] usb 2-1: config 56 has no interface number 0
[  324.244577][ T5996] usb 2-1: config 56 interface 129 altsetting 224 endpoint 0x86 has invalid maxpacket 512, setting to 64
[  324.309162][ T5996] usb 2-1: config 56 interface 129 has no altsetting 0
[  324.370099][ T5996] usb 2-1: New USB device found, idVendor=1410, idProduct=9011, bcdDevice=e5.d2
[  324.379665][ T5996] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.387724][ T5996] usb 2-1: Product: syz
[  324.408512][ T5996] usb 2-1: Manufacturer: syz
[  324.424254][ T5996] usb 2-1: SerialNumber: syz
[  324.440882][ T8180] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  324.641288][ T8199] loop5: detected capacity change from 0 to 1024
[  324.665050][ T8199] ext4: Unknown parameter 'nouser_xattr'
[  325.034403][ T8202] loop1: detected capacity change from 0 to 1024
[  327.515220][ T5996] option 2-1:56.129: GSM modem (1-port) converter detected
[  327.688334][ T5996] usb 2-1: USB disconnect, device number 11
[  327.740687][ T5996] option 2-1:56.129: device disconnected
[  327.929199][ T6972] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  328.139129][ T6972] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  328.215274][ T6972] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  328.371459][ T6972] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  328.582650][ T6972] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  328.638573][ T6972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  328.655543][ T6972] usb 5-1: Product: syz
[  328.679142][ T6972] usb 5-1: Manufacturer: syz
[  328.686747][ T6972] usb 5-1: SerialNumber: syz
[  328.918080][ T6972] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  328.930071][ T8239] FAULT_INJECTION: forcing a failure.
[  328.930071][ T8239] name failslab, interval 1, probability 0, space 0, times 0
[  328.988642][ T8239] CPU: 0 UID: 0 PID: 8239 Comm: syz.3.509 Not tainted 6.16.0-next-20250806-syzkaller #0 PREEMPT(full) 
[  328.988674][ T8239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  328.988686][ T8239] Call Trace:
[  328.988694][ T8239]  <TASK>
[  328.988704][ T8239]  dump_stack_lvl+0x189/0x250
[  328.988734][ T8239]  ? __pfx____ratelimit+0x10/0x10
[  328.988763][ T8239]  ? __pfx_dump_stack_lvl+0x10/0x10
[  328.988787][ T8239]  ? __pfx__printk+0x10/0x10
[  328.988818][ T8239]  ? __pfx___might_resched+0x10/0x10
[  328.988838][ T8239]  ? fs_reclaim_acquire+0x7d/0x100
[  328.988875][ T8239]  should_fail_ex+0x414/0x560
[  328.988908][ T8239]  should_failslab+0xa8/0x100
[  328.988938][ T8239]  __kmalloc_noprof+0xcb/0x4f0
[  328.988965][ T8239]  ? tomoyo_encode+0x28b/0x550
[  328.988990][ T8239]  tomoyo_encode+0x28b/0x550
[  328.989017][ T8239]  tomoyo_realpath_from_path+0x58d/0x5d0
[  328.989047][ T8239]  ? tomoyo_domain+0xd9/0x130
[  328.989074][ T8239]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  328.989102][ T8239]  tomoyo_path_number_perm+0x1e8/0x5a0
[  328.989133][ T8239]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  328.989182][ T8239]  ? __lock_acquire+0xab9/0xd20
[  328.989236][ T8239]  ? __fget_files+0x2a/0x420
[  328.989269][ T8239]  ? __fget_files+0x2a/0x420
[  328.989297][ T8239]  ? __fget_files+0x3a0/0x420
[  328.989324][ T8239]  ? __fget_files+0x2a/0x420
[  328.989359][ T8239]  security_file_ioctl+0xcb/0x2d0
[  328.989397][ T8239]  __se_sys_ioctl+0x47/0x170
[  328.989425][ T8239]  do_syscall_64+0xfa/0x3b0
[  328.989453][ T8239]  ? lockdep_hardirqs_on+0x9c/0x150
[  328.989479][ T8239]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.989499][ T8239]  ? clear_bhb_loop+0x60/0xb0
[  328.989524][ T8239]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.989544][ T8239] RIP: 0033:0x7f50bed8ebe9
[  328.989563][ T8239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  328.989580][ T8239] RSP: 002b:00007f50bfc2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  328.989603][ T8239] RAX: ffffffffffffffda RBX: 00007f50befb5fa0 RCX: 00007f50bed8ebe9
[  328.989618][ T8239] RDX: 00002000000000c0 RSI: 00000000c040aed5 RDI: 0000000000000005
[  328.989631][ T8239] RBP: 00007f50bfc2b090 R08: 0000000000000000 R09: 0000000000000000
[  328.989643][ T8239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  328.989655][ T8239] R13: 00007f50befb6038 R14: 00007f50befb5fa0 R15: 00007ffd3d2900f8
[  328.989690][ T8239]  </TASK>
[  328.989888][ T8239] ERROR: Out of memory at tomoyo_realpath_from_path.
[  329.212520][ T8224] FAULT_INJECTION: forcing a failure.
[  329.212520][ T8224] name failslab, interval 1, probability 0, space 0, times 0
[  329.212569][ T8224] CPU: 1 UID: 0 PID: 8224 Comm: syz.4.505 Not tainted 6.16.0-next-20250806-syzkaller #0 PREEMPT(full) 
[  329.212593][ T8224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  329.212605][ T8224] Call Trace:
[  329.212613][ T8224]  <TASK>
[  329.212622][ T8224]  dump_stack_lvl+0x189/0x250
[  329.212651][ T8224]  ? __pfx____ratelimit+0x10/0x10
[  329.212681][ T8224]  ? __pfx_dump_stack_lvl+0x10/0x10
[  329.212716][ T8224]  ? __pfx__printk+0x10/0x10
[  329.212748][ T8224]  ? __pfx___might_resched+0x10/0x10
[  329.212767][ T8224]  ? fs_reclaim_acquire+0x7d/0x100
[  329.212803][ T8224]  should_fail_ex+0x414/0x560
[  329.212839][ T8224]  should_failslab+0xa8/0x100
[  329.212867][ T8224]  __kmalloc_noprof+0xcb/0x4f0
[  329.212890][ T8224]  ? tomoyo_encode+0x28b/0x550
[  329.212913][ T8224]  tomoyo_encode+0x28b/0x550
[  329.212936][ T8224]  tomoyo_realpath_from_path+0x58d/0x5d0
[  329.212966][ T8224]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  329.212991][ T8224]  tomoyo_path_number_perm+0x1e8/0x5a0
[  329.213018][ T8224]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  329.213062][ T8224]  ? __lock_acquire+0xab9/0xd20
[  329.213110][ T8224]  ? __fget_files+0x2a/0x420
[  329.213140][ T8224]  ? __fget_files+0x2a/0x420
[  329.213164][ T8224]  ? __fget_files+0x3a0/0x420
[  329.213188][ T8224]  ? __fget_files+0x2a/0x420
[  329.213218][ T8224]  security_file_ioctl+0xcb/0x2d0
[  329.213243][ T8224]  __se_sys_ioctl+0x47/0x170
[  329.213269][ T8224]  do_syscall_64+0xfa/0x3b0
[  329.213295][ T8224]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.213313][ T8224]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  329.213330][ T8224]  ? clear_bhb_loop+0x60/0xb0
[  329.213351][ T8224]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.213369][ T8224] RIP: 0033:0x7fd37b78ebe9
[  329.213395][ T8224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  329.213411][ T8224] RSP: 002b:00007fd3799f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  329.213431][ T8224] RAX: ffffffffffffffda RBX: 00007fd37b9b5fa0 RCX: 00007fd37b78ebe9
[  329.213445][ T8224] RDX: 0000000000000000 RSI: 000000004040942c RDI: 0000000000000004
[  329.213456][ T8224] RBP: 00007fd3799f6090 R08: 0000000000000000 R09: 0000000000000000
[  329.213467][ T8224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  329.213478][ T8224] R13: 00007fd37b9b6038 R14: 00007fd37b9b5fa0 R15: 00007ffdb627d168
[  329.213510][ T8224]  </TASK>
[  329.213755][ T8224] ERROR: Out of memory at tomoyo_realpath_from_path.
