last executing test programs:

11.195599985s ago: executing program 4 (id=1372):
timer_create(0x0, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0xa0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80084)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0})

9.872603761s ago: executing program 0 (id=1373):
r0 = socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="63429860415b7ac7", 0x8)
r4 = accept(r0, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0x18}], 0x1}], 0x1, 0x0)
recvmsg(r4, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2, 0x0, 0x0, 0x1000000}, 0x0)

8.097450123s ago: executing program 3 (id=1377):
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1)

7.859477983s ago: executing program 1 (id=1379):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000000c0)={[{@filestreams}, {@usrquota}, {@noalign}, {@pquota}, {@inode32}, {@discard}, {@prjquota}, {@usrquota}, {@gquota}, {@nolargeio}]}, 0x1, 0x975c, &(0x7f000001c600)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080))
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

7.040645317s ago: executing program 3 (id=1380):
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x14, 0x0, 0xa00, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)

6.624183999s ago: executing program 2 (id=1382):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000))

5.746218382s ago: executing program 0 (id=1383):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000))
ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null]})

5.74012258s ago: executing program 1 (id=1384):
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}, 0x40000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffe, 0x80002)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r3, 0x6036}], 0x1, 0x0, 0x0, 0xfffffffffffffc92)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

5.704841455s ago: executing program 2 (id=1385):
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f00000002c0)='\\ S', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50)
r1 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4, 0x1})
io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0)

5.150326271s ago: executing program 0 (id=1386):
r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0x2b, 0x1, 0x0)
close(r4)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000040)={0x1, {"40a568bf607c2094e9c6a0c0f550f7f8", "241e6a0b37e28869f574458eb6417d55", "a34d3bcc4817356e5c266b26fe399bde"}, 0x7, 0x4})

5.149681879s ago: executing program 3 (id=1387):
r0 = socket$packet(0x11, 0x2, 0x300)
syz_open_dev$I2C(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xfd9, 0x4000000)
setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000080), 0x4)

4.645722435s ago: executing program 4 (id=1388):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000777a078afbd825c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db2100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc2351270000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
dup2(r4, r2)
splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0)

3.760929214s ago: executing program 2 (id=1389):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, 0x0)
r3 = socket$inet(0x2, 0x1, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x20000080)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)

3.60110702s ago: executing program 3 (id=1390):
r0 = userfaultfd(0x801)
unshare(0x20000600)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000000440), 0x0, 0x2000000022, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x3818, 0x8)
sendmsg$key(r1, 0x0, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)}, 0x40800)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f00006bb000/0x3000)=nil, 0x3000}})

3.536562054s ago: executing program 0 (id=1391):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$tcp_congestion(r1, &(0x7f0000000180)='nv\x00', 0x3)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000777a078afbd825c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db2100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc2351270000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
dup2(r4, r3)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

3.536054419s ago: executing program 1 (id=1392):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000500)={[{@numtail}, {@fat=@flush}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@numtail}, {@shortname_lower}, {@shortname_lower}, {@utf8no}, {@fat=@quiet}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@rodir}, {@shortname_winnt}]}, 0x1, 0x21d, &(0x7f0000000240)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
syz_open_dev$ttys(0xc, 0x2, 0x1)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x1c0, 0x12, 0x60a, 0x1c0, 0x202, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @private}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0)

3.29606992s ago: executing program 4 (id=1393):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$tcp_congestion(0xffffff9c, &(0x7f0000002000), 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
epoll_create1(0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r1, 0xffffffffffffffff, 0x0)

2.752136762s ago: executing program 3 (id=1394):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a)
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x810)
fchdir(0xffffffffffffffff)
mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file2\x00', 0x181)

2.572115265s ago: executing program 2 (id=1395):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000))

2.156977635s ago: executing program 1 (id=1396):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000))
ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null]})

2.140159814s ago: executing program 4 (id=1397):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x86}, 0x69}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2)
close(r1)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200dc0f14000e00003c0ff000000000ff840000000200000003125ce882cbf490d908f1523f00", 0x29}, {&(0x7f0000002680)="76e69c0141", 0x5}], 0x2}, 0x4005)

2.089860048s ago: executing program 0 (id=1398):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)

2.040009427s ago: executing program 2 (id=1399):
socket$netlink(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket(0x28, 0x5, 0x0)
socket(0x28, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x20000015)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x121e, &(0x7f0000001b00)="$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")
lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)

1.253131622s ago: executing program 1 (id=1400):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d52163448412ba8", 0x9}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035", 0x47}], 0x2}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)

1.148323192s ago: executing program 4 (id=1401):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x50)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4)
listen(r1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r1}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r0, &(0x7f00000008c0)}, 0x20)

232.595228ms ago: executing program 2 (id=1402):
r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0x2b, 0x1, 0x0)
close(r4)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000040)={0x1, {"40a568bf607c2094e9c6a0c0f550f7f8", "241e6a0b37e28869f574458eb6417d55", "a34d3bcc4817356e5c266b26fe399bde"}, 0x7, 0x4})

228.688659ms ago: executing program 3 (id=1403):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
write$tcp_congestion(r1, &(0x7f0000000180)='nv\x00', 0x3)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000777a078afbd825c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db2100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc2351270000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
dup2(r4, 0xffffffffffffffff)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

224.359994ms ago: executing program 0 (id=1412):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@nodelalloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@data_err_ignore}, {@dioread_lock}]}, 0x3, 0x44d, &(0x7f0000001080)="$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")
syz_mount_image$nilfs2(&(0x7f0000000480), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x1, 0xeec, &(0x7f0000001e40)="$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")
syz_open_dev$video4linux(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000180)={[{@test_dummy_encryption_v1}, {@bsdgroups}]}, 0x1, 0x24d, &(0x7f0000000840)="$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")
pivot_root(0x0, &(0x7f0000000180)='./file0\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

223.696966ms ago: executing program 1 (id=1404):
socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c)

0s ago: executing program 4 (id=1405):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x4, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TCSETS(r3, 0x4b72, &(0x7f0000000240)={0x1, 0x80084, 0x3, 0xe, 0x8e, "0060730000efa489040401000000000000f600"})

kernel console output (not intermixed with test programs):