[  329.473727][ T8227] loop0: detected capacity change from 0 to 32768
[  329.524885][ T6972] usb 5-1: USB disconnect, device number 17
[  329.534844][ T6972] usblp0: removed
[  329.546709][ T8227] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.506 (8227)
[  329.547758][ T8229] loop1: detected capacity change from 0 to 32768
[  329.660094][ T8229] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  329.689147][ T8227] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  329.750460][ T8227] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  329.828745][ T8227] BTRFS info (device loop0): disk space caching is enabled
[  329.888211][ T8227] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  329.997871][ T8229] XFS (loop1): Starting recovery (logdev: internal)
[  330.165917][ T8227] BTRFS info (device loop0): rebuilding free space tree
[  330.176289][ T8229] XFS (loop1): Ending recovery (logdev: internal)
[  330.215258][ T8263] loop3: detected capacity change from 0 to 512
[  330.242087][ T8227] BTRFS info (device loop0): disabling free space tree
[  330.251013][ T8275] tipc: Started in network mode
[  330.267220][ T8227] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  330.278862][ T8263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  330.310964][ T8275] tipc: Node identity be9da4954981, cluster identity 4711
[  330.343549][ T8227] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  330.363977][   T30] audit: type=1800 audit(1754528488.877:56): pid=8229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.507" name="file2" dev="loop1" ino=7431 res=0 errno=0
[  330.386477][ T8263] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  330.407630][ T8275] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  330.466226][ T8279] syzkaller0: entered promiscuous mode
[  330.508857][ T8227] netlink: 182 bytes leftover after parsing attributes in process `syz.0.506'.
[  330.582260][ T5860] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  330.604184][ T8279] syzkaller0: entered allmulticast mode
[  330.636559][ T8275] tipc: Resetting bearer <eth:syzkaller0>
[  330.666779][ T5861] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  330.698666][ T8274] tipc: Resetting bearer <eth:syzkaller0>
[  330.803337][ T5865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.880858][ T8274] tipc: Disabling bearer <eth:syzkaller0>
[  331.242069][ T8291] netlink: 5240 bytes leftover after parsing attributes in process `syz.4.516'.
[  332.030185][ T8296] loop3: detected capacity change from 0 to 256
[  332.945182][ T8296] netlink: 584 bytes leftover after parsing attributes in process `syz.3.515'.
[  332.978927][ T5947] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  333.578004][ T8321] CIFS: Unable to determine destination address
[  333.580330][ T5947] usb 1-1: unable to get BOS descriptor or descriptor too short
[  333.640585][ T8321] overlayfs: missing 'workdir'
[  334.118210][ T5947] usb 1-1: not running at top speed; connect to a high speed hub
[  334.170972][ T5947] usb 1-1: config 56 has an invalid interface number: 129 but max is 0
[  334.206752][ T5947] usb 1-1: config 56 has no interface number 0
[  334.238269][ T5947] usb 1-1: config 56 interface 129 altsetting 224 endpoint 0x86 has invalid maxpacket 512, setting to 64
[  334.298002][ T5947] usb 1-1: config 56 interface 129 has no altsetting 0
[  334.346674][ T5947] usb 1-1: New USB device found, idVendor=1410, idProduct=9011, bcdDevice=e5.d2
[  334.400981][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.544973][ T5947] usb 1-1: Product: syz
[  334.549690][ T5947] usb 1-1: Manufacturer: syz
[  334.554321][ T5947] usb 1-1: SerialNumber: syz
[  334.562086][ T8333] tipc: Enabling of bearer <eth:macsec0> rejected, already enabled
[  334.574488][ T8309] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  334.826579][ T8336] 9pnet_fd: Insufficient options for proto=fd
[  334.857445][ T8338] loop3: detected capacity change from 0 to 64
[  334.866368][ T8338] bfs: Unknown parameter '0xffffffffffffffffƛ4�Y��P^F�!ح4�E(/͇�-H�����[��6�
[  334.866368][ T8338] և ġ��0I�I܇첏�kZ�������Pc�h���_�K������"�Y5����<��	EB�գy?{{k�f�9�r�~�(�� ո���4KJkTŲ4Mι0��Gjp�\��$
[  334.866368][ T8338] ���i�{���5[r�D�.Vc�.Mz�֦�mOϷa%�W'
[  335.166460][ T8341] loop0: detected capacity change from 0 to 1024
[  335.213652][ T8343] sctp: [Deprecated]: syz.3.523 (pid 8343) Use of int in max_burst socket option deprecated.
[  335.213652][ T8343] Use struct sctp_assoc_value instead
[  336.031907][ T8347] loop1: detected capacity change from 0 to 512
[  336.132398][ T8349] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  336.183670][ T8347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  336.204095][ T8355] syzkaller0: entered promiscuous mode
[  336.227148][ T8347] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  336.235462][ T8355] syzkaller0: entered allmulticast mode
[  336.241850][ T8352] loop5: detected capacity change from 0 to 1024
[  336.282334][ T8352] ext4: Unknown parameter 'nouser_xattr'
[  336.335329][ T8349] tipc: Resetting bearer <eth:syzkaller0>
[  336.426284][ T8348] tipc: Resetting bearer <eth:syzkaller0>
[  336.541940][ T8348] tipc: Disabling bearer <eth:syzkaller0>
[  336.678933][ T5860] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.131958][ T5947] option 1-1:56.129: GSM modem (1-port) converter detected
[  337.215673][ T5947] usb 1-1: USB disconnect, device number 18
[  337.266147][ T5947] option 1-1:56.129: device disconnected
[  337.395428][ T8377] loop1: detected capacity change from 0 to 64
[  337.799581][ T5947] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  338.107187][ T8344] loop4: detected capacity change from 0 to 32768
[  338.237613][ T5947] usb 1-1: Using ep0 maxpacket: 16
[  338.265927][ T5947] usb 1-1: config 0 has no interfaces?
[  338.278463][ T5947] usb 1-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00
[  338.314486][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.358582][ T5947] usb 1-1: config 0 descriptor??
[  339.010309][ T8375] batadv0: entered promiscuous mode
[  339.032310][ T8375] vlan2: entered promiscuous mode
[  339.291390][ T8389] tipc: Started in network mode
[  339.296334][ T8389] tipc: Node identity aaaaaaaaaa3b, cluster identity 4711
[  339.303738][ T8389] tipc: Enabled bearer <eth:macsec0>, priority 27
[  339.783562][ T8393] ip6gre2: entered allmulticast mode
[  339.991831][ T1573] usb 1-1: USB disconnect, device number 19
[  340.004336][ T8395] loop1: detected capacity change from 0 to 1024
[  340.045293][ T8395] EXT4-fs: Ignoring removed oldalloc option
[  340.070466][ T8395] EXT4-fs: Ignoring removed orlov option
[  340.080854][ T8395] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  340.097547][ T8397] loop5: detected capacity change from 0 to 1024
[  340.131545][ T8397] EXT4-fs: Ignoring removed oldalloc option
[  340.148415][ T8397] EXT4-fs: Ignoring removed orlov option
[  340.159210][ T8395] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  340.245896][ T8397] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  340.326831][   T30] audit: type=1800 audit(1754528498.829:57): pid=8404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.534" name="file1" dev="loop1" ino=16 res=0 errno=0
[  340.371299][ T8404] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.534: Allocating blocks 497-513 which overlap fs metadata
[  340.420726][ T5947] tipc: Node number set to 9546410
[  340.575552][ T8404] EXT4-fs (loop1): pa ffff8880642f1000: logic 384, phys. 481, len 2
[  340.583825][ T8404] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[  340.802001][ T8397] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  341.004485][ T8408] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.535: Allocating blocks 497-513 which overlap fs metadata
[  341.062397][   T30] audit: type=1800 audit(1754528499.489:58): pid=8408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.535" name="file1" dev="loop5" ino=16 res=0 errno=0
[  341.269387][ T8408] EXT4-fs (loop5): pa ffff8880642f1d98: logic 384, phys. 481, len 2
[  341.277646][ T8408] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[  341.544981][ T5860] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.577762][ T7435] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.862631][ T8417] loop4: detected capacity change from 0 to 1024
[  341.931251][ T8417] ext4: Unknown parameter 'nouser_xattr'
[  343.088940][ T1573] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  343.683420][ T1573] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  343.755432][ T1573] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  343.795762][ T1573] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  343.838552][ T8447] netlink: 5240 bytes leftover after parsing attributes in process `syz.4.544'.
[  343.851270][ T1573] usb 1-1: Product: syz
[  343.855495][ T1573] usb 1-1: Manufacturer: syz
[  343.906759][ T5949] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  343.935273][ T1573] usb 1-1: SerialNumber: syz
[  343.997774][ T1573] usb 1-1: config 0 descriptor??
[  344.078075][ T5949] usb 4-1: device descriptor read/64, error -71
[  344.333759][ T1573] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22
[  345.176601][ T5949] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  345.201299][ T5923] udevd[5923]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  345.366747][ T5949] usb 4-1: device descriptor read/64, error -71
[  345.507099][ T5949] usb usb4-port1: attempt power cycle
[  345.756265][ T8468] FAULT_INJECTION: forcing a failure.
[  345.756265][ T8468] name failslab, interval 1, probability 0, space 0, times 0
[  345.769183][ T8468] CPU: 0 UID: 0 PID: 8468 Comm: syz.4.548 Not tainted 6.16.0-next-20250806-syzkaller #0 PREEMPT(full) 
[  345.769226][ T8468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  345.769238][ T8468] Call Trace:
[  345.769243][ T8468]  <TASK>
[  345.769248][ T8468]  dump_stack_lvl+0x189/0x250
[  345.769268][ T8468]  ? __pfx____ratelimit+0x10/0x10
[  345.769285][ T8468]  ? __pfx_dump_stack_lvl+0x10/0x10
[  345.769299][ T8468]  ? __pfx__printk+0x10/0x10
[  345.769320][ T8468]  ? __pfx___might_resched+0x10/0x10
[  345.769334][ T8468]  should_fail_ex+0x414/0x560
[  345.769354][ T8468]  should_failslab+0xa8/0x100
[  345.769372][ T8468]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  345.769388][ T8468]  ? __alloc_skb+0x112/0x2d0
[  345.769407][ T8468]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  345.769426][ T8468]  __alloc_skb+0x112/0x2d0
[  345.769446][ T8468]  pfkey_sendmsg+0x1dd/0x1090
[  345.769470][ T8468]  ? __pfx___might_resched+0x10/0x10
[  345.769486][ T8468]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  345.769501][ T8468]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  345.769517][ T8468]  ? lockdep_hardirqs_on+0x9c/0x150
[  345.769535][ T8468]  ? aa_sk_perm+0x81e/0x950
[  345.769555][ T8468]  ? __pfx_aa_sk_perm+0x10/0x10
[  345.769570][ T8468]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  345.769585][ T8468]  ? aa_sock_msg_perm+0xf1/0x1d0
[  345.769604][ T8468]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  345.769617][ T8468]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  345.769635][ T8468]  __sock_sendmsg+0x219/0x270
[  345.769652][ T8468]  ____sys_sendmsg+0x505/0x830
[  345.769668][ T8468]  ? __pfx_____sys_sendmsg+0x10/0x10
[  345.769685][ T8468]  ? import_iovec+0x74/0xa0
[  345.769701][ T8468]  ___sys_sendmsg+0x21f/0x2a0
[  345.769714][ T8468]  ? __pfx____sys_sendmsg+0x10/0x10
[  345.769749][ T8468]  ? __fget_files+0x2a/0x420
[  345.769766][ T8468]  ? __fget_files+0x3a0/0x420
[  345.769789][ T8468]  __x64_sys_sendmsg+0x19b/0x260
[  345.769803][ T8468]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  345.769830][ T8468]  do_syscall_64+0xfa/0x3b0
[  345.769847][ T8468]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.769858][ T8468]  ? asm_sysvec_call_function_single+0x1a/0x20
[  345.769870][ T8468]  ? clear_bhb_loop+0x60/0xb0
[  345.769884][ T8468]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.769895][ T8468] RIP: 0033:0x7fd37b78ebe9
[  345.769908][ T8468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  345.769918][ T8468] RSP: 002b:00007fd3799d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  345.769933][ T8468] RAX: ffffffffffffffda RBX: 00007fd37b9b6090 RCX: 00007fd37b78ebe9
[  345.769942][ T8468] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005
[  345.769949][ T8468] RBP: 00007fd3799d5090 R08: 0000000000000000 R09: 0000000000000000
[  345.769957][ T8468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  345.769964][ T8468] R13: 00007fd37b9b6128 R14: 00007fd37b9b6090 R15: 00007ffdb627d168
[  345.769982][ T8468]  </TASK>
[  346.496615][ T5949] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  346.548669][ T5949] usb 4-1: device descriptor read/8, error -71
[  346.589736][ T5996] usb 1-1: USB disconnect, device number 20
[  346.806409][ T5949] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  347.076509][ T5949] usb 4-1: device not accepting address 17, error -71
[  347.605760][ T5949] usb usb4-port1: unable to enumerate USB device
[  347.636125][ T8481] loop3: detected capacity change from 0 to 128
[  347.889849][ T8484] loop1: detected capacity change from 0 to 40427
[  347.994656][ T8484] F2FS-fs (loop1): invalid crc value
[  348.096071][ T8484] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  348.107662][ T8484] F2FS-fs (loop1): Start checkpoint disabled!