uous mode
[  177.508849][ T7046] syzkaller0: entered allmulticast mode
[  177.515956][ T5900] lec:lec_start_xmit: lec0:No lecd attached
[  180.674626][ T7086] loop3: detected capacity change from 0 to 256
[  180.709515][ T7086] FAT-fs (loop3): Directory bread(block 64) failed
[  180.716240][ T7086] FAT-fs (loop3): Directory bread(block 65) failed
[  180.722777][ T7086] FAT-fs (loop3): Directory bread(block 66) failed
[  180.729319][ T7086] FAT-fs (loop3): Directory bread(block 67) failed
[  180.735890][ T7086] FAT-fs (loop3): Directory bread(block 68) failed
[  180.742385][ T7086] FAT-fs (loop3): Directory bread(block 69) failed
[  180.748964][ T7086] FAT-fs (loop3): Directory bread(block 70) failed
[  180.756393][ T7086] FAT-fs (loop3): Directory bread(block 71) failed
[  180.762973][ T7086] FAT-fs (loop3): Directory bread(block 72) failed
[  180.770006][ T7086] FAT-fs (loop3): Directory bread(block 73) failed
[  181.620934][ T7106] netlink: 1276 bytes leftover after parsing attributes in process `syz.2.296'.
[  182.586892][ T7119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.299'.
[  182.781173][ T7122] Bluetooth: MGMT ver 1.23
[  182.794571][ T7120] vlan2: entered allmulticast mode
[  182.811577][ T7120] bridge1: entered allmulticast mode
[  182.874906][ T7119] bridge1: port 1(veth5) entered blocking state
[  182.885275][ T7119] bridge1: port 1(veth5) entered disabled state
[  182.902830][ T7119] veth5: entered allmulticast mode
[  182.919792][ T7119] veth5: entered promiscuous mode
[  183.193155][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5680 ms
[  183.201428][    C1] lec:lec_tx_timeout: lec0
[  183.207129][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  184.123067][ T5955] libceph: connect (1)[c::]:6789 error -101
[  184.130763][ T5955] libceph: mon0 (1)[c::]:6789 connect error
[  184.162403][ T5955] libceph: connect (1)[c::]:6789 error -101
[  184.179513][ T5955] libceph: mon0 (1)[c::]:6789 connect error
[  184.381892][ T7143] netlink: 'syz.1.305': attribute type 39 has an invalid length.
[  184.410731][ T7136] ceph: No mds server is up or the cluster is laggy
[  184.454183][ T5955] libceph: connect (1)[c::]:6789 error -101
[  184.474430][ T5955] libceph: mon0 (1)[c::]:6789 connect error
[  186.717198][ T7163] loop0: detected capacity change from 0 to 16
[  187.195204][ T7163] erofs (device loop0): invalid ishare xattr prefix id 0
[  187.251205][ T7169] loop2: detected capacity change from 0 to 256
[  187.258306][ T7163] sch_fq: defrate 0 ignored.
[  187.305606][ T7169] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  187.365540][ T7169] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  187.787709][ T7175] kAFS: unable to lookup cell '('
[  187.817281][ T7169] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  187.837040][ T7176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  187.869949][ T7169] exFAT-fs (loop2): failed to load alloc-bitmap
[  187.920169][ T7169] exFAT-fs (loop2): failed to recognize exfat type
[  188.002490][ T7171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  188.694339][ T7181] syzkaller0: entered promiscuous mode
[  188.702452][ T7181] syzkaller0: entered allmulticast mode
[  188.954985][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms
[  188.963033][    C1] lec:lec_tx_timeout: lec0
[  188.973229][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  190.209815][ T7206] syzkaller0: entered promiscuous mode
[  190.229904][ T7206] syzkaller0: entered allmulticast mode
[  191.067287][ T7222] bridge0: entered promiscuous mode
[  191.079492][ T7222] macsec1: entered promiscuous mode
[  191.573206][ T5899] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  192.483417][ T1561] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  192.748575][ T1561] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  192.761869][ T7245] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  192.781386][ T1561] usb 3-1: config 0 interface 0 has no altsetting 0
[  192.800840][ T1561] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  192.824250][ T1561] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  192.852941][ T1561] usb 3-1: Product: syz
[  192.861857][ T1561] usb 3-1: Manufacturer: syz
[  192.873164][ T1561] usb 3-1: SerialNumber: syz
[  192.898746][ T1561] usb 3-1: config 0 descriptor??
[  192.942024][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  192.955160][ T5899] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[  192.973597][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.991718][ T5899] usb 4-1: Product: syz
[  192.996651][ T5899] usb 4-1: Manufacturer: syz
[  193.003360][ T5899] usb 4-1: SerialNumber: syz
[  193.031173][ T1561] usb 3-1: selecting invalid altsetting 0
[  194.100191][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  194.106681][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  194.108276][ T5991] usb 2-1: new low-speed USB device number 3 using dummy_hcd
[  194.149999][ T7261] IPv6: NLM_F_REPLACE set, but no existing node found!
[  194.514685][ T5899] usb 4-1: config 0 descriptor??
[  194.649373][ T5899] usb 4-1: can't set config #0, error -71
[  194.677316][ T5991] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  194.723149][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms
[  194.731167][    C1] lec:lec_tx_timeout: lec0
[  194.735795][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  195.197575][ T5991] usb 2-1: config 0 has no interface number 0
[  195.223879][ T5991] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  195.230535][ T5899] usb 4-1: USB disconnect, device number 3
[  195.284992][ T5991] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  195.331448][ T5991] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  195.431194][ T7276] loop3: detected capacity change from 0 to 8
[  195.456747][ T5991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.561472][ T5991] usb 2-1: config 0 descriptor??
[  195.581964][ T7276] SQUASHFS error: xz decompression failed, data probably corrupt
[  195.612374][ T7245] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  195.633603][ T7276] SQUASHFS error: Failed to read block 0x108: -5
[  195.659658][ T7276] SQUASHFS error: Unable to read metadata cache entry [106]
[  195.710804][ T7276] SQUASHFS error: Unable to read inode 0x11f
[  195.771182][ T7282] loop0: detected capacity change from 0 to 512
[  196.153773][ T7262] Bluetooth: hci0: command 0x0406 tx timeout
[  196.159872][ T7262] Bluetooth: hci1: command 0x0406 tx timeout
[  196.166351][ T7262] Bluetooth: hci2: command 0x0406 tx timeout
[  196.172359][ T7262] Bluetooth: hci3: command 0x0406 tx timeout
[  196.190027][ T7262] Bluetooth: hci4: command 0x0406 tx timeout
[  196.231759][ T7282] EXT4-fs (loop0): 1 truncate cleaned up
[  196.388081][ T7282] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.640780][   T29] audit: type=1800 audit(1773834627.022:824): pid=7282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.339" name="file1" dev="loop0" ino=15 res=0 errno=0
[  196.752431][ T5991] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  196.997991][   T29] audit: type=1800 audit(1773834627.102:825): pid=7288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.339" name="file1" dev="loop0" ino=15 res=0 errno=0
[  197.186024][ T5991] usb 2-1: USB disconnect, device number 3
[  197.222744][ T1561] usb 3-1: USB disconnect, device number 2
[  197.468853][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  197.525071][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.774584][ T5991] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  197.840650][ T7318] xt_hashlimit: size too large, truncated to 1048576
[  197.875481][ T7321] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size.
[  197.893040][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.345'.
[  197.945262][ T5991] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  197.967317][ T5991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.994452][ T5991] usb 2-1: config 0 descriptor??
[  198.018951][ T5991] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  199.083154][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  199.103156][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  199.213160][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  199.743182][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  199.751208][    C1] lec:lec_tx_timeout: lec0
[  199.763221][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  201.323371][ T5991] gspca_stv06xx: I2C: Read error writing address: -71
[  201.387191][ T5991] usb 2-1: USB disconnect, device number 4
[  202.557336][ T7367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.360'.
[  204.773273][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  204.781342][    C1] lec:lec_tx_timeout: lec0
[  204.786156][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  205.419654][ T7406] loop0: detected capacity change from 0 to 8
[  205.470792][ T7406] SQUASHFS error: xz decompression failed, data probably corrupt
[  205.478841][ T7406] SQUASHFS error: Failed to read block 0x108: -5
[  205.485310][ T7406] SQUASHFS error: Unable to read metadata cache entry [106]
[  205.492668][ T7406] SQUASHFS error: Unable to read inode 0x11f
[  206.083898][ T7411] syz.2.368 uses obsolete (PF_INET,SOCK_PACKET)
[  206.132875][ T7413] loop0: detected capacity change from 0 to 128
[  207.191215][   T29] audit: type=1326 audit(1773834637.712:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973219c799 code=0x7ffc0000
[  207.213866][   T29] audit: type=1326 audit(1773834637.742:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973219c799 code=0x7ffc0000
[  207.275343][   T29] audit: type=1326 audit(1773834637.772:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973219c799 code=0x7ffc0000
[  207.346559][   T29] audit: type=1326 audit(1773834637.772:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f973219c799 code=0x7ffc0000
[  207.437154][   T29] audit: type=1326 audit(1773834637.772:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f973219c502 code=0x7ffc0000
[  207.471872][ T7432] syzkaller0: entered promiscuous mode
[  207.484800][ T7432] syzkaller0: entered allmulticast mode
[  207.506472][   T29] audit: type=1326 audit(1773834637.772:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f973215cfce code=0x7ffc0000
[  207.553065][   T29] audit: type=1326 audit(1773834637.772:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973219c799 code=0x7ffc0000
[  207.581303][   T29] audit: type=1326 audit(1773834637.772:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f973219c5c7 code=0x7ffc0000
[  207.611817][   T29] audit: type=1326 audit(1773834637.772:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f973215cfce code=0x7ffc0000
[  207.663245][   T29] audit: type=1326 audit(1773834637.772:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f973215cfce code=0x7ffc0000
[  208.060518][ T7444] 8021q: adding VLAN 0 to HW filter on device bond1
[  208.596820][ T7440] bond1: (slave ip6gretap1): making interface the new active one
[  208.613530][ T7440] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  209.793178][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  209.801234][    C1] lec:lec_tx_timeout: lec0
[  209.813275][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  213.295696][ T7519] gfs2: gfs2 mount does not exist
[  213.845483][ T7521] loop0: detected capacity change from 0 to 512
[  213.981378][ T7521] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.401: inode has both inline data and extents flags
[  214.017169][ T7521] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  214.019865][ T7521] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.401: couldn't read orphan inode 15 (err -117)
[  214.029115][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  214.029185][    C0] EXT4-fs (loop0): initial error at time 1773834644: ext4_orphan_get:1391: inode 15
[  214.029215][    C0] EXT4-fs (loop0): last error at time 1773834644: ext4_orphan_get:1391: inode 15
[  214.187360][ T7521] loop0: lost filesystem error report for type 5 error -117
[  214.188538][ T7521] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.823288][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  214.831340][    C1] lec:lec_tx_timeout: lec0
[  214.843236][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  214.892169][ T5955] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  215.345064][ T5955] usb 2-1: Using ep0 maxpacket: 16
[  215.536887][ T5955] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  215.547237][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  215.558433][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  215.568427][ T5955] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  215.580947][ T5955] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  215.584912][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.595978][ T5955] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  215.623700][ T5955] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  215.644171][ T5955] usb 2-1: Manufacturer: syz
[  215.651467][ T5955] usb 2-1: config 0 descriptor??
[  217.194364][ T5955] rc_core: IR keymap rc-hauppauge not found
[  217.323368][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  218.395372][ T5955] Registered IR keymap rc-empty
[  218.431859][ T5955] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  218.503353][ T5955] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  218.555036][ T5955] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  218.576535][ T7553] syzkaller0: entered promiscuous mode
[  218.613364][ T7553] syzkaller0: entered allmulticast mode
[  218.689403][ T5955] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6
[  218.726339][ T5955] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  218.742827][ T5843] Bluetooth: hci4: unexpected event for opcode 0x202d
[  219.319160][ T5955] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  219.348232][ T7558] loop1: detected capacity change from 0 to 2048
[  219.373248][ T5955] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  219.403847][ T5955] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  219.497343][ T5955] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  219.511067][ T7558] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #2: comm syz.1.412: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5)
[  219.523289][ T5955] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  219.554620][ T5955] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  219.573480][ T5955] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  219.604625][ T5955] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  219.618259][ T1561] IPVS: starting estimator thread 0...
[  219.634048][ T5955] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  219.646452][ T7558] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  219.646963][ T7558] EXT4-fs (loop1): get root inode failed
[  219.656043][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  219.656062][    C0] EXT4-fs (loop1): initial error at time 1773834650: ext4_ext_check_inode:521: inode 2
[  219.656084][    C0] EXT4-fs (loop1): last error at time 1773834650: ext4_ext_check_inode:521: inode 2
[  219.665226][ T5955] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  219.668894][ T5843] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  219.709376][ T7558] EXT4-fs (loop1): mount failed
[  219.714072][ T5843] CPU: 0 UID: 0 PID: 5843 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) 
[  219.714094][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  219.714104][ T5843] Workqueue: hci0 hci_rx_work
[  219.714137][ T5843] Call Trace:
[  219.714147][ T5843]  <TASK>
[  219.714155][ T5843]  dump_stack_lvl+0xe8/0x150
[  219.714183][ T5843]  sysfs_create_dir_ns+0x271/0x2a0
[  219.714211][ T5843]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  219.714245][ T5843]  ? do_raw_spin_unlock+0xf5/0x210
[  219.714270][ T5843]  kobject_add_internal+0x62b/0xd00
[  219.714300][ T5843]  kobject_add+0x163/0x240
[  219.714325][ T5843]  ? __pfx_kobject_add+0x10/0x10
[  219.714346][ T5843]  ? _raw_spin_unlock+0x28/0x50
[  219.714367][ T5843]  ? get_device_parent+0x366/0x3a0
[  219.714392][ T5843]  device_add+0x408/0xb70
[  219.714416][ T5843]  hci_conn_add_sysfs+0xd5/0x210
[  219.714437][ T5843]  le_conn_complete_evt+0xf1d/0x1430
[  219.714469][ T5843]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  219.714489][ T5843]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  219.714511][ T5843]  ? __pfx___mutex_lock+0x10/0x10
[  219.714531][ T5843]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  219.714549][ T5843]  ? skb_pull_data+0xfb/0x200
[  219.714577][ T5843]  hci_le_conn_complete_evt+0x187/0x470
[  219.714604][ T5843]  hci_event_packet+0x7af/0x12c0
[  219.714629][ T5843]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  219.714649][ T5843]  ? __pfx_hci_event_packet+0x10/0x10
[  219.714673][ T5843]  ? kcov_remote_start+0x49a/0x7a0
[  219.714694][ T5843]  ? hci_send_to_monitor+0xe2/0x590
[  219.714719][ T5843]  hci_rx_work+0x3ee/0x1040