[  348.126361][ T8484] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  348.310382][   T30] audit: type=1800 audit(1754528506.830:59): pid=8484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.553" name="file1" dev="loop1" ino=10 res=0 errno=0
[  348.353861][ T8484] bio_check_eod: 1 callbacks suppressed
[  348.353885][ T8484] syz.1.553: attempt to access beyond end of device
[  348.353885][ T8484] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  348.445221][ T8494] loop0: detected capacity change from 0 to 1024
[  348.459696][ T8495] loop4: detected capacity change from 0 to 1024
[  348.469718][ T1152] kworker/u8:6: attempt to access beyond end of device
[  348.469718][ T1152] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  348.485502][ T8494] EXT4-fs: Ignoring removed oldalloc option
[  348.531958][ T8495] ext4: Unknown parameter 'nouser_xattr'
[  348.537071][ T1152] CPU: 1 UID: 0 PID: 1152 Comm: kworker/u8:6 Not tainted 6.16.0-next-20250806-syzkaller #0 PREEMPT(full) 
[  348.537099][ T1152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  348.537111][ T1152] Workqueue: writeback wb_workfn (flush-7:1)
[  348.537141][ T1152] Call Trace:
[  348.537149][ T1152]  <TASK>
[  348.537157][ T1152]  dump_stack_lvl+0x189/0x250
[  348.537186][ T1152]  ? __pfx_dump_stack_lvl+0x10/0x10
[  348.537210][ T1152]  ? __pfx_queue_work_on+0x10/0x10
[  348.537228][ T1152]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  348.537252][ T1152]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  348.537297][ T1152]  f2fs_handle_critical_error+0x37c/0x540
[  348.537332][ T1152]  f2fs_write_end_io+0x886/0xb60
[  348.537374][ T1152]  __submit_merged_bio+0x27a/0x6a0
[  348.537408][ T1152]  __submit_merged_write_cond+0x255/0x530
[  348.537443][ T1152]  f2fs_write_data_pages+0x261d/0x3000
[  348.537514][ T1152]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  348.537599][ T1152]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  348.537649][ T1152]  ? start_dl_timer+0x28c/0x520
[  348.537716][ T1152]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  348.537749][ T1152]  do_writepages+0x32b/0x550
[  348.537790][ T1152]  ? reacquire_held_locks+0x127/0x1d0
[  348.537810][ T1152]  ? writeback_sb_inodes+0x384/0x1010
[  348.537848][ T1152]  __writeback_single_inode+0x145/0xff0
[  348.537875][ T1152]  ? do_raw_spin_unlock+0x122/0x240
[  348.537905][ T1152]  writeback_sb_inodes+0x6c7/0x1010
[  348.537963][ T1152]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  348.538041][ T1152]  ? rcu_is_watching+0x15/0xb0
[  348.538073][ T1152]  wb_writeback+0x43b/0xaf0
[  348.538107][ T1152]  ? queue_io+0x3b1/0x590
[  348.538134][ T1152]  ? __pfx_wb_writeback+0x10/0x10
[  348.538170][ T1152]  ? _raw_spin_unlock_irq+0x23/0x50
[  348.538200][ T1152]  wb_workfn+0x409/0xef0
[  348.538240][ T1152]  ? __pfx_wb_workfn+0x10/0x10
[  348.538275][ T1152]  ? __lock_acquire+0xab9/0xd20
[  348.538316][ T1152]  ? process_scheduled_works+0x9ef/0x17b0
[  348.538344][ T1152]  ? _raw_spin_unlock_irq+0x23/0x50
[  348.538364][ T1152]  ? process_scheduled_works+0x9ef/0x17b0
[  348.538381][ T1152]  ? process_scheduled_works+0x9ef/0x17b0
[  348.538401][ T1152]  process_scheduled_works+0xade/0x17b0
[  348.538459][ T1152]  ? __pfx_process_scheduled_works+0x10/0x10
[  348.538501][ T1152]  worker_thread+0x8a0/0xda0
[  348.538563][ T1152]  kthread+0x70e/0x8a0
[  348.538592][ T1152]  ? __pfx_worker_thread+0x10/0x10
[  348.538611][ T1152]  ? __pfx_kthread+0x10/0x10
[  348.538636][ T1152]  ? _raw_spin_unlock_irq+0x23/0x50
[  348.538658][ T1152]  ? lockdep_hardirqs_on+0x9c/0x150
[  348.538679][ T1152]  ? __pfx_kthread+0x10/0x10
[  348.538704][ T1152]  ret_from_fork+0x3f9/0x770
[  348.538727][ T1152]  ? __pfx_ret_from_fork+0x10/0x10
[  348.538755][ T1152]  ? __switch_to_asm+0x39/0x70
[  348.538776][ T1152]  ? __switch_to_asm+0x33/0x70
[  348.538797][ T1152]  ? __pfx_kthread+0x10/0x10
[  348.538827][ T1152]  ret_from_fork_asm+0x1a/0x30
[  348.538873][ T1152]  </TASK>
[  348.542398][ T1152] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  348.636281][ T8494] EXT4-fs: Ignoring removed orlov option
[  349.176357][ T8494] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  349.254276][ T8494] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  352.056068][   T30] audit: type=1800 audit(1754528510.570:60): pid=8511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.550" name="file1" dev="loop0" ino=16 res=0 errno=0
[  352.098233][ T8511] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.550: Allocating blocks 433-513 which overlap fs metadata
[  352.627613][ T8492] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 15: block 161:freeing already freed block (bit 10); block bitmap corrupt.
[  352.882143][ T5861] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.991259][ T8522] loop3: detected capacity change from 0 to 16
[  353.012583][ T8520] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  353.041074][ T8522] erofs (device loop3): mounted with root inode @ nid 36.
[  353.055736][ T6972] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  353.063884][ T8520] syzkaller0: entered promiscuous mode
[  353.100525][ T8520] syzkaller0: entered allmulticast mode
[  353.106816][ T8516] loop5: detected capacity change from 0 to 4096
[  353.153747][ T8520] tipc: Resetting bearer <eth:syzkaller0>
[  353.176145][ T8516] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  353.485541][ T8528] erofs (device loop3): inline data across blocks @ nid 36
[  353.492967][ T8528] syz.3.561: attempt to access beyond end of device
[  353.492967][ T8528] loop3: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16
[  354.150150][ T6972] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  354.334543][ T8519] tipc: Resetting bearer <eth:syzkaller0>
[  354.413138][ T6972] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  354.554306][ T8516] ntfs3(loop5): ino=19, mi_enum_attr
[  354.629188][ T6972] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  354.650217][ T8516] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  354.748731][ T6972] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  354.787946][ T6972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  354.822631][ T8519] tipc: Disabling bearer <eth:syzkaller0>
[  354.836163][ T6972] usb 5-1: Product: syz
[  354.855047][ T6972] usb 5-1: Manufacturer: syz
[  354.869356][ T8530] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  354.874240][ T6972] usb 5-1: SerialNumber: syz
[  355.013187][ T8535] CIFS: Unable to determine destination address
[  356.109710][ T6972] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  356.157206][ T8517] loop4: detected capacity change from 0 to 64
[  356.471149][ T8554] loop0: detected capacity change from 0 to 512
[  356.490356][ T8556] loop1: detected capacity change from 0 to 1024
[  356.525998][ T8556] ext4: Unknown parameter 'nouser_xattr'
[  356.782718][ T8554] EXT4-fs: test_dummy_encryption requires encrypt feature
[  359.601343][ T5949] usb 5-1: USB disconnect, device number 18
[  359.687889][ T5949] usblp0: removed
[  359.846479][ T8578] loop5: detected capacity change from 0 to 512
[  359.945232][ T8578] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  360.098037][ T8578] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  360.369128][ T7435] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.763021][ T8573] loop1: detected capacity change from 0 to 32768
[  360.771228][ T8602] netlink: 5240 bytes leftover after parsing attributes in process `syz.5.574'.
[  361.334893][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.575'.
[  364.079029][ T8630] loop0: detected capacity change from 0 to 64
[  364.086739][ T8630] bfs: Unknown parameter '0xffffffffffffffffƛ4�Y��P^F�!ح4�E(/͇�-H�����[��6�
[  364.086739][ T8630] և ġ��0I�I܇첏�kZ�������Pc�h���_�K������"�Y5����<��	EB�գy?{{k�f�9�r�~�(�� ո���4KJkTŲ4Mι0��Gjp�\��$
[  364.086739][ T8630] ���i�{���5[r�D�.Vc�.Mz�֦�mOϷa%�W'
[  364.216469][ T8633] sctp: [Deprecated]: syz.0.578 (pid 8633) Use of int in max_burst socket option deprecated.
[  364.216469][ T8633] Use struct sctp_assoc_value instead
[  365.026119][ T8635] loop5: detected capacity change from 0 to 32768
[  365.149829][ T8635] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  365.661758][ T8635] XFS (loop5): Ending clean mount
[  365.680289][ T8635] XFS (loop5): Quotacheck needed: Please wait.
[  366.093099][ T8658] loop0: detected capacity change from 0 to 128
[  366.121511][ T8658] EXT4-fs: Ignoring removed nomblk_io_submit option
[  366.129268][ T8635] XFS (loop5): Quotacheck: Done.
[  366.150493][ T8658] EXT4-fs: Ignoring removed nomblk_io_submit option
[  366.173675][ T8663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.584'.
[  366.214777][ T8658] EXT4-fs (loop0): Test dummy encryption mode enabled
[  366.265304][ T8663] veth1_macvtap: left promiscuous mode
[  366.300402][ T8658] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  366.329983][ T8670] loop4: detected capacity change from 0 to 128
[  366.489953][ T8658] ext4 filesystem being mounted at /114/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  367.417054][ T8670] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  367.760070][ T8670] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  367.858499][ T8672] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  368.043334][ T8676] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx"
[  368.048999][ T7435] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  370.483630][ T5861] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  371.144493][ T5949] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  371.394210][ T8702] loop0: detected capacity change from 0 to 256
[  371.448492][ T8706] loop5: detected capacity change from 0 to 1024
[  371.544209][ T5949] usb 2-1: config 0 has an invalid interface number: 235 but max is 0
[  371.552437][ T5949] usb 2-1: config 0 has no interface number 0
[  371.671357][ T5949] usb 2-1: too many endpoints for config 0 interface 235 altsetting 82: 171, using maximum allowed: 30
[  371.682779][ T5949] usb 2-1: config 0 interface 235 altsetting 82 has 0 endpoint descriptors, different from the interface descriptor's value: 171
[  371.696873][ T5949] usb 2-1: config 0 interface 235 has no altsetting 0
[  371.710622][ T5949] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  371.870145][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.878349][ T5949] usb 2-1: Product: syz
[  371.882698][ T5949] usb 2-1: Manufacturer: syz
[  371.903765][ T5949] usb 2-1: SerialNumber: syz
[  371.915173][ T5949] usb 2-1: config 0 descriptor??
[  372.125462][ T8716] loop3: detected capacity change from 0 to 1024
[  372.166890][ T8716] EXT4-fs: Ignoring removed oldalloc option
[  372.203707][ T8716] EXT4-fs: Ignoring removed orlov option
[  372.213995][ T6665] hfsplus: b-tree write err: -5, ino 3
[  372.263597][ T8716] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  372.357504][ T7435] hfsplus: node 4:3 still has 1 user(s)!
[  372.366928][ T8720] FAULT_INJECTION: forcing a failure.
[  372.366928][ T8720] name failslab, interval 1, probability 0, space 0, times 0
[  372.396253][ T8716] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  372.487809][ T8720] CPU: 0 UID: 0 PID: 8720 Comm: syz.0.595 Not tainted 6.16.0-next-20250806-syzkaller #0 PREEMPT(full) 
[  372.487839][ T8720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  372.487851][ T8720] Call Trace:
[  372.487859][ T8720]  <TASK>
[  372.487867][ T8720]  dump_stack_lvl+0x189/0x250
[  372.487897][ T8720]  ? __pfx____ratelimit+0x10/0x10
[  372.487925][ T8720]  ? __pfx_dump_stack_lvl+0x10/0x10
[  372.487947][ T8720]  ? __pfx__printk+0x10/0x10
[  372.487977][ T8720]  ? __pfx___might_resched+0x10/0x10
[  372.487997][ T8720]  ? fs_reclaim_acquire+0x7d/0x100
[  372.488033][ T8720]  should_fail_ex+0x414/0x560
[  372.488065][ T8720]  should_failslab+0xa8/0x100
[  372.488097][ T8720]  __kmalloc_noprof+0xcb/0x4f0
[  372.488122][ T8720]  ? tomoyo_encode+0x28b/0x550
[  372.488146][ T8720]  tomoyo_encode+0x28b/0x550
[  372.488172][ T8720]  tomoyo_realpath_from_path+0x58d/0x5d0
[  372.488214][ T8720]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  372.488241][ T8720]  tomoyo_path_number_perm+0x1e8/0x5a0
[  372.488271][ T8720]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  372.488301][ T8720]  ? sb_end_write+0xe9/0x1c0
[  372.488323][ T8720]  ? vfs_write+0x956/0xb30
[  372.488390][ T8720]  ? ksys_write+0x1e1/0x250
[  372.488424][ T8720]  security_file_ioctl+0xcb/0x2d0
[  372.488453][ T8720]  __se_sys_ioctl+0x47/0x170
[  372.488480][ T8720]  do_syscall_64+0xfa/0x3b0
[  372.488506][ T8720]  ? lockdep_hardirqs_on+0x9c/0x150
[  372.488532][ T8720]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.488551][ T8720]  ? clear_bhb_loop+0x60/0xb0
[  372.488575][ T8720]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.488594][ T8720] RIP: 0033:0x7fdf8e58ebe9
[  372.488612][ T8720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  372.488630][ T8720] RSP: 002b:00007fdf8f368038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  372.488651][ T8720] RAX: ffffffffffffffda RBX: 00007fdf8e7b5fa0 RCX: 00007fdf8e58ebe9
[  372.488666][ T8720] RDX: 0000000000000000 RSI: 0000000000005393 RDI: 0000000000000003
[  372.488679][ T8720] RBP: 00007fdf8f368090 R08: 0000000000000000 R09: 0000000000000000
[  372.488691][ T8720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  372.488702][ T8720] R13: 00007fdf8e7b6038 R14: 00007fdf8e7b5fa0 R15: 00007fff9e9913f8
[  372.488736][ T8720]  </TASK>
[  372.488758][ T8720] ERROR: Out of memory at tomoyo_realpath_from_path.
[  373.060752][ T8715] loop4: detected capacity change from 0 to 32768
[  373.290136][ T8731] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.594: Allocating blocks 433-513 which overlap fs metadata
[  373.333870][   T30] audit: type=1800 audit(1754528531.783:61): pid=8731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.594" name="file1" dev="loop3" ino=16 res=0 errno=0
[  373.513914][ T8714] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 161:freeing already freed block (bit 10); block bitmap corrupt.