[  219.714747][ T5843]  ? process_one_work+0x8bb/0x1780
[  219.714769][ T5843]  process_one_work+0x9ab/0x1780
[  219.714811][ T5843]  ? __pfx_process_one_work+0x10/0x10
[  219.714832][ T5843]  ? do_raw_spin_lock+0x12b/0x2f0
[  219.714867][ T5843]  worker_thread+0xba8/0x11e0
[  219.714891][ T5843]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  219.714909][ T5843]  ? __kthread_parkme+0x7a/0x1f0
[  219.714926][ T5843]  ? __kthread_parkme+0x19c/0x1f0
[  219.714948][ T5843]  kthread+0x388/0x470
[  219.714967][ T5843]  ? __pfx_worker_thread+0x10/0x10
[  219.714980][ T5843]  ? __pfx_kthread+0x10/0x10
[  219.715000][ T5843]  ret_from_fork+0x51e/0xb90
[  219.715024][ T5843]  ? __pfx_ret_from_fork+0x10/0x10
[  219.715044][ T5843]  ? __switch_to+0xc7d/0x1450
[  219.715068][ T5843]  ? __pfx_kthread+0x10/0x10
[  219.715087][ T5843]  ret_from_fork_asm+0x1a/0x30
[  219.715119][ T5843]  </TASK>
[  219.715146][ T5843] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  219.853169][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  219.858938][ T5843] Bluetooth: hci0: failed to register connection device
[  219.861690][    C1] lec:lec_tx_timeout: lec0
[  219.992190][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  220.010105][ T5955] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  220.043502][ T5955] usb 2-1: USB disconnect, device number 5
[  220.055487][ T7567] IPVS: using max 32 ests per chain, 76800 per kthread
[  220.475173][ T7581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.418'.
[  220.759972][ T7585] loop1: detected capacity change from 0 to 1764
[  221.724801][ T7579] loop0: detected capacity change from 0 to 32768
[  221.832698][ T7579] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.419 (7579)
[  221.869669][ T7609] macvlan2: entered promiscuous mode
[  222.169836][ T7620] loop1: detected capacity change from 0 to 4096
[  222.272256][ T7579] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  222.494421][ T7620] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.656537][ T7579] BTRFS info (device loop0): using crc32c checksum algorithm
[  222.965142][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.126393][ T7648] netlink: 156 bytes leftover after parsing attributes in process `syz.4.431'.
[  223.147487][ T7646] tipc: Started in network mode
[  223.179993][ T7646] tipc: Node identity e60aec2da277, cluster identity 4711
[  223.204558][ T7646] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  223.295551][ T7655] syzkaller0: entered promiscuous mode
[  223.355883][ T7655] syzkaller0: entered allmulticast mode
[  223.516959][ T7579] BTRFS info (device loop0): enabling ssd optimizations
[  223.607647][ T7579] BTRFS info (device loop0): turning on flush-on-commit
[  223.721302][ T7579] BTRFS info (device loop0): enabling free space tree
[  223.848740][ T7579] BTRFS info (device loop0): enabling auto defrag
[  223.901674][ T7659] fuse: fd is not a fuse device
[  223.918815][ T7579] BTRFS info (device loop0): use lzo compression, level 1
[  224.027704][ T7579] BTRFS info (device loop0): max_inline set to 4096
[  224.136119][ T7660] tipc: Resetting bearer <eth:syzkaller0>
[  224.239320][ T7645] tipc: Resetting bearer <eth:syzkaller0>
[  224.298989][ T5841] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  224.875795][ T7645] tipc: Disabling bearer <eth:syzkaller0>
[  225.080342][ T5928] tipc: Node number set to 1149103149
[  225.151774][ T7671] netlink: 44 bytes leftover after parsing attributes in process `syz.3.438'.
[  226.073162][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6080 ms
[  226.081180][    C1] lec:lec_tx_timeout: lec0
[  226.093226][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  226.249803][ T5858] Bluetooth: hci0: command 0x0406 tx timeout
[  227.202809][ T7690] loop1: detected capacity change from 0 to 512
[  227.220521][ T7690] EXT4-fs: Ignoring removed nobh option
[  227.240131][ T7690] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  227.399840][ T7690] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  227.974420][ T7690] EXT4-fs (loop1): 1 truncate cleaned up
[  228.001757][ T7690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  228.152888][   T29] kauditd_printk_skb: 88 callbacks suppressed
[  228.152904][   T29] audit: type=1326 audit(1773834658.672:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7700 comm="syz.2.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba3d79c799 code=0x7ffc0000
[  228.266909][   T29] audit: type=1326 audit(1773834658.702:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7700 comm="syz.2.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba3d79c799 code=0x7ffc0000
[  228.348200][   T29] audit: type=1326 audit(1773834658.702:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7700 comm="syz.2.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fba3d79c799 code=0x7ffc0000
[  228.394957][   T29] audit: type=1326 audit(1773834658.702:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7700 comm="syz.2.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba3d79c799 code=0x7ffc0000
[  228.442824][   T29] audit: type=1326 audit(1773834658.712:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7700 comm="syz.2.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fba3d79c799 code=0x7ffc0000
[  228.532357][   T29] audit: type=1326 audit(1773834658.712:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7700 comm="syz.2.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba3d79c799 code=0x7ffc0000
[  228.575945][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.588952][   T29] audit: type=1326 audit(1773834658.712:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7700 comm="syz.2.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fba3d79c799 code=0x7ffc0000
[  228.618625][   T29] audit: type=1326 audit(1773834658.712:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7700 comm="syz.2.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba3d79c799 code=0x7ffc0000
[  228.642120][   T29] audit: type=1326 audit(1773834658.712:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7700 comm="syz.2.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fba3d79c799 code=0x7ffc0000
[  228.674489][   T29] audit: type=1326 audit(1773834658.772:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7700 comm="syz.2.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba3d79c799 code=0x7ffc0000
[  228.915184][ T7713] netlink: 'syz.2.449': attribute type 2 has an invalid length.
[  228.932617][ T7724] syzkaller0: entered promiscuous mode
[  228.960717][ T7724] syzkaller0: entered allmulticast mode
[  231.833148][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms
[  231.841193][    C1] lec:lec_tx_timeout: lec0
[  231.845907][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  233.563557][ T7787] syzkaller0: entered promiscuous mode
[  233.574737][ T7787] syzkaller0: entered allmulticast mode
[  233.639681][ T7787] tipc: Started in network mode
[  233.644990][ T7787] tipc: Node identity 924682b82715, cluster identity 4711
[  233.657437][ T7787] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  233.668058][ T7786] tipc: Resetting bearer <eth:syzkaller0>
[  233.881573][   T29] kauditd_printk_skb: 20 callbacks suppressed
[  233.881620][   T29] audit: type=1800 audit(1773834664.402:954): pid=7798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.472" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  234.844459][ T7786] tipc: Disabling bearer <eth:syzkaller0>
[  234.965292][ T5899] tipc: Node number set to 3042149048
[  236.305014][ T7823] syzkaller0: entered promiscuous mode
[  236.310814][ T7823] syzkaller0: entered allmulticast mode
[  236.636009][ T7823] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  236.670375][ T7822] tipc: Resetting bearer <eth:syzkaller0>
[  236.731438][ T7822] tipc: Disabling bearer <eth:syzkaller0>
[  236.853160][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  236.861174][    C1] lec:lec_tx_timeout: lec0
[  236.865788][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  238.863688][ T7859] [U] 
[  238.866683][ T7859] [U] K{‘
[  238.870679][ T7859] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ
[  238.886906][ T7859] [U] TžØ–/,�~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1�Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ¾ª(È5ˆOBܤ‡ÍƒJÖ
[  238.906467][ T7859] [U] ±K\&—}6£6œXÎHX�¥Ôµ„ÌÞ.`¸A“$Û40|϶¿�9°ØÞ¨„¯ÀÏU‚Ò4�ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’4”ß
[  238.938987][ T7859] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØI�N¨™[Z(•„C|TË]Z{�Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØ�SH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž�÷ÉWUH„FN—Ž�ÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à     ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿C�Õ³žV¦=�‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI
˜¢œAÏÌ6-ÚD�ÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯
OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ
[  238.978714][ T7859] [U]         +�W‰G?]£Ó'A:    »Ú)Õ
ÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:�^0À�TÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ×;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼�Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿Bĵٜ NÓY"VI2ÛÌ
[  239.006461][ T7859] [U] ܾ˜4B`Ë—HÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ�°¶ºQÎÙ
 ŸÇ3‹ÆQ¯ÔN^HP*½Ü$   µ.Î7YÓ±œ2³
[  239.022716][ T7859] [U] ½?�©ßHÜÄ*ÙÁ”Î3Í�7ÜÉ�¾^#Q�"0~‡‚Ð(ÉOÏXLŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ
[  239.040827][ T7859] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“�®ŸŸÑ�2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ�„RTÔ¶ŒBÚ[+/<<R�B�ÊÄÕ|ФEŽžÑÛ –V96#ÛÚÑͤʦJºUº%
S851ƒ�ÞÒ©S�P±¨\£ƒ?Qª|L�´QXµ0ÂKÔ1ORÉ´2¡½|ÖÜDÖFÌ¿»Ù�ÚË2Þ”–¨×0ÌÅH•}C[/¤»“ŸPX^¼ÈO
[  239.067945][ T7859] [U] ÖØ›·Ü—(JÅЛ•§MÛÜXZ˜;œ½±ÓßØ�_¹»µÔ*3÷3…¿5¸\ƒXM³ÚU�‰AK!AQ`¿Ë;FЕ�I+ÖÐVUHÅÐÂMÑJ³´Æ·ÙÛZÄCØÃZ‹¼Â)_ÇŸ¡  Ô‘¡&ßÖ¡ßÁAÇXTOÈÝÊ_½ Ú¼¦:¨Â×%À²PÒ×ÈCÖ²‚YÖ+_ÞÜ›ÝÛ}UÏM˜ƒÆ«CÅ!KJÒ7пG¯Ë=BÈ
[  239.093667][ T7859] [U] Ù½¥Fœ%ŽXAÙÂLŸ2R*GŒÒVW¬Ñ$ƒÜJ     ÃA˜›F¶¿�·+ؾ9Í„VIºÖ—¼KÙ¾Å1}_©Â
Á¥%ÃR6„•(]“¦/Ÿ¶Ø�Å™YܺÇÞHä¾ÜÑR GªÄRN/Ü«Î#!ÊDÙÛÚ«%ÞÛËDªÏ-{Ð$ÞVU‘ÝT²¼ª$:MTRÔEŽC1V‰D~ÎÈ];[˜ËÚÐ÷SQ¾¯œÙ(ÌËE,X¦8Â"Ù
ÆÐG¥DŸÚµ2@T8ž¾´ÒƒÀÐßÀT8.RC+Ä@Ëʦ‡P‡UÁ
P”‰¼¶C±‡Ë'Å„YLÓ-SS1E?Å7ÓO‡§Ì^]¦†ÂÓC”½H]§JKR]RKQ܆�ØÝ£Þ´OTCÔÆX¶¨¾4™NË  ³Ï&�Á­ÐÚ‹ŠÓ@¶:M7¿~�+”W*ÛÁ–XMÜÓ>>—¡{Q¢Ú×
_²Õ�LX8ÊU„ÇØÎ{ÐZ³ÍØ�)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ�„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q    ÌDWŸÒظ=ؽ|Q¬   ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE�`Ʀ\
[  239.144180][ T7859] [U] M¢XÎÂ"Ä{;ŽÕ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_  HPϱœSªD­�¦Ø:]‚{Ë©ÔÝÆȽ
[  239.169684][ T7859] [U] I,Ç>ÇÓ¤ ÎÙ5�1Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼Š�Vˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ
[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í   Ø¿
[  239.186632][ T7859] [U] 22½“Æ©ÐÛ©X?0;3U±
[  239.210419][ T7859] [U] ÞœÕ
Æ�ÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_
•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË,        ‘Ä      ÞD~×D©£¡+ÃW;A\˜F
PÉÞȘ|$ºØ)�
KØ�I³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ       ÝÍ¿ËAE©�TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMƲÇ
[  239.243817][ T7859] [U] [ª['XN€'²÷Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙ
WÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘LØ›§Ëœ»×B~ÅMÒÔÖ
[  239.254401][ T7859] [U] ™LÖ>�Ñ�D+ˆD¯§—®Ì"5ŽÊ��H3<ª¨ÅIR=F^”F�NÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖYÂ
[  239.263245][ T7859] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW��]ÔÊÄÌ©�
[  239.271761][ T7859] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSK�YÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ
[  239.284379][ T7859] [U] ¹EC�
[  239.289876][ T7859] [U] �—”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·�Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µŽÇIÛRIÓ�PMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ
[  240.352545][ T7855] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß@BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUD
Ç©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX�™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ
[  241.672064][ T7882] syzkaller0: entered promiscuous mode
[  241.681202][ T7882] syzkaller0: entered allmulticast mode
[  241.918520][ T7905] binder: 7897:7905 ioctl c0306201 2000000003c0 returned -14
[  242.713151][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5850 ms
[  242.721174][    C1] lec:lec_tx_timeout: lec0
[  242.733200][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  242.782704][ T5900] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  243.113277][ T5900] usb 2-1: Using ep0 maxpacket: 16
[  243.134910][ T5900] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  243.150277][ T5900] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 49863, setting to 1024
[  243.183094][ T5900] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  243.224934][ T5900] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  243.336098][ T5900] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  243.345296][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  243.353667][ T5900] usb 2-1: SerialNumber: syz
[  243.377732][ T7890] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  243.965764][ T5900] cdc_acm 2-1:1.0: Control and data interfaces are not separated!
[  244.052050][ T5900] cdc_acm 2-1:1.0: ttyACM0: USB ACM device
[  244.150315][ T5900] usb 2-1: USB disconnect, device number 6
[  244.833603][ T7924] netlink: 'syz.0.505': attribute type 10 has an invalid length.
[  245.004082][   T29] audit: type=1326 audit(1773834675.532:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.3.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a259c799 code=0x7ffc0000
[  245.027065][   T29] audit: type=1326 audit(1773834675.532:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.3.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a259c799 code=0x7ffc0000
[  245.090320][   T29] audit: type=1326 audit(1773834675.562:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.3.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62a259c799 code=0x7ffc0000
[  245.117936][   T29] audit: type=1326 audit(1773834675.562:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.3.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a259c799 code=0x7ffc0000
[  245.141345][   T29] audit: type=1326 audit(1773834675.562:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.3.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a259c799 code=0x7ffc0000
[  245.164919][   T29] audit: type=1326 audit(1773834675.582:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.3.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f62a259c799 code=0x7ffc0000
[  245.211331][   T29] audit: type=1326 audit(1773834675.582:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.3.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a259c799 code=0x7ffc0000
[  245.243253][   T29] audit: type=1326 audit(1773834675.582:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.3.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a259c799 code=0x7ffc0000
[  245.292979][   T29] audit: type=1326 audit(1773834675.582:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.3.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f62a259c799 code=0x7ffc0000
[  245.377223][   T29] audit: type=1326 audit(1773834675.582:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.3.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a259c799 code=0x7ffc0000
[  247.743155][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  247.751184][    C1] lec:lec_tx_timeout: lec0
[  247.755781][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  248.406970][ T7951] overlayfs: failed to clone lowerpath
[  251.082590][ T7924] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  251.107926][ T7939] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.117927][ T7939] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.148361][ T7939] macsec1: left promiscuous mode
[  251.342926][ T7960] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.350640][ T7960] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.357001][ T7989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.521'.
[  251.448097][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.520'.
[  251.495411][ T7987] netlink: 20 bytes leftover after parsing attributes in process `syz.1.520'.
[  251.504783][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.520'.
[  251.530159][ T7960] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  251.546655][ T7960] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  251.584033][ T5913] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  251.729849][ T7989] batman_adv: batadv0: Removing interface: batadv_slave_1
[  251.744544][ T5913] usb 1-1: Using ep0 maxpacket: 16
[  251.769208][ T5913] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  251.782496][ T6050] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.799777][ T5913] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  251.811498][ T6050] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.813508][ T5913] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  251.832566][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.841685][ T5913] usb 1-1: Product: syz