[  373.751754][ T8715] (syz.4.593,8715,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  374.560779][ T8715] (syz.4.593,8715,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  374.649445][ T5865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.719026][ T8715] JBD2: Ignoring recovery information on journal
[  374.819258][   T24] usb 2-1: USB disconnect, device number 12
[  374.860369][ T8715] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  375.446117][ T8764] ip6gre1: entered allmulticast mode
[  377.497546][ T5866] ocfs2: Unmounting device (7,4) on (node local)
[  378.267085][ T8777] loop0: detected capacity change from 0 to 512
[  378.479993][ T8777] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  378.529145][ T8777] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  378.759232][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  378.766354][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  378.957715][ T5861] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.358008][ T8789] loop4: detected capacity change from 0 to 512
[  379.472308][ T8789] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  379.632915][ T8789] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  379.677042][ T8785] loop1: detected capacity change from 0 to 32768
[  379.685088][ T8798] loop5: detected capacity change from 0 to 1024
[  379.759221][ T8798] EXT4-fs: Ignoring removed oldalloc option
[  379.809057][ T8798] EXT4-fs: Ignoring removed orlov option
[  379.842527][ T8785] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  379.881573][ T8798] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  379.901516][ T8808] tipc: Started in network mode
[  379.906533][ T8808] tipc: Node identity bed09fb3cfa5, cluster identity 4711
[  379.914286][ T8808] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  379.926090][ T8808] syzkaller0: entered promiscuous mode
[  379.931617][ T8808] syzkaller0: entered allmulticast mode
[  379.955095][ T8808] tipc: Resetting bearer <eth:syzkaller0>
[  379.975733][ T8804] tipc: Resetting bearer <eth:syzkaller0>
[  380.021203][ T5866] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  380.088164][ T8798] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  380.113083][ T8804] tipc: Disabling bearer <eth:syzkaller0>
[  380.252432][ T8785] XFS (loop1): Ending clean mount
[  380.620327][ T8785] XFS (loop1): Quotacheck needed: Please wait.
[  381.068924][ T5873] Bluetooth: hci2: command 0x0406 tx timeout
[  381.258984][   T30] audit: type=1800 audit(1754528539.774:62): pid=8823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.607" name="file1" dev="loop5" ino=16 res=0 errno=0
[  381.305176][ T8823] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.607: Allocating blocks 497-513 which overlap fs metadata
[  381.436351][ T8823] EXT4-fs (loop5): pa ffff8880642f1488: logic 384, phys. 481, len 2
[  381.444758][ T8823] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[  381.787075][ T8785] XFS (loop1): Quotacheck: Done.
[  381.891231][ T7435] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.941322][ T8828] FAULT_INJECTION: forcing a failure.
[  381.941322][ T8828] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  382.033980][ T8828] CPU: 0 UID: 0 PID: 8828 Comm: syz.4.610 Not tainted 6.16.0-next-20250806-syzkaller #0 PREEMPT(full) 
[  382.034012][ T8828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  382.034025][ T8828] Call Trace:
[  382.034033][ T8828]  <TASK>
[  382.034042][ T8828]  dump_stack_lvl+0x189/0x250
[  382.034073][ T8828]  ? __pfx____ratelimit+0x10/0x10
[  382.034101][ T8828]  ? __pfx_dump_stack_lvl+0x10/0x10
[  382.034126][ T8828]  ? __pfx__printk+0x10/0x10
[  382.034154][ T8828]  ? __might_fault+0xb0/0x130
[  382.034196][ T8828]  should_fail_ex+0x414/0x560
[  382.034228][ T8828]  _copy_from_user+0x2d/0xb0
[  382.034253][ T8828]  kstrtouint_from_user+0xc4/0x170
[  382.034287][ T8828]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  382.034339][ T8828]  proc_fail_nth_write+0x88/0x200
[  382.034364][ T8828]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  382.034395][ T8828]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  382.034420][ T8828]  vfs_write+0x27b/0xb30
[  382.034458][ T8828]  ? __pfx_vfs_write+0x10/0x10
[  382.034487][ T8828]  ? __fget_files+0x2a/0x420
[  382.034522][ T8828]  ? __fget_files+0x3a0/0x420
[  382.034550][ T8828]  ? __fget_files+0x2a/0x420
[  382.034590][ T8828]  ksys_write+0x145/0x250
[  382.034616][ T8828]  ? __fget_files+0x3a0/0x420
[  382.034647][ T8828]  ? __pfx_ksys_write+0x10/0x10
[  382.034681][ T8828]  ? do_syscall_64+0xbe/0x3b0
[  382.034714][ T8828]  do_syscall_64+0xfa/0x3b0
[  382.034740][ T8828]  ? lockdep_hardirqs_on+0x9c/0x150
[  382.034766][ T8828]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.034786][ T8828]  ? clear_bhb_loop+0x60/0xb0
[  382.034813][ T8828]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.034832][ T8828] RIP: 0033:0x7fd37b78d69f
[  382.034851][ T8828] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  382.034869][ T8828] RSP: 002b:00007fd3799d5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  382.034892][ T8828] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd37b78d69f
[  382.034916][ T8828] RDX: 0000000000000001 RSI: 00007fd3799d50a0 RDI: 0000000000000003
[  382.034929][ T8828] RBP: 00007fd3799d5090 R08: 0000000000000000 R09: 0000000000000000
[  382.034942][ T8828] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  382.034954][ T8828] R13: 00007fd37b9b6128 R14: 00007fd37b9b6090 R15: 00007ffdb627d168
[  382.034995][ T8828]  </TASK>
[  382.037754][ T5860] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  384.431743][ T8848] loop3: detected capacity change from 0 to 2048
[  384.546714][   T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  384.693633][ T8855] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  384.761512][   T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  384.915999][   T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7
[  385.152846][   T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  385.237763][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.344101][   T24] usb 6-1: Product: syz
[  385.404289][   T24] usb 6-1: Manufacturer: syz
[  385.487655][   T24] usb 6-1: SerialNumber: syz
[  385.499710][ T8848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.617'.
[  385.600141][ T8859] tmpfs: Cannot change global quota limit on remount
[  385.925249][ T8849] loop5: detected capacity change from 0 to 128
[  386.898224][ T8867] Device name cannot be null; rc = [-22]
[  387.188371][ T8876] FAULT_INJECTION: forcing a failure.