[  251.846423][ T5913] usb 1-1: Manufacturer: syz
[  251.851138][ T5913] usb 1-1: SerialNumber: syz
[  251.863477][ T6050] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.887462][ T6050] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  252.062715][ T5913] usb 1-1: 0:2 : does not exist
[  252.096428][ T5913] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  252.763179][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  252.771229][    C1] lec:lec_tx_timeout: lec0
[  252.776656][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  252.910360][ T5913] usb 1-1: USB disconnect, device number 2
[  255.924252][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  256.094286][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  256.451681][ T8044] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  256.674809][ T8042] IPv6: NLM_F_CREATE should be specified when creating new route
[  257.783152][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  257.791199][    C1] lec:lec_tx_timeout: lec0
[  257.796328][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  262.803172][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  262.811205][    C1] lec:lec_tx_timeout: lec0
[  262.823202][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  262.870006][ T8109] netlink: 'syz.4.558': attribute type 39 has an invalid length.
[  263.018762][ T8109] syz_tun (unregistering): left promiscuous mode
[  267.833494][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  267.841574][    C1] lec:lec_tx_timeout: lec0
[  267.846177][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  269.893259][ T7995] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  269.958005][ T8191] capability: warning: `syz.2.582' uses 32-bit capabilities (legacy support in use)
[  270.049048][ T7995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  270.064869][ T7995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  270.103748][ T7995] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  270.123445][ T7995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.138534][ T7995] usb 1-1: config 0 descriptor??
[  270.319826][ T8202] loop2: detected capacity change from 0 to 512
[  270.366262][ T8202] EXT4-fs: Ignoring removed nobh option
[  270.436207][ T8183] syz_tun: entered allmulticast mode
[  270.444941][ T8204] netlink: 24 bytes leftover after parsing attributes in process `syz.4.587'.
[  270.547062][ T8207] 9p: Bad value for 'rfdno'
[  270.702423][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.587'.
[  270.857039][ T8202] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  270.868851][ T7995] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[  270.876099][ T7995] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[  270.885779][ T7995] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[  270.899664][ T7995] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[  270.907496][ T8202] EXT4-fs (loop2): 1 truncate cleaned up
[  270.915274][ T8202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  270.932475][ T7995] cp2112 0003:10C4:EA90.0001: item fetching failed at offset 4/7
[  270.942676][ T7995] cp2112 0003:10C4:EA90.0001: parse failed
[  270.950653][ T7995] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -22
[  271.554785][ T8179] syz_tun: left allmulticast mode
[  271.574660][ T7986] usb 1-1: USB disconnect, device number 3
[  272.853169][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  272.861199][    C1] lec:lec_tx_timeout: lec0
[  272.865954][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  273.789312][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.937598][ T8232] loop2: detected capacity change from 0 to 512
[  273.974657][ T8232] EXT4-fs: Mount option(s) incompatible with ext2
[  273.993489][ T8234] syzkaller0: entered promiscuous mode
[  274.014151][ T8234] syzkaller0: entered allmulticast mode
[  275.126601][ T8251] syzkaller0: entered promiscuous mode
[  275.136854][ T8251] syzkaller0: entered allmulticast mode
[  277.377197][ T8276] loop0: detected capacity change from 0 to 512
[  277.978505][ T8276] EXT4-fs: Ignoring removed nobh option
[  278.046191][ T8276] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  278.115464][ T8276] EXT4-fs (loop0): 1 truncate cleaned up
[  278.129628][ T8276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  279.193152][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6330 ms
[  279.201203][    C1] lec:lec_tx_timeout: lec0
[  279.206460][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  279.938797][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.425616][ T8312] IPv6: NLM_F_REPLACE set, but no existing node found!
[  281.150364][ T8315] loop0: detected capacity change from 0 to 512
[  281.189192][ T8315] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.616: inode has both inline data and extents flags
[  281.237110][ T8315] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  281.239476][ T8315] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.616: couldn't read orphan inode 15 (err -117)
[  281.248670][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  281.248691][    C0] EXT4-fs (loop0): initial error at time 1773834711: ext4_orphan_get:1391: inode 15
[  281.248719][    C0] EXT4-fs (loop0): last error at time 1773834711: ext4_orphan_get:1391: inode 15
[  281.384156][ T8315] loop0: lost filesystem error report for type 5 error -117
[  281.404433][ T8315] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  282.540508][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.953151][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms
[  284.961182][    C1] lec:lec_tx_timeout: lec0
[  284.973249][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  285.686213][ T8357] loop1: detected capacity change from 0 to 512
[  285.854703][ T8357] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.388800][ T8357] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  286.533941][   T29] kauditd_printk_skb: 21 callbacks suppressed
[  286.533957][   T29] audit: type=1804 audit(1773834717.052:986): pid=8357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.626" name="/newroot/125/file1/bus" dev="loop1" ino=18 res=1 errno=0
[  286.809499][ T8375] netlink: 'syz.2.629': attribute type 1 has an invalid length.
[  287.112817][   T29] audit: type=1326 audit(1773834717.632:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.3.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a259c799 code=0x7ffc0000
[  287.179731][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.185135][   T29] audit: type=1326 audit(1773834717.632:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.3.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a259c799 code=0x7ffc0000
[  287.212527][   T29] audit: type=1326 audit(1773834717.672:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.3.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a259c799 code=0x7ffc0000
[  287.238786][   T29] audit: type=1326 audit(1773834717.672:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.3.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a259c799 code=0x7ffc0000
[  287.263179][   T29] audit: type=1326 audit(1773834717.672:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.3.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f62a259c799 code=0x7ffc0000
[  287.287150][   T29] audit: type=1326 audit(1773834717.672:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.3.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f62a259c502 code=0x7ffc0000
[  287.309394][   T29] audit: type=1326 audit(1773834717.672:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.3.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f62a255cfce code=0x7ffc0000
[  287.331780][   T29] audit: type=1326 audit(1773834717.682:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.3.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f62a259c5c7 code=0x7ffc0000
[  287.366715][   T29] audit: type=1326 audit(1773834717.682:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.3.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f62a255cfce code=0x7ffc0000
[  287.959651][ T8390] netlink: 'syz.1.635': attribute type 2 has an invalid length.
[  288.408757][ T8396] syzkaller0: entered promiscuous mode
[  288.414469][ T8396] syzkaller0: entered allmulticast mode
[  290.723381][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms
[  290.731422][    C1] lec:lec_tx_timeout: lec0
[  290.736443][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  290.857384][ T8417] loop0: detected capacity change from 0 to 40427
[  290.880422][ T8417] F2FS-fs (loop0): Small segment_count (9 < 1 * 24)
[  290.897862][ T8417] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  291.122727][ T8417] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  291.168054][ T8417] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  291.181639][ T8417] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  291.343085][   T35] kworker/u8:2: attempt to access beyond end of device
[  291.343085][   T35] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  291.378519][   T35] CPU: 1 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  291.378542][   T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  291.378551][   T35] Workqueue: writeback wb_workfn (flush-7:0)
[  291.378584][   T35] Call Trace:
[  291.378590][   T35]  <TASK>
[  291.378597][   T35]  dump_stack_lvl+0xe8/0x150
[  291.378622][   T35]  f2fs_handle_critical_error+0x37c/0x540
[  291.378648][   T35]  f2fs_write_end_io+0x1274/0x1740
[  291.378698][   T35]  __submit_merged_bio+0x256/0x700
[  291.378724][   T35]  __submit_merged_write_cond+0x3c9/0x4e0
[  291.378752][   T35]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  291.378795][   T35]  f2fs_write_data_pages+0x287e/0x34f0
[  291.378850][   T35]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  291.378884][   T35]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  291.378934][   T35]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  291.378956][   T35]  ? has_not_enough_free_secs+0xcb5/0x16d0
[  291.378996][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  291.379032][   T35]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  291.379052][   T35]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  291.379074][   T35]  do_writepages+0x32e/0x550
[  291.379098][   T35]  ? reacquire_held_locks+0x104/0x190
[  291.379112][   T35]  ? writeback_sb_inodes+0x477/0x1a20
[  291.379136][   T35]  __writeback_single_inode+0x133/0x11a0
[  291.379155][   T35]  ? do_raw_spin_unlock+0xf5/0x210
[  291.379177][   T35]  writeback_sb_inodes+0x992/0x1a20
[  291.379222][   T35]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  291.379242][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  291.379306][   T35]  ? rcu_is_watching+0x15/0xb0
[  291.379330][   T35]  wb_writeback+0x456/0xb70
[  291.379351][   T35]  ? queue_io+0x211/0x4a0
[  291.379376][   T35]  ? __pfx_wb_writeback+0x10/0x10
[  291.379392][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  291.379424][   T35]  wb_workfn+0x414/0xf50
[  291.379442][   T35]  ? look_up_lock_class+0x57/0x110
[  291.379472][   T35]  ? __pfx_wb_workfn+0x10/0x10
[  291.379491][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  291.379511][   T35]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  291.379549][   T35]  ? process_one_work+0x8bb/0x1780
[  291.379569][   T35]  process_one_work+0x9ab/0x1780
[  291.379609][   T35]  ? __pfx_process_one_work+0x10/0x10
[  291.379627][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  291.379660][   T35]  worker_thread+0xba8/0x11e0
[  291.379692][   T35]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  291.379710][   T35]  ? __kthread_parkme+0x7a/0x1f0
[  291.379726][   T35]  ? __kthread_parkme+0x19c/0x1f0
[  291.379747][   T35]  kthread+0x388/0x470
[  291.379764][   T35]  ? __pfx_worker_thread+0x10/0x10
[  291.379777][   T35]  ? __pfx_kthread+0x10/0x10
[  291.379795][   T35]  ret_from_fork+0x51e/0xb90
[  291.379819][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  291.379837][   T35]  ? __switch_to+0xc7d/0x1450
[  291.379859][   T35]  ? __pfx_kthread+0x10/0x10
[  291.379877][   T35]  ret_from_fork_asm+0x1a/0x30
[  291.379908][   T35]  </TASK>
[  291.674119][   T35] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  291.715328][ T8431] VFS:Filesystem freeze failed
[  293.183894][ T8444] random: crng reseeded on system resumption
[  295.743172][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  295.751247][    C1] lec:lec_tx_timeout: lec0
[  295.761265][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  296.120531][ T8477] fuse: fd is not a fuse device
[  296.144398][ T8474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  296.253286][ T8484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  296.367836][ T8471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  296.378502][ T8491] loop2: detected capacity change from 0 to 512
[  296.470965][ T8491] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  296.497079][ T8491] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  297.341832][ T8506] mmap: syz.3.667 (8506) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  297.491267][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.854254][   T29] kauditd_printk_skb: 96 callbacks suppressed
[  297.854289][   T29] audit: type=1326 audit(1773834728.372:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8510 comm="syz.1.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18f39c799 code=0x7ffc0000
[  298.402077][   T29] audit: type=1326 audit(1773834728.412:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8510 comm="syz.1.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18f39c799 code=0x7ffc0000
[  298.436346][   T29] audit: type=1326 audit(1773834728.432:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8510 comm="syz.1.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd18f39c42b code=0x7ffc0000
[  298.581995][   T29] audit: type=1326 audit(1773834728.432:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8510 comm="syz.1.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd18f39c42b code=0x7ffc0000
[  298.604281][   T29] audit: type=1326 audit(1773834728.882:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8510 comm="syz.1.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd18f39c42b code=0x7ffc0000
[  298.627971][   T29] audit: type=1326 audit(1773834728.882:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8510 comm="syz.1.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd18f39c42b code=0x7ffc0000
[  298.683397][   T29] audit: type=1326 audit(1773834728.882:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8510 comm="syz.1.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd18f39c42b code=0x7ffc0000
[  298.759232][   T29] audit: type=1326 audit(1773834728.882:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8510 comm="syz.1.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd18f39c42b code=0x7ffc0000
[  298.808684][   T29] audit: type=1326 audit(1773834728.882:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8510 comm="syz.1.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd18f39c42b code=0x7ffc0000
[  299.815755][   T29] audit: type=1326 audit(1773834728.892:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8510 comm="syz.1.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd18f39c42b code=0x7ffc0000
[  300.012386][ T7983] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  300.463908][ T8539] xt_connbytes: Forcing CT accounting to be enabled
[  300.470691][ T8539] Cannot find set identified by id 0 to match
[  300.773147][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  300.781188][    C1] lec:lec_tx_timeout: lec0
[  300.793413][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  300.940893][ T8544] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  301.483277][ T7983] usb 3-1: Using ep0 maxpacket: 32
[  301.491536][ T7983] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  301.502621][ T7983] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  301.514474][ T7983] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  302.481611][ T7983] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  303.182272][ T7983] usb 3-1: Product: syz
[  303.186825][ T7983] usb 3-1: Manufacturer: syz
[  303.255070][ T7983] usb 3-1: can't set config #4, error -71
[  303.356411][ T7983] usb 3-1: USB disconnect, device number 3
[  305.813170][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  305.821216][    C1] lec:lec_tx_timeout: lec0
[  305.826122][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  307.159367][   T29] kauditd_printk_skb: 20 callbacks suppressed
[  307.159383][   T29] audit: type=1326 audit(1773834737.682:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8601 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973219c799 code=0x7ffc0000
[  307.337827][   T29] audit: type=1326 audit(1773834737.712:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8601 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973219c799 code=0x7ffc0000
[  307.411019][   T29] audit: type=1326 audit(1773834737.712:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8601 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f973219c799 code=0x7ffc0000
[  308.007685][   T29] audit: type=1326 audit(1773834737.712:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8601 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973219c799 code=0x7ffc0000
[  308.101821][   T29] audit: type=1326 audit(1773834737.712:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8601 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973219c799 code=0x7ffc0000
[  308.184987][   T29] audit: type=1326 audit(1773834737.712:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8601 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f973219c799 code=0x7ffc0000
[  308.335552][   T29] audit: type=1326 audit(1773834737.712:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8601 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973219c799 code=0x7ffc0000
[  308.407462][   T29] audit: type=1326 audit(1773834737.722:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8601 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f973215cfce code=0x7ffc0000
[  308.530137][   T29] audit: type=1326 audit(1773834737.722:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8601 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f973215cfce code=0x7ffc0000
[  308.552911][   T29] audit: type=1326 audit(1773834737.722:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8601 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973219c799 code=0x7ffc0000
[  308.618444][ T7995] libceph: connect (1)[c::]:6789 error -101
[  308.627187][ T7995] libceph: mon0 (1)[c::]:6789 connect error
[  309.200168][ T7995] libceph: connect (1)[c::]:6789 error -101
[  309.209153][ T8633] ip6gre1: entered promiscuous mode
[  309.225241][ T7995] libceph: mon0 (1)[c::]:6789 connect error
[  309.231293][ T8633] ip6gre1: entered allmulticast mode
[  309.306065][ T8631] ceph: No mds server is up or the cluster is laggy
[  309.428787][   T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  309.487077][ T8643] netlink: 550 bytes leftover after parsing attributes in process `syz.3.706'.
[  309.503644][ T7994] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  309.522873][   T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  310.302946][ T7994] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  310.362498][ T8654] loop0: detected capacity change from 0 to 256
[  310.833152][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  310.841172][    C1] lec:lec_tx_timeout: lec0
[  310.845820][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  311.569569][ T7996] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  311.747839][ T8654] FAT-fs (loop0): Directory bread(block 64) failed
[  312.793391][ T8654] FAT-fs (loop0): Directory bread(block 65) failed
[  312.824740][ T8654] FAT-fs (loop0): Directory bread(block 66) failed
[  312.850521][ T8654] FAT-fs (loop0): Directory bread(block 67) failed
[  312.880663][ T8654] FAT-fs (loop0): Directory bread(block 68) failed
[  312.906361][ T8654] FAT-fs (loop0): Directory bread(block 69) failed
[  312.926319][ T8654] FAT-fs (loop0): Directory bread(block 70) failed
[  312.976648][ T8654] FAT-fs (loop0): Directory bread(block 71) failed
[  312.990128][ T8654] FAT-fs (loop0): Directory bread(block 72) failed
[  312.999853][ T8654] FAT-fs (loop0): Directory bread(block 73) failed
[  313.332091][ T8676] loop2: detected capacity change from 0 to 40427
[  313.347984][ T8676] F2FS-fs (loop2): invalid crc value
[  313.439900][ T8676] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  313.453867][ T8676] F2FS-fs (loop2): Start checkpoint disabled!
[  313.475555][ T8676] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[  313.485594][ T8676] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  313.993501][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  315.863175][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  315.871206][    C1] lec:lec_tx_timeout: lec0
[  315.875877][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  316.174927][ T8676] syz.2.718: attempt to access beyond end of device
[  316.174927][ T8676] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  316.189294][ T8676] syz.2.718: attempt to access beyond end of device
[  316.189294][ T8676] loop2: rw=2049, sector=45128, nr_sectors = 32 limit=40427
[  316.203483][ T8676] syz.2.718: attempt to access beyond end of device
[  316.203483][ T8676] loop2: rw=2049, sector=45176, nr_sectors = 32 limit=40427
[  316.217713][ T8676] syz.2.718: attempt to access beyond end of device
[  316.217713][ T8676] loop2: rw=2049, sector=45224, nr_sectors = 8 limit=40427
[  316.232928][ T8676] syz.2.718: attempt to access beyond end of device
[  316.232928][ T8676] loop2: rw=2049, sector=45248, nr_sectors = 8 limit=40427
[  316.246879][ T8676] syz.2.718: attempt to access beyond end of device
[  316.246879][ T8676] loop2: rw=2049, sector=45272, nr_sectors = 16 limit=40427
[  316.261351][ T8676] syz.2.718: attempt to access beyond end of device
[  316.261351][ T8676] loop2: rw=2049, sector=45312, nr_sectors = 24 limit=40427
[  316.275726][ T8676] syz.2.718: attempt to access beyond end of device
[  316.275726][ T8676] loop2: rw=2049, sector=45352, nr_sectors = 32 limit=40427
[  316.289675][ T8676] syz.2.718: attempt to access beyond end of device
[  316.289675][ T8676] loop2: rw=2049, sector=45392, nr_sectors = 8 limit=40427
[  316.303652][ T8676] syz.2.718: attempt to access beyond end of device
[  316.303652][ T8676] loop2: rw=2049, sector=45424, nr_sectors = 32 limit=40427
[  316.470847][ T8697] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  316.484453][ T8697] Error validating options; rc = [-22]
[  316.888158][   T35] CPU: 1 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  316.888181][   T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  316.888190][   T35] Workqueue: writeback wb_workfn (flush-7:2)
[  316.888217][   T35] Call Trace:
[  316.888224][   T35]  <TASK>
[  316.888231][   T35]  dump_stack_lvl+0xe8/0x150
[  316.888256][   T35]  f2fs_handle_critical_error+0x37c/0x540
[  316.888288][   T35]  f2fs_write_end_io+0x1274/0x1740
[  316.888334][   T35]  __submit_merged_bio+0x256/0x700
[  316.888355][   T35]  ? _raw_spin_unlock+0x28/0x50
[  316.888377][   T35]  f2fs_submit_page_write+0x23ab/0x2540
[  316.888429][   T35]  ? __pfx_f2fs_submit_page_write+0x10/0x10
[  316.888456][   T35]  ? __f2fs_is_valid_blkaddr+0xd2a/0x14f0
[  316.888486][   T35]  do_write_page+0x40f/0xab0
[  316.888511][   T35]  f2fs_outplace_write_data+0x11a/0x220
[  316.888541][   T35]  f2fs_do_write_data_page+0x123b/0x16f0
[  316.888560][   T35]  ? f2fs_up_write_trace+0x1b/0x40
[  316.888590][   T35]  ? __pfx_f2fs_do_write_data_page+0x10/0x10
[  316.888627][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  316.888658][   T35]  f2fs_write_single_data_page+0x976/0x18b0
[  316.888696][   T35]  ? __pfx_f2fs_write_single_data_page+0x10/0x10
[  316.888745][   T35]  ? folio_clear_dirty_for_io+0x570/0x710
[  316.888766][   T35]  ? folio_clear_dirty_for_io+0x1d4/0x710
[  316.888786][   T35]  f2fs_write_data_pages+0x1a42/0x34f0
[  316.888845][   T35]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  316.888936][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  316.888978][   T35]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  316.888999][   T35]  do_writepages+0x32e/0x550
[  316.889024][   T35]  ? reacquire_held_locks+0x104/0x190
[  316.889041][   T35]  ? writeback_sb_inodes+0x477/0x1a20
[  316.889066][   T35]  __writeback_single_inode+0x133/0x11a0
[  316.889086][   T35]  ? do_raw_spin_unlock+0xf5/0x210
[  316.889108][   T35]  writeback_sb_inodes+0x992/0x1a20
[  316.889155][   T35]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  316.889172][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  316.889229][   T35]  ? rcu_is_watching+0x15/0xb0
[  316.889255][   T35]  wb_writeback+0x456/0xb70
[  316.889278][   T35]  ? queue_io+0x211/0x4a0
[  316.889306][   T35]  ? __pfx_wb_writeback+0x10/0x10
[  316.889323][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  316.889360][   T35]  wb_workfn+0x414/0xf50
[  316.889380][   T35]  ? look_up_lock_class+0x57/0x110
[  316.889412][   T35]  ? __pfx_wb_workfn+0x10/0x10
[  316.889432][   T35]  ? __pfx___schedule+0x10/0x10
[  316.889451][   T35]  ? irqentry_exit+0x61a/0x700
[  316.889466][   T35]  ? rcu_is_watching+0x15/0xb0
[  316.889497][   T35]  ? preempt_schedule_thunk+0x16/0x30
[  316.889531][   T35]  ? process_one_work+0x8bb/0x1780
[  316.889553][   T35]  process_one_work+0x9ab/0x1780
[  316.889598][   T35]  ? __pfx_process_one_work+0x10/0x10
[  316.889618][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  316.889656][   T35]  worker_thread+0xba8/0x11e0
[  316.889682][   T35]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  316.889702][   T35]  ? __kthread_parkme+0x7a/0x1f0
[  316.889719][   T35]  ? __kthread_parkme+0x19c/0x1f0
[  316.889742][   T35]  kthread+0x388/0x470
[  316.889761][   T35]  ? __pfx_worker_thread+0x10/0x10
[  316.889774][   T35]  ? __pfx_kthread+0x10/0x10
[  316.889794][   T35]  ret_from_fork+0x51e/0xb90
[  316.889820][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  316.889840][   T35]  ? __switch_to+0xc7d/0x1450
[  316.889865][   T35]  ? __pfx_kthread+0x10/0x10
[  316.889884][   T35]  ret_from_fork_asm+0x1a/0x30
[  316.889919][   T35]  </TASK>
[  316.892645][   T35] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  317.235809][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  317.242189][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  318.409604][ T8721] netlink: 'syz.3.732': attribute type 4 has an invalid length.
[  319.545688][   T29] kauditd_printk_skb: 22 callbacks suppressed
[  319.545829][   T29] audit: type=1326 audit(1773834750.032:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.0.737" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcce4b9c799 code=0x0
[  319.683310][ T8749] loop2: detected capacity change from 0 to 64
[  321.899762][ T8764] loop1: detected capacity change from 0 to 32768
[  322.075442][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6200 ms
[  322.083485][    C1] lec:lec_tx_timeout: lec0
[  322.088366][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  322.714832][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  322.775007][ T8771] xt_CT: No such helper "pptp"
[  326.401731][ T8806] fuse: fd is not a fuse device
[  327.477663][ T8822] syzkaller0: entered promiscuous mode
[  327.483262][ T8822] syzkaller0: entered allmulticast mode
[  327.780561][ T8826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.761'.
[  327.833149][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms
[  327.841207][    C1] lec:lec_tx_timeout: lec0
[  327.845887][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  332.853157][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  332.861185][    C1] lec:lec_tx_timeout: lec0
[  332.870397][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  334.963870][ T8896] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  335.034354][ T8896] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  335.045054][ T8896] overlayfs: failed to look up (tracing) for ino (-66)
[  336.641246][ T8914] warning: `syz.4.785' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  336.943709][ T8914] netlink: 'syz.4.785': attribute type 10 has an invalid length.
[  337.027503][ T8919] netlink: 'syz.2.788': attribute type 1 has an invalid length.
[  338.020034][ T8914] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  338.713144][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5840 ms
[  338.721169][    C1] lec:lec_tx_timeout: lec0
[  338.725774][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  339.363523][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  339.629578][ T8927] bond1: (slave gretap1): making interface the new active one
[  339.671887][ T8927] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  340.197083][ T8932] vlan3: entered allmulticast mode
[  340.248208][ T8932] bond1: entered allmulticast mode
[  340.302754][ T8932] gretap1: entered allmulticast mode
[  340.860967][ T8932] bond1: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  341.600752][ T8954] loop0: detected capacity change from 0 to 131072
[  342.143753][ T8954] F2FS-fs (loop0): Invalid log sectorsize (67108873)
[  342.150836][ T8954] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  342.161036][ T8954] F2FS-fs (loop0): invalid crc value
[  342.216198][ T8954] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  342.228292][ T8954] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  342.235468][ T8954] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  342.365050][ T8964] vivid-001: =================  START STATUS  =================
[  342.375846][ T8964] vivid-001: Radio HW Seek Mode: Bounded
[  342.384638][ T8964] vivid-001: Radio Programmable HW Seek: false
[  342.391581][ T8964] vivid-001: RDS Rx I/O Mode: Block I/O
[  342.397347][ T8964] vivid-001: Generate RBDS Instead of RDS: false
[  342.403948][ T8964] vivid-001: RDS Reception: true
[  342.409042][ T8964] vivid-001: RDS Program Type: 0 inactive
[  342.414950][ T8964] vivid-001: RDS PS Name:  inactive
[  342.420226][ T8964] vivid-001: RDS Radio Text:  inactive
[  342.426068][ T8964] vivid-001: RDS Traffic Announcement: false inactive
[  342.433097][ T8964] vivid-001: RDS Traffic Program: false inactive
[  342.439533][ T8964] vivid-001: RDS Music: false inactive
[  342.445256][ T8964] vivid-001: ==================  END STATUS  ==================
[  343.733163][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  343.741236][    C1] lec:lec_tx_timeout: lec0
[  343.745866][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  343.747735][ T8978] capability: warning: `syz.1.801' uses deprecated v2 capabilities in a way that may be insecure
[  343.779447][ T8980] loop2: detected capacity change from 0 to 128
[  343.810982][ T8980] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  343.832095][ T8978] netlink: 996 bytes leftover after parsing attributes in process `syz.1.801'.
[  343.842200][ T8980] ext4 filesystem being mounted at /128/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  344.055741][ T5853] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  345.701706][ T8994] netlink: 'syz.1.808': attribute type 1 has an invalid length.
[  345.763268][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  348.753156][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  348.761235][    C1] lec:lec_tx_timeout: lec0
[  348.765839][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  349.978365][ T9036] syzkaller0: entered promiscuous mode
[  349.984750][ T9036] syzkaller0: entered allmulticast mode
[  350.832555][   T29] audit: type=1326 audit(1773834781.352:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.0.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce4b9c799 code=0x7ffc0000
[  350.896200][   T29] audit: type=1326 audit(1773834781.352:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.0.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce4b9c799 code=0x7ffc0000
[  350.920920][ T9048] loop0: detected capacity change from 0 to 1024
[  350.944793][ T9044] can: request_module (can-proto-5) failed.
[  350.966460][   T29] audit: type=1326 audit(1773834781.382:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.0.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcce4b9c799 code=0x7ffc0000
[  350.991424][   T29] audit: type=1326 audit(1773834781.382:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.0.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcce4b9c502 code=0x7ffc0000
[  351.033350][   T29] audit: type=1326 audit(1773834781.402:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.0.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcce4b5cfce code=0x7ffc0000
[  351.100359][   T29] audit: type=1326 audit(1773834781.412:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.0.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fcce4b9c5c7 code=0x7ffc0000
[  351.130622][ T9048] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  351.306803][ T9044] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.823: missing EA_INODE flag
[  351.861226][   T29] audit: type=1326 audit(1773834781.412:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.0.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcce4b5cfce code=0x7ffc0000
[  351.884045][   T29] audit: type=1326 audit(1773834781.412:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.0.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcce4b9c42b code=0x7ffc0000
[  351.912472][   T29] audit: type=1326 audit(1773834781.482:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.0.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcce4b5cfce code=0x7ffc0000