[  387.188371][ T8876] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  387.246835][   T24] cdc_ncm 6-1:1.0: bind() failure
[  387.262235][ T8876] CPU: 0 UID: 0 PID: 8876 Comm: syz.4.623 Not tainted 6.16.0-next-20250806-syzkaller #0 PREEMPT(full) 
[  387.262263][ T8876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  387.262275][ T8876] Call Trace:
[  387.262283][ T8876]  <TASK>
[  387.262292][ T8876]  dump_stack_lvl+0x189/0x250
[  387.262327][ T8876]  ? __pfx____ratelimit+0x10/0x10
[  387.262353][ T8876]  ? __pfx_dump_stack_lvl+0x10/0x10
[  387.262376][ T8876]  ? __pfx__printk+0x10/0x10
[  387.262417][ T8876]  should_fail_ex+0x414/0x560
[  387.262448][ T8876]  _copy_from_user+0x2d/0xb0
[  387.262472][ T8876]  memdup_user+0x5e/0xd0
[  387.262495][ T8876]  strndup_user+0x68/0xd0
[  387.262517][ T8876]  __se_sys_fsopen+0x3d/0x2b0
[  387.262544][ T8876]  do_syscall_64+0xfa/0x3b0
[  387.262571][ T8876]  ? lockdep_hardirqs_on+0x9c/0x150
[  387.262597][ T8876]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.262617][ T8876]  ? clear_bhb_loop+0x60/0xb0
[  387.262642][ T8876]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.262661][ T8876] RIP: 0033:0x7fd37b78ebe9
[  387.262679][ T8876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  387.262696][ T8876] RSP: 002b:00007fd3799f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  387.262719][ T8876] RAX: ffffffffffffffda RBX: 00007fd37b9b5fa0 RCX: 00007fd37b78ebe9
[  387.262734][ T8876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000003c0
[  387.262746][ T8876] RBP: 00007fd3799f6090 R08: 0000000000000000 R09: 0000000000000000
[  387.262758][ T8876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  387.262770][ T8876] R13: 00007fd37b9b6038 R14: 00007fd37b9b5fa0 R15: 00007ffdb627d168
[  387.262803][ T8876]  </TASK>
[  387.276078][   T24] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  387.372763][ T8879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  387.566767][ T8879] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  387.623969][   T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  387.736836][   T24] cdc_ncm 6-1:1.1: bind() failure
[  387.811075][   T24] usb 6-1: USB disconnect, device number 3
[  387.817270][   T10] usb 2-1: Using ep0 maxpacket: 32
[  387.828733][   T10] usb 2-1: config index 0 descriptor too short (expected 151, got 109)
[  387.879468][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  387.935579][   T10] usb 2-1: config 0 has no interfaces?
[  387.951922][ T5871] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  387.966990][   T10] usb 2-1: New USB device found, idVendor=1371, idProduct=9401, bcdDevice=70.0d
[  387.981982][ T8898] loop4: detected capacity change from 0 to 1024
[  387.988693][   T10] usb 2-1: New USB device strings: Mfr=56, Product=43, SerialNumber=3
[  388.068639][   T10] usb 2-1: Product: syz
[  388.085941][   T10] usb 2-1: Manufacturer: syz
[  388.236182][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  388.236318][ T8885] loop3: detected capacity change from 0 to 128
[  388.281427][   T10] usb 2-1: SerialNumber: syz
[  388.340459][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  388.414814][ T8900] hfsplus: keylen 65060 too large
[  388.426840][ T8900] hfsplus: keylen 65060 too large
[  388.642647][   T10] usb 2-1: config 0 descriptor??
[  388.691759][ T5871] usb 1-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00
[  388.785497][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.877374][ T5871] usb 1-1: config 0 descriptor??
[  388.942098][ T8885] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  389.110605][   T10] usb 2-1: USB disconnect, device number 13
[  389.362127][ T8885] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  389.397105][ T5871] razer 0003:1532:010E.0009: unbalanced collection at end of report description
[  389.406870][ T8909] loop4: detected capacity change from 0 to 1024
[  389.443514][ T8909] EXT4-fs: Ignoring removed oldalloc option
[  389.457327][ T5871] razer 0003:1532:010E.0009: probe with driver razer failed with error -22
[  389.472987][ T8909] EXT4-fs: Ignoring removed orlov option
[  389.511835][ T8909] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  389.610749][ T5871] usb 1-1: USB disconnect, device number 21
[  389.640783][ T8909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  391.086283][   T30] audit: type=1800 audit(1754528549.605:63): pid=8928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.630" name="file1" dev="loop4" ino=16 res=0 errno=0
[  391.124179][ T8927] usb usb8: usbfs: process 8927 (syz.1.633) did not claim interface 0 before use
[  391.151607][ T8928] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.630: Allocating blocks 433-513 which overlap fs metadata
[  391.279444][ T8908] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 161:freeing already freed block (bit 10); block bitmap corrupt.
[  391.306159][ T8932] 8021q: adding VLAN 0 to HW filter on device bond0
[  391.381926][ T8932] bond0: (slave ip6_vti0): The slave device specified does not support setting the MAC address
[  391.408734][ T8932] bond0: (slave ip6_vti0): Error -95 calling set_mac_address
[  391.434494][ T5866] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.627083][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.5.635'.
[  392.600892][   T30] audit: type=1326 audit(1754528550.975:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8935 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd803b8ebe9 code=0x7ffc0000
[  393.716251][ T8946] ip6gre1: entered allmulticast mode
[  393.728608][   T30] audit: type=1326 audit(1754528551.145:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8935 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd803b8ebe9 code=0x7ffc0000
[  393.760769][   T30] audit: type=1326 audit(1754528551.145:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8935 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd803b8ebe9 code=0x7ffc0000
[  393.943905][   T30] audit: type=1326 audit(1754528551.145:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8935 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd803b8ebe9 code=0x7ffc0000
[  393.969698][   T30] audit: type=1326 audit(1754528551.155:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8935 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd803b8ebe9 code=0x7ffc0000
[  393.993463][   T30] audit: type=1326 audit(1754528551.155:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8935 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd803b8ebe9 code=0x7ffc0000
[  394.052796][   T30] audit: type=1326 audit(1754528551.155:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8935 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd803b8ebe9 code=0x7ffc0000
[  394.104626][ T8956] loop5: detected capacity change from 0 to 16
[  394.111566][ T6972] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  394.172026][   T30] audit: type=1326 audit(1754528551.155:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8935 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd803b8ebe9 code=0x7ffc0000
[  394.231253][ T8956] erofs (device loop5): mounted with root inode @ nid 36.
[  394.246537][ T8883] ------------[ cut here ]------------
[  394.248536][   T30] audit: type=1326 audit(1754528552.135:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8935 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd803b8ebe9 code=0x7ffc0000
[  394.252314][ T8883] kernel BUG at ./include/linux/pagemap.h:1404!