[  352.004836][ T9044] EXT4-fs (loop0): Remounting filesystem read-only
[  352.055692][   T29] audit: type=1326 audit(1773834781.482:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.0.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcce4b5cfce code=0x7ffc0000
[  352.098042][ T9044] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  352.855353][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.292864][ T9080] dvmrp1: entered allmulticast mode
[  353.773161][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  353.781234][    C1] lec:lec_tx_timeout: lec0
[  353.785962][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  357.481212][ T9114] loop2: detected capacity change from 0 to 512
[  358.120524][ T9114] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.842: inode has both inline data and extents flags
[  358.152325][ T9114] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  358.154037][ T9114] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.842: couldn't read orphan inode 15 (err -117)
[  358.163255][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  358.163275][    C1] EXT4-fs (loop2): initial error at time 1773834788: ext4_orphan_get:1391: inode 15
[  358.163304][    C1] EXT4-fs (loop2): last error at time 1773834788: ext4_orphan_get:1391: inode 15
[  358.544744][ T9125] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1500) !
[  358.703469][ T9114] loop2: lost filesystem error report for type 5 error -117
[  358.704642][ T9114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  358.793192][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  358.801248][    C1] lec:lec_tx_timeout: lec0
[  358.805832][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  359.741283][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  361.632866][ T9155] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  361.654643][ T9155] syzkaller0: entered promiscuous mode
[  361.677005][ T9155] syzkaller0: entered allmulticast mode
[  361.766976][ T9155] tipc: Resetting bearer <eth:syzkaller0>
[  361.789585][ T9153] tipc: Resetting bearer <eth:syzkaller0>
[  361.985736][ T9153] tipc: Disabling bearer <eth:syzkaller0>
[  362.316698][ T9165] loop0: detected capacity change from 0 to 512
[  362.376408][   T29] kauditd_printk_skb: 8 callbacks suppressed
[  362.376460][   T29] audit: type=1326 audit(1773834792.852:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9163 comm="syz.4.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973219c799 code=0x7ffc0000
[  362.694810][   T29] audit: type=1326 audit(1773834792.872:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9163 comm="syz.4.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973219c799 code=0x7ffc0000
[  362.740667][   T29] audit: type=1326 audit(1773834793.002:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9163 comm="syz.4.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f973219c42b code=0x7ffc0000
[  362.765207][   T29] audit: type=1326 audit(1773834793.002:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9163 comm="syz.4.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f973219c42b code=0x7ffc0000
[  362.789330][   T29] audit: type=1326 audit(1773834793.032:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9163 comm="syz.4.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f973219c42b code=0x7ffc0000
[  362.816352][ T9165] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  362.830537][ T9165] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  362.861230][   T29] audit: type=1326 audit(1773834793.082:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9163 comm="syz.4.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f973219c42b code=0x7ffc0000
[  363.036232][   T29] audit: type=1326 audit(1773834793.082:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9163 comm="syz.4.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f973219c42b code=0x7ffc0000
[  363.089511][   T29] audit: type=1326 audit(1773834793.082:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9163 comm="syz.4.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f973219c42b code=0x7ffc0000
[  363.119042][   T29] audit: type=1326 audit(1773834793.082:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9163 comm="syz.4.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f973219c42b code=0x7ffc0000
[  363.785199][   T29] audit: type=1326 audit(1773834793.082:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9163 comm="syz.4.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f973219c42b code=0x7ffc0000
[  363.823146][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  363.831203][    C1] lec:lec_tx_timeout: lec0
[  363.835790][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  363.843218][ T7994] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  364.020742][ T7994] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  364.053477][ T7994] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  364.082900][ T7994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.144565][ T7994] usb 2-1: config 0 descriptor??
[  364.198344][ T7994] pwc: Askey VC010 type 2 USB webcam detected.
[  364.217169][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  364.251428][ T9191] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  364.629568][ T7994] pwc: recv_control_msg error -32 req 02 val 2b00
[  364.666862][ T7994] pwc: recv_control_msg error -32 req 02 val 2700
[  365.192300][ T7994] pwc: recv_control_msg error -32 req 02 val 2c00
[  365.211971][ T7994] pwc: recv_control_msg error -32 req 04 val 1000
[  365.229922][ T7994] pwc: recv_control_msg error -32 req 04 val 1300
[  365.242620][ T7994] pwc: recv_control_msg error -32 req 04 val 1400
[  365.278727][ T7994] pwc: recv_control_msg error -32 req 02 val 2000
[  365.446983][ T7994] pwc: recv_control_msg error -32 req 02 val 2100
[  365.471336][ T7994] pwc: recv_control_msg error -32 req 04 val 1500
[  366.246602][ T9216] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  366.256484][ T9216] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  366.266180][ T9216] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  366.275152][ T9216] UDF-fs: Scanning with blocksize 512 failed
[  366.282335][ T9216] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  366.292062][ T9216] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  366.301669][ T9216] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  366.309327][ T9216] UDF-fs: Scanning with blocksize 1024 failed
[  366.316552][ T9214] vivid-001: kernel_thread() failed
[  366.317189][ T9216] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  366.331426][ T9216] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  366.340996][ T9216] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  366.348675][ T9216] UDF-fs: Scanning with blocksize 2048 failed
[  366.355691][ T9216] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  366.365397][ T9216] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  366.374989][ T9216] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  366.382617][ T9216] UDF-fs: Scanning with blocksize 4096 failed
[  366.388819][ T9216] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1)
[  367.004867][ T7994] pwc: recv_control_msg error -71 req 02 val 2500
[  367.018456][ T7994] pwc: recv_control_msg error -71 req 02 val 2400
[  367.031014][ T7994] pwc: recv_control_msg error -71 req 02 val 2600
[  367.043879][ T7994] pwc: recv_control_msg error -71 req 02 val 2900
[  367.052494][ T7994] pwc: recv_control_msg error -71 req 02 val 2800
[  367.085444][ T7994] pwc: recv_control_msg error -71 req 04 val 1100
[  367.118543][ T7994] pwc: recv_control_msg error -71 req 04 val 1200
[  367.135696][ T9222] netlink: 'syz.4.867': attribute type 32 has an invalid length.
[  367.181772][ T5843] Bluetooth: hci2: unexpected event for opcode 0x203d
[  367.190624][ T5843] Bluetooth: hci2: SCO packet for unknown connection handle 200
[  367.190879][ T5843] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  367.206744][ T7994] pwc: Registered as video103.
[  367.223614][ T7994] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7
[  367.255432][ T7994] usb 2-1: USB disconnect, device number 7
[  367.344449][ T7983] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  367.523371][ T7983] usb 1-1: Using ep0 maxpacket: 8
[  367.535528][ T7983] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  367.548927][ T7983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.571908][ T7983] pvrusb2: Hardware description: Terratec Grabster AV400
[  367.590283][ T7983] pvrusb2: **********
[  367.596381][ T7983] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  367.613717][ T7983] pvrusb2: Important functionality might not be entirely working.
[  367.644232][ T7983] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  367.675959][ T7983] pvrusb2: **********
[  367.793464][ T2360] pvrusb2: Invalid write control endpoint
[  368.853163][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  368.861169][    C1] lec:lec_tx_timeout: lec0
[  368.873197][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  368.986356][ T2360] pvrusb2: Invalid write control endpoint
[  369.095486][ T2360] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  369.108256][ T2360] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  369.116111][ T2360] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  369.132452][ T2360] pvrusb2: Device being rendered inoperable
[  369.154855][ T7994] usb 1-1: USB disconnect, device number 4
[  369.178443][ T2360] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  369.549150][ T2360] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  369.562567][ T2360] pvrusb2: Attached sub-driver cx25840
[  369.570052][ T2360] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  369.590815][ T2360] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  369.624128][ T9243] loop1: detected capacity change from 0 to 128
[  369.651103][ T9243] vfat: Unknown parameter '18446744073709551615ÿÿÿ'
[  371.195663][ T5843] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  371.204281][ T5843] Bluetooth: hci2: Injecting HCI hardware error event
[  371.212815][ T5843] Bluetooth: hci2: hardware error 0x00
[  372.474562][ T9260] loop1: detected capacity change from 0 to 131072
[  372.562245][ T9260] XFS (loop1): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  372.659864][ T9260] XFS (loop1): Starting recovery (logdev: internal)
[  372.690010][ T9260] XFS (loop1): Ending recovery (logdev: internal)
[  372.732041][   T29] kauditd_printk_skb: 24 callbacks suppressed
[  372.732221][   T29] audit: type=1800 audit(1773834803.252:1207): pid=9260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.879" name="file1" dev="loop1" ino=38 res=0 errno=0
[  373.275478][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  373.709248][ T5843] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  373.731462][ T9280] netlink: 172 bytes leftover after parsing attributes in process `syz.4.881'.
[  375.131393][ T5852] XFS (loop1): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  375.203148][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6330 ms
[  375.211174][    C1] lec:lec_tx_timeout: lec0
[  375.223223][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  378.408425][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  378.415334][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  380.953160][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5730 ms
[  380.961200][    C1] lec:lec_tx_timeout: lec0
[  380.966154][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  381.180099][ T9366] loop1: detected capacity change from 0 to 512
[  381.217393][ T9366] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.887: inode has both inline data and extents flags
[  381.267538][   T29] audit: type=1326 audit(1773834811.792:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9370 comm="syz.4.904" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f973219c799 code=0x0
[  381.303282][ T9366] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  381.305176][ T9366] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.887: couldn't read orphan inode 15 (err -117)
[  381.314469][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  381.314490][    C0] EXT4-fs (loop1): initial error at time 1773834811: ext4_orphan_get:1391: inode 15
[  381.314519][    C0] EXT4-fs (loop1): last error at time 1773834811: ext4_orphan_get:1391: inode 15
[  381.351586][ T9366] loop1: lost filesystem error report for type 5 error -117
[  381.362964][ T9366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  382.243419][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.808621][ T9387] netlink: 10 bytes leftover after parsing attributes in process `syz.2.910'.
[  383.847710][ T9387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  384.805763][ T9409] kvm: pic: non byte write
[  384.835819][ T9409] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer.
[  386.713235][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms
[  386.721256][    C1] lec:lec_tx_timeout: lec0
[  386.726065][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  387.780755][ T9462] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  388.990267][   T29] audit: type=1800 audit(1773834819.512:1209): pid=9479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.937" name="nullb0" dev="tmpfs" ino=1064 res=0 errno=0
[  389.706439][ T9489] netlink: 'syz.4.939': attribute type 39 has an invalid length.
[  390.388056][ T9490] netlink: 1 bytes leftover after parsing attributes in process `syz.4.939'.
[  391.510684][ T9512] netlink: 52 bytes leftover after parsing attributes in process `syz.2.943'.
[  391.733173][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  391.741251][    C1] lec:lec_tx_timeout: lec0
[  391.746629][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  392.099091][ T9518] loop1: detected capacity change from 0 to 256
[  392.145796][ T9518] FAT-fs (loop1): invalid media value (0x2f)
[  392.181976][ T9518] FAT-fs (loop1): Can't find a valid FAT filesystem
[  392.293791][ T9522] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  394.353509][ T9555] loop1: detected capacity change from 0 to 512
[  394.360745][ T9555] EXT4-fs: Ignoring removed nobh option
[  394.394266][ T9555] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  394.412024][ T9555] EXT4-fs (loop1): 1 truncate cleaned up
[  394.424985][ T9555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  395.569672][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.756890][ T9588] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  395.764170][ T9588] IPv6: NLM_F_CREATE should be set when creating new route
[  396.138169][ T9591] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  396.284938][ T9591] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  396.753157][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  396.761207][    C1] lec:lec_tx_timeout: lec0
[  396.766836][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  397.818714][  T138] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  397.867086][  T138] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  397.900564][  T138] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  397.925895][  T138] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  400.397801][ T9630] loop2: detected capacity change from 0 to 8
[  400.427881][ T9630] SQUASHFS error: lzo decompression failed, data probably corrupt
[  400.445234][ T9630] SQUASHFS error: Failed to read block 0x91: -5
[  400.451688][ T9630] SQUASHFS error: Unable to read metadata cache entry [8f]
[  400.472042][ T9630] SQUASHFS error: Unable to read inode 0x11f
[  401.254910][ T9637] loop0: detected capacity change from 0 to 128
[  401.487579][ T9640] bio_check_eod: 2226 callbacks suppressed
[  401.487596][ T9640] syz.0.978: attempt to access beyond end of device
[  401.487596][ T9640] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128
[  401.773147][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  401.781166][    C1] lec:lec_tx_timeout: lec0
[  401.793214][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  406.737243][ T9712] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1002'.
[  406.803251][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  406.811350][    C1] lec:lec_tx_timeout: lec0
[  406.816231][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  407.925872][ T9726] loop0: detected capacity change from 0 to 512
[  408.079130][ T9726] EXT4-fs: Ignoring removed nobh option
[  408.645605][ T9726] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  408.711175][ T9726] EXT4-fs (loop0): 1 truncate cleaned up
[  408.768361][ T9726] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  410.185013][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  410.289328][ T9750] loop2: detected capacity change from 0 to 512
[  410.325171][ T9751] syzkaller0: entered promiscuous mode
[  410.334915][ T9750] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  410.367962][ T9751] syzkaller0: entered allmulticast mode
[  410.380584][ T9750] EXT4-fs (loop2): SIPHASH is not a valid default hash value
[  410.678611][   T47] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  410.808015][ T9762] tmpfs: Invalid gid '0x00000000ffffffff'
[  411.323243][   T47] usb 3-1: Using ep0 maxpacket: 32
[  411.330092][   T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  411.355317][   T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  411.461836][   T47] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  411.487341][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.530423][   T47] usb 3-1: config 0 descriptor??
[  411.578939][ T9765] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  411.823153][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  411.831169][    C1] lec:lec_tx_timeout: lec0
[  411.835718][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  411.947201][   T47] hub 3-1:0.0: USB hub found
[  412.171609][   T47] hub 3-1:0.0: 1 port detected
[  412.891517][   T47] hub 3-1:0.0: activate --> -90
[  412.898905][ T9788] loop0: detected capacity change from 0 to 512
[  412.950970][ T9788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  412.964006][ T9788] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  413.476389][   T47] hub 3-1:0.0: hub_ext_port_status failed (err = -71)
[  413.477624][ T5857] usb 3-1: USB disconnect, device number 4
[  413.512311][ T9795] loop1: detected capacity change from 0 to 764
[  413.746252][ T9802] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  413.790377][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  414.406894][ T9810] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  414.453456][ T9810] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  414.882722][ T9823] overlayfs: failed to clone lowerpath
[  415.209220][ T9827] ipt_rpfilter: unknown options
[  415.243951][ T9827] fuse: Unknown parameter '0xffffffffffffffff'
[  416.843144][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  416.851172][    C1] lec:lec_tx_timeout: lec0
[  417.384846][ T9851] loop2: detected capacity change from 0 to 512
[  417.993388][ T9851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  418.005983][ T9851] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  419.020539][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  420.773626][ T9873] fuse: Bad value for 'fd'
[  422.114513][ T9890] fuse: fd is not a fuse device
[  422.447490][ T9893] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  423.118330][ T9888] futex_wake_op: syz.2.1053 tries to shift op by -1; fix this program
[  423.311135][ T9901] loop0: detected capacity change from 0 to 1024
[  423.660767][ T9901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  423.986143][ T9901] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  424.012649][ T9903] team_slave_1: left promiscuous mode
[  424.034949][ T9903] team_slave_1: left allmulticast mode
[  424.111830][ T9903] vlan2: left allmulticast mode
[  424.588828][ T9903] bridge1: left allmulticast mode
[  424.657204][  T199] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 112: padding at end of block bitmap is not set
[  424.879448][  T199] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117
[  424.976921][  T199] EXT4-fs (loop0): This should not happen!! Data will be lost
[  424.976921][  T199] 
[  425.448134][ T6422] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 36 with error 117
[  425.466096][ T6422] EXT4-fs (loop0): This should not happen!! Data will be lost
[  425.466096][ T6422] 
[  425.486879][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  425.955283][ T9930] loop0: detected capacity change from 0 to 1024
[  426.401321][   T29] audit: type=1800 audit(1773834856.912:1210): pid=9934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1063" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=20373 res=0 errno=0
[  427.336171][ T9929] hfsplus: b-tree write err: -5, ino 2
[  427.346318][ T9929] hfsplus: trying to free free bnode 0(1)
[  427.353979][ T9929] hfsplus: b-tree write err: -5, ino 2
[  427.431851][ T6422] hfsplus: b-tree write err: -5, ino 25
[  427.453203][ T6422] hfsplus: b-tree write err: -5, ino 4
[  427.468885][ T6422] hfsplus: b-tree write err: -5, ino 2
[  427.497020][ T6422] hfsplus: b-tree write err: -5, ino 26
[  432.085189][ T9969] fuse: fd is not a fuse device
[  432.464596][ T9969] fuse: fd is not a fuse device
[  434.735996][ T9986] syzkaller0: entered promiscuous mode
[  434.744353][ T9986] syzkaller0: entered allmulticast mode
[  436.592966][T10010] syzkaller0: entered promiscuous mode
[  436.598648][T10010] syzkaller0: entered allmulticast mode
[  437.170750][T10025] fuse: fd is not a fuse device
[  439.401068][T10043] overlayfs: failed to clone upperpath
[  439.833612][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  440.287375][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  440.293776][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  440.307131][ T1315] lec:lec_start_xmit: lec0:No lecd attached
[  445.683181][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5370 ms
[  445.691268][    C1] lec:lec_tx_timeout: lec0
[  445.697216][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  450.713276][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  450.721308][    C1] lec:lec_tx_timeout: lec0
[  451.900558][T10151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  452.013768][T10148] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1120'.
[  452.051676][T10161] tipc: Started in network mode
[  452.057406][T10161] tipc: Node identity , cluster identity 4711
[  452.400751][T10171] netlink: 'syz.3.1125': attribute type 10 has an invalid length.
[  453.315282][T10186] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  453.364657][T10186] syzkaller0: entered promiscuous mode
[  453.398154][T10186] syzkaller0: entered allmulticast mode
[  453.454938][    C1] net_ratelimit: 44 callbacks suppressed
[  453.454959][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.516583][ T6050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.665214][T10190] tipc: Resetting bearer <eth:syzkaller0>
[  453.699716][T10190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.796308][T10185] tipc: Resetting bearer <eth:syzkaller0>
[  453.816955][T10185] tipc: Disabling bearer <eth:syzkaller0>
[  453.871850][T10192] xt_hashlimit: size too large, truncated to 1048576
[  454.360812][T10208] vxcan1: tx drop: invalid sa for name 0x0000000000000002
[  454.824092][T10209] loop1: detected capacity change from 0 to 64
[  455.595920][   T29] audit: type=1326 audit(1773834886.102:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10212 comm="syz.3.1139" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62a259c799 code=0x0
[  456.957994][T10233] random: crng reseeded on system resumption
[  457.866471][T10240] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[10240]
[  458.993628][T10253] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  459.142627][T10253] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  459.267802][T10258] netlink: 'syz.3.1148': attribute type 10 has an invalid length.
[  459.310934][T10253] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  459.541191][T10258] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  459.575260][T10253] tipc: Resetting bearer <eth:syzkaller0>
[  460.026038][ T7986] tipc: Node number set to 280146091
[  460.591663][T10274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1154'.
[  460.867417][T10279] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1154'.
[  460.993950][T10281] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1154'.
[  461.729870][T10281] 8021q: adding VLAN 0 to HW filter on device bond2
[  461.824494][T10294] ADFS-fs (loop9): error: unable to read block 3, try 0
[  463.014951][T10310] netlink: 'syz.4.1162': attribute type 1 has an invalid length.
[  463.096928][T10314] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1162'.
[  463.188244][T10315] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1162'.
[  463.500652][T10314] bond1: (slave bridge1): making interface the new active one
[  463.854726][T10314] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  463.906447][T10315] 8021q: adding VLAN 0 to HW filter on device bond1
[  466.426351][ T7992] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  466.556346][T10370] fuse: fd is not a fuse device
[  467.643222][ T7992] usb 2-1: Using ep0 maxpacket: 8
[  467.661045][ T7992] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  468.489753][ T7992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  468.535992][ T7992] usb 2-1: Product: syz
[  468.803211][ T7992] usb 2-1: Manufacturer: syz
[  468.813180][ T7992] usb 2-1: SerialNumber: syz
[  468.826557][ T7992] usb 2-1: config 0 descriptor??
[  468.850322][ T7992] usb 2-1: can't set config #0, error -71
[  469.648792][T10400] loop1: detected capacity change from 0 to 32768
[  469.666934][ T7992] usb 2-1: USB disconnect, device number 8
[  469.692730][T10400] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  469.912995][T10400] XFS (loop1): Ending clean mount
[  469.934406][T10400] XFS (loop1): Quotacheck needed: Please wait.
[  471.302030][T10400] XFS (loop1): Quotacheck: Done.
[  472.096530][ T5852] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  472.217014][T10446] loop2: detected capacity change from 0 to 256
[  472.276692][T10447] fuse: fd is not a fuse device
[  472.354814][T10446] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  472.434630][T10446] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1194'.
[  472.454810][T10454] fuse: fd is not a fuse device
[  472.784721][T10461] loop1: detected capacity change from 0 to 2048
[  472.865506][T10461] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  473.853641][T10466] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  476.808989][T10486] fuse: fd is not a fuse device
[  478.556866][T10499] fuse: fd is not a fuse device
[  479.948294][T10527] loop2: detected capacity change from 0 to 2048
[  480.007866][T10527] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  480.312468][T10528] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  480.727595][T10532] fuse: fd is not a fuse device
[  482.420996][T10541] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  482.690500][T10541] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  482.807393][T10546] fuse: fd is not a fuse device
[  483.924112][T10559] kAFS: unable to lookup cell '('
[  485.724562][T10556] loop0: detected capacity change from 0 to 131072
[  485.856193][T10559] kAFS: unable to lookup cell '(,c¾ûL'
[  486.685171][T10556] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/loop0": -EINTR
[  487.074529][T10580] loop2: detected capacity change from 0 to 40427
[  487.108242][T10584] fuse: fd is not a fuse device
[  487.165937][T10580] F2FS-fs (loop2): invalid crc value
[  487.238823][T10580] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  487.250177][T10580] F2FS-fs (loop2): Start checkpoint disabled!
[  487.704926][T10580] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[  487.712724][T10580] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  487.955149][   T29] audit: type=1800 audit(1773834918.262:1212): pid=10580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1230" name="file1" dev="loop2" ino=10 res=0 errno=0
[  488.132433][T10594] syz.2.1230: attempt to access beyond end of device
[  488.132433][T10594] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  488.157873][T10594] syz.2.1230: attempt to access beyond end of device
[  488.157873][T10594] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  488.175539][T10594] syz.2.1230: attempt to access beyond end of device
[  488.175539][T10594] loop2: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  488.192477][T10594] syz.2.1230: attempt to access beyond end of device
[  488.192477][T10594] loop2: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[  488.209639][T10594] syz.2.1230: attempt to access beyond end of device
[  488.209639][T10594] loop2: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[  488.230035][T10594] syz.2.1230: attempt to access beyond end of device
[  488.230035][T10594] loop2: rw=2049, sector=45136, nr_sectors = 16 limit=40427
[  488.246912][T10594] syz.2.1230: attempt to access beyond end of device
[  488.246912][T10594] loop2: rw=2049, sector=45152, nr_sectors = 8 limit=40427
[  488.263875][T10594] syz.2.1230: attempt to access beyond end of device
[  488.263875][T10594] loop2: rw=2049, sector=45160, nr_sectors = 8 limit=40427
[  488.280304][T10594] syz.2.1230: attempt to access beyond end of device
[  488.280304][T10594] loop2: rw=2049, sector=45168, nr_sectors = 8 limit=40427
[  488.297176][T10594] syz.2.1230: attempt to access beyond end of device
[  488.297176][T10594] loop2: rw=2049, sector=45176, nr_sectors = 8 limit=40427
[  488.771761][   T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  488.771787][   T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  488.771796][   T49] Workqueue: writeback wb_workfn (flush-7:2)
[  488.771845][   T49] Call Trace:
[  488.771911][   T49]  <TASK>
[  488.771919][   T49]  dump_stack_lvl+0xe8/0x150
[  488.771976][   T49]  f2fs_handle_critical_error+0x37c/0x540
[  488.772061][   T49]  f2fs_write_end_io+0x1274/0x1740
[  488.772187][   T49]  __submit_merged_bio+0x256/0x700
[  488.772214][   T49]  __submit_merged_write_cond+0x3c9/0x4e0
[  488.772243][   T49]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  488.772313][   T49]  f2fs_write_data_pages+0x287e/0x34f0
[  488.772369][   T49]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  488.772428][   T49]  ? __lock_acquire+0x6b5/0x2cf0
[  488.772464][   T49]  ? __lock_acquire+0x6b5/0x2cf0
[  488.772503][   T49]  ? unwind_next_frame+0xa5/0x23c0
[  488.772544][   T49]  ? unwind_next_frame+0xa5/0x23c0
[  488.772560][   T49]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  488.772583][   T49]  do_writepages+0x32e/0x550
[  488.772618][   T49]  ? reacquire_held_locks+0x104/0x190
[  488.772634][   T49]  ? writeback_sb_inodes+0x477/0x1a20
[  488.772660][   T49]  __writeback_single_inode+0x133/0x11a0
[  488.772681][   T49]  ? do_raw_spin_unlock+0xf5/0x210
[  488.772705][   T49]  writeback_sb_inodes+0x992/0x1a20
[  488.772754][   T49]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  488.772772][   T49]  ? do_raw_spin_lock+0x12b/0x2f0
[  488.772827][   T49]  ? rcu_is_watching+0x15/0xb0
[  488.772851][   T49]  wb_writeback+0x456/0xb70
[  488.772873][   T49]  ? queue_io+0x211/0x4a0
[  488.772898][   T49]  ? __pfx_wb_writeback+0x10/0x10
[  488.772915][   T49]  ? do_raw_spin_lock+0x12b/0x2f0
[  488.772942][   T49]  wb_workfn+0x414/0xf50
[  488.772958][   T49]  ? look_up_lock_class+0x57/0x110
[  488.773011][   T49]  ? __pfx_wb_workfn+0x10/0x10
[  488.773029][   T49]  ? do_raw_spin_unlock+0xf5/0x210
[  488.773045][   T49]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  488.773095][   T49]  ? process_one_work+0x8bb/0x1780
[  488.773123][   T49]  process_one_work+0x9ab/0x1780
[  488.773161][   T49]  ? __pfx_process_one_work+0x10/0x10
[  488.773179][   T49]  ? do_raw_spin_lock+0x12b/0x2f0
[  488.773210][   T49]  worker_thread+0xba8/0x11e0
[  488.773248][   T49]  kthread+0x388/0x470
[  488.773264][   T49]  ? __pfx_worker_thread+0x10/0x10
[  488.773274][   T49]  ? __pfx_kthread+0x10/0x10
[  488.773290][   T49]  ret_from_fork+0x51e/0xb90
[  488.773309][   T49]  ? __pfx_ret_from_fork+0x10/0x10
[  488.773325][   T49]  ? __switch_to+0xc7d/0x1450
[  488.773356][   T49]  ? __pfx_kthread+0x10/0x10
[  488.773371][   T49]  ret_from_fork_asm+0x1a/0x30
[  488.773396][   T49]  </TASK>
[  489.645261][   T49] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  497.554231][ T7994] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  497.733354][ T7994] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  497.766404][ T7994] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  497.855511][ T7994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  498.062192][ T7994] usb 2-1: config 0 descriptor??
[  498.209953][ T7994] pwc: Askey VC010 type 2 USB webcam detected.
[  499.123286][ T7994] pwc: recv_control_msg error -32 req 02 val 2b00
[  499.630150][ T7994] pwc: recv_control_msg error -32 req 02 val 2700
[  499.641060][ T7994] pwc: recv_control_msg error -32 req 02 val 2c00
[  499.649466][ T7994] pwc: recv_control_msg error -32 req 04 val 1000
[  499.656773][ T7994] pwc: recv_control_msg error -32 req 04 val 1300
[  499.665539][ T7994] pwc: recv_control_msg error -32 req 04 val 1400
[  499.673616][ T7994] pwc: recv_control_msg error -32 req 02 val 2000
[  499.681171][ T7994] pwc: recv_control_msg error -32 req 02 val 2100
[  499.690389][ T7994] pwc: recv_control_msg error -32 req 04 val 1500
[  499.697980][ T7994] pwc: recv_control_msg error -32 req 02 val 2500
[  499.705828][ T7994] pwc: recv_control_msg error -32 req 02 val 2400
[  499.728823][ T7994] pwc: recv_control_msg error -32 req 02 val 2600
[  499.873354][T10706] loop0: detected capacity change from 0 to 32768
[  499.895781][T10706] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1263 (10706)