[  394.288498][ T8883] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  394.294895][ T8883] CPU: 1 UID: 0 PID: 8883 Comm: syz.3.622 Not tainted 6.16.0-next-20250806-syzkaller #0 PREEMPT(full) 
[  394.305924][ T8883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  394.316247][ T8883] RIP: 0010:mpage_readahead+0x637/0x650
[  394.321992][ T8883] Code: c6 20 f7 99 8b e8 19 45 e1 fe 90 0f 0b e8 71 fb 78 ff 4c 89 ef 48 c7 c6 80 f7 99 8b e8 02 45 e1 fe 90 0f 0b e8 5a fb 78 ff 90 <0f> 0b e8 52 fb 78 ff 90 0f 0b 66 66 66 66 66 66 2e 0f 1f 84 00 00
[  394.341792][ T8883] RSP: 0018:ffffc9000398ef60 EFLAGS: 00010202
[  394.347878][ T8883] RAX: ffffffff8246b716 RBX: 0000000000000001 RCX: ffff8880217a5a00
[  394.355931][ T8883] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000002
[  394.364071][ T8883] RBP: ffffc9000398f150 R08: 000000000001ffff R09: 0000000000400000
[  394.372052][ T8883] R10: 0000000000400008 R11: fffff940002bdbe1 R12: dffffc0000000000
[  394.380017][ T8883] R13: ffffc9000398f3c8 R14: 0000000000000004 R15: ffffc9000398f3e0
[  394.387999][ T8883] FS:  00007f50bfc0a6c0(0000) GS:ffff888125d24000(0000) knlGS:0000000000000000
[  394.396963][ T8883] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  394.403576][ T8883] CR2: 00007f25fd772020 CR3: 00000000243f0000 CR4: 00000000003526f0
[  394.411764][ T8883] Call Trace:
[  394.415115][ T8883]  <TASK>
[  394.418059][ T8883]  ? __pfx_mpage_readahead+0x10/0x10
[  394.423552][ T8883]  ? lru_add+0xa2f/0xd80
[  394.427851][ T8883]  ? __pfx_blkdev_get_block+0x10/0x10
[  394.433249][ T8883]  ? blk_start_plug+0x6f/0x1b0
[  394.438139][ T8883]  read_pages+0x17a/0x580
[  394.442481][ T8883]  ? xa_load+0x60/0x210
[  394.446650][ T8883]  ? __pfx_read_pages+0x10/0x10
[  394.451509][ T8883]  ? xa_load+0x1ea/0x210
[  394.455763][ T8883]  page_cache_ra_unbounded+0x346/0x7b0
[  394.461414][ T8883]  do_sync_mmap_readahead+0x3aa/0x7a0
[  394.466814][ T8883]  ? __pfx_do_sync_mmap_readahead+0x10/0x10
[  394.472733][ T8883]  ? count_memcg_event_mm+0x1d/0x250
[  394.478031][ T8883]  ? count_memcg_event_mm+0x1d/0x250
[  394.483419][ T8883]  filemap_fault+0x62c/0x1200
[  394.488203][ T8883]  ? __pfx_filemap_fault+0x10/0x10
[  394.493318][ T8883]  ? __pfx_filemap_map_pages+0x10/0x10
[  394.498817][ T8883]  ? __handle_mm_fault+0x27b7/0x5440
[  394.504120][ T8883]  __do_fault+0x138/0x390
[  394.508464][ T8883]  __handle_mm_fault+0x3611/0x5440
[  394.513587][ T8883]  ? __pfx___handle_mm_fault+0x10/0x10
[  394.519059][ T8883]  ? find_vma+0xe7/0x160
[  394.523310][ T8883]  ? __pfx_find_vma+0x10/0x10
[  394.528100][ T8883]  handle_mm_fault+0x40a/0x8e0
[  394.532883][ T8883]  do_user_addr_fault+0x764/0x1390
[  394.538015][ T8883]  exc_page_fault+0x76/0xf0
[  394.542531][ T8883]  asm_exc_page_fault+0x26/0x30
[  394.547401][ T8883] RIP: 0010:rep_movs_alternative+0x30/0x90
[  394.553217][ T8883] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08
[  394.572841][ T8883] RSP: 0018:ffffc9000398fa18 EFLAGS: 00050206
[  394.579104][ T8883] RAX: 00007ffffffff001 RBX: 0000000000000038 RCX: 0000000000000038
[  394.587082][ T8883] RDX: 0000000000000001 RSI: 0000200000287000 RDI: ffffc9000398faa0
[  394.595059][ T8883] RBP: ffffc9000398fc30 R08: ffffc9000398fad7 R09: 1ffff92000731f5a
[  394.603038][ T8883] R10: dffffc0000000000 R11: fffff52000731f5b R12: 0000000000000002
[  394.611013][ T8883] R13: dffffc0000000000 R14: ffffc9000398faa0 R15: 0000200000287000
[  394.619006][ T8883]  _copy_from_user+0x7a/0xb0
[  394.623613][ T8883]  ___sys_recvmsg+0x12e/0x510
[  394.628295][ T8883]  ? __pfx____sys_recvmsg+0x10/0x10
[  394.633509][ T8883]  ? __might_fault+0xb0/0x130
[  394.638196][ T8883]  do_recvmmsg+0x307/0x770
[  394.642743][ T8883]  ? __pfx_do_recvmmsg+0x10/0x10
[  394.647692][ T8883]  ? count_memcg_event_mm+0x21/0x260
[  394.652980][ T8883]  ? count_memcg_event_mm+0x21/0x260
[  394.658283][ T8883]  __x64_sys_recvmmsg+0x190/0x240
[  394.663403][ T8883]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  394.668959][ T8883]  ? do_syscall_64+0xbe/0x3b0
[  394.673647][ T8883]  do_syscall_64+0xfa/0x3b0
[  394.678157][ T8883]  ? lockdep_hardirqs_on+0x9c/0x150
[  394.683545][ T8883]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.689874][ T8883]  ? clear_bhb_loop+0x60/0xb0
[  394.694558][ T8883]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.700467][ T8883] RIP: 0033:0x7f50bed8ebe9
[  394.704909][ T8883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  394.724612][ T8883] RSP: 002b:00007f50bfc0a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  394.733188][ T8883] RAX: ffffffffffffffda RBX: 00007f50befb6090 RCX: 00007f50bed8ebe9
[  394.741181][ T8883] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004
[  394.749175][ T8883] RBP: 00007f50bee11e19 R08: 0000000000000000 R09: 0000000000000000
[  394.757170][ T8883] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  394.765162][ T8883] R13: 00007f50befb6128 R14: 00007f50befb6090 R15: 00007ffd3d2900f8
[  394.773165][ T8883]  </TASK>
[  394.776194][ T8883] Modules linked in:
[  394.782137][ T8883] ---[ end trace 0000000000000000 ]---
[  394.851890][ T5871] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  395.309362][ T5871] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  395.316548][ T6972] usb 2-1: device descriptor read/all, error -71
[  395.318052][ T8883] RIP: 0010:mpage_readahead+0x637/0x650
[  395.330053][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  395.342333][ T8883] Code: c6 20 f7 99 8b e8 19 45 e1 fe 90 0f 0b e8 71 fb 78 ff 4c 89 ef 48 c7 c6 80 f7 99 8b e8 02 45 e1 fe 90 0f 0b e8 5a fb 78 ff 90 <0f> 0b e8 52 fb 78 ff 90 0f 0b 66 66 66 66 66 66 2e 0f 1f 84 00 00
[  395.369245][ T5871] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  395.378793][ T5871] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  395.393272][ T5871] usb 5-1: Manufacturer: syz
[  395.407868][ T8883] RSP: 0018:ffffc9000398ef60 EFLAGS: 00010202
[  395.414452][ T8883] RAX: ffffffff8246b716 RBX: 0000000000000001 RCX: ffff8880217a5a00
[  395.425206][ T8883] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000002
[  395.433585][ T8883] RBP: ffffc9000398f150 R08: 000000000001ffff R09: 0000000000400000
[  395.435474][ T5871] usb 5-1: config 0 descriptor??
[  395.457355][ T8883] R10: 0000000000400008 R11: fffff940002bdbe1 R12: dffffc0000000000
[  395.467052][ T8883] R13: ffffc9000398f3c8 R14: 0000000000000004 R15: ffffc9000398f3e0
[  395.484452][ T8883] FS:  00007f50bfc0a6c0(0000) GS:ffff888125d24000(0000) knlGS:0000000000000000
[  395.519825][ T8883] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  395.548706][ T8883] CR2: 00007ff866f74440 CR3: 00000000243f0000 CR4: 00000000003526f0
[  395.562787][ T8883] Kernel panic - not syncing: Fatal exception
[  395.569351][ T8883] Kernel Offset: disabled
[  395.573678][ T8883] Rebooting in 86400 seconds..