[  499.921252][T10706] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  499.931574][T10706] BTRFS info (device loop0): using crc32c checksum algorithm
[  499.939366][T10706] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  500.004007][ T7994] pwc: recv_control_msg error -71 req 02 val 2800
[  500.055385][ T7994] pwc: recv_control_msg error -71 req 04 val 1100
[  500.075453][ T7994] pwc: recv_control_msg error -71 req 04 val 1200
[  500.095754][ T7994] pwc: Registered as video103.
[  500.102144][T10706] BTRFS info (device loop0): rebuilding free space tree
[  500.130084][ T7994] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8
[  500.214215][T10706] BTRFS info (device loop0): disabling free space tree
[  500.222382][T10706] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  500.232351][T10706] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  500.243241][ T7994] usb 2-1: USB disconnect, device number 9
[  500.262322][T10706] BTRFS info (device loop0): enabling ssd optimizations
[  500.270202][T10706] BTRFS info (device loop0): turning on async discard
[  500.277048][T10706] BTRFS info (device loop0): enabling disk space caching
[  500.284131][T10706] BTRFS info (device loop0): force clearing of disk cache
[  500.291317][T10706] BTRFS info (device loop0): use zstd compression, level 3
[  501.293501][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  501.306112][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  501.349881][ T1315] lec:lec_start_xmit: lec0:No lecd attached
[  503.302977][ T5841] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  506.633151][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5280 ms
[  506.641188][    C1] lec:lec_tx_timeout: lec0
[  506.840652][T10785] IPVS: rr: FWM 3 0x00000003 - no destination available
[  507.401650][   T47] IPVS: starting estimator thread 0...
[  508.080999][ T7101] lec:lec_start_xmit: lec0:No lecd attached
[  508.383291][T10786] IPVS: using max 29 ests per chain, 69600 per kthread
[  508.805658][ T5925] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  508.870952][T10823] loop0: detected capacity change from 0 to 256
[  508.953484][ T5925] usb 3-1: Using ep0 maxpacket: 8
[  508.955589][ T5925] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  508.958108][ T5925] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f
[  508.958134][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  508.958151][ T5925] usb 3-1: Product: syz
[  508.958164][ T5925] usb 3-1: Manufacturer: syz
[  508.958178][ T5925] usb 3-1: SerialNumber: syz
[  508.961100][ T5925] usb 3-1: config 0 descriptor??
[  509.058204][T10812] syzkaller0: entered promiscuous mode
[  509.058229][T10812] syzkaller0: entered allmulticast mode
[  509.074325][T10823] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  510.090675][   T47] usb 3-1: USB disconnect, device number 5
[  510.675654][T10854] loop0: detected capacity change from 0 to 32768
[  510.690538][T10854] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1293 (10854)
[  510.712056][T10854] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  510.722242][T10854] BTRFS info (device loop0): using crc32c checksum algorithm
[  510.729633][T10854] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  510.882501][T10854] BTRFS info (device loop0): rebuilding free space tree
[  510.904227][T10854] BTRFS info (device loop0): disabling free space tree
[  510.911172][T10854] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  510.921082][T10854] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  510.954852][T10854] BTRFS info (device loop0): enabling ssd optimizations
[  510.961857][T10854] BTRFS info (device loop0): turning on async discard
[  510.968943][T10854] BTRFS info (device loop0): enabling disk space caching
[  510.976141][T10854] BTRFS info (device loop0): force clearing of disk cache
[  510.983421][T10854] BTRFS info (device loop0): use zstd compression, level 3
[  513.427267][ T5841] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  513.681308][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5590 ms
[  513.689387][    C1] lec:lec_tx_timeout: lec0
[  515.049880][T10894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1299'.
[  518.899629][T10937] loop1: detected capacity change from 0 to 40427
[  518.911988][T10937] F2FS-fs (loop1): invalid crc value
[  518.960670][T10937] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  518.971556][T10937] F2FS-fs (loop1): Start checkpoint disabled!
[  518.982525][T10937] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[  518.993181][T10937] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  519.017289][   T29] audit: type=1800 audit(2000000018.439:1213): pid=10937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1308" name="file1" dev="loop1" ino=10 res=0 errno=0
[  519.920363][T10955] bio_check_eod: 176 callbacks suppressed
[  519.920383][T10955] syz.1.1308: attempt to access beyond end of device
[  519.920383][T10955] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  519.942577][T10955] syz.1.1308: attempt to access beyond end of device
[  519.942577][T10955] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  519.956912][T10955] syz.1.1308: attempt to access beyond end of device
[  519.956912][T10955] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  519.971183][T10955] syz.1.1308: attempt to access beyond end of device
[  519.971183][T10955] loop1: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[  519.985507][T10955] syz.1.1308: attempt to access beyond end of device
[  519.985507][T10955] loop1: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[  520.000016][T10955] syz.1.1308: attempt to access beyond end of device
[  520.000016][T10955] loop1: rw=2049, sector=45136, nr_sectors = 16 limit=40427
[  520.025589][T10955] syz.1.1308: attempt to access beyond end of device
[  520.025589][T10955] loop1: rw=2049, sector=45152, nr_sectors = 8 limit=40427
[  520.040413][T10955] syz.1.1308: attempt to access beyond end of device
[  520.040413][T10955] loop1: rw=2049, sector=45160, nr_sectors = 8 limit=40427
[  520.099139][T10955] syz.1.1308: attempt to access beyond end of device
[  520.099139][T10955] loop1: rw=2049, sector=45168, nr_sectors = 8 limit=40427
[  520.113631][T10955] syz.1.1308: attempt to access beyond end of device
[  520.113631][T10955] loop1: rw=2049, sector=45176, nr_sectors = 8 limit=40427
[  520.431784][ T6422] CPU: 1 UID: 0 PID: 6422 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) 
[  520.431812][ T6422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  520.431822][ T6422] Workqueue: writeback wb_workfn (flush-7:1)
[  520.431850][ T6422] Call Trace:
[  520.431856][ T6422]  <TASK>
[  520.431866][ T6422]  dump_stack_lvl+0xe8/0x150
[  520.431893][ T6422]  f2fs_handle_critical_error+0x37c/0x540
[  520.431920][ T6422]  f2fs_write_end_io+0x1274/0x1740
[  520.431963][ T6422]  __submit_merged_bio+0x256/0x700
[  520.431989][ T6422]  __submit_merged_write_cond+0x3c9/0x4e0
[  520.432017][ T6422]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  520.432060][ T6422]  f2fs_write_data_pages+0x287e/0x34f0
[  520.432116][ T6422]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  520.432148][ T6422]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  520.432200][ T6422]  ? __lock_acquire+0x6b5/0x2cf0
[  520.432267][ T6422]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  520.432292][ T6422]  do_writepages+0x32e/0x550
[  520.432319][ T6422]  ? reacquire_held_locks+0x104/0x190
[  520.432335][ T6422]  ? writeback_sb_inodes+0x477/0x1a20
[  520.432361][ T6422]  __writeback_single_inode+0x133/0x11a0
[  520.432381][ T6422]  ? do_raw_spin_unlock+0xf5/0x210
[  520.432405][ T6422]  writeback_sb_inodes+0x992/0x1a20
[  520.432453][ T6422]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  520.432470][ T6422]  ? do_raw_spin_lock+0x12b/0x2f0
[  520.432527][ T6422]  ? rcu_is_watching+0x15/0xb0
[  520.432553][ T6422]  wb_writeback+0x456/0xb70
[  520.432575][ T6422]  ? queue_io+0x211/0x4a0
[  520.432602][ T6422]  ? __pfx_wb_writeback+0x10/0x10
[  520.432617][ T6422]  ? do_raw_spin_lock+0x12b/0x2f0
[  520.432657][ T6422]  wb_workfn+0x414/0xf50
[  520.432677][ T6422]  ? look_up_lock_class+0x57/0x110
[  520.432710][ T6422]  ? __pfx_wb_workfn+0x10/0x10
[  520.432731][ T6422]  ? do_raw_spin_lock+0x12b/0x2f0
[  520.432753][ T6422]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  520.432793][ T6422]  ? process_one_work+0x8bb/0x1780
[  520.432814][ T6422]  process_one_work+0x9ab/0x1780
[  520.432861][ T6422]  ? __pfx_process_one_work+0x10/0x10
[  520.432881][ T6422]  ? do_raw_spin_lock+0x12b/0x2f0
[  520.432916][ T6422]  worker_thread+0xba8/0x11e0
[  520.432941][ T6422]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  520.432960][ T6422]  ? __kthread_parkme+0x7a/0x1f0
[  520.432978][ T6422]  ? __kthread_parkme+0x19c/0x1f0
[  520.433000][ T6422]  kthread+0x388/0x470
[  520.433019][ T6422]  ? __pfx_worker_thread+0x10/0x10
[  520.433033][ T6422]  ? __pfx_kthread+0x10/0x10
[  520.433053][ T6422]  ret_from_fork+0x51e/0xb90
[  520.433078][ T6422]  ? __pfx_ret_from_fork+0x10/0x10
[  520.433097][ T6422]  ? __switch_to+0xc7d/0x1450
[  520.433118][ T6422]  ? __pfx_kthread+0x10/0x10
[  520.433135][ T6422]  ret_from_fork_asm+0x1a/0x30
[  520.433166][ T6422]  </TASK>
[  520.755235][ T6422] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  523.737584][T11010] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  523.781747][T11010] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  523.800213][T11015] overlayfs: failed to clone lowerpath
[  523.832971][T11012] syzkaller0: entered promiscuous mode
[  523.838618][T11012] syzkaller0: entered allmulticast mode
[  523.879472][T11021] overlayfs: failed to clone upperpath
[  527.845969][T11060] netlink: 'syz.1.1336': attribute type 10 has an invalid length.
[  527.907583][T11062] overlayfs: failed to clone lowerpath
[  528.433333][   T47] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  528.520600][T11060] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  530.039960][T11088] netlink: 'syz.3.1343': attribute type 10 has an invalid length.
[  530.088623][T11088] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  533.470695][T11128] loop0: detected capacity change from 0 to 512
[  533.482586][T11128] msdos: Unknown parameter '0xffffffffffffffffø·gÇÐe‡ÖúLýðÁT¬Z鶳Å<ÇO®…./cÅü>pÆ#N±@rlœÚYwJ{'
[  536.408300][T11164] SQUASHFS error: Failed to read block 0x0: -5
[  536.442597][T11164] unable to read squashfs_super_block
[  537.208881][T11161] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1363'.
[  539.133278][ T5925] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  539.463952][ T5925] usb 2-1: Using ep0 maxpacket: 16
[  539.486803][ T5925] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  539.520331][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  539.541266][ T5925] usb 2-1: Product: syz
[  539.551732][ T5925] usb 2-1: Manufacturer: syz
[  539.562238][ T5925] usb 2-1: SerialNumber: syz
[  539.606251][ T5925] usb 2-1: config 0 descriptor??
[  539.626587][ T5925] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  539.751258][ T5925] usb 2-1: Detected FT-X
[  540.719693][ T5925] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  540.852453][ T5925] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  541.365367][ T5925] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71
[  541.389900][ T5925] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  541.418242][ T5925] usb 2-1: USB disconnect, device number 10
[  541.613528][T11210] loop1: detected capacity change from 0 to 32768
[  541.675734][T11210] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  541.729978][T11210] XFS (loop1): Ending clean mount
[  541.742806][T11210] XFS (loop1): Quotacheck needed: Please wait.
[  541.770045][ T5925] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  541.790001][ T5925] ftdi_sio 2-1:0.0: device disconnected
[  542.231069][T11210] XFS (loop1): Quotacheck: Done.
[  542.955536][ T5852] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  544.908510][T11246] fuse: fd is not a fuse device
[  545.349725][T11259] loop1: detected capacity change from 0 to 256
[  547.922086][T11283] loop2: detected capacity change from 0 to 8192
[  548.684466][T11304] loop0: detected capacity change from 0 to 512
[  548.706723][T11304] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  548.714321][T11299] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000009: 0000 [#1] SMP KASAN PTI
[  548.728515][T11299] KASAN: null-ptr-deref in range [0x0000000000000048-0x000000000000004f]
[  548.736929][T11299] CPU: 1 UID: 0 PID: 11299 Comm: syz.3.1403 Not tainted syzkaller #0 PREEMPT(full) 
[  548.746286][T11299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  548.756328][T11299] RIP: 0010:fuse_opt_fd+0x49/0x220
[  548.761481][T11299] Code: 4c 8d bb 98 00 00 00 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 c5 ee e4 fe 4d 8b 3f 4d 8d 66 48 4c 89 e0 48 c1 e8 03 <80> 3c 28 00 74 08 4c 89 e7 e8 a9 ee e4 fe 49 81 3c 24 80 28 09 8c
[  548.781075][T11299] RSP: 0018:ffffc9001c8ffa68 EFLAGS: 00010206
[  548.787202][T11299] RAX: 0000000000000009 RBX: ffff88805a68a400 RCX: 0000000000080000
[  548.795160][T11299] RDX: ffffc90006841000 RSI: 00000000000006b2 RDI: 00000000000006b3
[  548.803112][T11299] RBP: dffffc0000000000 R08: ffffffff824b142a R09: ffffffff8e75d6a0
[  548.811071][T11299] R10: 0000000000000009 R11: 0000000000000002 R12: 0000000000000048
[  548.819031][T11299] R13: 0000000000000002 R14: 0000000000000000 R15: ffff88802a7ab800
[  548.826995][T11299] FS:  00007f62a33e66c0(0000) GS:ffff888125535000(0000) knlGS:0000000000000000
[  548.835913][T11299] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  548.842485][T11299] CR2: 0000200000003000 CR3: 0000000049062000 CR4: 00000000003526f0
[  548.850448][T11299] Call Trace:
[  548.853714][T11299]  <TASK>
[  548.856636][T11299]  fuse_parse_param+0x69b/0xa80
[  548.861482][T11299]  ? __pfx_fuse_parse_param+0x10/0x10
[  548.866840][T11299]  ? static_key_count+0x41/0x70
[  548.871677][T11299]  vfs_parse_fs_param+0x1a9/0x420
[  548.876718][T11299]  vfs_parse_monolithic_sep+0x283/0x360
[  548.882334][T11299]  ? __pfx_vfs_parse_comma_sep+0x10/0x10
[  548.887948][T11299]  ? __pfx_vfs_parse_monolithic_sep+0x10/0x10
[  548.894002][T11299]  ? alloc_fs_context+0x9e9/0xd50
[  548.899010][T11299]  do_new_mount+0x304/0xd30
[  548.903501][T11299]  ? apparmor_capable+0x126/0x170
[  548.908584][T11299]  ? security_capable+0x7e/0x2c0
[  548.913573][T11299]  ? __pfx_do_new_mount+0x10/0x10
[  548.918581][T11299]  ? ns_capable+0x89/0xe0
[  548.922890][T11299]  ? path_mount+0x690/0x10e0
[  548.927466][T11299]  ? user_path_at+0xd4/0x160
[  548.932041][T11299]  __se_sys_mount+0x31d/0x420
[  548.936705][T11299]  ? __pfx___se_sys_mount+0x10/0x10
[  548.941923][T11299]  ? __x64_sys_mount+0x20/0xc0
[  548.946691][T11299]  do_syscall_64+0x14d/0xf80
[  548.951277][T11299]  ? trace_irq_disable+0x3b/0x150
[  548.956336][T11299]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  548.962395][T11299]  ? clear_bhb_loop+0x40/0x90
[  548.967062][T11299]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  548.972943][T11299] RIP: 0033:0x7f62a259c799
[  548.977365][T11299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  548.996958][T11299] RSP: 002b:00007f62a33e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  549.005358][T11299] RAX: ffffffffffffffda RBX: 00007f62a2815fa0 RCX: 00007f62a259c799
[  549.013399][T11299] RDX: 0000200000002100 RSI: 00002000000020c0 RDI: 0000000000000000
[  549.021353][T11299] RBP: 00007f62a2632c99 R08: 0000200000002140 R09: 0000000000000000
[  549.029305][T11299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  549.037264][T11299] R13: 00007f62a2816038 R14: 00007f62a2815fa0 R15: 00007ffefdfd0a38
[  549.045223][T11299]  </TASK>
[  549.048233][T11299] Modules linked in:
[  549.052659][T11299] ---[ end trace 0000000000000000 ]---
[  549.058171][T11299] RIP: 0010:fuse_opt_fd+0x49/0x220
[  549.063325][T11299] Code: 4c 8d bb 98 00 00 00 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 c5 ee e4 fe 4d 8b 3f 4d 8d 66 48 4c 89 e0 48 c1 e8 03 <80> 3c 28 00 74 08 4c 89 e7 e8 a9 ee e4 fe 49 81 3c 24 80 28 09 8c
[  549.082954][T11299] RSP: 0018:ffffc9001c8ffa68 EFLAGS: 00010206
[  549.089054][T11299] RAX: 0000000000000009 RBX: ffff88805a68a400 RCX: 0000000000080000
[  549.097079][T11299] RDX: ffffc90006841000 RSI: 00000000000006b2 RDI: 00000000000006b3
[  549.105333][T11299] RBP: dffffc0000000000 R08: ffffffff824b142a R09: ffffffff8e75d6a0
[  549.113525][T11299] R10: 0000000000000009 R11: 0000000000000002 R12: 0000000000000048
[  549.121511][T11299] R13: 0000000000000002 R14: 0000000000000000 R15: ffff88802a7ab800
[  549.129498][T11299] FS:  00007f62a33e66c0(0000) GS:ffff888125535000(0000) knlGS:0000000000000000
[  549.138894][T11299] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  549.145496][T11299] CR2: 0000200000003000 CR3: 0000000049062000 CR4: 00000000003526f0
[  549.153584][T11299] Kernel panic - not syncing: Fatal exception
[  549.159896][T11299] Kernel Offset: disabled
[  549.164197][T11299] Rebooting in 86400 seconds..